last executing test programs: 3.406994991s ago: executing program 0 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x30}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}}, 0x48800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeff00c}, {0x6}]}, 0x10) sendto(r3, 0x0, 0x0, 0x2, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendto(r5, 0x0, 0x2000, 0xc880, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x80) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r9, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r8], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r7, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0aee65f7b", 0x44, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r9, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000001000010000000000000000000000000a58000000060a0b040000000000000000000000052c0004802800018008000100666962001c00028008000240000000020800014000000000080003400000002f0900010073797a30000000002443b11473797a32000000001400000011000100e83f00000000000000000000c9f52f922f054d24daec23d1f610f95e4d8fc33df9ff95343b0a293605c165e6ddba9001c9be65461fb4be956bcdc3f9fc8d0cbe2ca49144bd8413fa37e02b145d106d3850aa8394"], 0x80}}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000000)) 3.0245769s ago: executing program 0 (id=446): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc00090009000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x34, r4, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) ioctl$XFS_IOC_FSGEOMETRY(r3, 0x8100587e, &(0x7f0000000240)) 2.901687941s ago: executing program 0 (id=449): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000081"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x3, 0x12) 2.716659973s ago: executing program 2 (id=453): r0 = socket$inet6(0x10, 0x3, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100), 0x4) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000380)=0x9, 0x4) (async) splice(r1, &(0x7f0000000000)=0x3, r1, &(0x7f00000000c0)=0x6, 0x992e545, 0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001240)={@local, @multicast1}, &(0x7f0000001280)=0xc) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2, 0x0, 0x4003}, 0x0) bind$rose(r3, &(0x7f0000000340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x95}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000180)={0x1, [0x0]}) (async) close(0x4) 2.363582722s ago: executing program 2 (id=458): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r7, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) r8 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x107, 0x14, 0x0, 0x20000000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r8, 0x8982, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r5, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001", @ANYRESOCT=r5], 0x48}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.355085308s ago: executing program 0 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a0c829fef27fdb1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x64, 0x0, 0x0, 0xfffffffd}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=@delqdisc={0xe4, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff1, 0x3}, {0x5, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_RATE={0x0, 0x5, {0x40, 0xc}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x7fff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 2.09652761s ago: executing program 1 (id=463): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x29, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_ERSPAN_INDEX={0x0, 0x15, 0xd3288}]}}}]}, 0x40}}, 0x0) 1.972601954s ago: executing program 2 (id=465): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000640)={0x1, 0x4, 0x7, 0x311c9c03, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000006c0)={0x0, 0x4, 0x8, 0x7f, @vifc_lcl_ifindex, @empty}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x5, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xff000000, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r3 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r4, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x4}, {0x8}}]}, 0x20}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000000)=0x2, 0xfcc0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r7 = accept(r0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c00)="d08c22a9424c4eb7ffcceebe7f5afa1a", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r7, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 1.92629174s ago: executing program 0 (id=466): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) (rerun: 64) preadv(r1, &(0x7f0000002840)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x757b, 0x3) (async, rerun: 32) r2 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000380)={0xa0000001}) epoll_pwait(r5, &(0x7f0000000140)=[{}], 0x1, 0xe, 0x0, 0x0) (async) unshare(0x22020400) (async, rerun: 64) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x8c, &(0x7f0000000480)}, 0x8) 1.848547311s ago: executing program 1 (id=468): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000141000000180017"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000001800018014000200766c616e3000000000000000000000000800110003000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r5 = socket$netlink(0x10, 0x3, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)={0xac, r7, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd7b}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5}, @TIPC_NLA_PROP_PRIO={0x9, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) r8 = socket(0x1d, 0x2, 0x6) unshare(0x26020480) ppoll(&(0x7f00000004c0)=[{r8, 0x1}], 0x1, &(0x7f0000000540), 0x0, 0x0) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4d) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x1, 0x4) 1.500434484s ago: executing program 3 (id=471): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x1, 0x0, &(0x7f0000000180)="a3f9916bd54c78abd0fc109e16f0625f9eb40118bdc31b2eebb373ab20062200005f8b9bcd06f9081b8b7ddf14be690400000000000000000000000a0000000000c29d2bf7e2884be10494557843ddc6435d7a76dc0f6d25de6934a497ce179e061731a41bec0bdf34433186b565247dbe37d2a58096cf144bca6cd4161a46ac25ef9a66bd57a0dee68a7825a593248ff7a84f3cac92dd67e9fe", 0x2}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) close(r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf3a2700000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0), 0x4) 1.49969695s ago: executing program 4 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa05000300020000002400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.358124598s ago: executing program 3 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x401, @default, @netrom={'nr', 0x0}, 0x7, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3a6168654", 0x6}, {&(0x7f0000000a80)='\x00\x00\x00egS!\x00', 0x8}], 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r5}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) 1.195482108s ago: executing program 1 (id=474): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000980)=0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r4, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000400)=ANY=[], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x10, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000c00) 1.1204102s ago: executing program 4 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) bind$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596cf"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) 1.061061796s ago: executing program 3 (id=476): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='\xdc$/+@(^\'%\x00', 0x200100, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x5]}, {0x5d8, 0x9, 0x2, 0x7}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x467}, {[0x401, 0x0, 0x4, 0x6]}, 0x1, 0x56, &(0x7f0000000100)=""/86}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xb, 0x97, &(0x7f0000000200)="3833d36856b63ced4f478e", &(0x7f0000000240)=""/151, 0xffffffff, 0x0, 0xb0, 0xb0, &(0x7f0000000300)="4c4d5979c30bf640f362598e67956e1490211dde0f7b33a77f974023a4e6ce2aeacb2ee1d4d04fbd2ddb172be668e2d41228d957cad678cadf45486beac75649831541a95c0b9b36197d6af52bd2d794d68e015c3b4a96b532d6237e4d3aa39635aec1f650a56bb23bd0ba4fe9af340c210dc5bd45d6b141ce8bc71d46ea5fda3ef9be4222b32836edf1ec5c639110dd0a1f2bff712b890caddd8ab1a9fb7ed8f861921fd3bd6bdda0843fae372cd30a", &(0x7f00000003c0)="c0ff950dd27669adb7fcce141aaed8c36c6ed476f545a3e4774334f0f51d55a36bb908dcea99d8f3d427731121b45d2e5536aa224ee05d3b2c349d5685597189afd1490062dd60da69d90a8f0144026461d7aa6a8412b6aeafb188fc1319fd920995732995e40771e8cae3ee508083fe0b5c090af50092dc1286b66a0113257d8d9fb4f6becb20523d7af958bf4f8d4e783d9f6047b8ba2608ef6c557686acc04f9c44419fe794ee82952fc3f4fb4d66", 0x3, 0x0, 0xfffffffe}, 0x50) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) sendmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="0cc773e346799fc9035426a6d0b095ad9fd4dde00b374bddd1752f09821da2c3df26845a938434024022561703445416182b76837fd0f45a2f72485110ed192367a914b48eac6c952fed061c050396795951139a767c0b4c23df4051bd44466d806688a22934470b4f60114db95db5f9e28fcb50eaeee17c0f9abf4a820d9eca09f615f17d35", 0x86}], 0x1, 0x0, 0x0, 0x44080}, 0x40088) (async, rerun: 64) sendto$unix(r0, &(0x7f0000000800)="e92681acdcb57f2374f0f8837461b5cd0db3c207e2ca0d3bd60264b0619c85b4d95343a9505c2d2aa330e97d4158aedd7aa8490a31ccda78da3cc6574585777be72ab6095c636a0de7de2cd9937beb200fe551eb8eb74327dc0c9e8781c3ac14b36a10bb98bde4a857ffa46d2d3135d1f4971100ac874b9049018c8027b70695379f55e9bcf88328693c7329ed390554c4d71423887f8e74d0873641f8ffbb12003ea1f548c9aa4d788de86d670075c45223c8d18eb2fabe35c6732bcfada633cbf32ecf03cce3c81bdbfad1f54111ad580260eadbf3c5acdd30207adb8279da47670b", 0xe3, 0x8811, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) r2 = accept4$bt_l2cap(r0, &(0x7f0000000980)={0x1f, 0x0, @fixed}, &(0x7f00000009c0)=0xe, 0x800) ppoll(&(0x7f0000000a00)=[{r0, 0x1400}, {r0, 0x40}, {r0, 0x1000}, {r2, 0x60e1}, {r0, 0x1090}, {r0}, {r0, 0x40}, {r0, 0x3000}], 0x8, &(0x7f0000000a40)={0x0, 0x3938700}, &(0x7f0000000a80)={[0x1]}, 0x8) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000ac0)) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000b00)=0x4, 0x4) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000c40)=0x0) connect$nfc_llcp(r0, &(0x7f0000000c80)={0x27, r4, 0x1, 0x7, 0xd9, 0x1, "6a9c1f038eff969ada7c73e256bc46c4d226f61dee6f7ae97d4b4cf4b8937ed0e27df4f6ea4d79ee8545096e8804012e4fa3523f72f57e95a06e743d1ff4c6", 0x22}, 0x60) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000d00)={0x80}) (async, rerun: 32) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000dc0)={'macvtap0\x00', {0x2, 0x0, @local}}) (async, rerun: 32) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@o_path={&(0x7f0000000e00)='./file0\x00', 0x0, 0x4010, r0}, 0x18) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xdc, 0x0, 0xa, 0x304, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x5e, 0x6, "4c93d6abadbfbb543e85eb8aee4d493dd893b755fcce94413d4e9b6886fd71d09fa459e94b112a2ab5eabc463e9a2341f86285655db3d28087961b98f60df14625c38be5875f81ad5e7f93e79840567e219087749d96e075c298"}, @NFTA_TABLE_USERDATA={0x4f, 0x6, "0c399430cee742bc20b32343fcfd77c6be9c0f1d4231eaf64a129aa00644030df6631bd7d24cc3d9424829cac9f26b59d93f8759a3a430d17ba00bbf976cab6a21183c5cf7a3f87b6970a4"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}, 0x1, 0x0, 0x0, 0x8010}, 0x404ccd4) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x38, r7, 0x50c, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x40) (async, rerun: 32) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000011c0)=0x1, 0x4) (async, rerun: 32) r8 = getpid() write$cgroup_pid(r0, &(0x7f0000001200)=r8, 0x12) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f00000012c0)={@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 0x4, 0x2, 0x4, 0x3}}, {&(0x7f0000001240)=""/31, 0x1f}, &(0x7f0000001280), 0x22}, 0xa0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x50, r7, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "36839ae1f1f36863963956dbb63add5a"}, @NL80211_ATTR_SSID={0x13, 0x34, @random="b294eaf0872e5d943cb0f80f71f851"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008844) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xa8, 0x9, 0x6, 0x1903, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1815}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_vlan\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x400}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) (async, rerun: 32) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) (rerun: 32) 1.031954365s ago: executing program 4 (id=477): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600000001"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) 916.835971ms ago: executing program 2 (id=478): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000b80)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2c96ed", 0x18, 0x0, 0x0, @dev, @local, {[@hopopts={0x0, 0x2, '\x00', [@generic={0x7, 0x8, "846ddaa35696f9a4"}, @pad1, @generic={0x0, 0x1, '('}]}]}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) 807.95192ms ago: executing program 4 (id=479): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x23, 0x80000, 0x3) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d000000080000000200000000e16fe3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r3, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r3, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0xfffffffe, 0x25dfdc01, {0x2, 0x0, 0x0, 0x36, r6}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x40020}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x9, r4, 0xa6}, 0xc) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 748.014288ms ago: executing program 3 (id=480): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xfff8}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xf5af99b}, 0x1c) (async, rerun: 64) sendmmsg$sock(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x4, 0xf}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYRES64=r1], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0xff0, &(0x7f000062b000)=""/4080, 0x41100, 0x0, '\x00', r8, @fallback=0x30}, 0x94) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="70000000070a010800000000000000000700000308000a40000000013000074081aa74c8bf8b9aa50b617310a26c04b745c1d669bcdaceef21a185c79e7a11381c4328866e98ca001447fd6e080009400000000008000b40000000020900010073797a300000000006000b4000000003"], 0x70}}, 0x40000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', r13, 0x700, 0x70f, 0xfffff1ae, 0x5, {{0xe, 0x4, 0x1, 0x4, 0x38, 0x66, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@ssrr={0x89, 0x23, 0x51, [@local, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010101, @multicast2, @empty]}]}}}}}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) 568.764071ms ago: executing program 1 (id=481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004091}, 0x80) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x78, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff09}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdeb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f32}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c9e49f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x565e00be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x753b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xab14c32}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x78}}, 0x40) 549.330301ms ago: executing program 2 (id=482): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000000)={'caif0\x00', @ifru_map={0xc000000000000000, 0x0, 0x9, 0xa, 0x18, 0x4}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x60, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2a, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4}]}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xf, 0x10}, {0x0, 0x7}, {0xb, 0xffe3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) listen(r0, 0x0) sendto$packet(r8, &(0x7f00000002c0)="ece4369d3e4a92316e5c1965e3998113ab49b9e62eac857c5b055b2fd5f427b50d333770b6b2440344720157c72cfe26228e45f7f55afbc0878d1e47be08cfa6991ee1dac2fe48aaffa09f03e4571de23a66752b95f4a005cc3638835b1ba5b15d433be61563919551d45305abed76052712739ece31d21bb3b775662c90b466f247bff6f71d31ecff7e4ab249bb959bf2605f7cc52ea63ef3d949263e51f8aae406764f0d0b7448d14e809f55e4", 0xae, 0x44040041, 0x0, 0x0) 505.673337ms ago: executing program 4 (id=483): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000140)={&(0x7f00000000c0)="26fbd2cb0b1247e0a138455768f72f2fd0226395e13284eb5335e0e2bb8d6983cc00a382c36718f7ae6a91a356eb9e0954b1a409d54649e7121ec9e0f23cf55f678cf6f026b867805738092aa479f115ef134bc188c04afc81cd39d39db152ebbc5ded3c43fa976bd82b941e61f08070634b5fe4e2505ac90d", 0x79}, 0x1, 0x0, 0x0, 0x20008005}, 0x1) poll(&(0x7f00000001c0)=[{r0, 0xe002}], 0x1, 0x7fffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x400, 0x70bd28, 0x0, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x3d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000380)="22661cc1c3e2f3d17b6b59a828566d8e6097", 0x12}, {&(0x7f00000003c0)="9035920c84428e3818a7e0e03c44dc7610539110c5ea2db3c0618b573c5b591620225ce6935d913f682ca3d12a0ee4da43c5b2874ff8380d7014782552dcb52b1750c7c1f7f0094131ccd21e0cda0f6f93f781b2267e32292635ba77ba1117e35d89cfa4f68fbc58adf5790256887be917d7fcf78930a0c0fb79fe2ee603385ec7", 0x81}, {&(0x7f0000000480)="6cd889a962bc81de54db94e4cfe76926b39b3bc695b6aa1986ccfdda4e31f909ef8b1b4f598087fc48d416394091c5d80ea136d4825683fd6afd5c2dd32b54682f7380d49fe0d6092a21fb4f37b4d9afb26fba19979dae8dd12126d8420e0b3fb7cd328b7cbed929c044dd2dbf3032883051243db460489c3fbb637fecf8cda8ce37004d3509954bbd8da5fca78b085e17978a6fd951ec384933740b4733b726f2f86e1907f5426e13c9c4dde3", 0xad}, {&(0x7f0000000540)="a9fa7689edd3bd462715aded2ef56abb5d964220208fdd59178fd11593a346b8e8b05889986ad5fdc286cb255ea642423be6c92eaaf36e8d146c63039fba770be8f1272731d98998634609ec4c6336e1dada8b6acd9ad668e8c1b9f1ddfdef93ddcc31ccd8492ef1427fa4eb186a808c34fcb67855956afed8728e8d4be5ceaa7e2967e2942dc6ed4a6cca41bac78c5d19150af958812eb7f9ffa19473b1285870f8dacc7b001787f9b74854a80ccfb024efcb43759b0e63c6e42d967b7ba5b6ac01bb926d4f11ee7261707013faec60a56fd8052e736473f05fc746da6ef6", 0xdf}, {&(0x7f0000000640)="6249de95956cca8ca71e404d383f54eb3325a6cc3b94785363ff3611e9fe969153d026481ba4e8f5d2154cc606f99410dc212f00f52463e9d990e10070d51405be998eaeef75109a11624b25afcbfa76e97131794a12429ffddc79efb6082d699a898f364babe86e828425fca10a697a308f53d4aab4a647214db2feeb86da12e8fb7e46c029459eedd042a5bfe784e60e6398aa673bcb52ee37e2991ca60b6625dcad0f0c240ff055eb", 0xaa}, {&(0x7f0000000700)="c4393a8214d80d301d76c556e118b6bf168eb9d5067257af14bb315d688b7a5e9531faa23d89fdde6b628e9b183b1133834c60b661f920b4942fc4be7bc774849541c8511513f44b59c2899ab002d9d2fb02dc435b5bb270cf714d8d9b722ed72531187f0229b49ec08ec5dcdfd21afdeaae0e04cac2545a0db69e2ba50d4251a1cbc91cd08f0071dbe9", 0x8a}, {&(0x7f00000007c0)="467f4f364bb84e9182779d34dfc669c588aea83f0d1453f4a223faad02b697b9ed5484c66284e6c2c21db19445b6ab450f3016a9009b82a27fd2a45f75ad4b66a5ebdb4a04e0031e63101ad2ca533550421cba481d1c33088a5b9fd7b917b38173895da797dd70a7cd6ea72ac297774ddd24dc588dd494d0d01c9c219073f4f5a68d2672b66061b3ed62a694637fb2a245", 0x91}, {&(0x7f0000000880)="f01923a3a149bf98d674233b657a0d3c6262c67a86b7ef20eb0679b382bc9e677f02d80bf7631e8d07bd510961961f02bea8abe543d9e295c68cca54788e37eb100dd59cdc8a6a69ce12e1004d9b87481e0ce5fa02413c9777d61a84eba2cb21da7a517a66d1b821f1e335a720b2f8fea2865b891fa0efe33d5a36368c32dff4a623bd7d04e6eb8d94a70d44347e6d40e96f5e32893890c53a", 0x99}], 0x8}, 0x8004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1c4, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xad}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x335c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2c7a6c7bac30b842c0496ff8e0ac9e2613ee55961f25178190dc4a9a1b65e7e5"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f39c6e7e6afab16dd70b38105e2ee1d1ea7e192f74b65c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8f5d}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x14}, 0x20008081) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e00)={'ip6_vti0\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x8, 0x9, 0x2, @loopback, @private0, 0x701, 0x10, 0xa, 0x4}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x29, 0x76, 0xf7, 0x34, 0x37603de4214a2dff, @rand_addr=' \x01\x00', @empty, 0x7, 0x20, 0x7, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001000)={'ip6_vti0\x00', &(0x7f0000000f80)={'syztnl1\x00', 0x0, 0x29, 0xa, 0x1, 0xdd4, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x700, 0x4, 0xb4f}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001080)={'erspan0\x00', &(0x7f0000001040)={'gretap0\x00', 0x0, 0x40, 0x7, 0x9, 0x4, {{0x8, 0x4, 0x1, 0x28, 0x20, 0x65, 0x0, 0x1, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0x9, "655e632b5acbb7"}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001140)={0x1, 0x58, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001180)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000012c0)={'erspan0\x00', &(0x7f00000011c0)={'gre0\x00', 0x0, 0x10, 0x8000, 0x4, 0x2, {{0x30, 0x4, 0x2, 0x3, 0xc0, 0x65, 0x0, 0xef, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, {[@timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0x0, [{@remote, 0x9b5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x51592a46}, {@remote, 0xf50}]}, @lsrr={0x83, 0x7, 0xa5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x13, 0x8a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @generic={0x83, 0xe, "e9f64df540cb9043c426dadb"}, @timestamp={0x44, 0x1c, 0xfd, 0x0, 0x4, [0x5, 0xe, 0xfffffffe, 0x7, 0x4, 0xe58]}, @timestamp_prespec={0x44, 0x34, 0x6e, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x7}, {@local}, {@multicast1, 0x5}]}, @timestamp_prespec={0x44, 0x14, 0x1f, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x8}, {@broadcast, 0x6}]}]}}}}}) getpeername$packet(r1, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001340)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000015c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001380)={0x1ec, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'hsr0\x00'}) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r14, 0x6, 0xe, &(0x7f0000001640)={@in6={{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10}}, 0x0, 0x0, 0x3f, 0x0, "160b668ef07252be872f5f78e5eba1b2f9c44106534fa1120b5cff0471fb0e8f303eef5cd5d7d82f51bdb947c66cb684f099fdb34ca3f68b9a999e842d0af02e655f18e7b794c6866c046434a6fb28a2"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001740)={'dvmrp1\x00'}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000001780)=0x81, 0x4) sendmsg(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000017c0)="f5290e2e67db605d0953e9f5341b715a4c806f", 0x13}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="d35ed5d4a0b0f9a58c2ca723ec3e2dc9ea32fd58714460789a198f473e595533d6972677338f9bfc923481780ed6649d4fe7ffcb755a59c6a39e05031e5a3058ea3720cb3adea61afc9fb26d2115c8e9d35ad5659b42a7c2ff", 0x59}, {&(0x7f0000002880)="37d6de3b5a9f41db1835a98a93c9fb8cf6f15ffdf0296b3264e90c3a8c9082acacd78deb1cbc0212e4a9e90b3010607468704e8b601a7f4b7e63aa96db8f668be93032c88c4622da0a14d7587b6db3", 0x4f}, {&(0x7f0000002900)="25dd0e51b91e725fda8245977ba758e8e736310dfc353a710180499515ce837616e86ea7398beffcda3f974d021beb1cc75faf9fdcef35382a0d79912c1d8f728fb68b5f41a7f65bbbc30ff4ebeb375e9092f1209fa109d445e38678bca5ecc1cd5ad64a23d4449234487b11759ea75d7c034a2af828e0e7fe9f4a9f0ac5eaa8ef51cd88fd5e42fc71569a705146cd7c023233543b8df76fd07be70d2b9d0bc752772c7660bcec0d", 0xa8}], 0x5, &(0x7f0000002a40)=[{0xa0, 0x10a, 0xa8d, "0f6f12bec2bb5d6f48c5955c86ed0ece421d37c8beece42f167cb38be93c268037d08abcb50e637348c08e64d25c113b1d5483436b4110e499d16aa5a8edbfa18814d8214fad738f2d96ffdfef2349f9d1e535b7f3efe731941e8a84b144592a6b2f62633f42b5e926cf5ad486e425f3bddd06dc300003663c896ed3f50324b131cde4c6c31dfa00927a85fda1e224"}, {0x40, 0x4510ad28f5a8f05a, 0xffff, "946745cc066e9df4314ab7e893e74f6c349630c8164d59caab3bbe8e1d48eb67a7afab368e934630a47f0d"}, {0xe8, 0x118, 0x5, "a1687ae7cb0810786bc8fb1ec4172fb0ee34ed16710df96e080fb6944b2440191d4a407b6745b812c72025d6014a006ce6b2e8e7cddd1b1cd394de5d3d338da25807a988a1060114b3a21e5dbcd4b97caacad551b940cdc349cc6563b3575e978047da6e90c0d36894cb33f7ae2f0d3bb8551af335b08c57d9ce6c2b400a432f666487282270868451cb883640ba0858f38464af3044e9e1462e8547f6b7152d6564f8c0e510eb1a43d4438c5ce76b8e0effedee6751997052f29ca4ed1f7466ce480d5d4b52ad4e2cc81ec0a7d8acf7fb1da3d6"}, {0x40, 0x10d, 0x8001, "e0f0e28badf20fd17a1d807930cc6a3918cda35fc00942053330590fe03b9b3269d3de7ea79bf8a5f0e180cc"}], 0x208}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x20, 0x0, 0x11, 0x0, 0x0, 0x7, 0x8}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004011}, 0x840) 340.515797ms ago: executing program 3 (id=484): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f0000000000)="0d4cbd72887105305b44d08fe94ce9368dd4c87a8cbcb497621819724fcce5d665004717307dfb29e601a945a42d71f0cce7409a70a9c12010a4", 0x3a}], 0x2) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x14) 320.593504ms ago: executing program 1 (id=485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6001000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b02000000005a2c0012800900010062af8c96126f6e64000000001c00028006001900ff030000080009000100000008000700000000001400350062", @ANYRES64=r0, @ANYRES16=r0, @ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x24000014) socket$inet6_udp(0xa, 0x2, 0x0) 196.723189ms ago: executing program 0 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3013a96318286c4fa2000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000118b330fc09340a49771498a601"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004c44) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000340)={'bridge0\x00', {0x2, 0x0, @empty}}) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xc040ff0b, 0x110c2300fe) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0xa4, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2c7b}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xbab5f823f4db3af9}}}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 101.965993ms ago: executing program 3 (id=487): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r12 = syz_open_procfs$namespace(r9, &(0x7f0000001780)='ns/ipc\x00') r13 = getpid() sendmmsg$unix(r8, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r13, r10}}}, @rights={{0x18, 0x1, 0x1, [r12, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="b8000000140000042dbd7000fcdbdf25fe800000000000000000000000000023fc0200000000000000000000000000014e2100024e2200000a00a0802b000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="bb6b6e0000000000560014007770333835000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000c00000005c85acfdcf7e6ca1f1d1000010000a0027bd700029bd700001000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r14 = socket$kcm(0x11, 0x3, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x110, 0x19, 0x8, 0x70bd2a, 0x25dfdbfb, {0x4}, [@generic="a0f2333fb70ff5626809f3c9d340914ec56192b2b59c0e40d7a9247976a0bb3311b13657263d779b3174d4db87400d87f1914a298ddb049ce0f729780f8fa78f11e0d427cb7ed27c834e2e99caef3a889854f758b98e9d768e2aa59d121287ff1eaddb54e8b5421720d5888e584b9041e2e47e654115a2ea06f36958f27d1bfd960ad858d89a5f38eabb5d8eb4b482a31d11946c9c711aac5c089fbecd312ea4216fd3ffcea3132b09f1c1f0060ad316576b3f06b92bf6aa6e90d04f9bfb844be8ca8873be4d8334451c22d6795f1ba1bf5f04c39df3a450544065f6b48c1b1f789928e815c9de75", @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$kcm(r14, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x4, 0x31}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="c2e512c476edbffe2d1000008100869ff7ba", 0x12}], 0x1}, 0x4000080) 99.995572ms ago: executing program 2 (id=488): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r5, @ANYBLOB="052b33d061000016300012800b0001006272696467650000200002800c002efdffffffffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r9) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r10, 0x77a5768982e879e3, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a20000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008044) 99.315607ms ago: executing program 1 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r2 = socket$kcm(0x2, 0x5, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000580)="000000070020ac", 0x7}], 0x2}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x12, 0x9, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x40010) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x20040010) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000003c0)={0x3, @bcast}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000017000000000000000010000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r12, r11, 0x25, 0x8, @void}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r13, 0x0) getsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendto$inet6(r8, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) 0s ago: executing program 4 (id=490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000000000000000010600040001"], 0x58}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0xfffffe6e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="581a", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x17) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 83.340136][ T5812] cgroup: Unknown subsys name 'net' [ 83.476449][ T5812] cgroup: Unknown subsys name 'cpuset' [ 83.486117][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.134840][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.465871][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.484807][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.492805][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.501579][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.510704][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.519743][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.527078][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.529795][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.542092][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.544334][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.552147][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.556745][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.565657][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.578611][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.587164][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.595854][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.596434][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.605609][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.616250][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.621626][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.631587][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.640363][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.648759][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.657130][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.658902][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.268296][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 88.351569][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.421880][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.440878][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.563705][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 88.689145][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.696473][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.704315][ T5824] bridge_slave_0: entered allmulticast mode [ 88.711748][ T5824] bridge_slave_0: entered promiscuous mode [ 88.756714][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.763975][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.771179][ T5824] bridge_slave_1: entered allmulticast mode [ 88.778776][ T5824] bridge_slave_1: entered promiscuous mode [ 88.786834][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.794403][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.801661][ T5826] bridge_slave_0: entered allmulticast mode [ 88.809055][ T5826] bridge_slave_0: entered promiscuous mode [ 88.840058][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.847423][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.855814][ T5828] bridge_slave_0: entered allmulticast mode [ 88.863314][ T5828] bridge_slave_0: entered promiscuous mode [ 88.887289][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.894621][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.901999][ T5826] bridge_slave_1: entered allmulticast mode [ 88.909829][ T5826] bridge_slave_1: entered promiscuous mode [ 88.917274][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.925325][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.932691][ T5825] bridge_slave_0: entered allmulticast mode [ 88.939838][ T5825] bridge_slave_0: entered promiscuous mode [ 88.947536][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.955011][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.963153][ T5828] bridge_slave_1: entered allmulticast mode [ 88.970490][ T5828] bridge_slave_1: entered promiscuous mode [ 88.998462][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.018321][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.025693][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.033045][ T5825] bridge_slave_1: entered allmulticast mode [ 89.040234][ T5825] bridge_slave_1: entered promiscuous mode [ 89.070516][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.125593][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.148497][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.172415][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.179911][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.187566][ T5827] bridge_slave_0: entered allmulticast mode [ 89.195233][ T5827] bridge_slave_0: entered promiscuous mode [ 89.203755][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.210860][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.218757][ T5827] bridge_slave_1: entered allmulticast mode [ 89.226192][ T5827] bridge_slave_1: entered promiscuous mode [ 89.235852][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.268223][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.279583][ T5824] team0: Port device team_slave_0 added [ 89.288233][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.341463][ T5824] team0: Port device team_slave_1 added [ 89.360460][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.372076][ T5828] team0: Port device team_slave_0 added [ 89.380520][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.393749][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.436871][ T5828] team0: Port device team_slave_1 added [ 89.454978][ T5826] team0: Port device team_slave_0 added [ 89.471743][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.479373][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.505525][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.542224][ T5826] team0: Port device team_slave_1 added [ 89.549622][ T5827] team0: Port device team_slave_0 added [ 89.556529][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.563739][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.589873][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.603984][ T5825] team0: Port device team_slave_0 added [ 89.640724][ T5827] team0: Port device team_slave_1 added [ 89.650935][ T5825] team0: Port device team_slave_1 added [ 89.668944][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.674467][ T52] Bluetooth: hci2: command tx timeout [ 89.676759][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.707915][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.752145][ T52] Bluetooth: hci0: command tx timeout [ 89.752299][ T5844] Bluetooth: hci3: command tx timeout [ 89.757927][ T52] Bluetooth: hci4: command tx timeout [ 89.764091][ T5844] Bluetooth: hci1: command tx timeout [ 89.784416][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.791413][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.817948][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.829825][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.836930][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.863058][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.885242][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.892348][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.918880][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.930759][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.938106][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.964324][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.984035][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.991079][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.017333][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.039762][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.046876][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.073005][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.084724][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.091681][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.118085][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.153382][ T5824] hsr_slave_0: entered promiscuous mode [ 90.159984][ T5824] hsr_slave_1: entered promiscuous mode [ 90.246801][ T5825] hsr_slave_0: entered promiscuous mode [ 90.254072][ T5825] hsr_slave_1: entered promiscuous mode [ 90.260256][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 90.266245][ T5825] Cannot create hsr debugfs directory [ 90.290594][ T5826] hsr_slave_0: entered promiscuous mode [ 90.297493][ T5826] hsr_slave_1: entered promiscuous mode [ 90.303875][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 90.309632][ T5826] Cannot create hsr debugfs directory [ 90.381203][ T5827] hsr_slave_0: entered promiscuous mode [ 90.388346][ T5827] hsr_slave_1: entered promiscuous mode [ 90.394869][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 90.400666][ T5827] Cannot create hsr debugfs directory [ 90.412727][ T5828] hsr_slave_0: entered promiscuous mode [ 90.419815][ T5828] hsr_slave_1: entered promiscuous mode [ 90.426363][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 90.432206][ T5828] Cannot create hsr debugfs directory [ 90.962974][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.978886][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.990639][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.012765][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.080541][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.095901][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.124246][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.143290][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.210312][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.230402][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.256482][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.277878][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.381799][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.395204][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.419397][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.426723][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.441546][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.540514][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.585116][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.601592][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.617562][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.630226][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.637757][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.662941][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.678127][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.696924][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.704405][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.752989][ T5844] Bluetooth: hci2: command tx timeout [ 91.797798][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.817187][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.839551][ T5837] Bluetooth: hci3: command tx timeout [ 91.845301][ T52] Bluetooth: hci0: command tx timeout [ 91.850714][ T52] Bluetooth: hci1: command tx timeout [ 91.853782][ T5844] Bluetooth: hci4: command tx timeout [ 91.881735][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.888992][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.901279][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.908456][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.964811][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.995427][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.002649][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.035997][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.049085][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.056360][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.187278][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.231591][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.269060][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.284931][ T4492] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.292188][ T4492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.381351][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.388605][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.439997][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.487977][ T4492] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.495189][ T4492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.560593][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.605617][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.612934][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.739477][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.808491][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.945672][ T5824] veth0_vlan: entered promiscuous mode [ 92.987761][ T5826] veth0_vlan: entered promiscuous mode [ 93.010946][ T5826] veth1_vlan: entered promiscuous mode [ 93.031635][ T5824] veth1_vlan: entered promiscuous mode [ 93.130412][ T5826] veth0_macvtap: entered promiscuous mode [ 93.154970][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.180981][ T5826] veth1_macvtap: entered promiscuous mode [ 93.246736][ T5824] veth0_macvtap: entered promiscuous mode [ 93.271464][ T5824] veth1_macvtap: entered promiscuous mode [ 93.285895][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.299136][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.365164][ T4492] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.388727][ T4492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.399304][ T4492] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.426920][ T4492] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.449080][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.498715][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.523003][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.559453][ T5825] veth0_vlan: entered promiscuous mode [ 93.571754][ T5828] veth0_vlan: entered promiscuous mode [ 93.606742][ T4492] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.615908][ T4492] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.638843][ T4492] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.647904][ T4492] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.665129][ T5825] veth1_vlan: entered promiscuous mode [ 93.694452][ T4492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.703297][ T4492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.726254][ T5828] veth1_vlan: entered promiscuous mode [ 93.757894][ T5827] veth0_vlan: entered promiscuous mode [ 93.807385][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.829463][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.835025][ T5844] Bluetooth: hci2: command tx timeout [ 93.863355][ T5827] veth1_vlan: entered promiscuous mode [ 93.882720][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.890608][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.908131][ T5828] veth0_macvtap: entered promiscuous mode [ 93.914069][ T5844] Bluetooth: hci1: command tx timeout [ 93.922758][ T5844] Bluetooth: hci4: command tx timeout [ 93.928316][ T5844] Bluetooth: hci3: command tx timeout [ 93.934650][ T52] Bluetooth: hci0: command tx timeout [ 93.951296][ T5825] veth0_macvtap: entered promiscuous mode [ 93.965759][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.990657][ T5828] veth1_macvtap: entered promiscuous mode [ 94.039399][ T5825] veth1_macvtap: entered promiscuous mode [ 94.083560][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.091446][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.126747][ T5827] veth0_macvtap: entered promiscuous mode [ 94.157366][ T5827] veth1_macvtap: entered promiscuous mode [ 94.180378][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.195823][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.258120][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.308743][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.368358][ T3513] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.410056][ T3513] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.420519][ T3513] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.437402][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.446477][ T5955] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.454250][ T3513] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.463579][ T3513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.526304][ T1330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.547797][ T3513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.569321][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.594953][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.604921][ T3513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.670269][ T3513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.731170][ T3513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.763531][ T3513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.786682][ T3513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.991657][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.023439][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.063236][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.071118][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.175125][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.183200][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.191050][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.209639][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.226360][ T5981] netlink: 'syz.1.13': attribute type 16 has an invalid length. [ 95.237925][ T5981] netlink: 'syz.1.13': attribute type 17 has an invalid length. [ 95.276865][ T5983] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 95.347885][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.356134][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.427261][ T5987] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 95.467859][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.482762][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.494021][ T5990] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 95.656810][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.674660][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.702242][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.711668][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.727666][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.759206][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.798626][ T5981] netlink: 'syz.1.13': attribute type 21 has an invalid length. [ 95.823040][ T5981] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 95.846546][ T5996] netlink: 'syz.0.1': attribute type 9 has an invalid length. [ 95.853365][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.875526][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.880298][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.924817][ T5844] Bluetooth: hci2: command tx timeout [ 95.986373][ T5996] netlink: 'syz.0.1': attribute type 9 has an invalid length. [ 95.993666][ T5844] Bluetooth: hci3: command tx timeout [ 95.999338][ T5844] Bluetooth: hci0: command tx timeout [ 96.005204][ T5147] Bluetooth: hci4: command tx timeout [ 96.010663][ T5147] Bluetooth: hci1: command tx timeout [ 96.017950][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.046676][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 96.075024][ T5996] Zero length message leads to an empty skb [ 96.113318][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.158317][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.207145][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.600771][ T6029] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 96.855695][ T6047] sctp: [Deprecated]: syz.1.27 (pid 6047) Use of int in max_burst socket option. [ 96.855695][ T6047] Use struct sctp_assoc_value instead [ 96.905502][ T6050] C: renamed from lo (while UP) [ 96.930347][ T6050] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 96.974100][ T6053] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.013627][ T6051] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 97.040074][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29'. [ 97.140518][ T6065] netlink: 312 bytes leftover after parsing attributes in process `syz.2.31'. [ 97.296416][ T9] cfg80211: failed to load regulatory.db [ 97.444252][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 97.461731][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 97.792420][ T6084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.38'. [ 98.068498][ T6101] xt_hashlimit: size too large, truncated to 1048576 [ 98.155386][ T6106] –: renamed from vxcan1 (while UP) [ 98.542437][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 98.558215][ T6117] netlink: 44 bytes leftover after parsing attributes in process `syz.1.50'. [ 98.607439][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'. [ 98.872343][ C1] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 98.949145][ T6125] syzkaller0: entered promiscuous mode [ 98.961397][ T6125] syzkaller0: entered allmulticast mode [ 100.074377][ T6144] syz.0.56 (6144) used greatest stack depth: 17880 bytes left [ 100.204575][ T6139] syz.0.56 (6139) used greatest stack depth: 17048 bytes left [ 100.334509][ T6164] netlink: 'syz.1.60': attribute type 21 has an invalid length. [ 100.343426][ T6167] netlink: 'syz.4.63': attribute type 2 has an invalid length. [ 100.364553][ T6164] netlink: 'syz.1.60': attribute type 6 has an invalid length. [ 100.379985][ T6170] Illegal XDP return value 4294967274 on prog (id 15) dev N/A, expect packet loss! [ 100.406780][ T6167] : entered promiscuous mode [ 100.412918][ T6169] netlink: 'syz.0.62': attribute type 10 has an invalid length. [ 100.490201][ T6167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.527109][ T6169] veth0_macvtap: left promiscuous mode [ 101.008004][ T6206] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 101.233135][ T6210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.428590][ T6225] __nla_validate_parse: 4 callbacks suppressed [ 101.428611][ T6225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.77'. [ 101.685794][ T6241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.704286][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 101.859619][ T6248] netlink: 'syz.3.91': attribute type 30 has an invalid length. [ 101.968442][ T6259] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 101.999986][ T6259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.323182][ T6272] netlink: 'syz.3.97': attribute type 6 has an invalid length. [ 102.382776][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 103.499398][ T6274] hsr_slave_0 (unregistering): left promiscuous mode [ 103.849910][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 103.858959][ T6312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.104'. [ 103.972795][ T6316] netlink: 'syz.4.107': attribute type 12 has an invalid length. [ 104.084917][ T6316] bond2: option primary_reselect: invalid value (255) [ 104.097865][ T6316] bond2 (unregistering): Released all slaves [ 127.973436][ T6347] netlink: 144 bytes leftover after parsing attributes in process `syz.0.116'. [ 128.162316][ T6353] nbd4: detected capacity change from 0 to 63 [ 128.179446][ T6361] netlink: 'syz.1.120': attribute type 3 has an invalid length. [ 128.784217][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 128.797193][ T6386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.126'. [ 128.812949][ T6386] geneve2: entered promiscuous mode [ 128.818668][ T6386] geneve2: entered allmulticast mode [ 129.068282][ T6392] syzkaller0: entered promiscuous mode [ 129.074318][ T6392] syzkaller0: entered allmulticast mode [ 131.019135][ T6353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.039688][ T52] block nbd4: Receive control failed (result -104) [ 131.398225][ T6410] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20000 [ 131.409064][ T6409] netlink: 'syz.0.134': attribute type 3 has an invalid length. [ 131.437163][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 131.458487][ T6399] netlink: 72 bytes leftover after parsing attributes in process `syz.1.131'. [ 131.625420][ T6417] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 131.786939][ T6422] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 131.815352][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 131.824437][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 131.902629][ T6420] nbd0: detected capacity change from 0 to 127 [ 131.912422][ T52] block nbd0: Receive control failed (result -104) [ 132.330842][ T6441] veth3: entered allmulticast mode [ 132.384278][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.147'. [ 132.414312][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 132.488389][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 132.531723][ T6465] netlink: 'syz.3.150': attribute type 61 has an invalid length. [ 133.005110][ T6487] __nla_validate_parse: 1 callbacks suppressed [ 133.005130][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 133.057405][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 133.074574][ T6489] netlink: 'syz.2.156': attribute type 8 has an invalid length. [ 133.700463][ T6516] warning: `syz.4.165' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.865693][ T6522] bond1: invalid ARP target 0.0.0.0 specified for addition [ 133.883391][ T6525] Bluetooth: MGMT ver 1.23 [ 133.888770][ T6522] bond1: option arp_ip_target: invalid value (0) [ 133.896676][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 133.911082][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'. [ 133.931744][ T6525] netlink: 48 bytes leftover after parsing attributes in process `syz.1.167'. [ 133.973628][ T6522] bond1 (unregistering): Released all slaves [ 134.428758][ T6512] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.163'. [ 134.450173][ T6555] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 134.608521][ T6560] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 134.782819][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.181'. [ 134.791980][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 134.793093][ T52] Bluetooth: hci4: command tx timeout [ 134.799077][ T6561] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 134.833071][ T6560] bond1: (slave gretap1): making interface the new active one [ 134.851881][ T6560] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 134.880605][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.182'. [ 134.910215][ T6577] syz_tun: entered allmulticast mode [ 134.917878][ T6571] raw_sendmsg: syz.4.181 forgot to set AF_INET. Fix it! [ 134.925476][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 134.953980][ T6570] syz_tun: left allmulticast mode [ 135.518805][ T6621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.538564][ T6612] netlink: 'syz.2.190': attribute type 2 has an invalid length. [ 135.879976][ T6634] syzkaller0: entered promiscuous mode [ 135.905424][ T6634] syzkaller0: entered allmulticast mode [ 136.099487][ T6646] team_slave_1: mtu less than device minimum [ 136.788699][ T6680] trusted_key: syz.2.203 sent an empty control message without MSG_MORE. [ 137.171859][ T6700] tipc: Enabling of bearer rejected, media not registered [ 137.335252][ T6709] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 137.441698][ T6709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.759297][ T6728] tipc: Enabling not permitted [ 137.785947][ T6728] tipc: Enabling of bearer rejected, failed to enable media [ 138.044510][ T6746] syzkaller0: entered promiscuous mode [ 138.060352][ T6746] syzkaller0: entered allmulticast mode [ 138.182892][ T6750] netlink: 'syz.3.218': attribute type 16 has an invalid length. [ 138.222198][ T6750] netlink: 'syz.3.218': attribute type 17 has an invalid length. [ 138.242660][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.249233][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.336833][ T6750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.378675][ T6770] xt_hashlimit: size too large, truncated to 1048576 [ 138.505401][ T6777] x_tables: duplicate underflow at hook 2 [ 138.715667][ T6785] netlink: 'syz.1.225': attribute type 62 has an invalid length. [ 138.832762][ T60] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 139.169805][ T6807] tipc: Started in network mode [ 139.175003][ T6807] tipc: Node identity eeca792d8352, cluster identity 4711 [ 139.216945][ T6807] tipc: Enabled bearer , priority 0 [ 139.371140][ T6812] syzkaller0: entered promiscuous mode [ 139.405723][ T6812] syzkaller0: entered allmulticast mode [ 139.423931][ T6812] tipc: Resetting bearer [ 139.508768][ T6814] __nla_validate_parse: 9 callbacks suppressed [ 139.508787][ T6814] netlink: 43 bytes leftover after parsing attributes in process `syz.4.231'. [ 139.593972][ T6805] tipc: Resetting bearer [ 140.637454][ T6805] tipc: Disabling bearer [ 140.647816][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 140.658175][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 140.667526][ T5956] tipc: Node number set to 1838709037 [ 140.848181][ T6851] netlink: 92 bytes leftover after parsing attributes in process `syz.1.239'. [ 140.937094][ T6857] netlink: 'syz.3.240': attribute type 3 has an invalid length. [ 140.954870][ T6858] netlink: 'syz.3.240': attribute type 3 has an invalid length. [ 140.974551][ T6862] tipc: Enabling of bearer rejected, failed to enable media [ 140.984349][ T6863] netlink: 48 bytes leftover after parsing attributes in process `syz.2.242'. [ 141.102118][ T6870] netlink: 54 bytes leftover after parsing attributes in process `syz.4.245'. [ 141.111966][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 141.131074][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 141.141752][ T6870] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 141.261822][ T6877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.246'. [ 141.523378][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.251'. [ 141.538077][ T6888] tipc: Invalid UDP bearer configuration [ 141.538139][ T6888] tipc: Enabling of bearer rejected, failed to enable media [ 141.665063][ T6906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.565272][ T6973] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 142.573403][ T6973] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 142.581357][ T6973] netlink: 'syz.4.264': attribute type 8 has an invalid length. [ 143.134493][ T7001] syz_tun: entered allmulticast mode [ 143.170883][ T7001] netlink: 'syz.3.270': attribute type 3 has an invalid length. [ 143.439263][ T7000] syz_tun: left allmulticast mode [ 143.653985][ T7037] netlink: zone id is out of range [ 143.659341][ T7037] netlink: zone id is out of range [ 143.706220][ T7037] netlink: zone id is out of range [ 143.715051][ T7037] netlink: zone id is out of range [ 143.720341][ T7037] netlink: zone id is out of range [ 143.726655][ T7037] netlink: zone id is out of range [ 143.731911][ T7037] netlink: zone id is out of range [ 143.738770][ T7037] netlink: set zone limit has 4 unknown bytes [ 143.759752][ T7025] 8021q: VLANs not supported on syzkaller0 [ 144.134444][ T7063] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 2, id = 0 [ 144.147891][ T7059] IPVS: stopping master sync thread 7063 ... [ 144.464115][ T7082] bridge0: entered allmulticast mode [ 144.576459][ T7085] __nla_validate_parse: 12 callbacks suppressed [ 144.576480][ T7085] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.292'. [ 144.673015][ T7086] netlink: 'syz.4.294': attribute type 1 has an invalid length. [ 144.683393][ T7092] xt_TPROXY: Can be used only with -p tcp or -p udp [ 144.763360][ T7086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.799376][ T7086] bond3: (slave geneve2): making interface the new active one [ 144.809939][ T7086] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 144.896067][ T7105] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 145.043277][ T7113] netlink: 'syz.0.300': attribute type 2 has an invalid length. [ 145.061113][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 145.128069][ T7105] bond3: entered promiscuous mode [ 145.133701][ T7105] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.278923][ T7110] team0: Port device team_slave_0 removed [ 145.303160][ T7114] bond3: (slave bridge1): making interface the new active one [ 145.310737][ T7114] bridge1: entered promiscuous mode [ 145.317932][ T7114] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 145.416753][ T7125] netlink: 'syz.0.305': attribute type 4 has an invalid length. [ 145.707536][ T7143] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 145.734795][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 145.752453][ T7143] bond2 (unregistering): Released all slaves [ 145.978198][ T7150] bridge1: port 1(veth5) entered blocking state [ 146.000679][ T7150] bridge1: port 1(veth5) entered disabled state [ 146.008160][ T7157] validate_nla: 2 callbacks suppressed [ 146.008177][ T7157] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 146.029311][ T7150] veth5: entered allmulticast mode [ 146.040157][ T7150] veth5: entered promiscuous mode [ 146.059174][ T7159] openvswitch: netlink: Key type 295 is out of range max 32 [ 146.079258][ T7157] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 146.094454][ T7159] Unknown options in mask b7f2 [ 146.132654][ T7145] bridge1: port 2(veth0_to_bond) entered blocking state [ 146.140190][ T7145] bridge1: port 2(veth0_to_bond) entered disabled state [ 146.157356][ T7145] veth0_to_bond: entered allmulticast mode [ 146.182328][ T7145] veth0_to_bond: entered promiscuous mode [ 146.213614][ T7159] veth0: entered promiscuous mode [ 146.273028][ T7158] veth0: left promiscuous mode [ 146.424325][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 146.459232][ T7180] veth0: entered promiscuous mode [ 146.638366][ T7180] veth0: left promiscuous mode [ 146.840981][ T7210] Bluetooth: MGMT ver 1.23 [ 146.938750][ T7218] netlink: 14 bytes leftover after parsing attributes in process `syz.2.330'. [ 147.256238][ T6954] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.286722][ T6954] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.306108][ T6954] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.323973][ T6954] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.343488][ T7240] net_ratelimit: 2 callbacks suppressed [ 147.343505][ T7240] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 147.720693][ T7257] netlink: 'syz.2.342': attribute type 11 has an invalid length. [ 147.755445][ T7259] netlink: 'syz.3.343': attribute type 3 has an invalid length. [ 147.918262][ T7263] tipc: Enabled bearer , priority 0 [ 147.959109][ T7263] syzkaller0: entered promiscuous mode [ 147.984151][ T7263] syzkaller0: entered allmulticast mode [ 148.033117][ T7263] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 148.150455][ T7282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.350'. [ 148.162101][ T7263] tipc: Resetting bearer [ 148.171005][ T7262] tipc: Resetting bearer [ 148.197128][ T7262] tipc: Disabling bearer [ 148.542471][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 148.551345][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 148.704170][ T7312] netlink: 'syz.1.359': attribute type 15 has an invalid length. [ 148.755568][ T7312] netlink: 348 bytes leftover after parsing attributes in process `syz.1.359'. [ 148.801956][ T7315] 8021q: VLANs not supported on ipvlan0 [ 149.110964][ T7327] openvswitch: netlink: Multiple metadata blocks provided [ 149.313871][ T7337] bond1: option min_links: invalid value (18446744073709551614) [ 149.321674][ T7337] bond1: option min_links: allowed values 0 - 2147483647 [ 149.401605][ T7337] bond1 (unregistering): Released all slaves [ 149.431050][ T7292] syzkaller1: entered promiscuous mode [ 149.440613][ T7292] syzkaller1: entered allmulticast mode [ 149.483651][ T7349] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.366'. [ 149.498353][ T7349] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 149.608495][ T7290] lec:lec_atm_close: lec0: Shut down! [ 149.721811][ T7342] netlink: 'syz.1.367': attribute type 1 has an invalid length. [ 149.762181][ T7342] netlink: 224 bytes leftover after parsing attributes in process `syz.1.367'. [ 149.824706][ T7355] syzkaller0: entered promiscuous mode [ 149.830337][ T7355] syzkaller0: entered allmulticast mode [ 149.847929][ T7358] netlink: 108 bytes leftover after parsing attributes in process `syz.0.368'. [ 149.900738][ T7358] netlink: 108 bytes leftover after parsing attributes in process `syz.0.368'. [ 149.967431][ T7358] netlink: 84 bytes leftover after parsing attributes in process `syz.0.368'. [ 151.315917][ T7380] netlink: 404 bytes leftover after parsing attributes in process `syz.3.374'. [ 151.328972][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'. [ 151.339996][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'. [ 151.362231][ T7380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.374'. [ 151.633610][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 151.646719][ T7405] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.378'. [ 151.857407][ T7419] netlink: 32 bytes leftover after parsing attributes in process `syz.3.381'. [ 151.967182][ T7425] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.979136][ T7427] netlink: 'syz.4.384': attribute type 3 has an invalid length. [ 152.000466][ T7427] netlink: 'syz.4.384': attribute type 2 has an invalid length. [ 152.578182][ T7448] syzkaller0: entered promiscuous mode [ 152.606219][ T7448] syzkaller0: entered allmulticast mode [ 152.820911][ T7462] syzkaller0: entered promiscuous mode [ 152.834268][ T7462] syzkaller0: entered allmulticast mode [ 154.442083][ T7512] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 155.597241][ T7507] __nla_validate_parse: 7 callbacks suppressed [ 155.597263][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 155.619766][ T7512] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 155.703229][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 156.330385][ T7549] syzkaller1: entered promiscuous mode [ 156.336012][ T7549] syzkaller1: entered allmulticast mode [ 156.356269][ T7558] tipc: Enabling not permitted [ 156.377310][ T7558] tipc: Enabling of bearer rejected, failed to enable media [ 156.445564][ T5890] lec:lec_start_xmit: lec0:No lecd attached [ 156.535667][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'. [ 156.706144][ T7577] syzkaller0: entered allmulticast mode [ 156.741144][ T7577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.415'. [ 157.247112][ T7611] netlink: 272 bytes leftover after parsing attributes in process `syz.2.423'. [ 157.449524][ T7618] tipc: Can't bind to reserved service type 1 [ 157.675876][ T7635] netlink: 112 bytes leftover after parsing attributes in process `syz.2.430'. [ 157.758401][ T7644] netlink: 'syz.2.430': attribute type 2 has an invalid length. [ 157.773333][ T7644] netlink: 'syz.2.430': attribute type 8 has an invalid length. [ 157.808190][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.430'. [ 158.179450][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 158.215973][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 158.299133][ T7661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.379145][ T7668] netlink: 76 bytes leftover after parsing attributes in process `syz.3.437'. [ 158.690969][ T7690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.712990][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 158.725094][ T1165] block nbd4: Possible stuck request ffff888024f70000: control (read@0,1024B). Runtime 30 seconds [ 158.740692][ T1165] block nbd4: Possible stuck request ffff888024f70200: control (read@1024,1024B). Runtime 30 seconds [ 158.755827][ T1165] block nbd4: Possible stuck request ffff888024f70400: control (read@2048,1024B). Runtime 30 seconds [ 158.768576][ T1165] block nbd4: Possible stuck request ffff888024f70600: control (read@3072,1024B). Runtime 30 seconds [ 158.871844][ T7700] Cannot find add_set index 0 as target [ 158.878227][ T7693] erspan0: entered promiscuous mode [ 158.888863][ T7700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.894405][ T7697] netlink: 'syz.4.443': attribute type 21 has an invalid length. [ 159.513879][ T7731] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 159.561416][ T7736] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 159.571516][ T7737] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 159.623810][ T7737] bridge0: entered allmulticast mode [ 160.180708][ T7770] pimreg: entered allmulticast mode [ 161.358931][ T7829] __nla_validate_parse: 7 callbacks suppressed [ 161.358953][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 161.758888][ T7851] netlink: 'syz.3.484': attribute type 4 has an invalid length. [ 161.959919][ T1165] block nbd0: Possible stuck request ffff888024e08000: control (read@0,1024B). Runtime 30 seconds [ 161.970659][ T1165] block nbd0: Possible stuck request ffff888024e08200: control (read@1024,1024B). Runtime 30 seconds [ 161.981699][ T1165] block nbd0: Possible stuck request ffff888024e08400: control (read@2048,1024B). Runtime 30 seconds [ 161.993339][ T1165] block nbd0: Possible stuck request ffff888024e08600: control (read@3072,1024B). Runtime 30 seconds [ 162.008789][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 162.068795][ T7861] ------------[ cut here ]------------ [ 162.074609][ T7861] msk->pm.local_addr_used == 0 [ 162.074636][ T7861] WARNING: net/mptcp/pm_kernel.c:1070 at mptcp_pm_nl_del_addr_doit+0xfb7/0x1420, CPU#1: syz.3.487/7861 [ 162.090621][ T7861] Modules linked in: [ 162.094923][ T7861] CPU: 1 UID: 0 PID: 7861 Comm: syz.3.487 Not tainted syzkaller #0 PREEMPT(full) [ 162.104229][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 162.114632][ T7861] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 162.121208][ T7861] Code: 01 00 00 49 89 c6 e8 28 34 3e f6 e9 26 fb ff ff e8 1e 34 3e f6 48 89 df be 03 00 00 00 e8 91 73 1a f9 eb a4 e8 0a 34 3e f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 12 fb ff ff 48 [ 162.140980][ T7861] RSP: 0018:ffffc90003037160 EFLAGS: 00010287 [ 162.147158][ T7861] RAX: ffffffff8b864346 RBX: 0000000000000000 RCX: 0000000000080000 [ 162.155242][ T7861] RDX: ffffc9000c95b000 RSI: 00000000000028ea RDI: 00000000000028eb [ 162.163311][ T7861] RBP: ffffc900030373b0 R08: ffff88805705a3b7 R09: 1ffff1100ae0b476 [ 162.171331][ T7861] R10: dffffc0000000000 R11: ffffed100ae0b477 R12: 1ffff1100ae0b475 [ 162.179398][ T7861] R13: ffff888028e53d00 R14: ffff888057059900 R15: ffff88805705a3a8 [ 162.187557][ T7861] FS: 00007f68579026c0(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 162.196607][ T7861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.203280][ T7861] CR2: 0000200000001783 CR3: 0000000031672000 CR4: 00000000003526f0 [ 162.211308][ T7861] Call Trace: [ 162.214687][ T7861] [ 162.217705][ T7861] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 162.224011][ T7861] ? rcu_is_watching+0x15/0xb0 [ 162.228852][ T7861] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 162.235327][ T7861] genl_family_rcv_msg_doit+0x22a/0x330 [ 162.240932][ T7861] ? __asan_memcpy+0x40/0x70 [ 162.245646][ T7861] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 162.251783][ T7861] ? bpf_lsm_capable+0x9/0x20 [ 162.256577][ T7861] ? security_capable+0x7e/0x2c0 [ 162.261590][ T7861] genl_rcv_msg+0x61c/0x7a0 [ 162.266205][ T7861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.271280][ T7861] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 162.277537][ T7861] ? __pfx_ref_tracker_free+0x10/0x10 [ 162.283013][ T7861] ? __skb_clone+0x63/0x7a0 [ 162.287578][ T7861] netlink_rcv_skb+0x232/0x4b0 [ 162.292438][ T7861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.294146][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 162.297515][ T7861] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.312029][ T7861] ? genl_rcv+0x19/0x40 [ 162.316360][ T7861] ? down_read+0x272/0x2e0 [ 162.320847][ T7861] ? genl_rcv+0xd/0x40 [ 162.325049][ T7861] genl_rcv+0x28/0x40 [ 162.329093][ T7861] netlink_unicast+0x80f/0x9b0 [ 162.333981][ T7861] ? __pfx_netlink_unicast+0x10/0x10 [ 162.339337][ T7861] ? __alloc_skb+0x193/0x390 [ 162.344037][ T7861] ? netlink_sendmsg+0x650/0xb40 [ 162.349031][ T7861] ? skb_put+0x11b/0x210 [ 162.353391][ T7861] netlink_sendmsg+0x813/0xb40 [ 162.358229][ T7861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.363672][ T7861] ? aa_sock_msg_perm+0xf1/0x1b0 [ 162.368667][ T7861] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.374120][ T7861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.379462][ T7861] ____sys_sendmsg+0xa68/0xad0 [ 162.384344][ T7861] ? __might_fault+0xaf/0x130 [ 162.389088][ T7861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.394496][ T7861] ? import_iovec+0x73/0xa0 [ 162.399067][ T7861] ___sys_sendmsg+0x2a5/0x360 [ 162.403845][ T7861] ? __lock_acquire+0x6b5/0x2cf0 [ 162.409027][ T7861] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.414374][ T7861] ? futex_wait+0x29a/0x380 [ 162.418963][ T7861] ? __fget_files+0x2a/0x420 [ 162.423649][ T7861] ? __fget_files+0x3a0/0x420 [ 162.428395][ T7861] __x64_sys_sendmsg+0x1bd/0x2a0 [ 162.433443][ T7861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.439014][ T7861] ? rcu_is_watching+0x15/0xb0 [ 162.443895][ T7861] do_syscall_64+0xe2/0xf80 [ 162.448447][ T7861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.454606][ T7861] ? trace_irq_disable+0x37/0x100 [ 162.459693][ T7861] ? clear_bhb_loop+0x60/0xb0 [ 162.459723][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 162.464477][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.464505][ T7861] RIP: 0033:0x7f685699bf79 [ 162.464540][ T7861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.464560][ T7861] RSP: 002b:00007f6857902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.464586][ T7861] RAX: ffffffffffffffda RBX: 00007f6856c15fa0 RCX: 00007f685699bf79 [ 162.464603][ T7861] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 162.464618][ T7861] RBP: 00007f6856a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 162.464633][ T7861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.464647][ T7861] R13: 00007f6856c16038 R14: 00007f6856c15fa0 R15: 00007ffe26a7c398 [ 162.464690][ T7861] [ 162.464703][ T7861] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 162.464719][ T7861] CPU: 1 UID: 0 PID: 7861 Comm: syz.3.487 Not tainted syzkaller #0 PREEMPT(full) [ 162.464742][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 162.464755][ T7861] Call Trace: [ 162.464764][ T7861] [ 162.464773][ T7861] vpanic+0x1e0/0x670 [ 162.464803][ T7861] panic+0xc5/0xd0 [ 162.464830][ T7861] ? __pfx_panic+0x10/0x10 [ 162.464977][ T7861] __warn+0x315/0x4a0 [ 162.465048][ T7861] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 162.465120][ T7861] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 162.465184][ T7861] __report_bug+0x29a/0x540 [ 162.465260][ T7861] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 162.465324][ T7861] ? __pfx___report_bug+0x10/0x10 [ 162.465376][ T7861] ? __lock_acquire+0x6b5/0x2cf0 [ 162.465482][ T7861] ? __lock_sock_fast+0x45/0xe0 [ 162.465557][ T7861] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 162.465611][ T7861] report_bug+0x16a/0x220 [ 162.465673][ T7861] ? mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 162.465735][ T7861] ? mptcp_pm_nl_del_addr_doit+0xfb9/0x1420 [ 162.465790][ T7861] handle_bug+0x98/0x200 [ 162.465864][ T7861] exc_invalid_op+0x1a/0x50 [ 162.465935][ T7861] asm_exc_invalid_op+0x1a/0x20 [ 162.465976][ T7861] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb7/0x1420 [ 162.466049][ T7861] Code: 01 00 00 49 89 c6 e8 28 34 3e f6 e9 26 fb ff ff e8 1e 34 3e f6 48 89 df be 03 00 00 00 e8 91 73 1a f9 eb a4 e8 0a 34 3e f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 12 fb ff ff 48 [ 162.466092][ T7861] RSP: 0018:ffffc90003037160 EFLAGS: 00010287 [ 162.466144][ T7861] RAX: ffffffff8b864346 RBX: 0000000000000000 RCX: 0000000000080000 [ 162.466185][ T7861] RDX: ffffc9000c95b000 RSI: 00000000000028ea RDI: 00000000000028eb [ 162.466219][ T7861] RBP: ffffc900030373b0 R08: ffff88805705a3b7 R09: 1ffff1100ae0b476 [ 162.466261][ T7861] R10: dffffc0000000000 R11: ffffed100ae0b477 R12: 1ffff1100ae0b475 [ 162.466310][ T7861] R13: ffff888028e53d00 R14: ffff888057059900 R15: ffff88805705a3a8 [ 162.466395][ T7861] ? mptcp_pm_nl_del_addr_doit+0xfb6/0x1420 [ 162.466520][ T7861] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 162.466649][ T7861] ? rcu_is_watching+0x15/0xb0 [ 162.466761][ T7861] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 162.466866][ T7861] genl_family_rcv_msg_doit+0x22a/0x330 [ 162.466954][ T7861] ? __asan_memcpy+0x40/0x70 [ 162.467048][ T7861] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 162.467164][ T7861] ? bpf_lsm_capable+0x9/0x20 [ 162.467211][ T7861] ? security_capable+0x7e/0x2c0 [ 162.467296][ T7861] genl_rcv_msg+0x61c/0x7a0 [ 162.467406][ T7861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.467480][ T7861] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 162.467555][ T7861] ? __pfx_ref_tracker_free+0x10/0x10 [ 162.467619][ T7861] ? __skb_clone+0x63/0x7a0 [ 162.467730][ T7861] netlink_rcv_skb+0x232/0x4b0 [ 162.467808][ T7861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.467902][ T7861] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.467941][ T7861] ? genl_rcv+0x19/0x40 [ 162.468053][ T7861] ? down_read+0x272/0x2e0 [ 162.468117][ T7861] ? genl_rcv+0xd/0x40 [ 162.468192][ T7861] genl_rcv+0x28/0x40 [ 162.468264][ T7861] netlink_unicast+0x80f/0x9b0 [ 162.468374][ T7861] ? __pfx_netlink_unicast+0x10/0x10 [ 162.468457][ T7861] ? __alloc_skb+0x193/0x390 [ 162.468522][ T7861] ? netlink_sendmsg+0x650/0xb40 [ 162.468576][ T7861] ? skb_put+0x11b/0x210 [ 162.468659][ T7861] netlink_sendmsg+0x813/0xb40 [ 162.468746][ T7861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.468818][ T7861] ? aa_sock_msg_perm+0xf1/0x1b0 [ 162.468893][ T7861] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.468951][ T7861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.469012][ T7861] ____sys_sendmsg+0xa68/0xad0 [ 162.469093][ T7861] ? __might_fault+0xaf/0x130 [ 162.469223][ T7861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.469330][ T7861] ? import_iovec+0x73/0xa0 [ 162.469427][ T7861] ___sys_sendmsg+0x2a5/0x360 [ 162.469499][ T7861] ? __lock_acquire+0x6b5/0x2cf0 [ 162.469586][ T7861] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.469682][ T7861] ? futex_wait+0x29a/0x380 [ 162.469817][ T7861] ? __fget_files+0x2a/0x420 [ 162.469882][ T7861] ? __fget_files+0x3a0/0x420 [ 162.469980][ T7861] __x64_sys_sendmsg+0x1bd/0x2a0 [ 162.470064][ T7861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.470168][ T7861] ? rcu_is_watching+0x15/0xb0 [ 162.470261][ T7861] do_syscall_64+0xe2/0xf80 [ 162.470315][ T7861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.470368][ T7861] ? trace_irq_disable+0x37/0x100 [ 162.470429][ T7861] ? clear_bhb_loop+0x60/0xb0 [ 162.470508][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.470583][ T7861] RIP: 0033:0x7f685699bf79 [ 162.470642][ T7861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.470696][ T7861] RSP: 002b:00007f6857902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.470758][ T7861] RAX: ffffffffffffffda RBX: 00007f6856c15fa0 RCX: 00007f685699bf79 [ 162.470793][ T7861] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 162.470832][ T7861] RBP: 00007f6856a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 162.470865][ T7861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.470905][ T7861] R13: 00007f6856c16038 R14: 00007f6856c15fa0 R15: 00007ffe26a7c398 [ 162.470995][ T7861] [ 162.474184][ T7861] Kernel Offset: disabled