last executing test programs: 2m59.16967334s ago: executing program 3 (id=2369): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000040c0)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0)=0x5412, 0x4) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x112, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4480}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m58.900225985s ago: executing program 3 (id=2374): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@nested={0xa, 0x19, 0x0, 0x1, [@generic="6dbd8590fb7f"]}]}]}]}, 0x38}}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x4, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m58.572449915s ago: executing program 3 (id=2377): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) epoll_create(0x9) (async) r1 = epoll_create(0x9) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000040)={{r1}, "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"}) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000001040)={0x400, 0x9375, 0x7, 0x7, 0x3, 0x4}) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000001080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000001080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000012c0), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_ext={0x1c, 0xc, &(0x7f0000001600)=@raw=[@generic={0x4, 0x6, 0xe, 0x1, 0x6}, @call={0x85, 0x0, 0x0, 0x6f}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @generic={0x8, 0x8, 0x4, 0x7f2, 0x8}, @ldst={0x3, 0x3, 0x4, 0xb, 0x6, 0xffffffffffffffe0, 0x1}], &(0x7f0000001680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000016c0)={0x0, 0x5, 0x4f, 0x3}, 0x10, 0x23acf, 0xffffffffffffffff, 0x8, &(0x7f0000001700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001740)=[{0x1, 0x1, 0x4, 0x1}, {0x2, 0x3, 0xe5, 0xa}, {0x0, 0x2, 0x9, 0x8}, {0x0, 0x4, 0x6, 0x5}, {0x5, 0x1, 0xc, 0x1}, {0x1, 0x1, 0xc, 0x8}, {0x5, 0x2, 0x4, 0xfe049b1e964edfe3}, {0x5, 0x5, 0x10, 0x8}], 0x10, 0xfffffffd}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xf, 0x29, &(0x7f0000001340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x4, 0x0, 0x4, 0x9, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2f}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f00000014c0)='syzkaller\x00', 0x3ff, 0x49, &(0x7f0000001500)=""/73, 0x40f00, 0x78, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000015c0)={0x1, 0x1, 0x3}, 0x10, 0xffffffffffffffff, r4, 0x2, &(0x7f00000019c0)=[r5, r6, r7], &(0x7f0000001a00)=[{0x4, 0x3, 0x10, 0x6}, {0x4, 0x2, 0xd, 0x8}], 0x10, 0xd6b7}, 0x94) close(r7) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001b00)={0x0, 0x6, 0xfff7, 0x1ff, 0xffffffff, 0x5}, &(0x7f0000001b40)=0x14) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001b00)={0x0, 0x6, 0xfff7, 0x1ff, 0xffffffff, 0x5}, &(0x7f0000001b40)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001c40)={r8, 0x90, &(0x7f0000001b80)=[@in6={0xa, 0x4e24, 0x1, @private1}, @in6={0xa, 0x4e23, 0x0, @mcast2, 0xffff}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x4, @local, 0x4}, @in6={0xa, 0x4e23, 0xc, @rand_addr=' \x01\x00', 0x5}]}, &(0x7f0000001c80)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001c40)={r8, 0x90, &(0x7f0000001b80)=[@in6={0xa, 0x4e24, 0x1, @private1}, @in6={0xa, 0x4e23, 0x0, @mcast2, 0xffff}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x4, @local, 0x4}, @in6={0xa, 0x4e23, 0xc, @rand_addr=' \x01\x00', 0x5}]}, &(0x7f0000001c80)=0x10) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d00)={0x118, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xbd, 0x8, "87a1ece24fcd48e26d62b554912e9163764e376bd9d308f44460389ff3a00ffd905bac61a483fd2c697a1d88ef22e8a8e6aa3793c5863b1325e7fe7e20a8a2f7a36f52e02ca808ae106d47397d693cbb2555484ddb533f8a73fe05057408b60d58df0744e8b3e489f1006c74ef2b26127b87ff558aa606cb76af13884c0ba11b8eead0668d79f3982c3f6039bfd62af15a94c6ee4685c71d32a2ae0933152ac8b0190a8f44ca3999aba5f96366475ee7bf7134fa7fe93df7fc"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x800) r9 = socket$inet6(0xa, 0x3, 0x5) getpeername$packet(r2, &(0x7f0000001ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001f00)=0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0xe, 0x3, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000800) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0xe, 0x3, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000800) syz_genetlink_get_family_id$gtp(&(0x7f0000002040), r2) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000002080)={{0x1d, @remote, 0x4e22, 0x3, 'lc\x00', 0x0, 0x0, 0x3f}, {@multicast1, 0x4e20, 0x0, 0x8, 0x7, 0xc9}}, 0x44) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002180)={'sit0\x00', &(0x7f0000002100)={'gre0\x00', r10, 0x7800, 0x40, 0x3, 0x10001, {{0xc, 0x4, 0x0, 0x39, 0x30, 0x67, 0x0, 0x27, 0x4, 0x0, @private=0xa010100, @private=0xa010101, {[@rr={0x7, 0x1b, 0x53, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @remote, @remote]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002180)={'sit0\x00', &(0x7f0000002100)={'gre0\x00', r10, 0x7800, 0x40, 0x3, 0x10001, {{0xc, 0x4, 0x0, 0x39, 0x30, 0x67, 0x0, 0x27, 0x4, 0x0, @private=0xa010100, @private=0xa010101, {[@rr={0x7, 0x1b, 0x53, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @remote, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002240)={'ip6tnl0\x00', &(0x7f00000021c0)={'ip6_vti0\x00', r11, 0x4, 0x4, 0x7f, 0x6127, 0x19, @dev={0xfe, 0x80, '\x00', 0x21}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0xa, 0x1000}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002240)={'ip6tnl0\x00', &(0x7f00000021c0)={'ip6_vti0\x00', r11, 0x4, 0x4, 0x7f, 0x6127, 0x19, @dev={0xfe, 0x80, '\x00', 0x21}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0xa, 0x1000}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000002580)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000002540)={&(0x7f00000022c0)={0x248, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x19c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x248}}, 0x4000040) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000002580)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000002540)={&(0x7f00000022c0)={0x248, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x19c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x248}}, 0x4000040) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f00000025c0)={@local, @rand_addr=0x64010100}, 0x8) socketpair(0x22, 0x4, 0x4, &(0x7f0000002600)={0xffffffffffffffff}) setsockopt$inet_MCAST_LEAVE_GROUP(r13, 0x0, 0x2d, &(0x7f0000002640)={0x1, {{0x2, 0x4e24, @loopback}}}, 0x88) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000002700)=0x1, 0x4) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000002780)={0x0, @can={0x1d, r12}, @xdp={0x2c, 0x1, r12, 0x40}, @phonet={0x23, 0x3, 0x9, 0x3}, 0x5, 0x0, 0x0, 0x0, 0xc0ce, &(0x7f0000002740)='lo\x00', 0x3c8, 0x4, 0xe2d}) (async) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000002780)={0x0, @can={0x1d, r12}, @xdp={0x2c, 0x1, r12, 0x40}, @phonet={0x23, 0x3, 0x9, 0x3}, 0x5, 0x0, 0x0, 0x0, 0xc0ce, &(0x7f0000002740)='lo\x00', 0x3c8, 0x4, 0xe2d}) 2m58.447292099s ago: executing program 3 (id=2378): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x200000000000000}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x4000000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="350400004000050b0a5a80648c63940d032c3e9a7abfaf6d4c08db04bac032fc60040035400c00f378faeb342e0002000104400037153e37", 0x38}, {&(0x7f00000002c0)="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", 0x3fd}], 0x2}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x490, 0x30, 0xffff, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0xe5bb, 0x2, 0x1, 0x80000000, 0x7, 0x4d68, 0xdee, 0x40, 0x7fe, 0x9, 0x6, 0xa, 0x80000001, 0x5, 0x5, 0xfffeffff, 0x7f, 0xe0, 0x4, 0x32c, 0x1, 0x8000000, 0x18, 0x6, 0x3, 0x84, 0x4, 0x0, 0x400, 0x7, 0x9, 0x101, 0x0, 0x9, 0x600, 0x7fffffff, 0x0, 0x7, 0x40, 0x8989, 0x8, 0x8, 0x1, 0x11f70b4, 0x2, 0x6, 0x1d6e, 0x5, 0x201, 0x6, 0x7, 0x7790, 0x7, 0x2, 0x0, 0x7, 0x8, 0x7, 0x1000, 0x30a5cf24, 0x3ff, 0x8, 0x4, 0x80000001, 0x9, 0xf, 0x8, 0x6, 0x6, 0x2, 0x1000, 0x3, 0xd94, 0x4c8b, 0x1, 0x3ff, 0x9, 0x9, 0x5, 0xc, 0x100, 0x7, 0x6, 0x9, 0xf, 0x7, 0x7, 0x100000, 0x1, 0x8, 0x6, 0xff, 0x1000, 0x2, 0x5, 0x1, 0x0, 0x1, 0x4, 0x97, 0x7, 0x8, 0x5, 0x4, 0x3, 0x7, 0xf28c, 0xff, 0x3ab928f4, 0xa638b41, 0x9, 0x2, 0x3, 0x9, 0x9, 0x6, 0x8, 0x1, 0x7, 0x1, 0x1, 0x6, 0x100, 0x2, 0xbe7b, 0x401, 0x8, 0x400, 0x9, 0xe, 0xfffffffe, 0x10001, 0xa05, 0x7ff, 0x5, 0x7, 0x0, 0x7, 0x1ff, 0x9, 0x3, 0x4, 0x7, 0x8000, 0x3ff, 0xa4c9, 0xff, 0xff, 0x8, 0x1d, 0x80000000, 0x6, 0x400, 0x3, 0x2176, 0x9, 0xfffffff8, 0x81, 0x3, 0x2, 0x5, 0x9, 0x4, 0x100, 0x7fff, 0xf8, 0x419c5faf, 0xfffff800, 0x27, 0x8000, 0x1c00000, 0x800, 0xffc0000, 0x8, 0x0, 0x6, 0x8, 0x0, 0xd8ec, 0x8, 0xfffffffc, 0x8, 0xf, 0x101, 0x4, 0x80, 0x183, 0x6, 0x7ff, 0x4, 0x400, 0xfa, 0x3, 0x400, 0x800, 0x7, 0x59, 0x80, 0x6, 0x5, 0x2, 0xfffeffff, 0x8, 0xc, 0xea, 0x101, 0xa000000, 0xb, 0xfffffffc, 0x631, 0x400, 0x1, 0xfffffff7, 0x3, 0x4, 0xd, 0x3, 0x0, 0x0, 0x6, 0x1, 0xfffffff9, 0x6, 0xc, 0x3, 0x0, 0x9, 0x0, 0xa8a, 0x1fd, 0xb45e, 0x6, 0x5, 0x3, 0x0, 0x0, 0x7, 0x27a, 0x0, 0x9cb, 0xffff, 0xbeb, 0x3, 0x81, 0x3, 0x8, 0x7, 0xff, 0x2, 0x6, 0x7, 0x8, 0x4, 0x10, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x101, 0x0, 0x3, {0x4, 0x2, 0x100, 0x7, 0xffff, 0x10001}, {0xfb, 0x2, 0x2, 0x3, 0x2}, 0xc2d, 0x3, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x4048015) 2m58.345694469s ago: executing program 3 (id=2379): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket(0x2a, 0x800, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x40, r10, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={0x14, r13, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 2m57.320916338s ago: executing program 3 (id=2390): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc352fa2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b175908180270a1128fdcf4381003c00abc3e6904c814abfd6245d3fe73844cd0d44a6cb8cc17125ca989a1df8e6e37df61fa43ec12d121bc7e0bc6b077f2e73c5b13f2daa0e4736c3f54ba2d56c22a56d3af7d196047a562713e567a9c269033ef"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x20000890) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0xa, 0x922000000003, 0x11) close(r8) 2m42.114428442s ago: executing program 32 (id=2390): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x20000890) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0xa, 0x922000000003, 0x11) close(r8) 2m35.576879278s ago: executing program 0 (id=2660): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800008f00000003040000000000000061107800000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10) (async) r1 = socket(0x14, 0x2, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="44c394f305916c4516999da286dd", 0xe, 0x0, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ec0)={r2, 0xe0, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001c00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000001c40)=[0x0, 0x0], &(0x7f0000001c80)=[0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000001cc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001d00), &(0x7f0000001d40), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000001d80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x9, 0x10, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000018c0)='syzkaller\x00', 0x498, 0xf3, &(0x7f0000001900)=""/243, 0x40f00, 0x32, '\x00', r4, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000001b80)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001bc0)={0x4, 0x5, 0xffffffff}, 0x10, r5, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000001f00)=[{0x1, 0x1, 0x2, 0xa}, {0x4, 0x2, 0xf, 0x3}, {0x5, 0x4, 0xb, 0x5}, {0x3, 0x2, 0xf, 0xb}, {0x0, 0x3, 0xc, 0xb82b4df96865e1eb}, {0x5, 0x5, 0x1, 0x5}, {0x5, 0x1, 0x5, 0x1}, {0x0, 0x3, 0x3, 0xa}, {0x2, 0x5, 0xc}], 0x10, 0xe}, 0x94) (async) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)=ANY=[@ANYBLOB="280aa405", @ANYRES16=r6, @ANYBLOB="000428bd7000ffdbdf258700000009002a00250301020c0000000a002a002a010601019200000a000600080211000000000006004800520000000a000600ffffffffffff000007002a0010019800060048002e000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20055}, 0x40) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1, 0x0, 0x1000, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004040000f4"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r7, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) (async) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) connect$inet6(r1, 0x0, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000540)={0x41424344, 0x41424344}, 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000580)={0x41424344}, 0x7, 0x7) (async) syz_extract_tcp_res(&(0x7f00000017c0), 0x10001, 0x8) syz_emit_ethernet(0x104a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004706103c006400000606907800000000e00000010707530a010100004e244e22", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="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"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'ip6erspan0\x00', 0x200}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e00090027bd7000000000000800000008001a00", @ANYRES32=r11, @ANYBLOB="23744c4814ea067e187446574f11c1e4dbf76312c0e53fc945f42de0ebb15e73f57a7d5043681b5721427d029b033e8e5426c1d42e47c211d0c297750af266edfbd29808791f4a952eb6274b4ca736b344d0dd4b2d9ff8229995e45b0a585fccaf52270edb7a370a15d7151e5d85f273020b851dcbb9c2555fec9a1a8cf05dbacb21ea51262e8e2bb2301780aab39fa9a83ffedbaf80189e7de1"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m35.003495156s ago: executing program 0 (id=2661): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000000000000000000000000061190000000000009500"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68}, 0x94) 2m34.921606953s ago: executing program 0 (id=2663): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x100}) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000080)="cf71df", 0x3}], 0x1) (async) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/105, 0x69}], 0x3}}], 0x1, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6002adf70030"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x40041) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0xee01}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x1}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async, rerun: 32) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) (async) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m34.698938759s ago: executing program 0 (id=2666): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x8, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts={{0x18, 0x29, 0x37, {0x67}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}], 0x58}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000240)=0x2c) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x200a, 0x6, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x2110, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000e40)={{}, "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"}) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r11 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r11, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r11, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0xfffffffe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad0262f992af", 0x2a}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/81, 0x51}, 0xfffffff9}], 0x1, 0x12141, 0x0) 2m34.360221923s ago: executing program 0 (id=2669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) (async) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f00000004c0)=0xffff57cd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) write$cgroup_type(r4, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 2m32.992756905s ago: executing program 0 (id=2685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4008090) 2m17.946693412s ago: executing program 33 (id=2685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004801}, 0x4008090) 6.099503745s ago: executing program 4 (id=4183): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000028c0), &(0x7f0000000380)=0x60) r2 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) (async) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910426000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.899437796s ago: executing program 4 (id=4186): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31840000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003"], 0x118}}, 0x4000040) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={r4, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @remote}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000080100003047e492bbd700081120b0d0000040084cb30a5b3efa779eb08c2262557b05852a0440ba6ddafe79ef52a44388f61f300"/70, @ANYRES32=0x0, @ANYBLOB="01070000000000001c0012800b0001006970766c616e00000c000280060002000100000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000080100003047e492bbd700081120b0d0000040084cb30a5b3efa779eb08c2262557b05852a0440ba6ddafe79ef52a44388f61f300"/70, @ANYRES32=0x0, @ANYBLOB="01070000000000001c0012800b0001006970766c616e00000c000280060002000100000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 5.889864834s ago: executing program 2 (id=4187): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) r3 = socket$netlink(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async, rerun: 32) unshare(0x6a040000) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r6, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) close(r6) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000e480000000000000000000fa5a4fde00000000fe5c5afc68a0323a5d5b8084a12aa0fabd"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r8, @ANYBLOB="00000100000000000000000000000000000002a715d808503e5343bf206ba9eeb8a338a79b16922b92a7cd8d4e484ab7535638085e5a6b51db04feebe7fd2c51f3eadb50dfacab48a4e806105112321338e9ec2f68a1542af35358b1b018dde85d1fbaf50973dac1e236efa47eaeb3ac6a08cf8f14225ae0bb35ee840ac6faaff6fff11e7f1a31f916e716ebbf83227f6d4a9704a0bd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x48) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5}, 0x0) 5.083522642s ago: executing program 2 (id=4198): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$kcm(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x6c000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffb, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x78, r3, 0x700, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x5ca6ff915647a70d}, 0x80) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) bind$tipc(r9, 0x0, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x22000810) writev(r0, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) 4.862974024s ago: executing program 4 (id=4200): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xf}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000580)="0b0903e6959e2fca98636803499ade8bbed4da37f885b533a7e057f939d7730214fae61997ea365e60f0b58b4b2dc987c47b65b17038e27b3f4634cdb5c9188b0d809a9d314ec0e1edee968f134c93673eee6b0fcffec00c98824c8703f2fb78f617942219a6ef39e333453b802006e115914be9e077e05f710cf0d5f225603d0e278aedf0bd52f41969f8737f9e671bf9061138a5eb3405cc687fe3a4785896c60e369ec302ae7323c4b340ce610059574c9408e3fdcbe63c446e1fbbf17d02aeaa055635bb933e0d51db976f5a5d7403aab5f7420d650a2ca45370421a6872", 0xe0}, {&(0x7f00000003c0)="da3c55065ddafbcaa200bd7426b91041d63b6572dc6f41b74bcd91f3362b03fa8919c9", 0x23}, {&(0x7f0000000400)="c68a48bb83802659c9a22139a0a715b5df1da71228aad9b2b8880017ffce", 0x1e}, {&(0x7f0000000680)="fdd9124c64", 0x5}, {&(0x7f00000006c0)="94f1c0387a45ee706655489699061cc3cc36f2", 0x13}, {&(0x7f0000000700)="24fd87b588b782eb589875430cf1adf287d42c317d8eb0253d0549b4674c53ee8544e626def520e3a5c20b4ac1c72e0aee0bc40ec59a45d633a08d4d9b9836ba122cdca22834aab67b048d28fcea813992bc655a75b98c493bb619fd7fc3e9622e43e5e054a2f837b5523646c336b8ba948af22c25853e60737dfbbe7163e5183ff853080e46083da74aba5b5587a8cf34e96a9a1d5aa78e2bc2a1c693edb5", 0x9f}, {&(0x7f00000007c0)="9180fe4f3716acebf029e6fa0c3f36ee615bca719d11b22059bc880d55c284a39b62f4bea2aae16f61fd9c523febbe613b747be2c5234674e69f840af8240682c5c8a63a77387cc74cc657e5aac4a478cab2d8ffe1e804c4ae709ec6448e242311a6067d6c7cdbb6a7b1d83ad1fdb91edcae2db1978ef55b7e0be13bbc4555efd875cb5b196ef9183c42391d80fbcedd3d20fe52f835de8cdca335f7268ffaa396103b8f210a519851fd857e13760147fa916b41bfb83616a1bf77bccb6e27294b78a60820cb37a7c6e8fc40d081e57acae9d34f", 0xd4}], 0x7, &(0x7f0000000ac0)=[@rthdr={{0x88, 0x29, 0x39, {0x0, 0xe, 0x0, 0x3, 0x0, [@private0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, @local, @private0]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1ff}}, @tclass={{0x14, 0x29, 0x43, 0x7f}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x33, 0x0, 0x1, 0xc}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x110}}], 0x1, 0x24040040) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340), &(0x7f0000000380)=0x8) 4.727650819s ago: executing program 4 (id=4201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0xa, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, @local, {[@dstopts={0x2c}], '\a\x00'}}}}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0xf}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048150) 4.477371504s ago: executing program 6 (id=4203): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@empty, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x50, 0xff, 0x0, 0x1}, {0x6, 0x5e, 0x0, 0xfffff001}]}) write$ppp(r0, &(0x7f0000000000)="5af9", 0x2) 1.447469715s ago: executing program 1 (id=4204): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value=0x3000000}, 0x94) 1.369282074s ago: executing program 4 (id=4205): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) accept(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000005000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x10) (async) r8 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002007000000000000000"], 0x128}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="0c0100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000008002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x10c}}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0xff69, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40009}, 0x20000000) 1.369109825s ago: executing program 1 (id=4206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="58050000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000200000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x558}}, 0x10) 1.365721635s ago: executing program 2 (id=4207): unshare(0x6a040000) mmap(&(0x7f0000583000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x29072000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x450, 0xffffffff, 0x3b8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1f0, 0x218, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7ff, 0x298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$unix(0x1, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000140)={0x18, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}]}, 0x18}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x178, 0xffffff7a, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffffff, 0xffffff00, '\x00', 'gretap0\x00', {}, {}, 0x84, 0x1, 0x1}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x4132, 'netbios-ns\x00', {0x2}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x9}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r8, 0x28, 0x6, &(0x7f0000000140)={0x0, 0xea60}, 0x10) connect$vsock_stream(r8, &(0x7f0000000940)={0x28, 0x0, 0xffffd8ee}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3a}, {@private=0xa010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000280)) 1.283820327s ago: executing program 6 (id=4208): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000300000000000000622100008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)={0x9d0, 0xd, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x9bc, 0x3, 0x0, 0x1, [{0x28c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x97f8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x61}, @NFTA_SET_ELEM_DATA={0x264, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "ebbed741b378aa70071c4539a2f54ad28b95162a928ffb36d124bab54a70bf0075e4a425ddc17c2f6215fd5a7ffc325c887b942d4dec6af99d10c2e4b6bce2842e896d6eb80b4d873eadb67d058845260c21601a88a924822d996eae87f76301441c62576c451f7bd961cfc1b9c72be18c2e467dd6dc22d4641b9573a1b32cb2f3208b02d6e00fdd698d3d518d50f1e4e0ad526f847fb14b09249d42b37653ed4177e39fdaa1837c185b7b2da56d381f56c976c02ec21e7b02ce75952ff73ff31b6f351af52fb8f2e2d3844c04f35ac0eabfafaba3b35a30d1bcd7a96798da3f49ddbd"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x77, 0x1, "5e42834db8dba08aad4d540de73f6d6a76d48c33bca9bd84b297413dee72a38a3e3b771824ae5b0033384a34b85ea756b80b3ee882a924dfaa323138245e394e46adcb308d0797347241653a4117d03d24033d7a95720afe930237280e6ca5b4101ff9ddb25919b70389dee6999011c6f4cb0b"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x504, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x278, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd4, 0x1, "b1677526a2ef5117f2a1ac52fbf679e60ec8c35bad87db458331029fca10066016c529836b9828a799bd23363dba30a5494ae826b0d9f50a6914c84eb3f213dd3f29e0125dabfe077a0adb99387575728309ab747e2abbcb87a0f3d3e43d1bd24fbc410995cead2899dc06af7c61a2b054e1d7332db23f087c5a02302822d217442be0d42ae785f78cd32dfa23174ee433902e786042cf07bf87639a12a9378d867137424cbd77e122c4faa688f46ad950d5b7bbe576e0473239abf04dad80129072f14164810c7a6578fb2b5ddffb1f"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x21, 0x1, "4de487db99431326a59b93c51446e8ab7312a561aa958edb1841875df6"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x46, 0x1, "dfc90d55276f6b290d6322df89e82bd3ad8449ad8819794ac396585993d4b0dfe1497644f0479715e981150eb67fae2a1dbcae929527d06463006716d53dcd64011c"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x3c, 0x1, "de39250b1e39bba34d921bfe87f24a0b50b4d9cc44a7c7312dd3cb780bf5ba840d32063bad982dd6d99b3313b6202b7a1fe4940617380e6a"}]}, @NFTA_SET_ELEM_KEY_END={0x11c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "933284fc46873aada38ce07973803bd5df0cf84eb8ed55d3523d77c7504dc9cff3f21752ba1589cf41fa434aad6bca9f71451a7f495ea8655075ab16a670eba162af0c261f79c1ef021a297c430eb5105dc563b634ec8cae2ff9ce8095e2a9ad40677d69c0c2ee6bdfdb839e466d7b00f8d02923511211b8b639b5c31d551a6c3e58e5acf1fb132d8efae48c6fd1c05332bda2f28e0ccfeb64e085fe6d02431b169fbfb8659315f15043bdeaea0c512516a6a8f93a666c4541"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x6c}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xdf}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcc}]}}}, @NFTA_SET_ELEM_DATA={0x110, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xea, 0x1, "65846195559a095e1041a14defdd24f06931feba1173b72d1246db9595bbc07b82cbf08f984efcd1bf3d54d6bcb32c6d20f320bbbd45e514c99d2629060ea58c99b2726fb63a6e7633503d9bc9b8027636130bbc89a2b289eece77315907388a6d1524d912822235e44dd87043ec7f3dab3d6def0ae25d539370c7a019ccd04349bb91915d30f5a266f92322bf8978ff55037a29d13baf2e2150bff2173b4bda707518c38e6c744c79196ffd132cd33180e51bbeb0b2ce0f08fcb92ebe9858269b2bc9c46fdbff9939ed38071634f4febf31eeeadc40c1c3ed89a75fe0bf0eb304eebed48b8f"}]}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_DYNSET_EXPRESSIONS={0x10, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x9d0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r2], 0x108}}], 0x1, 0xc040) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in=@rand_addr=0x64010102, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@empty, @in=@private=0xa010100, 0x3c, 0x0, 0x0, 0xfffffffd, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x4000) 1.28340232s ago: executing program 5 (id=4209): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) socketpair(0x11, 0x800, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000080)={0x7, 'wg0\x00', {0x20000ffc}, 0x3c}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff010000000400000000000000e0000001e0000002ac1414aa0000"], 0x20) close(r0) 1.220135123s ago: executing program 1 (id=4210): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000000880)={0x27, r4, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) readv(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) close(r3) sendto(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x10000000) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.192112874s ago: executing program 4 (id=4211): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xffff, 0x8}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffeff, 0xffffffff, 0x20000000, 0x9, 0x18000}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={0xffffffffffffffff, r5, 0x25, 0xa, @void}, 0x10) close(0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x38, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}], {0x14}}, 0x8c}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca4b5e00281ad251f9", 0x16}, {&(0x7f0000000100)="b9a7c60494d422f271df2fa4f14f04b10fa53885bce4a812109765ebcf54a461", 0x20}], 0x2) 1.119974263s ago: executing program 6 (id=4212): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @mcast2}], 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000200000002000000c42b0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000001400"/28], 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000400000000000000000001811000009a82241fa04d77c7af2ed1b4b26f459cd2798dbc0e3c6acb896055f4657df259017b9f6e45696b9708628fe1a604dfcab1bfb8a2a04237a24df0ce13bf93d7f97cb081a965aa57492643ed07c867f648f945a59ef30b8228d8f417da2b5030000001851a908e3de", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r5}, 0x8) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)={0x116c, 0x40, 0x107, 0xfffffffe, 0x10000, {0x7, 0x7c}, [@typed={0x8, 0x60, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x1144, 0x1, 0x0, 0x1, [@nested={0x113e, 0x2a, 0x0, 0x1, [@nested={0xbe, 0x96, 0x0, 0x1, [@generic="062cc183d6bd11c36f2fdfc6cc85148a24b05412f4531b5537a48b20b4ee4eb1b20f466061626db2a56a0ddd6ca43b8c9771ccbf644d58a947d462a0b22ded3d7a9ca66b3f0543b4e7eb491907b63ef5e2414d37e6a681f5b52c35800c317564cba84af15f94e351b3c6417018f7bba9bf971522b6479452ef5158c71245aed7017c0064d38956b489017e635c83dec833447fe272f41fb92bba3b2f203304a81d2995c449c12ec6936a07d2dc1ff42f8fb06014762e", @typed={0x4, 0xc9}]}, @generic="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", @generic="1612f8d1bbfe128ec3087c58b4143ddc07a1328fd015cad285459418bb2a7489996a260154c4ea4b4fe9ffa37b7507d295035f9e03684bbd48c32b9896ce0b7c753ea0210ba8b8361a0cad2f0cd12623d9aa7dd4cd209e1464824b378c9fc1d01bd7d749601cf32d56a30484bbbc247a27b1ebb8a02dd4d2b6eb"]}]}, @typed={0xc, 0x3d, 0x0, 0x0, @u64=0x5}]}, 0x116c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x20, 0x4, 0x51, {{0x9, 0x4, 0x2, 0x38, 0x24, 0x64, 0x6, 0x10, 0x4, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x2a, [@dev={0xac, 0x14, 0x14, 0x27}, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x2, 0x6, 0x60, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1, 0x9, 0x3, 0xe}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg0\x00', 0x0}) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) (async) r17 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) (async) r19 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd0a, 0x25dfdbf7, {0x7, 0x0, 0x0, r20}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x134, r8, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x4008800) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.118843273s ago: executing program 5 (id=4213): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2f, "691d5c34b1970ce5ff44f883a5f722b29a13a33b2bdaeca33d8d1591aa108a4035dd4a446a64abcc3665a841a9eea3"}, &(0x7f00000001c0)=0x53) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000005b7040000000000008500000033000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.014989919s ago: executing program 5 (id=4214): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020601020000000000000000010000000c000780080012000000000005000100070000000500040000000000090002007300000010000300686173683a69702c6d616300"/84], 0x54}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b900000000000000000700000006000480ffef0000060003"], 0x24}}, 0x0) bind$inet6(r5, 0x0, 0x0) r7 = socket(0xa, 0x3, 0xff) r8 = socket$inet(0x2, 0xa, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) read(r9, &(0x7f0000000080)=""/38, 0x26) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'lo\x00'}) connect$inet6(r7, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r10}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) close(r12) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000480)={r6, r12, 0x5, 0x7c, &(0x7f0000000280)="7e55cf9c21c1047262a0c4b22921a801f3b2b0e6a12d63394d64bba79743adfd810bc6f94183e699377f475fc1038fb24bfd95cc4469b852894ad89b78f36fe6e4d3166f2bd624f15e26c599d58c81d4f310590237bd25014d0da10d0db2279e22fcc003d9cbc592a686f47c39ba5e0888697a34a830e0895a4ae985", 0x7, 0x3, 0x5b3, 0x4, 0x2, 0x2, 0x80000001, 'syz1\x00'}) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) sendmsg$unix(r7, &(0x7f0000001680)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)="887d44981ba172268abe609eae7a2c918b4ab1c1919a3eb27e3f3e712caf", 0x1e}], 0x1, 0x0, 0x0, 0x4040055}, 0x2) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414e80c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e80140001"], 0x88}}, 0x0) 817.139543ms ago: executing program 6 (id=4215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8943, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001302000000010000000000000000000000005f"], 0x0, 0x35}, 0x28) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r3], 0x28}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c00000c004280080007800a00000400028000"/48], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 763.743651ms ago: executing program 2 (id=4216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "7c6d8f74584dc700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x5020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40841}, 0x40080) 684.019854ms ago: executing program 1 (id=4217): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value=0x4000000}, 0x94) 547.518665ms ago: executing program 1 (id=4218): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @empty}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000030000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) 508.390495ms ago: executing program 6 (id=4219): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=@newtaction={0x74, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xffffffff, 0x10000, 0x10000000, 0xcb6, 0x2}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x884c}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000002c40), 0xffffffffffffffff) r6 = socket(0x1e, 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000009c0)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r3, 0x20, &(0x7f0000000380)={&(0x7f0000000580)=""/94, 0x5e, 0x0, &(0x7f0000000600)=""/168, 0xa8}}, 0x10) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="731e0700741b00008520000002000000"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xf2, &(0x7f0000000200)=""/242, 0x41000, 0x1c, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xf, 0x2, 0x4}, 0x10, r10, 0xffffffffffffffff, 0xa, &(0x7f0000000480)=[r3, r11], &(0x7f0000000840)=[{0x2, 0x2, 0x3, 0x4}, {0x4, 0x3, 0x0, 0x2}, {0x0, 0x2, 0x6, 0x3}, {0x2, 0x5, 0x5, 0xa}, {0x5, 0x2, 0x8, 0x5}, {0x1, 0x2, 0xc}, {0x2, 0x1, 0x8, 0x1}, {0x2, 0x1, 0x1}, {0x3, 0x5, 0xb, 0xb}, {0x5, 0x4, 0x9, 0xc}]}, 0x94) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000006c0)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 392.376876ms ago: executing program 2 (id=4220): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="58050000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000200000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x558}}, 0x10) 319.206438ms ago: executing program 2 (id=4221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x10, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) 307.08263ms ago: executing program 5 (id=4222): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x49000}, 0x4045) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.kill\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r1}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'macvlan1\x00', {0x6}, 0xffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a8, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x184, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffff801}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xdb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffe2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xcb}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff00}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd1e6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xbd3a}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5131}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x900}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9a2c}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1a8}, 0x1, 0x0, 0x0, 0xa6e9fb7dd35c69a}, 0x28000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0xad4, @private1, 0x401}}, 0x7, 0x5, 0x401, 0x1, 0x30, 0x5, 0x3}, &(0x7f0000000540)=0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000580)={r5, 0x9}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18c4}, 0x40080) r7 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r7, &(0x7f0000000700)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000740)=0x20) syz_init_net_socket$ax25(0x3, 0x2, 0x1) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r7) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r8, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008444}, 0x48801) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b40)={&(0x7f00000008c0)="5dfe9de090d9aa6b60e5dd56d9b3dafdb56b26e267e10598e1929b81e5d5ecfb2318a01e7518d931da61e6c8356267765f932f451eeff1cec67f038ea28bceb28df6379efed06521f87ff9ce3754742837ffee8df1d29ea36f602fb7202965a5a426d09d2941370f8cb2b915a9de4dd1087d4e14d234002773de04f02151af89d3d7b4dc028e6d4021238eaffd9edcb244793b6832e29122e6f6685512800a9091638598a4bf6d531284ea2c63bbed4014df7deab38b", &(0x7f0000000980)=""/9, &(0x7f00000009c0)="610cf1fb91795fc271e3545d2265be3ad73ca5d0b756b1e0c1261c4aff633ec0828e261536d88cf1aecd2dba41be6de0d1f6fbae3edc4403bd67055dc83a0daa6593a13933d2830785bef4af57c1aebec95056e6cd77d8d81a6476846dbae5570c4f2af937e57875cf58a31a308d53cb931432646ac0594d343dc0123f3b2aa479b40c2a182ff1aa087991e08d00de121337e9a27759688b790858bb179ca5297b1eed9ae3d57f5794ba3a51c5552c901f8e15d0b8aa59aecd49735c0c6e6bc6f609a2", &(0x7f0000000ac0)="4490a5fb9a128c33f257e5ebdaf9509a92b333085ab10dd583486562772d2b922824804a4cbc0a10e48b9d262f483cc2c515381708847d866ae929df5056c39248b82211c29b69297bf2b4f9794bc8576c9fc5410ca38a10b22b7e0282f7a8fb4dd707ad2f5fa38dd1dcd4623d2b74a6a90767d47f59acdf337a2167b83f", 0xa, r2}, 0x38) sendto$l2tp6(r2, &(0x7f0000000b80)="fea41a932ab010", 0x7, 0x0, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000bc0)={0x28, 0x0, 0x0, @hyper}, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r9, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48080) sendto$l2tp6(r3, &(0x7f0000000d40)="2c1a1f19f71eedbc1d39c704b503cbd36f0d60ee5670279537379b13c777b059d412a71aec2239367a6d199c4363834c227c346f2d33822dc719bfb0c95ab4c770e36480b998d016560be2e45cdff3cf8ff93f4dc6d42891de970b97360ea7cd1ec3cfe2fee4cc40809df7f68d89a3d7652694febf950a3c5ad2cae6b36dcf436fb9de6540b075b07381ccd487fe71e4703ab405d7f31cd66b9e49da3eca8f6d05a9192f550d816cf25db63d54937c", 0xaf, 0x80, &(0x7f0000000e00)={0xa, 0x0, 0x5, @loopback, 0x9, 0x4}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000e40), 0x8) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000e80)={'gre0\x00'}) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000f00)={r11, r12/1000+60000}, 0x10) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000f40)) setsockopt$sock_int(r10, 0x1, 0x27, &(0x7f0000000f80)=0x4, 0x4) 228.094807ms ago: executing program 1 (id=4223): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth1_to_batadv\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x6, [@ptr={0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @struct={0x10, 0x4, 0x0, 0x4, 0x1, 0x100, [{0xb, 0x2, 0x7d242b00}, {0x0, 0x5, 0x2}, {0xb, 0x5, 0x1}, {0x5, 0x4, 0xa0}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x6b}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0xa}, @ptr={0x8, 0x0, 0x0, 0x2, 0x5}, @var={0x5, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0, 0x30]}}, &(0x7f0000000640)=""/43, 0xba, 0x2b, 0x1, 0x2, 0x10000}, 0x28) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x5b686d7eaefee863}, 0x18) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x43, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2d19}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcfe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6559f795}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc133}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x0, 0x2, 0x6, 0x8, 0x4, 0xfffffffffffffff4, 0x10}, @jmp={0x5, 0x1, 0x6, 0xb, 0x9, 0x10d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x100, 0x65, &(0x7f00000004c0)=""/101, 0x40f00, 0x20, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000006c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x5, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000008c0)=[r6, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r8], &(0x7f0000000900)=[{0x1, 0x2313, 0x2, 0xc}, {0x7ff, 0x1, 0x5, 0x7}, {0x4, 0x2, 0xf, 0x5}, {0x3, 0x5, 0x7, 0xc}, {0x2, 0x3, 0x5}, {0x0, 0x55, 0x0, 0x7}, {0x3, 0x2, 0x5, 0x2}, {0x2, 0x3, 0x4, 0x9}, {0x3, 0x4, 0x5}]}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000a80)=r3, 0x4) r9 = socket$inet_icmp(0x2, 0x2, 0x1) r10 = socket$can_raw(0x1d, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) ppoll(&(0x7f0000000ac0)=[{r7, 0x22}, {r9}, {r7, 0xc044}, {r10, 0x6306}, {r2, 0x200}, {r2, 0x4000}, {r6, 0x8002}, {r7, 0x2004}, {r1, 0x408}], 0x9, &(0x7f0000000b80)={r11, r12+60000000}, &(0x7f0000000bc0)={[0x1]}, 0x8) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r13) sendmmsg$inet(r3, &(0x7f0000001100)=[{{&(0x7f0000000c40)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000c80)="d69d8d020ddda925ff799379adb36190e0f2d8b39c072661c459491c474e268624923649f983cc618f5d8f98d4ccc3deabf439ead2de81f5703f273b6b8ef92c20e49724406fc04b9243b1c2c6b48ca322115f1145ba7c39c49f4a2722", 0x5d}, {&(0x7f0000000d00)="87a67efd0ed5a910e6dbde2fe140f08fb94ce4dbb966eb2a13a97ce2fc23437f0247abbc1a77a012d1205478ec5e02c2466c6106a58c40610c52b9412fe5abd68d22c749b536c5a6969cc2676f0dfc6991a7db346f13f120d65e66c8d372b72d9508b9a3fdaa4b7146faa8dc808ed3ebec5fdd034045901de9cd80d0a3b81327d9146e", 0x83}, {&(0x7f0000000dc0)="326c6ed0cc0e4bc82e5ac62f7d1011095e327bf139c0dc4e10d5ab0e1a81ba16f8de8f372a247c6d28620f90131d97ff765b6d0d959902e87b3e36fae25781d7a60a7318595fca1ea342a4d4be67fb91438aeb0498d7f413", 0x58}, {&(0x7f0000000e40)="6f5f3054aea5b9ee55adbbb65c50214d862c1fadd682056fed4be11d2445e95704486257c2f2c801fada", 0x2a}], 0x4}}, {{&(0x7f0000000ec0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000f00)="50daf5ec35b8a18d4dffd559d53fdcb6592001", 0x13}, {&(0x7f0000000f40)="c30104f7d3fa1fa3cb471f1238d2adbf26c8be16257c5afa406b4420fbf2ee160d27956c98d3b20df9805e0fb6b1828052734e8bc8dd01b0b075bb93f14ab75ae8cdeeac7b2ed48f13e0ba0d80e4a84f3f3617495424792686150296e299a383704b5f84768187796ad06b278aa1b94df65c0ce960c1cdfe659223a5a759b0b1884b1cd9c03e30d49b98018fe510a83391cd82c7a16f8bcf75609e4c10de1dc0d729d4c5825101b992bb51c4d5f25e8e619411f7b9956939dd0f0c51c655815b6657621f37bc8a918f3005c6b927bfdb893afd57fc817f0267f9957fb526db2fb7", 0xe1}], 0x2, &(0x7f0000001080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xa5, [@multicast1]}, @rr={0x7, 0x7, 0xa5, [@local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x70}}], 0x2, 0x8000) bind$inet(r3, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000011c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001200)={"3804dad23c62695585f6684a0738d9b0", 0x0, 0x0, {0xfffffffffffffff7, 0x9}, {0xa, 0x5}, 0xffffffffffffffff, [0x9, 0x3, 0x126c, 0x1, 0x8001, 0x1ff, 0x1, 0x4, 0x4, 0x8000, 0x6, 0xb3c00000000000, 0x401, 0x5, 0xfffffffffffffffa, 0x5]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000001300)=r14) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r10, 0x8008f511, &(0x7f0000001340)) r15 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r15, 0x942e, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000001380)=0x9f, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}, 0x80}}, 0x3e7a, 0x8, 0x0, 0x400}, &(0x7f0000001480)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000014c0)={r16, 0x5, 0x20}, &(0x7f0000001500)=0xc) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000001540)) 162.558644ms ago: executing program 6 (id=4224): syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xffffffffffffff04, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6be}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r0 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) (async) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x110, 0x3, &(0x7f0000000100), 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000000)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async, rerun: 32) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 139.697396ms ago: executing program 5 (id=4225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x170, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x8884) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r4 = accept4(r0, &(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000600)=0x80, 0x80800) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20040020) (async) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20040020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000008c0)={&(0x7f0000000740), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x20008011) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000008c0)={&(0x7f0000000740), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x20008011) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000022c0)={&(0x7f0000000940)={0x1978, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x52}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7753}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_RRK={0xf9, 0xfc, "a0438d351907687b8c623fbb40c5cc057e051641eeee410a234a8b920d58701dd0a3dfe547af9c7197bdac7256b03c512e24e036b886efdcd489a83ffba667877a618700f6208c9920ad8ea0cec75c91b83e28f67ae987e75efddc615085064b16ab668cbc52b372acfe318072edb686fe5510a1d62ea644928cd06e2ce968bceb9ee49ee3d8167f882a350f1d9a9de421cd0c675acef7041c1a5eac2df607e3c63fa0b419c579105d022a3de7b1a4a6ed2772d81dd8cd1e5d9da8524887222dab79048d95f64d1b72fd4c7b754cb9df35d1d25c851712d374ab5f6dab989a140a09c60eb53576cb4c5f5d43bd0a983d7c7b229540"}, @NL80211_ATTR_FILS_ERP_RRK={0x84, 0xfc, "a8ec3dcb4a2a58e1e6579bd621b03cc9c51e02fcf9d380efdc2d41408f2e2f2586ffacbdfd8a431e538ded2e9ef4b22a47d042998230ac75c538a28c0de302bf568ad8cf8968da4aeef3ccda78f83f48b820f02a07a3384784da4535256b70427c77cc0b5dfbb75e58ba4de150c6da2eaaadbfb85352496659a149d96c62b99e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "0ae31853bb663bd4"}, @NL80211_ATTR_FILS_ERP_RRK={0xe1, 0xfc, "416707c2fbf02383744024d8f361f72a2d86ebf9b61aa6516b058e54324386536ec5567178eb9a721fcb2fd5f8148f2de731b5d8d4b5b3f34d96a7e40ac3488bf1ccbf22dd7c562236bad96d604e8cbc3f084e9d6add26460098e04bd404080212a1bf527599cedd259608678c5eebaf81e0d69ccebc3ffd481284f4ead6c26c2379fd8c2131f60a0aa95e47157428a868e6f13c48d98cd7d47663675856dfae72254f21bb5007f5efb2c10740f50713077d023c81253771230b69ab0262afe1b93d6f0fd4c85b5d058d45d1b02ee6cb4a316d608c43c1c187aa2b8341"}, @NL80211_ATTR_FILS_ERP_RRK={0xfd, 0xfc, "4c46fc58059a516d3c031edd89f6322fae093eba702a0f2bf553d17b7bdbc06ec269072f8fefe31468e082ab343fc868fee3878a433003e1f39f4ff3b068567d66e23d02054f4767dfd9398e9dffd55212c42b5d4770514ca1c3af9b8e82f8d38b067af9467f1d04d3ce727f3429d56aa2faf4fcde4c6bcaf708fd33ae8a4c6fa86b61e243615e450e41dce8ce42b256d918eea92be050d4f0183104d9d6f3b8f4749bda9c9af065cd7c0c036ee6280792836e4d68085724d394cf535e793b4377535aad018334e40f00f26aeab839330556311b54554cf67e12d832838f291342bcb7917b5ba4b356e8cdadd93a9a24c6aaabe90c9acf5363"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0x2e, 0xfa, "30fe425dcd8265863a759a4cb7c4993d7e9ca10d356bf86750964b9e73e966b5cd235be45625ae628e43"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "0a894e6d864d434418acf5"}, @NL80211_ATTR_FILS_ERP_REALM={0xae, 0xfa, "adef68c7ae37b3c48dc8e07df2159f928ce1e7652ff35b9d98c0000ff4e0cb10667ac68ddbebdfc2e0341aed561ff68850c09c319866931e77701f7144bd5900286134754526c312b24e49f0b37752c73056949823cec4b260c9f70f26cd05a85eec0a8bcc8da9288f273341d46f90c498f43aa54ae50fd9908323e2c48522208b9366c8d8ad557aa1ad99647fb91409f57c8c788ba89e250f40eb5eb482dcfd87b46365c5e1fffbb4d9"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}], @NL80211_ATTR_IE={0xa0, 0x2a, [@random_vendor={0xdd, 0x97, "bcb8ad15260395134fd704bff89558a3c23e14cab2fc39f594551cf71db6f03f622cfbaca36bf224d4e7bd55664985659f9bf8487368914a495cc9707e6c2c8e532b0b34ef17f9d3d7b11ba7eb359434dc5eb27d7c729d15bfae84993750ed6dfc0ff88c5f114449e9483726659fb1622e5e892345e90a6fc953f33d8295076cc59399359ef0893957c006ea465ae2a8c20acc2c8fd4af"}, @dsss={0x3, 0x1, 0xb8}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xfd, 0xfa, "a258ead3f0966dc2046f29058f57ca2c1f2ccb2fd7331f2977446a2495fd2402eec70a40d53388ec24dc5315b76cb1c2d9bc48ba889035930b4f4e73af6fe77984dcd2f2021ea91fcfc175e653b44e0da34420482be571842a27264a2bfedc012d6d8562b62afcf4c47ed2b676daf06432816735d9bb4e6a0f08bd0a4eb9a994aa607c5bcf91db6e264f3b1b3e29b074e2922ff44c26d442902ed3f51f519f1a6d4e13b290825bf386e12af680269589fe47dc88313fd3db5fa74451b1ad86f2029e496d3680cff234349499accd98d953847121d6599b7d0dbf82622acf2b71d3d16ac76a67217a4ad4b96e0af71d87d5e1cf3a76803ab1c3"}, @NL80211_ATTR_FILS_ERP_REALM={0xa4, 0xfa, "21722106b7cfefeca936ed4859e2c9257cb07fd0cefc7667f81b93ed27e7698118074b82b0c33fd1e4383137d84b2b41fd8fe651875b5cb22607983f95b1aaffa36fdec9df7676148bcff9646d521926f2338ac9aaa3214c9f350faac0a5ab4f915a6c8e3fb21225f844a935e2225aac14a2aedecd417aa54df68e4c88c4c94b3d467dfecc416f5660fdd64c31900ae8906bcd30f3071d62ba8f3165c56dc04d"}, @NL80211_ATTR_FILS_ERP_REALM={0x23, 0xfa, "b8614a14400a711cab1c3e8294242f817881c5af3f8e401d84bba9d8d54b9c"}, @NL80211_ATTR_FILS_ERP_RRK={0xa2, 0xfc, "bc0e03aee77b8758bb408bed700f556030403c17bfbcae3b42c78820df001ca8b7cbd6926176bb309adb45d793afce75e0ee5d22f1f15f86fd7626ab156f8d21ef55bd7c80b5e120a69fee20dd5aa546e6d5b8f30e6e66f8b7f6339c27ca27791d106dd174f1e15b3fbf3258463daaccca6d773cb47a5450ed3bcdb53e5ae912646b2585594df4793bb53512059a0a38b4feee0112c94a1e5eba4010e450"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}], @NL80211_ATTR_IE={0x97, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @mic={0x8c, 0x18, {0xa2a, "760262b04c49", @long="6c6c3dc03212b13c327c0417b97abcce"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @supported_rates={0x1, 0x1, [{0x6c}]}, @fast_bss_trans={0x37, 0x69, {0x80, 0x1, "0de8ee2a400b2458cf30a67f5ca80ac7", "dc03b38ad2665c975f907c6e69ec8ca24fdd2f8fee5d626f2ef09ed71d75adce", "2b5da0ca1a91f96b6014f3abef383c0f2eb6fa867516d172a103446e83542b8d", [{0x3, 0x15, "cd61f3d81a8e50cf19348aaadc47e0984248c34c22"}]}}]}, @NL80211_ATTR_IE={0x11f, 0x2a, [@random_vendor={0xdd, 0xeb, "6494c38a5b238a63bc08670298c1536d4fc5a7cb6efb300aa522bb3c87539196c8147ec3481aed5a30a809ffe4fc86fda49988deba40d55fa543b674ce74881af52143ec812d34490fb2f06e6169df54aef419fb03c46eaefe7202d25c15b99c14c769b7f636e863545e50724227c5bd64ca4d285e854e0997ab898135a71dad901c0d4ff889d43855ffcb63d48f0abace664b2e6b290d4d94af302e7dcc8d3814b03dad5f0df7bba73421ebc8c456e92fb79e7ab0a87d4f484fa777b03961ba833ab33063e9fd64a3df65795a1f3989e4d09c83c584d890f54e712513d3e0764feac0f5db0f6c19ca91cd"}, @erp={0x2a, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x21}}, @dsss={0x3, 0x1, 0x9}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0xf, 0x27, @device_b, 0x8, 0x3b, 0x9}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}]}, 0x1978}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000002480)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002440)={&(0x7f0000002380)={0x9c, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x35}}}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="95"}, @NL80211_ATTR_PMKID={0x14, 0x55, "19b33b6ed1b330845f375ac458e21025"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x18, 0x34, @random="f5f181bbdda823927c9cf98f9a3e8026282cf8ee"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_PMKID={0x14, 0x55, "208751aa95478ec696291b555753cfb4"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4c}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000024c0), r4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000024c0), r4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002540), r0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002580)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000025c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002700)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0x88, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24060050}, 0x20000800) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000002740)={0xffffffffffffffff, 0x1, 0x0, r5}, 0xc) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000002780)=0x1, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000027c0)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000002880)=0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000027c0)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000002880)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002900)={r11, 0x10, &(0x7f00000028c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000002940)=0x10) clock_gettime(0x4, &(0x7f0000002980)) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x44001) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x44001) accept4$inet(r4, &(0x7f0000002b00)={0x2, 0x0, @loopback}, &(0x7f0000002b40)=0x10, 0x80000) (async) r12 = accept4$inet(r4, &(0x7f0000002b00)={0x2, 0x0, @loopback}, &(0x7f0000002b40)=0x10, 0x80000) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000002b80)={@rand_addr=0x64010102, @remote, 0x0, 0x2, [@rand_addr=0x64010101, @local]}, 0x18) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002c00), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x48, r13, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x784}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000091}, 0x4) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000004580)={0x7, 0x2, {0x5, @struct={0x100, 0x9}, 0x0, 0xa95b, 0x10001, 0x0, 0x6, 0x80000000, 0x30, @struct={0x4, 0xfffffffe}, 0x4, 0x5, [0x7, 0x8000000000000001, 0xc60, 0x7, 0x7, 0x80000000]}, {0x0, @usage=0x10000, 0x0, 0x100, 0x1a, 0x128, 0x7, 0x3, 0x84e, @usage=0x101, 0x4, 0x9, [0x6, 0x7, 0x5, 0x0, 0x8, 0xfffffffffffffffc]}, {0xfff, @struct={0xe233, 0x2}, 0x0, 0x1, 0x2e, 0x3, 0x9, 0x7, 0x46, @usage=0x7f, 0x6, 0x9e, [0x2, 0xd6, 0x6, 0x8c, 0x4, 0x9]}, {0x1000, 0x7fffffffffffffff, 0x1}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000004580)={0x7, 0x2, {0x5, @struct={0x100, 0x9}, 0x0, 0xa95b, 0x10001, 0x0, 0x6, 0x80000000, 0x30, @struct={0x4, 0xfffffffe}, 0x4, 0x5, [0x7, 0x8000000000000001, 0xc60, 0x7, 0x7, 0x80000000]}, {0x0, @usage=0x10000, 0x0, 0x100, 0x1a, 0x128, 0x7, 0x3, 0x84e, @usage=0x101, 0x4, 0x9, [0x6, 0x7, 0x5, 0x0, 0x8, 0xfffffffffffffffc]}, {0xfff, @struct={0xe233, 0x2}, 0x0, 0x1, 0x2e, 0x3, 0x9, 0x7, 0x46, @usage=0x7f, 0x6, 0x9e, [0x2, 0xd6, 0x6, 0x8c, 0x4, 0x9]}, {0x1000, 0x7fffffffffffffff, 0x1}}) 0s ago: executing program 5 (id=4226): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00070c27bd70000000000002000000", @ANYRES32=0x0, @ANYBLOB="80004100050001"], 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x20024090) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) write$tun(r1, &(0x7f00000000c0)={@val={0x0, 0x8863}, @val={0x1, 0x1, 0x4674, 0x1, 0x5, 0x200}, @x25={0x1, 0x1, 0xfd, "dbd8d29328a832a036f9723c9eeb05e5bed7fcf67b29b694021232fada7ecb2a824af2a4074577e8cbefa43fb56e1c751a4af98bb48ec41af2ae9fec0f67938b4f5ff8fc6da05e633d79f6717804ad826894e256ef53aefc7d2af57c8c09ed90e3c507f4389ca2570ceead96378b507a1447d4847e7a644a24f2637f3d9921af88a6fdcb4d9dc20cecc348e88131565ef60027464aac2ea4f80e63043b890b46d43f5c3309d51c28b46a63d211cc68"}}, 0xc0) kernel console output (not intermixed with test programs): may not be safe on all matching packets. [ 457.968761][T15539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.977684][T15539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.010209][T15539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.210283][T15644] netlink: 'syz.4.2627': attribute type 1 has an invalid length. [ 458.231720][T15539] hsr_slave_0: entered promiscuous mode [ 458.241476][T15539] hsr_slave_1: entered promiscuous mode [ 458.252304][T15539] debugfs: 'hsr0' already exists in 'hsr' [ 458.260753][T15539] Cannot create hsr debugfs directory [ 458.330011][T15645] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 458.341099][T15645] bond9: (slave vxcan7): Error -95 calling set_mac_address [ 458.370447][T15648] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 458.382042][T15648] bond9: (slave vxcan7): Error -95 calling set_mac_address [ 458.436360][T15652] dvmrp1: tun_chr_ioctl cmd 35111 [ 458.596578][T15661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2631'. [ 458.608556][T15661] openvswitch: netlink: Flow key attr not present in new flow. [ 458.726781][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 458.751963][T15666] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2633'. [ 458.766585][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 458.776069][ T5836] Bluetooth: hci5: command tx timeout [ 458.811266][T15539] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 458.863934][T15539] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 458.909482][T15539] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 458.960519][T15539] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 458.998641][T15679] lo: Caught tx_queue_len zero misconfig [ 459.278721][T15539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.365346][T15539] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.407640][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.414867][ T8273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.452333][T15705] tipc: Enabled bearer , priority 0 [ 459.476959][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.484330][ T8273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.510141][T15705] syzkaller0: entered promiscuous mode [ 459.523879][T15705] syzkaller0: entered allmulticast mode [ 459.606707][T15705] tipc: Resetting bearer [ 459.633999][T15702] tipc: Resetting bearer [ 459.687703][T15702] tipc: Disabling bearer [ 459.717308][T15718] lo: Caught tx_queue_len zero misconfig [ 459.820981][T15718] bond7 (unregistering): Released all slaves [ 459.877714][T15726] __nla_validate_parse: 3 callbacks suppressed [ 459.877733][T15726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2651'. [ 459.895421][T15726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2651'. [ 460.300955][T15746] netlink: 'syz.2.2658': attribute type 1 has an invalid length. [ 460.437736][T15757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2658'. [ 460.820017][T15750] ip6erspan0: entered allmulticast mode [ 460.832539][T15754] netlink: 'syz.1.2657': attribute type 3 has an invalid length. [ 460.853316][ T5836] Bluetooth: hci5: command tx timeout [ 460.912098][T15758] syzkaller0: entered promiscuous mode [ 460.918758][T15758] syzkaller0: entered allmulticast mode [ 460.934752][ T36] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.944434][ T8273] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.987349][ T8273] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.003880][ T8273] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.100160][T15539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.145494][ T36] bond0: (slave ip6erspan0): link status definitely down, disabling slave [ 461.170417][ T36] bond0: now running without any active interface! [ 461.792319][T15824] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2672'. [ 461.796428][T15813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.828227][T15813] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.864339][T15813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.933745][T15809] lo speed is unknown, defaulting to 1000 [ 462.271346][T15837] netlink: 'syz.2.2675': attribute type 12 has an invalid length. [ 462.286635][T15837] netlink: 'syz.2.2675': attribute type 29 has an invalid length. [ 462.312968][T15837] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2675'. [ 462.323515][T15837] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2675'. [ 462.509233][T15539] veth0_vlan: entered promiscuous mode [ 462.638689][T15539] veth1_vlan: entered promiscuous mode [ 462.698126][T15539] veth0_macvtap: entered promiscuous mode [ 462.738942][T15539] veth1_macvtap: entered promiscuous mode [ 462.797985][T15539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.807156][T15854] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2682'. [ 462.813833][T15539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.878409][ T8273] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.900599][ T8273] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.931100][ T8273] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.933424][ T5836] Bluetooth: hci5: command tx timeout [ 462.991107][ T8273] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.043910][T15856] geneve3: entered promiscuous mode [ 463.049281][T15856] geneve3: entered allmulticast mode [ 463.096062][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20064 - 0 [ 463.106112][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20064 - 0 [ 463.122940][T15860] lo speed is unknown, defaulting to 1000 [ 463.129164][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20064 - 0 [ 463.153649][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20064 - 0 [ 463.250987][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.270896][T15878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.280805][T15878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.284725][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.290308][T15878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.308842][T15878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.318229][T15878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.327952][T15878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.340147][T15878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.348722][T15878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.362081][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.377141][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.665815][T15884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2690'. [ 463.942113][T15899] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2693'. [ 464.301139][T15910] lo speed is unknown, defaulting to 1000 [ 464.442813][T15916] lo speed is unknown, defaulting to 1000 [ 464.844348][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2702'. [ 464.917348][T15933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2701'. [ 465.036124][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 465.054871][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 465.075195][T15926] lo speed is unknown, defaulting to 1000 [ 465.081896][T15935] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2704'. [ 465.258594][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 465.336989][T15948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2708'. [ 465.348057][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2708'. [ 465.357170][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2708'. [ 465.439081][T15954] x_tables: duplicate underflow at hook 2 [ 465.907982][T15975] netlink: 996 bytes leftover after parsing attributes in process `syz.2.2713'. [ 465.943916][T15975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2713'. [ 465.980578][T15977] lo speed is unknown, defaulting to 1000 [ 466.347130][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2716'. [ 466.540780][T15977] netlink: 'syz.1.2715': attribute type 6 has an invalid length. [ 466.921363][T15999] syz.5.2718 (15999) used obsolete PPPIOCDETACH ioctl [ 466.959198][T16003] netlink: 'syz.4.2721': attribute type 3 has an invalid length. [ 468.195192][T16051] netlink: 'syz.5.2739': attribute type 29 has an invalid length. [ 468.210990][T16051] gtp0: entered promiscuous mode [ 468.216765][T16051] gtp0: entered allmulticast mode [ 468.226467][T16051] netlink: 'syz.5.2739': attribute type 29 has an invalid length. [ 468.350548][T16066] netlink: 'syz.4.2745': attribute type 5 has an invalid length. [ 468.418097][T16069] team0: No ports can be present during mode change [ 469.078300][T16088] lo speed is unknown, defaulting to 1000 [ 469.278428][T16102] net_ratelimit: 175 callbacks suppressed [ 469.278452][T16102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.349205][T16102] netlink: 'syz.1.2757': attribute type 6 has an invalid length. [ 469.383647][T16102] netlink: 'syz.1.2757': attribute type 5 has an invalid length. [ 469.421642][T16102] netlink: 'syz.1.2757': attribute type 4 has an invalid length. [ 469.443748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.486472][T16102] netlink: 'syz.1.2757': attribute type 4 has an invalid length. [ 469.549141][T16115] lo speed is unknown, defaulting to 1000 [ 469.641285][T16118] netlink: 'syz.4.2763': attribute type 12 has an invalid length. [ 469.698640][T16121] netlink: 'syz.2.2762': attribute type 1 has an invalid length. [ 469.761799][T16121] 8021q: adding VLAN 0 to HW filter on device bond7 [ 469.798645][T16126] bond7: (slave gretap1): making interface the new active one [ 469.849566][T16126] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 470.110300][T16121] bond7 (unregistering): (slave gretap1): Releasing active interface [ 470.140444][T16121] bond7 (unregistering): Released all slaves [ 470.157468][T16147] netlink: 'syz.5.2770': attribute type 83 has an invalid length. [ 470.264234][T16140] lo speed is unknown, defaulting to 1000 [ 470.277788][T16135] lo speed is unknown, defaulting to 1000 [ 470.439485][T16157] __nla_validate_parse: 32 callbacks suppressed [ 470.439507][T16157] netlink: 344 bytes leftover after parsing attributes in process `syz.2.2774'. [ 470.473171][ T5929] IPVS: starting estimator thread 0... [ 470.537477][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 470.573398][T16160] IPVS: using max 28 ests per chain, 67200 per kthread [ 470.647963][T16164] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2775'. [ 470.670664][T16159] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 470.947511][T16171] bond10: entered promiscuous mode [ 470.953625][T16171] 8021q: adding VLAN 0 to HW filter on device bond10 [ 470.992647][T16174] 8021q: adding VLAN 0 to HW filter on device bond10 [ 471.006865][T16174] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address [ 471.041383][T16174] bond10: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 471.066969][T16171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.074303][T16171] IPv6: NLM_F_CREATE should be set when creating new route [ 471.081543][T16171] IPv6: NLM_F_CREATE should be set when creating new route [ 471.093988][T16174] bond10: (slave wireguard1): making interface the new active one [ 471.102017][T16174] wireguard1: entered promiscuous mode [ 471.109647][T16174] bond10: (slave wireguard1): Enslaving as an active interface with an up link [ 471.122247][T16171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.150949][T16171] bond10: (slave wireguard2): The slave device specified does not support setting the MAC address [ 471.170260][T16171] bond10: (slave wireguard2): Enslaving as a backup interface with an up link [ 471.307151][T16183] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2780'. [ 471.353757][T16185] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2781'. [ 471.375351][T16185] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2781'. [ 471.478437][T16190] erspan0: left allmulticast mode [ 471.491884][T16190] geneve1: left promiscuous mode [ 471.498498][T16190] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 471.505864][T16190] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 471.513859][T16190] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 471.521710][T16190] bond2: left allmulticast mode [ 471.526913][T16190] bond3: left allmulticast mode [ 471.532612][T16190] macsec1: left promiscuous mode [ 471.540154][T16190] veth1: left promiscuous mode [ 471.557805][T16190] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 471.566014][T16190] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 471.576069][T16197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.583841][T16190] ipvlan0: left promiscuous mode [ 471.590392][T16190] ipvlan0: left allmulticast mode [ 471.596517][T16190] geneve1: left allmulticast mode [ 471.606483][T16190] geneve3: left promiscuous mode [ 471.611934][T16190] geneve3: left allmulticast mode [ 471.638382][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 471.649503][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2783'. [ 471.756466][T16194] erspan0: left promiscuous mode [ 471.825239][T16194] bridge0: port 3(gretap0) entered blocking state [ 471.831935][T16194] bridge0: port 3(gretap0) entered forwarding state [ 471.847894][T16194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.860872][T16194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.882870][T16198] bond0: (slave 0!): Releasing backup interface [ 471.907039][T16198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 471.924044][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20064 - 0 [ 471.932677][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20064 - 0 [ 471.979065][T16201] hsr_slave_1 (unregistering): left promiscuous mode [ 472.001570][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20064 - 0 [ 472.010333][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20064 - 0 [ 472.117786][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2788'. [ 472.521176][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2793'. [ 472.633355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.703331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.753369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.124694][T16258] team0: Port device dummy0 removed [ 473.154066][T16258] bond0: (slave bond_slave_0): Releasing backup interface [ 473.216870][T16258] bond0: (slave bond_slave_1): Releasing backup interface [ 473.241603][T16258] team0: Port device team_slave_0 removed [ 473.261832][T16258] team0: Port device team_slave_1 removed [ 473.269661][T16258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 474.138795][T16305] wg1: Caught tx_queue_len zero misconfig [ 474.295035][T16317] xt_l2tp: unknown flags: 51 [ 474.702635][T16337] lo speed is unknown, defaulting to 1000 [ 474.767108][T16344] bond12: option all_slaves_active: invalid value (13) [ 474.776674][T16344] bond12 (unregistering): Released all slaves [ 474.880142][T16347] bond12: option all_slaves_active: invalid value (13) [ 474.899750][T16347] bond12 (unregistering): Released all slaves [ 475.578446][T16362] __nla_validate_parse: 8 callbacks suppressed [ 475.578465][T16362] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2828'. [ 475.690811][T16369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2829'. [ 475.755541][T16367] lo speed is unknown, defaulting to 1000 [ 475.784558][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2829'. [ 476.289801][T16396] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2834'. [ 476.435670][T16403] lo speed is unknown, defaulting to 1000 [ 476.707614][T16418] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2839'. [ 476.748099][T16418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2839'. [ 476.755021][T16393] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2831'. [ 476.900931][T16420] tipc: Enabled bearer , priority 0 [ 476.909807][T16420] syzkaller0: entered promiscuous mode [ 476.916980][T16420] syzkaller0: entered allmulticast mode [ 476.953312][T16420] tipc: Resetting bearer [ 477.007631][T16419] tipc: Resetting bearer [ 477.044091][T16419] tipc: Disabling bearer [ 477.062194][T16422] x_tables: duplicate underflow at hook 1 [ 477.075789][T16422] No such timeout policy "syz1" [ 477.094241][T16422] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2841'. [ 477.103906][T16422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2841'. [ 477.112990][T16422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2841'. [ 477.358018][T16431] netlink: get zone limit has 8 unknown bytes [ 477.549427][T16438] validate_nla: 5 callbacks suppressed [ 477.549450][T16438] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 477.756693][T16460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.941758][T16471] lo speed is unknown, defaulting to 1000 [ 478.486726][T16493] IPv6: Can't replace route, no match found [ 478.607624][ T5149] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 478.635883][ T5149] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 478.644843][ T5149] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 478.656973][ T5149] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 478.664953][ T5149] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 478.733382][T16498] lo speed is unknown, defaulting to 1000 [ 478.971997][T16498] chnl_net:caif_netlink_parms(): no params data found [ 479.233950][T16498] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.251503][T16498] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.260215][T16498] bridge_slave_0: entered allmulticast mode [ 479.268581][T16498] bridge_slave_0: entered promiscuous mode [ 479.279755][T16498] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.287388][T16498] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.296298][T16498] bridge_slave_1: entered allmulticast mode [ 479.304878][T16498] bridge_slave_1: entered promiscuous mode [ 479.428988][T16498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.456995][T16498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.558535][T16498] team0: Port device team_slave_0 added [ 479.577281][T16498] team0: Port device team_slave_1 added [ 479.583663][T16550] tipc: Enabling of bearer rejected, already enabled [ 479.613550][T16550] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 479.621148][T16550] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 479.663448][T16498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.665093][T16554] netlink: 'syz.5.2877': attribute type 10 has an invalid length. [ 479.670631][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.704850][T16498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.717949][T16554] bond0: entered promiscuous mode [ 479.723561][T16554] bond_slave_0: entered promiscuous mode [ 479.729484][T16554] bond_slave_1: entered promiscuous mode [ 479.737151][T16554] bridge0: port 3(bond0) entered blocking state [ 479.743987][T16554] bridge0: port 3(bond0) entered disabled state [ 479.750668][T16554] bond0: entered allmulticast mode [ 479.756652][T16554] bond_slave_0: entered allmulticast mode [ 479.762700][T16554] bond_slave_1: entered allmulticast mode [ 479.772708][T16554] bridge0: port 3(bond0) entered blocking state [ 479.779185][T16554] bridge0: port 3(bond0) entered forwarding state [ 479.789589][T16498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.800336][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.848579][T16498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.955756][T16498] hsr_slave_0: entered promiscuous mode [ 479.970107][T16498] hsr_slave_1: entered promiscuous mode [ 479.980015][T16498] debugfs: 'hsr0' already exists in 'hsr' [ 479.990365][T16498] Cannot create hsr debugfs directory [ 480.016424][T16562] netlink: 'syz.5.2880': attribute type 1 has an invalid length. [ 480.117736][T16560] lo speed is unknown, defaulting to 1000 [ 480.320204][T16582] tipc: Started in network mode [ 480.325559][T16582] tipc: Node identity 525e1468a229, cluster identity 4711 [ 480.332849][T16582] tipc: Enabled bearer , priority 0 [ 480.358066][T16582] syzkaller0: entered promiscuous mode [ 480.363909][T16582] syzkaller0: entered allmulticast mode [ 480.440806][T16582] tipc: Resetting bearer [ 480.458755][T16582] : renamed from bond_slave_0 (while UP) [ 480.479632][T16581] tipc: Resetting bearer [ 480.501397][T16581] tipc: Disabling bearer [ 480.624573][T16498] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 480.643396][T16498] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 480.660295][T16498] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 480.676037][T16498] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 480.693204][ T5836] Bluetooth: hci6: command tx timeout [ 481.115358][T16616] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 481.139881][T16498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.219770][T16498] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.260796][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.268091][ T8273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.361898][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.369253][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.381414][T16629] __nla_validate_parse: 75 callbacks suppressed [ 481.381433][T16629] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2894'. [ 481.422030][T16629] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2894'. [ 481.434898][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'. [ 481.444917][T16625] lo speed is unknown, defaulting to 1000 [ 481.527487][T16628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 481.593869][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.618087][T16641] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 481.953532][T16646] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2899'. [ 482.031873][T16646] TC_ACT_REPEAT abuse ? [ 482.136830][T16654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.146439][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.234578][T16654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.499162][T16498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.681986][T16672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2904'. [ 482.751604][T16673] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2904'. [ 482.773448][ T5836] Bluetooth: hci6: command tx timeout [ 483.357470][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2907'. [ 483.637124][T16697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2910'. [ 483.669437][ T9] IPVS: starting estimator thread 0... [ 483.675508][T16699] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 483.682531][T16697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2910'. [ 483.701164][T16698] lo speed is unknown, defaulting to 1000 [ 483.722635][T16498] veth0_vlan: entered promiscuous mode [ 483.773311][T16701] IPVS: using max 26 ests per chain, 62400 per kthread [ 483.846790][T16498] veth1_vlan: entered promiscuous mode [ 484.075386][T16715] lo speed is unknown, defaulting to 1000 [ 484.172062][T16498] veth0_macvtap: entered promiscuous mode [ 484.212827][T16710] lo speed is unknown, defaulting to 1000 [ 484.246624][T16498] veth1_macvtap: entered promiscuous mode [ 484.374517][T16498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.382774][T16724] sch_fq: defrate 0 ignored. [ 484.474500][T16498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.526636][ T3017] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.550599][ T3017] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.566174][ T3017] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.586930][ T3017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.854184][ T5836] Bluetooth: hci6: command tx timeout [ 485.005468][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.027471][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.105552][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.113719][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.132960][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 485.153303][T16738] gretap0: left allmulticast mode [ 485.165110][T16738] gretap0: left promiscuous mode [ 485.179295][T16738] bridge0: port 3(gretap0) entered disabled state [ 485.265274][T16738] bridge_slave_1: left allmulticast mode [ 485.270991][T16738] bridge_slave_1: left promiscuous mode [ 485.324005][T16738] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.381665][T16738] bridge_slave_0: left allmulticast mode [ 485.395266][T16738] bridge_slave_0: left promiscuous mode [ 485.427456][T16738] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.047520][T16758] tipc: Started in network mode [ 486.052469][T16758] tipc: Node identity 26ea18c5daf2, cluster identity 4711 [ 486.075863][T16758] tipc: Enabled bearer , priority 0 [ 486.092165][T16758] syzkaller0: entered promiscuous mode [ 486.119197][T16758] syzkaller0: entered allmulticast mode [ 486.210951][T16758] tipc: Resetting bearer [ 486.317082][T16762] syzkaller0: entered promiscuous mode [ 486.322616][T16762] syzkaller0: entered allmulticast mode [ 486.364100][T16757] tipc: Resetting bearer [ 486.506999][T16757] tipc: Disabling bearer [ 486.698859][T16779] __nla_validate_parse: 1 callbacks suppressed [ 486.698879][T16779] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2931'. [ 486.796777][T16781] netlink: 360 bytes leftover after parsing attributes in process `syz.6.2932'. [ 486.922940][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 486.933975][ T5149] Bluetooth: hci6: command tx timeout [ 486.935471][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 486.948673][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 486.956939][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 486.965262][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.171177][T16800] netlink: 360 bytes leftover after parsing attributes in process `syz.6.2936'. [ 487.639075][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2938'. [ 488.997947][T16785] lo speed is unknown, defaulting to 1000 [ 489.023925][ T5836] Bluetooth: hci1: command tx timeout [ 489.208161][T16833] netlink: 'syz.6.2944': attribute type 30 has an invalid length. [ 489.248689][T16835] netlink: 'syz.2.2943': attribute type 15 has an invalid length. [ 489.260970][T16835] netlink: 'syz.2.2943': attribute type 15 has an invalid length. [ 489.351428][T16835] netlink: 'syz.2.2943': attribute type 15 has an invalid length. [ 489.516819][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2945'. [ 489.532892][T16785] chnl_net:caif_netlink_parms(): no params data found [ 489.598468][T16844] netlink: 'syz.6.2945': attribute type 1 has an invalid length. [ 489.610758][T16844] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2945'. [ 489.674290][T16853] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2945'. [ 489.694230][T16852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2947'. [ 489.997572][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2949'. [ 490.280650][ T8272] bond5 (unregistering): (slave gretap3): Releasing backup interface [ 490.778911][ T8272] bond0 (unregistering): Released all slaves [ 490.891192][ T8272] bond1 (unregistering): Released all slaves [ 491.006660][ T8272] bond2 (unregistering): Released all slaves [ 491.094102][ T5836] Bluetooth: hci1: command tx timeout [ 491.126901][ T8272] bond3 (unregistering): Released all slaves [ 491.237010][ T8272] bond4 (unregistering): Released all slaves [ 491.354454][ T8272] bond5 (unregistering): (slave bond6): Releasing backup interface [ 491.362496][ T8272] bond6 (unregistering): left promiscuous mode [ 491.369992][ T8272] bond5 (unregistering): Released all slaves [ 491.482459][ T8272] bond6 (unregistering): Released all slaves [ 491.497196][T16853] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 491.498013][T16785] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.515184][T16785] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.522501][T16785] bridge_slave_0: entered allmulticast mode [ 491.547027][T16785] bridge_slave_0: entered promiscuous mode [ 491.564769][T16785] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.598989][T16785] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.607965][T16785] bridge_slave_1: entered allmulticast mode [ 491.618051][T16785] bridge_slave_1: entered promiscuous mode [ 491.706304][ T8272] tipc: Left network mode [ 491.721289][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2949'. [ 491.736847][T16785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.796036][T16785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.101418][T16785] team0: Port device team_slave_0 added [ 492.114657][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2953'. [ 492.126679][T16869] lo speed is unknown, defaulting to 1000 [ 492.176778][T16785] team0: Port device team_slave_1 added [ 492.436250][T16785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.449999][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.512900][T16785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.540878][T16785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.548553][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.576655][T16785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.603566][T16883] gre2: entered allmulticast mode [ 492.912975][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2958'. [ 493.152142][ T8272] hsr_slave_0: left promiscuous mode [ 493.162157][ T8272] hsr_slave_1: left promiscuous mode [ 493.176113][ T5836] Bluetooth: hci1: command tx timeout [ 493.235698][ T8272] pimreg3 (unregistering): left allmulticast mode [ 494.131651][T16785] hsr_slave_0: entered promiscuous mode [ 494.138503][T16785] hsr_slave_1: entered promiscuous mode [ 494.649256][ T8272] IPVS: stop unused estimator thread 0... [ 494.675089][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'. [ 494.797209][T16929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.818670][T16929] eql: remember to turn off Van-Jacobson compression on your slave devices [ 494.857198][T16929] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 494.888695][T16937] lo speed is unknown, defaulting to 1000 [ 495.254477][ T5836] Bluetooth: hci1: command tx timeout [ 495.573766][T16967] netlink: 'syz.6.2974': attribute type 4 has an invalid length. [ 495.621059][T16967] tipc: Enabling of bearer rejected, failed to enable media [ 495.648813][T16785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.669849][T16785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.698801][T16785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.711303][T16969] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2975'. [ 495.745988][T16785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 496.044906][T16984] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2978'. [ 496.054872][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2978'. [ 496.141168][T16785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.229015][T16785] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.270695][T16996] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.2980'. [ 496.284423][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.291658][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.330695][T16997] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2980'. [ 496.339949][T16999] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2980'. [ 496.367202][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.374511][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.492747][T17002] netlink: 'syz.5.2982': attribute type 1 has an invalid length. [ 496.750713][T17015] __nla_validate_parse: 2 callbacks suppressed [ 496.750734][T17015] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2985'. [ 496.801663][T17018] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2984'. [ 496.908765][T17014] veth3: entered promiscuous mode [ 497.028377][T17024] tipc: Enabling of bearer rejected, already enabled [ 497.137473][T17027] netlink: 'syz.5.2987': attribute type 1 has an invalid length. [ 497.349831][T17027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.358412][T17029] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2987'. [ 497.526771][T17027] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 497.575891][T17027] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 497.660539][T16785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.763533][T17034] netlink: 'syz.2.2989': attribute type 1 has an invalid length. [ 497.790660][T16785] veth0_vlan: entered promiscuous mode [ 497.793420][T17034] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2989'. [ 497.817853][T16785] veth1_vlan: entered promiscuous mode [ 497.884712][T16785] veth0_macvtap: entered promiscuous mode [ 497.926111][T16785] veth1_macvtap: entered promiscuous mode [ 497.994807][T16785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.027474][T16785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.050012][T17046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.069033][ T8273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.086714][ T8273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.111151][ T8273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.144180][ T8273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.227740][T17048] xt_CT: No such helper "pptp" [ 498.289960][ T8272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.311074][ T8272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.385209][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.402685][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.417194][T17056] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2995'. [ 498.595947][T17059] netlink: 'syz.2.2997': attribute type 21 has an invalid length. [ 498.618391][T17059] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2997'. [ 498.642269][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 498.672930][T17059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'. [ 498.682243][T17059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'. [ 498.704920][T17059] netlink: 'syz.2.2997': attribute type 8 has an invalid length. [ 499.115899][T17075] delete_channel: no stack [ 499.367011][T17087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3003'. [ 499.394958][T17083] ipvlan2: entered promiscuous mode [ 499.401758][T17083] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 500.061087][T17117] erspan1: entered allmulticast mode [ 500.418058][T17130] lo speed is unknown, defaulting to 1000 [ 500.428048][T17125] tipc: Resetting bearer [ 500.521060][T17134] netlink: 'syz.2.3016': attribute type 2 has an invalid length. [ 500.532076][T17134] netlink: 'syz.2.3016': attribute type 10 has an invalid length. [ 501.029023][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 501.039835][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 501.047360][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 501.077475][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 501.085720][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 501.096069][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 501.141001][T17144] lo speed is unknown, defaulting to 1000 [ 501.758974][T17144] chnl_net:caif_netlink_parms(): no params data found [ 501.940564][T17144] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.948002][T17144] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.955769][T17144] bridge_slave_0: entered allmulticast mode [ 501.964591][T17144] bridge_slave_0: entered promiscuous mode [ 501.981803][T17144] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.990194][T17144] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.998569][T17144] bridge_slave_1: entered allmulticast mode [ 502.009394][T17144] bridge_slave_1: entered promiscuous mode [ 502.065418][T17144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.083726][T17144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.199137][T17188] netlink: 'syz.5.3030': attribute type 39 has an invalid length. [ 502.200230][T17144] team0: Port device team_slave_0 added [ 502.265421][T17144] team0: Port device team_slave_1 added [ 502.319545][T17144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.327146][T17144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.354402][T17144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.369988][T17144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.377652][T17144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.447912][T17144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.676058][T17144] hsr_slave_0: entered promiscuous mode [ 502.699917][T17144] hsr_slave_1: entered promiscuous mode [ 502.753410][T17144] debugfs: 'hsr0' already exists in 'hsr' [ 502.759213][T17144] Cannot create hsr debugfs directory [ 502.988151][T17198] syzkaller0: entered promiscuous mode [ 502.994002][T17198] syzkaller0: entered allmulticast mode [ 503.024513][T17205] __nla_validate_parse: 7 callbacks suppressed [ 503.024535][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3034'. [ 503.065923][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3034'. [ 503.179840][ T5836] Bluetooth: hci7: command tx timeout [ 504.900832][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3036'. [ 505.017444][T17212] : entered promiscuous mode [ 505.047607][T17206] lo speed is unknown, defaulting to 1000 [ 505.165620][T17216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3037'. [ 505.253454][ T5836] Bluetooth: hci7: command tx timeout [ 505.286088][T17144] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.387292][T17144] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.489388][T17144] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.605408][T17144] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.848805][T17144] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 505.884767][T17144] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 505.934135][T17144] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 505.987338][T17144] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 506.658271][T17144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.684708][T17271] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3050'. [ 506.769618][T17144] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.858604][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.865966][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.022818][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.030064][ T8273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.134865][T17287] FAULT_INJECTION: forcing a failure. [ 507.134865][T17287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.144287][T17144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.162676][T17144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.172237][T17287] CPU: 1 UID: 0 PID: 17287 Comm: syz.5.3054 Not tainted syzkaller #0 PREEMPT(full) [ 507.172273][T17287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 507.172288][T17287] Call Trace: [ 507.172298][T17287] [ 507.172399][T17287] dump_stack_lvl+0x189/0x250 [ 507.172443][T17287] ? __pfx____ratelimit+0x10/0x10 [ 507.172476][T17287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.172508][T17287] ? __pfx__printk+0x10/0x10 [ 507.172551][T17287] should_fail_ex+0x414/0x560 [ 507.172590][T17287] _copy_to_user+0x31/0xb0 [ 507.172625][T17287] simple_read_from_buffer+0xe1/0x170 [ 507.172670][T17287] proc_fail_nth_read+0x1b3/0x220 [ 507.172708][T17287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.172750][T17287] ? rw_verify_area+0x2a6/0x4d0 [ 507.172783][T17287] ? __lock_acquire+0xab9/0xd20 [ 507.172805][T17287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.172840][T17287] vfs_read+0x200/0xa30 [ 507.172872][T17287] ? fdget_pos+0x247/0x320 [ 507.172901][T17287] ? __pfx___mutex_lock+0x10/0x10 [ 507.172937][T17287] ? __pfx_vfs_read+0x10/0x10 [ 507.172974][T17287] ? __fget_files+0x2a/0x420 [ 507.173004][T17287] ? __fget_files+0x3a0/0x420 [ 507.173025][T17287] ? __fget_files+0x2a/0x420 [ 507.173056][T17287] ksys_read+0x145/0x250 [ 507.173088][T17287] ? __pfx_ksys_read+0x10/0x10 [ 507.173121][T17287] ? do_syscall_64+0xbe/0xfa0 [ 507.173153][T17287] do_syscall_64+0xfa/0xfa0 [ 507.173179][T17287] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.173208][T17287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.173231][T17287] ? clear_bhb_loop+0x60/0xb0 [ 507.173263][T17287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.173288][T17287] RIP: 0033:0x7fb68278e15c [ 507.173332][T17287] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 507.173355][T17287] RSP: 002b:00007fb683714030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.173384][T17287] RAX: ffffffffffffffda RBX: 00007fb6829e5fa0 RCX: 00007fb68278e15c [ 507.173402][T17287] RDX: 000000000000000f RSI: 00007fb6837140a0 RDI: 0000000000000004 [ 507.173417][T17287] RBP: 00007fb683714090 R08: 0000000000000000 R09: 0000000000000000 [ 507.173433][T17287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.173446][T17287] R13: 00007fb6829e6038 R14: 00007fb6829e5fa0 R15: 00007ffffb87ff08 [ 507.173488][T17287] [ 507.365190][ T5836] Bluetooth: hci7: command tx timeout [ 507.389872][T17303] x_tables: duplicate entry at hook 1 [ 507.521699][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3055'. [ 507.886912][T17324] netlink: 360 bytes leftover after parsing attributes in process `syz.6.3061'. [ 508.015669][T17331] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 508.082724][T17144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.102614][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3065'. [ 508.136898][T17337] netlink: 'syz.1.3066': attribute type 1 has an invalid length. [ 508.141223][T17330] syzkaller1: entered promiscuous mode [ 508.149147][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3066'. [ 508.150421][T17330] syzkaller1: entered allmulticast mode [ 508.166896][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3065'. [ 508.187343][T17341] netlink: 'syz.6.3065': attribute type 8 has an invalid length. [ 508.202294][T17339] lo speed is unknown, defaulting to 1000 [ 508.218255][T17331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3063'. [ 508.281807][T17330] gretap1: entered promiscuous mode [ 508.289640][T17330] batman_adv: batadv0: Adding interface: gretap1 [ 508.303133][T17330] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 508.323806][T17330] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 508.334265][T17346] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3066'. [ 508.349459][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3065'. [ 508.359956][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3065'. [ 508.589113][T17352] tipc: Enabled bearer , priority 0 [ 508.600869][T17352] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 508.612590][T17352] tipc: Resetting bearer [ 508.676611][T17350] tipc: Disabling bearer [ 508.802196][T17361] tipc: Enabling of bearer rejected, already enabled [ 508.988908][T17374] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 509.026872][T17374] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 509.127058][T17370] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.221693][T17377] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 509.236826][T17377] bond1 (unregistering): Released all slaves [ 509.303375][T17370] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.376033][T17144] veth0_vlan: entered promiscuous mode [ 509.393747][T17144] veth1_vlan: entered promiscuous mode [ 509.415451][ T5836] Bluetooth: hci7: command tx timeout [ 509.440606][T17370] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.514363][T17370] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.596662][T17144] veth0_macvtap: entered promiscuous mode [ 509.612070][T17144] veth1_macvtap: entered promiscuous mode [ 509.639232][T17394] xt_hashlimit: overflow, rate too high: 0 [ 509.666137][T17144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.687520][T17144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.728013][ T50] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.768780][ T50] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.799491][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.809371][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.868572][T17398] geneve2: entered promiscuous mode [ 509.878601][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.900337][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.941511][ T50] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.968043][ T50] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.010018][T17400] lo speed is unknown, defaulting to 1000 [ 510.121051][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.145854][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.347634][T17419] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3083'. [ 510.367032][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.396683][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.567369][T17424] netlink: 360 bytes leftover after parsing attributes in process `syz.5.3084'. [ 510.747461][T17428] lo speed is unknown, defaulting to 1000 [ 510.772834][T17434] netlink: 'syz.5.3088': attribute type 2 has an invalid length. [ 510.891087][T17434] lo speed is unknown, defaulting to 1000 [ 510.923984][T17441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3090'. [ 510.934972][T17441] openvswitch: netlink: Flow key attr not present in new flow. [ 511.099934][T17437] tipc: Started in network mode [ 511.106960][T17437] tipc: Node identity 0ae486ad6bac, cluster identity 4711 [ 511.134595][T17437] tipc: Enabled bearer , priority 0 [ 511.142043][T17440] syzkaller0: entered promiscuous mode [ 511.177692][T17440] syzkaller0: entered allmulticast mode [ 511.483211][T17436] tipc: Resetting bearer [ 511.528900][T17436] tipc: Disabling bearer [ 511.879469][T17473] lo speed is unknown, defaulting to 1000 [ 511.900727][T17474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.069798][T17483] tipc: Enabled bearer , priority 0 [ 512.084834][T17483] syzkaller0: entered promiscuous mode [ 512.112158][T17483] syzkaller0: entered allmulticast mode [ 512.363414][T17483] tipc: Resetting bearer [ 512.376224][T17481] tipc: Resetting bearer [ 512.416771][T17481] tipc: Disabling bearer [ 512.552042][T17505] bond0: Caught tx_queue_len zero misconfig [ 512.705073][T17492] lo speed is unknown, defaulting to 1000 [ 512.804952][T17517] netlink: 'syz.5.3107': attribute type 33 has an invalid length. [ 512.999017][T17520] geneve4: entered promiscuous mode [ 513.026981][T17527] batadv1: entered promiscuous mode [ 513.068156][T17517] lo speed is unknown, defaulting to 1000 [ 513.077263][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.095409][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.104580][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.219618][ T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.286038][T17536] dvmrp1: tun_chr_ioctl cmd 35111 [ 513.326374][T17534] lo speed is unknown, defaulting to 1000 [ 513.477375][T17540] __nla_validate_parse: 2 callbacks suppressed [ 513.477396][T17540] netlink: 360 bytes leftover after parsing attributes in process `syz.5.3112'. [ 513.624695][T17544] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3114'. [ 514.029817][T17551] tc_dump_action: action bad kind [ 514.377648][T17567] tipc: Started in network mode [ 514.382609][T17567] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 514.407974][T17574] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3123'. [ 514.416848][T17572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 514.435256][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3120'. [ 514.435652][T17567] tipc: Enabled bearer , priority 10 [ 514.476050][T17569] lo speed is unknown, defaulting to 1000 [ 514.639781][ T8273] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 514.665401][T17586] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3126'. [ 514.954808][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 515.033860][T17603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3130'. [ 515.076837][ T5836] block nbd0: Receive control failed (result -1) [ 515.190114][T17598] bond7: option broadcast_neighbor: invalid value (5) [ 515.212255][T17598] bond7 (unregistering): Released all slaves [ 515.243593][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3134'. [ 515.366444][T17615] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 515.551646][T17623] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3137'. [ 515.553301][ T5929] tipc: Node number set to 1 [ 515.622187][T17623] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3137'. [ 516.002047][T17645] lo speed is unknown, defaulting to 1000 [ 516.095903][T17644] lo speed is unknown, defaulting to 1000 [ 516.753150][T17660] netlink: 'syz.4.3144': attribute type 12 has an invalid length. [ 516.782881][T17660] netlink: 'syz.4.3144': attribute type 4 has an invalid length. [ 517.414897][T17672] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 517.892412][T17677] lo speed is unknown, defaulting to 1000 [ 517.913949][T17677] lo speed is unknown, defaulting to 1000 [ 517.994905][T17677] lo speed is unknown, defaulting to 1000 [ 518.073346][T17677] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 518.135563][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 518.149501][T17677] lo speed is unknown, defaulting to 1000 [ 518.168537][T17677] lo speed is unknown, defaulting to 1000 [ 518.196866][T17677] lo speed is unknown, defaulting to 1000 [ 518.216153][T17677] lo speed is unknown, defaulting to 1000 [ 518.225585][T17677] lo speed is unknown, defaulting to 1000 [ 518.234082][T17677] lo speed is unknown, defaulting to 1000 [ 518.242188][T17677] lo speed is unknown, defaulting to 1000 [ 518.250401][T17677] lo speed is unknown, defaulting to 1000 [ 518.771789][T17712] __nla_validate_parse: 2 callbacks suppressed [ 518.771810][T17712] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3159'. [ 519.061975][T17718] xt_l2tp: v2 tid > 0xffff: 37482740 [ 519.354320][T17729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3162'. [ 519.377377][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3164'. [ 519.456887][T17724] bond2 (unregistering): Released all slaves [ 519.771307][T17746] netlink: 'syz.1.3169': attribute type 4 has an invalid length. [ 520.091562][T17756] lo speed is unknown, defaulting to 1000 [ 520.209192][T17756] lo speed is unknown, defaulting to 1000 [ 520.784152][T17754] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 520.872306][T17784] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3179'. [ 520.891893][T17778] bond1: (slave ip_vti0): Device is not bonding slave [ 520.899312][T17778] bond1: option active_slave: invalid value (ip_vti0) [ 520.923548][T17778] bond1 (unregistering): Released all slaves [ 521.168307][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3181'. [ 521.181437][T17792] netlink: 'syz.4.3182': attribute type 1 has an invalid length. [ 521.213256][T17792] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3182'. [ 521.222278][T17792] netlink: 'syz.4.3182': attribute type 1 has an invalid length. [ 521.510669][T17808] netlink: 'syz.4.3185': attribute type 83 has an invalid length. [ 521.635733][T17812] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3189'. [ 521.742220][T17814] netlink: 'syz.5.3190': attribute type 23 has an invalid length. [ 521.755629][T17817] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 522.042603][T17827] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3194'. [ 522.088696][T17827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3194'. [ 522.501974][T17846] lo speed is unknown, defaulting to 1000 [ 522.503162][T17849] netlink: 'syz.5.3200': attribute type 14 has an invalid length. [ 522.661119][T17846] lo speed is unknown, defaulting to 1000 [ 522.705160][T17857] lo speed is unknown, defaulting to 1000 [ 522.780879][T17857] lo speed is unknown, defaulting to 1000 [ 523.223671][T17885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3203'. [ 523.244660][T17882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.632602][T17897] sctp: [Deprecated]: syz.4.3207 (pid 17897) Use of int in max_burst socket option deprecated. [ 523.632602][T17897] Use struct sctp_assoc_value instead [ 523.689862][T17900] sctp: [Deprecated]: syz.4.3207 (pid 17900) Use of int in max_burst socket option. [ 523.689862][T17900] Use struct sctp_assoc_value instead [ 524.810286][T17913] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 524.921804][T17913] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 525.357681][T17940] __nla_validate_parse: 1 callbacks suppressed [ 525.357702][T17940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3219'. [ 525.422400][T17940] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3219'. [ 525.808379][T17960] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3226'. [ 526.369189][T17989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3232'. [ 526.388063][T17990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3231'. [ 527.869178][T18022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3240'. [ 528.194056][ T5843] IPVS: starting estimator thread 0... [ 528.248706][T18042] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 528.303347][T18040] IPVS: using max 25 ests per chain, 60000 per kthread [ 528.372020][T18049] netlink: 'syz.2.3247': attribute type 39 has an invalid length. [ 528.531971][T18055] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3248'. [ 528.666409][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3248'. [ 528.730948][T18055] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.880198][T18059] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 528.923324][T18062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3249'. [ 528.944875][T18062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.050309][T18055] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.256631][T18055] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.471277][T18055] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.588559][T18074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3253'. [ 529.775359][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.807387][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.858092][T18079] x_tables: duplicate underflow at hook 4 [ 529.950373][T18079] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 529.969551][T18079] bond1 (unregistering): Released all slaves [ 530.013743][ T2937] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.085549][ T2937] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.164185][T18086] IPVS: Error connecting to the multicast addr [ 530.417498][T18094] __nla_validate_parse: 2 callbacks suppressed [ 530.417522][T18094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3259'. [ 530.825188][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3264'. [ 531.446690][T18126] netlink: 'syz.5.3269': attribute type 6 has an invalid length. [ 531.460753][T18124] syzkaller0: entered promiscuous mode [ 531.470169][T18124] syzkaller0: entered allmulticast mode [ 531.494720][T18126] netlink: 'syz.5.3269': attribute type 7 has an invalid length. [ 531.514964][T18122] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3267'. [ 531.516495][T18126] netlink: 'syz.5.3269': attribute type 8 has an invalid length. [ 531.552256][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3267'. [ 531.617455][T18110] delete_channel: no stack [ 531.917921][T18144] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3270'. [ 531.931449][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3273'. [ 532.007547][T18146] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 532.359873][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3277'. [ 532.412441][T18158] batadv1: entered promiscuous mode [ 532.606246][T18172] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 532.805584][T18175] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 532.812811][T18158] lo speed is unknown, defaulting to 1000 [ 532.837518][T18158] lo speed is unknown, defaulting to 1000 [ 533.119164][T18184] lo speed is unknown, defaulting to 1000 [ 533.130041][T18184] lo speed is unknown, defaulting to 1000 [ 533.411029][T18192] lo speed is unknown, defaulting to 1000 [ 533.425597][T18192] lo speed is unknown, defaulting to 1000 [ 533.521051][T18213] xt_hashlimit: size too large, truncated to 1048576 [ 533.583751][T18198] syzkaller1: entered promiscuous mode [ 533.589395][T18198] syzkaller1: entered allmulticast mode [ 534.029236][ T30] audit: type=1800 audit(1764692778.483:4): pid=18230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3296" name=CB dev="tmpfs" ino=379 res=0 errno=0 [ 534.084230][T18235] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3293'. [ 534.150892][T18237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3297'. [ 534.174823][T18239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.242684][T18231] lo speed is unknown, defaulting to 1000 [ 534.265689][T18231] lo speed is unknown, defaulting to 1000 [ 534.405691][T18247] veth0: entered promiscuous mode [ 534.519711][T18256] openvswitch: netlink: Tunnel attr 75 out of range max 16 [ 534.568578][T18249] lo speed is unknown, defaulting to 1000 [ 534.638257][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3300'. [ 534.655163][T18249] lo speed is unknown, defaulting to 1000 [ 534.775152][ T5832] Bluetooth: hci1: command 0x0401 tx timeout [ 535.434703][T18289] pim6reg1: entered promiscuous mode [ 535.443105][T18289] pim6reg1: entered allmulticast mode [ 535.865377][T18309] netlink: 'syz.6.3314': attribute type 21 has an invalid length. [ 535.892193][T18309] __nla_validate_parse: 2 callbacks suppressed [ 535.892214][T18309] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3314'. [ 535.916838][T18306] lo speed is unknown, defaulting to 1000 [ 535.924972][T18306] lo speed is unknown, defaulting to 1000 [ 535.946718][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3315'. [ 535.956007][T18309] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3314'. [ 535.959268][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3314'. [ 535.979078][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3314'. [ 535.991600][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3314'. [ 536.009663][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3314'. [ 536.061459][T18316] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3316'. [ 536.172522][T18318] lo speed is unknown, defaulting to 1000 [ 536.212746][T18318] lo speed is unknown, defaulting to 1000 [ 536.459370][T18329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.507014][T18327] tipc: Enabled bearer , priority 0 [ 536.550695][T18327] syzkaller0: entered promiscuous mode [ 536.560708][T18327] syzkaller0: entered allmulticast mode [ 536.687258][T18331] netlink: 'syz.1.3321': attribute type 13 has an invalid length. [ 536.707637][T18327] tipc: Resetting bearer [ 536.918949][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 536.934243][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 536.942526][T18331] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.950447][T18331] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.960686][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 536.986435][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 536.995478][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 537.122628][T18331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.139825][T18331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.207924][T18352] netlink: 'syz.5.3326': attribute type 4 has an invalid length. [ 537.245385][ T5929] lo speed is unknown, defaulting to 1000 [ 537.254145][ T5929] syz2: Port: 1 Link DOWN [ 537.260040][T18332] tipc: Resetting bearer [ 537.261128][T18353] netlink: 'syz.5.3326': attribute type 4 has an invalid length. [ 537.287262][T18332] tipc: Disabling bearer [ 537.320922][T18340] netlink: 'syz.4.3323': attribute type 6 has an invalid length. [ 537.339454][ T1155] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.355051][ T1155] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.373844][ T1155] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.382448][ T1155] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.446119][T18341] lo speed is unknown, defaulting to 1000 [ 537.465456][T18341] lo speed is unknown, defaulting to 1000 [ 537.655677][T18366] ªªªªªª: renamed from wg2 [ 537.872006][T18383] lo speed is unknown, defaulting to 1000 [ 537.894414][T18388] xt_hashlimit: max too large, truncated to 1048576 [ 537.913842][T18383] lo speed is unknown, defaulting to 1000 [ 537.931645][T18388] netlink: 'syz.1.3334': attribute type 4 has an invalid length. [ 538.229587][T18399] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3337'. [ 538.305093][T18341] chnl_net:caif_netlink_parms(): no params data found [ 538.552175][T18412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3341'. [ 538.627232][T18341] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.634947][T18341] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.642262][T18341] bridge_slave_0: entered allmulticast mode [ 538.650754][T18341] bridge_slave_0: entered promiscuous mode [ 538.719002][T18421] netlink: 'syz.6.3344': attribute type 13 has an invalid length. [ 538.730244][T18421] netlink: 'syz.6.3344': attribute type 17 has an invalid length. [ 538.739306][T18341] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.751071][T18341] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.759348][T18341] bridge_slave_1: entered allmulticast mode [ 538.768018][T18341] bridge_slave_1: entered promiscuous mode [ 538.959268][T18421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.013713][ T5832] Bluetooth: hci2: command tx timeout [ 539.047236][T18341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.086077][T18341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.166148][T18431] lo speed is unknown, defaulting to 1000 [ 539.184492][T18429] netlink: 'syz.5.3346': attribute type 1 has an invalid length. [ 539.194092][T18431] lo speed is unknown, defaulting to 1000 [ 539.237334][T18341] team0: Port device team_slave_0 added [ 539.246223][T18429] tap0: tun_chr_ioctl cmd 1074025676 [ 539.273750][T18429] tap0: owner set to 0 [ 539.328919][T18341] team0: Port device team_slave_1 added [ 539.352590][T18441] lo speed is unknown, defaulting to 1000 [ 539.565928][T18441] lo speed is unknown, defaulting to 1000 [ 539.583519][T18455] netlink: 'syz.1.3353': attribute type 1 has an invalid length. [ 539.602929][T18341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.610345][T18341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.637084][T18341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.705937][T18341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.720385][T18341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.763315][T18341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.079785][T18341] hsr_slave_0: entered promiscuous mode [ 540.088390][T18341] hsr_slave_1: entered promiscuous mode [ 540.095675][T18341] debugfs: 'hsr0' already exists in 'hsr' [ 540.101530][T18341] Cannot create hsr debugfs directory [ 540.300917][T18474] bond1: option arp_validate: invalid value (18446744073491447809) [ 540.317516][T18474] bond1 (unregistering): Released all slaves [ 540.572141][T18493] openvswitch: netlink: Multiple metadata blocks provided [ 540.623740][T18495] nbd: must specify at least one socket [ 540.829493][T18341] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.962482][T18341] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.100819][ T5832] Bluetooth: hci2: command tx timeout [ 541.246287][T18341] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.712562][T18341] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.055682][T18560] validate_nla: 1 callbacks suppressed [ 542.055701][T18560] netlink: 'syz.6.3377': attribute type 16 has an invalid length. [ 542.153763][T18566] __nla_validate_parse: 9 callbacks suppressed [ 542.153784][T18566] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3379'. [ 542.173167][T18564] SET target dimension over the limit! [ 542.202249][T18567] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3379'. [ 542.432217][T18566] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3379'. [ 542.703332][T18586] bridge_slave_0: left allmulticast mode [ 542.721056][T18586] bridge_slave_0: left promiscuous mode [ 542.734671][T18586] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.749724][T18586] bridge_slave_1: left allmulticast mode [ 542.774235][T18586] bridge_slave_1: left promiscuous mode [ 542.781022][T18586] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.916858][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3387'. [ 543.013970][T18586] bond0: (slave bond_slave_0): Releasing backup interface [ 543.067660][T18586] bond0: (slave bond_slave_1): Releasing backup interface [ 543.103995][T18586] team0: Port device team_slave_0 removed [ 543.136186][T18586] team0: Port device team_slave_1 removed [ 543.139807][T18608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 543.149285][T18608] IPv6: NLM_F_CREATE should be set when creating new route [ 543.156719][T18586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.176147][ T5832] Bluetooth: hci2: command tx timeout [ 543.183354][T18586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.195514][T18586] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 543.224526][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3389'. [ 543.250273][T18341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 543.266071][T18595] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 543.315740][T18606] geneve2: entered promiscuous mode [ 543.324282][T18341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 543.359001][T18341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 543.383974][T18341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 543.559218][T18341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.590518][T18341] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.616560][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.623881][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.640060][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.647458][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.667759][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3391'. [ 543.692543][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.697524][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3391'. [ 543.702027][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.735014][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.774066][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.058167][T18640] syzkaller1: entered promiscuous mode [ 544.076000][T18640] syzkaller1: entered allmulticast mode [ 544.164889][T18647] tipc: Enabled bearer , priority 0 [ 544.172020][T18648] tipc: Enabling of bearer rejected, already enabled [ 544.231570][T18341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.249241][T18651] netlink: 'syz.4.3399': attribute type 7 has an invalid length. [ 544.257438][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3399'. [ 544.269525][T18644] tipc: Disabling bearer [ 544.371893][T18341] veth0_vlan: entered promiscuous mode [ 544.412934][T18341] veth1_vlan: entered promiscuous mode [ 544.494439][T18656] lo speed is unknown, defaulting to 1000 [ 544.510018][T18341] veth0_macvtap: entered promiscuous mode [ 544.530804][T18656] lo speed is unknown, defaulting to 1000 [ 544.541866][T18341] veth1_macvtap: entered promiscuous mode [ 544.556540][ T30] audit: type=1800 audit(1764692789.023:5): pid=18659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3402" name="memory.events" dev="tmpfs" ino=847 res=0 errno=0 [ 544.616785][ T30] audit: type=1804 audit(1764692789.073:6): pid=18659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3402" name="/newroot/161/memory.events" dev="tmpfs" ino=847 res=1 errno=0 [ 544.766155][T18664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3403'. [ 544.879823][T18341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.947112][T18668] netlink: 'syz.5.3405': attribute type 1 has an invalid length. [ 544.947904][T18341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.993813][T18671] netlink: 'syz.5.3405': attribute type 4 has an invalid length. [ 545.002180][ T8273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.038168][ T8273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.072344][T18674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3407'. [ 545.122501][T18668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.147038][ T8273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.189205][T18670] bond2: (slave veth9): Enslaving as an active interface with a down link [ 545.255244][ T5832] Bluetooth: hci2: command tx timeout [ 545.318514][T18689] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 545.328497][ T8273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.338198][T18689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.608114][T18699] veth1_macvtap: left promiscuous mode [ 545.663832][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.676789][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.525899][ T8273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.545520][ T8273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.855810][T18751] netlink: 'syz.5.3427': attribute type 3 has an invalid length. [ 547.224076][T18769] __nla_validate_parse: 5 callbacks suppressed [ 547.224096][T18769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3432'. [ 547.269036][T18759] block nbd2: server does not support multiple connections per device. [ 547.279574][T18759] block nbd2: shutting down sockets [ 547.342250][T18766] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 547.352888][T18766] syzkaller0: linktype set to 780 [ 547.374293][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3430'. [ 547.448072][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3431'. [ 547.465269][T18774] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3433'. [ 547.721641][T18788] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3437'. [ 547.779145][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3438'. [ 547.780426][T18787] lo speed is unknown, defaulting to 1000 [ 547.876327][T18787] lo speed is unknown, defaulting to 1000 [ 548.246265][T18813] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3445'. [ 548.255554][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3445'. [ 548.378512][T18813] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3445'. [ 548.562318][T18820] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3449'. [ 549.369664][T18851] syzkaller0: entered promiscuous mode [ 549.401259][T18851] syzkaller0: entered allmulticast mode [ 549.660068][T18858] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.667900][T18858] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.905784][T18858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.992586][T18858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.612352][T18855] geneve3: entered promiscuous mode [ 550.652316][T18866] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 550.669075][ T3561] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.720970][ T3561] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 550.754422][ T3561] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.783187][ T3561] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 550.812327][ T3561] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.848077][ T3561] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 550.877103][ T3561] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.886316][ T3561] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 551.042114][T18882] netlink: 'syz.4.3463': attribute type 39 has an invalid length. [ 551.160601][T18882] hsr_slave_1 (unregistering): left promiscuous mode [ 551.645866][T18901] netlink: 'syz.1.3467': attribute type 4 has an invalid length. [ 551.698009][T18902] netlink: 'syz.1.3467': attribute type 4 has an invalid length. [ 551.735620][ T5903] lo speed is unknown, defaulting to 1000 [ 551.741870][ T5903] syz2: Port: 1 Link ACTIVE [ 551.997877][T18910] openvswitch: netlink: Missing key (keys=40, expected=100) [ 552.141462][T18919] lo speed is unknown, defaulting to 1000 [ 552.154892][T18919] lo speed is unknown, defaulting to 1000 [ 552.338394][T18925] __nla_validate_parse: 5 callbacks suppressed [ 552.338416][T18925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3473'. [ 552.586872][T18929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'. [ 552.733407][T18930] lo speed is unknown, defaulting to 1000 [ 552.761115][T18935] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3477'. [ 552.823834][T18930] lo speed is unknown, defaulting to 1000 [ 552.862973][T18933] lo speed is unknown, defaulting to 1000 [ 552.913795][T18933] lo speed is unknown, defaulting to 1000 [ 553.018739][T18943] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 553.432143][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3480'. [ 553.471460][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3480'. [ 553.492552][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3480'. [ 554.094542][T18966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3485'. [ 554.116000][ T2937] tipc: Subscription rejected, illegal request [ 554.149308][T18964] tipc: Enabled bearer , priority 0 [ 554.165621][T18964] syzkaller0: entered promiscuous mode [ 554.175430][T18964] syzkaller0: entered allmulticast mode [ 554.362495][T18964] tipc: Resetting bearer [ 554.400748][T18959] tipc: Resetting bearer [ 554.471338][T18976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3487'. [ 554.524968][T18979] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3488'. [ 554.617502][T18959] tipc: Disabling bearer [ 555.021521][T18993] netlink: 'syz.1.3491': attribute type 4 has an invalid length. [ 555.047729][ T9] lo speed is unknown, defaulting to 1000 [ 555.053716][ T9] syz2: Port: 1 Link DOWN [ 555.064303][T18993] netlink: 'syz.1.3491': attribute type 4 has an invalid length. [ 555.088290][ T9] lo speed is unknown, defaulting to 1000 [ 555.101050][ T9] syz2: Port: 1 Link ACTIVE [ 555.156717][T18999] pim6reg1: entered promiscuous mode [ 555.168792][T18999] pim6reg1: entered allmulticast mode [ 555.446443][T18994] delete_channel: no stack [ 555.579354][T19008] lo speed is unknown, defaulting to 1000 [ 555.615555][T19008] lo speed is unknown, defaulting to 1000 [ 555.622760][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3497'. [ 556.011105][T18842] Set syz1 is full, maxelem 65536 reached [ 556.046488][T19015] lo speed is unknown, defaulting to 1000 [ 556.074736][T19015] lo speed is unknown, defaulting to 1000 [ 556.408928][T19033] xt_hashlimit: size too large, truncated to 1048576 [ 556.408925][ T30] audit: type=1800 audit(1764692800.873:7): pid=19033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3501" name="memory.events" dev="tmpfs" ino=1010 res=0 errno=0 [ 556.505689][ T30] audit: type=1804 audit(1764692800.973:8): pid=19035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3501" name="/newroot/192/memory.events" dev="tmpfs" ino=1010 res=1 errno=0 [ 556.560967][T19037] netlink: 'syz.4.3504': attribute type 13 has an invalid length. [ 557.192410][ T3561] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 557.233312][ T3561] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 557.273176][ T3561] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 557.303614][ T3561] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 557.396923][T19079] __nla_validate_parse: 2 callbacks suppressed [ 557.396943][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3515'. [ 557.428654][T19077] bond0: entered promiscuous mode [ 557.434095][T19077] bond_slave_0: entered promiscuous mode [ 557.440002][T19077] bond_slave_1: entered promiscuous mode [ 557.449106][T19077] batadv0: entered promiscuous mode [ 557.499518][T19077] debugfs: 'hsr1' already exists in 'hsr' [ 557.506937][T19077] Cannot create hsr debugfs directory [ 557.512698][T19077] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 557.528885][T19077] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 557.539897][T19077] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 557.589057][T19083] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 557.607517][T19085] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3517'. [ 557.645811][T19085] "syz.5.3517" (19085) uses obsolete ecb(arc4) skcipher [ 557.927524][T19096] syzkaller0: entered promiscuous mode [ 557.936828][T19096] syzkaller0: entered allmulticast mode [ 558.313505][T19114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3527'. [ 558.322534][T19114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3527'. [ 558.451234][T19120] veth0_virt_wifi: renamed from veth1_vlan [ 558.816676][T19139] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3533'. [ 559.119584][T19147] tipc: Started in network mode [ 559.127372][T19147] tipc: Node identity d691f948f351, cluster identity 4711 [ 559.147365][T19147] tipc: Enabled bearer , priority 0 [ 559.347175][T19153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3538'. [ 559.358703][T19147] syzkaller0: entered promiscuous mode [ 559.388672][T19147] syzkaller0: entered allmulticast mode [ 559.424013][T19147] tipc: Resetting bearer [ 559.630490][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3540'. [ 559.669828][T19160] netlink: 'syz.5.3540': attribute type 31 has an invalid length. [ 559.680122][ T8273] tipc: Resetting bearer [ 559.702078][T19162] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 559.709008][T19162] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 559.720041][ T30] audit: type=1800 audit(1764692804.183:9): pid=19162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3541" name="blkio.bfq.time_recursive" dev="tmpfs" ino=720 res=0 errno=0 [ 559.800514][T19146] tipc: Resetting bearer [ 559.867847][T19172] netlink: 360 bytes leftover after parsing attributes in process `syz.5.3544'. [ 559.904791][T19174] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3539'. [ 561.672422][T19146] tipc: Disabling bearer [ 561.683940][T19183] tipc: Enabling of bearer rejected, failed to enable media [ 561.705495][ T9] tipc: Node number set to 633403720 [ 561.722294][T19184] syzkaller0: entered promiscuous mode [ 561.745261][T19184] syzkaller0: entered allmulticast mode [ 562.220767][T19210] netlink: 'syz.5.3551': attribute type 2 has an invalid length. [ 562.278014][T19210] !: entered promiscuous mode [ 562.386377][T19214] lo speed is unknown, defaulting to 1000 [ 562.406136][T19214] lo speed is unknown, defaulting to 1000 [ 562.725437][T19201] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3549'. [ 563.007017][T19234] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3555'. [ 563.324331][T19241] xt_connbytes: Forcing CT accounting to be enabled [ 563.347970][T19243] syz_tun: entered allmulticast mode [ 563.371620][T19242] syz_tun: left allmulticast mode [ 563.570881][T19258] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3563'. [ 563.692583][T19267] netlink: 360 bytes leftover after parsing attributes in process `syz.5.3566'. [ 563.882023][T19281] lo speed is unknown, defaulting to 1000 [ 563.890823][T19281] lo speed is unknown, defaulting to 1000 [ 564.085035][T19285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3569'. [ 564.114545][T19285] openvswitch: netlink: Key type 30 is not supported [ 564.182693][T19291] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3569'. [ 564.194970][T19293] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3571'. [ 564.338601][T19304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.542713][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3573'. [ 564.573834][T19302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.636039][T19316] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3576'. [ 564.853791][T19331] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3579'. [ 564.938874][T19336] x_tables: ip6_tables: TRACE target: only valid in raw table, not  [ 565.591512][T19380] lo speed is unknown, defaulting to 1000 [ 565.618484][T19380] lo speed is unknown, defaulting to 1000 [ 566.764470][T19438] openvswitch: netlink: Flow key attr not present in new flow. [ 566.874490][T19451] netlink: 'syz.6.3617': attribute type 21 has an invalid length. [ 566.883801][T19451] netlink: 'syz.6.3617': attribute type 1 has an invalid length. [ 567.595676][T19480] openvswitch: netlink: Flow key attr not present in new flow. [ 567.649642][T19482] tipc: Enabling of bearer rejected, failed to enable media [ 567.746484][T19482] __nla_validate_parse: 14 callbacks suppressed [ 567.746506][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3630'. [ 567.952556][T19493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3633'. [ 567.959134][T19492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3632'. [ 567.971129][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3632'. [ 568.715541][T19522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3641'. [ 568.724748][T19522] openvswitch: netlink: Flow key attr not present in new flow. [ 568.856393][T19530] netlink: 'syz.6.3644': attribute type 1 has an invalid length. [ 568.952095][T19530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.013482][ T5832] Bluetooth: hci2: command tx timeout [ 569.016539][T19534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3645'. [ 569.044048][T19530] bond2: (slave ip6gretap1): making interface the new active one [ 569.052343][T19534] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3645'. [ 569.066079][T19541] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3647'. [ 569.078219][T19530] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 569.210475][T19535] veth1: entered promiscuous mode [ 569.252580][T19535] bond2: (slave veth1): Enslaving as an active interface with a down link [ 569.315143][T19530] erspan0: entered allmulticast mode [ 569.362364][T19530] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 569.422273][T19546] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 569.951452][T19569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3655'. [ 569.983408][T19569] openvswitch: netlink: Flow key attr not present in new flow. [ 570.620759][T19598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3661'. [ 571.119493][T19611] netlink: 'syz.6.3668': attribute type 1 has an invalid length. [ 571.132583][T19612] netlink: 'syz.6.3668': attribute type 1 has an invalid length. [ 571.164189][T19616] openvswitch: netlink: Flow key attr not present in new flow. [ 571.740179][T19644] openvswitch: netlink: Flow key attr not present in new flow. [ 571.797708][T19653] bridge0: entered promiscuous mode [ 571.804495][T19653] macsec0: entered promiscuous mode [ 571.813915][T19653] bridge0: port 4(macsec0) entered blocking state [ 571.820742][T19653] bridge0: port 4(macsec0) entered disabled state [ 571.856127][T19653] macsec0: entered allmulticast mode [ 571.870455][T19653] bridge0: entered allmulticast mode [ 571.889039][T19653] macsec0: left allmulticast mode [ 571.900206][T19653] bridge0: left allmulticast mode [ 571.907746][T19653] bridge0: left promiscuous mode [ 571.959503][T19662] dummy0: entered promiscuous mode [ 571.985907][T19662] dummy0: left promiscuous mode [ 572.190716][T19678] netlink: 'syz.4.3689': attribute type 13 has an invalid length. [ 572.221915][T19678] netlink: 'syz.4.3689': attribute type 13 has an invalid length. [ 572.224367][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.248985][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.283956][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.303127][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.561639][T19692] openvswitch: netlink: Flow key attr not present in new flow. [ 572.731695][T19705] sock: sock_set_timeout: `syz.5.3698' (pid 19705) tries to set negative timeout [ 572.826188][T19715] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 572.854809][T19718] __nla_validate_parse: 9 callbacks suppressed [ 572.854831][T19718] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3702'. [ 572.928228][T19718] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 573.221684][T19738] syzkaller1: entered promiscuous mode [ 573.243159][T19738] syzkaller1: entered allmulticast mode [ 573.317806][T19745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3709'. [ 573.358975][T19745] openvswitch: netlink: Flow key attr not present in new flow. [ 573.551163][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.571714][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.594041][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.652701][T19754] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 573.685051][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.685398][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3719'. [ 573.695867][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.716669][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.728217][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.738049][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.748912][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.758059][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.766331][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.774894][T19754] wg1 speed is unknown, defaulting to 1000 [ 573.783731][T19767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3719'. [ 573.798052][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3719'. [ 573.807218][T19767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3719'. [ 573.820741][T19771] dvmrp0: entered allmulticast mode [ 573.958567][T19779] netlink: 360 bytes leftover after parsing attributes in process `syz.6.3722'. [ 574.186410][T19786] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3726'. [ 574.396980][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3727'. [ 574.539550][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3730'. [ 574.632588][T19801] No such timeout policy "syz0" [ 575.030766][T19826] netlink: 'syz.4.3737': attribute type 3 has an invalid length. [ 575.038773][T19826] netlink: 'syz.4.3737': attribute type 1 has an invalid length. [ 575.235576][T19840] lo speed is unknown, defaulting to 1000 [ 575.242789][T19840] lo speed is unknown, defaulting to 1000 [ 575.250442][T19840] wg1 speed is unknown, defaulting to 1000 [ 575.346112][T19846] bond0: Device is already in use. [ 575.415261][T19848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.441357][T19848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.464008][T19848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.506755][T19848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.945595][T19865] netlink: 'syz.5.3750': attribute type 3 has an invalid length. [ 576.464025][T19884] netlink: 'syz.1.3754': attribute type 3 has an invalid length. [ 576.524885][T19887] syzkaller1: entered promiscuous mode [ 576.532329][T19887] syzkaller1: entered allmulticast mode [ 576.740720][T19898] tipc: Enabled bearer , priority 0 [ 576.751765][T19900] bridge0: port 1(veth0_to_bridge) entered blocking state [ 576.760531][T19900] bridge0: port 1(veth0_to_bridge) entered disabled state [ 576.768067][T19900] veth0_to_bridge: entered allmulticast mode [ 576.777667][T19900] veth0_to_bridge: entered promiscuous mode [ 576.790715][T19898] syzkaller0: entered promiscuous mode [ 576.796464][T19898] syzkaller0: entered allmulticast mode [ 576.898145][T19906] tipc: Resetting bearer [ 576.942412][T19897] tipc: Resetting bearer [ 576.994044][T19897] tipc: Disabling bearer [ 577.325879][T19928] bond3: Removing last arp target with arp_interval on [ 577.338274][T19928] bond3: entered promiscuous mode [ 577.346325][T19928] bond3: entered allmulticast mode [ 577.353723][T19928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.791791][T19957] openvswitch: netlink: Flow key attr not present in new flow. [ 577.969534][T19971] __nla_validate_parse: 20 callbacks suppressed [ 577.969555][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 578.009228][T19971] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3787'. [ 578.034144][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 578.081670][T19971] netlink: 'syz.1.3787': attribute type 12 has an invalid length. [ 578.434390][T19994] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3795'. [ 578.693886][T20003] syzkaller0: entered promiscuous mode [ 578.703968][T20003] syzkaller0: entered allmulticast mode [ 578.712756][T20005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3797'. [ 578.733587][T20005] openvswitch: netlink: Flow key attr not present in new flow. [ 578.772611][T20006] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3799'. [ 579.021520][T20021] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 579.077448][T20027] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3805'. [ 579.193297][T20030] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3807'. [ 579.384578][T20045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3811'. [ 579.450243][T20045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3811'. [ 579.580913][T20053] openvswitch: netlink: Flow key attr not present in new flow. [ 579.946611][T20076] team0: entered promiscuous mode [ 579.951819][T20076] team0: entered allmulticast mode [ 579.961999][T20078] tipc: Enabling of bearer rejected, failed to enable media [ 580.002791][T20074] netlink: 'syz.4.3819': attribute type 13 has an invalid length. [ 580.342447][T20085] sch_tbf: burst 127 is lower than device bridge0 mtu (1514) ! [ 580.372160][ T2937] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.433761][ T2937] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.455350][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 580.460228][T20094] tipc: Enabled bearer , priority 0 [ 580.483570][ T2937] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.495939][ T2937] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.538736][T20094] syzkaller0: entered promiscuous mode [ 580.555320][T20094] syzkaller0: entered allmulticast mode [ 580.588465][T20102] openvswitch: netlink: Flow key attr not present in new flow. [ 580.620854][T20094] tipc: Resetting bearer [ 580.630936][T20093] tipc: Resetting bearer [ 580.661549][T20093] tipc: Disabling bearer [ 581.053336][T20130] netlink: 'syz.1.3836': attribute type 83 has an invalid length. [ 581.241647][T20145] openvswitch: netlink: Flow key attr not present in new flow. [ 581.684854][T20174] netlink: 'syz.4.3846': attribute type 3 has an invalid length. [ 581.698022][T20174] netlink: 'syz.4.3846': attribute type 1 has an invalid length. [ 582.276314][T20204] openvswitch: netlink: Flow key attr not present in new flow. [ 582.546541][T20217] tipc: Enabled bearer , priority 0 [ 582.570412][T20217] syzkaller0: entered promiscuous mode [ 582.579744][T20217] syzkaller0: entered allmulticast mode [ 582.635924][T20218] lo speed is unknown, defaulting to 1000 [ 582.645275][T20217] tipc: Resetting bearer [ 582.659406][T20213] tipc: Resetting bearer [ 582.680598][T20213] tipc: Disabling bearer [ 582.705473][T20218] lo speed is unknown, defaulting to 1000 [ 582.728316][T20218] wg1 speed is unknown, defaulting to 1000 [ 583.121192][T20255] __nla_validate_parse: 25 callbacks suppressed [ 583.121213][T20255] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3867'. [ 583.146600][T20256] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3866'. [ 583.203191][T20256] openvswitch: netlink: Flow key attr not present in new flow. [ 583.431452][T20275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3873'. [ 583.614948][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3875'. [ 583.625283][T20281] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3875'. [ 583.743519][T20288] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3879'. [ 583.780225][T20289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.793714][T20291] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3881'. [ 583.809247][T20291] openvswitch: netlink: Flow key attr not present in new flow. [ 583.959777][T20299] lo speed is unknown, defaulting to 1000 [ 583.969192][T20299] lo speed is unknown, defaulting to 1000 [ 583.977961][T20299] wg1 speed is unknown, defaulting to 1000 [ 584.231524][T20320] veth0_vlan: entered allmulticast mode [ 584.332870][T20329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3890'. [ 584.550328][T20336] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3893'. [ 584.571649][T20333] xt_CT: No such helper "pptp" [ 584.744926][T20346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3894'. [ 584.773737][T20346] openvswitch: netlink: Flow key attr not present in new flow. [ 585.190506][T20365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 585.381605][T20377] lo speed is unknown, defaulting to 1000 [ 585.390139][T20377] lo speed is unknown, defaulting to 1000 [ 585.399483][T20377] wg1 speed is unknown, defaulting to 1000 [ 585.596039][T20391] openvswitch: netlink: Flow key attr not present in new flow. [ 586.179051][T20421] vlan2: entered promiscuous mode [ 586.548962][T20441] netlink: 'syz.6.3920': attribute type 2 has an invalid length. [ 586.577087][T20441] : entered promiscuous mode [ 586.667707][T20446] openvswitch: netlink: Flow key attr not present in new flow. [ 588.139892][T20491] __nla_validate_parse: 13 callbacks suppressed [ 588.139912][T20491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3939'. [ 588.193118][T20491] openvswitch: netlink: Flow key attr not present in new flow. [ 588.352552][T20501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3943'. [ 588.620793][T20508] bond0: left allmulticast mode [ 588.637922][T20508] : left allmulticast mode [ 588.642678][T20508] bond_slave_1: left allmulticast mode [ 588.655297][T20508] bridge0: port 3(bond0) entered disabled state [ 588.678130][T20514] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 588.678430][T20508] bridge_slave_0: left allmulticast mode [ 588.710048][T20513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3947'. [ 588.720829][T20513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3947'. [ 588.744599][T20508] bridge_slave_0: left promiscuous mode [ 588.760741][T20508] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.776671][T20508] bridge_slave_1: left allmulticast mode [ 588.782553][T20508] bridge_slave_1: left promiscuous mode [ 588.791878][T20508] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.809780][T20508] bond0: (slave 32): Releasing backup interface [ 588.817736][T20508] : left promiscuous mode [ 588.822597][T20522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 588.839664][T20508] bond0: (slave bond_slave_1): Releasing backup interface [ 588.849183][T20508] bond_slave_1: left promiscuous mode [ 588.865009][T20508] team0: Port device team_slave_0 removed [ 588.887526][T20508] team0: Port device team_slave_1 removed [ 588.897935][T20508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.906763][T20508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.919617][T20508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.920418][T20525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3949'. [ 588.952801][T20525] netlink: zone id is out of range [ 588.958560][T20525] netlink: zone id is out of range [ 588.965817][T20525] netlink: zone id is out of range [ 588.970967][T20525] netlink: zone id is out of range [ 588.976889][T20525] netlink: zone id is out of range [ 588.982029][T20525] netlink: zone id is out of range [ 588.988470][T20525] netlink: zone id is out of range [ 588.994113][T20525] netlink: zone id is out of range [ 588.999655][T20525] netlink: zone id is out of range [ 589.011643][T20508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.068701][T20513] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 589.078940][T20513] bridge2: entered allmulticast mode [ 589.187522][T20522] veth0_to_bridge: left allmulticast mode [ 589.205750][T20522] veth0_to_bridge: left promiscuous mode [ 589.230384][T20522] bridge0: port 1(veth0_to_bridge) entered disabled state [ 589.250897][T20532] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3951'. [ 589.348968][T20536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3952'. [ 589.668159][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3957'. [ 589.689248][T20540] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 590.052622][T20572] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 590.107406][T20574] ip6erspan0: entered allmulticast mode [ 590.124835][T20580] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3966'. [ 590.136780][T20574] æÿîÿ: entered promiscuous mode [ 590.233575][ T5943] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 590.300872][T20588] netlink: 'syz.5.3967': attribute type 62 has an invalid length. [ 590.371573][T20588] vxcan0: entered allmulticast mode [ 590.408112][T20587] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 590.429813][T20587] 0ªî{X¹¦: entered allmulticast mode [ 590.526189][ T5943] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 590.754025][ T1155] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 591.357180][T20638] lo speed is unknown, defaulting to 1000 [ 591.404898][T20641] netlink: 'syz.2.3983': attribute type 58 has an invalid length. [ 591.419825][T20638] lo speed is unknown, defaulting to 1000 [ 591.499660][T20638] wg1 speed is unknown, defaulting to 1000 [ 591.815215][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 591.839240][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 592.378199][ T9628] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 592.401995][T20678] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 592.440081][T20679] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 593.761760][T20750] __nla_validate_parse: 13 callbacks suppressed [ 593.761784][T20750] netlink: 360 bytes leftover after parsing attributes in process `syz.2.4021'. [ 593.835409][T20751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4022'. [ 593.847969][T20751] net_ratelimit: 16 callbacks suppressed [ 593.847989][T20751] openvswitch: netlink: Flow key attr not present in new flow. [ 594.048979][T20757] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4024'. [ 594.094802][T20757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4024'. [ 595.493193][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 596.925949][T20780] veth0: entered promiscuous mode [ 596.954316][T20780] veth0: left promiscuous mode [ 596.978456][T20790] netlink: 'syz.5.4033': attribute type 1 has an invalid length. [ 597.039573][T20792] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4035'. [ 597.066054][T20790] 8021q: adding VLAN 0 to HW filter on device bond4 [ 597.104226][T20796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4034'. [ 597.132794][T20796] openvswitch: netlink: Flow key attr not present in new flow. [ 597.154518][T20790] veth13: entered promiscuous mode [ 597.354202][T20808] openvswitch: netlink: Unknown key attributes 2 [ 597.436803][T20818] netlink: 'syz.4.4040': attribute type 1 has an invalid length. [ 597.507355][T20822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4040'. [ 597.542800][T20817] lo speed is unknown, defaulting to 1000 [ 597.550749][T20817] lo speed is unknown, defaulting to 1000 [ 597.562426][T20817] wg1 speed is unknown, defaulting to 1000 [ 597.638940][T20822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.659079][T20826] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4042'. [ 597.735361][T20827] bond2: entered promiscuous mode [ 597.740627][T20827] bond2: entered allmulticast mode [ 597.747689][T20827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.857833][T20832] netlink: 'syz.4.4044': attribute type 4 has an invalid length. [ 597.874125][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4045'. [ 597.937675][T20838] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4045'. [ 598.070288][T20841] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 598.259927][T20848] openvswitch: netlink: Flow key attr not present in new flow. [ 598.385782][T20856] netlink: 'syz.2.4050': attribute type 10 has an invalid length. [ 598.461965][T20856] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 598.807356][T20875] __nla_validate_parse: 3 callbacks suppressed [ 598.807378][T20875] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4058'. [ 599.077228][T20881] netlink: 360 bytes leftover after parsing attributes in process `syz.5.4060'. [ 599.181415][T20886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4062'. [ 599.225750][T20886] openvswitch: netlink: Flow key attr not present in new flow. [ 599.327657][T20891] SET target dimension over the limit! [ 599.633075][T20904] xt_CT: No such helper "snmp_trap" [ 599.717025][T20904] netlink: 'syz.6.4069': attribute type 11 has an invalid length. [ 599.788387][T20911] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 599.794597][T20911] syzkaller1: linktype set to 260 [ 599.799890][T20915] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4073'. [ 600.121687][T20935] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4076'. [ 600.170485][T20937] lo speed is unknown, defaulting to 1000 [ 600.179071][T20937] lo speed is unknown, defaulting to 1000 [ 600.191243][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4076'. [ 600.200725][T20935] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4076'. [ 600.210996][T20937] wg1 speed is unknown, defaulting to 1000 [ 600.270404][T20938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4078'. [ 600.280252][T20938] openvswitch: netlink: Flow key attr not present in new flow. [ 600.309416][T20939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4077'. [ 600.936186][ T5836] Bluetooth: hci6: command 0x0406 tx timeout [ 601.744718][T20966] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4086'. [ 601.852608][T20968] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 601.887967][T20968] bond5 (unregistering): Released all slaves [ 601.949924][T20971] openvswitch: netlink: Flow key attr not present in new flow. [ 601.958542][T20973] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 602.532851][T21000] openvswitch: netlink: Flow key attr not present in new flow. [ 602.681716][T21007] netlink: 'syz.5.4103': attribute type 1 has an invalid length. [ 602.782751][T21007] 8021q: adding VLAN 0 to HW filter on device bond5 [ 602.846421][T21007] veth15: entered promiscuous mode [ 602.857252][T21007] bond5: (slave veth15): Enslaving as an active interface with a down link [ 602.906832][T21014] bond5: (slave ip6gretap1): making interface the new active one [ 602.916321][T21014] ip6gretap1: entered promiscuous mode [ 602.930490][T21014] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 602.964171][T21020] erspan0: entered allmulticast mode [ 602.996228][T21020] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 603.017150][T21031] 8021q: VLANs not supported on ip6_vti0 [ 603.052766][T20978] lo speed is unknown, defaulting to 1000 [ 603.063758][T20978] lo speed is unknown, defaulting to 1000 [ 603.082409][T20978] wg1 speed is unknown, defaulting to 1000 [ 603.230315][T21039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.333519][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 603.764510][T21059] openvswitch: netlink: Flow key attr not present in new flow. [ 604.004037][T21069] batadv_slave_1: entered promiscuous mode [ 604.103408][T21068] batadv_slave_1: left promiscuous mode [ 604.289227][T21079] __nla_validate_parse: 10 callbacks suppressed [ 604.289249][T21079] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4124'. [ 604.315945][T21085] netlink: 'syz.4.4123': attribute type 1 has an invalid length. [ 604.385501][T21091] netlink: 'syz.1.4126': attribute type 1 has an invalid length. [ 604.565171][T21091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.572746][T21101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4128'. [ 604.584038][T21102] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4127'. [ 604.599708][T21092] syzkaller0: entered promiscuous mode [ 604.600403][T21102] openvswitch: netlink: Flow key attr not present in new flow. [ 604.605700][T21092] syzkaller0: entered allmulticast mode [ 604.824386][T21113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4131'. [ 604.909959][T21113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4131'. [ 604.912614][T21111] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4132'. [ 604.953062][T21113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4131'. [ 605.026992][T21121] netlink: 360 bytes leftover after parsing attributes in process `syz.5.4136'. [ 605.240648][T21132] ip6tnl2: entered promiscuous mode [ 605.284582][T21138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4142'. [ 605.304110][T21138] openvswitch: netlink: Flow key attr not present in new flow. [ 605.344774][T21142] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4143'. [ 605.463358][T21149] pimreg: entered allmulticast mode [ 605.549251][T21157] netlink: 'syz.1.4145': attribute type 3 has an invalid length. [ 605.572477][T21157] xt_TPROXY: Can be used only with -p tcp or -p udp [ 605.634795][T21152] lo speed is unknown, defaulting to 1000 [ 605.642380][T21152] lo speed is unknown, defaulting to 1000 [ 605.644472][T21153] lo speed is unknown, defaulting to 1000 [ 605.696610][T21152] wg1 speed is unknown, defaulting to 1000 [ 605.696631][T21153] lo speed is unknown, defaulting to 1000 [ 605.721369][T21150] lo speed is unknown, defaulting to 1000 [ 605.775665][T21150] lo speed is unknown, defaulting to 1000 [ 605.776341][T21153] wg1 speed is unknown, defaulting to 1000 [ 605.868639][T21168] syzkaller0: entered promiscuous mode [ 605.878492][T21168] syzkaller0: entered allmulticast mode [ 605.898592][T21150] wg1 speed is unknown, defaulting to 1000 [ 607.979325][T21190] openvswitch: netlink: Flow key attr not present in new flow. [ 608.040568][T21192] netlink: 'syz.6.4157': attribute type 10 has an invalid length. [ 608.078738][T21192] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 608.130052][T21199] netlink: 'syz.2.4159': attribute type 1 has an invalid length. [ 608.303653][T21205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.643481][T21220] netlink: 'syz.1.4167': attribute type 39 has an invalid length. [ 608.744389][T21220] hsr_slave_1 (unregistering): left promiscuous mode [ 608.878143][T21225] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 608.926449][T21229] openvswitch: netlink: Flow key attr not present in new flow. [ 609.393957][T21248] bridge0: port 1(syz_tun) entered blocking state [ 609.403668][T21248] bridge0: port 1(syz_tun) entered disabled state [ 609.410366][T21248] syz_tun: entered allmulticast mode [ 609.424556][T21248] syz_tun: entered promiscuous mode [ 609.430779][T21248] bridge0: port 1(syz_tun) entered blocking state [ 609.437415][T21248] bridge0: port 1(syz_tun) entered forwarding state [ 609.450246][T21253] netlink: 'syz.5.4178': attribute type 10 has an invalid length. [ 609.486948][T21251] __nla_validate_parse: 14 callbacks suppressed [ 609.486968][T21251] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4177'. [ 609.519887][T21253] bridge0: port 1(syz_tun) entered disabled state [ 609.550703][T21258] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4179'. [ 609.567917][T21248] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 609.577357][T21253] bridge0: port 1(syz_tun) entered blocking state [ 609.584034][T21253] bridge0: port 1(syz_tun) entered forwarding state [ 609.657057][T21253] bridge0: entered promiscuous mode [ 609.664184][T21253] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 609.844695][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4181'. [ 609.956667][T21269] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4184'. [ 609.995094][T21269] openvswitch: netlink: Flow key attr not present in new flow. [ 610.226627][T21279] lo speed is unknown, defaulting to 1000 [ 610.276927][T21279] lo speed is unknown, defaulting to 1000 [ 610.284372][T21292] netlink: 360 bytes leftover after parsing attributes in process `syz.6.4191'. [ 610.305921][T21279] wg1 speed is unknown, defaulting to 1000 [ 610.346338][T21294] netlink: 'syz.1.4193': attribute type 30 has an invalid length. [ 610.886702][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4198'. [ 611.034232][T21320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4199'. [ 611.053493][T21320] openvswitch: netlink: Flow key attr not present in new flow. [ 611.094734][ T5836] Bluetooth: hci2: link tx timeout [ 611.100424][ T5836] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 611.111032][ T5836] Bluetooth: hci2: link tx timeout [ 611.116284][ T5836] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 611.179348][ T5836] Bluetooth: hci1: command 0x0401 tx timeout [ 613.178557][ T5832] Bluetooth: hci2: command 0x0405 tx timeout [ 614.525917][ T1155] ip6gretap1: left promiscuous mode [ 614.596111][T21342] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4206'. [ 614.670481][T21346] lo speed is unknown, defaulting to 1000 [ 614.695299][T21346] lo speed is unknown, defaulting to 1000 [ 614.727039][T21353] netem: change failed [ 614.757092][T21346] wg1 speed is unknown, defaulting to 1000 [ 614.865826][T21353] xt_CT: No such helper "netbios-ns" [ 614.910215][T21355] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 615.213916][T21386] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4214'. [ 615.245088][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4215'. [ 615.260053][T21388] openvswitch: netlink: Flow key attr not present in new flow. [ 615.271357][ T5832] Bluetooth: hci2: command 0x0405 tx timeout [ 615.273912][T21378] tipc: Enabled bearer , priority 0 [ 615.441679][T21394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4218'. [ 615.460122][T21378] syzkaller0: entered promiscuous mode [ 615.465984][T21378] syzkaller0: entered allmulticast mode [ 615.472330][T21378] tipc: Resetting bearer [ 615.481829][T21386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4214'. [ 615.491435][T21386] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4214'. [ 615.508117][T21392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4218'. [ 615.540535][T21398] netlink: 360 bytes leftover after parsing attributes in process `syz.2.4220'. [ 615.693445][ T1155] tipc: Resetting bearer [ 615.707383][T21361] tipc: Resetting bearer [ 617.419769][ T31] INFO: task syz.0.2685:15864 blocked for more than 143 seconds. [ 617.429339][ T31] Not tainted syzkaller #0 [ 617.434590][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.444718][ T31] task:syz.0.2685 state:D stack:27272 pid:15864 tgid:15863 ppid:5826 task_flags:0x400140 flags:0x00080002 [ 617.457243][ T31] Call Trace: [ 617.460567][ T31] [ 617.463829][ T31] __schedule+0x1798/0x4cc0 [ 617.468602][ T31] ? __lock_acquire+0xab9/0xd20 [ 617.474543][ T31] ? __lock_acquire+0xab9/0xd20 [ 617.479640][ T31] ? __pfx___schedule+0x10/0x10 [ 617.484964][ T31] ? schedule+0x91/0x360 [ 617.489260][ T31] schedule+0x165/0x360 [ 617.495418][ T31] schedule_preempt_disabled+0x13/0x30 [ 617.500930][ T31] __mutex_lock+0x7e6/0x1350 [ 617.507247][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 617.512151][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 617.517678][ T31] ? __mutex_lock+0x5bb/0x1350 [ 617.522493][ T31] ? nfsd_nl_version_set_doit+0xc2/0x770 [ 617.528736][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 617.534027][ T31] nfsd_nl_version_set_doit+0xc2/0x770 [ 617.539819][ T31] ? rcu_is_watching+0x15/0xb0 [ 617.545028][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 617.551391][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 617.559064][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 617.564955][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 617.571085][ T31] ? bpf_lsm_capable+0x9/0x20 [ 617.576461][ T31] ? security_capable+0x7e/0x2e0 [ 617.581554][ T31] genl_rcv_msg+0x60e/0x790 [ 617.586756][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 617.591825][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 617.598192][ T31] ? __asan_memcpy+0x40/0x70 [ 617.602834][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 617.609576][ T31] netlink_rcv_skb+0x208/0x470 [ 617.615926][ T31] ? __lock_acquire+0xab9/0xd20 [ 617.621066][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 617.626521][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 617.632096][ T31] ? down_read+0x1ad/0x2e0 [ 617.636760][ T31] genl_rcv+0x28/0x40 [ 617.640803][ T31] netlink_unicast+0x82f/0x9e0 [ 617.646556][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 617.651899][ T31] ? netlink_sendmsg+0x642/0xb30 [ 617.659129][ T31] ? skb_put+0x11b/0x210 [ 617.664820][ T31] netlink_sendmsg+0x805/0xb30 [ 617.669859][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.675317][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 617.680537][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 617.685984][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.691525][ T31] __sock_sendmsg+0x21c/0x270 [ 617.696571][ T31] ____sys_sendmsg+0x505/0x830 [ 617.701408][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 617.707333][ T31] ? import_iovec+0x74/0xa0 [ 617.711908][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 617.717787][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 617.724799][ T31] ? __fget_files+0x2a/0x420 [ 617.729651][ T31] ? __fget_files+0x3a0/0x420 [ 617.734634][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 617.739847][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 617.745633][ T31] ? do_syscall_64+0xbe/0xfa0 [ 617.750560][ T31] do_syscall_64+0xfa/0xfa0 [ 617.755254][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.760737][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.767048][ T31] ? clear_bhb_loop+0x60/0xb0 [ 617.771978][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.778986][ T31] RIP: 0033:0x7f718cf8f749 [ 617.783978][ T31] RSP: 002b:00007f718dd9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.792525][ T31] RAX: ffffffffffffffda RBX: 00007f718d1e5fa0 RCX: 00007f718cf8f749 [ 617.800842][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 617.809139][ T31] RBP: 00007f718d013f91 R08: 0000000000000000 R09: 0000000000000000 [ 617.817727][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.828603][ T31] R13: 00007f718d1e6038 R14: 00007f718d1e5fa0 R15: 00007ffcdddb43f8 [ 617.838588][ T31] [ 617.859812][ T31] [ 617.859812][ T31] Showing all locks held in the system: [ 617.873928][ T31] 1 lock held by khungtaskd/31: [ 617.878839][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 617.890031][ T31] 2 locks held by getty/5586: [ 617.895054][ T31] #0: ffff8880334a30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 617.909274][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 617.920040][ T31] 4 locks held by kworker/u8:13/8273: [ 617.925497][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 617.937493][ T31] #1: ffffc9000bc4fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 617.949639][ T31] #2: ffffffff8f2c0b90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 617.959456][ T31] #3: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x20/0x90 [ 617.969574][ T31] 2 locks held by syz.3.2390/14806: [ 617.974974][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 617.983465][ T31] #1: ffffffff8e227168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 617.993628][ T31] 2 locks held by syz.0.2685/15864: [ 617.998843][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.007111][ T31] #1: ffffffff8e227168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc2/0x770 [ 618.017972][ T31] 2 locks held by syz.4.4211/21361: [ 618.023515][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 618.032633][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 618.044183][ T31] 1 lock held by syz.2.4221/21399: [ 618.049324][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 618.061703][ T31] 1 lock held by syz.2.4221/21400: [ 618.067087][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 618.076486][ T31] 1 lock held by syz.2.4221/21405: [ 618.081685][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 618.090703][ T31] 2 locks held by syz.1.4223/21402: [ 618.096606][ T31] #0: ffff8880580db5c8 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 618.107088][ T31] #1: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bc/0xa10 [ 618.116081][ T31] 1 lock held by syz.5.4226/21417: [ 618.121205][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 618.130919][ T31] [ 618.140106][ T31] ============================================= [ 618.140106][ T31] [ 618.149060][ T31] NMI backtrace for cpu 1 [ 618.149084][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 618.149107][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.149120][ T31] Call Trace: [ 618.149128][ T31] [ 618.149138][ T31] dump_stack_lvl+0x189/0x250 [ 618.149173][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.149198][ T31] ? __pfx__printk+0x10/0x10 [ 618.149230][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 618.149254][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 618.149279][ T31] ? __pfx__printk+0x10/0x10 [ 618.149305][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 618.149338][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 618.149364][ T31] watchdog+0xf60/0xfa0 [ 618.149392][ T31] ? watchdog+0x1e2/0xfa0 [ 618.149420][ T31] kthread+0x711/0x8a0 [ 618.149453][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.149473][ T31] ? __pfx_kthread+0x10/0x10 [ 618.149504][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.149540][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.149566][ T31] ? __pfx_kthread+0x10/0x10 [ 618.149596][ T31] ret_from_fork+0x4bc/0x870 [ 618.149621][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 618.149652][ T31] ? __switch_to_asm+0x39/0x70 [ 618.149668][ T31] ? __switch_to_asm+0x33/0x70 [ 618.149685][ T31] ? __pfx_kthread+0x10/0x10 [ 618.149714][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.149753][ T31] [ 618.149761][ T31] Sending NMI from CPU 1 to CPUs 0: [ 618.298255][ C0] NMI backtrace for cpu 0 [ 618.298301][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 618.298321][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.298333][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 618.298362][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 61 1f 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 618.298379][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 618.298396][ C0] RAX: 36181714e42f5e00 RBX: ffffffff81967b47 RCX: 36181714e42f5e00 [ 618.298410][ C0] RDX: 0000000000000001 RSI: ffffffff8d715097 RDI: ffffffff8bbf08e0 [ 618.298423][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 618.298436][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7d2470 [ 618.298450][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 618.298462][ C0] FS: 0000000000000000(0000) GS:ffff88812612e000(0000) knlGS:0000000000000000 [ 618.298476][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.298488][ C0] CR2: 0000200000c67030 CR3: 0000000077822000 CR4: 00000000003526f0 [ 618.298504][ C0] Call Trace: [ 618.298511][ C0] [ 618.298518][ C0] default_idle+0x13/0x20 [ 618.298533][ C0] default_idle_call+0x73/0xb0 [ 618.298551][ C0] do_idle+0x1e7/0x510 [ 618.298575][ C0] ? __pfx_do_idle+0x10/0x10 [ 618.298603][ C0] cpu_startup_entry+0x44/0x60 [ 618.298623][ C0] rest_init+0x2de/0x300 [ 618.298641][ C0] start_kernel+0x3ae/0x410 [ 618.298673][ C0] x86_64_start_reservations+0x24/0x30 [ 618.298697][ C0] x86_64_start_kernel+0x143/0x1c0 [ 618.298719][ C0] common_startup_64+0x13e/0x147 [ 618.298754][ C0] [ 618.703258][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 618.789259][T21361] tipc: Disabling bearer [ 618.843699][T21405] syzkaller0: entered promiscuous mode [ 618.849218][T21405] syzkaller0: entered allmulticast mode [ 618.858993][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4226'. [ 624.462407][T14806] svc: failed to register nfsdv3 RPC service (errno 512). [ 624.470313][T14806] svc: failed to register nfsaclv3 RPC service (errno 512).