last executing test programs: 5m37.577320903s ago: executing program 0 (id=647): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbff, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010102}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbff, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010102}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) 5m37.342278049s ago: executing program 0 (id=650): sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x8051) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000006900030500000000000000000081"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r7 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000140)=@ethtool_ringparam={0x1f, 0x0, 0x2, 0x37d7, 0x9, 0x6, 0x7, 0x1, 0x10}}) 5m36.325898423s ago: executing program 0 (id=664): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000040)=""/4077, &(0x7f0000001040)=0xfed) 5m36.153088545s ago: executing program 0 (id=667): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000240)}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000580)=""/224, 0xe0}], 0x6, &(0x7f00000006c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x3d, 0xff, 0xf}, 0x2c) 5m35.773492739s ago: executing program 0 (id=670): r0 = socket(0xa, 0x1, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000640)={0x1, 0x9, 0x53, &(0x7f00000005c0)=""/83}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x509, 0x0, 0x0, "", [@generic="113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9b902a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e9", @generic="1847a803d02973685ab61f218a66b934b7160571e984e5f5d6ad7eff4305326d0affb35c79b457adbe3f0bf08fc949402f059090cf6bf0007718a6968a12e721a9f1fa73"]}, 0xe0}], 0x1}, 0x0) getsockopt$packet_int(r3, 0x107, 0xf, 0x0, &(0x7f00000000c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', r7, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @private=0x10000}}}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r9, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r12, 0x40049409, r12) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x80, r11, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r12}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast2}}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000844) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f00000003c0)={'veth0_to_hsr\x00'}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r13) sendmsg$NLBL_MGMT_C_ADD(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r14, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) close(0x4) 5m35.32797607s ago: executing program 0 (id=677): syz_init_net_socket$ax25(0x3, 0x2, 0xca) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) connect$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc0000001000ffff27bd7000fbdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="137c0300231a05002c0012800e00010069703667726574617000000018000280140007000000000000000000fffffffffffffffe"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44840) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5m20.270968458s ago: executing program 32 (id=677): syz_init_net_socket$ax25(0x3, 0x2, 0xca) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) connect$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc0000001000ffff27bd7000fbdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="137c0300231a05002c0012800e00010069703667726574617000000018000280140007000000000000000000fffffffffffffffe"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44840) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m31.43250583s ago: executing program 4 (id=2918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@private2}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x2c, 0x17, {0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa, 0x0, 0x0, 0x0]}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x164}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 2m31.179751827s ago: executing program 4 (id=2920): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x1c, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r2, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x4008}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2m30.789861754s ago: executing program 4 (id=2926): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000513f00000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) socket(0x840000000002, 0x3, 0xff) close(0x3) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x29, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x0, 0x416d8b11800bc6c0, 0x4, 0xa, 0x80, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x46ba}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x47, &(0x7f0000000380)=""/71, 0x40f00, 0x20, '\x00', r4, @sk_msg=0x7, r5, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x2, &(0x7f0000000480)=[r0, r0, r0, r0], &(0x7f00000004c0)=[{0x1, 0x5, 0x5, 0x2}, {0x0, 0x5, 0x6, 0x8}], 0x10, 0x40000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x29, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x0, 0x416d8b11800bc6c0, 0x4, 0xa, 0x80, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x46ba}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x47, &(0x7f0000000380)=""/71, 0x40f00, 0x20, '\x00', r4, @sk_msg=0x7, r5, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x2, &(0x7f0000000480)=[r0, r0, r0, r0], &(0x7f00000004c0)=[{0x1, 0x5, 0x5, 0x2}, {0x0, 0x5, 0x6, 0x8}], 0x10, 0x40000000}, 0x94) 2m29.999553593s ago: executing program 4 (id=2932): r0 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4, 0x3f}]}]}}]}, 0x9c}, 0x1, 0x7a00}, 0x4000000) 2m29.791827127s ago: executing program 4 (id=2934): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}}, 0xea5bc50b6199d7fe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write(0xffffffffffffffff, &(0x7f0000000040)="240000005800410f9c00f4f9", 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) 2m29.512951413s ago: executing program 4 (id=2936): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x7, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000007c80)={'tunl0\x00', 0x0, 0x7, 0x80, 0x4, 0x7f1ab379, {{0x2e, 0x4, 0x3, 0x4, 0xb8, 0x65, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, {[@timestamp_addr={0x44, 0x4, 0x1f, 0x1, 0x5}, @timestamp_addr={0x44, 0x4c, 0xf9, 0x1, 0xe, [{@broadcast, 0x9}, {@local, 0x6}, {@broadcast, 0x8000}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x50}, {@loopback, 0xb8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa1a8}, {@broadcast, 0x10000}, {@broadcast, 0x3}]}, @noop, @noop, @lsrr={0x83, 0x13, 0x30, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x24}, @multicast2, @broadcast]}, @cipso={0x86, 0x1a, 0x3, [{0x2, 0x3, "13"}, {0x1, 0xa, "69e505177df57842"}, {0x6, 0x5, "be2103"}, {0x2, 0x2}]}, @cipso={0x86, 0x24, 0x1, [{0x5, 0xd, "51f2a4c91f44508be44a23"}, {0x7, 0x11, "ec3da34eeb454dc7d091d901000000"}]}]}}}}}) clock_gettime(0x0, &(0x7f0000007c00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f00000016c0)=""/146, 0x92}], 0x4, &(0x7f00000017c0)=""/18, 0x12}, 0x1}, {{&(0x7f0000001800)=@l2, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001880)=""/43, 0x2b}, {&(0x7f00000018c0)=""/203, 0xcb}], 0x2, &(0x7f0000001a00)=""/102, 0x66}, 0x70}, {{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b00)=""/83, 0x53}, {&(0x7f0000001b80)=""/86, 0x56}, {&(0x7f0000001c00)=""/187, 0xbb}, {&(0x7f0000001cc0)=""/29, 0x1d}, {&(0x7f0000001d00)=""/154, 0x9a}], 0x5, &(0x7f0000001e40)=""/136, 0x88}, 0x6}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001f00)=""/93, 0x5d}, {&(0x7f0000001f80)=""/133, 0x85}, {&(0x7f0000002040)}, {&(0x7f0000002080)=""/149, 0x95}, {&(0x7f0000002140)=""/55, 0x37}, {&(0x7f0000002180)=""/239, 0xef}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x7, &(0x7f0000003300)=""/37, 0x25}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/19, 0x13}, {&(0x7f0000004380)=""/166, 0xa6}, {&(0x7f0000004440)=""/229, 0xe5}, {&(0x7f0000004540)=""/121, 0x79}, {&(0x7f00000045c0)=""/2, 0x2}], 0x6, &(0x7f0000004680)=""/202, 0xca}, 0xe8f5}, {{&(0x7f0000004780)=@rc, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004800)=""/36, 0x24}, {&(0x7f0000004840)=""/83, 0x53}], 0x2, &(0x7f0000004900)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000005900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000059c0)=[{&(0x7f0000005980)=""/48, 0x30}], 0x1}, 0xfffffff8}, {{&(0x7f0000005a00)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005a80)=""/178, 0xb2}, {&(0x7f0000005b40)=""/130, 0x82}, {&(0x7f0000005c00)=""/34, 0x22}, {&(0x7f0000005c40)=""/186, 0xba}, {&(0x7f0000005d00)=""/213, 0xd5}, {&(0x7f0000005e00)=""/9, 0x9}, {&(0x7f0000005e40)=""/61, 0x3d}, {&(0x7f0000005e80)=""/210, 0xd2}, {&(0x7f0000005f80)=""/150, 0x96}, {&(0x7f0000006040)=""/148, 0x94}], 0xa, &(0x7f00000061c0)=""/165, 0xa5}, 0x9}, {{&(0x7f0000006280)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000007700)=[{&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/206, 0xce}, {&(0x7f0000007400)=""/101, 0x65}, {&(0x7f0000007480)=""/99, 0x63}, {&(0x7f0000007500)=""/195, 0xc3}, {&(0x7f0000007600)=""/161, 0xa1}, {&(0x7f00000076c0)}], 0x7, &(0x7f0000007780)=""/215, 0xd7}, 0x3}, {{0x0, 0x0, &(0x7f0000007880), 0x0, &(0x7f00000078c0)=""/146, 0x92}, 0x80000001}], 0xa, 0x100, &(0x7f0000007c40)={r4, r5+10000000}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x1e4, 0x24, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffff}, {0xfff2, 0xffff}, {0x0, 0x3}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x97b1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x17}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf001}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x1) getsockopt(r2, 0x200000000114, 0x2719, 0x0, &(0x7f0000000080)=0x39) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r8, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007d80)={{{@in=@multicast2, @in6=@private1, 0x4e21, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x0, 0x2, r3}, {0x3, 0x7, 0x84, 0x80000000, 0x80000001, 0x4e, 0xdfd5, 0x1800000000000000}, {0x8000000000000000, 0xffffffff, 0x1e6, 0x24e3}, 0x1ca92424, 0x6e6bb8, 0x0, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d2, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3506, 0x2, 0x1, 0x96, 0xcd7c, 0x9, 0x100}}, 0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m14.349976851s ago: executing program 33 (id=2936): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x7, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000007c80)={'tunl0\x00', 0x0, 0x7, 0x80, 0x4, 0x7f1ab379, {{0x2e, 0x4, 0x3, 0x4, 0xb8, 0x65, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, {[@timestamp_addr={0x44, 0x4, 0x1f, 0x1, 0x5}, @timestamp_addr={0x44, 0x4c, 0xf9, 0x1, 0xe, [{@broadcast, 0x9}, {@local, 0x6}, {@broadcast, 0x8000}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x50}, {@loopback, 0xb8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa1a8}, {@broadcast, 0x10000}, {@broadcast, 0x3}]}, @noop, @noop, @lsrr={0x83, 0x13, 0x30, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x24}, @multicast2, @broadcast]}, @cipso={0x86, 0x1a, 0x3, [{0x2, 0x3, "13"}, {0x1, 0xa, "69e505177df57842"}, {0x6, 0x5, "be2103"}, {0x2, 0x2}]}, @cipso={0x86, 0x24, 0x1, [{0x5, 0xd, "51f2a4c91f44508be44a23"}, {0x7, 0x11, "ec3da34eeb454dc7d091d901000000"}]}]}}}}}) clock_gettime(0x0, &(0x7f0000007c00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f00000016c0)=""/146, 0x92}], 0x4, &(0x7f00000017c0)=""/18, 0x12}, 0x1}, {{&(0x7f0000001800)=@l2, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001880)=""/43, 0x2b}, {&(0x7f00000018c0)=""/203, 0xcb}], 0x2, &(0x7f0000001a00)=""/102, 0x66}, 0x70}, {{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b00)=""/83, 0x53}, {&(0x7f0000001b80)=""/86, 0x56}, {&(0x7f0000001c00)=""/187, 0xbb}, {&(0x7f0000001cc0)=""/29, 0x1d}, {&(0x7f0000001d00)=""/154, 0x9a}], 0x5, &(0x7f0000001e40)=""/136, 0x88}, 0x6}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001f00)=""/93, 0x5d}, {&(0x7f0000001f80)=""/133, 0x85}, {&(0x7f0000002040)}, {&(0x7f0000002080)=""/149, 0x95}, {&(0x7f0000002140)=""/55, 0x37}, {&(0x7f0000002180)=""/239, 0xef}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x7, &(0x7f0000003300)=""/37, 0x25}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/19, 0x13}, {&(0x7f0000004380)=""/166, 0xa6}, {&(0x7f0000004440)=""/229, 0xe5}, {&(0x7f0000004540)=""/121, 0x79}, {&(0x7f00000045c0)=""/2, 0x2}], 0x6, &(0x7f0000004680)=""/202, 0xca}, 0xe8f5}, {{&(0x7f0000004780)=@rc, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004800)=""/36, 0x24}, {&(0x7f0000004840)=""/83, 0x53}], 0x2, &(0x7f0000004900)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000005900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000059c0)=[{&(0x7f0000005980)=""/48, 0x30}], 0x1}, 0xfffffff8}, {{&(0x7f0000005a00)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005a80)=""/178, 0xb2}, {&(0x7f0000005b40)=""/130, 0x82}, {&(0x7f0000005c00)=""/34, 0x22}, {&(0x7f0000005c40)=""/186, 0xba}, {&(0x7f0000005d00)=""/213, 0xd5}, {&(0x7f0000005e00)=""/9, 0x9}, {&(0x7f0000005e40)=""/61, 0x3d}, {&(0x7f0000005e80)=""/210, 0xd2}, {&(0x7f0000005f80)=""/150, 0x96}, {&(0x7f0000006040)=""/148, 0x94}], 0xa, &(0x7f00000061c0)=""/165, 0xa5}, 0x9}, {{&(0x7f0000006280)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000007700)=[{&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/206, 0xce}, {&(0x7f0000007400)=""/101, 0x65}, {&(0x7f0000007480)=""/99, 0x63}, {&(0x7f0000007500)=""/195, 0xc3}, {&(0x7f0000007600)=""/161, 0xa1}, {&(0x7f00000076c0)}], 0x7, &(0x7f0000007780)=""/215, 0xd7}, 0x3}, {{0x0, 0x0, &(0x7f0000007880), 0x0, &(0x7f00000078c0)=""/146, 0x92}, 0x80000001}], 0xa, 0x100, &(0x7f0000007c40)={r4, r5+10000000}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x1e4, 0x24, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffff}, {0xfff2, 0xffff}, {0x0, 0x3}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x97b1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x17}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf001}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x1) getsockopt(r2, 0x200000000114, 0x2719, 0x0, &(0x7f0000000080)=0x39) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r8, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007d80)={{{@in=@multicast2, @in6=@private1, 0x4e21, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x0, 0x2, r3}, {0x3, 0x7, 0x84, 0x80000000, 0x80000001, 0x4e, 0xdfd5, 0x1800000000000000}, {0x8000000000000000, 0xffffffff, 0x1e6, 0x24e3}, 0x1ca92424, 0x6e6bb8, 0x0, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d2, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3506, 0x2, 0x1, 0x96, 0xcd7c, 0x9, 0x100}}, 0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m14.267443545s ago: executing program 1 (id=3036): ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000380)={0x4, 0x7f}) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x82}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, 0x0, 0x8000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, 0x0, 0x20000030) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f00)={0x58, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb5a5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x45001}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1e}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r9, 0x0, 0x0, 0x40002062, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0) 2m13.948963232s ago: executing program 1 (id=3037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b4050000000000007110ae0000000000060000000000000095000000000000001f3d4eb3edc86c04e323b24d9426e5339e162b4915ca4c92ec3a4a3935b6d581c304908f84d3f0e99ac4402141407b980e454bd575dd0dc0f1a682f6ba574e0700000000000000515ec25d0b1f1c8c9cd8eb72385ad6136789dcd5a694d3cfb4cec510d0d4d980e649aa4492032c5888f5f9b246b9f5117cb89f3ff246280a1ab186bbd42370e30e9a2028d82bd071a329b281c4393e1e8ce723f67552961cd23f056542399289825a0d3e13b1401cda214d8f87ba4e8a5fff7be68fe15f3c1df84f2086f79ab69bbb072848357dc3bbc144cca554fdf459a2b6dd58c29bafe29a5b1d630a94c14753a1b0d26203185b5735d393c9a6367767ff9f9edf5e6e7e94aefd0d49ad707a4a7027185086a66c0a321f386bc40caed35d63967e3809ad3187a72972c5c22c085f0a481e7ce9458e8c21647d100c9fc91eb8fe87d05e6545dcbe6cd28444fcdaac12f6469abc71af781f79c7aeafcdcadda97413e2539860ae46370405f742edd486fc26697c52d18f7adeaf79101b3da624ef12673df25d15d6f3f0be93636d8ea88eaafe20257812496258c87d3e97c35fbf3967e1ae86639489758fa8759006669c0d7ed1710d80bf8424e190cb78e36dd7e2e01034991761ff243405d75021155bf4e831208f0a845897ac198e36dc9e0928727ea3a6dc3f2f64aa4007cf52c41ffff9c7a51dc635d7d34f509725530e2f1d1f5ba90c325591f90c354764997bd47abcab66966d683c392ea96668506002589df1c948237f1533f3157fec94ebf2ce6347f6516a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) socket$kcm(0xa, 0x3, 0x3a) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) 2m13.524910426s ago: executing program 1 (id=3045): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040)=0x5, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) (rerun: 64) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='signal_deliver\x00', r3}, 0x18) (async, rerun: 64) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r5, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000240)={0x1, 'ip6erspan0\x00', {}, 0x1b}) 2m10.321456264s ago: executing program 1 (id=3048): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000f1401002cbd70000800030004000000080045007372700008000100"], 0x28}, 0x1, 0x0, 0x0, 0x200400d1}, 0x40014) 2m10.167401666s ago: executing program 1 (id=3051): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001c001280090001006970697027d6fc6015b652eea28f3b"], 0x3c}}, 0x20000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xd0, "83a0582879c898a8592069bd9ea193f29928244f3562c0a69e3b175f0f43dfbd9dbfed575aa1dbee08f9ab96bea324c3b74f865b7c4755fc8cb359e8cc033cba8b9eb373cad80a36955259e78d6c4af776689ee94c37514d837bdbba3cedb9414b49b2af3b069f7a3b6ccb71bb59ea39a061de78a4395ac8d399b4b4366142c4aa02392ec0ed29ad87e4bced4054a3ae5d609e6f585713bc4161a671b3dba07ad2adb4204007a2aa13be140bd2962b113a248ddebc0f93b59b895f952508d206bb225fb803330bb8893efe7769490275"}, &(0x7f00000001c0)=0xd8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e22, @broadcast}}, [0x4, 0x8000000000000000, 0xff, 0x9, 0x5, 0x6, 0x5, 0xffffffff00000000, 0x9, 0x1f417b92, 0x8001, 0x8, 0x0, 0x100000000000000, 0x1]}, &(0x7f0000000240)=0x100) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m9.403269637s ago: executing program 1 (id=3060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x4) 1m54.327009341s ago: executing program 34 (id=3060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3", 0x17f}], 0x3}, 0x4) 45.729207056s ago: executing program 3 (id=3659): recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001300), 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001380)=""/225, 0xe1}, {&(0x7f0000001480)=""/44, 0x2c}, {&(0x7f0000001500)=""/152, 0x98}], 0x3, &(0x7f0000001600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x40010100) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001080), 0x8) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000140007000000e4ff000000002b"], 0x14}}, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x2000010000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x805, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000340)="e7ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001200), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x30, r10, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x2da3]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x9, 0x0, 0x6, 0x40]}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x44000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001400010000000000ffffffffac14140000010000000000000000000000004e220000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\b\x00\b\x00\x00\x00\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000080)={0x5, 0x2ba7, 0x3, 0x3, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x6, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x8000004}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0x94) 45.39299846s ago: executing program 3 (id=3664): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) 45.122027186s ago: executing program 3 (id=3668): r0 = socket(0xf, 0x5, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 44.806024863s ago: executing program 3 (id=3670): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r1, &(0x7f0000000500)=0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) 44.497163231s ago: executing program 3 (id=3673): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000d40)="b2", 0x1}], 0x1}}], 0x1, 0x4004844) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@mcast2}, 0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001310000008004a00"], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r0, r2, 0x4, r4}, 0x10) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x7c) 44.056358067s ago: executing program 3 (id=3677): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xfce) socket$kcm(0x29, 0x7, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}, 0xcc}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(r3, &(0x7f0000001680)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f0000001700)=@upd={0xe0, 0x12, 0x400, 0x70bd28, 0x25dfdbbd, {{'crc32c\x00'}, '\x00', '\x00', 0x2000, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x101, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r4], 0x158}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x80, 0x6, 0x5}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f75746500"], 0x1ac}}, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="d8e36616bcbcc36388773cd00951517ce4fbed90056e69eac67b94b01b5ffcb3e737d1a5c1a6cf6eed6e6da066dd4adbdcc9cc39f233edaf", 0x38}, {&(0x7f0000000100)="aff730170fa0f87d114fd27480bcb8b937d6a82563f152768896ae521099418944b78559a4d364369dde5d1d67c8c3f70507fc4ab6c84c70c05046214d4e7d511d139a8564d195e343218f1d4d849e3ed346821fa89daf899bcc08dccb189db43f3175d9c055d8dbb1be5d0c617dc7", 0x6f}, {&(0x7f0000000180)="7b916b419d445e8cb3da1c665de1060067e7de22ed7a9131b80fe7801625d3264e1ec23598ce6fb8cac3449fe50bc42007591678ef7b4aa10db71040bb5e78d4c5e0743df18cc2bd854c98c2afc485604486e1f31249398668a9e47b237aec601bdec9bb0e2d", 0x66}, {&(0x7f0000000200)="c34e8e27a320bc3337e1c7c8cd23c173cfd08245666e777176e9c00f31c94e3d9efd07ab8fd8f034ae9993933f5680b5944f3b20c73dd4bb104c7ed933ed97c18120d306b561afed0f48f9ea1c5854add2dd480efddd496bae6a8a8a992f1db54bfc8ed20ca61f9012518ffc4ac467cd06bbf92cd486e0c30f43adff0b6cafa26c58c5c6a42dd7a76e3f98e18d12b0d8a25b4294e0b4e96d64ba85c73c17ffaf114dc1d2949ea1b92dad99210e44b14e0ed6bd363a94512d92d5bda87580eb4418a6246a41bd1f8ea47926edd609ec909bdcf2bc", 0xd4}, {&(0x7f0000000300)="1fb19049e1728b1972c2a55be63e829642665c6e91983f6ec8f3c47e8e9491ff71b22a4fac0042d0a3ec3d8128b6ce5d0c240b74329c66580340093acb7b4505a71872455b48897f58b77b639edec227c280715d8596e35528438f82cf539f54c1e3749c", 0x64}], 0x5}, 0x4000000) 28.907469117s ago: executing program 35 (id=3677): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000167000000000000008902907800000000fc00000000000000000000000000000000000000000000000000ffffe000000101eda3da6f0a80f08715f2cee9a42f4cd4531247b8b602dbcf4c13af8328b2302863ca284e5b8de543e63c0eb41024542baf8655be6b99a8006bbf0a6a3e8bd27ab57d17f9b33615dd5cc1ff603c3eb2033f453ca161a2d02343b6489bb69791484b16fbf1f35fbf6b7b4e2a9f5669c7db949c0e3ce982d30e04762e48783c71c0aa21fa9e1bc905da13603f6426a45759a3e1ed846b733fb01b5c936b66b79c0290fbc33ca4284ed63f1c7d330134afb181da5fc93bc08dea8edca0b0f1578fb1accfc2f832bed0492537cd143bd5b5dc356e636595a8a1b7d56e7655e6cca62fb4a0a6a89de0295e0635e3dfd485cfa78eebf99dfe771a98e2bd2b6f4f3a9c013053e59ee89f70014e66e071fa8de892f1720544121dc2cc350eb745eb250892486a3d19cb2039a04b3e40bd17327c4cb828b414b9b1a3e3ea2b8e76fed3786968de20eb69a57916fbd03d7f0cb02cc5afc9cd84326d8b83a5dad0b7a74d871d1b4b578be5a03c7010b77d55fae17073ca387e9cd66babcb5743aaa1f982c52fed1d832e0185ccf3ed9c147cdea8765b3d24b4033328b700fc8e265f850ebeddd9d58d34accb8fc803a659a54fbdef8fc3bf24d84787d3020c0ffc5bb901686beb2284037eb0b9f3adfa4e7cdc233dce85dde1110039836c6a313781ff546a5c884c22342a4ecc0fea9e9882e0182a0807e063afa0261dbe1e1960f73dc3928aca6b98df5f30d3242dcd9c0e901a6f2bb20864bbf1e8daeec9881dd46dfca6787e4fe4b99497e36bce30d7e1af75f4b2709d81798d2652d32e647646ecff250427cf4caaf22abce45a7c70a264b08e3ea0c760fff98e58cd38265a113e0fdb19698a38d70522f4a17674c375e7f322da2f63040e8dc1708984c03ba6072a09d33df287da29bcaf910766f7bbc64eae75b542dbeec7a98537b3f8075208b1232cd8541e6839480513c1fcee639d3811fd221676efd77ceed37f4b42103de1053aa5beb1173706f34f5136af53c480dcfc07f95f6e8552bfbd69db42c6b84de4e8ef7f7bfcdb051396cda9965e2556ad0d3e75d18ea86afee76c7e09fe397d1abb04ca1c08d7effd5cda9c4c612cec7413652934d39fed1b6101cd7d8d651fcb1bfb74009679c1320025969d59aa22d8dbe7e2b47a61364eb8da4486beae56a5a85217461e5ab784590811444acbbca7b3ef206d4a220dc29ea285ebbfdd00b2bf928566499f6990a7331998549e26a2cc8b6fcf4bf5c7ee2aaf2eb9af9aef856a456c7dcf2ec761bbc7c57e52d98477c2fbf207408bcda099bc96ddf58e3eb81753d62d459341bf8108f17813033477d3f5a6d950d6c5ccabed91b396b025552d487aa15c9013edff8bfca03cf2ad54d072245b8882e3d14a92fcd8a8d58aafca198a2760f35145ac597d58216f2fa9210ca483af2492050f25f4081b6ce33487e3cbaa7d5a3732028ec52359bb290ddd7b28a2638fabf2096cd6f7056294586036e92db38358e1c85b504a5ab1a2ed51f9dc8601cffd2e9d315c189dad147e60280916dfc82e45385672c767d6d95fac89b6c6e6457775a3736808810d5e46721f87ffcd7bf531ef6c3e937bd94c2c64c7f74057327957593050ed0551449f201c702963e2d833bc5a870f69258ea1f608c6e60af5819a8f203e0b6a52ff889e92489df96a47b2fa162c3941a61d7d58deb4d527d3ec0ef7a76302b723de4ee15e2e7ddf73ca67421fb1079a89d3ff85904c882f1d009c71c0c6a3a866fc8192c2fafe84453174d9b18ab79ff684ff650cf579ef0a7989f8a460d060d2935c82762b0dbcf82aa5c60c1457a6537de1569d5abb82fa490bb14ed0d6603ac163b29c2d3fda6a82fa43401b2abc863f915f599557b20542164aa39d1603a8958addd075d86106e293fc46c8bb3ef45b22bcd6fa98be49c716b1b6607101e4f1946377a5bf9ed642d4503fbfc9356e8271ab9b545a9ebb965732bdeaccf99ba56727d9c88eba1965797defcdaa982729208602d0ea8b9930900e01e146bdbfcb37f40d4ee541c27adaa3a06489d726f9b277beff93bf072de6548001ec164258dc10de45fd7591639342103fb8a0ddc5abd9502d7972a762f51770d961a1890e3d44f20d1cb6f67fbb64363f187c2ddebe7d84ca3a8a51e5cb31708e8046deae9b523b3a3a0d31c9fa92ea1d74d3954a665128507ce382c4d59358c0aa08cba9aa2ad03fb74b95e74896aeef0cc80d8f91d6d6f7b5c2bd3ccd8d3f19c4ff473509abea81f64a044bef70c8fcbe863251b797815324fdf30bf2b9f04fe3272228e306888177f2f67bcaa477d9ba2d2af2cf0f8c1a094e49c84c412737c52cc9c6e2a795c908def79c5eb28307447d9b89f6610460c95db74802abd9086b57aca68a489019afb3b9df68e781c9481d961f77c0abd4352ab8371d4d0ba9e596366d6bd2febdcd0eb5381c5292137dc6626fbca4071f9d2fefe8bcc393fe4409e47de6c84a7a915b4bdb1f509e7f4287302b05460bd8181237900fdba242aa6b7bb57c50c622c4a5d204dfe15ea9d026645b07790611610ef940c1a1f5ecd498b2e32cc47fa630efaee906f5445f5b33dbcb2e3b77586ed44b3259095c519873c48e2254d0d57cfaf432157f17f7b9bb83479a16a0647100c38e4494d1995d91198ed42ec28f101c2799d2ffcd47f637a4047e81604403723c012c18754d39f5ef8ea46c3ccbf474d1430c8d5c51f34c6c5b263c3dec7c0e210ee70250990bec132666c7d6dcc1cf404b44497395465fb3cf62614329d8f97acf901e48f3ca2d0e2a82ef666a720b6c8d875c0dd5df5419a7190726595c88a50c6bda3c5f0c196bca97966c95d9b6946865ac913d966c330503e99934052b8bdce92031e53c025268201294f01ada8c1234af402b1ad0642e2d3b5059e1cbd2b8585fe34abf137e406ce5bf0486f2718d82d2e1ad8cb25e5ebd7cf2f819d751a30077cea601e54219102049940f645407978f4875cec551830ca61e0b60cee0bf63850d983d97691f9ad650db71a2c9bd212eb1466df2dc80e0fc7e3f7293e0fd2c2abf7750c2e04f2e4fc0178f99598597da088215478480647b64f28eb2b09fd14ba621513b81750710be33378159107eb0fe0f203e3ecabde81bfad9b5db3304359857bc688896d5ebe2ba1cce74447307f80220f41fde3a0e0970b9bbd3b9ceaf93d302a91afc4faed02f37542403beeee281dca8a2612c9bf635f391ff97143fb5fd954312be4d940248e7be0af4c36be97a02d221ca28cbe6c91bd212a9603f5926c2503ecf012bf81d689603ef0beb73601022823be574045c3475db2e5115d025b7712f442607f6835464b271f39ff6102e3111475f1bf961a647f563e339d2f2e0497bced3d2c9e2b132d2bfa1c12fdebea1f37199a1e8b2e96be38a5f161b85de20d608455fa2ae2f207de7f2718a1bab2b8d0e8aa6a82fecdbcbb28ef42ba0f5dad6a6d43551e0ed82e4c51ee94360dcd4821c8ba8742f33fb0f9ea44f495ba03acd12f880772c17014fad32d27d8f8e616c0717362fe62d58d0a15de95431f70f82c44a77dafee48bffdf462b00871f6e0440398d9b4c3d58620b050f88ed6ef0ce09280278b70434dd43e088d4fb5d4812751f90bdda42628e9a130c5eb4a711fda4b98f3558d487609a066e15387adcf857d7278455a60da36fca474a807a7bed19d15109de13c9de41dbe3536791ea76332ebf3cfcaee0409c91258433128199315af30c133c335a29132365edc34478a809242baaad84ea2a1f840ceff13de25f5658a56ea55bf9655c40c4a8373d7e94853758bb8681c47e5ec0178b00ee459e2fd33ab79440e26242d769fa66475de24df341b1afcd42474b2c8181f746f31cf3dc83e6d2fdb930cd5596b64e7cbbad0f77bfeabff7fe7bd7f249cd516fb09b56d84ebe7f87dd677b656b6a797c90e73faf6968b0942ad02bed4c51c2a1e40b51f7c0d2cd9668e0bb041ea92bacba8cf244fd526ddf68e27879df9164e5dfe860024bd9a9b6a702a20b0e7fa8c7ef38b2c3ffee14a8412f499a4218e195d84806a856bca9ca11625eacc927291cdd19b5c786fd701260f38190e0e8aaa4a9c4c7300824bab9d404087b9f8706344cc2fc41bd27e64edcba696d49283d021479d302429441b174f51693e51c127478c7d35bb4d9e4808a4a7b2d667b196781a59c7bbbac2039f2b81e55d146bc1136a5ba2835e1fe8aa4c59c15c94a43e11630b416d5f2e3818de3097a0a3f23ebb78dbddb8e6c52b5881847e8db74d62585000db225ee0b3ddff0ec620df5f9df7e3b41fe073b9a4b396b5ca70661454f22651c908f57eb945a49ba6f4d282645be70b4c627f4cddd350d300560bfe4f8bfb30c6a701453bc8d9ab4f5086ef2d1ecf71e8fe87931795704ebf73d068f2b8b3aaf8dc1e3791387875a49226286e6d611d5a1f494140cd61771e79a3717f726061c2d7f8b324d56407b568c3d31bd19c855850b4a864854e811662f479803d80651329a92af47e9e3297fa5c405355aeca15857e8a2e4213e3d61145f98ff8e4a19dd3ac8a3c3c2662dce94f866909aaf64d9786a8d61d583dda288e4c756429099c63c711459b4b7e902028d8fbc891f55e0c18376ceacac68156afc7c054b0ee5634a33c84b1be5590c9013b155b90a38656eab6fcfbb3eb104ed0de33e7dad0f7cb69c7c7cae7c42c5a16ca9a23170585d423f242ddca6753bf0456e1a61b14c37adf9f2860e0263c6bbaf3b9fa5cf2acc542f0c5238648dfec35adda36d43cf6d4e68000fe1d36a5662b6822012cae919f67178a4e4b375a79ae4046bf228099674c22b7ded921c8f90c5e4d284194a197fed6b9a2fcfba5be8f12210a579caa15eb4012d4bf6f41fe6d80e873b8bc95121ae20f076327e6c978759de7e6094f81401b3b4467feb07883d7c761943119fdbaada03b644f70eb73f9c0f5462e06dfd32236266ddff7d2a8e1813183fd156ee22c0f1141d24322b408fa3365d2197740234ebc4c3404e327c70f5cd1f6a9a3d2eb452959612c087aa7a33fa5686f3128ee56188d993824aaa1f19e338d6445db52620424b920c10e54dbfd3e5872e5025c1b211e521807a133026a71f8cdaa4ffaf7a9f56eb3e3b92d4c1a0b38150ba5f6deb4324c79af3bc395cdeae42d7a8e9b33a7a3d7b70b8a705a5852f5b7970e106d3ed9e22c2d0c129c2dba6ee308b42a0608a1e987c4e74bda3859083ba2dd3aaf835e3c5c2cadac20f07c409b31a902e583236ed3126750399c1eb188a349bc2c278d17ca0ce1e6e2fef5302898c290d8acbb866853ea035a37d3571912a0ef83144329b834be8fdb5d8aae7ecb7847b774a77442fc4c292f01a6a726be89d6aa9d43d9dcaf73076e990d8b5797f17e75629022454adcb7bfe3fe6fca462e0f277b8c365a7b8ee3a15e35e2ffe5da0f0bae5657c1b66120062aa7cfe13b6710edad72c4e94999fa2d6de28c548b2c7f46d5e79fb8b7cf7197b348c82d60e6c4acb60f9627c51ede78ecbd818effc2a2f2829f428b4a8d7fbb709ed2bf973246662b6bd03"], 0xfce) socket$kcm(0x29, 0x7, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}, 0xcc}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(r3, &(0x7f0000001680)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f0000001700)=@upd={0xe0, 0x12, 0x400, 0x70bd28, 0x25dfdbbd, {{'crc32c\x00'}, '\x00', '\x00', 0x2000, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x101, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r4], 0x158}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x80, 0x6, 0x5}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f75746500"], 0x1ac}}, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="d8e36616bcbcc36388773cd00951517ce4fbed90056e69eac67b94b01b5ffcb3e737d1a5c1a6cf6eed6e6da066dd4adbdcc9cc39f233edaf", 0x38}, {&(0x7f0000000100)="aff730170fa0f87d114fd27480bcb8b937d6a82563f152768896ae521099418944b78559a4d364369dde5d1d67c8c3f70507fc4ab6c84c70c05046214d4e7d511d139a8564d195e343218f1d4d849e3ed346821fa89daf899bcc08dccb189db43f3175d9c055d8dbb1be5d0c617dc7", 0x6f}, {&(0x7f0000000180)="7b916b419d445e8cb3da1c665de1060067e7de22ed7a9131b80fe7801625d3264e1ec23598ce6fb8cac3449fe50bc42007591678ef7b4aa10db71040bb5e78d4c5e0743df18cc2bd854c98c2afc485604486e1f31249398668a9e47b237aec601bdec9bb0e2d", 0x66}, {&(0x7f0000000200)="c34e8e27a320bc3337e1c7c8cd23c173cfd08245666e777176e9c00f31c94e3d9efd07ab8fd8f034ae9993933f5680b5944f3b20c73dd4bb104c7ed933ed97c18120d306b561afed0f48f9ea1c5854add2dd480efddd496bae6a8a8a992f1db54bfc8ed20ca61f9012518ffc4ac467cd06bbf92cd486e0c30f43adff0b6cafa26c58c5c6a42dd7a76e3f98e18d12b0d8a25b4294e0b4e96d64ba85c73c17ffaf114dc1d2949ea1b92dad99210e44b14e0ed6bd363a94512d92d5bda87580eb4418a6246a41bd1f8ea47926edd609ec909bdcf2bc", 0xd4}, {&(0x7f0000000300)="1fb19049e1728b1972c2a55be63e829642665c6e91983f6ec8f3c47e8e9491ff71b22a4fac0042d0a3ec3d8128b6ce5d0c240b74329c66580340093acb7b4505a71872455b48897f58b77b639edec227c280715d8596e35528438f82cf539f54c1e3749c", 0x64}], 0x5}, 0x4000000) 3.532439972s ago: executing program 6 (id=4139): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000611468000000000005000000000000009500000000000000779f9fa2e91cfa4af1ccc92c5a388253597a5af4a7db3b1ebf2645589098a327d63ecbd5e23c039b1c21acc73ea3ce5a35ff5c8d9aecbb8bbb1ce5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.293169236s ago: executing program 6 (id=4142): r0 = socket(0x28, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x1, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x8}}]}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44091}, 0x24000084) connect$packet(r0, &(0x7f0000000500)={0x28}, 0x14) connect$packet(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{0x3, 0xb8, 0x8}, {0x3, 0x8, 0x520}], "de"}]}}, 0x0, 0x4e}, 0x28) (async) r7 = socket(0xa, 0x3, 0x4) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, 0x4, 0x6, 0x201}, 0x14}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xb, 0x3, 0x200}, {0x81, 0x5, 0x58, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2.770139054s ago: executing program 6 (id=4152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000040)={r2, 0x7a, 0x13, "48c91e5605c0ccf6aaa0e510c12d25fa0a4b70"}, 0x1b) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 2.174129197s ago: executing program 6 (id=4161): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000540), &(0x7f00000005c0)=0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000ff0200000000000000000000000000010004000000000000071800000000040000d704"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000054000000540010000a0000000100000006000005090000000900000001000000040000000000000001000000020000000e00000000000000fc2c95ffffff060000470000000000040000000b00000004000000000000000d0000000500000002000000000030835f00c2005f61"], &(0x7f0000000440)=""/111, 0x76, 0x6f, 0x0, 0x10}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5f5e0ff}, @call]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x26, &(0x7f00000001c0)=""/226}, 0x21) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r7, @ANYRES8, @ANYRES32=r5], 0x98}, 0x1, 0x0, 0x0, 0x2000c045}, 0x8042) 2.049374291s ago: executing program 5 (id=4163): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa56}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4010}, 0x1) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x38}}, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x12}]}, 0x38}}, 0x0) getsockname(r2, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0xffffffffffffff03) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00ffffffd41064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/154, 0x9a}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.981767631s ago: executing program 8 (id=4164): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b7030000020000008500000017"], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000001bc0)={&(0x7f0000000640)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="e8fbe9ce558c9e9ab491ffb1627df4b6c71f5eef9aa014daa7fec0a0b2b3b2e95b869b762f126c68cf21111f71bb8a82e5fb98125d7d5e7693b6d6f6", 0x3c}, {&(0x7f00000016c0)="13d2ab4dd25c926b94301550a6b54c4b798dfd5109c5993d38a5becc093bd77b74939e07b944db2c80ac9d55daebc8867d85438161f62aee757fb6ccb6fb939e1bcc243b15c4d8212d6de1", 0x4b}, {&(0x7f0000001740)="4a4eb65f4e7565e31c98c18800bb48fe30479ab90f23cef165711519ee898ce34607a7e273cc69a1fe23221fda1ad3a806a0ab5c2c8d61758c08ad53bcd712a674dd90e390129edcbc66b7553f86ad51da44f0e4705630bd78208aa51132c1c927d3c8fba09a543bd388d14215a2d00d1032a9f6b76157720829517703032bd1b516a1716d3ee4780f50e57162eb1ddbf6d9b007475095ce2da83fd8c119ea48fe711e3a4209776f197106389cb6f3f2", 0xb0}, {&(0x7f0000001800)="aeb6bb20d1515a94ebf0249164513c849306a9673a9a94d2e1f1b2d19f8d9178253dbe28f40a91d0e6936dbffa059c10abb28370731fc8644f5fdf1081f124b332f3a694194a2c60dbc522277df64e6b1cfdf45dfd5cd1f9d28eb945e0ec5bbc1d95c2213ec55e80910622f46deb56a5113b236f43970ca17261774967845ce796a9de29448f6ee99392ed6cc604549b3929001ab41804a29aad2d2564591cea5712aaaca807e5e317fd29f55eda830e3502a80fceb275e3c5e7c3a675f5fac2ddc1ab3ba7", 0xc5}, {&(0x7f0000001900)="ce87", 0x2}, {&(0x7f0000001940)="8fa1c5635c588606f3b3cb19771526dc01fef50f868ed4d0ba73132328e774bcce485228f51cf38ff61af31dc7b5b1ebde9d747d7400d6a75a1b33caa6310c48daa252864e8bbdb3d2fa3a3cd5dee8ccf58e25807dd4fef3d8354963e0a2154f93445997832d58c808e439cfa6341f73aceef8974728b382df87978560", 0x7d}, {&(0x7f00000019c0)="0b740aaeca05031277c1bf16b1bc8b84c80920176ad051ef69f0020e22356e912b65e8b96e9e88ba7bfd033e5d105dcbe960ea4419f4684a7018b83fc73c6211ed01e22a170ad4533204ed9f6048e800651f21c0753fc4f3d6467284aa21dd70b2107b38cc788ec941c96de3d2462726a6743c1e58d199743fc88ed24f74a7ed7c9ddd36aa2a4d3aca9863dde95bb8b91d3bfef2f1bece120fa10787f089bb9bb991e28622246a903771c852aad5384e01be2dc27e26d96bb080bf0450897ed8bea6991518c83ba9302b5d49", 0xcc}], 0x8, &(0x7f0000001b40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x80}, 0x2c048051) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x700, 0x8, 0x1, 0x6, {{0xf, 0x4, 0x0, 0x2, 0x3c, 0x65, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp={0x44, 0x14, 0xb6, 0x0, 0x6, [0x7f, 0x8, 0xd079d80, 0xb3]}, @lsrr={0x83, 0x13, 0x60, [@private=0xa010100, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x17, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc12}}, @call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000100)='GPL\x00', 0x3f06, 0xb0, &(0x7f0000000340)=""/176, 0x41100, 0x10, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x4, 0x2, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[{0x3, 0x1, 0xd, 0x4}, {0x5, 0x4, 0x0, 0xc}, {0x4, 0x2, 0x1, 0x2}, {0x3, 0x1, 0x1, 0x1}], 0x10, 0x1}, 0x94) 1.808757363s ago: executing program 8 (id=4166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) pipe(&(0x7f0000000600)) socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000500)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4(r2, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x80, 0x80000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 1.753386176s ago: executing program 2 (id=4167): r0 = socket(0x23, 0x2, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket(0x28, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x70bd2a, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000080)="580000001400add527323b472545b45602117f9affff81000000ff0000f03ac71002000000fffffffffeffffffffe7ee000000000000000002000000000000000000006587f7000000000000000000000000008000000000", 0x58}], 0x1) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 1.702873418s ago: executing program 5 (id=4168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xd4}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000001c0)=0x4) clock_gettime(0x3, &(0x7f0000000540)) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0) r4 = socket(0x8, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0xb) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400000090780000a94bb6bb55d14efde234d872964c4c848535cdfcc0bb02f3cc31f0f3f97a3457175da4af5f5f5b37bb719681789caafb6b84c735488e81d88e1172349df7e5895a1f82e5c91119eb92d7590df6363b712a4ba78cce8f8d01b9bc"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e21, 0x6, @empty, 0x7}, {0xa, 0x4e24, 0xc0, @rand_addr=' \x01\x00', 0x9}, 0x0, {[0x6, 0x3, 0x9e, 0x9, 0x8001, 0xc, 0x275c, 0x1]}}, 0x5c) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0) r9 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000000)={r9}) 1.589934727s ago: executing program 2 (id=4170): r0 = socket(0x1e, 0x805, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r0}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x80}}, 0x0) 1.474175983s ago: executing program 2 (id=4171): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x90000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x9731b335a05ff7a1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20040080) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001340)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x65, "8c84796334a38e"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002340)={r3, r4, "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", "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"}) r5 = accept(r2, &(0x7f0000003340)=@nfc, &(0x7f00000033c0)=0x80) sendto$netrom(r5, &(0x7f0000003400), 0x0, 0x8814, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003480), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000003580)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x50, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x91}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20844) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000035c0)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000003600), &(0x7f0000003640)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000003740)={'syztnl2\x00', &(0x7f00000036c0)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x0, 0x2, 0xc, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x1, 0x7, 0x7}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003780)={0x1b, 0x0, 0x0, 0x8f1e, 0x0, r8, 0x7, '\x00', r9, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000003980)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003940)={&(0x7f0000003840)={0xfc, r0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x305}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x73a}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3b2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x275f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x8004011) clock_gettime(0x0, &(0x7f0000003a00)={0x0, 0x0}) ppoll(&(0x7f00000039c0)=[{r5, 0x100}, {r7, 0x80}, {r5, 0x1210}], 0x3, &(0x7f0000003a40)={r10, r11+60000000}, &(0x7f0000003a80)={[0xc18]}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000003b00)={0x0, 0x2c, &(0x7f0000003ac0)=[@in6={0xa, 0x4e24, 0x5, @private1, 0x3ff}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000003b40)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000003b80)={r12, 0x5a}, 0x8) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(r5, 0x0, 0x0, &(0x7f0000003bc0)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000003c00)={r12, 0x3}, &(0x7f0000003c40)=0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r13, 0x8982, &(0x7f0000003c80)) sendmsg$inet(r2, &(0x7f0000003e80)={&(0x7f0000003cc0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003e00)=[{&(0x7f0000003d00)="1edd3c53772ec82472556a8cd3e198820a1f22387eccce7ee40f09e8c28ad8318671a4334018f99169b05de04b15861fcd404520e13086955201287245f4f6f0bf8e2f0bbc925b66b7549a928346862d16772da3e6c99daf31d5713a09da1efca02cc53a32d6d1ad061207a73a077a217e61cef8a4e8b5e457b04c8c654641c3256f497f1e08d68b829e36d57e9069031f7e05b08c269d2aadd1cf090e9abd10c89e8c42f4c06623486807fb581fa584f93e56cd044363ea542280139ad798ab4df03d32b06118486fabfefa8e739cfb8a2d05533e68b9abacbd565fedb41afef8cae7eb2ff18d938d2a", 0xea}], 0x1, &(0x7f0000003e40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x2, 0x0}, @remote}}}], 0x20}, 0x40004) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000004180)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004140)={&(0x7f0000003f00)={0x230, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x12}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1e8, 0x3, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd0, 0x1, "844942241c6d323bd5a07d9cae54da18ef6ba64dce92741d0062e60a2dcfc65b176f538b36a5f4f8c7a4ef7dbce0a11d9cea2c1d88854ef6041d024fda9f6551aa88706e5bb39ef7de7dbd05e5dd872ea193f143e8e46c9e113cec2ed52bfd99c86ca25f1757abe54b460a4a3c737f521054cb2e5a2422abe90844e24984b0a80a153bc30a3ef77d9fefd377eeffd69452d8e8ffc492c891cd2715080f96c2a9bc6627fafde4b8e848371f7a7d51141da1ec3cb1f576634059a345c4c12c2b3807e6b777a12e56fd91a96e98"}}, {0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xfe, 0x2, "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"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4488}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x5, 0x1, "d2"}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) socket$alg(0x26, 0x5, 0x0) 1.313008694s ago: executing program 7 (id=4172): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x0, 0x2, 0x6}, {0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x41}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r1, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@alg={0x100, 0x10, 0x10, 0x70bd28, 0x25dfdbff, {{'morus1280-avx2\x00'}, '\x00', '\x00', 0x2000, 0x200}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x1000}, {0x8, 0x1, 0xffffffc0}, {0x8, 0x1, 0x6}]}, 0xffffffffffffffb3}}, 0x20040004) 1.221769411s ago: executing program 8 (id=4173): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x2) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040), 0x4) syz_emit_ethernet(0xcb, &(0x7f0000000840)={@multicast, @remote, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x7, 0x0, 0x3}}, {@llc={0x4, {@snap={0xaa, 0xab, "b8", "55fe53", 0x1125e, "94ed2b7fd556330363709ce8197d3366f434a7ccda6266f243540907fcbdba7661e7508186e0f41b61c4f66ea33d143ea8f2b733f7cea7379549e9af6a1b52c8928cc52bff9c2df8476d47e59e6fbf162a4aa2ae9928dc62c4d27436c4e5ca33d29a725764c3e907f48bb19ac139e45531c1ee02c17ce7cfba25198db14963b3a66118d7d0dce56ec70dd6d5cbfc6eaed12e028ae258dedd61c351a9abedafc41941d2ee07e8b941bcfca40d7d"}}}}}, &(0x7f0000000940)={0x1, 0x3, [0xb46, 0x1d4, 0x416, 0xd55]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.141383061s ago: executing program 5 (id=4174): sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4044800) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0xe, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0x4, 0x4, 0x5}]}}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) 1.063543095s ago: executing program 6 (id=4175): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xa) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000000)=0xc, &(0x7f0000000040)=0x4) 1.003409227s ago: executing program 7 (id=4176): r0 = socket(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x8, 0x8, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000002001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x9, 0x24, [{0x12, 0x1}, {0x18, 0x1}, {0x4}, {0x36, 0x1}, {0x6}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x30}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}}, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r0, 0x0, 0xc, 0x0, &(0x7f00000004c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x20008019) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x800000000000000, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}, 0x0, 0x3, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) 904.759706ms ago: executing program 8 (id=4177): r0 = socket(0x40000000015, 0x5, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) close(r0) (async) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0xb, [@fwd={0x6}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x5}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x5}, {0x5, 0x4}, {0x4, 0x5}, {0xf, 0x5}, {0x2, 0x4}, {}]}, @enum64={0x0, 0x8, 0x0, 0x13, 0x0, 0x0, [{0xf, 0x5, 0x6}, {0x4, 0xffffffff, 0x7}, {0x1, 0x3, 0x60a9}, {0x9, 0xffff}, {0x1, 0x2, 0xb94}, {0x10, 0x244e, 0x81}, {0xd, 0x6, 0x6}, {0x6, 0xb595, 0x4}]}]}, {0x0, [0x30, 0x61, 0x0, 0x61, 0x30, 0x2e, 0x2e, 0x61, 0x30]}}, &(0x7f0000000000)=""/102, 0xeb, 0x66, 0x1, 0xe9, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x21, 0xc0bf, 0x8, 0x9, 0x4c41, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x4, 0x0, 0x5}, 0x50) socket$inet6_sctp(0xa, 0x0, 0x84) 831.211225ms ago: executing program 7 (id=4178): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7b}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x240040c0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r6, 0x200, 0x70bd29, 0x7, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x10}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1184, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 773.15475ms ago: executing program 5 (id=4179): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) (async) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) 650.653063ms ago: executing program 7 (id=4180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x16c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x158, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xb}, {0xc, 0x4}}}, @m_xt={0x58, 0x17, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x90b}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "f62f5842d5a9b8e8524ed558e3b65cc1fc86a749027b865caa0a1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, {0x6a, 0x6, "2b45b9197ecf7bcbd6d5d0b89e829e9d769f0a6fcdf2f493491fd74e2215c1ff57261a537b40d82cf2a7e591517e2575dfd2d9175e10cab5f40f0e8cd5d063c0ec791f379873f196923734be8ec74e54b7c9aee8b3ba3986a11dc9d804cd96293f161fe9ffc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x16c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) 608.932826ms ago: executing program 5 (id=4181): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4010) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6erspan0\x00'}) 544.999477ms ago: executing program 8 (id=4182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0x2, {@in6_addr=@rand_addr=' \x01\x00', 0x86dd}}}]}, 0x38}}, 0x20044050) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x7, &(0x7f0000000000), 0xa0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a0001007175657565000000140002800800044000000010066addb1623dafeb3ace62748e46000340000300000900010073797a3000000000090002007379ffff000000000000110001f1949be760c8c9627626a6eaccc60bf189140000"], 0xa0}}, 0x0) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x4, 0x2}]}}}}}}}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYRES16=r3, @ANYBLOB="bca3f716c3419b18d7d2c613df67aefe8ed2563bf46986b1f08cd669a21180c1497f05cb6c", @ANYRESDEC=r0, @ANYRES16=r6, @ANYRES64=r2, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="f176e3616cc20607b375cb635805e8e6b73da5945f70ae655fc74e156c6cbd5fb7e5f95b5843d3836b6b6e35c05fa3a6e02763544619cc116f7b187bcf1ed8b5069f866c6c31277e79b9fc5630cef73637ff91c7790d1574339d9c2be377601b6010c8b5710370cd36f94cf261ac76722531b1ba7c0560c48e4a244ee7a024cf15d4e3144ccb6d87060c334a3a5cc232f2a9abf4008c18d7872103"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000000002010400000000000000000a00000004000180180003ff01000080b6b13ffee13fb8aae7060d062208000100ac1e010108000200ac1414080000ae99a9c85c9bbda60b1ce3b1310000000000800500010000000000"], 0x40}}, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000240)=0x8, 0x4) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) (async) sendto$inet6(r10, &(0x7f0000001300)='G', 0x1, 0x24000000, 0x0, 0x0) recvfrom(r10, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r7}, 0x10) (async) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f00000006c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0xe, 0x0, "789ea1d8735fba9bdf9011ee9c7542523e38167a52a8c97eb839dfff6ff474507cf69c6abbd81091fb0d05234eb57441ca49b8cc46ece020544126e3878d1f920a24b1ddee003e881b1ae3873c4accc2"}, 0xd8) 533.504108ms ago: executing program 2 (id=4183): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xc, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a80000028080000000000000000019500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) 499.094415ms ago: executing program 7 (id=4184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011000100"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) (async) syz_emit_ethernet(0x80, &(0x7f00000005c0)={@multicast, @random="28feee412b8f", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x2d, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xe, &(0x7f00000000c0)=@raw=[@exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, @ldst={0x1, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffe0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000040)='GPL\x00', 0x2, 0xa9, &(0x7f00000001c0)=""/169, 0x41000, 0x10, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000140)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=[{0x0, 0x4, 0x6, 0xa}]}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r4], 0x60}}, 0x0) (async, rerun: 32) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) (rerun: 32) 237.978403ms ago: executing program 2 (id=4185): r0 = socket(0x11, 0x2, 0x100001) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7a, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 166.560176ms ago: executing program 8 (id=4186): r0 = syz_init_net_socket$x25(0x3, 0x5, 0x3) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) ioctl$SIOCX25SFACILITIES(r0, 0x891d, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006c0001"], 0x18}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r8) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, r9, 0x607, 0x270bd07, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x4008400) (async) ioctl$int_out(r1, 0xef1f3a3701e1c750, &(0x7f0000000680)) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r9, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40480) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) (async, rerun: 32) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f0000000040), &(0x7f0000000500)=r1}, 0xc) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r15}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r14}, 0x20) (rerun: 32) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r15, &(0x7f0000000040)}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRESHEX=r13], 0x1c}}, 0x840) (async) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000d28bd7000fedbdf2405000004085c83f523ce15574a90cc67bcf54d0eb0d02f5bb8a6aed865f4679f80e1c36955aad92b64b55175ce96da5aca600459dbb8c9f905ee4c5a09f8020007567a4541102dbb6694f5c9027705f3c381b35323b279b112922745b32ce1639c3b76aaa0223f4587bb3fe90dfc10581ebffb776b74cf122f6bcabef9dbaed679185090e1d5109f9ad0df682b554734246b7884cad6d356d3239eb33489142dbcfc2e2c", @ANYRES32=r3, @ANYBLOB="080004000100000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x7dc909123d7c9a15}, 0x4000012) 55.521531ms ago: executing program 6 (id=4187): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x8010, r0, 0x740bf000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000000180)=""/74, 0x4a}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/191, 0xbf}], 0x9, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)}, {&(0x7f0000000680)=""/105, 0x69}], 0x2}}], 0x2, 0x2042, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f00000007c0)=0xfffffff9, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000800), &(0x7f0000000840)=0xe) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000880)={0xffffffffffffffff, 0x8, 0xa, 0x3, @vifc_lcl_addr=@local, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ppoll(&(0x7f0000000900)=[{r13, 0x100}, {r11, 0x1006}, {r12, 0x4}], 0x3, &(0x7f0000000940), &(0x7f0000000980), 0x8) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f00000009c0)=0x5, 0x4) setsockopt$MRT_DEL_VIF(r10, 0x0, 0xcb, &(0x7f0000000a00)={0x0, 0x1, 0x8, 0x3, @vifc_lcl_addr=@multicast2, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x6, 0x6, 0x20, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7f61, 0x8000, 0x9c, 0x1}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002d00)={r9, 0x20, &(0x7f0000002cc0)={&(0x7f0000001bc0)=""/4096, 0x1000, 0x0, &(0x7f0000002bc0)=""/198, 0xc6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x1d, 0x3, &(0x7f0000000a40)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000a80)='GPL\x00', 0xc, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41100, 0x50, '\x00', r14, @fallback=0x19, r11, 0x8, &(0x7f0000001b80)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, r15, r9, 0x2, &(0x7f0000002d40)=[r2, r11, r11, r7, r1], &(0x7f0000002d80)=[{0x4, 0x3, 0x2, 0x3}, {0x0, 0x2, 0xa, 0x7}], 0x10, 0x80}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000002f40)={'gre0\x00', &(0x7f0000002e80)={'tunl0\x00', r14, 0x40, 0x0, 0x5, 0x1, {{0x1e, 0x4, 0x1, 0x3f, 0x78, 0x65, 0x0, 0x8, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x86, 0xe, "8b8cdef259556cb855aea771"}, @ssrr={0x89, 0xb, 0xe1, [@local, @local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xaa, 0x1, 0x1, [{@rand_addr=0x64010100, 0x1}, {@multicast1, 0x81}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0x5}, {@multicast2, 0x7}, {@private=0xa010101, 0x3}, {@multicast1, 0x50}]}, @generic={0x44, 0x3, 'G'}, @generic={0x44, 0x6, "403ce6f2"}]}}}}}) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0), r6) sendmsg$IPVS_CMD_DEL_DAEMON(r11, &(0x7f0000003100)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003000)={0xa0, r16, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6a}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400}, 0x400c0) r17 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_FLUSHABLE(r17, 0x112, 0x8, &(0x7f0000003140)=0xd, &(0x7f0000003180)=0x4) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000031c0), &(0x7f0000003200)=0x8) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000003240), &(0x7f0000003280)=0x4) r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000003300), r4) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x28, r18, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000090) openat$tun(0xffffffffffffff9c, &(0x7f0000003400), 0xc000, 0x0) r19 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r19, &(0x7f0000003840)={&(0x7f0000003440)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f00000037c0)=[{&(0x7f00000034c0)="27c22116843521b9a29a6da9e6fa6f1c35005ccb4fef71e63a2d4eb7cdf6ccc761d561a5cacb7da1ce7dd391c0f94ffb385eec2733b1c9622634166c36ddffd91be25a25bd5d", 0x46}, {&(0x7f0000003540)="efc4598f7f3330b9804254e0", 0xc}, {&(0x7f0000003580)="cd495b9e7ecde81b4285f26aea7e8cc6d1e929b062fd15f49cd2aae6a9b0db29940eb1d44aef86809dd30446287b40321fb78911f50153c1c021cd8c530538112d62de65e8e10eae424fc2cdd0fa9013311b38516981f416de4b39e792d6806af9a3a742a76606b3be06611a461af9879982402d0907d8cc26f400aa5c61e21f762188ab8f413c3c", 0x88}, {&(0x7f0000003640)="1b8d6583e334cd6f3771f552d19fb405b0f0d09e1e28c55578e3568dab24bc50e7e765c96a34702a2edfc38c88284028565e3c8a25cf48f4f82414c41ae3ba9bd8782282cf9ac0fa8c", 0x49}, {&(0x7f00000036c0)="b78451ef31598c81be3fd4e8c8df783025548527d0ae8fb019b06016aa5d1e06c48a11e6bd8ed6071776113b22695a4ca800a6ddd7705a832328dda51cfb7a8316e5df5b7d5331d7594eb8f5cbb20718ccd22722df7080828179632a2a6d37665ececf5f03c32a822f5bdf4aa1fb01c4377d02e97cafd52f6b3ccdc50f1e74dacfcdcaaf037aa486bf055d625ab4e33a82b54b7c40d77c215db80418e5df4e60cc70f19184cdcf8cebea6a3c5b8ec52330d8b1d616191798626c9aaf4692da3bbd94a1eb0d8d58", 0xc7}], 0x5}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r8, &(0x7f0000008580)=[{{&(0x7f0000003880)=@tipc=@id, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003900)=""/147, 0x93}], 0x1, &(0x7f0000003a00)=""/191, 0xbf}, 0x7}, {{&(0x7f0000003ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003b40)=""/51, 0x33}], 0x1, &(0x7f0000003bc0)=""/22, 0x16}, 0x146dcd54}, {{&(0x7f0000003c00)=@alg, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003c80)=""/76, 0x4c}, {&(0x7f0000003d00)=""/63, 0x3f}, {&(0x7f0000003d40)=""/43, 0x2b}, {&(0x7f0000003d80)=""/237, 0xed}], 0x4, &(0x7f0000003ec0)}, 0xe6f}, {{&(0x7f0000003f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000003f80)=""/96, 0x60}, {&(0x7f0000004000)=""/17, 0x11}, {&(0x7f0000004040)=""/45, 0x2d}, {&(0x7f0000004080)=""/39, 0x27}, {&(0x7f00000040c0)=""/175, 0xaf}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/33, 0x21}], 0x7, &(0x7f0000005240)=""/130, 0x82}, 0x101}, {{&(0x7f0000005300)=@alg, 0x80, &(0x7f0000005480)=[{&(0x7f0000005380)=""/229, 0xe5}], 0x1}, 0x6}, {{&(0x7f00000054c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005540)=""/2, 0x2}, {&(0x7f0000005580)=""/43, 0x2b}, {&(0x7f00000055c0)=""/86, 0x56}, {&(0x7f0000005640)=""/227, 0xe3}, {&(0x7f0000005740)=""/144, 0x90}, {&(0x7f0000005800)=""/7, 0x7}, {&(0x7f0000005840)=""/130, 0x82}, {&(0x7f0000005900)=""/245, 0xf5}, {&(0x7f0000005a00)=""/15, 0xf}], 0x9, &(0x7f0000005b00)=""/32, 0x20}, 0x80}, {{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000005b40)=""/251, 0xfb}, {&(0x7f0000005c40)=""/180, 0xb4}, {&(0x7f0000005d00)=""/68, 0x44}, {&(0x7f0000005d80)}, {&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/129, 0x81}, {&(0x7f0000006e80)=""/87, 0x57}, {&(0x7f0000006f00)=""/13, 0xd}, {&(0x7f0000006f40)=""/202, 0xca}, {&(0x7f0000007040)=""/85, 0x55}], 0xa, &(0x7f0000007180)=""/241, 0xf1}, 0x468}, {{&(0x7f0000007280)=@qipcrtr, 0x80, &(0x7f0000007300), 0x0, &(0x7f0000007340)=""/255, 0xff}, 0xf}, {{0x0, 0x0, &(0x7f0000008500)=[{&(0x7f0000007440)=""/82, 0x52}, {&(0x7f00000074c0)=""/4096, 0x1000}, {&(0x7f00000084c0)=""/41, 0x29}], 0x3, &(0x7f0000008540)}, 0x94d}], 0x9, 0x60002160, 0x0) 4.639518ms ago: executing program 5 (id=4188): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=@can_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "01d1f47599dca745"}, 0x2}}]}, 0x2c}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.572019ms ago: executing program 2 (id=4189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) 0s ago: executing program 7 (id=4190): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2e, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x84, 0x10, 0x300, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}, @IFLA_AF_SPEC={0x28, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x2}, {0x8, 0x1c, 0x0, 0x0, 0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}]}, 0x84}}, 0x0) kernel console output (not intermixed with test programs): d - VLAN blocking is removed [ 326.839522][T16124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.917904][T16119] veth7: entered promiscuous mode [ 326.935724][T16119] bond4: (slave veth7): Enslaving as an active interface with an up link [ 326.948506][T16140] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 327.134780][T16146] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2755'. [ 327.168476][T16152] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2759'. [ 327.248688][T16152] bond20 (unregistering): Released all slaves [ 327.449500][T16167] macvlan5: entered promiscuous mode [ 327.457923][T16167] macvlan5: entered allmulticast mode [ 327.465028][T16167] bond5: (slave macvlan5): Opening slave failed [ 328.053510][T16203] netlink: 'syz.4.2773': attribute type 19 has an invalid length. [ 328.062596][T16203] netlink: 'syz.4.2773': attribute type 19 has an invalid length. [ 328.070995][T16205] netlink: 'syz.3.2771': attribute type 1 has an invalid length. [ 328.871740][T16212] xt_l2tp: missing protocol rule (udp|l2tpip) [ 328.896407][T16211] xt_l2tp: missing protocol rule (udp|l2tpip) [ 328.933164][T16218] pimreg3: entered allmulticast mode [ 329.007732][T16218] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.045237][T16218] bond3: (slave lo): making interface the new active one [ 329.058394][T16218] bond3: (slave lo): Enslaving as an active interface with an up link [ 329.068351][T16218] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 329.220472][T16230] veth0: entered promiscuous mode [ 329.322624][T16230] veth0 (unregistering): left promiscuous mode [ 329.481881][T16241] syz.1.2783 (16241) used obsolete PPPIOCDETACH ioctl [ 329.629254][T16245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.647737][T16309] vlan3: entered promiscuous mode [ 330.663266][T16309] vlan3: entered allmulticast mode [ 330.712433][T16315] sctp: [Deprecated]: syz.5.2803 (pid 16315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.712433][T16315] Use struct sctp_sack_info instead [ 330.775493][T16309] hsr_slave_1: entered allmulticast mode [ 330.834390][T16316] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 330.853666][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.890306][T16322] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 330.911082][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 330.920591][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 330.928983][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 330.937758][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 330.981537][ T5149] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.989234][ T5149] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 331.000657][ T5149] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 331.010480][ T5149] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 331.023588][ T5149] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 331.249804][T16319] wg1 speed is unknown, defaulting to 1000 [ 331.310911][T16332] netlink: 'syz.3.2810': attribute type 1 has an invalid length. [ 331.717069][T16359] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 331.967701][T16369] delete_channel: no stack [ 332.027955][T16319] chnl_net:caif_netlink_parms(): no params data found [ 332.400500][T16319] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.412005][T16319] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.426336][T16319] bridge_slave_0: entered allmulticast mode [ 332.434557][T16319] bridge_slave_0: entered promiscuous mode [ 332.454118][T16319] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.474411][T16319] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.479785][T16409] __nla_validate_parse: 19 callbacks suppressed [ 332.479848][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2829'. [ 332.489275][T16319] bridge_slave_1: entered allmulticast mode [ 332.509647][T16319] bridge_slave_1: entered promiscuous mode [ 332.647113][T16319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.687488][T16416] netlink: 'syz.2.2831': attribute type 8 has an invalid length. [ 332.713313][T16419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.724248][T16319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.902087][T16319] team0: Port device team_slave_0 added [ 332.929803][T16319] team0: Port device team_slave_1 added [ 333.079924][T16319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.104199][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.133738][ T5149] Bluetooth: hci6: command tx timeout [ 333.172042][T16319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.184988][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2835'. [ 333.218017][T16319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.225038][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.378537][T16319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.580080][T16454] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2842'. [ 333.592935][T16447] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2839'. [ 333.637447][T16319] hsr_slave_0: entered promiscuous mode [ 333.644950][T16319] hsr_slave_1: entered promiscuous mode [ 333.652613][T16319] debugfs: 'hsr0' already exists in 'hsr' [ 333.659693][T16319] Cannot create hsr debugfs directory [ 334.183652][T16319] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.220788][T16319] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.242548][T16482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2851'. [ 334.270762][T16319] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 334.395728][T16492] netlink: 'syz.3.2853': attribute type 9 has an invalid length. [ 334.403976][T16492] netlink: 'syz.3.2853': attribute type 11 has an invalid length. [ 334.412509][T16492] netlink: 'syz.3.2853': attribute type 12 has an invalid length. [ 334.421146][T16492] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2853'. [ 334.433646][T16486] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2852'. [ 334.481144][T16319] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.492637][T16319] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.503544][T16319] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 334.586966][T16319] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.587819][T16488] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2853'. [ 334.627654][T16499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2855'. [ 334.637771][T16319] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.651270][T16319] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 334.716829][T16498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.793629][T16319] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.818300][T16319] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.848064][T16319] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 335.041522][T16510] netlink: 'syz.5.2859': attribute type 32 has an invalid length. [ 335.078881][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2859'. [ 335.146750][T16510] bond6: option coupled_control: invalid value (52) [ 335.159862][T16510] bond6 (unregistering): Released all slaves [ 335.174414][T16520] sctp: [Deprecated]: syz.2.2862 (pid 16520) Use of int in max_burst socket option. [ 335.174414][T16520] Use struct sctp_assoc_value instead [ 335.207590][ T5149] Bluetooth: hci6: command tx timeout [ 335.351052][T16319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 335.397501][T16319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 335.461700][T16319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 335.511908][T16319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 335.622874][T16540] netlink: 'syz.4.2867': attribute type 33 has an invalid length. [ 335.890755][T16319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.960390][T16319] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.968035][T16559] netlink: 'syz.3.2874': attribute type 9 has an invalid length. [ 335.978175][T16559] netlink: 'syz.3.2874': attribute type 11 has an invalid length. [ 335.988283][T16559] netlink: 'syz.3.2874': attribute type 12 has an invalid length. [ 336.003565][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.010890][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.065461][T14077] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.072755][T14077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.342572][T16578] netlink: 'syz.3.2880': attribute type 4 has an invalid length. [ 336.374890][T16578] netlink: 'syz.3.2880': attribute type 4 has an invalid length. [ 336.436412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.602858][T16583] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.647104][T16583] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.783113][T16583] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.794403][T16583] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.836978][T16319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.913529][T16583] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.924744][T16583] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.956325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.122436][T16583] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.150275][T14077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.161210][ T6930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.171270][T16583] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.184526][ T6335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.195141][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.209537][ T6335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.221097][ T6335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.236426][ T6335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.250813][T16602] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 337.286740][ T5149] Bluetooth: hci6: command tx timeout [ 337.318514][T16319] veth0_vlan: entered promiscuous mode [ 337.332300][T16319] veth1_vlan: entered promiscuous mode [ 337.380238][T16319] veth0_macvtap: entered promiscuous mode [ 337.394577][T16319] veth1_macvtap: entered promiscuous mode [ 337.500750][T16319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.555730][T14087] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.571238][T14087] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.604401][T16319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.634420][T16609] syzkaller0: entered promiscuous mode [ 337.640636][T16609] syzkaller0: entered allmulticast mode [ 337.661277][T14087] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.673192][T14087] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.683518][T14087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.731735][T14087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.770404][ T8036] net_ratelimit: 36 callbacks suppressed [ 337.770424][ T8036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.787816][ T6335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.798599][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.813863][T14087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.825437][T16609] tipc: Enabled bearer , priority 0 [ 337.850556][T14087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.889007][T14087] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.901068][T14087] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.919157][T14087] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.940414][T14087] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.053379][T14077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.086696][T14077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.145505][T14078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.161399][T14078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.332711][ T6335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.383175][T16608] tipc: Resetting bearer [ 338.470311][T16608] tipc: Disabling bearer [ 338.833295][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.844451][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.853903][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.867679][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.876408][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.070516][T16657] wg1 speed is unknown, defaulting to 1000 [ 339.111266][T16664] __nla_validate_parse: 17 callbacks suppressed [ 339.111286][T16664] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2905'. [ 339.366808][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.367196][ T5839] Bluetooth: hci6: command tx timeout [ 339.545488][ T5834] syz_tun (unregistering): left allmulticast mode [ 339.558882][ T5834] syz_tun (unregistering): left promiscuous mode [ 339.576670][ T5834] bridge0: port 2(syz_tun) entered disabled state [ 339.622922][T16675] vlan5: entered allmulticast mode [ 339.629480][T16675] hsr0: entered allmulticast mode [ 339.646338][T16675] hsr_slave_0: entered allmulticast mode [ 339.688422][ T6470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.698856][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.709397][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.944959][T16703] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 340.270895][T16657] chnl_net:caif_netlink_parms(): no params data found [ 340.349594][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2922'. [ 340.387808][T16717] batman_adv: batadv0: Adding interface: veth1 [ 340.394210][T16717] batman_adv: batadv0: The MTU of interface veth1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 340.408243][ T6334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.430527][T16717] batman_adv: batadv0: Interface activated: veth1 [ 340.514242][T16724] macsec1: entered promiscuous mode [ 340.519805][T16724] macsec1: entered allmulticast mode [ 340.528198][T16724] bond6: (slave macsec1): Error -34 calling dev_set_mtu [ 340.656523][T16723] syzkaller0: entered promiscuous mode [ 340.662079][T16723] syzkaller0: entered allmulticast mode [ 340.674275][T16738] gre0: left promiscuous mode [ 340.680075][T16738] gre0: left allmulticast mode [ 340.848202][T16751] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2929'. [ 340.967921][ T5149] Bluetooth: hci4: command tx timeout [ 341.103336][T16738] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 341.115474][T16738] gtp0: left promiscuous mode [ 341.121739][T16738] gtp0: left allmulticast mode [ 341.138376][T16738] team1: left promiscuous mode [ 341.143353][T16738] team1: left allmulticast mode [ 341.158202][T16738] vlan2: left promiscuous mode [ 341.168496][T16738] geneve1: left promiscuous mode [ 341.174842][T16738] vlan2: left allmulticast mode [ 341.180265][T16738] geneve1: left allmulticast mode [ 341.198414][T16738] vlan3: left allmulticast mode [ 341.217225][T16738] gretap0: left allmulticast mode [ 341.231189][T16738] bond7: left promiscuous mode [ 341.239041][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2931'. [ 341.268843][T16738] syzkaller0: left promiscuous mode [ 341.274323][T16738] syzkaller0: left allmulticast mode [ 341.336171][ T5849] wg1 speed is unknown, defaulting to 1000 [ 341.342368][ T5849] syz2: Port: 1 Link DOWN [ 341.362393][T14079] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.379170][T14079] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.388195][T14079] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.397925][T14079] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.409444][T16748] syzkaller0: entered promiscuous mode [ 341.414996][T16748] syzkaller0: entered allmulticast mode [ 341.454611][T16762] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2931'. [ 341.464480][T16755] tipc: Started in network mode [ 341.470971][T16755] tipc: Node identity 2e34b2a50a7c, cluster identity 4711 [ 341.481648][T16755] tipc: Enabled bearer , priority 0 [ 341.510023][T14079] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.526922][T14079] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.636913][T16741] tipc: Resetting bearer [ 341.658418][T16776] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2933'. [ 341.661672][T16741] tipc: Disabling bearer [ 341.678454][T14073] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.688383][T14073] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.702801][T16657] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.710248][T16773] sctp: [Deprecated]: syz.5.2933 (pid 16773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.710248][T16773] Use struct sctp_sack_info instead [ 341.730639][T16657] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.740406][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 341.742415][T16657] bridge_slave_0: entered allmulticast mode [ 341.758412][T16657] bridge_slave_0: entered promiscuous mode [ 341.770100][T16657] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.781066][T16657] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.791716][T16657] bridge_slave_1: entered allmulticast mode [ 341.804587][T16657] bridge_slave_1: entered promiscuous mode [ 341.934330][T16657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.952013][T16657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.022231][T16784] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 342.029743][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2938'. [ 342.052914][T16657] team0: Port device team_slave_0 added [ 342.065365][T16657] team0: Port device team_slave_1 added [ 342.118162][T14078] syzkaller0: tun_net_xmit 76 [ 342.118392][T16783] syzkaller0: create flow: hash 3411683916 index 1 [ 342.123961][T14078] syzkaller0: tun_net_xmit 48 [ 342.149795][ T44] syzkaller0: tun_net_xmit 76 [ 342.185622][ T44] syzkaller0: tun_net_xmit 76 [ 342.262087][T16657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.269342][T16657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.297133][ T6930] syzkaller0: tun_net_xmit 76 [ 342.297819][T16657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.318520][T16782] syzkaller0: delete flow: hash 3411683916 index 1 [ 342.334478][T16795] openvswitch: netlink: IP tunnel dst address not specified [ 342.467416][T16799] netlink: 'syz.5.2941': attribute type 39 has an invalid length. [ 343.049326][ T5149] Bluetooth: hci4: command tx timeout [ 343.855189][T16657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.862504][T16657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.889625][T16657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.989309][ T6470] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.004611][ T6470] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.078490][ T6470] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.089983][ T6470] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.120322][T16806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2944'. [ 344.133031][T16657] hsr_slave_0: entered promiscuous mode [ 344.142991][T16657] hsr_slave_1: entered promiscuous mode [ 344.150199][T16657] debugfs: 'hsr0' already exists in 'hsr' [ 344.152217][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2943'. [ 344.158157][T16657] Cannot create hsr debugfs directory [ 344.174306][T16807] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2943'. [ 344.189492][T16806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2944'. [ 344.208134][ T6470] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.218737][ T6470] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.301072][ T6470] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.311349][ T6470] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.560910][ T3495] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.570664][T16815] veth0_to_bridge: left allmulticast mode [ 344.577851][T16815] veth0_to_bridge: left promiscuous mode [ 344.584069][T16815] bridge0: port 1(veth0_to_bridge) entered disabled state [ 344.597868][T16817] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.2947'. [ 344.607985][T16817] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.2947'. [ 344.612523][T16815] bond0: (slave bridge_slave_1): Releasing backup interface [ 344.633255][T16815] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 344.679696][ T44] syz1: Port: 1 Link DOWN [ 344.686474][T14080] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.723163][T14087] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.770851][T14087] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.802307][ T6470] bridge_slave_0: left promiscuous mode [ 344.818637][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.142364][ T5149] Bluetooth: hci4: command tx timeout [ 345.210348][ T6470] bond3 (unregistering): (slave gretap1): Releasing active interface [ 345.272879][ T6470] dvmrp0 (unregistering): left allmulticast mode [ 345.306796][ T6470] team0: Port device geneve0 removed [ 345.428763][ T6470] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 345.437096][ T6470] bridge2 (unregistering): left promiscuous mode [ 345.621990][ T6470] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 345.638887][T16832] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2952'. [ 345.813238][ T6470] bond0 (unregistering): Released all slaves [ 345.828488][ T6470] bond1 (unregistering): Released all slaves [ 345.942287][ T6470] bond2 (unregistering): Released all slaves [ 345.956923][ T6470] bond3 (unregistering): Released all slaves [ 346.059660][ T6470] bond4 (unregistering): Released all slaves [ 346.075294][ T6470] bond5 (unregistering): Released all slaves [ 346.184462][ T6470] bond6 (unregistering): (slave veth3): Releasing active interface [ 346.195615][ T6470] bond6 (unregistering): Released all slaves [ 346.210334][ T6470] bond7 (unregistering): Released all slaves [ 346.320419][ T6470] bond8 (unregistering): Released all slaves [ 346.335302][ T6470] bond9 (unregistering): Released all slaves [ 346.434268][ T6470] bond10 (unregistering): Released all slaves [ 346.537950][ T6470] bond11 (unregistering): Released all slaves [ 346.641132][ T6470] bond12 (unregistering): Released all slaves [ 346.713785][T16657] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.908365][T16841] xt_TPROXY: Can be used only with -p tcp or -p udp [ 346.932308][T16657] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.000009][T16838] syzkaller1: entered promiscuous mode [ 347.005564][T16838] syzkaller1: entered allmulticast mode [ 347.061602][T16657] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.129363][T16847] netlink: 'syz.5.2957': attribute type 13 has an invalid length. [ 347.138074][T16847] netlink: 'syz.5.2957': attribute type 58 has an invalid length. [ 347.155622][T16847] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2957'. [ 347.198377][T16657] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.208550][ T5149] Bluetooth: hci4: command tx timeout [ 347.515048][T16863] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2962'. [ 347.540923][T16862] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2962'. [ 347.555894][T16657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 347.582653][T16657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.611825][T16657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 347.642306][T16657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.863021][T16657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.066478][T16657] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.101241][T14079] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.108495][T14079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.143839][T14079] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.151115][T14079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.174269][T16885] wg1 speed is unknown, defaulting to 1000 [ 348.364833][T16894] sctp: [Deprecated]: syz.3.2967 (pid 16894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.364833][T16894] Use struct sctp_sack_info instead [ 348.422361][T16894] netlink: 'syz.3.2967': attribute type 1 has an invalid length. [ 348.450344][T16894] netlink: 'syz.3.2967': attribute type 3 has an invalid length. [ 348.467119][ T6470] tipc: Disabling bearer [ 348.486745][T16894] NCSI netlink: No device for ifindex 813332851 [ 348.517766][ T6470] tipc: Disabling bearer [ 348.542117][ T6470] tipc: Left network mode [ 348.581256][ T6470] IPVS: stopping backup sync thread 14349 ... [ 350.745992][T16918] __nla_validate_parse: 2 callbacks suppressed [ 350.754972][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2969'. [ 350.902272][T16657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.967492][ T6470] hsr_slave_0: left promiscuous mode [ 350.982742][ T6470] hsr_slave_1: left promiscuous mode [ 350.989439][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.999279][ T6470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.010477][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.019542][ T6470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.028925][T16928] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 351.072712][ T6470] vlan0: left allmulticast mode [ 351.078303][ T6470] veth0_vlan: left allmulticast mode [ 351.083825][ T6470] vlan0: left promiscuous mode [ 351.089820][ T6470] veth1_macvtap: left promiscuous mode [ 351.096321][ T6470] veth1_vlan: left promiscuous mode [ 351.101918][ T6470] veth0_vlan: left promiscuous mode [ 351.654330][ T6470] team0 (unregistering): Port device batadv1 removed [ 352.010744][ T6470] team0 (unregistering): Port device team_slave_1 removed [ 352.055149][ T6470] team0 (unregistering): Port device team_slave_0 removed [ 352.458882][T16932] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 352.591331][T16657] veth0_vlan: entered promiscuous mode [ 352.687332][T16657] veth1_vlan: entered promiscuous mode [ 352.711847][T16943] syzkaller0: entered promiscuous mode [ 352.752767][T16943] syzkaller0: entered allmulticast mode [ 352.782974][T16941] netlink: 210944 bytes leftover after parsing attributes in process `syz.3.2975'. [ 352.853454][T16943] tipc: Enabled bearer , priority 0 [ 352.884135][T16940] tipc: Resetting bearer [ 352.925388][T16940] tipc: Disabling bearer [ 352.969510][T16657] veth0_macvtap: entered promiscuous mode [ 353.003177][T16657] veth1_macvtap: entered promiscuous mode [ 353.047659][ T6470] IPVS: stop unused estimator thread 0... [ 353.091867][T16657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.120238][T16958] netlink: 'syz.5.2979': attribute type 1 has an invalid length. [ 353.147612][T16958] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2979'. [ 353.172131][T16657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.230664][T14079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.248503][T14079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.266252][T16954] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2977'. [ 353.275913][T14079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.314096][T14079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.495854][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.504126][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.609304][T14073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.629217][T14073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.882957][ T6930] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 353.891707][ T6930] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 353.901405][ T6930] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 353.909489][ T6930] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 353.921353][ T6930] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 353.930303][ T6930] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 353.946351][ T6930] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 354.528111][T16998] netlink: 'syz.2.2991': attribute type 1 has an invalid length. [ 354.537034][T16998] netlink: 'syz.2.2991': attribute type 2 has an invalid length. [ 354.544842][T16998] netlink: 'syz.2.2991': attribute type 1 has an invalid length. [ 354.689026][ T6334] IPVS: starting estimator thread 0... [ 354.748479][T17009] tipc: Enabled bearer , priority 0 [ 354.805868][T17011] IPVS: using max 27 ests per chain, 64800 per kthread [ 355.030978][T17024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2997'. [ 355.054476][T17024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2997'. [ 355.171935][T17005] tipc: Disabling bearer [ 355.793004][T17064] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3008'. [ 356.135361][T17088] delete_channel: no stack [ 356.298116][T17096] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 356.354467][T17098] bridge7: entered promiscuous mode [ 356.359825][T17098] bridge7: entered allmulticast mode [ 356.390916][T17102] netlink: 'syz.2.3022': attribute type 83 has an invalid length. [ 356.400170][T17102] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 356.644607][T17111] netlink: 'syz.5.3026': attribute type 63 has an invalid length. [ 356.654144][T17111] netlink: 'syz.5.3026': attribute type 63 has an invalid length. [ 356.667440][T17111] veth1_to_bridge: mtu less than device minimum [ 356.718395][T17118] netlink: 'syz.2.3028': attribute type 12 has an invalid length. [ 356.751375][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'. [ 356.775527][T17118] netlink: 'syz.2.3028': attribute type 12 has an invalid length. [ 356.779589][ T3495] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.793427][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'. [ 356.803319][ T3495] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.834234][ T3495] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.847507][ T3495] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.902109][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'. [ 357.047858][ T5149] Bluetooth: hci4: command tx timeout [ 357.138038][T17130] netlink: 'syz.3.3034': attribute type 1 has an invalid length. [ 357.170379][T17133] netlink: 'syz.3.3034': attribute type 1 has an invalid length. [ 357.186584][T17139] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3035'. [ 357.195702][T17139] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3035'. [ 357.218906][T17130] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3034'. [ 357.247595][T17133] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3034'. [ 357.547116][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.557865][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.567084][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.575182][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.583275][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.772308][T17151] wg1 speed is unknown, defaulting to 1000 [ 357.914363][T17173] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20001 [ 357.921306][ T6110] IPVS: starting estimator thread 0... [ 357.944573][T17179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3043'. [ 357.964027][T17173] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 357.973389][T17178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3043'. [ 358.046530][T17178] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 358.056261][T17176] IPVS: using max 26 ests per chain, 62400 per kthread [ 358.495909][T17151] chnl_net:caif_netlink_parms(): no params data found [ 358.691999][T17151] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.736310][T17151] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.743703][T17151] bridge_slave_0: entered allmulticast mode [ 358.795678][T17151] bridge_slave_0: entered promiscuous mode [ 358.815022][T17151] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.832833][T17151] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.850791][T17151] bridge_slave_1: entered allmulticast mode [ 358.878417][T17151] bridge_slave_1: entered promiscuous mode [ 359.011903][T17151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.055830][T17151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.222901][T17151] team0: Port device team_slave_0 added [ 359.260522][T17151] team0: Port device team_slave_1 added [ 359.390583][T17151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.416258][T17151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.506435][T17151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.539008][T17151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.576425][T17151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.606327][ T5149] Bluetooth: hci3: command tx timeout [ 359.636425][T17151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.751919][T17151] hsr_slave_0: entered promiscuous mode [ 359.780309][T17151] hsr_slave_1: entered promiscuous mode [ 359.798341][T17151] debugfs: 'hsr0' already exists in 'hsr' [ 359.808697][T17151] Cannot create hsr debugfs directory [ 360.580923][T17151] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 360.622286][T17151] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 360.651720][T17151] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 360.692498][T17151] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 361.115503][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 361.134132][T17151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.190009][T17151] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.219530][T14078] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.226819][T14078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.236525][T17204] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3050'. [ 361.283754][T14078] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.291067][T14078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.333819][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3047'. [ 361.345072][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3047'. [ 361.376911][T17203] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3049'. [ 361.390287][T17209] validate_nla: 3 callbacks suppressed [ 361.390305][T17209] netlink: 'syz.5.3047': attribute type 3 has an invalid length. [ 361.688366][T17223] sctp: [Deprecated]: syz.2.3054 (pid 17223) Use of int in maxseg socket option. [ 361.688366][T17223] Use struct sctp_assoc_value instead [ 361.694444][ T5149] Bluetooth: hci3: command tx timeout [ 362.019403][T17245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3058'. [ 362.058179][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3058'. [ 362.219171][T17253] syzkaller0: entered promiscuous mode [ 362.241234][T17253] syzkaller0: entered allmulticast mode [ 362.291267][T17151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.310378][T17260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.569309][T17272] bond1: option min_links: invalid value (18446744073709551614) [ 362.578412][T17272] bond1: option min_links: allowed values 0 - 2147483647 [ 362.592014][T17272] bond1 (unregistering): Released all slaves [ 362.631781][ T6334] IPVS: starting estimator thread 0... [ 362.690238][T17151] veth0_vlan: entered promiscuous mode [ 362.708120][T17151] veth1_vlan: entered promiscuous mode [ 362.738719][T17276] IPVS: using max 26 ests per chain, 62400 per kthread [ 362.742962][T17151] veth0_macvtap: entered promiscuous mode [ 362.764176][T17151] veth1_macvtap: entered promiscuous mode [ 362.787222][T17151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.803917][T17151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.825300][ T3495] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.835383][ T3495] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.848838][ T3495] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.858484][ T3495] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.015645][T14077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.033936][T14077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.109875][T14073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.139636][T14073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.175964][T17280] netlink: 'syz.5.3068': attribute type 15 has an invalid length. [ 363.200446][T17280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3068'. [ 363.244621][T17280] netlink: 'syz.5.3068': attribute type 15 has an invalid length. [ 363.254258][T14087] netdevsim netdevsim5 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 363.272213][T14087] netdevsim netdevsim5 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 363.297835][T17280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3068'. [ 363.318772][T14087] netdevsim netdevsim5 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 363.352196][T14087] netdevsim netdevsim5 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 363.757738][T17298] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3072'. [ 363.766813][ T5149] Bluetooth: hci3: command tx timeout [ 364.019977][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.031305][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.042412][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.051332][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.060249][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.167406][T17308] netlink: 'syz.5.3076': attribute type 14 has an invalid length. [ 364.185681][T17301] wg1 speed is unknown, defaulting to 1000 [ 364.192740][T17308] netlink: 'syz.5.3076': attribute type 13 has an invalid length. [ 364.237920][T17308] netlink: 'syz.5.3076': attribute type 14 has an invalid length. [ 364.266180][T17308] netlink: 'syz.5.3076': attribute type 13 has an invalid length. [ 364.288048][T17310] syzkaller0: entered promiscuous mode [ 364.293599][T17310] syzkaller0: entered allmulticast mode [ 364.309875][T17308] netlink: 'syz.5.3076': attribute type 14 has an invalid length. [ 364.361153][T17308] netlink: 'syz.5.3076': attribute type 13 has an invalid length. [ 364.419716][T17308] netlink: 'syz.5.3076': attribute type 14 has an invalid length. [ 364.458007][T17310] can: request_module (can-proto-0) failed. [ 364.672210][T17301] chnl_net:caif_netlink_parms(): no params data found [ 364.912957][ T6335] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x1 [ 364.932426][ T6335] hid-generic 0005:0C49:1012.0002: ignoring exceeding usage max [ 364.969657][ T6335] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x4 [ 364.989273][ T6335] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x5 [ 365.017729][ T6335] hid-generic 0005:0C49:1012.0002: reserved main item tag 0xd [ 365.017985][T17301] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.025270][ T6335] hid-generic 0005:0C49:1012.0002: item fetching failed at offset 31/106 [ 365.042935][T17301] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.051731][T17301] bridge_slave_0: entered allmulticast mode [ 365.072740][ T6335] hid-generic 0005:0C49:1012.0002: probe with driver hid-generic failed with error -22 [ 365.074036][T17301] bridge_slave_0: entered promiscuous mode [ 365.148866][T17301] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.162787][T17301] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.172467][T17301] bridge_slave_1: entered allmulticast mode [ 365.181563][T17301] bridge_slave_1: entered promiscuous mode [ 365.195324][T17336] openvswitch: netlink: Message has -2 unknown bytes. [ 365.388112][T17301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.403069][T14079] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.454743][T17301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.490742][T14073] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.544900][T17344] batadv1: entered allmulticast mode [ 365.658553][ T3495] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.684201][T17301] team0: Port device team_slave_0 added [ 365.759993][T14077] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.777348][T17301] team0: Port device team_slave_1 added [ 365.846395][ T5839] Bluetooth: hci3: command tx timeout [ 365.894570][T17301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.920091][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.962582][T17301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.089585][ T5839] Bluetooth: hci7: command tx timeout [ 366.333108][T14080] team0: Port device gtp1 removed [ 366.710407][T14080] bond0 (unregistering): Released all slaves [ 366.734556][T14080] bond1 (unregistering): Released all slaves [ 366.780086][T14080] bond2 (unregistering): Released all slaves [ 366.803504][T14080] bond3 (unregistering): Released all slaves [ 366.931131][T14080] bond4 (unregistering): Released all slaves [ 366.945676][T14080] bond5 (unregistering): Released all slaves [ 366.960831][T14080] bond6 (unregistering): Released all slaves [ 367.069342][T14080] bond7 (unregistering): Released all slaves [ 367.085376][T14080] bond8 (unregistering): Released all slaves [ 367.100122][T14080] bond9 (unregistering): Released all slaves [ 367.210254][T14080] bond10 (unregistering): Released all slaves [ 367.240792][T17301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.257246][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.287549][T17301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.498881][T14080] : left promiscuous mode [ 367.510118][T17378] __nla_validate_parse: 70 callbacks suppressed [ 367.510139][T17378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3095'. [ 367.591718][T17374] pim6reg1: entered promiscuous mode [ 367.606495][T17374] pim6reg1: entered allmulticast mode [ 367.701794][T17301] hsr_slave_0: entered promiscuous mode [ 367.714396][T17301] hsr_slave_1: entered promiscuous mode [ 367.727319][T17301] debugfs: 'hsr0' already exists in 'hsr' [ 367.733256][T17301] Cannot create hsr debugfs directory [ 367.764888][T14080] tipc: Left network mode [ 368.167553][ T5839] Bluetooth: hci7: command tx timeout [ 368.240104][T17301] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.317362][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3106'. [ 368.336539][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3106'. [ 368.346438][T17404] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.364833][T17301] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.537327][T17301] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.617308][T14080] hsr_slave_0: left promiscuous mode [ 368.636899][T14080] hsr_slave_1: left promiscuous mode [ 368.773921][T14080] pim6reg (unregistering): left allmulticast mode [ 369.201399][T17434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3111'. [ 369.711944][T17434] hsr_slave_1 (unregistering): left promiscuous mode [ 369.764435][T17301] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.159481][T14080] IPVS: stop unused estimator thread 0... [ 370.212228][T17301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 370.246178][ T5839] Bluetooth: hci7: command tx timeout [ 370.255040][T17301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 370.291792][T17301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 370.352102][T17301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 370.390109][T17461] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3117'. [ 370.508325][T17472] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3118'. [ 370.642807][T17301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.718604][T17301] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.773114][T14076] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.780582][T14076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.797692][T17480] validate_nla: 59 callbacks suppressed [ 370.797713][T17480] netlink: 'syz.6.3120': attribute type 1 has an invalid length. [ 370.878794][T14077] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.886108][T14077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.974777][T17488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3121'. [ 371.059013][T17489] gretap1: entered allmulticast mode [ 371.461744][T17503] bond0: entered promiscuous mode [ 371.467236][T17503] bond_slave_0: entered promiscuous mode [ 371.473202][T17503] bond_slave_1: entered promiscuous mode [ 371.485425][T17503] batadv0: entered promiscuous mode [ 371.498384][T17503] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 371.509697][T17503] bond0: left promiscuous mode [ 371.525618][T17503] bond_slave_0: left promiscuous mode [ 371.546411][T17503] bond_slave_1: left promiscuous mode [ 371.569995][T17503] batadv0: left promiscuous mode [ 371.665533][T17301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.782683][T17301] veth0_vlan: entered promiscuous mode [ 371.809134][T17301] veth1_vlan: entered promiscuous mode [ 371.933107][T17301] veth0_macvtap: entered promiscuous mode [ 371.957755][T17301] veth1_macvtap: entered promiscuous mode [ 371.969486][T17526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'. [ 372.015716][T17301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.045073][T17301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.070428][T14077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.081963][T17526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3130'. [ 372.097987][T14077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.144962][T14077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.155661][T17532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3133'. [ 372.165308][T14077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.326654][ T5839] Bluetooth: hci7: command tx timeout [ 372.414223][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.438048][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.513007][T17542] netlink: 'syz.2.3137': attribute type 19 has an invalid length. [ 374.100157][T14080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.110571][T14080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.267801][T17548] __nla_validate_parse: 1 callbacks suppressed [ 374.267820][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3139'. [ 374.287050][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3138'. [ 374.295948][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3138'. [ 374.325152][T17551] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 374.357718][T17545] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 374.371614][T17545] bond1 (unregistering): Released all slaves [ 374.653503][T17563] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3142'. [ 374.980011][T17584] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3149'. [ 375.187233][T17590] netlink: 'syz.6.3153': attribute type 1 has an invalid length. [ 375.245359][T17596] netlink: 'syz.5.3154': attribute type 1 has an invalid length. [ 375.254277][T17590] bond1: entered promiscuous mode [ 375.255128][T17596] netlink: 'syz.5.3154': attribute type 2 has an invalid length. [ 375.261901][T17590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.284404][T17590] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3153'. [ 375.365318][T17600] netlink: 'syz.3.3155': attribute type 1 has an invalid length. [ 375.397158][T17596] netlink: 'syz.5.3154': attribute type 1 has an invalid length. [ 375.546981][T17604] tipc: Started in network mode [ 375.551954][T17604] tipc: Node identity e0000001, cluster identity 4711 [ 375.584457][T17604] tipc: Enabling of bearer rejected, failed to enable media [ 376.023079][T17623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3163'. [ 376.211825][T17633] bond2: Removing last ns target with arp_interval on [ 376.650971][T17658] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3173'. [ 376.884101][T17667] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3176'. [ 377.347354][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.359197][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.368119][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.382507][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.391251][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.694986][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3187'. [ 377.745595][T17700] netlink: 'syz.2.3185': attribute type 21 has an invalid length. [ 378.284429][T17684] chnl_net:caif_netlink_parms(): no params data found [ 378.616774][T17741] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.625618][T17741] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.672465][T17684] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.680078][T17684] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.697381][T17684] bridge_slave_0: entered allmulticast mode [ 378.706847][T17684] bridge_slave_0: entered promiscuous mode [ 378.754292][T17684] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.778573][T17684] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.791926][T17684] bridge_slave_1: entered allmulticast mode [ 378.813630][T17684] bridge_slave_1: entered promiscuous mode [ 378.924085][T17757] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 379.033534][T17684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.062225][T17684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.072122][T17757] syzkaller0: entered promiscuous mode [ 379.078417][T17757] syzkaller0: entered allmulticast mode [ 379.145860][T17770] IPVS: set_ctl: invalid protocol: 8 172.30.1.7:20005 [ 379.224568][T17684] team0: Port device team_slave_0 added [ 379.265967][T17684] team0: Port device team_slave_1 added [ 379.358079][T17784] netlink: 'syz.2.3210': attribute type 27 has an invalid length. [ 379.373378][T17785] netlink: 'syz.2.3210': attribute type 27 has an invalid length. [ 379.391062][T17779] __nla_validate_parse: 4 callbacks suppressed [ 379.391082][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3208'. [ 379.416447][T17684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.433936][T17684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.469219][ T5149] Bluetooth: hci2: command tx timeout [ 379.476600][T17684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.560244][T17790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3212'. [ 379.579407][T17684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.587554][T17684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.615482][T17684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.804625][T17684] hsr_slave_0: entered promiscuous mode [ 379.833262][T17684] hsr_slave_1: entered promiscuous mode [ 379.845840][T17684] debugfs: 'hsr0' already exists in 'hsr' [ 379.862901][T17684] Cannot create hsr debugfs directory [ 380.155200][T17819] netlink: 'syz.5.3221': attribute type 1 has an invalid length. [ 380.207360][T17819] 8021q: adding VLAN 0 to HW filter on device bond8 [ 380.238050][T17822] bond8: (slave gretap1): making interface the new active one [ 380.249200][T17822] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 380.262365][T17824] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3223'. [ 380.548826][T17684] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 380.564654][T17684] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 380.581457][T17684] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 380.599686][T17684] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 380.665336][T17840] netlink: 'syz.6.3226': attribute type 33 has an invalid length. [ 380.753507][T17840] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 380.772181][T17840] bond3 (unregistering): Released all slaves [ 381.058480][T17684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.080598][T17853] team0: Device macvtap0 is already an upper device of the team interface [ 381.240429][T17684] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.362206][T14087] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.369412][T14087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.433817][T14087] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.441142][T14087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.536870][ T5149] Bluetooth: hci2: command tx timeout [ 381.580915][T17872] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 381.795582][T17684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.838127][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3235'. [ 382.162102][T17684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.353324][T17901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3240'. [ 382.383447][T17905] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3241'. [ 382.441337][T17907] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3242'. [ 382.474533][T17905] batman_adv: batadv0: Adding interface: veth5 [ 382.493386][T17911] netlink: 'syz.3.3240': attribute type 1 has an invalid length. [ 382.501824][T17905] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.501985][T17905] batman_adv: batadv0: Interface activated: veth5 [ 382.556826][T17911] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3240'. [ 382.599368][T17907] vlan2: entered allmulticast mode [ 382.606894][T17907] gretap0: entered allmulticast mode [ 382.745481][T17917] syzkaller1: entered promiscuous mode [ 382.758751][T17917] syzkaller1: entered allmulticast mode [ 382.784226][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3244'. [ 382.851464][T17919] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 382.864875][T17919] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 382.876165][T17919] gretap1: entered promiscuous mode [ 382.881514][T17919] gretap1: entered allmulticast mode [ 382.933865][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 383.139976][T17684] veth0_vlan: entered promiscuous mode [ 383.184459][T17684] veth1_vlan: entered promiscuous mode [ 383.292894][T17938] syzkaller1: entered promiscuous mode [ 383.306595][T17938] syzkaller1: entered allmulticast mode [ 383.321243][T17938] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 383.353355][T17937] netlink: 'syz.5.3250': attribute type 1 has an invalid length. [ 383.365275][T17937] netlink: 'syz.5.3250': attribute type 7 has an invalid length. [ 383.379221][T17937] netlink: 'syz.5.3250': attribute type 8 has an invalid length. [ 383.391411][T17937] NCSI netlink: No device for ifindex 65584 [ 383.484469][T17949] tipc: Started in network mode [ 383.494596][T17949] tipc: Node identity 3a29142bb903, cluster identity 4711 [ 383.506834][T17949] tipc: Enabled bearer , priority 0 [ 383.514142][T17952] syzkaller0: entered promiscuous mode [ 383.521538][T17952] syzkaller0: entered allmulticast mode [ 383.549563][T17950] bridge1: entered promiscuous mode [ 383.555020][T17950] bridge1: entered allmulticast mode [ 383.594727][T17938] tipc: Resetting bearer [ 383.607156][ T5149] Bluetooth: hci2: command tx timeout [ 383.644503][T17684] veth0_macvtap: entered promiscuous mode [ 383.671596][T17936] tipc: Resetting bearer [ 383.737921][T17936] tipc: Disabling bearer [ 383.773187][T17958] netlink: 'syz.3.3253': attribute type 4 has an invalid length. [ 383.812256][T17684] veth1_macvtap: entered promiscuous mode [ 383.867749][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.875250][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.884675][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 383.910885][T17684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.940789][T17684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.977479][T14076] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.003462][T14076] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.043102][T14076] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.072759][T14076] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.199977][T14080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.215303][T14080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.249159][ T1941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.257675][ T1941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.686620][ T5149] Bluetooth: hci2: command tx timeout [ 409.165986][T17981] __nla_validate_parse: 2 callbacks suppressed [ 409.183959][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3260'. [ 409.195500][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 409.297853][T17991] bridge0: entered allmulticast mode [ 409.680127][T18009] syzkaller0: entered promiscuous mode [ 409.685939][T18009] syzkaller0: entered allmulticast mode [ 409.774317][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3270'. [ 409.848272][T18018] netlink: 'syz.6.3271': attribute type 2 has an invalid length. [ 409.932466][T18018] 9: entered promiscuous mode [ 410.034483][T18024] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 410.253514][T18041] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3278'. [ 410.498431][T18049] xt_CT: No such helper "snmp_trap" [ 410.614952][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3283'. [ 410.928818][T18077] netlink: 'syz.5.3288': attribute type 1 has an invalid length. [ 410.947481][T18076] netlink: 'syz.5.3288': attribute type 1 has an invalid length. [ 411.025236][T18079] netlink: 'syz.3.3289': attribute type 18 has an invalid length. [ 411.054085][ T1941] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.089304][ T1941] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.108032][ T1941] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.123310][ T1941] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.149659][T18088] netlink: 'syz.3.3289': attribute type 15 has an invalid length. [ 411.161003][T18088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3289'. [ 411.263707][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3294'. [ 411.352848][T18100] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 411.389073][T18102] netlink: 'syz.7.3296': attribute type 1 has an invalid length. [ 411.485957][T18102] bond1 (unregistering): Released all slaves [ 411.490969][T18108] xt_hashlimit: size too large, truncated to 1048576 [ 411.566650][T18106] ip6tnl2: entered promiscuous mode [ 411.572111][T18106] ip6tnl2: entered allmulticast mode [ 411.999872][T18129] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3302'. [ 412.050226][T18129] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3302'. [ 412.378701][T18137] ip6gre1: entered allmulticast mode [ 412.626727][T18149] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3309'. [ 413.002043][T18167] ipt_REJECT: TCP_RESET invalid for non-tcp [ 413.094983][T18170] netlink: 'syz.5.3315': attribute type 27 has an invalid length. [ 413.336916][T18186] netlink: 'syz.2.3321': attribute type 1 has an invalid length. [ 413.344870][T18186] netlink: 'syz.2.3321': attribute type 4 has an invalid length. [ 413.677164][T18201] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 414.073482][T18218] netlink: 'syz.6.3332': attribute type 10 has an invalid length. [ 414.149740][T18220] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 414.304503][T18226] __nla_validate_parse: 8 callbacks suppressed [ 414.304525][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3337'. [ 414.369354][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3337'. [ 414.396985][T18229] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3338'. [ 414.473896][T18236] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 414.524462][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3336'. [ 414.616666][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3341'. [ 414.627796][T18242] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3341'. [ 414.654229][T18234] tap0: tun_chr_ioctl cmd 1074025676 [ 414.659898][T18234] tap0: owner set to 0 [ 414.667800][T18234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.690782][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3339'. [ 414.854162][T18248] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 414.870516][T18248] bond4: entered promiscuous mode [ 414.875629][T18248] bond4: entered allmulticast mode [ 414.882010][T18248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.907027][T18258] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3347'. [ 414.965098][T18259] syzkaller1: entered promiscuous mode [ 414.973356][T18249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3344'. [ 415.004241][T18259] syzkaller1: entered allmulticast mode [ 415.037579][T18249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3344'. [ 415.083178][T18261] validate_nla: 2 callbacks suppressed [ 415.083196][T18261] netlink: 'syz.2.3344': attribute type 1 has an invalid length. [ 415.142034][T18270] netlink: 'syz.6.3349': attribute type 10 has an invalid length. [ 415.201724][T18270] team0: Port device geneve0 added [ 415.386638][T18279] netlink: 'syz.7.3353': attribute type 1 has an invalid length. [ 415.789165][T18301] Cannot find add_set index 0 as target [ 415.810916][T18295] bridge_slave_1: left allmulticast mode [ 415.828850][T18295] bridge_slave_1: left promiscuous mode [ 415.834752][T18295] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.870931][T18295] bridge_slave_0: left allmulticast mode [ 415.891845][T18295] bridge_slave_0: left promiscuous mode [ 415.924858][T18295] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.130897][T18315] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 416.137482][T18314] gretap0: entered promiscuous mode [ 416.353704][T18336] netlink: 'syz.2.3366': attribute type 9 has an invalid length. [ 416.431123][T18340] netlink: 'syz.5.3367': attribute type 11 has an invalid length. [ 417.178499][T18375] sctp: [Deprecated]: syz.7.3379 (pid 18375) Use of int in maxseg socket option. [ 417.178499][T18375] Use struct sctp_assoc_value instead [ 417.460626][T18391] netlink: 'syz.5.3383': attribute type 1 has an invalid length. [ 417.634596][T18391] 8021q: adding VLAN 0 to HW filter on device bond10 [ 418.112721][T18433] netlink: 'syz.6.3395': attribute type 12 has an invalid length. [ 418.138432][T18433] netlink: 'syz.6.3395': attribute type 29 has an invalid length. [ 418.204536][T18433] syzkaller0: entered promiscuous mode [ 418.227748][T18433] syzkaller0: entered allmulticast mode [ 418.306922][T18442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.550944][T18465] netlink: 'syz.5.3403': attribute type 4 has an invalid length. [ 418.723369][T18467] netlink: 'syz.7.3404': attribute type 23 has an invalid length. [ 418.943469][T18478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.145759][T18491] netlink: 'syz.5.3411': attribute type 8 has an invalid length. [ 419.758069][T18511] __nla_validate_parse: 18 callbacks suppressed [ 419.758089][T18511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3416'. [ 420.149333][T18523] validate_nla: 1 callbacks suppressed [ 420.149353][T18523] netlink: 'syz.7.3420': attribute type 2 has an invalid length. [ 420.199580][T18524] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3420'. [ 420.362835][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3420'. [ 421.180899][T18555] syzkaller0: entered promiscuous mode [ 421.200219][T18555] syzkaller0: entered allmulticast mode [ 421.358101][T18570] netlink: 'syz.5.3433': attribute type 39 has an invalid length. [ 421.800115][T18606] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3442'. [ 421.872434][T18603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3441'. [ 422.108267][T18617] netlink: 'syz.5.3445': attribute type 15 has an invalid length. [ 422.153036][T18617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3445'. [ 422.194851][T18617] netlink: 'syz.5.3445': attribute type 15 has an invalid length. [ 422.216930][T18617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3445'. [ 422.253604][T18617] netlink: 'syz.5.3445': attribute type 15 has an invalid length. [ 422.277813][T18617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3445'. [ 422.299657][T18617] netlink: 'syz.5.3445': attribute type 15 has an invalid length. [ 422.309994][T18617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3445'. [ 422.320822][T18617] netlink: 'syz.5.3445': attribute type 15 has an invalid length. [ 422.329355][T18617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3445'. [ 422.344203][T18626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.377355][T18617] netlink: 'syz.5.3445': attribute type 15 has an invalid length. [ 422.395758][T18617] netlink: 'syz.5.3445': attribute type 15 has an invalid length. [ 422.429144][T18617] netlink: 'syz.5.3445': attribute type 15 has an invalid length. [ 422.781624][T18644] SET target dimension over the limit! [ 422.822115][T18637] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 426.057112][T18707] validate_nla: 58 callbacks suppressed [ 426.057134][T18707] netlink: 'syz.6.3470': attribute type 1 has an invalid length. [ 426.188375][T18707] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.214525][T18712] vlan2: entered allmulticast mode [ 426.219916][T18712] bond5: entered allmulticast mode [ 426.281123][T18707] bond5: (slave gretap1): making interface the new active one [ 426.301949][T18707] gretap1: entered allmulticast mode [ 426.332927][T18707] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 426.487774][T18720] __nla_validate_parse: 65 callbacks suppressed [ 426.487797][T18720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3473'. [ 426.562244][T18722] netlink: 'syz.6.3474': attribute type 1 has an invalid length. [ 426.624278][T18724] : entered promiscuous mode [ 426.743741][T18726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3476'. [ 426.796963][T18726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3476'. [ 426.997967][T18737] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3480'. [ 427.015361][T18739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3481'. [ 427.302995][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3485'. [ 428.046743][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3491'. [ 428.190154][T18790] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3497'. [ 428.238073][T18784] bond11: Removing last arp target with arp_interval on [ 428.245251][T18784] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 428.290946][T18784] bond11 (unregistering): Released all slaves [ 428.435726][T18797] openvswitch: netlink: EtherType 0 is less than min 600 [ 428.482598][T18799] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 428.493381][ T6335] IPVS: starting estimator thread 0... [ 428.502418][T18799] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 428.526615][T18801] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3500'. [ 428.570872][T18802] netlink: 'syz.6.3501': attribute type 1 has an invalid length. [ 428.623416][T18802] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.627316][T18800] IPVS: using max 25 ests per chain, 60000 per kthread [ 428.844348][T18821] netlink: 'syz.5.3506': attribute type 1 has an invalid length. [ 428.853243][T18821] netlink: 16110 bytes leftover after parsing attributes in process `syz.5.3506'. [ 428.954304][T18823] netlink: 'syz.5.3507': attribute type 6 has an invalid length. [ 428.963381][T18823] netlink: 'syz.5.3507': attribute type 5 has an invalid length. [ 429.052543][T18829] x_tables: duplicate underflow at hook 3 [ 429.061815][T18829] x_tables: duplicate underflow at hook 3 [ 429.307408][T18847] gre0: entered promiscuous mode [ 429.312448][T18847] gre0: entered allmulticast mode [ 429.528717][T18863] netlink: 'syz.6.3517': attribute type 1 has an invalid length. [ 430.181033][T18899] dummy0: entered promiscuous mode [ 430.231419][T18900] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 430.297534][T18900] bond11: (slave lo): Enslaving as a backup interface with an up link [ 430.307775][T18900] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 430.350438][T18891] syzkaller1: entered promiscuous mode [ 430.356594][T18891] syzkaller1: entered allmulticast mode [ 430.486213][ T5149] Bluetooth: hci2: command tx timeout [ 430.560280][T18923] netlink: 'syz.3.3534': attribute type 3 has an invalid length. [ 431.483741][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 431.497749][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 431.506829][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 431.518088][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 431.529593][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 431.828027][T18972] xt_l2tp: v2 tid > 0xffff: 1114244 [ 431.888819][T18972] netlink: 'syz.7.3548': attribute type 12 has an invalid length. [ 432.255475][T18984] veth0: entered promiscuous mode [ 432.316081][ T6108] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.329590][ T6108] netdevsim netdevsim5 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 432.343471][ T6108] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 432.361094][ T6108] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 432.413300][T18986] __nla_validate_parse: 12 callbacks suppressed [ 432.413320][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 432.580876][T18989] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 432.748495][ T6108] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.761163][ T6108] netdevsim netdevsim5 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 432.782667][ T6108] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 432.824243][ T6108] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 432.989311][ T6108] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.024816][ T6108] netdevsim netdevsim5 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 433.047334][ T6108] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 433.074043][ T6108] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 433.141262][T18962] chnl_net:caif_netlink_parms(): no params data found [ 433.212283][ T6108] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.257490][ T6108] netdevsim netdevsim5 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 433.283560][ T6108] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 433.304630][ T6108] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 433.485897][T19024] syzkaller0: entered promiscuous mode [ 433.500482][T19024] syzkaller0: entered allmulticast mode [ 433.607548][ T5839] Bluetooth: hci8: command tx timeout [ 433.632162][T14069] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.650247][T19034] netlink: 'syz.2.3560': attribute type 10 has an invalid length. [ 433.658796][T19034] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3560'. [ 433.722660][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3563'. [ 433.831606][ T36] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.988964][T18962] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.009922][T18962] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.028765][T18962] bridge_slave_0: entered allmulticast mode [ 434.043535][T18962] bridge_slave_0: entered promiscuous mode [ 434.125510][T18962] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.133729][T18962] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.143004][T18962] bridge_slave_1: entered allmulticast mode [ 434.155408][T18962] bridge_slave_1: entered promiscuous mode [ 434.165193][ T3528] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.181605][T19050] netlink: 'syz.7.3566': attribute type 11 has an invalid length. [ 434.214874][T14081] netdevsim netdevsim5 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.235100][T19050] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3566'. [ 434.577244][T19071] delete_channel: no stack [ 434.691446][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3571'. [ 434.994096][ T6108] bond8 (unregistering): (slave gretap1): Releasing active interface [ 435.191661][ T6108] team0: Port device geneve0 removed [ 435.686880][ T5149] Bluetooth: hci8: command tx timeout [ 435.697820][ T6108] ` (unregistering): Released all slaves [ 435.805846][ T6108] bond1 (unregistering): Released all slaves [ 435.827831][ T6108] bond0 (unregistering): Released all slaves [ 435.843052][ T6108] bond2 (unregistering): Released all slaves [ 435.865070][ T6108] bond3 (unregistering): Released all slaves [ 435.980370][ T6108] bond4 (unregistering): (slave veth7): Releasing backup interface [ 435.994892][ T6108] bond4 (unregistering): Released all slaves [ 436.011837][ T6108] bond5 (unregistering): Released all slaves [ 436.026855][ T6108] bond6 (unregistering): Released all slaves [ 436.046297][ T6108] bond7 (unregistering): Released all slaves [ 436.150565][ T6108] bond8 (unregistering): Released all slaves [ 436.164592][ T6108] bond9 (unregistering): Released all slaves [ 436.268319][ T6108] bond10 (unregistering): Released all slaves [ 436.283638][ T6108] bond11 (unregistering): (slave lo): Releasing backup interface [ 436.291985][ T6108] bond11 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 436.310410][ T6108] bond11 (unregistering): Released all slaves [ 436.343358][T18962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.359600][T18962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.378312][T19075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.438344][T19069] : entered promiscuous mode [ 436.677155][T18962] team0: Port device team_slave_0 added [ 436.697188][T18962] team0: Port device team_slave_1 added [ 436.900441][T18962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.918628][T18962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.948722][T18962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.965177][T18962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.975470][T18962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.034106][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3587'. [ 437.088309][T18962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.140624][T19117] bridge0: entered promiscuous mode [ 437.155765][T19117] macsec2: entered promiscuous mode [ 437.188449][T19117] macsec2: entered allmulticast mode [ 437.205814][T19117] bridge0: entered allmulticast mode [ 437.224649][T19117] bridge0: port 3(macsec2) entered blocking state [ 437.258499][T19117] bridge0: port 3(macsec2) entered disabled state [ 437.288298][T19117] bridge0: left allmulticast mode [ 437.315069][T19117] bridge0: left promiscuous mode [ 437.602390][T19145] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3595'. [ 437.697218][T18962] hsr_slave_0: entered promiscuous mode [ 437.716142][T18962] hsr_slave_1: entered promiscuous mode [ 437.722774][T18962] debugfs: 'hsr0' already exists in 'hsr' [ 437.750234][T18962] Cannot create hsr debugfs directory [ 437.767455][ T5839] Bluetooth: hci8: command tx timeout [ 438.069302][T19152] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.077341][T19152] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.475699][T19152] bridge_slave_0: left allmulticast mode [ 438.483809][T19152] bridge_slave_0: left promiscuous mode [ 438.493167][T19152] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.524978][T19152] bridge_slave_1: left allmulticast mode [ 438.531156][T19152] bridge_slave_1: left promiscuous mode [ 438.538986][T19152] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.569299][T19152] bond0: (slave bond_slave_0): Releasing backup interface [ 438.589790][T19152] bond0: (slave bond_slave_1): Releasing backup interface [ 438.609816][T19152] team0: Port device team_slave_0 removed [ 438.626992][T19152] team0: Port device team_slave_1 removed [ 438.639040][T19152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.651934][T19152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.679792][T19152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.706582][T19152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.724850][T19152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 438.800929][T19186] bridge_slave_0: left allmulticast mode [ 438.839151][T19186] bridge_slave_0: left promiscuous mode [ 438.845029][T19186] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.897012][T19186] bridge_slave_1: left allmulticast mode [ 438.913081][T19186] bridge_slave_1: left promiscuous mode [ 438.925909][T19186] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.942174][T19186] bond0: (slave bond_slave_0): Releasing backup interface [ 438.959126][T19186] bond0: (slave bond_slave_1): Releasing backup interface [ 438.997845][T19186] team0: Port device team_slave_0 removed [ 439.014974][T19186] team0: Port device team_slave_1 removed [ 439.021954][T19186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.030612][T19186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.041013][T19186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.050626][T19186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.069523][T19186] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 439.129895][T19207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3601'. [ 439.172402][T19200] netem: unknown loss type 0 [ 439.178192][T19200] netem: change failed [ 439.208534][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'. [ 439.236351][ T6108] : left promiscuous mode [ 439.346221][ T6108] tipc: Left network mode [ 439.384261][ T6336] IPVS: starting estimator thread 0... [ 439.495083][T19214] IPVS: using max 24 ests per chain, 57600 per kthread [ 439.626888][T19231] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.850956][ T5839] Bluetooth: hci8: command tx timeout [ 440.054251][T19251] netlink: 'syz.3.3610': attribute type 39 has an invalid length. [ 440.149617][T19248] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 440.419995][T18962] netdevsim netdevsim5 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.614467][T18962] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.761192][T18962] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.927149][T19279] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20000 [ 441.113168][T19285] netlink: 81 bytes leftover after parsing attributes in process `syz.7.3618'. [ 441.241682][T19291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3621'. [ 441.313761][T18962] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.476246][ T6108] hsr_slave_0: left promiscuous mode [ 441.520926][ T6108] veth1_macvtap: left promiscuous mode [ 441.531731][T19308] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3624'. [ 441.556683][ T6108] veth1_vlan: left promiscuous mode [ 441.582605][ T6108] veth0_vlan: left promiscuous mode [ 441.741472][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3627'. [ 441.810344][T19323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3627'. [ 442.804649][T19327] ip6erspan0: entered promiscuous mode [ 442.828612][T19327] ip6erspan0: entered allmulticast mode [ 443.304769][T18962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 443.353548][T18962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 443.421553][T18962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 443.515598][T18962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 443.595814][ T6108] IPVS: stop unused estimator thread 0... [ 443.755445][T19385] tipc: Enabled bearer , priority 0 [ 444.011560][T19384] tipc: Disabling bearer [ 444.480236][T19410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3645'. [ 444.531480][T18962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.659254][T18962] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.683707][T19420] netlink: 'syz.7.3649': attribute type 1 has an invalid length. [ 444.850700][T14069] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.858046][T14069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.021858][T14077] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.029092][T14077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.291349][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.298205][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.308026][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 445.803199][T19470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3659'. [ 445.861682][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3661'. [ 446.038437][T18962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.223471][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3666'. [ 446.257440][T19496] netlink: 'syz.7.3666': attribute type 1 has an invalid length. [ 446.331664][T19494] ip6gre2: entered promiscuous mode [ 446.399301][T19500] syzkaller1: entered promiscuous mode [ 446.414663][T19509] netlink: 'syz.3.3668': attribute type 1 has an invalid length. [ 446.416582][T19500] syzkaller1: entered allmulticast mode [ 446.450204][T19502] netlink: 'syz.2.3667': attribute type 4 has an invalid length. [ 446.481839][T19507] netlink: 'syz.2.3667': attribute type 4 has an invalid length. [ 446.636981][T19515] sctp: [Deprecated]: syz.3.3670 (pid 19515) Use of int in maxseg socket option. [ 446.636981][T19515] Use struct sctp_assoc_value instead [ 446.673405][T19514] netlink: 'syz.7.3669': attribute type 11 has an invalid length. [ 446.701395][T19514] netlink: 'syz.7.3669': attribute type 11 has an invalid length. [ 446.713861][T19514] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3669'. [ 446.739369][T19517] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3671'. [ 446.769279][T19517] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3671'. [ 447.527835][T19552] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3677'. [ 447.618067][T19547] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3677'. [ 447.775044][T19561] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3680'. [ 447.799684][T19561] tipc: Invalid UDP bearer configuration [ 447.799766][T19561] tipc: Enabling of bearer rejected, failed to enable media [ 447.964557][T18962] veth0_vlan: entered promiscuous mode [ 448.021188][T18962] veth1_vlan: entered promiscuous mode [ 448.125393][T18962] veth0_macvtap: entered promiscuous mode [ 448.149389][T18962] veth1_macvtap: entered promiscuous mode [ 448.239823][T18962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.378144][T18962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.494055][T14069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.531707][T14077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.578726][T14077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.649182][T14077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.677111][T19598] tipc: Started in network mode [ 448.682063][T19598] tipc: Node identity d26d41d450e5, cluster identity 4711 [ 448.693305][T19598] tipc: Enabled bearer , priority 0 [ 448.722295][T19598] syzkaller0: entered promiscuous mode [ 448.753063][T19598] syzkaller0: entered allmulticast mode [ 448.870034][T19598] tipc: Resetting bearer [ 448.933457][T19597] tipc: Resetting bearer [ 448.988334][T19597] tipc: Disabling bearer [ 449.034623][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.073745][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.173025][T19618] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 449.218672][T14073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.253320][T14073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.424294][T19630] netlink: 'syz.7.3692': attribute type 2 has an invalid length. [ 449.748112][T19655] __nla_validate_parse: 1 callbacks suppressed [ 449.748130][T19655] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3696'. [ 449.763782][T19655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3696'. [ 450.875485][T19706] netlink: 'syz.6.3705': attribute type 29 has an invalid length. [ 451.034241][T19715] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3708'. [ 451.064456][T19712] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 451.176542][T19718] tipc: Failed to remove unknown binding: 66,1,1/0:1451623167/1451623169 [ 451.185613][T19718] tipc: Failed to remove unknown binding: 66,1,1/0:1451623167/1451623169 [ 451.405393][T19733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.798805][T19756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3721'. [ 451.899878][T19766] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3722'. [ 452.065921][T19778] Bluetooth: MGMT ver 1.23 [ 452.320238][T19791] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3729'. [ 452.396630][T19795] netlink: 'syz.2.3728': attribute type 1 has an invalid length. [ 452.482308][T19803] netlink: 288 bytes leftover after parsing attributes in process `syz.7.3731'. [ 452.493086][T19804] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3731'. [ 452.704702][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3736'. [ 452.729530][T19819] netlink: 'syz.7.3736': attribute type 1 has an invalid length. [ 452.796369][T19819] bond4: (slave veth5): Enslaving as an active interface with a down link [ 452.808428][T19819] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3736'. [ 452.821242][T19819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.154134][T19843] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 453.199618][T19843] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 453.249144][T19844] syzkaller0: entered promiscuous mode [ 453.254740][T19844] syzkaller0: entered allmulticast mode [ 453.475440][T19857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.760398][T19872] pim6reg: entered allmulticast mode [ 453.785870][T19875] netlink: 'syz.2.3755': attribute type 1 has an invalid length. [ 453.801929][T19875] netlink: 'syz.2.3755': attribute type 1 has an invalid length. [ 453.828790][T19872] !: renamed from bond_slave_0 (while UP) [ 454.435902][T19901] xt_hashlimit: size too large, truncated to 1048576 [ 454.995266][T19913] openvswitch: netlink: Message has 4 unknown bytes. [ 455.067601][T19914] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 455.092559][T19914] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 455.298593][T19920] xt_ecn: cannot match TCP bits for non-tcp packets [ 455.305385][T19923] gre0: entered promiscuous mode [ 455.323259][T19923] gre0: entered allmulticast mode [ 455.739028][T19937] __nla_validate_parse: 8 callbacks suppressed [ 455.739050][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3777'. [ 455.804247][T19941] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3778'. [ 455.878483][T19937] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3777'. [ 455.990111][T19937] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 456.040899][T19937] bond5 (unregistering): Released all slaves [ 456.580775][T19963] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 456.788222][T19976] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3787'. [ 457.023145][T19980] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 457.035588][T19992] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3788'. [ 457.056266][T19980] bond7 (unregistering): Released all slaves [ 457.229013][T20002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3793'. [ 457.239555][T20002] netlink: 'syz.5.3793': attribute type 8 has an invalid length. [ 457.346892][T20005] netlink: 'syz.7.3795': attribute type 10 has an invalid length. [ 457.371175][T20005] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 457.558208][T20020] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 457.579273][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3799'. [ 457.608995][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 457.862650][T20030] tipc: Started in network mode [ 457.872630][T20034] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3803'. [ 457.893519][T20030] tipc: Node identity 0eefbe08643d, cluster identity 4711 [ 457.907200][T20030] tipc: Enabled bearer , priority 0 [ 457.988419][T20037] netlink: 14544 bytes leftover after parsing attributes in process `syz.6.3804'. [ 458.082489][T20029] tipc: Disabling bearer [ 458.236999][T20045] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3805'. [ 458.252290][T20045] veth0_macvtap: left promiscuous mode [ 458.568822][ T30] audit: type=1107 audit(1766397195.916:2): pid=20056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 459.353179][T20081] gre0: left promiscuous mode [ 459.358727][T20081] gre0: left allmulticast mode [ 459.580693][T20081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.611658][T20081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.837534][T20081] vlan2: left allmulticast mode [ 459.842578][T20081] gretap0: left allmulticast mode [ 459.849616][T20081] bridge1: left promiscuous mode [ 459.854737][T20081] bridge1: left allmulticast mode [ 459.915177][T20081] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 459.923033][T20081] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 459.945733][ T38] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.966338][ T38] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.975383][ T38] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.037943][ T38] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.048051][ T38] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.058881][ T38] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.070111][ T38] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.080980][ T38] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.829951][T20120] gretap0: left promiscuous mode [ 460.886264][ T5149] Bluetooth: hci8: command tx timeout [ 460.927387][T20120] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.935215][T20120] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.040519][T20098] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 461.272529][T20138] __nla_validate_parse: 6 callbacks suppressed [ 461.272550][T20138] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3835'. [ 461.339325][T20140] tipc: Enabling of bearer rejected, failed to enable media [ 461.383526][T20141] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3835'. [ 461.421145][T20141] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3835'. [ 461.442680][T20143] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3837'. [ 461.535529][T20143] bond7: entered allmulticast mode [ 461.542814][T20143] 8021q: adding VLAN 0 to HW filter on device bond7 [ 462.161739][T20165] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3844'. [ 462.177162][T20167] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3845'. [ 462.247355][ T5149] Bluetooth: hci2: command 0x0401 tx timeout [ 462.331161][T20167] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 462.353915][T20167] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 462.416468][T20175] netlink: 288 bytes leftover after parsing attributes in process `syz.6.3847'. [ 462.921043][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 462.947406][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 462.957256][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 462.959087][T20192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.975885][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 462.985014][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.367370][T20221] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3859'. [ 463.596849][T20216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3858'. [ 464.113690][T20241] gre0: left allmulticast mode [ 464.343942][T20199] chnl_net:caif_netlink_parms(): no params data found [ 464.410782][T20259] xt_TPROXY: Can be used only with -p tcp or -p udp [ 464.800476][T20275] netlink: 'syz.7.3870': attribute type 3 has an invalid length. [ 464.902083][T20199] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.929845][T20199] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.953035][T20199] bridge_slave_0: entered allmulticast mode [ 464.978463][T20199] bridge_slave_0: entered promiscuous mode [ 465.003765][T20199] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.020272][T20199] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.031443][T20199] bridge_slave_1: entered allmulticast mode [ 465.039649][T20199] bridge_slave_1: entered promiscuous mode [ 465.046178][ T5149] Bluetooth: hci5: command tx timeout [ 465.233340][T20199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.689894][T20199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.716718][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3881'. [ 465.730930][T20314] tap0: tun_chr_ioctl cmd 1074025673 [ 465.861991][T20326] geneve3: entered promiscuous mode [ 465.868431][T20326] geneve3: entered allmulticast mode [ 466.054776][T20199] team0: Port device team_slave_0 added [ 466.071853][T20339] netlink: 'syz.7.3884': attribute type 8 has an invalid length. [ 466.084875][T20199] team0: Port device team_slave_1 added [ 466.096494][T20339] netlink: 'syz.7.3884': attribute type 8 has an invalid length. [ 466.102146][T20342] netlink: 'syz.5.3886': attribute type 11 has an invalid length. [ 466.123568][T20342] netlink: 'syz.5.3886': attribute type 4 has an invalid length. [ 466.136663][T20339] netlink: 'syz.7.3884': attribute type 8 has an invalid length. [ 466.144689][T20339] netlink: 'syz.7.3884': attribute type 8 has an invalid length. [ 466.170189][T20339] netlink: 'syz.7.3884': attribute type 8 has an invalid length. [ 466.193647][T20339] netlink: 'syz.7.3884': attribute type 8 has an invalid length. [ 466.217208][T20199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.224228][T20199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.249855][T20339] netlink: 'syz.7.3884': attribute type 8 has an invalid length. [ 466.265759][T20339] netlink: 'syz.7.3884': attribute type 8 has an invalid length. [ 466.283006][T20199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.327923][T20199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.335512][T20199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.378083][T20199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.535035][T20360] dvmrp6: entered allmulticast mode [ 466.581814][T20362] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 466.661890][T20199] hsr_slave_0: entered promiscuous mode [ 466.669157][T20199] hsr_slave_1: entered promiscuous mode [ 466.677180][T20364] __nla_validate_parse: 2 callbacks suppressed [ 466.677196][T20364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3893'. [ 466.810644][T20368] ip6gre0: Master is either lo or non-ether device [ 466.923831][T20380] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3896'. [ 466.984544][T20380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3896'. [ 466.993977][T20380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3896'. [ 467.005346][T20382] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3896'. [ 467.016140][T20380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'. [ 467.127556][ T5149] Bluetooth: hci5: command tx timeout [ 467.346959][T20407] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3898'. [ 467.405942][T20391] 8021q: adding VLAN 0 to HW filter on device bond6 [ 467.437453][T20391] bond5: (slave bond6): making interface the new active one [ 467.445723][T20391] bond5: (slave bond6): Enslaving as an active interface with an up link [ 467.511345][T20399] netem: change failed [ 467.528059][T20385] syzkaller1: entered promiscuous mode [ 467.556632][T20385] syzkaller1: entered allmulticast mode [ 467.646939][T20414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3901'. [ 467.877424][T20414] hsr_slave_0 (unregistering): left promiscuous mode [ 468.240134][T20435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3907'. [ 468.260162][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3906'. [ 468.407122][T20199] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 468.446960][T20199] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 468.505192][T20199] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 468.577738][T20199] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 469.098969][T20199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.145798][T20199] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.180039][T14072] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.187386][T14072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.215749][ T5149] Bluetooth: hci5: command tx timeout [ 469.243543][T20499] bridge0: port 1(vlan4) entered blocking state [ 469.279971][T20499] bridge0: port 1(vlan4) entered disabled state [ 469.311767][T20499] vlan4: entered allmulticast mode [ 469.321175][T20499] bridge0: entered allmulticast mode [ 469.330871][T20499] vlan4: left allmulticast mode [ 469.335914][T20499] bridge0: left allmulticast mode [ 469.393576][T20506] syzkaller0: entered promiscuous mode [ 469.411313][T20506] syzkaller0: entered allmulticast mode [ 469.448184][ T8035] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.455441][ T8035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.695909][T20521] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 469.708049][T20521] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 469.762112][T20524] gretap1: entered promiscuous mode [ 469.785148][T20524] bond3: (slave gretap1): making interface the new active one [ 469.795778][T20524] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 469.809608][T20516] tipc: Enabled bearer , priority 0 [ 469.837081][T20521] macvlan2: entered promiscuous mode [ 469.843693][T20521] macvlan2: entered allmulticast mode [ 469.856696][T20521] bond3: entered promiscuous mode [ 469.863103][T20521] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 469.877651][T20521] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 469.904433][T20521] bond3: left promiscuous mode [ 470.051381][T20525] syzkaller0: entered promiscuous mode [ 470.057900][T20525] syzkaller0: entered allmulticast mode [ 470.064355][T20525] tipc: Resetting bearer [ 470.098276][T20515] tipc: Resetting bearer [ 470.206805][T20542] validate_nla: 46 callbacks suppressed [ 470.206825][T20542] netlink: 'syz.6.3933': attribute type 1 has an invalid length. [ 470.411669][T20553] IPVS: set_ctl: invalid protocol: 43 172.30.0.6:20004 [ 471.291716][ T5149] Bluetooth: hci5: command tx timeout [ 472.465950][T20515] tipc: Disabling bearer [ 472.500564][T19194] tipc: Node number set to 2189967828 [ 472.742089][T20576] IPv6: sit1: Disabled Multicast RS [ 473.060407][T20594] : entered promiscuous mode [ 473.069544][T20595] netlink: 'syz.6.3945': attribute type 4 has an invalid length. [ 473.119047][T20595] netlink: 'syz.6.3945': attribute type 4 has an invalid length. [ 473.140265][T20199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.464017][T20616] __nla_validate_parse: 10 callbacks suppressed [ 473.464038][T20616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3948'. [ 473.540534][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3948'. [ 473.627268][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3948'. [ 474.141812][T20199] veth0_vlan: entered promiscuous mode [ 474.192070][T20199] veth1_vlan: entered promiscuous mode [ 474.304285][T20199] veth0_macvtap: entered promiscuous mode [ 474.336692][T20199] veth1_macvtap: entered promiscuous mode [ 474.372231][T20653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3954'. [ 474.410887][T20199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.478867][T20199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.543794][T14086] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.612403][T14086] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.636706][T14086] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.696980][T14086] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.874616][T20672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.938622][T20674] tipc: Started in network mode [ 474.953796][T20674] tipc: Node identity 080211, cluster identity 4711 [ 474.976494][T20674] tipc: Enabled bearer , priority 0 [ 475.000690][ T8036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.017574][ T8036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.096671][T20686] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3965'. [ 475.139669][T14073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.159632][T14073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.354119][T20699] netlink: 'syz.6.3969': attribute type 1 has an invalid length. [ 475.373752][T20697] nbd: socks must be embedded in a SOCK_ITEM attr [ 475.446819][T20699] 8021q: adding VLAN 0 to HW filter on device bond8 [ 475.480681][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3970'. [ 475.499551][T20704] bond8: (slave veth0_to_bond): making interface the new active one [ 475.516835][T20704] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 475.570562][T20699] bond8: entered promiscuous mode [ 475.629610][T20699] veth0_to_bond: entered promiscuous mode [ 475.635719][T20699] bond8: entered allmulticast mode [ 475.653983][T20713] nbd: must specify at least one socket [ 475.720847][T20699] veth0_to_bond: entered allmulticast mode [ 476.096206][T19173] tipc: Node number set to 134353152 [ 476.260559][T20737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3981'. [ 476.307274][T20737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3981'. [ 476.317127][T20740] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3982'. [ 476.555325][T20753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.573591][T20754] IPVS: length: 239 != 24 [ 476.590821][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3988'. [ 476.720960][T20765] netlink: 'syz.8.3991': attribute type 1 has an invalid length. [ 476.837949][T20766] team0: Port device veth3 added [ 476.910468][T20765] vlan2: entered allmulticast mode [ 476.947482][T20765] veth1: entered allmulticast mode [ 477.013308][T20765] team0: Port device vlan2 added [ 477.358516][T20795] netlink: 'syz.6.3998': attribute type 4 has an invalid length. [ 477.503125][T20799] netlink: 'syz.8.4001': attribute type 11 has an invalid length. [ 477.543291][T20799] netlink: 'syz.8.4001': attribute type 11 has an invalid length. [ 477.650086][ T5149] block nbd10: Receive control failed (result -107) [ 477.841271][T20821] openvswitch: netlink: Flow key attr not present in new flow. [ 477.913866][T20828] v: renamed from vlan0 (while UP) [ 477.967960][T20827] netlink: 'syz.6.4009': attribute type 12 has an invalid length. [ 478.035922][T20839] netlink: 'syz.2.4013': attribute type 6 has an invalid length. [ 478.668064][T20873] sctp: [Deprecated]: syz.7.4021 (pid 20873) Use of int in maxseg socket option. [ 478.668064][T20873] Use struct sctp_assoc_value instead [ 478.804759][T20877] x_tables: duplicate underflow at hook 1 [ 478.858148][T20877] xt_bpf: check failed: parse error [ 479.325086][T20909] __nla_validate_parse: 13 callbacks suppressed [ 479.325105][T20909] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4028'. [ 479.358900][T20914] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4030'. [ 479.415257][T20917] openvswitch: netlink: Message has -2 unknown bytes. [ 479.759213][T20935] Unsupported ieee802154 address type: 0 [ 479.799979][T20935] syzkaller0: entered promiscuous mode [ 479.805539][T20935] syzkaller0: entered allmulticast mode [ 479.942852][T20942] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4038'. [ 479.987697][T20942] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4038'. [ 480.249518][T20955] netlink: 'syz.8.4042': attribute type 11 has an invalid length. [ 480.276409][T20955] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4042'. [ 480.319899][T20959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4043'. [ 480.590789][T20971] xt_CT: No such helper "pptp" [ 480.771342][T20989] netem: unknown loss type 0 [ 480.791077][T20989] netem: change failed [ 480.803537][T20988] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4048'. [ 480.824882][T20989] netlink: 'syz.8.4051': attribute type 1 has an invalid length. [ 480.837762][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4048'. [ 480.852797][T20989] netlink: 'syz.8.4051': attribute type 2 has an invalid length. [ 481.176823][T21012] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4057'. [ 481.257882][T21012] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4057'. [ 481.669011][T21040] xt_cluster: node mask cannot exceed total number of nodes [ 481.682512][T21036] netlink: 'syz.2.4063': attribute type 2 has an invalid length. [ 481.865157][T21051] netlink: 'syz.2.4067': attribute type 1 has an invalid length. [ 482.629347][T21105] openvswitch: netlink: EtherType 50a is less than min 600 [ 482.903517][T14086] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 483.206315][T21009] Bluetooth: hci4: command 0x0406 tx timeout [ 483.222404][T21009] Bluetooth: hci3: command 0x0406 tx timeout [ 484.709117][T21170] delete_channel: no stack [ 484.855004][T21181] __nla_validate_parse: 5 callbacks suppressed [ 484.855027][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4105'. [ 484.954566][T21179] vlan0: entered promiscuous mode [ 484.998600][T21179] bridge0: entered promiscuous mode [ 485.108656][T21191] ieee802154 phy0 wpan0: encryption failed: -22 [ 485.401719][T21198] geneve4: entered promiscuous mode [ 485.409686][T21197] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4111'. [ 485.420695][T21198] geneve4: entered allmulticast mode [ 485.498266][ T8035] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 485.539453][ T8035] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 485.615201][ T8035] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 485.680794][ T8035] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 485.774635][T21215] netlink: 'syz.6.4115': attribute type 1 has an invalid length. [ 485.806959][T21217] netlink: 596 bytes leftover after parsing attributes in process `syz.8.4116'. [ 485.913879][T21215] 8021q: adding VLAN 0 to HW filter on device bond9 [ 486.225237][T21219] 8021q: adding VLAN 0 to HW filter on device bond9 [ 486.233042][T21219] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address [ 486.244543][T21219] bond9: (slave xfrm1): Error -95 calling set_mac_address [ 486.295350][T21217] netlink: 'syz.8.4116': attribute type 12 has an invalid length. [ 486.326628][T21217] netlink: 'syz.8.4116': attribute type 29 has an invalid length. [ 486.344945][T21217] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4116'. [ 486.354548][T21217] netlink: 'syz.8.4116': attribute type 1 has an invalid length. [ 486.385158][T21215] vlan0: entered allmulticast mode [ 486.391104][T21215] veth1: entered allmulticast mode [ 486.401174][T21215] veth1: entered promiscuous mode [ 486.408692][T21215] veth1: left promiscuous mode [ 486.418785][T21215] bond9: (slave vlan0): making interface the new active one [ 486.456504][T21215] veth1: entered promiscuous mode [ 486.462358][T21215] bond9: (slave vlan0): Enslaving as an active interface with an up link [ 486.579007][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4121'. [ 486.588684][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4121'. [ 486.691979][T14073] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.732768][T14073] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.752726][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4121'. [ 486.769307][T14073] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.809265][T14073] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.072263][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'. [ 487.082678][T21256] netlink: 'syz.8.4126': attribute type 1 has an invalid length. [ 487.112876][T21257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4125'. [ 487.251298][T21256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.270005][T21257] geneve2: entered promiscuous mode [ 487.275381][T21257] geneve2: entered allmulticast mode [ 487.283998][T14074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.298705][T14074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.332204][T21256] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4126'. [ 487.353148][T14074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.383930][T14074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.583924][T21288] netlink: 'syz.2.4132': attribute type 21 has an invalid length. [ 487.947574][T21307] openvswitch: netlink: EtherType 50a is less than min 600 [ 488.165613][T21319] xt_bpf: check failed: parse error [ 488.661486][T21346] netlink: 'syz.5.4150': attribute type 1 has an invalid length. [ 488.831413][T21346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.855127][T21355] bond1: (slave geneve5): making interface the new active one [ 488.865731][T21355] bond1: (slave geneve5): Enslaving as an active interface with an up link [ 489.363295][T21387] netlink: 'syz.7.4160': attribute type 24 has an invalid length. [ 489.423978][T21391] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 489.432387][T21391] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 489.471280][T21398] netlink: 'syz.8.4164': attribute type 1 has an invalid length. [ 489.479596][T21398] netlink: 'syz.8.4164': attribute type 7 has an invalid length. [ 489.487632][T21398] netlink: 'syz.8.4164': attribute type 8 has an invalid length. [ 489.864450][T21414] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 490.259851][T21429] __nla_validate_parse: 5 callbacks suppressed [ 490.259882][T21429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4174'. [ 490.321442][T21429] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 490.349884][T21429] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 490.371196][T21429] team0: Failed to send options change via netlink (err -105) [ 490.378961][T21429] team0: Port device batadv1 added [ 490.925473][T21455] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4182'. [ 490.942015][T21455] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4182'. [ 490.975174][T21466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4184'. [ 490.994391][T21458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.044084][T21457] bond2: (slave gretap1): making interface the new active one [ 491.054494][T21457] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 491.094122][T21468] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4184'. [ 491.105227][T21468] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4184'. [ 491.115328][T21468] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4184'. [ 491.136812][T21468] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4184'. [ 491.152360][T21468] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4184'. [ 491.169136][T21468] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4184'. [ 491.377125][ T31] INFO: task syz.4.2936:16781 blocked for more than 143 seconds. [ 491.395482][ T31] Not tainted syzkaller #0 [ 491.398075][T21475] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 491.401135][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.422578][ T31] task:syz.4.2936 state:D stack:27320 pid:16781 tgid:16778 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 491.446729][ T31] Call Trace: [ 491.453607][ T31] [ 491.460749][ T31] __schedule+0x14bc/0x5000 [ 491.494532][ T31] ? __pfx___schedule+0x10/0x10 [ 491.513252][ T31] ? schedule+0x91/0x360 [ 491.546244][ T31] schedule+0x165/0x360 [ 491.551022][ T31] schedule_preempt_disabled+0x13/0x30 [ 491.562326][ T31] __mutex_lock+0x7e6/0x1350 [ 491.577507][ T31] ? __mutex_lock+0x5bb/0x1350 [ 491.598936][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 491.617584][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 491.626349][ T31] ? __nlmsg_put+0xef/0x1b0 [ 491.637840][ T31] ? genlmsg_put+0x137/0x2e0 [ 491.646241][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 491.658815][ T31] ? kernel_text_address+0xa5/0xe0 [ 491.671953][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 491.683107][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 491.690098][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 491.708160][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 491.713268][ T31] genl_rcv_msg+0x60e/0x790 [ 491.718748][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.723815][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 491.730743][ T31] netlink_rcv_skb+0x208/0x470 [ 491.735552][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.741312][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.747207][ T31] ? down_read+0x274/0x2e0 [ 491.751657][ T31] ? genl_rcv+0xd/0x40 [ 491.755751][ T31] genl_rcv+0x28/0x40 [ 491.759969][ T31] netlink_unicast+0x82f/0x9e0 [ 491.764804][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 491.772043][ T31] ? netlink_sendmsg+0x642/0xb30 [ 491.778375][ T31] ? skb_put+0x11b/0x210 [ 491.782666][ T31] netlink_sendmsg+0x805/0xb30 [ 491.789805][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.795151][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 491.801928][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.807834][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.813231][ T31] __sock_sendmsg+0x21c/0x270 [ 491.818237][ T31] ____sys_sendmsg+0x505/0x820 [ 491.823148][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.828719][ T31] ? import_iovec+0x74/0xa0 [ 491.833296][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 491.838312][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.843586][ T31] ? futex_wait+0x285/0x360 [ 491.852848][ T31] ? __fget_files+0x2a/0x420 [ 491.857819][ T31] ? __fget_files+0x3a0/0x420 [ 491.862653][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 491.867802][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.873362][ T31] ? do_syscall_64+0xbe/0xf80 [ 491.878297][ T31] do_syscall_64+0xfa/0xf80 [ 491.882890][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.889203][ T31] ? clear_bhb_loop+0x60/0xb0 [ 491.893935][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.900242][ T31] RIP: 0033:0x7f6579b8f749 [ 491.905814][ T31] RSP: 002b:00007f657aa0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.914498][ T31] RAX: ffffffffffffffda RBX: 00007f6579de5fa0 RCX: 00007f6579b8f749 [ 491.922962][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000004 [ 491.933149][ T31] RBP: 00007f6579c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 491.941451][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.950603][ T31] R13: 00007f6579de6038 R14: 00007f6579de5fa0 R15: 00007fffa55cfe28 [ 491.958921][ T31] [ 491.971489][ T31] [ 491.971489][ T31] Showing all locks held in the system: [ 491.986616][ T31] 3 locks held by ksoftirqd/1/23: [ 491.991883][ T31] 1 lock held by khungtaskd/31: [ 491.997903][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 492.009302][ T31] 2 locks held by klogd/5188: [ 492.014158][ T31] 2 locks held by getty/5588: [ 492.019097][ T31] #0: ffff88814ce300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.031679][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 492.043501][ T31] 2 locks held by syz.0.677/8617: [ 492.048807][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 492.058214][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 492.068659][ T31] 2 locks held by syz.4.2936/16781: [ 492.073908][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 492.083719][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 492.094758][ T31] 2 locks held by syz.1.3060/17253: [ 492.100169][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 492.109796][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 492.120153][ T31] 2 locks held by syz.3.3677/19552: [ 492.125392][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 492.133804][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 492.146646][ T31] [ 492.149050][ T31] ============================================= [ 492.149050][ T31] [ 492.157838][ T31] NMI backtrace for cpu 0 [ 492.157864][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 492.157883][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.157893][ T31] Call Trace: [ 492.157900][ T31] [ 492.157908][ T31] dump_stack_lvl+0x189/0x250 [ 492.157937][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.157958][ T31] ? __pfx__printk+0x10/0x10 [ 492.157994][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 492.158022][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 492.158048][ T31] ? __pfx__printk+0x10/0x10 [ 492.158076][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 492.158105][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 492.158131][ T31] sys_info+0x135/0x170 [ 492.158151][ T31] watchdog+0xf95/0xfe0 [ 492.158179][ T31] ? watchdog+0x20a/0xfe0 [ 492.158209][ T31] kthread+0x711/0x8a0 [ 492.158234][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.158257][ T31] ? __pfx_kthread+0x10/0x10 [ 492.158280][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.158305][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 492.158321][ T31] ? __pfx_kthread+0x10/0x10 [ 492.158344][ T31] ret_from_fork+0x599/0xb30 [ 492.158362][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.158388][ T31] ? __switch_to_asm+0x39/0x70 [ 492.158409][ T31] ? __switch_to_asm+0x33/0x70 [ 492.158430][ T31] ? __pfx_kthread+0x10/0x10 [ 492.158454][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.158492][ T31] [ 492.158499][ T31] Sending NMI from CPU 0 to CPUs 1: [ 492.310768][ C1] NMI backtrace for cpu 1 [ 492.310791][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 492.310812][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.310823][ C1] RIP: 0010:kasan_byte_accessible+0x16/0x30 [ 492.310855][ C1] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 <3c> 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e 0f 1f 84 00 [ 492.310871][ C1] RSP: 0018:ffffc90000a08b40 EFLAGS: 00000806 [ 492.310889][ C1] RAX: 0000000000000000 RBX: ffffffff8b5e5c77 RCX: 2fb017e387bdc500 [ 492.310902][ C1] RDX: 0000000000000000 RSI: ffffffff8b5e5c77 RDI: 1ffff1100625814d [ 492.310914][ C1] RBP: ffffffff8191cc97 R08: 0000000000000001 R09: 0000000000000000 [ 492.310925][ C1] R10: dffffc0000000000 R11: ffffffff81af54c0 R12: 0000000000000000 [ 492.310937][ C1] R13: ffff8880312c0a68 R14: ffff8880312c0a68 R15: 0000000000000001 [ 492.310950][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 492.310964][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.310976][ C1] CR2: 00007ff4751b7198 CR3: 000000007588c000 CR4: 00000000003526f0 [ 492.310992][ C1] Call Trace: [ 492.311002][ C1] [ 492.311009][ C1] __kasan_check_byte+0x12/0x40 [ 492.311034][ C1] lock_acquire+0x84/0x340 [ 492.311055][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 492.311083][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 492.311111][ C1] ? try_to_wake_up+0x67/0x12b0 [ 492.311135][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 492.311164][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 492.311190][ C1] try_to_wake_up+0x67/0x12b0 [ 492.311213][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 492.311239][ C1] ? debug_object_deactivate+0x6d/0x360 [ 492.311270][ C1] hrtimer_wakeup+0x4e/0x60 [ 492.311295][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 492.311317][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 492.311340][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 492.311465][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 492.311497][ C1] ? read_tsc+0x9/0x20 [ 492.311529][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 492.311583][ C1] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 492.311609][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 492.311631][ C1] [ 492.311638][ C1] [ 492.311645][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 492.311678][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 492.311698][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 492.311716][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 492.311735][ C1] RAX: 2fb017e387bdc500 RBX: ffffffff81978fda RCX: 2fb017e387bdc500 [ 492.311751][ C1] RDX: 0000000000000001 RSI: ffffffff8d7925e3 RDI: ffffffff8bc08360 [ 492.311765][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 492.311780][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822070 [ 492.311794][ C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 492.311811][ C1] ? do_idle+0x1ea/0x520 [ 492.311841][ C1] default_idle+0x13/0x20 [ 492.311863][ C1] default_idle_call+0x73/0xb0 [ 492.311888][ C1] do_idle+0x1ea/0x520 [ 492.311909][ C1] ? irqentry_exit+0x5ba/0x660 [ 492.311932][ C1] ? __pfx_do_idle+0x10/0x10 [ 492.311963][ C1] cpu_startup_entry+0x44/0x60 [ 492.311983][ C1] start_secondary+0x101/0x110 [ 492.312008][ C1] common_startup_64+0x13e/0x147 [ 492.312040][ C1] [ 492.671961][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 492.678869][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 492.688020][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.698122][ T31] Call Trace: [ 492.701437][ T31] [ 492.704423][ T31] dump_stack_lvl+0x99/0x250 [ 492.709045][ T31] ? __asan_memcpy+0x40/0x70 [ 492.713709][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.718940][ T31] ? __pfx__printk+0x10/0x10 [ 492.723603][ T31] vpanic+0x237/0x6d0 [ 492.727636][ T31] ? __pfx_vpanic+0x10/0x10 [ 492.732189][ T31] ? preempt_schedule_common+0x83/0xd0 [ 492.737706][ T31] panic+0xb9/0xc0 [ 492.741468][ T31] ? __pfx_panic+0x10/0x10 [ 492.745899][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 492.751344][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 492.757570][ T31] watchdog+0xfdf/0xfe0 [ 492.761775][ T31] ? watchdog+0x20a/0xfe0 [ 492.766138][ T31] kthread+0x711/0x8a0 [ 492.770265][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.774997][ T31] ? __pfx_kthread+0x10/0x10 [ 492.779641][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.784893][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 492.790207][ T31] ? __pfx_kthread+0x10/0x10 [ 492.794837][ T31] ret_from_fork+0x599/0xb30 [ 492.799469][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.804620][ T31] ? __switch_to_asm+0x39/0x70 [ 492.809421][ T31] ? __switch_to_asm+0x33/0x70 [ 492.814220][ T31] ? __pfx_kthread+0x10/0x10 [ 492.818849][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.823670][ T31] [ 492.826896][ T31] Kernel Offset: disabled [ 492.831232][ T31] Rebooting in 86400 seconds..