last executing test programs: 2m41.195734701s ago: executing program 2 (id=1871): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) (async) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) 2m40.597998456s ago: executing program 2 (id=1877): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x5, 0x1000, 0x8, 0x1, 0xf0}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00', 0x0, [0x1, 0x4, 0x4, 0xfff]}, &(0x7f0000000100)=0x54) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6gretap0\x00', 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000180)={0x80}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000240)={0xb3a06c7fbf330bab, @dev={0xac, 0x14, 0x14, 0x3b}, 0x4e24, 0x2, 'ovf\x00', 0x20, 0x6, 0x58}, 0x2c) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000280)={0x5, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x1000, "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"}, &(0x7f0000001380)=0x1008) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000013c0)={r5, 0xfff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000001400)=[@in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0x7fffffff, @loopback, 0x3}, @in6={0xa, 0x4e20, 0x2, @empty, 0x1}], 0x48) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001480)={0x4, 0x5, 0x8009, 0x2, 0x0, 0x90, 0x4, 0x7, r5}, &(0x7f00000014c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001500)={r6, @in={{0x2, 0x4e24, @local}}, 0x36f, 0x2, 0x5, 0xf714, 0x9}, &(0x7f00000015c0)=0x98) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001600), r7) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001640)=0x2, 0x4) listen(r7, 0x8000) r8 = accept(r2, &(0x7f0000001680)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000001700)=0x80) sendmsg$NFT_BATCH(r8, &(0x7f00000019c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001980)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0xde, 0x6, "f7284c5786a93a2b2e13b77e90fa325ff07f76bf8d37226e084ed60f3fda1529b8797fb081fa2c38de729faa46881f8be96cef40d2f929d6950fea5f555816f578a8bc5419658cf176e5fdaa06eead70255f198dcaf07fba043c40fd465bc67a450f343dc9b2643e3867dd599e19fb968f130d346653c1116d31b0bf121b4c27f4e3e17c714ef268874da4d356e2fc5d86109fe3b9db06d7f8ad7ff51b3e309d2d4763f3afdc97a3e9c551cf2b457b10b7646d3dcb3723b5bc606f6c8b2503dac7132d63e7f77a8cf57328aedba39a5aabb151eb67b0ea171638"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x1a, 0x6, "6ea6ea520113be88b5784599f941bf62ae5bfaa36154"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x50, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_tcp_TLS_RX(r8, 0x11a, 0x2, &(0x7f0000001a00)=@gcm_128={{0x304}, "6dc63c6195b264dc", "f96cecd5fe02fba3da89b3fcefcce705", "006f9dc5", "705e286c52338fa5"}, 0x28) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000001a40)={r5, @in={{0x2, 0x4e23, @local}}}, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001bc0)={r10}, 0x4) socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000001d40)={{[0x8, 0x5, 0x7, 0x7]}, 0x0, 0x320416e411598599, 0x5cf1000, 0x0, &(0x7f0000001c00)=[{{@align=0x7ac, {0x9, 0x8, 0xffff, 0x930f}}, 0xffffff1f, 0x0, '%pI4 \x00'}, {{@align=0x2, {0x100, 0x200, 0x0, 0xd}}, 0x10000, 0x0, 'syz0\x00'}, {{@align=0xa, {0x6, 0xfff9, 0x2, 0x3}}, 0x8, 0x0, '\x00'}, {{@align, {0x7, 0x4, 0x0, 0xeec}}, 0x9, 0x0, '^,#-\x00'}, {{@_ha_fsid={[0xfffffff8, 0x1]}, {0x1, 0x7fff, 0x36, 0x7}}, 0x47014298, 0x0, 'ip6gretap0\x00'}, {{@align=0x86, {0x1000, 0x68, 0x0, 0x2}}, 0xb, 0x0, '[?!\x00'}, {{@align=0x6, {0x1, 0x4, 0x4, 0xa}}, 0xc53, 0x0, '\')%,:-\xf2\x00'}]}) 2m40.59646823s ago: executing program 2 (id=1879): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}]}, &(0x7f0000000180)=0xb) r1 = socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e000"], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0xfffffe88, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r5, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) pipe(&(0x7f0000000040)) 2m40.480381387s ago: executing program 2 (id=1880): r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x17, 0x7, 0x3, 0x22, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x9}}, @sadb_lifetime={0x4, 0x2, 0x3, 0x3, 0xb093, 0x2}, @sadb_ident={0x2, 0xa, 0x5, 0x0, 0x1a9}, @sadb_key={0x9, 0x5, 0x200, 0x0, "55648554d1d574c5aa873e626596a1bc3b5c1e11e10ad8c28e3e92cbe312cf385947ae0f14997fb324b0c23f124c2297f413b5dd643fc9fba163c9b6dfc9c3d4"}, @sadb_sa={0x2, 0x1, 0x4d6, 0xd9, 0x5, 0xcb, 0x3, 0x50000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bbe, 0x6, {0x6, 0x33, 0x2, 0xc, 0x0, 0x4, 0x0, @in=@loopback, @in=@multicast2}}]}, 0x110}}, 0x801) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000005f40)={0x1, 0x1, 0x6, 0x7, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) 2m40.311978696s ago: executing program 2 (id=1884): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m40.14031144s ago: executing program 2 (id=1887): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002700010029bd70000000000006"], 0x14}}, 0xc000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004d0}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x4a}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) 2m36.649643121s ago: executing program 4 (id=1929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00006003ffffffffffffebe7a1a4757008004500002040000000032f907800001f61e0000001a000"], 0x2f) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x8000000004) 2m36.371718147s ago: executing program 4 (id=1933): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bind$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd23}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) bind$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd23}, 0x20) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, 0x88}}, 0x20000000) (async) 2m36.212121724s ago: executing program 4 (id=1936): r0 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0xffffffffffffff68) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 2m36.112659679s ago: executing program 4 (id=1938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random=';'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x90) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x10000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4800) 2m35.999492966s ago: executing program 4 (id=1940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = epoll_create(0x3) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000280)={0x70000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r5 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000140)={r6, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) (async) sendmsg$inet6(r5, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e22, 0xe27, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="e97163ad649885f50ffbd9a1e53cf4fa6e1f924643b2eb2aee57889fc8359bf25fdc403e3f0d07e712036cf74ebd1006886a854f2de9a5ebc12159d0514e017f2b5f208ecf2d7dbd852bea780c9ac9bfa0cc45deab36b9ca85dbd692eba96f6742dddab8992baaa19a922b7bfaa4acb40dd61fd4d55bfb7f2d2ef1d24bc7", 0x7e}, {&(0x7f0000000200)="29d63fcf7f3f0a544f88", 0xa}, {&(0x7f0000000280)="9e6c0ff5c8626195b140379af75faa58208b25c26815a32d8a55261648dbb320edbdf54f27dfd708dc3e1b12ce23eaa0", 0x30}], 0x3}, 0x40000) 2m35.811936768s ago: executing program 4 (id=1941): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) 2m33.078595898s ago: executing program 3 (id=1973): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket(0x2d, 0x2, 0x0) connect$netlink(r2, &(0x7f0000000140)=@unspec, 0xc) r3 = socket$kcm(0x10, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000300030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}, {&(0x7f0000000800)="1ed2c29d2fa77fe8584b8fe77c4e6d6d6382fe34a42a79d90efa27f46d7da6c3121a006847bb276c67223405b995c65aec4b26fee106f2e4a5abf4c75e3ac8316b39cd01ff1e5583f5ccc55140f1cdf65aa5f63e5e2576e075c9e083821285566eec15fa2ca21a449042aaf1738d3110400447f68d966e39326e3766b24347cf74d9d37282ef8f0028796d174ba6eedaa69efe4e2a220ca260965edc0b9e4a7329efe8a4d6e29db7f61dfb80f98457e94d000000", 0xb4}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x2000a047) r4 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xa597f940d89f37d0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800f6a800420000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000000000000000000078700000000000000012ccef9b880000000000b7c213771bc7f815e05b16845ff19e6878c7fef600217c8a9bafe310cd140a6e8e6d7f595ecd451748cf33bad82a436402b7f423fc9ecfe571a0059b791392e8e5aae2b3b02827957febe7db3d9777ca"], 0x48) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x34, r10, 0x1, 0x4004, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@remote, @broadcast, 0x0}, &(0x7f0000000180)=0xc) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@remote, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @mcast2, {[@fragment={0x33, 0x0, 0x4, 0x1, 0x0, 0x4, 0x68}]}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r10, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000080}, 0x24049044) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 2m32.943812466s ago: executing program 3 (id=1976): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630123000000000095000000f7000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x8}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000080)={0x1008}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf25022000000000000000000000080001000000000008001b"], 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) 2m32.828438491s ago: executing program 3 (id=1978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x224, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10810) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x224, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10810) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001280)={{r0, &(0x7f0000000180)='!:-\x00', 0x20000, &(0x7f00000001c0)={@align=0xa39e, {0x5, 0x6, 0x3, 0x9}}, 0x1c7a, &(0x7f0000000200), &(0x7f0000000240)=0xff}, {[0x1, 0x1000, 0x1, 0x6]}, 0xc64d, 0x1000, &(0x7f0000000280)=""/4096}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000013c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c880}, 0x1) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001440), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000016c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000001480)={0x1ec, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x401}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xb}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x8}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xffffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0xfff9}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xea}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x1}, 0x400c080) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001700)={'geneve1\x00', 0x2}) syz_emit_ethernet(0x56, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@canfd={0xd, {{0x4, 0x0, 0x0, 0x1}, 0x33, 0x2, 0x0, 0x0, "a961528d51c18f5e64b363021413c0984baf4443adf5b16f9dca2366f4260b9878ad88ad9a0ce4e4c26ffaaee9c49b135b43cc556b0dd8f12faef7d45e6fa073"}}}}, &(0x7f00000017c0)={0x0, 0x2, [0x837, 0x932, 0x541, 0xd54]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000002c40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002c00)={&(0x7f0000001880)={0x136c, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x304}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffde55}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x97d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x1194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "b751ff83ac24b3628df32aee9f2ab4e07f7be1239b1c9286412aa5381e405016adbf118105a8f80019030f0fa17a65aa718f4ec7a0d3905b657f7a52d48bfd366a54db1987052078a31a8fc76ec2db27e70ffc1aafefeb5aa818208883c4f7196ace3779f68cd58dd0971180fb0651cb1aeb389fad13def7d1fb16c1fdac9314f026cccc0393c92caa73e88f9a279bda8bf7ace6d4ca1e31c0a46c826e39bcb1ed77b49d86ee3e3adb45132a24e2065c746e101f5716e579939e0d58e936d808ad9e791314926ec728bcea497eeec3e66a247555318243dd7a69564a6686e73c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "aef049206d23128e3075d79688f0c04ae5b5e70690b2d1902d0f738a1f27d8784ec16c37"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "02eb9577167df956c2c2c4b229662b5291b3be8a40"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdbc00000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2e7}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb35}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x17e7}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4aa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13fa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x61}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}]}, 0x136c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000810) (async) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000002c40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002c00)={&(0x7f0000001880)={0x136c, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x304}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffde55}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x97d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x1194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "96a0d9bfad08d6ba49d2681031badeef6832b0461735273082795e730cfc8819d371a2ee9fcb550cf3ad91b0467efdfbb6bc65c0c7baebbfcbc9473c44d269ce1d33b3560c9f4ce20c5b1943c73654b9877270343a003469ec8e0a0d8a84d746135e924893746a7cc832f3f576d01870c055f1aba4633cad8ae13912b1f1b875e09cf2c12675556ae25fc51aa2136da0169716eccf5d08ad2a937945297f92cfed09b0131d2985783fdf8e7a7de3c371f2fe9d26c10234d67f8e5287c005e5059559c5f2f0aff977710ad35da764094d93a50f29abce2883888bd684c7a11ada8e2a6ead39105f57279e89bb09b083e4ce07ece73967a0f5891dc7f265c045acd8832c689f6316d812d08428df2024c320a08d8700750bee8738e1e6727024c0bba1c8768da5e1ac7fabb64e68c1b8bb8a35be71abdea4b5891e87b8bc88befa38144ac01015f8736de0006bdf41ae75c7b5a4cb08cc455a9085fe722a93ed892ea4f2852817d50c134ee0985f4c1336aac6c2945da73403c8787737a26b82870d8b7858a0cb6fd426386ae6acbdd59c384f96a1abeb1069c6252c1b85afec5ecfc58eea4b3efd7cdf728d9e9be2f16ac5eee94c9f2cae9943c1ea4a7f7a62aef91b3cb72e1e36db5ad524a336a324c80a098f679b959d3fccd285ae7c5f6444cb7ebf7b3229207e86fcb3923037e4991902ed3b842c828b2f64e60fe65ea49376511166271adc800a809bd5030eaa41977794806df6d28f684411bffcce5b53ed26dfda319b0c5755878ba4e435e5f4eed1653458613c79c46286d254d17fc136742cd23c3f5d4011332f0db0ad1d9df509d8010aa41b9d2a8bfc6334f30d4516a17551d4de868f2df8952f2d088356bbdfeb0aba4f47578571c1ed94e765e7a74db56160b2b328b15a29beb6a0673944724b40128c8a3a9e6e74aeb8168cf3cfeca6a340f8cd1dc5e069f352da6974d140fac9eb80a7ea0aea7f1722732904c958377dc00aa976cc37b6611b98ea2303ebc7e11b6bccc1bc93e8d594ef190565fccbb6ddf1007f9f92ec27c1e9ff7adbe16b8fd93bd64b12ff41dd11c306d1a2c9160a6509a4c26bbede63f2aacf97921477d3685cf05c0f5d075bdbe814409a5d698530676d44993ca1b824061ceef9fd4f8aa9591e94e32c0b5346ff10731f5d7e9e45b7b863184e1e8f83d8b64dc8235c653adc34e75dd82695cdf559f52022717864207c2d6dafb4db8459b62ee5a42975c6dfcd0ec70edf08a051c93ff7845679af9cfcc6023cc02aaf4ca2ef1c66be604005683c473812e546749aa04d8e335b550bfff71b9fd953f0678c54a973b8ae7086535ea2c35293873f639718c4c522e0c08cbb38eb82de6336a9d4cb8bed9424f50d72ef446e59cd9d20f8ae7c4367ac8a40f2f9267a94926a8b5155fb9d77a1ee5ac6a5ccad72d6ae47ce406accb7cdd6b7b6bda09eddc0032eccc08c15b53713a3e88356085ede5458c9b2cfcba5f19f374a3233003eff00b11e492ac5051acda739161eea1d17884ae76db97982b3cad8a59096be3c8a2b9829760c9802cbc843e7c7fe5d04ed276b2c9eda89837f175d3f67f8ae29a47836f16db5a2df6e37afe5727f6fb0aadfaca455c57f5b11d336229553b3c33d8646b7105db9aedaec16c129880e15fc2e0ed9644839faa09e4679707746c29264128fa926903d0071a82a8317030d46feaca3f51ec58c8df615805638f37f9c0a951f7603ce80722817122df9d917c6c91e512180ed4e47d71ebfcc180225fa35d6646afabd56f437c5de606dd532ab1f5e5b3efb9fdd6f6e0b20a60fbfff4c3f22180f3a34b73775c1c2a03db7c150e907f725f709d6bfe18a6f1f39b824f6c9785cb47ab0e611bd60f3de1a08952d1805161b15e0a2f61a4d47cc0346ac06170326c8d94852bd8a16eba4d274d00091fc3af28d17fd0c708aafa5a6614fafbdbefe4016adf2df6f736d9c6f548912b8b8d14ed73ad346dc7b4822133793b7c6cea6a2a44f28b53068194ea1a6f9c34dfa65148efcff65924f2e0f471791edb27cd6fcc0ae73d7d585a452970c13b8ec5a33b11a9ef55e7d9f16d937f38766fd2d92471e948c6b5a05dd8f364093d165498da4cc7d7e1c6fef194eed24886368b93bb7e0e12d54b01465f7defd499a94d524f39e561261f42fe07e3ac0c69a377308cff6aa0f64c2ccade3f9a3473fb0d73bdcd45d1577c430f9ae231c1bf7fabed283128c2dcccd5379b48e9385c117c126d9f8e25d7151b0591a58af9bffb96a5a12b88c819151e0f31379751d5b4ee64391949015297540d48b43b034d32f5dbdc708424e11af580d05ae0440a4078671cd0cbc9e9117baa6a09dad5489c3d602fb14dc54a0ee1692670d314f1c01ae3c5f1b2703f38dd5f8b00dde31245b777071ad91c7c7a97a172d6c4c04b959df1bb186442e8a3514ed9c00c0b08ceeddc7e854fa0c2c0d62119648e89e6613a18257c67aa65fa27c9a3142f97e1a171d5aea5d7a576a333019a25d0220b671421d84f0da82cc9a2a85dc3da190aeac247e4a83dc56840a1eb2f8814806c446da692695823706794223e5d6794052d5cf4e3eab54cf3d8fd65ef3873ae2e4154cdf537061d404ea8c1f92b7b38dba987b2c20964ed694363010c6f08b5aba5d15a856b196fbf09c718702d279c25d7d67f57ec54bc88aea37e1114304011dda2683b5d0de02309b1f7747bdd2fb091c643beb7ef3cd5cf10a98c0a932da6d8ed9f217dbb7d36fee35e295aeb9386620287615a76ee48d0a797acb24dddfc2219669fe88ab9d37525820bd8fbcfbc178571f315f78249dfda2b15cf189d36844c02c9e222741e8a8568525cedc9f6534b94327a7ef2fd6c7bccb3cd73cbdcc147d32e8e65ce0e9b9623f60baeff0d233483fdd3264b257513e7c1ce8515a7c08dfd699e8783ad32321f8eaeb08af04f2d82188bb21ee920b57d159266a4aa59c62731abc29713e2da9254b180f9e4b9d5003c0359eb584184f84fe90014e2290bc6fca76a9afcac316ae4b87b625912e66e49e01c1fabebd4a5580a61ab97234b844c9dbdbc38cbbe4e5052e5ffbfbdbada99542fdaad08315d306db439412ca423d33cedb651f0c4a25f16f443193d8e9ebaaa45d48254fe1485b0bcb14874c64ba0ba6bc9759cede05bd7c58b10e20de5d7241d7bc4d90605ecfc2cf600348e9242cedfe093b58a4424f0a4613963f46bb417b77c82fff3bbd92571df8a11370185f4eaae3bdabc06cd91b0961194385eedf79ae248964d18facadbea949b14efac52160eee76c3edb7ddc99dd495acfc82a93f5a5483634b740d28a6ec2a57430e8026180900fa6881453a48462c3f64cd1951393a56f464b834e38c6108dbbd4f49bb76a50ae9e2bc1a020affb460f06f2a7cc2dbae8760e2f938e7b6b6c978c7a2139c77400e1302bf9e66c8e4282f7ef1eab18526319d86d4010441148bb011af71602955ca3a78aba68fe2c8ef763d482a4709b4f1d11157ccaff8fa880409d41a04de596d6e41bd5cd2992ee42e280566e478191b0f048c17d768c35a3942e504308586c08a71ca1bed87d6783d5a320bb5afb45f164eb81e4b3a270315e97f84fe6b765e1d06b4c8f8419ca8986c0cd3238ed36258c90b6facb82afac83778b17e576e2848f1e68a98021a0d180593e45feec8a1e9bcd07b0022109876eea52d5de4d9ebb5a851d72efa37ce99bd7d73137484cdbe26050107098dff5de332e76fd4d07aea705733e0af959cc9807584d0ebc8e2bba1413fa9db7da1ca8ef6be29f51dbe060fa3743926d448e1f489b0fcbd3ccd23a5796438c08f1b69db31890ea46fb8965f07cdf5be2624b7b36b8ac9b1be4e0a2378b088a8ee8fec2d97d326f34b2fe6898cba15c2df58d1f415e3c5e0b2fec578a358e405d4b320bbe5b1afb026677b51ea7bd795239df38d62bfb138b6d3f0e835f36d1a3c0a5b7a37e85da66456be2d430b3788b8c5cdc02f540743699ad3ddc376116d17d84942c7c648c06cb3be308e96709eb610d1ec44f476476d6405352eec9acc90ac5fe6e5748805790cd6da5131a474268c4c8ea621b04dd885b4eb1a2151402149549ea81baeee308b9b4fe69b129b41eced558e15200611e965a54c41c87bc485392b96847357bfb6aa897adf143f887a2473ce4102ad68592213384a60538e1747621aa1ca0da7954e68efb1ba64fff3e8833c7ac35598c470cb32842efe89d374017ed23fc4ab90fa243583a03d19deff069a6abec58abc02dfc26460dc8c58207407a26b05eec60185071a21d83e043212a6a746d5e1b3ee4f52eebcfc10e3af930ec2d90702f15cac9ec5e62609a23793a48ef20298457805f9e3043210cccfa1ea243250b0d7dc912aa60f305136005eb9bc3e61eb6bc84a48560f33e8ef53b6f0857a0d17e7e5df510c647144ce0681e29b243c648f4b8ef8ac7bcb873c65cc03948d26abe59c79a40272fde8c9a55171db9a82509954a6bf83534d960a1466070c7c8e2e6aeb5c3fd453d288ec9add1fe6633c0999637af47af134c80f68d9912c25ec891e0173ea6734a82227d4c4d53e164edb65cb5379f6cb48645dd71b6a9c4f93c08334d7ff2333c48b5353e9964fcdf8b757324b63df6f2deed46de5c4b45fcc7390bbb653fb9b35256e5cba35045f97d3127b7ae94fdab0e397ef63abb54ba69e7802e61d48acd310d8971b2dc88487551d24d55d176ed4b5e5cfdf76cb723d327ecf04b01fb5e38af2b0e585a004e55f76408ffa1ebbe3f371f1e600696c64c966cda2c62feb22d1dc7cb676b1be30d118d01bc2be26a07ba0484e7a4031989312bc9e9a20352491450c85101ae7e6b17fc35fffb57f9ac6321c7d27caac07361ec9d33d2012096e77f6696a8d53d9f233900a38daa0e48ed8c3705197fbdc38d073c4bca8ef17b1148e0efb5169fe724df91b954ba765e176b68ce0841c56da76a5a1ee9c920d2551a365208a92518d36388119b7aef849c48eea6e09a78daf51d0ad1a781ee7a813483c26d751b82595a3f3f0c45f195c7cd0675bff12073d118b5b3c93a4daa4cc2b1bee6f0ae46b0f43457a3c4736a684da15ed6d9d20185f415a590d5488a3a4fc5a3a2580fce9355e917920ec323bbb76c887e0b5f3bb50fb47aa1be6e9e82594a89d473f5e18b7b62091831bfc06817f7b894fc8c1323db56ed1b8e42042b333eccd6c52d9de1b18a6819e5245e150e6e6a9526b98ce9e10ee05fef5c0c0c680c629662c9772fe5912393c640af8b23ef6eee49a6bb1d802f116ad4bf5b2855ab61b75d4506b846f6c612874665416e091a3888815e41eb7ad2e1839802f86d838587b067ce03f1d553531da381749b7ba71ad18c0bc689268657d9a27d4e4a19ed0d135a12712dcd5181bbce6e700fce9585cc3ead627099e5b356c81313131a595724dfd6cf874f55207ec19288be785b82df2db67afd73278ae00d28a0a7e6055bb5654774a9aa539c83b435d119ab11e99e1f48da4fbb29d045601a08865abdce788890626cbe48774dcca81d799305dd8edcdc62badc3693e662cc4ad9c9d441dd71dde57031276408d9a160292aaa83fa98558ad1fd8b63771ed48a2367c96be37cb0f0f2e0afcb1d2e942c2bc813f95caf5fe30a12f32246f45d76578a5a8ad256b7481f3d5bf3d4dc7960ac3c4f65d0e67631822f98c964d05bb60ac00ac8b7f4985a76eb7629da30fc23bf3fff2f4824c8bba125a85574b38b01da32247c5770b045c62cb43165218f0a854f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "b751ff83ac24b3628df32aee9f2ab4e07f7be1239b1c9286412aa5381e405016adbf118105a8f80019030f0fa17a65aa718f4ec7a0d3905b657f7a52d48bfd366a54db1987052078a31a8fc76ec2db27e70ffc1aafefeb5aa818208883c4f7196ace3779f68cd58dd0971180fb0651cb1aeb389fad13def7d1fb16c1fdac9314f026cccc0393c92caa73e88f9a279bda8bf7ace6d4ca1e31c0a46c826e39bcb1ed77b49d86ee3e3adb45132a24e2065c746e101f5716e579939e0d58e936d808ad9e791314926ec728bcea497eeec3e66a247555318243dd7a69564a6686e73c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "aef049206d23128e3075d79688f0c04ae5b5e70690b2d1902d0f738a1f27d8784ec16c37"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "02eb9577167df956c2c2c4b229662b5291b3be8a40"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdbc00000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2e7}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb35}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xda5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x17e7}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4aa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13fa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x61}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}]}, 0x136c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000810) socketpair(0x2, 0x80000, 0x57a, &(0x7f0000002c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x9d5882e4e7459d18}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x9d5882e4e7459d18}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e00), r0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e40)={0x9c, r9, 0x320, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xab75, 0x2c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BSS_SELECT={0x18, 0xe3, 0x0, 0x1, {0x14, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x8}}]}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x0, 0x4, 0x0, {0x100000000, 0x8, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2}, 0x8, 0x3, 0x2}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x141}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x163}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) socket$can_bcm(0x1d, 0x2, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x2b, &(0x7f0000002f80)=0x3ff, 0x4) nanosleep(&(0x7f0000002fc0)={0x77359400}, &(0x7f0000003000)) (async) nanosleep(&(0x7f0000002fc0)={0x77359400}, &(0x7f0000003000)) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x1c, r9, 0x500, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004801}, 0x8021) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x1c, r9, 0x500, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004801}, 0x8021) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x20, r9, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x44050) sendmsg$DEVLINK_CMD_SB_POOL_GET(r8, &(0x7f00000033c0)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003380)={&(0x7f0000003280)={0xf8, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb4}, {0x6, 0x11, 0xbb0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0xa}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1000}, 0x41) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r8, &(0x7f00000033c0)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003380)={&(0x7f0000003280)={0xf8, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb4}, {0x6, 0x11, 0xbb0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0xa}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1000}, 0x41) connect$inet(r2, &(0x7f0000003400)={0x2, 0x4e24, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000003440)={@random="cf79047bee1b", @empty, @void, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0xc, 0x3, 0x0, 0x0, "f7abbecbba5eeeb9711dcd55be1a6bf0570aeb0d87405701453aeeec1216008488a01cfa9bfa5cd788e0bad5bdedbdc4443e8cb05a11373ffc7b1bbe31818f45"}}}}, &(0x7f00000034c0)={0x0, 0x1, [0xc1, 0xd2f, 0x42a, 0x1cb]}) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000003500)={'nat\x00', 0x0, 0x0, 0x0, [0x12eb, 0x4, 0x2, 0xfe, 0xfffffffffffff800, 0x7]}, &(0x7f0000003580)=0x78) ioctl$sock_proto_private(r7, 0x89e3, &(0x7f00000035c0)="48aba460ef5a933f48cc3cd59bc208b905a9eedf84dbf96248ca3ff880c26544a8efbae3153928de103a3133ecd0a75a8bb0cf2b6c3d6f5239b9ac5f3fddb878277f8c94d876e14740df78e133e6ce21c802beddf1f500bb08aabc2830e9badf48595b04be78c10889fdb944693f8378a91e5f8cc0") (async) ioctl$sock_proto_private(r7, 0x89e3, &(0x7f00000035c0)="48aba460ef5a933f48cc3cd59bc208b905a9eedf84dbf96248ca3ff880c26544a8efbae3153928de103a3133ecd0a75a8bb0cf2b6c3d6f5239b9ac5f3fddb878277f8c94d876e14740df78e133e6ce21c802beddf1f500bb08aabc2830e9badf48595b04be78c10889fdb944693f8378a91e5f8cc0") sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe1}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) (async) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe1}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) 2m31.838292814s ago: executing program 3 (id=1992): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x3, 0xffff216c, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x10, 0x3, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@initdev, 0x0}, &(0x7f0000000280)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000002c0)={@private2, 0x0}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x0, 0xb223, {{0xf, 0x4, 0x0, 0x12, 0x3c, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @loopback, {[@generic={0x86, 0x4, "cb3e"}, @noop, @timestamp={0x44, 0x20, 0x5, 0x0, 0x8, [0x5, 0x101, 0x3, 0x79d, 0x6, 0x2, 0xfffff001]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x153b246c, 0x2, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @remote, {[@noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'erspan0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x7, 0x0, 0x10001, 0xafc, {{0xb, 0x4, 0x2, 0x9, 0x2c, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, {[@rr={0x7, 0x17, 0xff, [@multicast2, @private=0xa010101, @private=0xa010102, @rand_addr=0x64010102, @loopback]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={0x1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vxcan1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000a00)={0x5bc, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfff5, 0x2, 0x4, 0xed3b}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffeff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5b0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2b7}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x40}, 0x400c0c1) socket$nl_route(0x10, 0x3, 0x0) r17 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001040)=@id, &(0x7f0000001080)=0x10, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r17, 0x10f, 0x81, &(0x7f00000010c0), &(0x7f0000001100)=0x4) sendmmsg(r17, &(0x7f0000002a40)=[{{&(0x7f0000001140)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000001400)=[{&(0x7f00000011c0)="f7556229d94cb4c7321361112fefb8b70e6cf840802e83465683c1943d20c282ac8533ff99fe74437ccd716bd3265f6e58c7a02ffb3d46777a206e8f586174abecef5162cf794c0eca", 0x49}, {&(0x7f0000001240)="2c99724b7b1ccbc5b3dd83cdad205281b36dcecb27aa9c0f4ebc8e76a646b3d17f7628734a8a1ce4ad1b5444e32944d4019217a2b746d4ef6d4efbb5e6c383b422e6bfd242", 0x45}, {&(0x7f00000012c0)="02e792a0dd", 0x5}, {&(0x7f0000001300)="4d8c58b550af33e2a1544b1b2a41681b31d9c20b966413085e6c86fedbd5f8d5ad46ab68fba19ee88be54f991accfbfd1cb1b311c55f41f3884976104ef34ca868894218abd533313c3f51bde000ae0cff5fe56b0f3b600fa9ac4e3adf91fe942fa12a86269720a23706186d178f20da38aecad10c9d27867597cf7dd2ece5a7f8a01910d31ccd331d0eb85991fadfccadf855d2fc22c18f76d6c6586db945061e2724a7e7a4d4534315f9", 0xab}, {&(0x7f00000013c0)="0f0898ef66ccf150b4f39f0d879423c201b195ce8c0b3dfa3bba34c25383c6f7c3eac0365af2fafcdc744b85ab281f438a53cffb6da3f0c97fee58ee4e01246e", 0x40}], 0x5, &(0x7f0000001480)=[{0xe8, 0x88, 0xb, "79245fa3eb7db5344b61969135ee14f0f9b2888d1726cb78f8dc853d927006a4c7b7e78a8c8c4c4d5429a12bfcb2311296e2ff04cd14c0978efb31f8d957ee15781b73c43cb12972a59a0784d77a32189202b1aa2ac7226280b78c9af16f2ff46c994a59dd33b241b7dbd0436a9535ba3c2e54097314b9466a643c8c4879c80e753fdd9920bbfa4089df3edefcfceb22dff8e6dc33a0c33116f59733fc772bfb1b8817388b5c16513f15ff95c189ad33867f0f5ca84834d0917603ed160667bb88deff3c29385e22547a8e4054d4baa885d331a14d86"}, {0x18, 0x115, 0x3, "878c000b83b8"}, {0xc0, 0x113, 0xfff, "5d792f69c56b90f97a2b9e65c82293fe17b5c9c144029d72ec547d8af9d124bf50f91636f9d2ff11147415039b34427b65f55be34d7614072b42cb09164d5898365eb200d6d66a38d7bc7f41965b576ae4911c70cc066c7d6980f48f3db1982c3d5a830ef45caaaa9def1778585bb63e503d02df17d1956259e1e50c99705d88cb231ce9ca1655c03a3cc969700bb312dc9ab5dc0f5be453ef21dce293950a725b8e4d32805a817c6888540d4bdf6f"}, {0x48, 0x1e, 0x1ff, "ad0a05831ef7dc6317ae07fa44fb4adaf0250fd2a7a68d2cccd2bb5e59b7466958caa2119ba4e6533af96056b42939be724c3917"}, {0x80, 0x10a, 0x5, "3fe43d8f25581909319b97061b96b395b79111fadc12adbcd2d5541f852274f30eba45d7c898c993f72d3c9c504ddd49538952b0edf3285ad7ab6832cb56f0a0565891c50b80650419acbff9e92fbbdc2447aee4af2b65b6d5f8d028d739433fbd413bd2dd2b68520d3e"}, {0x100, 0x103, 0xc, "b16028441257af68361e40f6ec36effb7c06eeb316aaaf75749e56164cc978cbf80bb07d36974076a425f589013f038725dee220318a3741afcb50f2e22246b4aec4c5f38065aad038232d8292294119b6a56e852423c54074da2f2dc1f683ce919336b9fc3869023bcedb88b9ec22fbf4869e740800727e8f6facdd9c5542ce0db62dfe8cc55576a7f43e395433d6e74bbc614af376cdd2a7e3e143d153968c13a2e831d8c03e7ab8080f45d266ce96ba32900377a1a51f9aaa2ecaa3fde0729f511ff838bf5556c60c45c8fc127915e9b8093425989c91c1809ad0842f2bd3a2f803306188bb2d31594e10"}, {0xf8, 0x111, 0x7, "5fd00b4250d2b551d5795fabcd7334264bb2456c17d95e6af568390af95ea3c457863fa15717b36b778556d471d244331a7b7ce11bc0964058b67c9138eed7baa634d24ed0927918b75be3db1c325e34694e13452daad3c82fe0240b4c91179c4e74e78de467be5c93b12569b74b20da00d59b592d1f4e9dd917639b059148496aea5cbd4b43100df96eda640efee4284cbd18f4b7deb4210f9afab6ddb575aabbc1c85844fde5382f3e277dd710fb7aa43d9d98178e4ed6d6b584ef0500dfdfbb837603e2ff6ae138763d485e5cd532fffed7e0138795450f7b1785a459f19915098000cab715"}, {0x100, 0x108, 0xfffffffc, "fc0164d760aa8745ddd3939a377d1e6ec3e9ea600a783e1c65ce5fca457609d3c419fc96aa7ee99f0d57d80910847429fc98f56a8a4b5e1dc311b662916f1a482695fae8ddbeecdd8a708031cc2e62d658a028c9a4466cbe6c52890817aff4e974908f0c65564420adf11ae79bc303c15dc160cc9625b5e0414c505fe9c70585932884d09eae580fb8131dcef5cf4f7473f2707ae9c668d12314193c2989c00e0f51464c8314951f4cbc8440891c6afb8868e69900fad5bd5fc0aa5d1b207bf3e5f5dbd7272752e5e49503fc33c0bb1917cdc5d885d2a56848baa9023849e2f651518c9cec8ddd2dfcdcbd675d47"}, {0x1010, 0x0, 0x2, "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"}], 0x1590}}], 0x1, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r18, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r19, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000002e00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2b36dd951644a7a9}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002c00)={0x1b0, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffd6dd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2615}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe95}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x988b731c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24004847}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f80)={&(0x7f0000002e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x4}}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @float={0x7, 0x0, 0x0, 0x10, 0xc}, @enum64={0x2, 0x4, 0x0, 0x13, 0x1, 0xb, [{0xc, 0x3, 0x1}, {0xf, 0x10000, 0xe}, {0xc, 0x5}, {0x6, 0xf4, 0x1ff}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x8, 0xffff}, {0x5, 0x7}]}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x61, 0x0, 0x5c}, @datasec={0x3, 0x2, 0x0, 0xf, 0x1, [{0x1, 0x6, 0xffffffff}, {0x4, 0x81, 0x8}], 'F'}]}, {0x0, [0x30, 0x61, 0x61, 0x5f, 0x5f, 0x30, 0x0, 0x2e]}}, &(0x7f0000002f40)=""/37, 0xee, 0x25, 0x0, 0x5}, 0x28) 2m31.127204745s ago: executing program 3 (id=1997): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x2, 0x6, 0x2, 0x2, 0x5, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_address={0x3, 0x17, 0x2b, 0x80, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x28}}, 0x40c0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x10000, '\x00', 0x0, r3, 0x1}, 0x50) ioctl$XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f00000003c0)={r1, 0x0, 0x4, 0x9, 0x101, 0x4, [0x1, 0x590, 0x3, 0x0, 0x25, 0x4]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000700)={r5}) (async) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000640), &(0x7f0000000680)=0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64000000000c00028008000f00ff7f0000"], 0x3c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=0x40) recvmmsg(r1, &(0x7f0000009880)=[{{&(0x7f0000001700)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001780)=""/171, 0xab}, {&(0x7f0000001840)=""/43, 0x2b}, {&(0x7f0000001880)=""/172, 0xac}], 0x3, &(0x7f0000001980)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002980)=@isdn, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002a00)=""/67, 0x43}], 0x1, &(0x7f0000002ac0)=""/85, 0x55}, 0x2}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002b40)=""/6, 0x6}, {&(0x7f0000002b80)=""/247, 0xf7}, {&(0x7f0000002c80)=""/24, 0x18}, {&(0x7f0000002cc0)=""/39, 0x27}], 0x4, &(0x7f0000002d40)=""/71, 0x47}, 0x5}, {{&(0x7f0000002dc0)=@qipcrtr, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002e40)=""/44, 0x2c}, {&(0x7f0000002e80)=""/81, 0x51}, {&(0x7f0000002f00)=""/147, 0x93}], 0x3, &(0x7f0000003000)=""/64, 0x40}, 0x7ff}, {{&(0x7f0000003040)=@nl=@unspec, 0x80, &(0x7f0000005440)=[{&(0x7f00000030c0)=""/189, 0xbd}, {&(0x7f0000003180)=""/21, 0x15}, {&(0x7f00000031c0)=""/144, 0x90}, {&(0x7f0000003280)=""/245, 0xf5}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/35, 0x23}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)}, {&(0x7f0000005400)=""/12, 0xc}], 0x9, &(0x7f0000005500)=""/238, 0xee}, 0x7}, {{&(0x7f0000005600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000006c80)=[{&(0x7f0000005680)=""/116, 0x74}, {&(0x7f0000005700)=""/134, 0x86}, {&(0x7f00000057c0)=""/99, 0x63}, {&(0x7f0000005840)=""/128, 0x80}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/219, 0xdb}, {&(0x7f00000069c0)=""/72, 0x48}, {&(0x7f0000006a40)=""/222, 0xde}, {&(0x7f0000006b40)=""/88, 0x58}, {&(0x7f0000006bc0)=""/176, 0xb0}], 0xa, &(0x7f0000006d40)=""/205, 0xcd}, 0x4}, {{&(0x7f0000006e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000008000)=[{&(0x7f0000006ec0)=""/4096, 0x1000}, {&(0x7f0000007ec0)=""/18, 0x12}, {&(0x7f0000007f00)=""/62, 0x3e}, {&(0x7f0000007f40)=""/146, 0x92}], 0x4, &(0x7f0000008040)=""/225, 0xe1}, 0x10000}, {{&(0x7f0000008140)=@nfc_llcp, 0x80, &(0x7f00000096c0)=[{&(0x7f00000081c0)=""/36, 0x24}, {&(0x7f0000008200)=""/129, 0x81}, {&(0x7f00000082c0)=""/247, 0xf7}, {&(0x7f00000083c0)=""/35, 0x23}, {&(0x7f0000008400)=""/36, 0x24}, {&(0x7f0000008440)=""/135, 0x87}, {&(0x7f0000008500)}, {&(0x7f0000008540)=""/147, 0x93}, {&(0x7f0000008600)=""/183, 0xb7}, {&(0x7f00000086c0)=""/4096, 0x1000}], 0xa, &(0x7f0000009780)=""/239, 0xef}, 0x3ff}], 0x8, 0x2002, 0x0) (async) bind$llc(r3, &(0x7f0000000140)={0x1a, 0xf, 0x3, 0x7, 0x4, 0x8, @remote}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0x9}}, 0xf62, 0x6, 0xb20, 0x2, 0x0, 0x1, 0x96}, &(0x7f0000000580)=0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000005c0)=@sack_info={r9, 0x7, 0xe}, &(0x7f0000000600)=0xc) 2m30.992574377s ago: executing program 3 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac05]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x40, 0x6d}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) 2m25.064022367s ago: executing program 32 (id=1887): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002700010029bd70000000000006"], 0x14}}, 0xc000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004d0}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x4a}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) 2m20.422589949s ago: executing program 33 (id=1941): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) 2m15.858308217s ago: executing program 34 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac05]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x40, 0x6d}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) 2m0.679657587s ago: executing program 6 (id=2183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m0.504707506s ago: executing program 6 (id=2186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x9, &(0x7f0000000200)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffc}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8809}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88be}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f5}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}]}], {0x14}}, 0xa8}}, 0x0) 2m0.363183844s ago: executing program 6 (id=2189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x5f5e0ff}, @fwd={0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4096, 0x35, 0x1000, 0xa}, 0x20) 2m0.084301371s ago: executing program 6 (id=2193): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0xa7, 0x6d8, 0x3, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8000, 0x8000, 0xe}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f00000003c0)={0x1, 0x20ec, 0x6af, 0x7fff, 0xff, 0x1, 0xb8, 0x401}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@private0, @mcast1, @private2, 0x1, 0x8, 0x5, 0x100, 0x15e0000000, 0x60}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000000060000000400000001000000000000004a37fd4861f58dfe3fd9f8a6d6d2152f6c191adec7c92ef3cd9851e60df9c41e0179789a59c5b4346e593d3f0e00ec7d10fed0915078ef3fc682769a6d3ab7234699d2", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r6, r5}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000900)}, 0x20) sendto$inet6(r3, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0xe5, 0x0, 0x6, 0x4, 0x6, 0x0, 0xf, 0x8}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2d, &(0x7f00000000c0)=0xffffffff, 0xfeb3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'vlan0\x00', {'vxcan1\x00'}, 0x3}) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010101}, 0x10) 1m59.463745895s ago: executing program 6 (id=2200): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}]}, 0x3c}, 0x1, 0x620b}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r2, 0x2}, 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cdaec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad7481d8cc1bea8dc978402a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8b06c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m58.856277973s ago: executing program 6 (id=2206): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="0802400000000000000000000000000085000000ae0000019500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) 1m43.720638439s ago: executing program 35 (id=2206): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="0802400000000000000000000000000085000000ae0000019500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) 1m6.176386509s ago: executing program 1 (id=2451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0002"], 0x24}}, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000600000d00000000030000400000000000000000000000eeffffff000500000003000000000000000000005f2e00"], 0x0, 0x4a, 0x0, 0xfffffffe, 0xfffffffc}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xe2b3}, &(0x7f0000000040)=0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r6, 0xffa5}, 0x8) 1m5.150960948s ago: executing program 1 (id=2457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random=';'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x90) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x10000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)=@isdn={0x22, 0x1, 0x3, 0x8, 0xa1}, 0x80, &(0x7f0000000780)=[{0x0}], 0x1, &(0x7f0000000800)=[{0x50, 0x1, 0xa4, "efd1cb201471bdbdecd31191c00975d532c2ea88b0d62c07a3a116f36c7e06a9c6a0d72f2cfd7bc02e6808eb78304cb248fd72d8d7f770d8a5a45e68aaafbbb1"}, {0xe8, 0x6, 0x0, "859f55e3807c7c3d1d434baf16e839f0f7dbea94b7e3da5b8656022169837fca5250b5d029622e2c85e39fdf3d4ff6543fbee1d2760333423aa8017973775bfd6511592bc7631d3eba0baf80fdca7f2d50a79b1e835008b72a8d153eb19d8d9d1826ac59e1467241958dca41123154892f9b0b13d1bd53b153b28fc562687b9d3156627e7725dead7c4f56dd2f04686a3d001c8192467d0ace1a2d27d4ebf6f14ab8fd65fd700c3249eb9c62d6c9ef6c28dcfd5fc2d87c6de906e231a3b744d8dd79fc9397a3b74eccb7b7daf97e68219b"}, {0xa8, 0x104, 0x9, "43a775d0c1a9da8da16d3656f5baac8e41244c8885b482fa86c5ab97b768180f26e9f1dc26e1709d543a773330820f6cabdaefc3a4479a63415e68b3ecf30f766c36d5da383d16c0cf3916f1946b7eafc9d959de2401ee44776691fab3cc6e138451740d17ce28004d2fc7024521b069186fb17bfdaee021dea3282f6d33388586013256f28daa58ad3295362d76fb54de"}, {0x60, 0x113, 0x400, "14403713593c5186ae4144409660e585e003f6e514368cab653016bea8d696d2270bef2b4819756d27a9ff9507f150b17b3b135fc9baeee2ddc6e8dc758dd76d6a241ac64d88f65e93"}], 0x240}, 0x4800) 1m4.066223421s ago: executing program 1 (id=2462): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1m3.054089449s ago: executing program 1 (id=2466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="800000000002010400000000000000b73933dc002400028014000180020000000000000008000200ac1eff000c00028005000100000000002400038014000180080001000000000008000200ac1414000c00028005000100000000002400018014000180080001000000000008000200ac1e00010c0002800500010001000000"], 0x80}}, 0x0) 1m2.505130322s ago: executing program 1 (id=2468): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000002d0007012abd7000ffdbdf250a7c0000080001"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000007b118800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r10, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400004000fcffffff000003e4", @ANYRES32=r10, @ANYBLOB="0000000002000000200012800800010073697400140002800800140001"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001040)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x60108800}, 0xc, &(0x7f0000001000)={&(0x7f00000008c0)={0x70c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xebc1, 0x40, 0x0, 0x20000000}, {0x3, 0x8, 0x7, 0x80}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4c35}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x1d, 0x0, 0x4a7e}, {0x3ff, 0x0, 0xf, 0x48}, {0x80, 0x4, 0x84}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r3}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x1, 0xfb, 0x27}, {0x3, 0xb5, 0x4, 0x5}, {0x4, 0x45, 0x3, 0x7}, {0x7, 0x5, 0x4, 0x8e}, {0x40, 0x0, 0x3, 0x80}]}}}]}}, {{0x8, 0x1, r7}, {0x25c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9f8f}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x70c}, 0x1, 0x0, 0x0, 0x40040}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xaaf, 0x7, 0x1}, {{0x3}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x20, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x1000}, {0x1, 0x3, 0x2}}}, @TCF_EM_META={0x10, 0x2, 0x0, 0x0, {{0xd26, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x78}}, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r5, 0x80306e85, &(0x7f0000000640)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r13) sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r14, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x653}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) r15 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r15, 0x11b, 0x2, &(0x7f0000000680)=0x8, 0x4) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="17d85a6cf0987e2b06c519b8ec051b54b6a5615fbb943ed56ec6bf0db8331055e755db21a9afcc20829b4af7034d7bd7df426d23492a92fa1c7eb08671b5709cba8faf01d89e820dc7da353ca06452c039c09ac373cb383033eb"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x82800201}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x150, r12, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0xfffd, 0x0, 0x0, 0x9, @vifc_lcl_ifindex=r3, @private}, 0x10) 1m0.783847296s ago: executing program 1 (id=2473): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002700010029bd70000000000006", @ANYRES32=r0], 0x14}}, 0x4000) 45.711314181s ago: executing program 36 (id=2473): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002700010029bd70000000000006", @ANYRES32=r0], 0x14}}, 0x4000) 14.464833224s ago: executing program 0 (id=2616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x1}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="044d88b6c555df", 0x7}, 0x1, 0x0, 0x0, 0x8004}, 0x90) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300021000000000000000040000000200080008000000540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000020000200010000000000000005fd80ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6008ffff00103a00fe8000000000000000000000000000aafe80000000000000000000000000003c8c0090780080af070000000000010001"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a03000000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a30000000005c000000060a010400000000000000000100000034000480300001800700010063740000240002800500030000000000080002400000004b0800024000000012080004400000001708000b40000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) 12.306590741s ago: executing program 0 (id=2621): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x24008802) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000064000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61147c00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x23) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb894f450000140000000001170000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040004}, 0x4c000) 11.843244474s ago: executing program 5 (id=2623): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="68000000020701080000000000000000010000000c0002400040000500000000080005400000000108000540000000020c000240ffffffffffff255a6b14a8b49f7e041058fffe0900010073797a30000000000900010073797a31000000000800000000"], 0x68}, 0x1, 0x0, 0x0, 0xc084}, 0x4004) 10.780936165s ago: executing program 5 (id=2627): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "fe4f5689b3d746b5", "46204c6f3b95b0f787445b9ef55830c4", "40c10400", "1534faae140d2349"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}], 0x1, 0x23, 0x0) sendto$inet6(r3, &(0x7f0000000180)='d', 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffca}]}}]}, 0x3c}}, 0xc0d0) 10.250270938s ago: executing program 0 (id=2630): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 9.371710523s ago: executing program 0 (id=2633): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a01"], 0x40}, 0xfffe) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a01"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) syz_emit_ethernet(0x11, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@llc_tr={0x11, {@llc={0x42, 0xbc, '6'}}}}}, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 7.649097193s ago: executing program 7 (id=2638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) (async) 7.455404838s ago: executing program 8 (id=2639): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x891d, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd0, &(0x7f0000000280)=0xa, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="58000000000000000000b7680001000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, r5, 0x25, 0x10, @val=@perf_event={0x1}}, 0x18) recvmmsg(r3, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, &(0x7f0000000240), &(0x7f00000001c0)=r7}, 0xffffffffffffff48) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000008c0)={@remote, @dev}, &(0x7f0000000900)=0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=0x1, @ANYBLOB="ffff000000000000000000000000000000000000d171edf47362ac142671ffcd8f8fa88d9fff8675ee051449f4c528cb3b3d2826f1b3df00d85c186b9512a1d7bdc52e9fd57ed9505318ae6ca457af293b4c3336", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000400"/28], 0x50) r10 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r10, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r10, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) recvmmsg$unix(r11, 0x0, 0x0, 0x10000, 0x0) 7.358529213s ago: executing program 0 (id=2640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) r1 = socket$kcm(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8907, 0x0) recvmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000840)={'erspan0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0x72, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 6.680157576s ago: executing program 5 (id=2641): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e2a, 0xfffffffb, @local, 0x80009}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xe325, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000880)) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x40080) 6.167139051s ago: executing program 5 (id=2642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000300003fd31340e92c4bb8"], 0x48}, 0x300}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'ip6gre0\x00', 0x4000}) (async, rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x6, 0x800, 0x8, {}, {0x0, 0xea60}, {0x3}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x1a, 0x2, 0x0, 0x0, "c547817f0a378d7c9c04b533511d024c4fc9295c49443da8d1bd0a8762717a6962675d84648ed270eb9de48bf12708f8c8eaaf8a281319336c237b90a0ec1380"}}, 0x80}, 0x1, 0x0, 0x0, 0xd548ca244de68332}, 0x48840) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x4b, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r6, &(0x7f00000006c0)={0x11, 0x0, r9, 0x1, 0xb, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) syz_emit_ethernet(0x80, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "f6fa88", 0x46, 0x2f, 0x1, @mcast1, @remote, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x5}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x7f]}, {0x1}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0x9, 0x3, 0x0, 0x3, 0x0, 0x3}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x0, 0x1, 0x1, 0x2, 0x3, 0xf}, 0x2, {0x8000, 0x2, 0x0, 0x5, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (rerun: 64) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./cgroup/cgroup.procs/../file0\x00', 0x0, 0x8}, 0x18) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010009112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c0004"]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x1cc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {0x0, 0x5}, {0xffff, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x19c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xf}}, @TCA_BASIC_EMATCHES={0x190, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xe33, 0x7, 0x29}, {{0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x6f, 0x2, 0x9982}, {0x1d, 0x3, 0x0, "549033"}}}, @TCF_EM_IPT={0x30, 0x2, 0x0, 0x0, {{0xfb1, 0x9, 0x100}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe9}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0xe8af}, {0x0, 0x6, 0x4, 0x59f}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x9}, {0x26ec, 0x4, 0xc0d1, 0x852eb2178ac229f4, 0x4, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x400}, {0x7fff, 0xa, 0x1, "8450cc65ea1f2552d686"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xe1, 0x1, 0x3}, {0x3, 0xe6, 0x3, 0x2, 0xd, 0x2}}}, @TCF_EM_CONTAINER={0xc8, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x1}, "82eacf9e01debad18350843be55af7b97888926c966680eb250c01d4edcc2486eb305ce04f097699b1a4943929e2c9afb5aae09e3ca83ceebbab1d2a747fb5deb54b5e9374d93dcb9de4e62e08a895bfd2c9ec8803993fea90728a918071a32f7bfded7075312c28f94f4800dcec83e77d7139b44cc85bc836cde9d18a5f85e4b08867c0b6ec91b28d7b263dd9ca0d79d8532db4a933a468c089873315eb3e6d3d58fbe24a48d7450d42a975b57922f21c105228ac45c6d6c97b"}}]}]}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) 5.496151213s ago: executing program 8 (id=2643): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0xfffffffe}], 0x1, 0x0, 0x0) 4.990802432s ago: executing program 0 (id=2644): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x5e, @local, 0x4e24, 0x4, 'wlc\x00', 0x0, 0x8, 0x21}, {@loopback, 0x4e21, 0x1, 0x5, 0x5, 0x1}}, 0x44) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001100050000000001feffffff07000000", @ANYRES32=r2, @ANYBLOB="402000000001000004001a80cbd423e52c26c9a681c1467234e43180207de3655428ea281094015ce07969ca681a507c7e14f9eb7e2e313dfef4a30cc0686276f72fc97c28f501b9dc6f3e23f0ee7af31f78949c0b90560c507e8ce3db82d77398ce90d1e6f3774b1b44e90717fd03d8c4ba1562552c6ef890c16321823cd499aec959ddd32af08befc2396e9047c3957eb3fd5c8a03e6188cb83a1bc41ceafe58f8f6323ac477289a10bea70bef2c584bb831142700000000"], 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0xa888, r10, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 4.695726227s ago: executing program 7 (id=2645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f00000009c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400804c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}}, 0x0) 4.076929496s ago: executing program 8 (id=2646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008010) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {0x0, 0x9}, {0x8, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20048044) 3.913703612s ago: executing program 7 (id=2647): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf25190000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x4000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000002e00000079af0000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713f"], 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000340)=""/201, 0xc9, 0x0, &(0x7f0000000440)=""/130, 0x82}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r6, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r7 = socket(0x10, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x7abd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0004}, 0x20004001) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r8], 0x38}}, 0x10) 2.631588128s ago: executing program 7 (id=2648): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c"], 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000004200010000000000000000000301000000000000260001000011223344556677886b91cf4d4e99aabb0800451100140000000001170000010203040506070800000c00020006000600884700000c00030008001100040040da4e113f630059ff8dd4dc07dc5d0b2d17c935bb5a00436cfddce09bda5dbda11b069e2379c0aa4df0853ef2d2028716f581527631e42614529431"], 0x58}}, 0x0) 2.253495462s ago: executing program 8 (id=2649): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (rerun: 64) 1.969339453s ago: executing program 9 (id=2520): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0xc8c0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000040)='.)$!,!*{\x00', 0x101c40, &(0x7f0000000080)={@_ha_fsid={[0x4, 0x6]}, {0x4, 0x6, 0x8000, 0x9}}, 0x0, &(0x7f0000000180), &(0x7f0000000200)=0x4}) write$tun(r3, &(0x7f0000000280)={@void, @val={0x2, 0x1, 0x40, 0x3, 0x3, 0x1}, @x25={0x1, 0x4, 0x17, "60276010d1cbeeb6d7802b018d64901bd68f85"}}, 0x20) 1.900029819s ago: executing program 7 (id=2650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) connect$inet6(r5, &(0x7f00000005c0)={0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x284, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @private2, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6d0}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd1}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff8b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b42}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe96}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x370}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffb0}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x40004}, 0x48000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000005680), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000005a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000003000000080002000000000008000400ac1414aa08000500e0000002080001"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4084010) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x78}, 0x1, 0xffffffff00000003}, 0x200488c0) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf255200000008000300", @ANYRES32=r7, @ANYBLOB='H\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000010) 1.898462579s ago: executing program 5 (id=2651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000005c0)={{r0, &(0x7f00000000c0)='*P&}().\xe3:\x9f\\[\x00', 0x200000, &(0x7f0000000340)={@align=0x7, {0x0, 0x4, 0x9, 0x6}}, 0x2, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x2}, {[0x2, 0xe88d, 0x5, 0x8]}, 0x505, 0xf6, &(0x7f0000000400)=""/246}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) connect$nfc_raw(r2, &(0x7f0000000680)={0x27, r3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000e1ff30c2add443ff2bf3ec1eac33f43fc0f207dcfd3d16d563c411fef2b0b3af3764788aba92fed7516f308eca5e76e4428bf1f758"]) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xfc, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x10}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xfffffff6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x5}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008004) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280060014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.542714579s ago: executing program 8 (id=2653): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) socket(0x0, 0x80001, 0x100000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) pread64(r2, &(0x7f0000001840)=""/4096, 0x1003, 0x1) close(r0) 1.229031251s ago: executing program 9 (id=2654): r0 = socket(0x1e, 0x4, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x2, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x9], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\\\''}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '/[%\x7f['}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) (async, rerun: 32) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (rerun: 32) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) (async, rerun: 32) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32) listen(r7, 0x5) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) shutdown(r7, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) (async, rerun: 32) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 635.398551ms ago: executing program 7 (id=2655): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x54}}, 0x0) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) close(0x3) unshare(0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty}}}}}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x6, 0x2, 0x3, 0x3}]}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x14000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)={[{0x2d, 'memory'}]}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', r5, 0x0, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 221.298018ms ago: executing program 5 (id=2656): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd0, r0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x34, 0xc5, "7500a0815441400db90890d287fea117d60638c6adea5b208c106e1177bd617ba4f0320d37f202e5a584c7c3949a425a"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4fa8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x65, 0xc5, "187517dbfc0c9d6314a742e507a30359d9ea2d6aebf744f6ad576b810ee0a04eca9dd1a4f1e0fcfb13f1890ac4045f2b48b043bcfd549554f252f7932942a6ac05496bfd309788b9241c341850f985ab83d93e4bf9ca364c1f662fe3de4d7a17b4"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48801}, 0x4000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r5, 0xa1) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6(0xa, 0x3, 0xff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000600)={@multicast2, @loopback, 0x0}, &(0x7f0000000640)=0xc) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcfbe, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000580)='GPL\x00', 0x40, 0x1b, &(0x7f00000005c0)=""/27, 0x41000, 0x8, '\x00', r7, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x2, 0x1, 0x3}, {0x4, 0x3, 0x10, 0x3}, {0x5, 0x4, 0x0, 0x4}, {0x4, 0x3, 0x7, 0x6}, {0x5, 0x3, 0x8, 0x5fc49455fbde347a}, {0x3, 0x5, 0x9, 0xc}, {0x3, 0x3, 0xa, 0x6}, {0x3, 0x5, 0x2, 0x1}], 0x10, 0x40}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r9, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0) 0s ago: executing program 8 (id=2657): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000000000000f0001006f7673de080009002a40000000000000000000000000000000000000000000000060735f8a0000000016cc9f4489104c7b1edde6b83997b7a7c44b3e90529ce66d6f2b18861e", @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES64], 0x38}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a00000014000180100004000000000000000000000000000c000280080001"], 0x38}}, 0x20040000) kernel console output (not intermixed with test programs): 900959][T11714] netlink: 'syz.1.1489': attribute type 7 has an invalid length. [ 249.900973][T11714] netlink: 'syz.1.1489': attribute type 8 has an invalid length. [ 249.900986][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 250.358451][T11738] netlink: 'syz.3.1495': attribute type 16 has an invalid length. [ 250.358474][T11738] netlink: 'syz.3.1495': attribute type 3 has an invalid length. [ 250.358488][T11738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1495'. [ 250.359490][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 250.842783][T11764] netlink: 'syz.1.1497': attribute type 6 has an invalid length. [ 250.842809][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. [ 250.879882][T11766] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 250.890976][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1498'. [ 251.402486][T11779] netlink: 'syz.0.1501': attribute type 8 has an invalid length. [ 251.902677][T11792] netlink: 'syz.1.1506': attribute type 10 has an invalid length. [ 252.184737][T11802] netlink: 'syz.4.1510': attribute type 4 has an invalid length. [ 252.184759][T11802] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1510'. [ 252.189505][T11802] net_ratelimit: 24 callbacks suppressed [ 252.189522][T11802] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 253.029234][T11856] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 253.541208][T11878] netlink: 'syz.4.1536': attribute type 3 has an invalid length. [ 253.586987][T11878] netlink: 'syz.4.1536': attribute type 3 has an invalid length. [ 253.875153][T11892] bridge3: entered promiscuous mode [ 253.875197][T11892] bridge3: entered allmulticast mode [ 254.100540][T11909] __nla_validate_parse: 4 callbacks suppressed [ 254.100561][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1544'. [ 254.217207][T11909] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 254.295290][T11913] bond6: option downdelay: invalid value (18446744073709551615) [ 254.295340][T11913] bond6: option downdelay: allowed values 0 - 2147483647 [ 254.299486][T11913] bond6 (unregistering): Released all slaves [ 254.389766][T11922] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.394821][T11909] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1544'. [ 254.539751][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1550'. [ 254.539902][T11932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1550'. [ 254.609183][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1549'. [ 254.817726][T11941] pim6reg: entered allmulticast mode [ 254.922109][T11945] team0: entered allmulticast mode [ 254.922136][T11945] team_slave_0: entered allmulticast mode [ 254.922156][T11945] team_slave_1: entered allmulticast mode [ 254.922174][T11945] dummy0: entered allmulticast mode [ 254.925277][T11945] team0: left allmulticast mode [ 254.925328][T11945] team_slave_0: left allmulticast mode [ 254.925346][T11945] team_slave_1: left allmulticast mode [ 254.925362][T11945] dummy0: left allmulticast mode [ 254.928019][T11945] pim6reg: left allmulticast mode [ 255.004984][T11946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.033543][T11948] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 255.085966][T11948] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 255.119768][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 255.149504][T11954] team0: entered promiscuous mode [ 255.149529][T11954] team_slave_0: entered promiscuous mode [ 255.149728][T11954] team_slave_1: entered promiscuous mode [ 255.169602][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 255.188148][T11953] team0: left promiscuous mode [ 255.188172][T11953] team_slave_0: left promiscuous mode [ 255.188408][T11953] team_slave_1: left promiscuous mode [ 255.261043][T11957] netlink: 'syz.1.1560': attribute type 12 has an invalid length. [ 255.261066][T11957] netlink: 'syz.1.1560': attribute type 29 has an invalid length. [ 255.261080][T11957] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1560'. [ 255.261100][T11957] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1560'. [ 255.364223][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1560'. [ 255.465895][T11962] team0 (unregistering): Port device team_slave_0 removed [ 255.509000][T11962] team0 (unregistering): Port device team_slave_1 removed [ 255.626145][T11964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.745793][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.745860][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.013132][T11990] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 256.645280][T12023] vcan0: tx address claim with different name [ 256.804714][T12025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.239886][T12042] syzkaller1: entered promiscuous mode [ 257.239921][T12042] syzkaller1: entered allmulticast mode [ 257.506279][T12063] openvswitch: netlink: Unknown key attributes 20 [ 257.506516][T12063] openvswitch: netlink: Unknown key attributes 20 [ 257.506736][T12063] openvswitch: netlink: Unknown key attributes 20 [ 257.510458][T12063] openvswitch: netlink: Unknown key attributes 20 [ 257.510691][T12063] openvswitch: netlink: Unknown key attributes 20 [ 257.510910][T12063] openvswitch: netlink: Unknown key attributes 20 [ 257.511125][T12063] openvswitch: netlink: Unknown key attributes 20 [ 257.547505][T12063] openvswitch: netlink: Unknown key attributes 20 [ 257.547792][T12063] openvswitch: netlink: Unknown key attributes 20 [ 257.548020][T12063] openvswitch: netlink: Unknown key attributes 20 [ 258.108605][T12084] netlink: 'syz.4.1589': attribute type 21 has an invalid length. [ 260.408017][T12084] __nla_validate_parse: 8 callbacks suppressed [ 260.408033][T12084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1589'. [ 260.631068][ T93] tipc: Subscription rejected, illegal request [ 260.689210][T12105] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 260.755567][T12105] syzkaller0: entered promiscuous mode [ 260.755595][T12105] syzkaller0: entered allmulticast mode [ 260.978600][T12134] bond6: invalid ARP target 0.0.0.0 specified for addition [ 260.978629][T12134] bond6: option arp_ip_target: invalid value (0) [ 261.019523][T12134] bond6 (unregistering): Released all slaves [ 261.091001][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1601'. [ 261.229133][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'. [ 261.231241][T12143] netlink: 'syz.3.1601': attribute type 14 has an invalid length. [ 261.375462][T12144] bond6: invalid ARP target 0.0.0.0 specified for addition [ 261.375491][T12144] bond6: option arp_ip_target: invalid value (0) [ 261.406693][T12144] bond6 (unregistering): Released all slaves [ 261.859216][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 262.188006][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'. [ 262.539404][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 263.293530][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 263.293639][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1629'. [ 263.658629][T12268] netlink: 'syz.1.1635': attribute type 6 has an invalid length. [ 264.059748][T12284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1642'. [ 264.083825][T12285] ip6t_hbh: unknown flags 38 [ 264.128089][T12284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1642'. [ 264.419171][T12292] wg0 speed is unknown, defaulting to 1000 [ 264.433169][T12292] wg1 speed is unknown, defaulting to 1000 [ 264.841999][T12321] block nbd0: Unsupported socket: should be TCP or UNIX. [ 264.919926][T12296] net_ratelimit: 55 callbacks suppressed [ 264.919951][T12296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.046530][T12331] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 265.105996][T12338] sctp: [Deprecated]: syz.0.1649 (pid 12338) Use of int in maxseg socket option. [ 265.105996][T12338] Use struct sctp_assoc_value instead [ 265.130018][T12328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.298903][T12348] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 265.322350][T12331] 8021q: adding VLAN 0 to HW filter on device bond4 [ 265.358337][T12296] wg0 speed is unknown, defaulting to 1000 [ 265.440709][T12342] bond4: (slave geneve2): making interface the new active one [ 265.473738][T12342] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 265.495640][T12353] __nla_validate_parse: 10 callbacks suppressed [ 265.495662][T12353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1653'. [ 265.496941][T12353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1653'. [ 265.496984][T12353] netlink: 'syz.4.1653': attribute type 7 has an invalid length. [ 265.496999][T12353] netlink: 'syz.4.1653': attribute type 8 has an invalid length. [ 265.497012][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 265.669418][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 265.699233][T12351] veth7: entered allmulticast mode [ 265.724620][T12363] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 265.796335][T12365] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 265.798989][T12327] wg0 speed is unknown, defaulting to 1000 [ 265.870792][T12330] wg0 speed is unknown, defaulting to 1000 [ 265.979163][T12296] wg1 speed is unknown, defaulting to 1000 [ 266.094642][T12381] xt_addrtype: ipv6 does not support BROADCAST matching [ 266.107662][T12381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1658'. [ 266.107758][T12381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1658'. [ 266.153945][T12381] gretap3: entered promiscuous mode [ 266.153969][T12381] gretap3: entered allmulticast mode [ 266.338298][T12389] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 266.430937][T12391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.944295][T12327] wg1 speed is unknown, defaulting to 1000 [ 267.040702][T12415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1670'. [ 267.534533][T12427] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.890752][T12330] wg1 speed is unknown, defaulting to 1000 [ 267.951585][T12443] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 268.002957][T12445] team0: Port device xfrm0 removed [ 268.003430][T12445] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 268.096557][T12449] netlink: 'syz.2.1683': attribute type 11 has an invalid length. [ 268.383628][T12462] ip_tables: iptables: counters copy to user failed while replacing table [ 268.520796][T12466] tunl0: Caught tx_queue_len zero misconfig [ 268.634420][T12471] xt_LOG: prefix is not null-terminated [ 268.722555][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 268.796150][T12477] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 268.918437][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 268.979982][T12480] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 269.017722][ T5732] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 269.193038][T12495] x_tables: duplicate underflow at hook 4 [ 269.425451][T12506] xt_REDIRECT: bad rangesize 26624. [ 269.710256][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'. [ 269.947819][T12513] bond5 (unregistering): Released all slaves [ 270.303731][T12532] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.543229][T12540] netlink: 'syz.3.1711': attribute type 1 has an invalid length. [ 270.543254][T12540] __nla_validate_parse: 1 callbacks suppressed [ 270.543266][T12540] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1711'. [ 271.278763][T12561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.421820][T12565] veth0: entered promiscuous mode [ 271.422518][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 271.641076][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 271.727602][T12565] bond6: option xmit_hash_policy: invalid value (64) [ 271.745865][T12565] bond6 (unregistering): Released all slaves [ 271.845110][T12572] ip6_vti0: entered promiscuous mode [ 271.877345][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 271.901085][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 272.039225][T12570] bond6: option xmit_hash_policy: invalid value (64) [ 272.054253][T12570] bond6 (unregistering): Released all slaves [ 272.085935][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'. [ 272.089230][T12590] netlink: 'syz.0.1721': attribute type 1 has an invalid length. [ 272.089253][T12590] netlink: 'syz.0.1721': attribute type 7 has an invalid length. [ 272.089268][T12590] netlink: 'syz.0.1721': attribute type 8 has an invalid length. [ 272.089282][T12590] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1721'. [ 272.089353][T12590] NCSI netlink: No device for ifindex 65584 [ 272.090474][T12590] netlink: 'syz.0.1721': attribute type 1 has an invalid length. [ 272.090491][T12590] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1721'. [ 272.186154][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'. [ 272.200731][T12564] veth0: left promiscuous mode [ 272.303839][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 272.321890][T12599] bond0 (unregistering): Released all slaves [ 272.466078][T12604] netlink: 'syz.4.1724': attribute type 1 has an invalid length. [ 272.497509][T12600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.083789][T12681] macsec1: entered promiscuous mode [ 274.083820][T12681] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 274.085160][T12681] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 274.519522][T12704] netlink: zone id is out of range [ 274.519599][T12704] netlink: zone id is out of range [ 274.519606][T12704] netlink: zone id is out of range [ 274.519713][T12704] netlink: zone id is out of range [ 274.519891][T12704] netlink: zone id is out of range [ 274.519899][T12704] netlink: zone id is out of range [ 274.520153][T12704] netlink: zone id is out of range [ 274.520392][T12704] netlink: zone id is out of range [ 275.584992][T12744] syzkaller1: entered promiscuous mode [ 275.585016][T12744] syzkaller1: entered allmulticast mode [ 276.049901][T12767] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 276.050638][T12767] batman_adv: batadv0: Adding interface: gretap1 [ 276.069612][T12767] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.069654][T12767] batman_adv: batadv0: Interface activated: gretap1 [ 276.120275][T12781] __nla_validate_parse: 7 callbacks suppressed [ 276.120297][T12781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1770'. [ 276.299430][T12788] netlink: 'syz.0.1773': attribute type 1 has an invalid length. [ 276.299455][T12788] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1773'. [ 276.632812][T12810] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1776'. [ 276.671026][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 276.711578][ T6085] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.711630][ T6085] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.711667][ T6085] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.711703][ T6085] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.233376][T12832] net_ratelimit: 29 callbacks suppressed [ 277.233399][T12832] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 277.237910][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 277.237950][T12832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.588711][T12840] netlink: Unknown NAT attribute (type=9473, max=9) [ 277.588751][T12840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.630398][T12845] netlink: 'syz.3.1786': attribute type 1 has an invalid length. [ 277.630515][T12845] netlink: 'syz.3.1786': attribute type 2 has an invalid length. [ 277.630531][T12845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1786'. [ 278.187987][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1796'. [ 278.348706][T12882] block nbd0: Unsupported socket: should be TCP or UNIX. [ 278.492583][T12879] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1795'. [ 278.530534][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 279.058428][T12910] xt_CT: No such helper "pptp" [ 279.312772][T12926] netlink: 524 bytes leftover after parsing attributes in process `syz.3.1813'. [ 279.526573][T12939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.647576][T12944] netlink: 'syz.1.1818': attribute type 10 has an invalid length. [ 280.458750][T12992] xt_hashlimit: size too large, truncated to 1048576 [ 280.484969][T12981] xt_CT: No such helper "snmp_trap" [ 280.790878][T13009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.365787][T13067] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 281.505579][T13067] __nla_validate_parse: 6 callbacks suppressed [ 281.505603][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1839'. [ 281.505623][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1839'. [ 281.717174][T13102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.765048][T13102] xt_SECMARK: invalid mode: 9 [ 281.783236][T13104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.794253][T13104] xt_SECMARK: invalid mode: 9 [ 281.944446][T13016] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 282.079446][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 282.204690][T13132] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 282.222371][T13129] Cannot find add_set index 34 as target [ 282.279685][T13132] tap0: tun_chr_ioctl cmd 2148553947 [ 282.490649][T13135] sock: sock_timestamping_bind_phc: sock not bind to device [ 282.599211][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'. [ 282.623359][T13143] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1850'. [ 282.629227][T13144] netlink: 'syz.0.1851': attribute type 1 has an invalid length. [ 283.021218][T13144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.040343][T13149] netlink: 'syz.2.1853': attribute type 1 has an invalid length. [ 283.048975][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.049084][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.049158][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.053525][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.053621][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.053695][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.053763][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.053835][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.053903][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.053977][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054044][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054148][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054224][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054292][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054363][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054441][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054517][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054591][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054664][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054737][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054795][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054867][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.054933][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.055045][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.055118][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.132830][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.132917][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133013][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133093][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133167][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133234][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133306][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133371][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133451][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133517][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133590][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133664][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133729][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133802][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133911][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.133984][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.134054][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.134139][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.134212][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.134277][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.134358][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.176680][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.176793][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.176867][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.176928][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177001][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177075][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177149][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177229][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177303][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177375][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177513][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177587][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177659][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177732][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177805][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177871][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.177939][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.178006][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.178080][T13169] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 283.585253][T13148] bond0: (slave veth5): Enslaving as an active interface with a down link [ 283.735744][T13168] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 283.821853][T13168] bond0: (slave batadv1): making interface the new active one [ 283.828671][T13168] batadv1: entered promiscuous mode [ 283.866121][T13168] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 283.897525][T13176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1857'. [ 284.057080][T13186] netlink: 'syz.3.1858': attribute type 11 has an invalid length. [ 284.536809][T13213] netlink: 'syz.0.1864': attribute type 4 has an invalid length. [ 284.536840][T13213] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1864'. [ 284.798678][T13221] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.000036][T13230] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 285.460946][T13247] bond7: option min_links: invalid value (18446744073709551614) [ 285.460972][T13247] bond7: option min_links: allowed values 0 - 2147483647 [ 285.479885][T13247] bond7 (unregistering): Released all slaves [ 285.610624][T13261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1873'. [ 285.657347][T13269] netlink: 'syz.0.1876': attribute type 11 has an invalid length. [ 285.938802][T13280] dvmrp1: entered allmulticast mode [ 286.147435][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 286.147462][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 286.315704][T13297] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 286.501736][T13303] macsec2: entered promiscuous mode [ 286.501766][T13303] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 286.507719][T13303] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 286.541077][T13306] syzkaller0: Caught tx_queue_len zero misconfig [ 286.627380][T13309] __nla_validate_parse: 2 callbacks suppressed [ 286.627400][T13309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1891'. [ 286.627456][T13309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1891'. [ 286.664314][T13309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1891'. [ 286.681102][T13314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1891'. [ 286.790510][T13316] netlink: 'syz.4.1893': attribute type 4 has an invalid length. [ 286.989248][T13326] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1895'. [ 286.989278][T13326] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1895'. [ 287.071097][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1898'. [ 287.100622][T13329] netlink: 'syz.3.1897': attribute type 19 has an invalid length. [ 287.100650][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 287.173975][T13329] netlink: 'syz.3.1897': attribute type 19 has an invalid length. [ 287.174002][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 287.177324][ T6085] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.177589][ T6085] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.177673][ T6085] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.177713][ T6085] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.507672][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'. [ 288.145609][T13373] tipc: Failed to remove unknown binding: 66,0,0/0:2635233597/2635233598 [ 288.146229][T13373] tipc: Failed to remove unknown binding: 66,0,0/0:2635233597/2635233598 [ 288.219788][T13379] netlink: 'syz.1.1911': attribute type 83 has an invalid length. [ 288.250484][T13378] netlink: 'syz.1.1911': attribute type 12 has an invalid length. [ 288.250516][T13378] netlink: 'syz.1.1911': attribute type 29 has an invalid length. [ 288.398963][T13394] netlink: 'syz.4.1915': attribute type 9 has an invalid length. [ 288.660379][T13407] vlan0: entered allmulticast mode [ 288.660405][T13407] bond0: entered allmulticast mode [ 288.660421][T13407] bond_slave_0: entered allmulticast mode [ 288.660440][T13407] bond_slave_1: entered allmulticast mode [ 289.664186][T13446] ip_tables: iptables: counters copy to user failed while replacing table [ 290.291851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.325776][T13478] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 290.325808][T13478] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 290.386972][T13481] tipc: Started in network mode [ 290.387007][T13481] tipc: Node identity 72a1291b43cc, cluster identity 4711 [ 290.387241][T13481] tipc: Enabled bearer , priority 0 [ 290.434894][T13484] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 290.491246][T13489] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 291.420041][T13511] netlink: 'syz.3.1948': attribute type 1 has an invalid length. [ 291.437754][T13514] netlink: 'syz.3.1948': attribute type 1 has an invalid length. [ 291.501749][ T10] tipc: Node number set to 829237531 [ 291.787884][T13531] __nla_validate_parse: 7 callbacks suppressed [ 291.787900][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 291.788896][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 292.097824][T13546] geneve3: entered promiscuous mode [ 292.097851][T13546] geneve3: entered allmulticast mode [ 292.122595][ T6091] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 292.123801][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 292.123852][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 292.123899][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 292.266391][T13549] tunl0: entered promiscuous mode [ 292.270517][T13549] netlink: 'syz.0.1957': attribute type 4 has an invalid length. [ 292.270537][T13549] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1957'. [ 292.380581][T13551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1958'. [ 292.416238][T13552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1958'. [ 292.523881][T13558] tipc: Disabling bearer [ 292.713692][T13568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1965'. [ 292.714120][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1965'. [ 293.056745][T13585] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.056847][T13585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1969'. [ 294.067939][T13628] netlink: 'syz.1.1984': attribute type 1 has an invalid length. [ 294.118323][T13633] netlink: 'syz.0.1986': attribute type 10 has an invalid length. [ 294.208445][T13635] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1987'. [ 294.290002][T13637] team0: Device is already in use. [ 294.500660][T13644] syzkaller0: entered promiscuous mode [ 294.500682][T13644] syzkaller0: entered allmulticast mode [ 294.517892][T13650] x_tables: duplicate underflow at hook 1 [ 294.517990][T13650] x_tables: duplicate underflow at hook 1 [ 294.518073][T13650] x_tables: duplicate underflow at hook 1 [ 294.549195][T13650] x_tables: duplicate underflow at hook 1 [ 294.549308][T13650] x_tables: duplicate underflow at hook 1 [ 294.549395][T13650] x_tables: duplicate underflow at hook 1 [ 294.549493][T13650] x_tables: duplicate underflow at hook 1 [ 294.549583][T13650] x_tables: duplicate underflow at hook 1 [ 294.550259][T13650] x_tables: duplicate underflow at hook 1 [ 294.550354][T13650] x_tables: duplicate underflow at hook 1 [ 294.974287][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1994'. [ 295.134009][ T93] batadv1: left promiscuous mode [ 295.317303][T13685] ip6t_REJECT: ECHOREPLY is not supported [ 295.709467][T13708] --map-set only usable from mangle table [ 295.839136][T13714] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.629492][ T5710] wg1 speed is unknown, defaulting to 1000 [ 296.639729][T13731] xt_CONNSECMARK: invalid mode: 0 [ 296.778042][T13736] netlink: 'syz.1.2009': attribute type 8 has an invalid length. [ 296.859043][T13738] __nla_validate_parse: 3 callbacks suppressed [ 296.859068][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 297.043800][T13749] ip_tables: iptables: counters copy to user failed while replacing table [ 297.048517][T13749] veth0: entered promiscuous mode [ 297.049766][T13748] veth0: left promiscuous mode [ 297.338592][T13760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.407754][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 297.427892][T13768] netlink: 'syz.1.2018': attribute type 8 has an invalid length. [ 297.774914][T13784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2021'. [ 297.813555][T13784] netlink: 'syz.1.2021': attribute type 17 has an invalid length. [ 297.813580][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'. [ 297.813609][T13784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2021'. [ 298.185491][T13799] bond3 (unregistering): Released all slaves [ 298.353137][T13807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2024'. [ 298.360438][T13807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2024'. [ 298.468570][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2025'. [ 298.468594][T13810] tipc: Invalid UDP bearer configuration [ 298.468636][T13810] tipc: Enabling of bearer rejected, failed to enable media [ 298.759271][T13821] bond3: Removing last ns target with arp_interval on [ 298.773927][ T93] IPVS: starting estimator thread 0... [ 298.861825][T13825] IPVS: using max 23 ests per chain, 55200 per kthread [ 298.947716][T13832] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2033'. [ 298.985241][T13835] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 298.985321][T13835] gretap1: entered promiscuous mode [ 298.985333][T13835] gretap1: entered allmulticast mode [ 299.457324][T13854] netlink: 'syz.0.2038': attribute type 1 has an invalid length. [ 299.488789][T13857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2039'. [ 299.847868][T13871] syz_tun: entered allmulticast mode [ 299.862640][T13872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.172525][T13886] macsec0: entered promiscuous mode [ 300.172557][T13886] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 300.175263][T13886] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 300.327790][T13897] IPv6: addrconf: prefix option has invalid lifetime [ 300.712516][T13910] syzkaller0: entered promiscuous mode [ 300.712550][T13910] syzkaller0: entered allmulticast mode [ 301.725497][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.730363][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.750076][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.759918][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.774415][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.825684][ T4932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.841206][ T4932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.844969][ T4932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.860163][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.862727][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.555076][T13962] tipc: Started in network mode [ 302.555097][T13962] tipc: Node identity _:, cluster identity 4711 [ 302.555149][T13962] tipc: Enabling of bearer rejected, failed to enable media [ 302.850811][T13943] wg0 speed is unknown, defaulting to 1000 [ 302.854323][T13943] wg1 speed is unknown, defaulting to 1000 [ 302.973200][T13972] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 302.978583][T13972] bond6 (unregistering): Released all slaves [ 303.408793][T13982] syzkaller0: entered promiscuous mode [ 303.408820][T13982] syzkaller0: entered allmulticast mode [ 303.791900][T13987] __nla_validate_parse: 5 callbacks suppressed [ 303.791924][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2066'. [ 303.856218][T13990] netlink: 'syz.0.2066': attribute type 6 has an invalid length. [ 303.856242][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2066'. [ 303.971822][ T4932] Bluetooth: hci5: command tx timeout [ 304.130917][T13994] netlink: 'syz.0.2067': attribute type 13 has an invalid length. [ 304.268964][T13943] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.269155][T13943] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.269309][T13943] bridge_slave_0: entered allmulticast mode [ 304.295523][T13943] bridge_slave_0: entered promiscuous mode [ 304.305325][T13943] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.305519][T13943] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.305966][T13943] bridge_slave_1: entered allmulticast mode [ 304.307924][T13943] bridge_slave_1: entered promiscuous mode [ 304.382662][T14001] bridge6: entered promiscuous mode [ 304.382687][T14001] bridge6: entered allmulticast mode [ 304.450289][T13943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.465683][T13943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.520239][T13943] team0: Port device team_slave_0 added [ 304.529537][T13943] team0: Port device team_slave_1 added [ 304.571969][T13943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.571991][T13943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.572021][T13943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.574190][T13943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.574208][T13943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.574247][T13943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.815523][T13943] hsr_slave_0: entered promiscuous mode [ 304.820574][T13943] hsr_slave_1: entered promiscuous mode [ 304.829429][T13943] debugfs: 'hsr0' already exists in 'hsr' [ 304.829495][T13943] Cannot create hsr debugfs directory [ 305.304049][T14013] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 305.459292][T14015] veth7: entered promiscuous mode [ 305.459318][T14015] veth7: entered allmulticast mode [ 305.485113][T13943] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 305.532100][T13943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.533108][T13943] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 305.560405][T13943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.578619][T13943] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 305.584031][T13943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.602219][T13943] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.608729][T13943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.611176][T14017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2074'. [ 305.918002][T13943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.996874][T13943] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.031158][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.031264][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.051769][ T4932] Bluetooth: hci5: command tx timeout [ 306.077610][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.077729][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.111918][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2075'. [ 306.148907][T14029] bond0 (unregistering): (slave veth5): Releasing active interface [ 306.148944][T14029] batadv1: entered promiscuous mode [ 306.196154][T14029] bond0 (unregistering): (slave batadv1): Releasing active interface [ 306.196189][T14029] batadv1: left promiscuous mode [ 306.240687][T14029] bond0 (unregistering): Released all slaves [ 306.291891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.397749][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.412016][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.412831][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.440910][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.441800][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.464336][T14032] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2077'. [ 306.464364][T14032] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2077'. [ 307.119815][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2080'. [ 307.202650][T14054] bridge_slave_0 (unregistering): left allmulticast mode [ 307.202806][T14054] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.524362][T14033] wg0 speed is unknown, defaulting to 1000 [ 307.529203][T14033] wg1 speed is unknown, defaulting to 1000 [ 307.627799][T14069] IPVS: set_ctl: invalid protocol: 186 172.20.20.187:4096 [ 307.754419][T14075] syzkaller0: entered promiscuous mode [ 307.754442][T14075] syzkaller0: entered allmulticast mode [ 307.780005][T14074] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 308.003655][T13943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.131412][ T4932] Bluetooth: hci5: command tx timeout [ 308.155242][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 308.531897][ T5631] Bluetooth: hci6: command tx timeout [ 308.855194][T13943] veth0_vlan: entered promiscuous mode [ 309.018711][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'. [ 309.084336][T14033] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.087555][T14033] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.087734][T14033] bridge_slave_0: entered allmulticast mode [ 309.092047][T14033] bridge_slave_0: entered promiscuous mode [ 309.098522][T13943] veth1_vlan: entered promiscuous mode [ 309.130266][T14033] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.130409][T14033] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.130570][T14033] bridge_slave_1: entered allmulticast mode [ 309.146501][T14033] bridge_slave_1: entered promiscuous mode [ 309.294071][T14033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.312670][T14033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.426617][T14033] team0: Port device team_slave_0 added [ 309.438245][T14033] team0: Port device team_slave_1 added [ 309.546203][T14033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.546224][T14033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.546249][T14033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.613204][T14033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.613223][T14033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.613252][T14033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.695329][T13943] veth0_macvtap: entered promiscuous mode [ 309.721610][T13943] veth1_macvtap: entered promiscuous mode [ 310.054448][T13943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.110052][T14033] hsr_slave_0: entered promiscuous mode [ 310.122613][T14033] hsr_slave_1: entered promiscuous mode [ 310.128088][T14033] debugfs: 'hsr0' already exists in 'hsr' [ 310.128114][T14033] Cannot create hsr debugfs directory [ 310.212074][ T5631] Bluetooth: hci5: command tx timeout [ 310.378904][T13943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.611764][ T5631] Bluetooth: hci6: command tx timeout [ 310.752240][ T93] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.753610][ T93] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.756796][ T93] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.756851][ T93] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.880669][ T4932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 310.899044][ T4932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 310.909110][ T4932] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 310.921053][ T4932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 310.928687][ T4932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.654966][ T6094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.654992][ T6094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.976911][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.976935][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.277837][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2104'. [ 312.343113][T14177] sock: sock_set_timeout: `syz.5.2061' (pid 14177) tries to set negative timeout [ 312.352501][T14144] wg0 speed is unknown, defaulting to 1000 [ 312.355056][T14144] wg1 speed is unknown, defaulting to 1000 [ 312.448201][T14033] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 312.478182][T14033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.479209][T14033] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 312.500201][T14033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.501264][T14033] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 312.530893][T14033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 312.543212][T14033] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 312.602226][T14173] openvswitch: netlink: Invalid VLAN frame [ 312.632730][T14033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.702662][ T5631] Bluetooth: hci6: command tx timeout [ 312.915543][T14192] netlink: 'syz.5.2107': attribute type 10 has an invalid length. [ 312.915810][T14192] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.918092][T14192] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.002195][T14192] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.002359][T14192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.002682][T14192] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.002826][T14192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.006842][T14192] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 313.028321][ T4932] Bluetooth: hci7: command tx timeout [ 313.876033][T14214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.876054][T14214] IPv6: NLM_F_CREATE should be set when creating new route [ 314.013465][T14033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.090893][T14221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.170710][T14221] 8021q: adding VLAN 0 to HW filter on device bond6 [ 314.289991][T14231] : renamed from bond0 (while UP) [ 314.506254][T14033] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.554006][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.554106][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.773007][ T4932] Bluetooth: hci6: command tx timeout [ 314.803887][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.804005][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.924326][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2118'. [ 315.068853][T14262] netlink: 524 bytes leftover after parsing attributes in process `syz.1.2119'. [ 315.092106][ T4932] Bluetooth: hci7: command tx timeout [ 315.458971][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2117'. [ 315.459008][T14241] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2117'. [ 315.537082][T14241] geneve2: entered promiscuous mode [ 315.537107][T14241] geneve2: entered allmulticast mode [ 316.020698][T14287] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2120'. [ 316.036841][T14144] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.037035][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.039170][T14144] bridge_slave_0: entered allmulticast mode [ 316.066991][T14144] bridge_slave_0: entered promiscuous mode [ 316.088847][T14144] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.088965][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.089115][T14144] bridge_slave_1: entered allmulticast mode [ 316.091252][T14144] bridge_slave_1: entered promiscuous mode [ 316.272750][T14144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.297015][T14144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.417412][T14144] team0: Port device team_slave_0 added [ 316.434798][T14144] team0: Port device team_slave_1 added [ 316.699426][T14144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.699446][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.699474][T14144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.768875][T14307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2123'. [ 316.844136][T14306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.846106][T14144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.846124][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.846155][T14144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.850127][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2124'. [ 317.115890][T14144] hsr_slave_0: entered promiscuous mode [ 317.120618][T14144] hsr_slave_1: entered promiscuous mode [ 317.139646][T14144] debugfs: 'hsr0' already exists in 'hsr' [ 317.139673][T14144] Cannot create hsr debugfs directory [ 317.174580][ T4932] Bluetooth: hci7: command tx timeout [ 317.175052][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.463311][T14323] netlink: 'syz.0.2126': attribute type 1 has an invalid length. [ 317.538640][T14323] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.898233][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'. [ 317.898297][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 317.898534][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'. [ 318.536084][T14033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.537624][T14144] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 318.578584][T14144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.588495][T14144] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 318.661867][T14144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 318.662806][T14144] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 318.761223][T14144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 318.774165][T14144] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 318.805665][T14144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.251869][ T4932] Bluetooth: hci7: command tx timeout [ 319.338772][T14144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.453260][T14144] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.491118][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.491232][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.535225][T14392] sctp: [Deprecated]: syz.1.2139 (pid 14392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.535225][T14392] Use struct sctp_sack_info instead [ 319.535288][T14392] sctp: [Deprecated]: syz.1.2139 (pid 14392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.535288][T14392] Use struct sctp_sack_info instead [ 319.535368][T14392] sctp: [Deprecated]: syz.1.2139 (pid 14392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.535368][T14392] Use struct sctp_sack_info instead [ 319.535412][T14392] sctp: [Deprecated]: syz.1.2139 (pid 14392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.535412][T14392] Use struct sctp_sack_info instead [ 319.535457][T14392] sctp: [Deprecated]: syz.1.2139 (pid 14392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.535457][T14392] Use struct sctp_sack_info instead [ 319.535501][T14392] sctp: [Deprecated]: syz.1.2139 (pid 14392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.535501][T14392] Use struct sctp_sack_info instead [ 319.535544][T14392] sctp: [Deprecated]: syz.1.2139 (pid 14392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.535544][T14392] Use struct sctp_sack_info instead [ 319.535589][T14392] sctp: [Deprecated]: syz.1.2139 (pid 14392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.535589][T14392] Use struct sctp_sack_info instead [ 319.535632][T14392] sctp: [Deprecated]: syz.1.2139 (pid 14392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.535632][T14392] Use struct sctp_sack_info instead [ 319.535675][T14392] sctp: [Deprecated]: syz.1.2139 (pid 14392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.535675][T14392] Use struct sctp_sack_info instead [ 319.541781][T14389] ip_tables: iptables: counters copy to user failed while replacing table [ 319.786446][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.786573][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.010749][T14400] syzkaller0: entered promiscuous mode [ 320.010775][T14400] syzkaller0: entered allmulticast mode [ 320.148766][T14403] __nla_validate_parse: 5 callbacks suppressed [ 320.148801][T14403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2143'. [ 320.149352][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 320.343963][T14409] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2144'. [ 320.400441][T14033] veth0_vlan: entered promiscuous mode [ 320.450250][T14033] veth1_vlan: entered promiscuous mode [ 320.519042][T14033] veth0_macvtap: entered promiscuous mode [ 320.540173][T14405] can: request_module (can-proto-0) failed. [ 320.554110][T14033] veth1_macvtap: entered promiscuous mode [ 320.644642][T14033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.734193][T14033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.054812][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.056893][ T6091] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.057266][ T6091] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.089877][ T6091] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.578587][T14444] netlink: 560 bytes leftover after parsing attributes in process `syz.0.2151'. [ 321.594864][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2150'. [ 321.764879][T14441] team0: Port device team_slave_0 removed [ 321.790206][T14144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.790925][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.790946][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.023848][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.023872][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.429019][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2156'. [ 322.569907][T14478] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 322.580032][T14479] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 322.693869][T14144] veth0_vlan: entered promiscuous mode [ 322.716535][T14144] veth1_vlan: entered promiscuous mode [ 322.796726][T14483] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2158'. [ 322.800409][T14483] netlink: 8183 bytes leftover after parsing attributes in process `syz.6.2158'. [ 322.849205][T14483] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2158'. [ 322.885946][T14144] veth0_macvtap: entered promiscuous mode [ 322.924974][T14144] veth1_macvtap: entered promiscuous mode [ 322.943599][T14485] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 323.061587][T14144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.066956][T14144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.097233][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.099648][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.099853][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.135514][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.436438][T14491] openvswitch: netlink: IPv4 tunnel dst address is zero [ 323.479740][ T6085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.479765][ T6085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.720393][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.720417][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.330759][T14521] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2168'. [ 325.033884][T14532] team0 (unregistering): Port device team_slave_0 removed [ 325.037711][T14532] team0 (unregistering): Port device team_slave_1 removed [ 325.514649][T14563] __nla_validate_parse: 4 callbacks suppressed [ 325.514671][T14563] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2181'. [ 325.541082][T14564] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2181'. [ 325.796989][T14573] veth1_macvtap: left promiscuous mode [ 325.797028][T14573] macsec0: entered promiscuous mode [ 325.820750][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2184'. [ 326.938063][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2198'. [ 326.938103][T14617] netlink: 'syz.5.2198': attribute type 5 has an invalid length. [ 326.938121][T14617] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2198'. [ 326.983995][T14617] geneve3: entered promiscuous mode [ 326.984022][T14617] geneve3: entered allmulticast mode [ 327.003908][ T12] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 327.004412][ T12] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 327.004455][ T12] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 327.004494][ T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 327.184977][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2199'. [ 327.304001][T14623] netlink: 'syz.6.2200': attribute type 11 has an invalid length. [ 327.304030][T14623] netlink: 'syz.6.2200': attribute type 4 has an invalid length. [ 327.304047][T14623] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2200'. [ 327.469919][T14631] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 327.898524][T14659] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2207'. [ 328.065145][T14666] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2211'. [ 328.065186][T14666] netlink: 'syz.5.2211': attribute type 7 has an invalid length. [ 328.065217][T14666] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2211'. [ 328.803795][T14693] : (slave team0): Releasing backup interface [ 328.878702][T14693] bridge_slave_0: left allmulticast mode [ 328.878732][T14693] bridge_slave_0: left promiscuous mode [ 328.878949][T14693] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.925980][T14693] bridge_slave_1: left promiscuous mode [ 328.926234][T14693] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.979545][T14693] : (slave veth0_to_bond): Releasing backup interface [ 328.993244][T14693] : (slave bond_slave_0): Releasing backup interface [ 329.035252][T14693] : (slave bond_slave_1): Releasing backup interface [ 329.143265][T14693] team0: Port device team_slave_0 removed [ 329.169624][T14693] team0: Port device team_slave_1 removed [ 329.187479][T14693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.189959][T14699] netlink: 'syz.7.2222': attribute type 2 has an invalid length. [ 329.474944][T14706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.586219][T14709] netlink: 'syz.5.2224': attribute type 11 has an invalid length. [ 329.594160][T14710] netlink: 'syz.5.2224': attribute type 11 has an invalid length. [ 329.779971][T14716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.088918][T14731] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 330.511236][T14747] sctp: [Deprecated]: syz.7.2235 (pid 14747) Use of int in max_burst socket option. [ 330.511236][T14747] Use struct sctp_assoc_value instead [ 330.597668][T14750] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 330.597691][T14750] sctp: [Deprecated]: syz.7.2235 (pid 14750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.597691][T14750] Use struct sctp_sack_info instead [ 331.150195][T14741] __nla_validate_parse: 4 callbacks suppressed [ 331.150221][T14741] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2232'. [ 331.214537][T14767] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2240'. [ 331.386968][T14771] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2242'. [ 331.386995][T14771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2242'. [ 331.387015][T14771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2242'. [ 331.387033][T14771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2242'. [ 331.387332][T14771] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2242'. [ 331.387351][T14771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2242'. [ 331.387368][T14771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2242'. [ 331.387384][T14771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2242'. [ 331.757623][T14784] pim6reg: entered allmulticast mode [ 332.385523][T14803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.494858][T14813] xt_policy: neither incoming nor outgoing policy selected [ 333.199544][T14828] syzkaller1: entered promiscuous mode [ 333.199572][T14828] syzkaller1: entered allmulticast mode [ 333.737127][T14847] sctp: [Deprecated]: syz.5.2267 (pid 14847) Use of int in max_burst socket option. [ 333.737127][T14847] Use struct sctp_assoc_value instead [ 334.191128][T14868] netlink: 'syz.0.2269': attribute type 11 has an invalid length. [ 334.194636][T14868] netlink: 'syz.0.2269': attribute type 11 has an invalid length. [ 334.292298][T14876] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 334.384536][T14879] geneve3: entered promiscuous mode [ 334.579346][T14888] bridge0: port 3(veth1_to_bridge) entered blocking state [ 334.579560][T14888] bridge0: port 3(veth1_to_bridge) entered disabled state [ 334.579759][T14888] veth1_to_bridge: entered allmulticast mode [ 334.597496][T14888] veth1_to_bridge: entered promiscuous mode [ 334.599553][T14888] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 334.608497][T14888] bridge0: port 3(veth1_to_bridge) entered blocking state [ 334.608795][T14888] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 334.889035][T14891] syzkaller0: entered promiscuous mode [ 334.889063][T14891] syzkaller0: entered allmulticast mode [ 336.381649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.946221][T14920] __nla_validate_parse: 238 callbacks suppressed [ 337.946246][T14920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2284'. [ 337.946283][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2284'. [ 338.192900][T14927] No such timeout policy "syz0" [ 338.229378][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2286'. [ 338.287171][T14934] IPv6: NLM_F_CREATE should be specified when creating new route [ 338.555907][T14944] IPv6: Can't replace route, no match found [ 338.688171][T14946] block nbd3: server does not support multiple connections per device. [ 338.688644][T14946] block nbd3: shutting down sockets [ 338.728417][T14954] netlink: 'syz.5.2295': attribute type 17 has an invalid length. [ 338.728442][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2295'. [ 338.728470][T14954] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2295'. [ 338.782328][T14954] gretap0: entered promiscuous mode [ 338.788328][T14954] gretap0: left promiscuous mode [ 338.967720][T14958] ip_tables: iptables: counters copy to user failed while replacing table [ 338.969007][T14958] ip_tunnel: non-ECT from 172.30.1.1 with TOS=0x1 [ 339.156069][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'. [ 339.256782][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'. [ 339.544077][T14980] pim6reg: entered allmulticast mode [ 339.692398][T14956] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 339.710427][T14985] syzkaller0: entered promiscuous mode [ 339.710451][T14985] syzkaller0: entered allmulticast mode [ 339.755984][T14987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2306'. [ 339.868966][T14993] xt_nfacct: accounting object `syz0' does not exist [ 339.928617][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.928806][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.951624][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.958362][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 339.958390][T14997] netlink: 'syz.1.2309': attribute type 1 has an invalid length. [ 340.204287][T15007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2312'. [ 340.362277][T14114] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.543833][T14114] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.872687][T15029] openvswitch: netlink: IPv4 tun info is not correct [ 340.907846][T15029] netlink: 'syz.5.2319': attribute type 1 has an invalid length. [ 341.035153][T15035] netlink: zone id is out of range [ 341.035297][T15035] netlink: zone id is out of range [ 341.035546][T15035] netlink: zone id is out of range [ 341.035557][T15035] netlink: zone id is out of range [ 341.035566][T15035] netlink: zone id is out of range [ 341.036122][T15035] netlink: zone id is out of range [ 341.195119][T15041] netlink: 'syz.5.2323': attribute type 2 has an invalid length. [ 341.195144][T15041] netlink: 'syz.5.2323': attribute type 8 has an invalid length. [ 341.517122][T15047] netlink: 'syz.0.2324': attribute type 1 has an invalid length. [ 341.623670][T15033] syzkaller1: entered promiscuous mode [ 341.623690][T15033] syzkaller1: entered allmulticast mode [ 342.505658][T15084] syzkaller1: entered promiscuous mode [ 342.505683][T15084] syzkaller1: entered allmulticast mode [ 342.600563][T15086] netlink: 'syz.7.2336': attribute type 2 has an invalid length. [ 342.626117][T15086] vlan2: entered allmulticast mode [ 342.626141][T15086] veth1_virt_wifi: entered allmulticast mode [ 343.175662][ T5631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 343.180474][ T5631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 343.187274][T15107] net_ratelimit: 29 callbacks suppressed [ 343.187441][T15107] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 343.199561][ T5631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 343.215127][ T5631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 343.222460][ T5631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 343.858539][T15138] __nla_validate_parse: 5 callbacks suppressed [ 343.858564][T15138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2346'. [ 344.028463][T15143] netlink: 'syz.0.2352': attribute type 10 has an invalid length. [ 344.028489][T15143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2352'. [ 344.052352][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.535222][T15161] veth0: entered promiscuous mode [ 344.563765][T15159] veth0: left promiscuous mode [ 344.818382][T15106] wg0 speed is unknown, defaulting to 1000 [ 344.827591][T15106] wg1 speed is unknown, defaulting to 1000 [ 344.913358][T15169] xt_cgroup: no path or classid specified [ 345.011239][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2358'. [ 345.332398][ T5631] Bluetooth: hci8: command tx timeout [ 345.555290][T15176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.629891][T15176] bond0: (slave bond2): Enslaving as an active interface with an up link [ 346.112404][T15205] vlan0: entered allmulticast mode [ 346.112432][T15205] bond0: entered allmulticast mode [ 346.250254][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2364'. [ 346.250327][T15207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.286866][T15207] ip_tables: iptables: counters copy to user failed while replacing table [ 346.568224][T15222] Bluetooth: hci0: unsupported parameter 5135 [ 346.568250][T15222] Bluetooth: hci0: unsupported parameter 8192 [ 346.568295][T15222] Bluetooth: hci0: unsupported parameter 5135 [ 346.568313][T15222] Bluetooth: hci0: unsupported parameter 8192 [ 347.307319][T15228] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2369'. [ 347.403683][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2369'. [ 347.431607][ T5631] Bluetooth: hci8: command tx timeout [ 347.900931][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.902920][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.906494][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.909804][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.913263][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.915126][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.916437][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.192603][ C0] net_ratelimit: 157 callbacks suppressed [ 348.192627][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.194012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.195485][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.196873][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.198293][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.199986][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.201553][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.204921][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.207944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.211932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.611068][T15106] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.611192][T15106] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.639692][T15106] bridge_slave_0: entered allmulticast mode [ 348.674969][T15106] bridge_slave_0: entered promiscuous mode [ 348.695955][T15106] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.719377][T15106] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.719569][T15106] bridge_slave_1: entered allmulticast mode [ 348.751434][T15106] bridge_slave_1: entered promiscuous mode [ 348.954045][T15258] IPv6: NLM_F_CREATE should be specified when creating new route [ 349.270630][T15256] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.321211][T15106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.376503][T15106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.491836][ T5631] Bluetooth: hci8: command tx timeout [ 349.784129][T15106] team0: Port device team_slave_0 added [ 349.825381][T15106] team0: Port device team_slave_1 added [ 350.184773][T15106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.184795][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.184826][T15106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.263505][T15106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.263527][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.263556][T15106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.616955][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2383'. [ 350.991324][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'. [ 350.996950][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'. [ 351.088614][T15274] bond1: option mode: invalid value (149) [ 351.353095][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 351.572709][ T5631] Bluetooth: hci8: command tx timeout [ 351.590871][T15274] bond1 (unregistering): Released all slaves [ 351.662147][T15106] hsr_slave_0: entered promiscuous mode [ 351.663691][T15106] hsr_slave_1: entered promiscuous mode [ 351.664753][T15106] debugfs: 'hsr0' already exists in 'hsr' [ 351.664775][T15106] Cannot create hsr debugfs directory [ 352.375008][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.201517][ C0] net_ratelimit: 9904 callbacks suppressed [ 353.201540][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.201780][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.202009][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 353.202229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 353.203119][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.203350][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.203590][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 353.203817][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 353.204624][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.204856][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.185109][T15355] sctp: [Deprecated]: syz.1.2401 (pid 15355) Use of int in maxseg socket option. [ 355.185109][T15355] Use struct sctp_assoc_value instead [ 356.005520][T15331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2395'. [ 356.059554][T15332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2395'. [ 356.094396][T15331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2395'. [ 357.304172][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2406'. [ 357.729768][T15382] FAULT_INJECTION: forcing a failure. [ 357.729768][T15382] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 357.729826][T15382] CPU: 1 UID: 0 PID: 15382 Comm: syz.7.2407 Not tainted syzkaller #0 PREEMPT(full) [ 357.729853][T15382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.729875][T15382] Call Trace: [ 357.729888][T15382] [ 357.729899][T15382] dump_stack_lvl+0xe8/0x150 [ 357.729938][T15382] should_fail_ex+0x410/0x560 [ 357.729969][T15382] _copy_from_user+0x2d/0xb0 [ 357.729999][T15382] sctp_setsockopt+0x1c4/0x12c0 [ 357.730023][T15382] ? sock_common_setsockopt+0x36/0xc0 [ 357.730046][T15382] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 357.730072][T15382] do_sock_setsockopt+0x17c/0x1b0 [ 357.730106][T15382] __x64_sys_setsockopt+0x13d/0x1b0 [ 357.730141][T15382] do_syscall_64+0x166/0x520 [ 357.730165][T15382] ? trace_irq_disable+0x3b/0x140 [ 357.730188][T15382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.730217][T15382] ? clear_bhb_loop+0x70/0xc0 [ 357.730246][T15382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.730273][T15382] RIP: 0033:0x7f43f3f9e159 [ 357.730294][T15382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.730323][T15382] RSP: 002b:00007f43f4f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 357.730353][T15382] RAX: ffffffffffffffda RBX: 00007f43f4225fa0 RCX: 00007f43f3f9e159 [ 357.730371][T15382] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000004 [ 357.730385][T15382] RBP: 00007f43f4f26090 R08: 0000000000000008 R09: 0000000000000000 [ 357.730400][T15382] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 357.730415][T15382] R13: 00007f43f4226038 R14: 00007f43f4225fa0 R15: 00007ffecd8aa118 [ 357.730451][T15382] [ 358.211431][ C0] net_ratelimit: 11002 callbacks suppressed [ 358.211455][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.211745][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.212050][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 358.212355][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.213411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.213707][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.214014][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 358.214351][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.215927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.216266][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.222051][ C0] net_ratelimit: 12138 callbacks suppressed [ 363.222072][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.222246][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.222456][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 363.222758][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 363.223610][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.223834][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.224052][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 363.224280][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 363.225088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.225321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.450839][T15380] netlink: 'syz.0.2406': attribute type 1 has an invalid length. [ 368.109864][T15106] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 368.178859][T15106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.199244][T15106] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 368.231739][ C0] net_ratelimit: 13534 callbacks suppressed [ 368.231763][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.232030][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.232283][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 368.232524][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 368.233491][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.233746][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.234007][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 368.234302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 368.235196][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.235440][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.437718][T15106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.501981][T15106] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 368.568707][T15106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.626150][T15106] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 368.667389][T15403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2412'. [ 368.768015][T15106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.664445][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.959239][T15106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.089684][T15106] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.124101][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.124223][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.331561][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.331677][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.111294][ C0] sched: DL replenish lagged too much [ 373.241388][ C0] net_ratelimit: 11255 callbacks suppressed [ 373.241411][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.241727][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 373.242048][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 373.243100][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.243410][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.243731][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 373.244038][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 373.245178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.245488][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.245834][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 374.370209][T15488] netlink: 'syz.5.2428': attribute type 12 has an invalid length. [ 375.442295][T15499] netlink: 'syz.5.2431': attribute type 5 has an invalid length. [ 375.442323][T15499] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2431'. [ 375.495558][T15499] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2431'. [ 375.893404][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 375.893431][T15502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2430'. [ 376.138610][T15106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.394476][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2435'. [ 376.918845][T15515] bond1: entered promiscuous mode [ 376.918875][T15515] bond1: entered allmulticast mode [ 376.939790][T15515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.345818][T15527] bond2: entered promiscuous mode [ 377.361963][T15527] bond2: entered allmulticast mode [ 377.362489][T15527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.916485][T15544] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2441'. [ 377.917459][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2440'. [ 378.222960][T15556] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2443'. [ 378.251488][ C0] net_ratelimit: 10950 callbacks suppressed [ 378.251511][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.251759][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.251995][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 378.252250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 378.253790][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 378.254843][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.255124][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.255395][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 378.255678][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 378.255958][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 378.459343][T15544] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2441'. [ 378.576548][T15556] sit1: entered promiscuous mode [ 378.576575][T15556] sit1: entered allmulticast mode [ 378.632060][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.200218][T15590] bond3: option fail_over_mac: invalid value (16) [ 381.625709][T15590] bond3 (unregistering): Released all slaves [ 381.976474][T15599] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 382.208203][T15106] veth0_vlan: entered promiscuous mode [ 382.353207][T15106] veth1_vlan: entered promiscuous mode [ 382.687531][T15106] veth0_macvtap: entered promiscuous mode [ 382.765904][T15106] veth1_macvtap: entered promiscuous mode [ 383.086824][T15106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.261565][ C0] net_ratelimit: 13510 callbacks suppressed [ 383.261591][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 383.261901][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 383.262624][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 383.263330][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.263703][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.264037][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.264350][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.264676][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 383.264970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 383.265272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 384.156782][T15106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.187818][T15647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2468'. [ 384.340934][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 384.747843][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2469'. [ 384.748152][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 385.703994][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.704393][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.924315][ T806] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.949159][ T806] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.451165][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.451191][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.890102][ T806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.890125][ T806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.271473][ C0] net_ratelimit: 13983 callbacks suppressed [ 388.271500][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 388.272086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 388.272730][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.272990][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.273246][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.273505][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.273759][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 388.274014][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 388.274266][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 388.274852][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 389.292795][T15698] netlink: 'syz.0.2479': attribute type 2 has an invalid length. [ 389.655908][T15698] : entered promiscuous mode [ 390.039716][T15728] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2486'. [ 390.040164][T15728] unsupported nlmsg_type 40 [ 391.151467][T15704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.416030][T15763] netlink: 'syz.0.2491': attribute type 6 has an invalid length. [ 392.416055][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2491'. [ 393.281423][ C0] net_ratelimit: 15505 callbacks suppressed [ 393.281448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.281756][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.282022][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.282277][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 393.282532][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 393.282780][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 393.283360][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 393.283938][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.284257][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.284512][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.757626][T15779] netlink: 'syz.0.2495': attribute type 10 has an invalid length. [ 393.757901][T15779] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.481178][T15811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2503'. [ 397.236662][T15839] xt_check_table_hooks: 9 callbacks suppressed [ 397.236686][T15839] x_tables: unsorted entry at hook 4 [ 397.522330][T15840] netdevsim netdevsim5: Direct firmware load for /. failed with error -2 [ 397.522363][T15840] netdevsim netdevsim5: Falling back to sysfs fallback for: /. [ 398.291472][ C0] net_ratelimit: 14256 callbacks suppressed [ 398.291494][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.291784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 398.292080][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 398.292409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 398.293178][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 398.293932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.294262][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.294589][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.294930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.295252][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 398.554437][T15857] IPVS: set_ctl: invalid protocol: 11608 255.255.255.255:20001 [ 398.675817][T15859] syzkaller0: entered promiscuous mode [ 398.675842][T15859] syzkaller0: entered allmulticast mode [ 398.839451][T15848] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 398.839481][T15848] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 399.509464][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2518'. [ 400.181209][T15848] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 400.210025][T15848] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 400.424175][T15848] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 400.424202][T15848] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 402.185804][T15848] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 402.185832][T15848] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 403.116931][ T4932] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 403.119051][ T4932] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 403.119976][ T4932] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 403.121167][ T4932] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 403.151438][ T4932] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 403.301329][ C0] net_ratelimit: 14745 callbacks suppressed [ 403.301353][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 403.301606][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 403.302260][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 403.302853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.303100][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.303353][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.303598][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.303840][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 403.304114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 403.304371][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 403.306616][ T5631] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 403.307838][ T5631] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 403.308552][ T5631] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 403.498055][ T5631] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 403.516195][ T5631] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 403.575260][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.168980][T15950] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2531'. [ 405.170054][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2531'. [ 405.508649][T15942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2531'. [ 405.572836][ T5631] Bluetooth: hci9: command tx timeout [ 406.224157][T15962] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 406.625670][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2538'. [ 407.665121][ T5631] Bluetooth: hci9: command tx timeout [ 408.311352][ C0] net_ratelimit: 14657 callbacks suppressed [ 408.311376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.311624][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.311866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.312096][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.312401][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 408.312641][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 408.312882][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 408.313439][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 408.314016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.314263][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.897884][T16004] netlink: 'syz.5.2546': attribute type 29 has an invalid length. [ 409.068913][T16005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2547'. [ 409.122540][ T1068] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.122594][ T1068] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.122636][ T1068] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.122677][ T1068] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.204978][T15884] wg0 speed is unknown, defaulting to 1000 [ 409.222668][T15884] wg1 speed is unknown, defaulting to 1000 [ 409.728384][T16018] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2550'. [ 409.732033][ T5631] Bluetooth: hci9: command tx timeout [ 410.175203][T16018] netlink: 'syz.5.2550': attribute type 8 has an invalid length. [ 410.176900][T16018] sch_fq: defrate 0 ignored. [ 410.258400][T16021] netlink: 'syz.8.2551': attribute type 1 has an invalid length. [ 410.408223][T16025] x_tables: duplicate underflow at hook 1 [ 410.428525][T16024] ±ÿª¨úrBº“€: renamed from lo (while UP) [ 411.620628][T16046] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2557'. [ 411.813470][ T5631] Bluetooth: hci9: command tx timeout [ 412.376749][T16041] veth1_macvtap: left promiscuous mode [ 413.270204][T16065] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2560'. [ 413.321411][ C0] net_ratelimit: 14732 callbacks suppressed [ 413.321438][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 413.322047][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 413.322659][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.322931][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.323201][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.323490][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.323794][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 413.324057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 413.324344][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 413.324953][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 413.520335][T16066] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2561'. [ 414.264875][T16081] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2564'. [ 414.614263][T16077] gretap0: entered promiscuous mode [ 414.614601][T16077] vlan2: entered promiscuous mode [ 415.000713][T16080] 8021q: adding VLAN 0 to HW filter on device bond8 [ 415.082215][T16085] 8021q: adding VLAN 0 to HW filter on device bond9 [ 415.277759][T16092] bond0: entered promiscuous mode [ 415.277785][T16092] bond_slave_0: entered promiscuous mode [ 415.278041][T16092] bond_slave_1: entered promiscuous mode [ 415.278269][T16092] bridge0: entered promiscuous mode [ 415.279404][T16092] bond2: entered promiscuous mode [ 415.482390][T16092] batadv0: entered promiscuous mode [ 415.513583][T16092] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 416.673592][T15884] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.675404][T15884] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.675587][T15884] bridge_slave_0: entered allmulticast mode [ 416.679697][T15884] bridge_slave_0: entered promiscuous mode [ 416.726596][T15884] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.728394][T15884] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.728839][T15884] bridge_slave_1: entered allmulticast mode [ 416.791544][T15884] bridge_slave_1: entered promiscuous mode [ 417.381988][T16126] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 417.539913][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2572'. [ 417.566011][T16126] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 417.566343][T16126] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 417.566632][T16126] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 417.566855][T16126] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 417.567075][T16126] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 417.658254][T16126] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 417.697610][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2573'. [ 417.839527][T15884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.875003][T15884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.959429][T16139] IPVS: Error connecting to the multicast addr [ 418.331353][ C0] net_ratelimit: 14323 callbacks suppressed [ 418.331378][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.331638][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 418.331882][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 418.332131][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 418.332706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 418.333283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.333532][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.333783][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.334060][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.334311][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 418.621805][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2573'. [ 418.668590][T15884] team0: Port device team_slave_0 added [ 418.794499][T15884] team0: Port device team_slave_1 added [ 419.268937][T15884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.268958][T15884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.268989][T15884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.612507][T15884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.612535][T15884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.612566][T15884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.788543][T16165] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 419.806391][T16166] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 420.436729][T16166] wireguard0: entered promiscuous mode [ 420.722054][T16185] xt_hashlimit: size too large, truncated to 1048576 [ 421.064534][T16165] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 421.669040][T15884] hsr_slave_0: entered promiscuous mode [ 421.670675][T15884] hsr_slave_1: entered promiscuous mode [ 421.715269][T15884] debugfs: 'hsr0' already exists in 'hsr' [ 421.715294][T15884] Cannot create hsr debugfs directory [ 422.205506][T16201] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2583'. [ 423.341658][ C0] net_ratelimit: 14341 callbacks suppressed [ 423.341684][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.341958][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.342234][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.342520][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.342797][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 423.343102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 423.343402][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 423.344008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 423.344672][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.344942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.645924][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2593'. [ 424.645965][T16240] block nbd3: Unsupported socket: should be TCP or UNIX. [ 424.684677][T16239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2593'. [ 424.684708][T16239] block nbd3: Unsupported socket: should be TCP or UNIX. [ 426.384622][T16261] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2597'. [ 427.279773][T16271] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2601'. [ 427.345909][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2600'. [ 427.345945][T16273] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2600'. [ 427.349570][T15884] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 427.459878][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.478127][T15884] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 427.654253][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.781571][T15884] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 427.833943][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.871377][T15884] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 427.922222][T15884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.960362][T16279] ieee802154 phy0 wpan0: encryption failed: -22 [ 427.983179][T16279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2602'. [ 428.050862][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2603'. [ 428.351404][ C0] net_ratelimit: 15213 callbacks suppressed [ 428.351429][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 428.352006][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 428.352556][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.352798][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.353057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.353306][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.353551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 428.353796][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 428.354029][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 428.354633][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 429.159150][T15884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.342776][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 429.726718][T15884] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.785656][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.785777][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.829716][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.829865][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.433705][T16312] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 430.527134][T16312] bond3 (unregistering): Released all slaves [ 430.772581][T16318] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 431.401820][T16338] syzkaller0: entered promiscuous mode [ 431.401849][T16338] syzkaller0: entered allmulticast mode [ 431.711907][T16343] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2615'. [ 432.085941][T16343] bond1 (unregistering): Released all slaves [ 432.270008][T16355] netlink: 'syz.7.2617': attribute type 1 has an invalid length. [ 432.565856][T16357] xt_hashlimit: size too large, truncated to 1048576 [ 433.154269][T16356] macvlan0: entered promiscuous mode [ 433.154294][T16356] macvlan0: entered allmulticast mode [ 433.160575][T16356] bond3: entered promiscuous mode [ 433.186661][T16356] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 433.260430][T16356] bond3: left promiscuous mode [ 433.361576][ C0] net_ratelimit: 14736 callbacks suppressed [ 433.361603][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.361843][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.362089][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.362362][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.362608][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 433.362871][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 433.363114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 433.363671][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 433.364162][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.364346][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.787394][T16368] tipc: Started in network mode [ 433.787433][T16368] tipc: Node identity 4, cluster identity 4711 [ 433.787448][T16368] tipc: Node number set to 4 [ 434.126467][T16372] syzkaller1: entered promiscuous mode [ 434.126492][T16372] syzkaller1: entered allmulticast mode [ 434.932468][T16390] netlink: 'syz.5.2623': attribute type 16 has an invalid length. [ 434.932492][T16390] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2623'. [ 436.787404][T15884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.371313][ C0] net_ratelimit: 15148 callbacks suppressed [ 438.371336][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 438.371579][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 438.372181][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 438.372724][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.372981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.373230][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.373471][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.373718][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 438.373972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 438.374216][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.966056][T16459] sock: sock_timestamping_bind_phc: sock not bind to device [ 440.076022][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.473790][T15884] veth0_vlan: entered promiscuous mode [ 440.628720][T15884] veth1_vlan: entered promiscuous mode [ 440.925590][T15884] veth0_macvtap: entered promiscuous mode [ 440.998522][T15884] veth1_macvtap: entered promiscuous mode [ 441.244675][T15884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.290126][T15884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.371672][ T6088] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.373505][ T1145] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.373550][ T1145] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.373590][ T1145] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.321934][ T6088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.321959][ T6088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.472063][T16477] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20004 [ 443.088136][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.088174][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.152097][T16484] syzkaller0: entered promiscuous mode [ 443.152123][T16484] syzkaller0: entered allmulticast mode [ 443.377170][T16484] x_tables: duplicate entry at hook 1 [ 443.381276][ C0] net_ratelimit: 14623 callbacks suppressed [ 443.381301][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 443.382812][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 443.384617][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.385258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.385896][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.386512][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.386880][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 443.387470][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 443.388233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 443.389661][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 443.919750][T16495] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2648'. [ 446.378821][ T4932] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 446.393359][ T4932] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 446.399403][ T4932] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 446.435074][ T4932] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 446.435868][ T4932] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 447.094670][ T32] INFO: task syz.4.1941:13494 blocked for more than 143 seconds. [ 447.094709][ T32] Not tainted syzkaller #0 [ 447.094723][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.094733][ T32] task:syz.4.1941 state:D stack:26000 pid:13494 tgid:13493 ppid:5615 task_flags:0x400140 flags:0x00080002 [ 447.094815][ T32] Call Trace: [ 447.094827][ T32] [ 447.094843][ T32] __schedule+0x17db/0x58f0 [ 447.094906][ T32] ? __pfx___schedule+0x10/0x10 [ 447.094956][ T32] ? schedule+0x90/0x2b0 [ 447.094983][ T32] schedule+0x164/0x2b0 [ 447.095007][ T32] schedule_preempt_disabled+0x13/0x30 [ 447.095031][ T32] __mutex_lock+0x7c1/0x1550 [ 447.095063][ T32] ? __mutex_lock+0x5d4/0x1550 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 447.095093][ T32] ? nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 447.095129][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 447.095153][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 447.095202][ T32] nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 447.095259][ T32] ? __nla_parse+0x40/0x60 [ 447.095291][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 447.095325][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 447.095353][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 447.095391][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 447.095426][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 447.095469][ T32] ? bpf_lsm_capable+0x9/0x20 [ 447.095490][ T32] ? security_capable+0x7e/0x2c0 [ 447.095525][ T32] genl_rcv_msg+0x614/0x7a0 [ 447.095559][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.095586][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 447.095634][ T32] netlink_rcv_skb+0x226/0x4a0 [ 447.095670][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.095706][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 447.095757][ T32] ? down_read+0x2be/0x330 [ 447.095791][ T32] genl_rcv+0x28/0x40 [ 447.095815][ T32] netlink_unicast+0x7bd/0x940 [ 447.095860][ T32] netlink_sendmsg+0x813/0xb40 [ 447.095905][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.095950][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 447.095979][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.096012][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 447.096102][ T32] ____sys_sendmsg+0x54e/0x850 [ 447.096141][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.096207][ T32] ? import_iovec+0x73/0xa0 [ 447.096265][ T32] ___sys_sendmsg+0x2a5/0x360 [ 447.096295][ T32] ? __lock_acquire+0x747/0x2de0 [ 447.096326][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.096361][ T32] ? futex_wait+0x2a2/0x390 [ 447.096429][ T32] ? __fget_files+0x2a/0x420 [ 447.096461][ T32] ? __fget_files+0x3a2/0x420 [ 447.096505][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 447.096539][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.096596][ T32] do_syscall_64+0x166/0x520 [ 447.096621][ T32] ? trace_irq_disable+0x3b/0x140 [ 447.096644][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.096667][ T32] ? clear_bhb_loop+0x70/0xc0 [ 447.096704][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.096728][ T32] RIP: 0033:0x7fdf9f59e159 [ 447.096750][ T32] RSP: 002b:00007fdfa047c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.096775][ T32] RAX: ffffffffffffffda RBX: 00007fdf9f825fa0 RCX: 00007fdf9f59e159 [ 447.096792][ T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 447.096809][ T32] RBP: 00007fdf9f63506b R08: 0000000000000000 R09: 0000000000000000 [ 447.096824][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.096838][ T32] R13: 00007fdf9f826038 R14: 00007fdf9f825fa0 R15: 00007ffdfaf7aad8 [ 447.096876][ T32] [ 447.096888][ T32] INFO: task syz.3.1999:13688 blocked for more than 143 seconds. [ 447.096906][ T32] Not tainted syzkaller #0 [ 447.096917][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.096928][ T32] task:syz.3.1999 state:D stack:24600 pid:13688 tgid:13687 ppid:5621 task_flags:0x400040 flags:0x00080002 [ 447.096993][ T32] Call Trace: [ 447.097000][ T32] [ 447.097015][ T32] __schedule+0x17db/0x58f0 [ 447.097071][ T32] ? __pfx___schedule+0x10/0x10 [ 447.097120][ T32] ? schedule+0x90/0x2b0 [ 447.097146][ T32] schedule+0x164/0x2b0 [ 447.097172][ T32] schedule_preempt_disabled+0x13/0x30 [ 447.097195][ T32] __mutex_lock+0x7c1/0x1550 [ 447.097254][ T32] ? __mutex_lock+0x5d4/0x1550 [ 447.097285][ T32] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 447.097319][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 447.097357][ T32] ? kernel_text_address+0xa5/0xe0 [ 447.097386][ T32] ? __kernel_text_address+0xd/0x30 [ 447.097411][ T32] ? unwind_get_return_address+0x4d/0x90 [ 447.097444][ T32] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 447.097488][ T32] ? stack_trace_save+0xa9/0x100 [ 447.097524][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 447.097565][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 447.097597][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 447.097627][ T32] ? kasan_save_track+0x4f/0x80 [ 447.097651][ T32] ? kasan_save_track+0x3e/0x80 [ 447.097674][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 447.097705][ T32] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 447.097730][ T32] ? __alloc_skb+0x2c1/0x7a0 [ 447.097754][ T32] ? netlink_dump+0x1e7/0xee0 [ 447.097784][ T32] ? __netlink_dump_start+0x589/0x7b0 [ 447.097815][ T32] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 447.097842][ T32] ? genl_rcv_msg+0x5e1/0x7a0 [ 447.097865][ T32] ? netlink_rcv_skb+0x226/0x4a0 [ 447.097896][ T32] ? genl_rcv+0x28/0x40 [ 447.097918][ T32] ? netlink_unicast+0x7bd/0x940 [ 447.097946][ T32] ? netlink_sendmsg+0x813/0xb40 [ 447.097979][ T32] ? sock_sendmsg_nosec+0x13a/0x180 [ 447.098012][ T32] ? ____sys_sendmsg+0x54e/0x850 [ 447.098039][ T32] ? ___sys_sendmsg+0x2a5/0x360 [ 447.098067][ T32] ? __x64_sys_sendmsg+0x1b1/0x290 [ 447.098096][ T32] ? do_syscall_64+0x166/0x520 [ 447.098119][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.098184][ T32] ? rcu_is_watching+0x16/0xb0 [ 447.098218][ T32] ? trace_kmalloc+0x2a/0xf0 [ 447.098279][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 447.098305][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 447.098329][ T32] ? netlink_dump+0x1e7/0xee0 [ 447.098359][ T32] ? netlink_dump+0x1e7/0xee0 [ 447.098400][ T32] genl_dumpit+0x10b/0x1b0 [ 447.098432][ T32] netlink_dump+0x711/0xee0 [ 447.098479][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 447.098527][ T32] ? genl_start+0x497/0x6d0 [ 447.098562][ T32] __netlink_dump_start+0x589/0x7b0 [ 447.098605][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 447.098638][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 447.098665][ T32] ? genl_get_cmd+0x523/0x960 [ 447.098703][ T32] ? __pfx_genl_start+0x10/0x10 [ 447.098728][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 447.098753][ T32] ? __pfx_genl_done+0x10/0x10 [ 447.098781][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 447.098834][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 447.098870][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.098896][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 447.098943][ T32] netlink_rcv_skb+0x226/0x4a0 [ 447.098979][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.099008][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 447.099060][ T32] ? down_read+0x2be/0x330 [ 447.099093][ T32] genl_rcv+0x28/0x40 [ 447.099117][ T32] netlink_unicast+0x7bd/0x940 [ 447.099161][ T32] netlink_sendmsg+0x813/0xb40 [ 447.099208][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.099277][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 447.099308][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.099342][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 447.099382][ T32] ____sys_sendmsg+0x54e/0x850 [ 447.099420][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.099462][ T32] ? import_iovec+0x73/0xa0 [ 447.099495][ T32] ___sys_sendmsg+0x2a5/0x360 [ 447.099525][ T32] ? __lock_acquire+0x747/0x2de0 [ 447.099555][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.099590][ T32] ? futex_wait+0x2a2/0x390 [ 447.099660][ T32] ? __fget_files+0x2a/0x420 [ 447.099698][ T32] ? __fget_files+0x3a2/0x420 [ 447.099743][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 447.099778][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.099835][ T32] do_syscall_64+0x166/0x520 [ 447.099860][ T32] ? trace_irq_disable+0x3b/0x140 [ 447.099882][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.099907][ T32] ? clear_bhb_loop+0x70/0xc0 [ 447.099936][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.099961][ T32] RIP: 0033:0x7ff81d79e159 [ 447.099981][ T32] RSP: 002b:00007ff81e58c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.239078][ T32] RAX: ffffffffffffffda RBX: 00007ff81da25fa0 RCX: 00007ff81d79e159 [ 447.239104][ T32] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 447.239119][ T32] RBP: 00007ff81d83506b R08: 0000000000000000 R09: 0000000000000000 [ 447.239135][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.239149][ T32] R13: 00007ff81da26038 R14: 00007ff81da25fa0 R15: 00007ffcd0a915d8 [ 447.239188][ T32] [ 447.239284][ T32] [ 447.239284][ T32] Showing all locks held in the system: [ 447.239296][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 447.239314][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 447.239384][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 447.239400][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 447.239457][ T32] locks held by kworker/u8:2/38: 2, on CPU#1: [ 447.239473][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.239537][ T32] #1: ffffc90000ae7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.239602][ T32] locks held by kworker/u8:3/50: 3, last CPU#1: [ 447.239618][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.239690][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.239756][ T32] #2: ffff888027063258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 447.239849][ T32] locks held by klogd/4972: 1, last CPU#1: [ 447.239865][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.239922][ T32] locks held by getty/5373: 2, on CPU#0: [ 447.239938][ T32] #0: ffff888036a5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 447.240004][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 447.240063][ T32] locks held by syz-executor/5604: 2, last CPU#1: [ 447.240080][ T32] #0: ffff888036a969b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 447.240144][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 447.240206][ T32] locks held by syz-executor/5623: 1, last CPU#1: [ 447.240254][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 447.240319][ T32] locks held by kworker/1:4/5718: 3, last CPU#1: [ 447.240335][ T32] #0: ffff888088ca2540 ((wq_completion)wg-kex-wg1#20){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.240422][ T32] #1: ffffc90004d07c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.240505][ T32] #2: ffff888079e1e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 447.414800][ T32] locks held by kworker/0:5/5731: 4, last CPU#0: [ 447.414824][ T32] #0: ffff888055655d40 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.414906][ T32] #1: ffffc90004fd7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.414987][ T32] #2: ffff888042715440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 447.415059][ T32] #3: ffff88807a483ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 447.415130][ T32] locks held by kworker/0:7/5807: 2, last CPU#0: [ 447.415146][ T32] #0: ffff88807ec93940 ((wq_completion)wg-crypt-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.415251][ T32] #1: ffffc9000524fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.415335][ T32] locks held by kworker/1:6/5812: 4, on CPU#1: [ 447.415351][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.415413][ T32] #1: ffffc9000526fc40 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.415475][ T32] #2: ffffffff8ede94e0 (pack_mutex){+.+.}-{4:4}, at: bpf_prog_pack_free+0x35/0x470 [ 447.415537][ T32] #3: ffffffff8ebff6a0 (text_mutex){+.+.}-{4:4}, at: text_poke_set+0xa3/0x180 [ 447.415599][ T32] locks held by kworker/u8:10/6085: 4, last CPU#1: [ 447.415616][ T32] #0: ffff888022f05940 ((wq_completion)krds_cp_wq#11/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.415679][ T32] #1: ffffc90005a0fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.415743][ T32] #2: ffff888028cbb680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 447.415806][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 447.415862][ T32] locks held by kworker/u8:11/6086: 3, last CPU#1: [ 447.415878][ T32] #0: ffff8880765bd140 ((wq_completion)krds_cp_wq#3/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.415938][ T32] #1: ffffc900059dfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.415998][ T32] #2: ffff888065442a80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 447.416059][ T32] locks held by kworker/u8:13/6088: 4, last CPU#1: [ 447.416076][ T32] #0: ffff8880765ba140 ((wq_completion)krds_cp_wq#3/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.416137][ T32] #1: ffffc9000599fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.416206][ T32] #2: ffff888065442480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 447.446781][ T32] #3: ffff88805441c5e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 447.483238][ T32] locks held by kworker/u8:15/6090: 3, last CPU#1: [ 447.483258][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.483396][ T32] #1: ffffc90005bcfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.579796][ T32] #2: ffff88802ac1e258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 447.579875][ T32] locks held by kworker/u8:17/6092: 4, last CPU#1: [ 447.579893][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.579956][ T32] #1: ffffc90005e0fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.580020][ T32] #2: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 447.580077][ T32] #3: ffffffff8ee388a0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 447.580135][ T32] locks held by kworker/u8:19/6094: 3, last CPU#1: [ 447.580152][ T32] #0: ffff8880765be140 ((wq_completion)krds_cp_wq#3/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.580254][ T32] #1: ffffc90005a3fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.580318][ T32] #2: ffff888065443380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 447.580397][ T32] locks held by kworker/u8:20/6095: 4, last CPU#1: [ 447.580414][ T32] #0: ffff8880765bb140 ((wq_completion)krds_cp_wq#3/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.580477][ T32] #1: ffffc9000627fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.580541][ T32] #2: ffff888065443980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 447.580616][ T32] #3: ffff8880323a8260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 447.580688][ T32] locks held by syz.2.1887/13296: 2, on CPU#1: [ 447.580705][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 447.580760][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 447.580822][ T32] locks held by syz.4.1941/13494: 2, on CPU#1: [ 447.580839][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 447.580893][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 447.580958][ T32] locks held by syz.3.1999/13688: 3, on CPU#1: [ 447.580974][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 447.581029][ T32] #1: ffff88807a4ad6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 447.581094][ T32] #2: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 447.581157][ T32] locks held by kworker/0:8/14113: 4, last CPU#0: [ 447.581181][ T32] #0: ffff88803b2e5d40 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.705784][ T32] #1: ffffc90007107c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.705867][ T32] #2: ffff888029d35440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 447.705937][ T32] #3: ffff88802a021700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 448.020817][ T32] locks held by syz.6.2206/14642: 2, on CPU#1: [ 448.020844][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 448.020917][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 448.020991][ T32] locks held by syz.1.2473/15670: 2, on CPU#1: [ 448.021010][ T32] #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 448.021071][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 448.021152][ T32] locks held by syz-executor/15884: 3, last CPU#1: [ 448.021171][ T32] #0: ffffffff8f4f0f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 448.021434][ T32] #1: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 448.021502][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 448.021572][ T32] locks held by syz.7.2655/16531: 5, last CPU#1: [ 448.021591][ T32] #0: ffffffff907bafb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 448.021668][ T32] #1: ffffffff90252700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 448.021733][ T32] #2: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 448.021801][ T32] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 448.021867][ T32] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 448.063564][ T32] locks held by syz.5.2656/16539: 2, on CPU#1: [ 448.063593][ T32] #0: ffff888054cacce0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 448.063673][ T32] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 448.063747][ T32] locks held by syz.8.2657/16538: 2, last CPU#1: [ 448.063766][ T32] #0: ffff88807a4cb6b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 448.063839][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 448.063910][ T32] locks held by kworker/u8:17/16541: 3, last CPU#1: [ 448.063929][ T32] #0: ffff88802274f2a0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 448.095114][ T32] #1: ffffffff8f4f0f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0xef/0x180 [ 448.095205][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 448.104355][ T32] [ 448.104364][ T32] ============================================= [ 448.104364][ T32] [ 448.104391][ T32] NMI backtrace for cpu 1 [ 448.104420][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 448.104447][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.104462][ T32] Call Trace: [ 448.104472][ T32] [ 448.104484][ T32] dump_stack_lvl+0xe8/0x150 [ 448.104524][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 448.104563][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 448.104606][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 448.104648][ T32] sys_info+0x135/0x170 [ 448.104680][ T32] watchdog+0xfd7/0x1030 [ 448.104716][ T32] ? watchdog+0x1c7/0x1030 [ 448.104751][ T32] kthread+0x38b/0x480 [ 448.104777][ T32] ? __pfx_watchdog+0x10/0x10 [ 448.104799][ T32] ? __pfx_kthread+0x10/0x10 [ 448.104825][ T32] ret_from_fork+0x514/0xb70 [ 448.104854][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 448.104893][ T32] ? __switch_to+0xc89/0x1420 [ 448.104932][ T32] ? __pfx_kthread+0x10/0x10 [ 448.104958][ T32] ret_from_fork_asm+0x1a/0x30 [ 448.105018][ T32] [ 448.105047][ T32] Sending NMI from CPU 1 to CPUs 0: [ 448.105084][ C0] NMI backtrace for cpu 0 [ 448.105099][ C0] CPU: 0 UID: 0 PID: 5731 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 448.105125][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.105139][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 448.105169][ C0] RIP: 0010:unwind_next_frame+0xb04/0x2550 [ 448.105196][ C0] Code: 8b 44 24 30 42 0f b6 04 20 84 c0 4c 89 04 24 0f 85 26 14 00 00 48 89 dd 48 c1 ed 03 42 0f b6 44 25 00 84 c0 0f 85 3b 14 00 00 <0f> b6 72 01 83 e6 07 83 fe 04 0f 84 39 04 00 00 83 fe 03 0f 84 f1 [ 448.105215][ C0] RSP: 0018:ffffc90000006720 EFLAGS: 00000246 [ 448.105236][ C0] RAX: 0000000000000000 RBX: ffffffff919ca80b RCX: ffffffff90efc56c [ 448.105253][ C0] RDX: ffffffff919ca80a RSI: ffffffff919ca7fa RDI: ffffffff8c6d9c20 [ 448.105269][ C0] RBP: 1ffffffff2339501 R08: ffffc90000007d40 R09: 0000000000000000 [ 448.105284][ C0] R10: ffffc90000006818 R11: ffffffff81b285f0 R12: dffffc0000000000 [ 448.105300][ C0] R13: ffffffff919ca806 R14: ffffc900000067c8 R15: 1ffff92000000cf9 [ 448.105317][ C0] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 448.105334][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.105349][ C0] CR2: 00007f950e97fe9c CR3: 000000000eb48000 CR4: 00000000003526f0 [ 448.105370][ C0] Call Trace: [ 448.105377][ C0] [ 448.105389][ C0] ? process_backlog+0x727/0x18b0 [ 448.105414][ C0] ? unwind_next_frame+0x8f/0x2550 [ 448.105440][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 448.105462][ C0] arch_stack_walk+0x11b/0x150 [ 448.105490][ C0] ? process_backlog+0x727/0x18b0 [ 448.105515][ C0] stack_trace_save+0xa9/0x100 [ 448.105548][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 448.105579][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 448.105602][ C0] ? __lock_acquire+0x747/0x2de0 [ 448.105636][ C0] kasan_save_track+0x3e/0x80 [ 448.105658][ C0] ? kasan_save_track+0x3e/0x80 [ 448.105678][ C0] ? kasan_save_free_info+0x40/0x50 [ 448.105707][ C0] ? __kasan_slab_free+0x5c/0x80 [ 448.105734][ C0] ? kmem_cache_free+0x182/0x650 [ 448.105755][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 448.105785][ C0] ? NF_HOOK+0x64e/0x6e0 [ 448.105811][ C0] ? br_nf_post_routing+0xa51/0xee0 [ 448.105840][ C0] ? nf_hook_slow+0xc5/0x220 [ 448.105859][ C0] ? NF_HOOK+0x23e/0x3f0 [ 448.105883][ C0] ? br_forward_finish+0xd3/0x130 [ 448.105907][ C0] ? br_nf_forward_finish+0xa76/0xea0 [ 448.105936][ C0] ? NF_HOOK+0x64e/0x6e0 [ 448.105962][ C0] ? br_nf_forward_ip+0x7e7/0xa30 [ 448.105990][ C0] ? nf_hook_slow+0xc5/0x220 [ 448.106008][ C0] ? NF_HOOK+0x23e/0x3f0 [ 448.106031][ C0] ? __br_forward+0x397/0x540 [ 448.106055][ C0] ? br_handle_frame_finish+0x1119/0x1950 [ 448.106083][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 448.106111][ C0] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 448.106143][ C0] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 448.106173][ C0] ? br_handle_frame+0x1329/0x1600 [ 448.106200][ C0] ? __netif_receive_skb_core+0x989/0x30c0 [ 448.106222][ C0] ? process_backlog+0x727/0x18b0 [ 448.106271][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 448.106301][ C0] kasan_save_free_info+0x40/0x50 [ 448.106330][ C0] __kasan_slab_free+0x5c/0x80 [ 448.106354][ C0] kmem_cache_free+0x182/0x650 [ 448.106373][ C0] ? __skb_ext_put+0x221/0x2f0 [ 448.106398][ C0] ? __skb_ext_del+0x271/0x390 [ 448.106426][ C0] br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 448.106464][ C0] ? NF_HOOK+0xa2/0x6e0 [ 448.106492][ C0] NF_HOOK+0x64e/0x6e0 [ 448.106524][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 448.106553][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 448.106584][ C0] ? net_generic+0x1e/0x240 [ 448.106619][ C0] ? net_generic+0x1e/0x240 [ 448.106649][ C0] br_nf_post_routing+0xa51/0xee0 [ 448.106678][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 448.106711][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 448.106742][ C0] nf_hook_slow+0xc5/0x220 [ 448.106763][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 448.106791][ C0] NF_HOOK+0x23e/0x3f0 [ 448.106818][ C0] ? NF_HOOK+0xa2/0x3f0 [ 448.106842][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 448.106869][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 448.106900][ C0] ? net_generic+0x1e/0x240 [ 448.106928][ C0] br_forward_finish+0xd3/0x130 [ 448.106953][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 448.106981][ C0] br_nf_forward_finish+0xa76/0xea0 [ 448.107019][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 448.107051][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 448.107080][ C0] ? NF_HOOK+0xa2/0x6e0 [ 448.107110][ C0] ? NF_HOOK+0xa2/0x6e0 [ 448.107137][ C0] NF_HOOK+0x64e/0x6e0 [ 448.107168][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 448.107194][ C0] ? net_generic+0x1e/0x240 [ 448.107225][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 448.107259][ C0] ? net_generic+0x1e/0x240 [ 448.107286][ C0] ? net_generic+0x1e/0x240 [ 448.107316][ C0] br_nf_forward_ip+0x7e7/0xa30 [ 448.107346][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 448.107377][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 448.107407][ C0] nf_hook_slow+0xc5/0x220 [ 448.107428][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 448.107455][ C0] NF_HOOK+0x23e/0x3f0 [ 448.107482][ C0] ? NF_HOOK+0xa2/0x3f0 [ 448.107506][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 448.107532][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 448.107557][ C0] ? skb_clone+0x246/0x3a0 [ 448.107588][ C0] ? br_flood+0x620/0x8d0 [ 448.107617][ C0] ? br_handle_vlan+0x5e/0x530 [ 448.107643][ C0] __br_forward+0x397/0x540 [ 448.107667][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 448.107696][ C0] br_handle_frame_finish+0x1119/0x1950 [ 448.107735][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 448.107765][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 448.107787][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 448.107809][ C0] ? nf_hook_slow+0x176/0x220 [ 448.107831][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 448.107861][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 448.107889][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 448.107926][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 448.107956][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 448.107986][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 448.108017][ C0] ? lock_acquire+0x115/0x350 [ 448.108041][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 448.108073][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 448.108108][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 448.108142][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 448.108173][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 448.108207][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 448.108242][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 448.108277][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 448.108305][ C0] br_handle_frame+0x1329/0x1600 [ 448.108343][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 448.108370][ C0] ? __lock_acquire+0x747/0x2de0 [ 448.108392][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 448.108429][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 448.108457][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 448.108491][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 448.108512][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 448.108559][ C0] ? process_backlog+0x3de/0x18b0 [ 448.108580][ C0] ? process_backlog+0x3de/0x18b0 [ 448.108611][ C0] process_backlog+0x727/0x18b0 [ 448.108637][ C0] ? process_backlog+0x3de/0x18b0 [ 448.108668][ C0] __napi_poll+0xaa/0x330 [ 448.108690][ C0] net_rx_action+0x61d/0xf50 [ 448.108721][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 448.108762][ C0] handle_softirqs+0x226/0x860 [ 448.108792][ C0] ? do_softirq+0x77/0xd0 [ 448.108821][ C0] ? kernel_fpu_end+0x62/0x80 [ 448.108847][ C0] do_softirq+0x77/0xd0 [ 448.108871][ C0] [ 448.108878][ C0] [ 448.108886][ C0] __local_bh_enable_ip+0x100/0x140 [ 448.108913][ C0] blake2s_compress+0xfa/0x1c00 [ 448.108944][ C0] ? __pfx___schedule+0x10/0x10 [ 448.108975][ C0] ? __asan_memset+0x22/0x50 [ 448.109007][ C0] ? encode_point+0x8346/0x84b0 [ 448.109046][ C0] ? kernel_fpu_begin_mask+0x2bb/0x380 [ 448.109076][ C0] ? kernel_fpu_end+0x62/0x80 [ 448.109103][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 448.109134][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 448.109155][ C0] ? kernel_fpu_end+0x62/0x80 [ 448.109179][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 448.109206][ C0] ? blake2s_compress+0x1b4d/0x1c00 [ 448.109254][ C0] blake2s_update+0x140/0x450 [ 448.109287][ C0] hmac+0x1f4/0x3b0 [ 448.109318][ C0] ? __pfx_hmac+0x10/0x10 [ 448.109368][ C0] ? hmac+0x30c/0x3b0 [ 448.109401][ C0] kdf+0x12d/0x290 [ 448.109434][ C0] ? __pfx_kdf+0x10/0x10 [ 448.109482][ C0] wg_noise_handshake_create_response+0x54f/0x9f0 [ 448.109521][ C0] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 448.109558][ C0] ? rcu_is_watching+0x16/0xb0 [ 448.109589][ C0] ? up_read+0x10/0x20 [ 448.109629][ C0] ? wg_noise_handshake_consume_initiation+0x70c/0x9b0 [ 448.109665][ C0] ? __lock_acquire+0x747/0x2de0 [ 448.109694][ C0] ? __asan_memset+0x22/0x50 [ 448.109726][ C0] ? blake2s_final+0x145/0x260 [ 448.109760][ C0] ? lock_acquire+0x115/0x350 [ 448.109791][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 448.109811][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 448.109835][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 448.109860][ C0] wg_packet_send_handshake_response+0x110/0x2d0 [ 448.109887][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 448.109911][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xd7/0x130 [ 448.109952][ C0] wg_packet_handshake_receive_worker+0x6a9/0x10c0 [ 448.109978][ C0] ? look_up_lock_class+0x57/0x110 [ 448.110010][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 448.110039][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 448.110076][ C0] ? lock_acquire+0x115/0x350 [ 448.110103][ C0] ? rcu_is_watching+0x16/0xb0 [ 448.110129][ C0] ? process_scheduled_works+0x97a/0x1630 [ 448.110158][ C0] process_scheduled_works+0xc3d/0x1630 [ 448.110207][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.110250][ C0] ? assign_work+0x3cf/0x5d0 [ 448.110280][ C0] worker_thread+0xa47/0xfb0 [ 448.110327][ C0] kthread+0x38b/0x480 [ 448.110347][ C0] ? __pfx_worker_thread+0x10/0x10 [ 448.110375][ C0] ? __pfx_kthread+0x10/0x10 [ 448.110396][ C0] ret_from_fork+0x514/0xb70 [ 448.110417][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 448.110449][ C0] ? __switch_to+0xc89/0x1420 [ 448.110480][ C0] ? __pfx_kthread+0x10/0x10 [ 448.110501][ C0] ret_from_fork_asm+0x1a/0x30 [ 448.110544][ C0] [ 448.391619][ C0] net_ratelimit: 13034 callbacks suppressed [ 448.391644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 448.393127][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.393957][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.394731][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.395513][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.396313][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 448.397094][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 448.397902][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 448.399718][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:be:1a:4e:32:e5:60, vlan:0) [ 448.401758][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.538007][ T5631] Bluetooth: hci10: command tx timeout [ 448.983457][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 450.936414][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 450.945881][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.955978][ T32] Call Trace: [ 450.959301][ T32] [ 450.962264][ T32] vpanic+0x56d/0xa60 [ 450.966332][ T32] ? __pfx___schedule+0x10/0x10 [ 450.971240][ T32] ? __pfx_vpanic+0x10/0x10 [ 450.975812][ T32] panic+0xc5/0xd0 [ 450.979604][ T32] ? __pfx_panic+0x10/0x10 [ 450.984073][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 450.989747][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 450.995280][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 451.001500][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 451.007801][ T32] watchdog+0x1030/0x1030 [ 451.012185][ T32] ? watchdog+0x1c7/0x1030 [ 451.016824][ T32] kthread+0x38b/0x480 [ 451.020947][ T32] ? __pfx_watchdog+0x10/0x10 [ 451.025655][ T32] ? __pfx_kthread+0x10/0x10 [ 451.030287][ T32] ret_from_fork+0x514/0xb70 [ 451.034921][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 451.040122][ T32] ? __switch_to+0xc89/0x1420 [ 451.044853][ T32] ? __pfx_kthread+0x10/0x10 [ 451.049488][ T32] ret_from_fork_asm+0x1a/0x30 [ 451.054319][ T32] [ 451.057983][ T32] Kernel Offset: disabled [ 451.062353][ T32] Rebooting in 86400 seconds..