last executing test programs: 2m47.478500362s ago: executing program 1 (id=1519): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0x0, 0x3}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x4832, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x40000, &(0x7f0000000240)={0x11, 0xf7, r4, 0x1, 0x20, 0x6, @remote}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000080)=0x7, 0x4) recvfrom$packet(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x20) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) close(0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000002c0)="fc0000001d000724ab09254ec100070007ab080010000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0x45) pipe(&(0x7f0000000380)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) epoll_pwait(r5, &(0x7f0000000080)=[{}, {}], 0x2, 0x6, &(0x7f0000000140)={[0x6]}, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000100)="09e7ee2c78da", 0x6}, {&(0x7f0000000440)="9c74dfbf", 0x4}, {&(0x7f0000000580)="9faa4305", 0x4}, {&(0x7f0000000000)="857312d69ce321bbe2769cb1211c64065cc6bd0d1e3a1f0710f9", 0x1a}], 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 2m45.190086879s ago: executing program 1 (id=1535): socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8850) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611865000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x8000) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 2m44.246195586s ago: executing program 1 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001180)=ANY=[@ANYBLOB="580000001000010025bd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="84030200000000000800040000010000300016802c000180"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40) 2m44.033408706s ago: executing program 1 (id=1544): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003400000004a08000640000000010800044000000002"], 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000000b40)={r11, 0x7}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x28e2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}]}, 0x64}}, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x700, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "a6493a7b26e8f5de714f86407ffa223f"}}}}}}, 0x0) 2m43.766356889s ago: executing program 1 (id=1547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd2c, 0x27dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r7, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf, 0x80}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x60}}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x38, r11, 0x1, 0x0, 0x0, {0x49}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x10000002}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa4, r11, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x80, 0xa8, @random="6ee40e13dc53ed4ca3a8678c5d9fd50e95d2fc73d73ffeaae31f8c646a0855bf4bf18cf4a2b5114bf05abac4aa0a3930a0bbc31fc23f33b8911cec12e29a60b4c8dba54c420e57fb911830d9abbbe74bb6650a3077efb4f58291d9d300649e4f5bc4424fab5eeb0e78bf25777f90337681a8717ab0c050a9374d858a"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8085) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x25dfdbfc, {{0x11}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) r12 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000000)={@local, 0x78, r13}) ioctl$sock_inet6_tcp_SIOCINQ(r12, 0x8936, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r15, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)={0x14, r14, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x40090) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) 2m42.860754189s ago: executing program 1 (id=1549): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006740)=@newchain={0x1c58, 0x64, 0x0, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x5, 0x7}, {0xc, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c28, 0x2, [@TCA_FLOW_POLICE={0xc10, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x4, 0x401, 0x100, 0x2, 0x6, 0x2, 0xc, 0x9, 0xb9f0945, 0x1, 0x4, 0x6, 0x38, 0x8, 0x9d14, 0x8, 0xff, 0x33, 0x101, 0x0, 0x8, 0x5, 0xffff0001, 0x2, 0x1000, 0x14, 0xfffffff7, 0x9, 0x3fffc, 0xa, 0x7ff, 0x5, 0xb, 0x5, 0xdcb, 0xd7, 0x401, 0x3, 0x580f, 0x1000, 0x0, 0x5, 0x7, 0x29e0, 0x10001, 0x7f, 0x1, 0x46c6, 0x5, 0x4, 0x73a0, 0x2, 0x4, 0x5, 0x9, 0x3ff, 0x8, 0x80000001, 0x10, 0x6, 0x3, 0x80000001, 0x8, 0xffff, 0x6, 0x8, 0x6, 0x7, 0x6, 0x400, 0x0, 0x100, 0x8001, 0x9, 0x1, 0xfffffffb, 0x8, 0x0, 0x9d, 0x8, 0x5e, 0xb31, 0x8, 0x4, 0xff, 0x97, 0x7, 0x8, 0x10, 0x1, 0xc, 0x6, 0x3, 0x40000000, 0xff, 0xb, 0xff, 0x8, 0x3, 0x400, 0x5, 0x0, 0x9d, 0x2, 0xbda6, 0xcc, 0x7, 0xc4c6, 0x1, 0x9, 0x6, 0x2, 0x7, 0xc1b3d865, 0x1, 0x5, 0x2, 0x0, 0x10, 0x13, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x4, 0x8001, 0x10, 0x6, 0x4, 0x2, 0x0, 0x1, 0x7, 0x44, 0x2, 0x9b5, 0xfffffff8, 0x1, 0x9, 0x0, 0xffffffff, 0x9f1, 0x3, 0x4, 0xb05, 0x1, 0xbc39, 0x8, 0x6, 0x5, 0xa, 0x3, 0x2b6, 0x0, 0x6, 0x1800, 0x8000, 0x1, 0xff, 0x3a5, 0x4, 0x1a, 0x6, 0x401, 0x1000, 0x9, 0x9, 0x5, 0x9, 0xa, 0x2, 0x5, 0x3, 0x9, 0x4, 0x9367, 0x0, 0x0, 0x1, 0x2, 0xfffffffc, 0x1, 0x400, 0x2d6, 0xfff, 0xf6, 0x6, 0x7, 0x5, 0x4, 0x2, 0x4, 0x2, 0x21e2, 0x8, 0x2, 0x10000, 0x800, 0x4, 0x7178, 0x0, 0x0, 0x3e, 0x1, 0x3, 0x9, 0x8, 0xa24, 0x1, 0x0, 0x0, 0xe, 0x0, 0xfffffffd, 0x1, 0x10001, 0x6, 0x3, 0x7, 0x2, 0x4, 0x0, 0xaa31, 0xcd32, 0x2, 0x6, 0xfff, 0x70, 0x4, 0x6, 0x0, 0x3, 0x8e9, 0x6, 0x3, 0x3, 0x4fba, 0x5, 0x1, 0x401, 0x0, 0x7, 0x4e, 0x8, 0x1, 0x8000, 0x2, 0x40, 0x5, 0xbc, 0x0, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0x1, 0x6, 0x0, 0x2, 0xff, 0x5, 0x40000000, 0x7f, 0x0, 0x4, 0x8, 0x5, 0x6, 0x9, 0x3b, 0x4, 0x82a, 0x10, 0x2, 0x6, 0x1ff, 0xa6, 0x400, 0x5, 0x6, 0x4, 0xffff8000, 0x8001, 0x408c2ae0, 0x2, 0x8, 0xffff, 0x8001, 0x1, 0x9, 0x7b8b87bf, 0x946, 0xaa28, 0x80, 0xa, 0x3, 0x6, 0x6, 0x2, 0xac02, 0x1, 0x4, 0x7, 0x5, 0x6, 0x466, 0x7, 0x3, 0x2, 0x401, 0x3, 0x5, 0xfffffff8, 0xd702, 0xf, 0x8, 0xcb4, 0x100, 0x0, 0x13a, 0x6, 0x6, 0x6, 0x58ce, 0xe02, 0x5, 0x3, 0x5, 0x6, 0x29, 0x0, 0x400, 0x2b11, 0x81, 0x0, 0x7f, 0x10, 0x6, 0x800, 0x7487, 0x1, 0x2, 0x8, 0x0, 0x2, 0x4, 0x5, 0x3, 0x2, 0x7ff, 0x3, 0xe, 0xe, 0x401, 0x4, 0xcb, 0x9, 0x100, 0x10, 0x2, 0x40, 0x5, 0x6, 0xf, 0x0, 0x3, 0x1e22, 0x3, 0x0, 0x7, 0x12dbe0, 0x726, 0x2, 0x8, 0xf8, 0x1, 0x6, 0x7, 0x4, 0x30, 0xffffff2f, 0x0, 0xb6be, 0x5, 0x7, 0xb69b, 0x5, 0x8000, 0xc, 0x5, 0x483, 0x80, 0x30, 0x3, 0x65, 0xff, 0x4, 0x7, 0x59, 0x7, 0x0, 0x40, 0xfffffffa, 0x0, 0x431, 0x4, 0x7, 0x4, 0x6, 0xd, 0x7b2b, 0xf, 0x3, 0x200, 0x9, 0x5, 0x7, 0x9, 0x0, 0x3ff, 0x0, 0xfffffff2, 0x8001, 0xffffff7f, 0x8, 0x2, 0x0, 0x8, 0x0, 0xffff7be8, 0x8, 0xa300, 0xe, 0x2, 0xfffffffd, 0x9, 0x101, 0x4, 0x54, 0x5, 0x6e, 0x6fd4, 0x398d1d17, 0x0, 0x8, 0x3, 0x7, 0x4, 0x8000, 0x0, 0xab9a, 0x9, 0x1, 0x2, 0x4, 0x6, 0x14000, 0x1, 0x9, 0x0, 0xe8000000, 0x4, 0x81, 0x3, 0x5b9, 0xb, 0x3ff, 0xefde, 0x68c, 0x9, 0x3, 0xcf, 0x2, 0x9c7a, 0x7, 0x2, 0x6000000, 0x0, 0x55b8, 0xb, 0x9, 0xd, 0x1, 0x401, 0x100, 0x1000, 0x7, 0x5, 0x4, 0xffffffff, 0x5, 0x800, 0x7fffffff, 0x10000, 0xfffffff7, 0x0, 0x8, 0x6, 0x7, 0xffff509b, 0xfffffff8, 0x7, 0x2, 0x8, 0x2, 0x6240, 0xfff, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x358, 0x0, 0x7106, 0x80000000, 0xb, 0x5, 0x3, 0xb, 0xfffffff9, 0x1, 0x2, 0x2, 0x5, 0x6d0, 0x3, 0x0, 0x6, 0x0, 0x5, 0x400, 0x4, 0x6, 0x1, 0x7fffffff, 0x6, 0x5, 0x800, 0x8, 0x0, 0x4, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x1, 0x2, 0x0, 0x70200000, 0x4, 0x8, 0xe, 0x1, 0x1, 0x6, 0x1ff, 0x80000001, 0x1, 0x4, 0x9, 0x0, 0x8001, 0x65, 0x1ff, 0x8, 0x7, 0x3, 0x3, 0x7, 0x4, 0x1, 0x929, 0x8, 0x4aa, 0x3d8056eb, 0xff, 0x8, 0xfffeffff, 0x4, 0x0, 0x9, 0x9, 0x8, 0x1, 0x10001, 0xfffffc01, 0x800, 0x1, 0x3, 0x4, 0x47c2, 0x0, 0x80000001, 0xfffffff7, 0x200, 0x5, 0x7, 0x0, 0xf9da, 0x7f34, 0x81, 0x7c, 0x6, 0x8, 0x9, 0x6, 0x9, 0x3, 0x9, 0x74c, 0x7ff, 0x2e, 0x5, 0x2, 0x9, 0x7, 0x9, 0x40, 0x400, 0xe769, 0x4, 0x0, 0x80, 0x5, 0x100, 0x7ff, 0x9, 0x4, 0x0, 0x8, 0x4, 0x2, 0xfffffffd, 0x10001, 0x14000, 0x0, 0x10001, 0x4, 0x40, 0xffffffff, 0x7fffffff, 0x6, 0x401, 0x4, 0x7, 0x4, 0x7, 0x3ea, 0x1000, 0xffff4e7a, 0x23, 0x7, 0x6a8, 0x20000010, 0x5, 0x6, 0xf37, 0x1, 0x5, 0x2, 0x5, 0x4, 0x4, 0x8, 0x3, 0x2, 0x6, 0x0, 0x8, 0x8, 0x5, 0x7, 0x400, 0x800, 0x4, 0x729, 0x0, 0x0, 0x100, 0x9, 0x5, 0xe, 0x2, 0x9, 0x10001, 0x6, 0x8000, 0x10000, 0xb, 0x1, 0x6, 0x10001, 0x8, 0x2, 0xee, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xd8f, 0x80000000, 0x2, 0x401, 0xf, 0xcf, 0x5, 0x1, 0x71a8, 0x7fffffff, 0x7ff, 0x5, 0x6f, 0x7, 0x8, 0xffffff40, 0x254b, 0xc4f, 0x8000, 0x9, 0x744d, 0x6, 0xad1, 0x10, 0x11, 0x10, 0x7, 0xc2, 0x2, 0x2, 0x3, 0x1, 0x3, 0xf73b, 0xa, 0x9, 0x10000, 0x3, 0x2, 0x6, 0x10000, 0x80000000, 0x7, 0x1, 0x1, 0xffffffff, 0xc6e3, 0x9, 0x101000, 0x0, 0x2, 0x6, 0x3c, 0x9, 0x8, 0x3, 0xfffffffc, 0x9, 0x5, 0x2, 0xb4, 0x9, 0x2, 0x48]}]}, @TCA_FLOW_POLICE={0x1014, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x8a51, 0x1, 0x7, 0x3, 0x8, 0xfff, 0x3, 0x3, 0xa, 0x93, 0x4, 0x4, 0x0, 0x1c000, 0x2, 0x6, 0x4, 0x80000001, 0x7, 0xcd6, 0x9, 0x6, 0x0, 0x2, 0x6, 0x6, 0x6336f786, 0xb9c4, 0x7, 0x3, 0x5, 0x79c, 0x200, 0x2, 0x8, 0xd53, 0x13, 0xffffffff, 0x240, 0x9, 0x7, 0xffffff8f, 0xf1, 0x0, 0x68000000, 0x7b, 0x200, 0x80000000, 0x8, 0x10, 0xf8000000, 0x7f80, 0x303, 0x2, 0x5, 0x5, 0xfffffffc, 0x13cc, 0x7ff, 0x4, 0x7, 0x6, 0x1, 0x4000000, 0x81, 0x2, 0x2, 0x49fa, 0xfd8d, 0x9, 0x3, 0x7, 0xc20c, 0xe2f, 0xa2, 0x5, 0x0, 0x3, 0x2, 0x0, 0x9, 0x5, 0x3fbe, 0x9, 0x1, 0x7, 0x2, 0x400, 0x8000, 0x0, 0xff, 0x3, 0x8, 0x400, 0x4, 0xffffcd11, 0xf33, 0x0, 0x800, 0xa, 0x39, 0x7, 0x9, 0x9, 0x7f, 0x101, 0xc00, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xffff, 0x9, 0x2, 0x10000, 0x4ba, 0x7fffffff, 0xcf1, 0x400, 0xd, 0x800, 0x9, 0x5, 0x8c3, 0x2, 0x3212, 0x4, 0x0, 0x8, 0x2, 0x9, 0x2, 0x80000000, 0x1, 0x5a, 0x72a8, 0xf000000, 0x0, 0x7, 0xfffffeff, 0xf, 0x6, 0x9, 0x7, 0x6, 0x6, 0x102, 0x0, 0x3, 0xe, 0x6, 0x4, 0x5, 0x7, 0x7fc0, 0x5, 0x9, 0xc0, 0x5, 0x0, 0x3, 0x8, 0xbf728e3, 0xca, 0x400, 0xa, 0x8, 0xb4, 0xa, 0xa1f, 0x400, 0x9, 0x1ff, 0x4, 0x40, 0x3, 0xfffffffa, 0x1000000, 0x5, 0x5, 0x2, 0xe, 0x3, 0x6, 0xffffffff, 0x1, 0xf60, 0xe, 0x5, 0x7, 0xfffffffc, 0x0, 0xc89, 0x2, 0x6, 0x9, 0x1, 0x10000, 0x95f1, 0x6, 0x4, 0x8, 0x8000, 0x7, 0x6, 0x116, 0x3, 0xb8, 0x80000000, 0x3, 0x7, 0x7, 0x9, 0xfffffe00, 0xbde, 0x8, 0xdd000000, 0x4, 0x8, 0x4, 0x40, 0x7, 0x32, 0x0, 0xa7ef, 0x800, 0xb5, 0xce, 0x8, 0x8, 0x9, 0x2, 0x1, 0x800, 0x9, 0x4, 0x2, 0x1ff, 0xd, 0x4, 0x37, 0x5, 0x696b, 0x1967, 0x76, 0x9, 0x9c, 0xf4, 0xfff, 0x6, 0x2, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3f3, 0x80000000, 0xfc2, 0x0, 0xf, 0x6000, 0x8001, 0x111a, 0x2, 0x9, 0x5, 0x0, 0x800, 0xa0, 0xb, 0x6d1, 0x3, 0x9, 0x0, 0x9902, 0x6, 0x10d7022d, 0x20eb15d5, 0xfffffb97, 0x4, 0x17, 0x51, 0x6c, 0x10, 0x0, 0x9, 0xb990, 0x8000, 0x2aa9, 0x5, 0x5, 0x5, 0x78, 0xffffded0, 0x8, 0x6, 0xfffffffe, 0xfffffffa, 0xe000000, 0x2, 0x800, 0x6, 0x3, 0x7, 0x1, 0x6, 0x80, 0x6, 0x43, 0x9, 0x3ff, 0x4, 0x200, 0x5a3, 0x5, 0x0, 0x2, 0x0, 0x6e900, 0x9, 0x0, 0xffff8000, 0x7ff, 0x3, 0x2, 0xfffffff7, 0x7, 0x5, 0x3, 0x101, 0x8b, 0x7fffffff, 0x5, 0xe, 0x80, 0xcd, 0xffffffff, 0x80000000, 0x9, 0x4, 0x3, 0x18000000, 0x4, 0x9, 0x3, 0x5, 0x6, 0x4, 0x5, 0x4, 0x6, 0x1, 0xffffffff, 0xd3e, 0x4a, 0x8, 0x9, 0x8001, 0x34fa, 0x0, 0x4, 0x3, 0x800, 0x6, 0x5bfb0197, 0x5, 0x6, 0x5, 0xfffffff8, 0x8, 0x7, 0xbf, 0x4, 0x5, 0x3, 0x9, 0xc, 0xfffffd7c, 0x3, 0x1, 0x8bd0, 0xfff, 0xf61f, 0x2, 0xfffffffb, 0x7, 0x8, 0x6, 0xfffffff8, 0x1, 0x6, 0x66, 0x7578, 0xf4, 0x21, 0x2, 0x4, 0x8, 0x1, 0x100, 0x8, 0x800, 0xa, 0x4, 0x80000000, 0x8, 0x6, 0x8, 0x8, 0x7f, 0x0, 0x3, 0x6, 0x2, 0xffff, 0xfffffff6, 0x8, 0x3ff, 0x1, 0x9, 0x4, 0x3, 0x1, 0x5, 0x4, 0x4, 0x95, 0x7ff, 0x7, 0x6, 0x200, 0xfe9, 0x7, 0x5, 0x10000, 0x1, 0xa7, 0xb, 0x6, 0x99, 0x94b, 0x6, 0x6, 0x95b, 0x1, 0x0, 0x7, 0x6, 0x9, 0x5, 0x0, 0x0, 0x5, 0x480, 0x4, 0x5, 0x3ff, 0x1, 0x6, 0x7, 0x7, 0x50c, 0x6, 0xd, 0x0, 0x3, 0x3, 0x8, 0x3e94d338, 0xffff, 0x80000000, 0x4, 0x0, 0x5, 0x7, 0x401, 0x4, 0x4, 0x8874, 0x9, 0x1, 0x0, 0x7ff, 0x8, 0x4, 0xf, 0x9, 0x3, 0x3, 0x0, 0x9, 0x4, 0x0, 0x80000001, 0x0, 0xffff, 0xfffffffc, 0xf, 0xd3, 0x10, 0x10001, 0x200, 0x800, 0x800, 0x400, 0x7, 0x5, 0x1, 0x2a, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffffffd, 0x2, 0x0, 0x5, 0x9, 0x5, 0x6, 0xfffffff8, 0x6, 0x2, 0x1, 0x13, 0x7f, 0x0, 0x7fffffff, 0x8001, 0xaa, 0xb422, 0x5, 0x9, 0x885, 0xffffffff, 0x4, 0x5, 0xe870, 0x63bc, 0xa6, 0x4, 0x5, 0xcf, 0x7fffffff, 0x10, 0x9, 0x0, 0x3, 0x9, 0x7, 0x2, 0x6, 0x6, 0x6, 0x4, 0x80000001, 0x3, 0xfffffbff, 0x6, 0x7fff, 0x4, 0x1705ba6e, 0x4, 0x8, 0x6, 0x4, 0x800, 0x3, 0x8, 0x0, 0x0, 0x81, 0x8, 0x919, 0xffff, 0x0, 0x9, 0xffffffff, 0x7, 0x7, 0x2, 0x790, 0x0, 0x95e, 0x1, 0xfffffffb, 0xb, 0x0, 0x7a64, 0xbf16, 0x5, 0x2, 0xe6d, 0x0, 0x2, 0x8, 0xe, 0x0, 0x10000, 0x553, 0x5, 0x2, 0x3d5, 0xc, 0xffff, 0x1, 0x8, 0x7, 0x2, 0x6, 0x5ddcff5, 0x6, 0x80000000, 0x1, 0x9, 0x7, 0xc333, 0x5, 0x9, 0x9, 0xffff, 0x3ff, 0x8, 0xfffffff3, 0x6, 0x9, 0x200, 0x7f, 0x2, 0x9, 0x1, 0xf0, 0x1, 0x4, 0x7f, 0xf9, 0x8, 0x10000000, 0x1, 0x6, 0x1000, 0x6, 0x4, 0xc6d, 0x7, 0x7ff, 0x7, 0x180, 0x8, 0xfffffffe, 0x0, 0x2, 0x8, 0x2, 0x8, 0x3, 0x3, 0x1, 0x9, 0x4, 0x2, 0x101, 0xfff, 0xbd0d, 0x27f3, 0x5, 0x8, 0xb0e, 0x400, 0x100, 0x400, 0x3, 0x7fffffff, 0x6, 0x7, 0x9, 0x8, 0x6e1, 0x790c, 0x7ff, 0x80000000, 0x7, 0x7, 0x7fff, 0x5, 0xfffffff7, 0x0, 0x10, 0x9, 0xd96, 0x50, 0x1, 0x6, 0x4, 0x37, 0xfffffffc, 0x6, 0x7, 0x9, 0x690, 0x3ff, 0x2, 0xff, 0x0, 0x0, 0x3, 0x400, 0x7, 0x0, 0xff, 0x2, 0x1, 0x1ff, 0x8, 0x7, 0xb58a, 0x8, 0x9, 0x5, 0x9c, 0xfffffeff, 0x9, 0x6, 0x8, 0x9, 0x0, 0x9, 0xe, 0x2, 0x5, 0x0, 0x7, 0x8, 0x7, 0x2, 0xfffff520, 0x1, 0xb3a, 0x40400000, 0xe9f77feb, 0x0, 0xcd, 0x9, 0x3, 0x5, 0x800, 0x8, 0x0, 0xffff, 0xc, 0x5, 0x3, 0x9, 0xffffff3b, 0x3, 0x43, 0x1, 0x9, 0x1, 0x9, 0x6, 0x5, 0x4, 0xf, 0x8000, 0x800, 0xe9f, 0xba6c]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5d, 0x4, 0x0, 0xbf, 0x3, 0x7, 0xb35, 0x0, 0x7f, 0x16f8, 0x1, 0x800, 0xb, 0x3, 0x2, 0x3, 0x4, 0x7, 0x4, 0x9, 0x5, 0xc31f, 0x1ff, 0x4, 0x3, 0x3ff, 0x0, 0x7, 0x2, 0x7, 0x1, 0x6, 0xb, 0x7, 0x78, 0x417, 0x1, 0x10, 0x5, 0xa, 0x7, 0x692, 0x2, 0x8001, 0x0, 0x5, 0x4, 0xf, 0x9, 0x9, 0x1, 0x16, 0x3, 0x5, 0x7, 0xe, 0x9, 0x6, 0x2, 0x2, 0x6, 0x3, 0x9, 0x3, 0x8, 0x6, 0x800, 0x0, 0x4, 0x2, 0x7ba, 0x10, 0x3, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, 0x4, 0x7442, 0x6, 0x9, 0x4, 0x0, 0x309, 0xfffffeb3, 0xabc, 0x9, 0x3, 0x3, 0x6, 0x996, 0x0, 0x1, 0x0, 0x40, 0x7, 0x9, 0x17, 0x1e000000, 0x1c, 0x633, 0x0, 0x1ff, 0x8, 0x7f, 0x3, 0x9, 0x5, 0x3, 0x9, 0xffff, 0x6, 0x8001, 0x9, 0x6, 0x8, 0x5, 0x7fff, 0xff, 0xf7a, 0x3, 0xfffffffd, 0x9, 0x3, 0x8, 0x0, 0x8, 0x5, 0x7fffffff, 0x1ff, 0x6, 0x6, 0x11c8, 0x4, 0x6, 0x400, 0x4, 0x1, 0x6af, 0x0, 0x3, 0xa, 0x6, 0x1, 0x515c91eb, 0xb, 0x6, 0x3, 0x1812, 0x8, 0x6, 0x9, 0x3, 0x2, 0x9, 0x4, 0xfffffff0, 0x6, 0xfffffffe, 0x2, 0xffff, 0xd, 0x7ff, 0x1, 0xab, 0x8, 0x9, 0x5, 0x8000, 0x7, 0x3, 0x1, 0x81, 0x2, 0x3, 0x9, 0x8, 0xe8, 0x9, 0x2, 0x10000, 0x9, 0xc2d, 0x0, 0x9, 0x6, 0x1, 0x2a, 0x80000001, 0x6, 0x6, 0xc, 0xc, 0xfffffffe, 0x1, 0xd5b, 0x4800000, 0x7, 0x25, 0x5, 0x10000, 0x8, 0xfffffffa, 0x3, 0xa, 0x3, 0xe, 0xfffffff9, 0x7, 0x0, 0x1af, 0x101, 0xfffffffa, 0x6, 0x9, 0x2, 0x53f9, 0x5, 0x0, 0x3, 0x1, 0x8, 0x1, 0xdf10, 0x529, 0xffff, 0x3, 0x7f, 0x401, 0x7fff, 0x0, 0x38, 0x86e8, 0x9, 0x3, 0xcc0, 0x5, 0xfffffffc, 0xd91, 0xffffffff, 0x3, 0x1000, 0x800, 0xfffffffa, 0x8, 0x8, 0x9, 0x6a, 0x6, 0x2, 0x6, 0x0, 0x3, 0x400, 0x589]}]}]}}]}, 0x1c58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048050}, 0x40e0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r2, 0x0, 0x6}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2m35.118652935s ago: executing program 2 (id=1644): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f00000000c0)=0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async, rerun: 64) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) sendto$inet6(r0, &(0x7f0000000180)="38a6ad34f04f847911e15cd353e93d0e787f5faf8691da45142113832b192228bcff75dff7c9d556e267af9374fb6681c2fa12076531297576e5555fd7fe4dc90d12d713426583f457a3521700cf606f9f87fbcae1b6727d1e26dc7bae42dd4ae417b012a12e86e44155dcb1d2b2d7b9df97e6b589e793cbc01199365c283bc1c5f9c39c2f328f9201277011f6965dad218e8469a6f588ad112c4c1d58faa4dd74adc498d1c3a275aedf7b8b7bfd52c8dc0a81f6aeec347db9301b6c8edbca4db63f0aff5b8d50435fa5a229679cdb95ece9f26670df147402c894aaf514d3150b77b8c7eda5dbfbc20345462c41958fc51d0b7a", 0xf4, 0x40, &(0x7f00000002c0)={0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x3}, 0x1c) connect$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @default, 0x5}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) 2m35.0024692s ago: executing program 2 (id=1647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xc41, 0x2, 0x9, 0x4, 0x100, 0x800}) 2m34.92928636s ago: executing program 2 (id=1649): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000f7ff", @ANYRES16=r1, @ANYBLOB="0100000000000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x6}, @func={0xd, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0]}}, &(0x7f00000002c0)=""/65, 0x37, 0x41, 0x0, 0x401, 0x10000}, 0x28) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x0, r5}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000031ad00000000"], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r15}, &(0x7f0000000280), &(0x7f0000000240)=r12}, 0x20) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r15, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f00000000c0)=r16, 0x4) sendmsg$inet(r14, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m33.941695763s ago: executing program 2 (id=1654): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x10001, 0x0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000000010000000000400f4ffffffffffffff0000000000322f7fa75cc64545c375a29ec24dc6493c8bc52b482cea94deb1e2cc8f2be3070000d2b8881d0fc26f2abca0529dadcbdc7f0ae8eb0c2df65add1e1c3355c47c96c662824320f610d355d0ef99dfa2ab4142359ce56d679a007ea91a2f8b747f79c8139c6a2060cbb7cd8a0c181e95f7e951f756145689c4c2a6a460aee50d83e8adfaf4591cfa8d25e2dccfab0000507721ed197800f66b66f72dfd0428f8b07be066"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000400), 0x1003, r3}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x10, 0x806ad, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x90, 0x1, 0xa, 0x5}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r4], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000640)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000001800000000000080adffc8d603b8b99256969d73be95299f9fa4efd98de440e2045de5bfcba28943e808e0f0912db1c81e2edcae7669a1ca9cba863e8adefac7a02f5313601c8cc8b4baffdb84ac8d38a551cca37e5e410717c70194989f610c2b1da0d93292857dba84c98d79275d77aad5136d90c9f1c0c7", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x60, '\x00', r5, 0x1a, r0, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x2, 0x1cd4, 0xd}, 0x10, 0x14398, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[r0, r1, r1, r6, r3, r0, r8, 0x1, r8, r6, r8, r9], 0x0, 0x10, 0x1a9}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x80049367, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ebf6ffff0000000008000000911191000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x8, '\x00', r5, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=0xffffffffffffffff, @ANYRESHEX, @ANYRESOCT=r8, @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x44049}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$NFC_CMD_FW_DOWNLOAD(r10, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r11, @ANYRES32=0x0, @ANYBLOB="110014004e4c424c5f434950534f76340000000008000100", @ANYRES32=r15, @ANYRESOCT, @ANYRES8=r14, @ANYRES16=r7], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 2m33.666500878s ago: executing program 2 (id=1656): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xffffffcb}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x329}, @TCA_CODEL_ECN={0xffffffe0}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x22a}, @TCA_CODEL_CE_THRESHOLD={0x0, 0x5, 0x5}]}}]}, 0xb3}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0x3f, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bd50c9233deb87bf00"/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2m33.436466877s ago: executing program 2 (id=1659): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_SIOCADDRT(r2, 0xff08, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000040)={@empty, @remote, 0x0}, &(0x7f0000000080)=0xc) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="c7a33173d86b27dde42034283e10c4ff10b35bfc2da6b41e1a6238044f7d41f88297c3ed71b139", 0x27}], 0x1, 0x0, 0x30}, 0x800) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c20000030806000108000604"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x9c, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x92}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x801}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x46fc}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x54d8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c000) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r6, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @loopback, 0x9}}, 0x24) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}, {}, {}, {0xdd86}}}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2cc, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2a0, 0x4, 0x0, 0x1, [{0x29c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x28c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x268, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x254, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x68, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DATA={0x1d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "33ca132472b82cf541f41a4c4b1cc6daf0585fc12ef49786b993be506693d0c736f3fb5e299fb78344e25937ebd4452cecf0835610aa2da0753eff4454eb02b947e05aad94a948b8e9616f0b436530223e1931a3a1d72c83adda9247a191296344cc1bf1e927fa295cdf39e8a64d215d8682e027f4db6a17206f4d6cff1691275a1787b60892e421c3a3cccb1d046a52425f9551e457f73ea4fa27533b8b90e902c8c7dfe7e1d9568f3d35d6fce71fc70260e9d4534489c5c6aac942fa14ad5dc009f395"}, @NFTA_DATA_VALUE={0x70, 0x1, "a4759fe5139228656e1d75196e3ca207e13639602f6253873c58bf7bbed7c783fc98a3e215e91f46938feb9d2386520db3176298bb7552e6cac31c89b827530f5f1849a1fe338027d8928b83a4fa977791bd1c81e54d7b3a002deb5555706418ef67e10cd5b23233a804723a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8047e686f2de4f05}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xf7765b8648986f56}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2f4}}, 0x0) setsockopt$MRT_DEL_MFC(r6, 0x0, 0xcd, &(0x7f0000000400)={@multicast2, @rand_addr=0x64010102, 0x1, "5795b76d5b82f5eb909411909e4a934a28e6efa3ed9ec9ea11e6cd158a78fd68", 0x5, 0x0, 0x10001, 0x7}, 0x3c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffff0b, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 2m27.814479079s ago: executing program 32 (id=1549): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006740)=@newchain={0x1c58, 0x64, 0x0, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x5, 0x7}, {0xc, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c28, 0x2, [@TCA_FLOW_POLICE={0xc10, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x4, 0x401, 0x100, 0x2, 0x6, 0x2, 0xc, 0x9, 0xb9f0945, 0x1, 0x4, 0x6, 0x38, 0x8, 0x9d14, 0x8, 0xff, 0x33, 0x101, 0x0, 0x8, 0x5, 0xffff0001, 0x2, 0x1000, 0x14, 0xfffffff7, 0x9, 0x3fffc, 0xa, 0x7ff, 0x5, 0xb, 0x5, 0xdcb, 0xd7, 0x401, 0x3, 0x580f, 0x1000, 0x0, 0x5, 0x7, 0x29e0, 0x10001, 0x7f, 0x1, 0x46c6, 0x5, 0x4, 0x73a0, 0x2, 0x4, 0x5, 0x9, 0x3ff, 0x8, 0x80000001, 0x10, 0x6, 0x3, 0x80000001, 0x8, 0xffff, 0x6, 0x8, 0x6, 0x7, 0x6, 0x400, 0x0, 0x100, 0x8001, 0x9, 0x1, 0xfffffffb, 0x8, 0x0, 0x9d, 0x8, 0x5e, 0xb31, 0x8, 0x4, 0xff, 0x97, 0x7, 0x8, 0x10, 0x1, 0xc, 0x6, 0x3, 0x40000000, 0xff, 0xb, 0xff, 0x8, 0x3, 0x400, 0x5, 0x0, 0x9d, 0x2, 0xbda6, 0xcc, 0x7, 0xc4c6, 0x1, 0x9, 0x6, 0x2, 0x7, 0xc1b3d865, 0x1, 0x5, 0x2, 0x0, 0x10, 0x13, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x4, 0x8001, 0x10, 0x6, 0x4, 0x2, 0x0, 0x1, 0x7, 0x44, 0x2, 0x9b5, 0xfffffff8, 0x1, 0x9, 0x0, 0xffffffff, 0x9f1, 0x3, 0x4, 0xb05, 0x1, 0xbc39, 0x8, 0x6, 0x5, 0xa, 0x3, 0x2b6, 0x0, 0x6, 0x1800, 0x8000, 0x1, 0xff, 0x3a5, 0x4, 0x1a, 0x6, 0x401, 0x1000, 0x9, 0x9, 0x5, 0x9, 0xa, 0x2, 0x5, 0x3, 0x9, 0x4, 0x9367, 0x0, 0x0, 0x1, 0x2, 0xfffffffc, 0x1, 0x400, 0x2d6, 0xfff, 0xf6, 0x6, 0x7, 0x5, 0x4, 0x2, 0x4, 0x2, 0x21e2, 0x8, 0x2, 0x10000, 0x800, 0x4, 0x7178, 0x0, 0x0, 0x3e, 0x1, 0x3, 0x9, 0x8, 0xa24, 0x1, 0x0, 0x0, 0xe, 0x0, 0xfffffffd, 0x1, 0x10001, 0x6, 0x3, 0x7, 0x2, 0x4, 0x0, 0xaa31, 0xcd32, 0x2, 0x6, 0xfff, 0x70, 0x4, 0x6, 0x0, 0x3, 0x8e9, 0x6, 0x3, 0x3, 0x4fba, 0x5, 0x1, 0x401, 0x0, 0x7, 0x4e, 0x8, 0x1, 0x8000, 0x2, 0x40, 0x5, 0xbc, 0x0, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0x1, 0x6, 0x0, 0x2, 0xff, 0x5, 0x40000000, 0x7f, 0x0, 0x4, 0x8, 0x5, 0x6, 0x9, 0x3b, 0x4, 0x82a, 0x10, 0x2, 0x6, 0x1ff, 0xa6, 0x400, 0x5, 0x6, 0x4, 0xffff8000, 0x8001, 0x408c2ae0, 0x2, 0x8, 0xffff, 0x8001, 0x1, 0x9, 0x7b8b87bf, 0x946, 0xaa28, 0x80, 0xa, 0x3, 0x6, 0x6, 0x2, 0xac02, 0x1, 0x4, 0x7, 0x5, 0x6, 0x466, 0x7, 0x3, 0x2, 0x401, 0x3, 0x5, 0xfffffff8, 0xd702, 0xf, 0x8, 0xcb4, 0x100, 0x0, 0x13a, 0x6, 0x6, 0x6, 0x58ce, 0xe02, 0x5, 0x3, 0x5, 0x6, 0x29, 0x0, 0x400, 0x2b11, 0x81, 0x0, 0x7f, 0x10, 0x6, 0x800, 0x7487, 0x1, 0x2, 0x8, 0x0, 0x2, 0x4, 0x5, 0x3, 0x2, 0x7ff, 0x3, 0xe, 0xe, 0x401, 0x4, 0xcb, 0x9, 0x100, 0x10, 0x2, 0x40, 0x5, 0x6, 0xf, 0x0, 0x3, 0x1e22, 0x3, 0x0, 0x7, 0x12dbe0, 0x726, 0x2, 0x8, 0xf8, 0x1, 0x6, 0x7, 0x4, 0x30, 0xffffff2f, 0x0, 0xb6be, 0x5, 0x7, 0xb69b, 0x5, 0x8000, 0xc, 0x5, 0x483, 0x80, 0x30, 0x3, 0x65, 0xff, 0x4, 0x7, 0x59, 0x7, 0x0, 0x40, 0xfffffffa, 0x0, 0x431, 0x4, 0x7, 0x4, 0x6, 0xd, 0x7b2b, 0xf, 0x3, 0x200, 0x9, 0x5, 0x7, 0x9, 0x0, 0x3ff, 0x0, 0xfffffff2, 0x8001, 0xffffff7f, 0x8, 0x2, 0x0, 0x8, 0x0, 0xffff7be8, 0x8, 0xa300, 0xe, 0x2, 0xfffffffd, 0x9, 0x101, 0x4, 0x54, 0x5, 0x6e, 0x6fd4, 0x398d1d17, 0x0, 0x8, 0x3, 0x7, 0x4, 0x8000, 0x0, 0xab9a, 0x9, 0x1, 0x2, 0x4, 0x6, 0x14000, 0x1, 0x9, 0x0, 0xe8000000, 0x4, 0x81, 0x3, 0x5b9, 0xb, 0x3ff, 0xefde, 0x68c, 0x9, 0x3, 0xcf, 0x2, 0x9c7a, 0x7, 0x2, 0x6000000, 0x0, 0x55b8, 0xb, 0x9, 0xd, 0x1, 0x401, 0x100, 0x1000, 0x7, 0x5, 0x4, 0xffffffff, 0x5, 0x800, 0x7fffffff, 0x10000, 0xfffffff7, 0x0, 0x8, 0x6, 0x7, 0xffff509b, 0xfffffff8, 0x7, 0x2, 0x8, 0x2, 0x6240, 0xfff, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x358, 0x0, 0x7106, 0x80000000, 0xb, 0x5, 0x3, 0xb, 0xfffffff9, 0x1, 0x2, 0x2, 0x5, 0x6d0, 0x3, 0x0, 0x6, 0x0, 0x5, 0x400, 0x4, 0x6, 0x1, 0x7fffffff, 0x6, 0x5, 0x800, 0x8, 0x0, 0x4, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x1, 0x2, 0x0, 0x70200000, 0x4, 0x8, 0xe, 0x1, 0x1, 0x6, 0x1ff, 0x80000001, 0x1, 0x4, 0x9, 0x0, 0x8001, 0x65, 0x1ff, 0x8, 0x7, 0x3, 0x3, 0x7, 0x4, 0x1, 0x929, 0x8, 0x4aa, 0x3d8056eb, 0xff, 0x8, 0xfffeffff, 0x4, 0x0, 0x9, 0x9, 0x8, 0x1, 0x10001, 0xfffffc01, 0x800, 0x1, 0x3, 0x4, 0x47c2, 0x0, 0x80000001, 0xfffffff7, 0x200, 0x5, 0x7, 0x0, 0xf9da, 0x7f34, 0x81, 0x7c, 0x6, 0x8, 0x9, 0x6, 0x9, 0x3, 0x9, 0x74c, 0x7ff, 0x2e, 0x5, 0x2, 0x9, 0x7, 0x9, 0x40, 0x400, 0xe769, 0x4, 0x0, 0x80, 0x5, 0x100, 0x7ff, 0x9, 0x4, 0x0, 0x8, 0x4, 0x2, 0xfffffffd, 0x10001, 0x14000, 0x0, 0x10001, 0x4, 0x40, 0xffffffff, 0x7fffffff, 0x6, 0x401, 0x4, 0x7, 0x4, 0x7, 0x3ea, 0x1000, 0xffff4e7a, 0x23, 0x7, 0x6a8, 0x20000010, 0x5, 0x6, 0xf37, 0x1, 0x5, 0x2, 0x5, 0x4, 0x4, 0x8, 0x3, 0x2, 0x6, 0x0, 0x8, 0x8, 0x5, 0x7, 0x400, 0x800, 0x4, 0x729, 0x0, 0x0, 0x100, 0x9, 0x5, 0xe, 0x2, 0x9, 0x10001, 0x6, 0x8000, 0x10000, 0xb, 0x1, 0x6, 0x10001, 0x8, 0x2, 0xee, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xd8f, 0x80000000, 0x2, 0x401, 0xf, 0xcf, 0x5, 0x1, 0x71a8, 0x7fffffff, 0x7ff, 0x5, 0x6f, 0x7, 0x8, 0xffffff40, 0x254b, 0xc4f, 0x8000, 0x9, 0x744d, 0x6, 0xad1, 0x10, 0x11, 0x10, 0x7, 0xc2, 0x2, 0x2, 0x3, 0x1, 0x3, 0xf73b, 0xa, 0x9, 0x10000, 0x3, 0x2, 0x6, 0x10000, 0x80000000, 0x7, 0x1, 0x1, 0xffffffff, 0xc6e3, 0x9, 0x101000, 0x0, 0x2, 0x6, 0x3c, 0x9, 0x8, 0x3, 0xfffffffc, 0x9, 0x5, 0x2, 0xb4, 0x9, 0x2, 0x48]}]}, @TCA_FLOW_POLICE={0x1014, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x8a51, 0x1, 0x7, 0x3, 0x8, 0xfff, 0x3, 0x3, 0xa, 0x93, 0x4, 0x4, 0x0, 0x1c000, 0x2, 0x6, 0x4, 0x80000001, 0x7, 0xcd6, 0x9, 0x6, 0x0, 0x2, 0x6, 0x6, 0x6336f786, 0xb9c4, 0x7, 0x3, 0x5, 0x79c, 0x200, 0x2, 0x8, 0xd53, 0x13, 0xffffffff, 0x240, 0x9, 0x7, 0xffffff8f, 0xf1, 0x0, 0x68000000, 0x7b, 0x200, 0x80000000, 0x8, 0x10, 0xf8000000, 0x7f80, 0x303, 0x2, 0x5, 0x5, 0xfffffffc, 0x13cc, 0x7ff, 0x4, 0x7, 0x6, 0x1, 0x4000000, 0x81, 0x2, 0x2, 0x49fa, 0xfd8d, 0x9, 0x3, 0x7, 0xc20c, 0xe2f, 0xa2, 0x5, 0x0, 0x3, 0x2, 0x0, 0x9, 0x5, 0x3fbe, 0x9, 0x1, 0x7, 0x2, 0x400, 0x8000, 0x0, 0xff, 0x3, 0x8, 0x400, 0x4, 0xffffcd11, 0xf33, 0x0, 0x800, 0xa, 0x39, 0x7, 0x9, 0x9, 0x7f, 0x101, 0xc00, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xffff, 0x9, 0x2, 0x10000, 0x4ba, 0x7fffffff, 0xcf1, 0x400, 0xd, 0x800, 0x9, 0x5, 0x8c3, 0x2, 0x3212, 0x4, 0x0, 0x8, 0x2, 0x9, 0x2, 0x80000000, 0x1, 0x5a, 0x72a8, 0xf000000, 0x0, 0x7, 0xfffffeff, 0xf, 0x6, 0x9, 0x7, 0x6, 0x6, 0x102, 0x0, 0x3, 0xe, 0x6, 0x4, 0x5, 0x7, 0x7fc0, 0x5, 0x9, 0xc0, 0x5, 0x0, 0x3, 0x8, 0xbf728e3, 0xca, 0x400, 0xa, 0x8, 0xb4, 0xa, 0xa1f, 0x400, 0x9, 0x1ff, 0x4, 0x40, 0x3, 0xfffffffa, 0x1000000, 0x5, 0x5, 0x2, 0xe, 0x3, 0x6, 0xffffffff, 0x1, 0xf60, 0xe, 0x5, 0x7, 0xfffffffc, 0x0, 0xc89, 0x2, 0x6, 0x9, 0x1, 0x10000, 0x95f1, 0x6, 0x4, 0x8, 0x8000, 0x7, 0x6, 0x116, 0x3, 0xb8, 0x80000000, 0x3, 0x7, 0x7, 0x9, 0xfffffe00, 0xbde, 0x8, 0xdd000000, 0x4, 0x8, 0x4, 0x40, 0x7, 0x32, 0x0, 0xa7ef, 0x800, 0xb5, 0xce, 0x8, 0x8, 0x9, 0x2, 0x1, 0x800, 0x9, 0x4, 0x2, 0x1ff, 0xd, 0x4, 0x37, 0x5, 0x696b, 0x1967, 0x76, 0x9, 0x9c, 0xf4, 0xfff, 0x6, 0x2, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3f3, 0x80000000, 0xfc2, 0x0, 0xf, 0x6000, 0x8001, 0x111a, 0x2, 0x9, 0x5, 0x0, 0x800, 0xa0, 0xb, 0x6d1, 0x3, 0x9, 0x0, 0x9902, 0x6, 0x10d7022d, 0x20eb15d5, 0xfffffb97, 0x4, 0x17, 0x51, 0x6c, 0x10, 0x0, 0x9, 0xb990, 0x8000, 0x2aa9, 0x5, 0x5, 0x5, 0x78, 0xffffded0, 0x8, 0x6, 0xfffffffe, 0xfffffffa, 0xe000000, 0x2, 0x800, 0x6, 0x3, 0x7, 0x1, 0x6, 0x80, 0x6, 0x43, 0x9, 0x3ff, 0x4, 0x200, 0x5a3, 0x5, 0x0, 0x2, 0x0, 0x6e900, 0x9, 0x0, 0xffff8000, 0x7ff, 0x3, 0x2, 0xfffffff7, 0x7, 0x5, 0x3, 0x101, 0x8b, 0x7fffffff, 0x5, 0xe, 0x80, 0xcd, 0xffffffff, 0x80000000, 0x9, 0x4, 0x3, 0x18000000, 0x4, 0x9, 0x3, 0x5, 0x6, 0x4, 0x5, 0x4, 0x6, 0x1, 0xffffffff, 0xd3e, 0x4a, 0x8, 0x9, 0x8001, 0x34fa, 0x0, 0x4, 0x3, 0x800, 0x6, 0x5bfb0197, 0x5, 0x6, 0x5, 0xfffffff8, 0x8, 0x7, 0xbf, 0x4, 0x5, 0x3, 0x9, 0xc, 0xfffffd7c, 0x3, 0x1, 0x8bd0, 0xfff, 0xf61f, 0x2, 0xfffffffb, 0x7, 0x8, 0x6, 0xfffffff8, 0x1, 0x6, 0x66, 0x7578, 0xf4, 0x21, 0x2, 0x4, 0x8, 0x1, 0x100, 0x8, 0x800, 0xa, 0x4, 0x80000000, 0x8, 0x6, 0x8, 0x8, 0x7f, 0x0, 0x3, 0x6, 0x2, 0xffff, 0xfffffff6, 0x8, 0x3ff, 0x1, 0x9, 0x4, 0x3, 0x1, 0x5, 0x4, 0x4, 0x95, 0x7ff, 0x7, 0x6, 0x200, 0xfe9, 0x7, 0x5, 0x10000, 0x1, 0xa7, 0xb, 0x6, 0x99, 0x94b, 0x6, 0x6, 0x95b, 0x1, 0x0, 0x7, 0x6, 0x9, 0x5, 0x0, 0x0, 0x5, 0x480, 0x4, 0x5, 0x3ff, 0x1, 0x6, 0x7, 0x7, 0x50c, 0x6, 0xd, 0x0, 0x3, 0x3, 0x8, 0x3e94d338, 0xffff, 0x80000000, 0x4, 0x0, 0x5, 0x7, 0x401, 0x4, 0x4, 0x8874, 0x9, 0x1, 0x0, 0x7ff, 0x8, 0x4, 0xf, 0x9, 0x3, 0x3, 0x0, 0x9, 0x4, 0x0, 0x80000001, 0x0, 0xffff, 0xfffffffc, 0xf, 0xd3, 0x10, 0x10001, 0x200, 0x800, 0x800, 0x400, 0x7, 0x5, 0x1, 0x2a, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffffffd, 0x2, 0x0, 0x5, 0x9, 0x5, 0x6, 0xfffffff8, 0x6, 0x2, 0x1, 0x13, 0x7f, 0x0, 0x7fffffff, 0x8001, 0xaa, 0xb422, 0x5, 0x9, 0x885, 0xffffffff, 0x4, 0x5, 0xe870, 0x63bc, 0xa6, 0x4, 0x5, 0xcf, 0x7fffffff, 0x10, 0x9, 0x0, 0x3, 0x9, 0x7, 0x2, 0x6, 0x6, 0x6, 0x4, 0x80000001, 0x3, 0xfffffbff, 0x6, 0x7fff, 0x4, 0x1705ba6e, 0x4, 0x8, 0x6, 0x4, 0x800, 0x3, 0x8, 0x0, 0x0, 0x81, 0x8, 0x919, 0xffff, 0x0, 0x9, 0xffffffff, 0x7, 0x7, 0x2, 0x790, 0x0, 0x95e, 0x1, 0xfffffffb, 0xb, 0x0, 0x7a64, 0xbf16, 0x5, 0x2, 0xe6d, 0x0, 0x2, 0x8, 0xe, 0x0, 0x10000, 0x553, 0x5, 0x2, 0x3d5, 0xc, 0xffff, 0x1, 0x8, 0x7, 0x2, 0x6, 0x5ddcff5, 0x6, 0x80000000, 0x1, 0x9, 0x7, 0xc333, 0x5, 0x9, 0x9, 0xffff, 0x3ff, 0x8, 0xfffffff3, 0x6, 0x9, 0x200, 0x7f, 0x2, 0x9, 0x1, 0xf0, 0x1, 0x4, 0x7f, 0xf9, 0x8, 0x10000000, 0x1, 0x6, 0x1000, 0x6, 0x4, 0xc6d, 0x7, 0x7ff, 0x7, 0x180, 0x8, 0xfffffffe, 0x0, 0x2, 0x8, 0x2, 0x8, 0x3, 0x3, 0x1, 0x9, 0x4, 0x2, 0x101, 0xfff, 0xbd0d, 0x27f3, 0x5, 0x8, 0xb0e, 0x400, 0x100, 0x400, 0x3, 0x7fffffff, 0x6, 0x7, 0x9, 0x8, 0x6e1, 0x790c, 0x7ff, 0x80000000, 0x7, 0x7, 0x7fff, 0x5, 0xfffffff7, 0x0, 0x10, 0x9, 0xd96, 0x50, 0x1, 0x6, 0x4, 0x37, 0xfffffffc, 0x6, 0x7, 0x9, 0x690, 0x3ff, 0x2, 0xff, 0x0, 0x0, 0x3, 0x400, 0x7, 0x0, 0xff, 0x2, 0x1, 0x1ff, 0x8, 0x7, 0xb58a, 0x8, 0x9, 0x5, 0x9c, 0xfffffeff, 0x9, 0x6, 0x8, 0x9, 0x0, 0x9, 0xe, 0x2, 0x5, 0x0, 0x7, 0x8, 0x7, 0x2, 0xfffff520, 0x1, 0xb3a, 0x40400000, 0xe9f77feb, 0x0, 0xcd, 0x9, 0x3, 0x5, 0x800, 0x8, 0x0, 0xffff, 0xc, 0x5, 0x3, 0x9, 0xffffff3b, 0x3, 0x43, 0x1, 0x9, 0x1, 0x9, 0x6, 0x5, 0x4, 0xf, 0x8000, 0x800, 0xe9f, 0xba6c]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5d, 0x4, 0x0, 0xbf, 0x3, 0x7, 0xb35, 0x0, 0x7f, 0x16f8, 0x1, 0x800, 0xb, 0x3, 0x2, 0x3, 0x4, 0x7, 0x4, 0x9, 0x5, 0xc31f, 0x1ff, 0x4, 0x3, 0x3ff, 0x0, 0x7, 0x2, 0x7, 0x1, 0x6, 0xb, 0x7, 0x78, 0x417, 0x1, 0x10, 0x5, 0xa, 0x7, 0x692, 0x2, 0x8001, 0x0, 0x5, 0x4, 0xf, 0x9, 0x9, 0x1, 0x16, 0x3, 0x5, 0x7, 0xe, 0x9, 0x6, 0x2, 0x2, 0x6, 0x3, 0x9, 0x3, 0x8, 0x6, 0x800, 0x0, 0x4, 0x2, 0x7ba, 0x10, 0x3, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, 0x4, 0x7442, 0x6, 0x9, 0x4, 0x0, 0x309, 0xfffffeb3, 0xabc, 0x9, 0x3, 0x3, 0x6, 0x996, 0x0, 0x1, 0x0, 0x40, 0x7, 0x9, 0x17, 0x1e000000, 0x1c, 0x633, 0x0, 0x1ff, 0x8, 0x7f, 0x3, 0x9, 0x5, 0x3, 0x9, 0xffff, 0x6, 0x8001, 0x9, 0x6, 0x8, 0x5, 0x7fff, 0xff, 0xf7a, 0x3, 0xfffffffd, 0x9, 0x3, 0x8, 0x0, 0x8, 0x5, 0x7fffffff, 0x1ff, 0x6, 0x6, 0x11c8, 0x4, 0x6, 0x400, 0x4, 0x1, 0x6af, 0x0, 0x3, 0xa, 0x6, 0x1, 0x515c91eb, 0xb, 0x6, 0x3, 0x1812, 0x8, 0x6, 0x9, 0x3, 0x2, 0x9, 0x4, 0xfffffff0, 0x6, 0xfffffffe, 0x2, 0xffff, 0xd, 0x7ff, 0x1, 0xab, 0x8, 0x9, 0x5, 0x8000, 0x7, 0x3, 0x1, 0x81, 0x2, 0x3, 0x9, 0x8, 0xe8, 0x9, 0x2, 0x10000, 0x9, 0xc2d, 0x0, 0x9, 0x6, 0x1, 0x2a, 0x80000001, 0x6, 0x6, 0xc, 0xc, 0xfffffffe, 0x1, 0xd5b, 0x4800000, 0x7, 0x25, 0x5, 0x10000, 0x8, 0xfffffffa, 0x3, 0xa, 0x3, 0xe, 0xfffffff9, 0x7, 0x0, 0x1af, 0x101, 0xfffffffa, 0x6, 0x9, 0x2, 0x53f9, 0x5, 0x0, 0x3, 0x1, 0x8, 0x1, 0xdf10, 0x529, 0xffff, 0x3, 0x7f, 0x401, 0x7fff, 0x0, 0x38, 0x86e8, 0x9, 0x3, 0xcc0, 0x5, 0xfffffffc, 0xd91, 0xffffffff, 0x3, 0x1000, 0x800, 0xfffffffa, 0x8, 0x8, 0x9, 0x6a, 0x6, 0x2, 0x6, 0x0, 0x3, 0x400, 0x589]}]}]}}]}, 0x1c58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048050}, 0x40e0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r2, 0x0, 0x6}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2m18.397353089s ago: executing program 33 (id=1659): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_SIOCADDRT(r2, 0xff08, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000040)={@empty, @remote, 0x0}, &(0x7f0000000080)=0xc) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="c7a33173d86b27dde42034283e10c4ff10b35bfc2da6b41e1a6238044f7d41f88297c3ed71b139", 0x27}], 0x1, 0x0, 0x30}, 0x800) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c20000030806000108000604"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x9c, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x92}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x801}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x46fc}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x54d8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c000) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r6, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @loopback, 0x9}}, 0x24) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}, {}, {}, {0xdd86}}}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2cc, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2a0, 0x4, 0x0, 0x1, [{0x29c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x28c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x268, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x254, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x68, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DATA={0x1d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "33ca132472b82cf541f41a4c4b1cc6daf0585fc12ef49786b993be506693d0c736f3fb5e299fb78344e25937ebd4452cecf0835610aa2da0753eff4454eb02b947e05aad94a948b8e9616f0b436530223e1931a3a1d72c83adda9247a191296344cc1bf1e927fa295cdf39e8a64d215d8682e027f4db6a17206f4d6cff1691275a1787b60892e421c3a3cccb1d046a52425f9551e457f73ea4fa27533b8b90e902c8c7dfe7e1d9568f3d35d6fce71fc70260e9d4534489c5c6aac942fa14ad5dc009f395"}, @NFTA_DATA_VALUE={0x70, 0x1, "a4759fe5139228656e1d75196e3ca207e13639602f6253873c58bf7bbed7c783fc98a3e215e91f46938feb9d2386520db3176298bb7552e6cac31c89b827530f5f1849a1fe338027d8928b83a4fa977791bd1c81e54d7b3a002deb5555706418ef67e10cd5b23233a804723a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8047e686f2de4f05}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xf7765b8648986f56}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2f4}}, 0x0) setsockopt$MRT_DEL_MFC(r6, 0x0, 0xcd, &(0x7f0000000400)={@multicast2, @rand_addr=0x64010102, 0x1, "5795b76d5b82f5eb909411909e4a934a28e6efa3ed9ec9ea11e6cd158a78fd68", 0x5, 0x0, 0x10001, 0x7}, 0x3c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffff0b, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 7.777514696s ago: executing program 4 (id=2800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24000081}, 0x20000801) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x38}}, 0x80) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x5, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x8, 0xb}, {0xffe0, 0x14}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x14}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004064}, 0x4008000) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0), 0x0, 0x88) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000ca00000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$netlink(0x10, 0x3, 0xa) sendfile(r10, r11, &(0x7f0000000000)=0x8a4e, 0x0) 7.427633973s ago: executing program 5 (id=2803): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x6000000}, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) (async) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) unshare(0x6a040000) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x34, 0x20, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0xd20a, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000005) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x800, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 7.13495996s ago: executing program 4 (id=2804): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r14 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) r15 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r15, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="dbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 6.902365671s ago: executing program 4 (id=2806): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty=0xac1414aa}, "b00000000018276c"}}}}}, 0x0) r1 = socket$inet(0x2, 0x4, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000018c0)={'sit0\x00', &(0x7f0000001840)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x6, 0xffff0169, {{0xc, 0x4, 0x2, 0x20, 0x30, 0x68, 0x0, 0x69, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0x1b, 0x51, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @empty]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001900)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1f, r4}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x66, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) sendmsg$inet(r0, &(0x7f0000001800)={&(0x7f00000004c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000500)="511ab9a710d9b3cb980beddae162dee242fb9518e7e6dcfa256c517ff7a2f1be80c22b5e389991caa08ca837071e3f3ad423209e5a5b03fa5f46a6de492d42df91709d5ba4d78906578b1db92f7b3adcff309549ab095859296a4e28d47cb3aaeb8a1ab4b19a68cdc54d9a3d8c23da91c2c292d3351c4b5ce0245be26499ee88d30991d5544c9a906fdf5c296773b485602e134e29391e9f4ef2153a5fef4c660d9e4b8cf76f4a797f35af5ae049bb359b56755f3075154e9fb0fdcdfb42dd2588d2029311177a3a3db9a4c080bb934e154fafd6c335ffc80dc0e52cfe216984e7b5bd", 0xe3}, {&(0x7f0000000600)="9500f6711b69129a6d843d824322cd2f07804f6cf66f31a70b50eacc1c4a7571489c5fd23749745c96a2afb2f18f8c6d93b223ae56f433cb642d929d397207a43c9d27ea7d938003171284a8bd281a60e7429748851783292f6a2ba0e9246a89a594f024b887", 0x66}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="77ba2ec47429f1c38ec8b8a97c1a4fec3a944361ac1e03ba70b9b40d9c3a5e0a14c302e403c20fb9991037b5e957d5bd21839acbae216d4e39a02aa3544e501e5ee6196d90a70d1175", 0x49}, {&(0x7f0000001700)="30af88d1e110572efac80a9d1e807ce6e5a47863022eb78a660bbc245e26fde9868f482491564a29bd3ee0d504487ee7a07525e125b3b6944327daa145a41f2676240b81aa7cc014d0740dd6cfd4b38e8ef9946497de3d319443e30c2136c1f681b2a8ded88d823f692a44cb", 0x6c}], 0x5}, 0x4008000) r6 = socket(0x10, 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x248, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0x0, 0xff000000, 0xffffff00], [0xff000000, 0xff000000, 0xff, 0xff000000], 'vlan1\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x32, 0x5, 0x0, 0xe0}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xda, 0x28, "7eed4936aa4d30a2095b240a155fa6367f2f5307ae868132f9cf35b6ae43"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x25f}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xffffff00, 0xff000000, 0x7fffffff, 0xffffffff], 0x4e23, 0x4e21, 0x4e20, 0x4e24, 0x9, 0x5, 0x0, 0xfffffff8, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x50, 0x11, 0x2, 0x67, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x700, 0x40, 0x7, 0x3ff}}) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000000480)={0x6, 0x9, 0x3, 0x8a3, 0x5}) 6.656977583s ago: executing program 4 (id=2809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000030000004000000008000000400000007c71098aa64ea88312a4edbb3ba97be83685ff61fbb303e0d1", @ANYRESHEX=r0, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000920900000000000000001700000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x76) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a001000000000000000000006001d000000000005001b0001"], 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffe85, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000040)=0xc, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=r9, @ANYRES32=r10, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r10, @ANYBLOB="010000000000006eea7d8e00", @ANYRES32=r10, @ANYBLOB="2ecc3841285ccfc0f1a424465c8136a49e90a848a35f2dd23dc3187c89859d5f96bf72"], 0x50}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 3.407674223s ago: executing program 6 (id=2819): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x16, 0x4, 0x8, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c000100f600000000000000140003"], 0x114}], 0x1}, 0x0) 3.298743339s ago: executing program 4 (id=2820): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x2, 0x1, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000000)=[{&(0x7f0000000380)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x1, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000042c0)=ANY=[@ANYBLOB="ec050000", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf254a0000000800010067000000080003", @ANYRES32=0x0, @ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x20020080}, 0x20004004) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x421, 0x204, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x2e92}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x48}}, 0xc080) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) r11 = socket(0xa, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r12, 0x0, 0x40, &(0x7f0000002440)={'nat\x00', 0x0, [0x632, 0x9, 0x7fff, 0x80008000, 0x4]}, &(0x7f00000003c0)=0x54) sendmsg$inet_sctp(r11, &(0x7f0000000140)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) 3.049358508s ago: executing program 6 (id=2823): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 2.706927841s ago: executing program 6 (id=2827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2.597891323s ago: executing program 6 (id=2828): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r1, 0x0) unshare(0x6a040000) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendto$inet6(r3, &(0x7f0000001240)="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", 0x1000, 0x10000000, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) r6 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000200)=0x4ceb, 0x4) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000000000000000000000010000000000000000000000000000a20fe5a36c6cbdb40a3184a4efd430e19e2233df495a19ff03b44a70a2ffe5b4e82c4a359eddf3687998763e934275b8cb046ba35aa9d4a1f1b9859f8e"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000100000000000001000000000000", @ANYRES32=r8, @ANYBLOB="00010000ac0000003c0012800b000100697036746e6c00002c000280060011004e20000006000f0002000000060012004e24000008000700000100000500060007000000"], 0x5c}}, 0xeb64d656001b2f26) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@gettaction={0x184, 0x32, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbbf7}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x184}}, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x17, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @local, {[@cipso={0x86, 0x3b, 0x0, [{0x5, 0x10, "5dce33837fb7aad5340afbb8deac"}, {0x6, 0x5, "f3a664"}, {0x1, 0x12, "60db54f0e7b6fecb04a3a8f5dca57f12"}, {0x0, 0xe, "f4ceb830088e68a9dc0aa6bf"}]}, @timestamp_addr={0x44, 0xc, 0x1a, 0x1, 0x8, [{@rand_addr=0x64010100, 0x6}]}, @end]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x1, 0x3, 0x7, 0x65, 0x1, 0xa3, 0x1, 0xd, @loopback, @loopback, {[@rr={0x7, 0xf, 0xda, [@multicast2, @remote, @remote]}, @rr={0x7, 0xb, 0x6e, [@multicast2, @loopback]}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x7, [{@broadcast, 0x2}, {@multicast2, 0x10}, {@multicast2, 0x2}, {@multicast2, 0x7}]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.402074851s ago: executing program 4 (id=2831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000ecff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000ab4fae1c5bb5a5d8000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa117000000000007010000f8ffffffbfa40000000000000704ffffb7020000080000001823000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x128, 0x128, 0x1f8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@remote, @local, [0xff, 0xff, 0xff000000], [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], 'batadv_slave_0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x29, 0x0, 0x1, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc2, 0xd0, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x71bd3f17, 0x6}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x36}, [0xff000000, 0xad6ec7967b6fd43b], [0x0, 0xff, 0xffffffff, 0xff], 'vcan0\x00', 'xfrm0\x00', {}, {}, 0x3b, 0x7, 0x1, 0xc}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0xf70, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 2.202397079s ago: executing program 0 (id=2833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4282, 0x0) (rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) close(0xffffffffffffffff) (async, rerun: 64) r8 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffe6, 0xb}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 2.022490937s ago: executing program 5 (id=2834): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x88, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40044) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000140)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8}, 0x14) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 1.849071438s ago: executing program 0 (id=2835): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r2, 0x301, 0x0, 0x0, {{}, {@val={0x5, 0x1, 0x14}, @void, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x8) 1.684442173s ago: executing program 0 (id=2836): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@empty, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1, 0xfffffffd}, 0x0, 0x3507, 0xa, 0x0, 0x0, 0x12}, 0x5, 0x5}, [@etimer_thresh={0x8, 0xc, 0xca1e}, @tfcpad={0x8, 0x24, 0x6}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000240)={0x400, {{0x2, 0x4e20, @broadcast}}}, 0x88) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) 1.546773546s ago: executing program 5 (id=2837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000040)={0x0, @qipcrtr={0x2a, 0x5, 0x4000}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @tipc=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}, 0x2}}, 0x1, 0x0, 0x0, 0x0, 0x666, &(0x7f0000000000)='pimreg1\x00', 0x401, 0x5, 0x4800}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000a09040000000000000000020000052400048020000180080001006f73660014000280080001400000000808000340000000200900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000200a00"/120], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.546146252s ago: executing program 0 (id=2838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x84, r1, 0x401, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffd25}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x19}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000280)=[@op={0x18}, @assoc={0x0, 0x117, 0x4, 0x6}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0xa) socket$inet(0x2, 0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r9, @ANYBLOB="408052"], 0x1c}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000002700010000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bb00000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="eaffff0000000000f85c346918ab6f2a871ffb85eb0b57e259bbdf8a35a7acb2dedc15e898c1c2a8e91ba9da4fb22681df25736b6f16ad8b60abda27cd380653a2335f599b01de007083a22386568e68a81a1a75c9320497c63bc96df1307f5bf42a"], 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@getchain={0x54, 0x66, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x2, 0x7}, {0x7, 0xd}, {0xf, 0xf}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xbde6}, {0x8, 0xb, 0xe9fd}, {0x8, 0xb, 0x1823}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b400000000000000791090b7385f62781420000000000062000002000000009555ea86e70489290e8a0241683e605747c8d9e6c3f91b33fece7d37b20c12c593ca26b902eac523c462dd04caedc0285df903069682625f38a6339270fb715b4f9e3de436530224ad5d5f3a385ee895ab20"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc4, &(0x7f00000007c0)=""/196, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xa5) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, 0x14, 0x400, 0x70bd2d, 0x25dfdbfd, {0x8}, [@INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "dd3fc574378bf3627fb5a4df2854d1e639a6365458c0dd40f44344e25e0adc204a8e45eb3165223fcd4fb02d19cb900a4d821eca130ca3eabd55597a8bedcfafc7f048706128f2d9acfd936172c216b80f7b633e37ba52f9184e3be97df2f9830d63da998cad95b3ed1689134e5f9384a490bd87b6f33cb6fa5fa58ce1da91906f1f3baa42c0980b6ae92b2356a1d242de1d4d07939ecff364"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004801}, 0x48095) 1.368271845s ago: executing program 3 (id=2839): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000007c0)={'batadv_slave_0\x00', &(0x7f0000000780)=@ethtool_channels={0x3c, 0x1, 0x407, 0x2, 0x1, 0x3efa16ce, 0x5, 0x8, 0x200007}}) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @mcast2, 0x5}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x0, 0x7ff, 0x80000000, 0x3, 0x5, 0xffffffffffff2af6, 0x800, 0x200, 0x81, 0x72, 0x1, 0x1, 0x2, 0x400}, 0x10, [0x0, 0x0]}) 1.287068848s ago: executing program 3 (id=2840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025b03bbd214a2ce33abd7000fedbdf25", @ANYRES32=0x0, @ANYBLOB="050002000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r4, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) sendto$packet(r5, &(0x7f00000003c0)="7538736d00ff37838b57f777409f47f488a8bb7dcd3a", 0x16, 0x24044885, &(0x7f0000000000)={0x11, 0x88a8, r8, 0x1, 0x4, 0x6, @broadcast}, 0x14) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000400)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r9], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r11 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x0) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x2000}, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000040000701fcffffff00000100037c0000040042800c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) 1.094464305s ago: executing program 3 (id=2841): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x10, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d9e1d36d6e33"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1dd35065040a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="cc9c1a2430ee"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x60000054}, 0x20000080) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x90a28acab7fbb214}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x80) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r7, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000ac0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x280, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0xea, 0x3, "6d957f2167cd48bd5aef5f782f945a1560d5f38509dd94b56d3d0983ce695e400bd874516648fd7cf186e1502b77041cd19438413bbd219c114ec6b8ed75243cacabdbfcbca9dd06f7b294d6a48f2361ea4b743c61e2145c5c1f492f9bac372e1be7e97d000341016c810e26c821107457681f0ab35bbdee231620de0ea27ee03712d70c3f5506554cd2f8d565719d56230d3bb7954c6b478264170275deb0b34afd5de6758c2f20cc905ee4e7e43bfd9da7eec5bd61e21257e15b32dc25a8160904e9aa91f3185265a0f1063df83c2f2a2ac56fde3b2c2e8dd3d44b3a657a4f6530af40e457"}, @ETHTOOL_A_WOL_MODES={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "a2c2b74e97c57f85d2e348abb31efed8b6126cce0a621d8a1c294891ca87302096c9a679ffe7d9c542049d"}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcf1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x539}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@!7*z\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x280}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r11 = accept4$llc(0xffffffffffffffff, &(0x7f0000000b00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000b40)=0x10, 0x0) connect$llc(r11, &(0x7f0000000b80)={0x1a, 0x118, 0x10, 0x7f, 0x7, 0xfd, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) r12 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000cc0)={'pim6reg\x00', &(0x7f0000000c00)=@ethtool_rx_ntuple={0x35, {0xe, @tcp_ip4_spec={@rand_addr=0x64010102, @rand_addr=0x64010102, 0x4e22, 0x4e23, 0x4e}, @hdata="e1b9a044dd00100d65ded6c722814b25b82e113c066c27df06d6a23aeda4de2b635a8b1d624960a57766b5529f6ce8acae21384a2ce52d33dac8a29b72291f1efb6f6b6e5a165295", 0x2, 0x4, 0x6, 0x80, 0xffffffffffffffff}}}) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000d00)={{0x3, @rose}, [@bcast, @rose, @netrom, @rose, @rose, @bcast, @bcast, @default]}, &(0x7f0000000d80)=0x48) pipe(&(0x7f0000000dc0)={0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000e00)=0x3) recvmsg(r0, &(0x7f00000023c0)={&(0x7f0000000e40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000ec0)=""/233, 0xe9}, {&(0x7f0000000fc0)=""/46, 0x2e}, {&(0x7f0000001000)=""/87, 0x57}, {&(0x7f0000001080)=""/12, 0xc}, {&(0x7f00000010c0)}, {&(0x7f0000001100)=""/125, 0x7d}, {&(0x7f0000001180)=""/230, 0xe6}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/87, 0x57}], 0x9}, 0x40000020) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000002540)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x5c, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) openat$tun(0xffffffffffffff9c, &(0x7f0000002580), 0x309083, 0x0) 1.048782076s ago: executing program 6 (id=2842): r0 = epoll_create(0x4000000d) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="0c9b090500000001095e000000e000ff950000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000000020658257", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES32=r1], 0x48}}, 0x810) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, {0xa, 0x4e23, 0x9, @empty, 0x8}, 0x1, {[0x6, 0x10, 0x7, 0x1, 0x3, 0x0, 0xec5, 0xd393]}}, 0x5c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000540)={0x3}) close(r0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r7, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r8 = accept$phonet_pipe(r3, &(0x7f0000000280), &(0x7f0000000300)=0x10) getsockopt$bt_hci(r8, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 667.200463ms ago: executing program 3 (id=2843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r1, @ANYRESOCT], 0xfc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x2c) accept4$x25(r3, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r1, @ANYRESOCT], 0xfc}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x2c) (async) accept4$x25(r3, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80000) (async) 494.418816ms ago: executing program 5 (id=2844): syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007a80), 0x0, 0x20000000) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) write(r0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x60, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x60}}, 0x20000000) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 432.992571ms ago: executing program 0 (id=2845): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x24, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559"}]}, 0x38}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000"], 0xcc}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000"], 0xcc}}, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x29, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 392.35208ms ago: executing program 3 (id=2846): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0x2, {{0x2, 0x4e24, @empty}}}, 0x88) (async, rerun: 32) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x38}}, 0x0) socket(0x10, 0x803, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000280)=@ethtool_stats={0x1d, 0x1, [0xfffffffffffffff9]}}) (rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="f8020000", @ANYRES16=r5, @ANYBLOB="01002cbd7000030000008900000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x2f8}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'nr0\x00', {0x2, 0x4e23, @empty}}) (async, rerun: 64) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r8, 0x0, 0x100000}, 0x18) (async, rerun: 64) r10 = socket$kcm(0x21, 0x2, 0x2) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)}, 0x40010100) (async) sendto$unix(r12, &(0x7f0000000080), 0x0, 0xd1, 0x0, 0x0) (async, rerun: 32) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f00000025c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r11, @ANYRES32=r14, @ANYRESHEX=r9], 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex=r4, 0x5, 0x0, 0xe, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000660800000000010118000000000000001f000000000000009500000000000000360a0000000000001801000020207825002f81db2da7e95d0d226650138536a870000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) (async) close(r10) 214.122783ms ago: executing program 5 (id=2847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r1, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x50) listen(r0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c003bc2ee7000ffdbdf25067c0000080001800400ff47d281"], 0x28}}, 0xc010) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0xff, 0x2, 0x40, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x8, 0x0, 0x0, 0x4}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000380)={r5, 0x6, 0x80}, 0x8) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd6022020000280600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0020000907800001312c12434ec43904aae35d8240a3fd194e300006c1826ee251579a8a6b90229312e1d1fb5ba9967cb8887362a584f367143ee5645e86ab9d64364f7c2108902c4c8f8488845b9342fc5f1d5"], 0x0) 202.137931ms ago: executing program 6 (id=2848): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES64=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) (async) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) writev(r1, &(0x7f0000000880), 0x1) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=r4, @ANYRES16=r1, @ANYBLOB="fa72afa595095f09231efeb2bc6a6b445cc9872696c07fdf17d82e1120e16dbd0e43b471ca1820f696ddf0d24ebdc90adb7bf1b25c8d16a1a64f2a3a078651414f90e5d7c7597a44e45edf3467689cc565be6b", @ANYBLOB="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", @ANYBLOB="eceb8b06e541bf18b1a6dd18a727b41f4c6175e7e6bf29e066270253dc86712b9d527986480444214cb494f7d2d903527e0b31ed5b9ef518957c0d4bc148cc6af1f80bd10fe4bcb894fb9ce2ee80d940bb9a17cd84d2e1f6d7efe60cea8322c80d7f851481f477ff495ed2209d46c193475dedc9e503affea6082551122a837fad62c666f76cfa21"], 0x40}}, 0x40000840) (async) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000180)=0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c0000000000000074164014df630190", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB='\x00'/28], 0x50) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, r7, 0x321, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x404c010) (async) close(0x4) unshare(0x6a040000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r8, 0x0, 0x25, 0x2, @void}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xc}, {0x8, 0xf}, {0x2, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x16}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendto$inet6(r9, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) 86.91562ms ago: executing program 0 (id=2849): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c"], 0x0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x241, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000}, @exit, @alu={0x7, 0x0, 0x0, 0x3, 0x0, 0x1, 0x700}]}, &(0x7f0000000300)='GPL\x00'}, 0x94) 14.818145ms ago: executing program 5 (id=2850): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000400000000000000000300000000000000080000000000000000000000000000000061543b7ad375a1324f3f1ff00b00"], 0x0, 0x52, 0x0, 0x1}, 0x28) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x10001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r4 = accept4(r0, &(0x7f0000000200)=@nfc, &(0x7f0000000100)=0x80, 0x80800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r6 = socket$kcm(0x11, 0xa, 0x300) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e000300"}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x0, 0x3, 0x1, 0x3, {0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r10, 0x40047452, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0\x00'}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0xffffffffffffff74) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r6, @ANYBLOB="08002abd7000fcdbdf250b000000080002000700000005000500020000000800030000000000080002000700000008000200c28a3e2adac1d77fc304000000225b1f710600000005000500050000", @ANYRES16=0x0], 0x54}}, 0x0) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000000000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r4) 0s ago: executing program 3 (id=2851): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000620000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map, r2, 0x2f, 0x34, r2}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="72a53635fe3ebc2976010026bd7000fedbdf2564000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) write(r4, &(0x7f0000000340), 0x11000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0xd, &(0x7f0000000080)='g', 0x1) setsockopt$inet6_int(r7, 0x29, 0x31, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x111, 0x4b4, 0x1e0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x73, 0xe}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x0, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0x2}}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0xa, "a78c7b7cafc78080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) kernel console output (not intermixed with test programs): 964] lo speed is unknown, defaulting to 1000 [ 222.783490][ T5944] IPVS: starting estimator thread 0... [ 222.896155][T11023] IPVS: using max 30 ests per chain, 72000 per kthread [ 223.059660][T11028] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 223.186717][T11028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.207584][T11033] netlink: 'syz.4.1291': attribute type 4 has an invalid length. [ 223.281606][T11032] bond2: (slave ip6gretap1): making interface the new active one [ 223.310637][T11032] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 223.427615][T11034] veth1: entered promiscuous mode [ 223.480721][T11037] bridge0: port 4(erspan0) entered disabled state [ 223.592917][T11032] syzkaller1: entered promiscuous mode [ 223.611202][T11032] syzkaller1: entered allmulticast mode [ 223.836360][T11054] __nla_validate_parse: 3 callbacks suppressed [ 223.836380][T11054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1294'. [ 224.003111][T11042] lo speed is unknown, defaulting to 1000 [ 224.136072][T11065] tipc: New replicast peer: 0.0.0.0 [ 224.141958][T11065] tipc: Enabled bearer , priority 10 [ 224.163507][T11066] tipc: New replicast peer: 172.30.1.5 [ 224.182808][T11062] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 224.190257][T11062] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 224.205718][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 224.360276][T11076] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1301'. [ 224.360284][T11042] lo speed is unknown, defaulting to 1000 [ 225.848896][T11128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1316'. [ 225.867384][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 225.877331][T11127] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1316'. [ 225.888066][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'. [ 226.031229][T11138] gretap1: entered allmulticast mode [ 226.261090][T11145] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1321'. [ 226.296975][T11147] tipc: Enabled bearer , priority 0 [ 226.320407][T11147] syzkaller0: entered promiscuous mode [ 226.326217][T11147] syzkaller0: entered allmulticast mode [ 226.359238][T11147] tipc: Resetting bearer [ 226.373528][T11146] tipc: Resetting bearer [ 226.445763][T11146] tipc: Disabling bearer [ 226.715273][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 226.750432][T11155] syzkaller0: entered allmulticast mode [ 226.962932][T11150] lo speed is unknown, defaulting to 1000 [ 227.088169][T11167] sctp: [Deprecated]: syz.1.1326 (pid 11167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.088169][T11167] Use struct sctp_sack_info instead [ 227.117822][T11168] netlink: 'syz.0.1327': attribute type 6 has an invalid length. [ 227.140007][T11170] netlink: 'syz.0.1327': attribute type 6 has an invalid length. [ 227.500774][T11150] lo speed is unknown, defaulting to 1000 [ 227.642355][T11197] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1330'. [ 227.751521][T11200] nftables ruleset with unbound chain [ 228.677873][T11238] netlink: 'syz.1.1343': attribute type 10 has an invalid length. [ 228.880460][ T5837] Bluetooth: hci4: link tx timeout [ 228.886526][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.896591][ T5837] Bluetooth: hci4: link tx timeout [ 228.901739][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.911417][ T5837] Bluetooth: hci4: link tx timeout [ 228.917456][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.990189][T11231] lo speed is unknown, defaulting to 1000 [ 229.028420][T11248] __nla_validate_parse: 4 callbacks suppressed [ 229.028439][T11248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1346'. [ 229.260237][T11255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1348'. [ 229.294603][T11255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1348'. [ 229.323865][T11231] lo speed is unknown, defaulting to 1000 [ 229.454497][T11264] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 229.474150][T11264] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 229.757943][T11276] syzkaller0: entered promiscuous mode [ 229.763454][T11276] syzkaller0: entered allmulticast mode [ 230.548093][T11296] tipc: Enabled bearer , priority 0 [ 230.561137][T11296] syzkaller0: entered promiscuous mode [ 230.570786][T11296] syzkaller0: entered allmulticast mode [ 230.608247][T11296] tipc: Resetting bearer [ 230.636694][T11295] tipc: Resetting bearer [ 230.697455][T11295] tipc: Disabling bearer [ 230.727819][T11291] lo speed is unknown, defaulting to 1000 [ 230.915030][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 231.710839][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'. [ 231.775396][T11330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1366'. [ 231.784988][T11330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1366'. [ 231.794050][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 232.155360][T11320] bond3: Unable to set down delay as MII monitoring is disabled [ 232.165515][T11320] bond3 (unregistering): Released all slaves [ 232.193623][T11291] lo speed is unknown, defaulting to 1000 [ 232.420649][T11332] bond3: option all_slaves_active: invalid value (13) [ 232.430109][T11339] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 232.446423][T11332] bond3 (unregistering): Released all slaves [ 232.757799][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1371'. [ 232.807401][T11349] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1372'. [ 232.814673][T11358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1371'. [ 233.224458][T11370] team0: entered promiscuous mode [ 233.237846][T11370] team_slave_0: entered promiscuous mode [ 233.260411][T11370] team_slave_1: entered promiscuous mode [ 233.277258][T11370] team0: entered allmulticast mode [ 233.294778][T11370] team_slave_0: entered allmulticast mode [ 233.324118][T11370] team_slave_1: entered allmulticast mode [ 233.347896][T11370] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 233.644027][T11385] netlink: 'syz.1.1379': attribute type 16 has an invalid length. [ 233.679406][T11385] netlink: 'syz.1.1379': attribute type 17 has an invalid length. [ 233.869459][T11401] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 234.184744][T11385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.204419][T11385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.339739][T11395] __nla_validate_parse: 3 callbacks suppressed [ 234.339756][T11395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1382'. [ 234.357683][T11396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1382'. [ 234.406847][ T3030] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.416897][ T3030] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.433547][ T3030] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.453359][ T3030] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.473615][ T3030] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.493896][ T3030] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.557136][T11410] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1383'. [ 234.657189][ T3030] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.675662][ T3030] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.700091][T11418] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1386'. [ 234.743191][T11420] IPVS: length: 132 != 8 [ 234.753226][T11420] pimreg: entered allmulticast mode [ 234.776694][T11420] pimreg: left allmulticast mode [ 235.057458][T11444] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1393'. [ 236.042953][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'. [ 236.146446][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'. [ 236.212839][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 236.220719][T11499] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 236.241016][T11497] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 236.282334][T11497] bond2 (unregistering): Released all slaves [ 236.372217][T11506] veth0_to_bridge: entered promiscuous mode [ 236.394365][T11500] veth0_to_bridge: left promiscuous mode [ 236.558841][T11520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1411'. [ 236.587080][T11520] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 236.638909][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1411'. [ 236.711179][T11520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.726390][T11533] xt_hashlimit: size too large, truncated to 1048576 [ 237.208458][T11558] netlink: 'syz.3.1420': attribute type 1 has an invalid length. [ 237.401445][T11558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.491907][T11563] bond4: (slave geneve2): making interface the new active one [ 237.592182][T11563] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 237.984921][T11550] lo speed is unknown, defaulting to 1000 [ 239.120975][T11550] lo speed is unknown, defaulting to 1000 [ 239.160095][T11551] lo speed is unknown, defaulting to 1000 [ 239.245836][T11630] !yz!: rxe_newlink: already configured on team_slave_0 [ 239.718092][T11648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.856283][T11551] lo speed is unknown, defaulting to 1000 [ 239.963598][T11657] __nla_validate_parse: 5 callbacks suppressed [ 239.963616][T11657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1442'. [ 240.749707][T11669] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1444'. [ 240.760380][T11669] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 241.029324][T11677] bond5: Removing last ns target with arp_interval on [ 241.157263][T11681] netlink: 'syz.3.1446': attribute type 1 has an invalid length. [ 241.213191][T11681] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.221166][T11665] lo speed is unknown, defaulting to 1000 [ 241.302478][T11681] veth5: entered promiscuous mode [ 241.365381][T11681] bond6: (slave veth5): Enslaving as an active interface with a down link [ 241.376599][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.395038][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.790216][T11684] lo speed is unknown, defaulting to 1000 [ 241.905607][T11665] lo speed is unknown, defaulting to 1000 [ 241.992053][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1449'. [ 242.467303][T11684] lo speed is unknown, defaulting to 1000 [ 242.776011][T11716] erspan0: left promiscuous mode [ 242.791517][T11716] bridge0: port 4(erspan0) entered disabled state [ 243.168701][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 243.178675][T11728] netlink: 'syz.3.1457': attribute type 4 has an invalid length. [ 243.190398][T11728] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1457'. [ 243.256700][T11728] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1457'. [ 243.647247][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 243.665488][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 243.683512][T11747] netlink: 'syz.2.1464': attribute type 12 has an invalid length. [ 244.472297][T11805] x_tables: unsorted underflow at hook 2 [ 244.542563][T11810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1480'. [ 244.667075][T11818] xt_TCPMSS: Only works on TCP SYN packets [ 244.826874][T11832] syzkaller1: entered promiscuous mode [ 244.832697][T11832] syzkaller1: entered allmulticast mode [ 244.875001][T11832] IPVS: Error connecting to the multicast addr [ 245.522694][T11873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1504'. [ 245.587401][T11882] tipc: Enabling of bearer rejected, failed to enable media [ 245.607216][T11882] IPVS: sh: FWM 3 0x00000003 - no destination available [ 245.665303][T11886] tipc: Enabling of bearer rejected, failed to enable media [ 245.937505][T11902] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1510'. [ 245.974572][T11902] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1510'. [ 246.003925][T11902] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1510'. [ 246.129405][T11913] syzkaller0: entered promiscuous mode [ 246.135066][T11913] syzkaller0: entered allmulticast mode [ 246.342657][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 246.353785][T11922] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 246.374945][T11922] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1518'. [ 246.483448][T11931] syzkaller0: entered promiscuous mode [ 246.489287][T11931] syzkaller0: entered allmulticast mode [ 246.875615][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 247.033857][T11965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1526'. [ 247.187184][T11975] x_tables: unsorted entry at hook 3 [ 248.487645][T11977] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1531'. [ 248.497200][T11959] lo speed is unknown, defaulting to 1000 [ 248.728485][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 248.827523][T11994] pim6reg: entered allmulticast mode [ 248.912424][T11968] lo speed is unknown, defaulting to 1000 [ 248.928796][T11959] lo speed is unknown, defaulting to 1000 [ 249.110766][T11997] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.306992][T11983] lo speed is unknown, defaulting to 1000 [ 249.626524][T12012] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 249.690426][T11983] lo speed is unknown, defaulting to 1000 [ 249.753881][T11993] lo speed is unknown, defaulting to 1000 [ 249.755975][T11968] lo speed is unknown, defaulting to 1000 [ 250.243964][T11993] lo speed is unknown, defaulting to 1000 [ 250.992485][T12035] __nla_validate_parse: 3 callbacks suppressed [ 250.992503][T12035] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1549'. [ 251.330750][T12041] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 251.867612][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1557'. [ 251.868221][T12058] netlink: 'syz.4.1558': attribute type 8 has an invalid length. [ 252.049867][T12068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.061452][T12068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.081605][T12071] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1561'. [ 252.094600][T12069] wg1 speed is unknown, defaulting to 1000 [ 252.100622][T12069] wg1 speed is unknown, defaulting to 1000 [ 252.107616][T12069] wg1 speed is unknown, defaulting to 1000 [ 252.138514][T12069] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 252.141349][T12068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.156602][T12068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.174823][T12069] wg1 speed is unknown, defaulting to 1000 [ 252.183456][T12069] wg1 speed is unknown, defaulting to 1000 [ 252.191470][T12069] wg1 speed is unknown, defaulting to 1000 [ 252.199121][T12069] wg1 speed is unknown, defaulting to 1000 [ 252.208366][T12069] wg1 speed is unknown, defaulting to 1000 [ 252.224474][T12068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.235106][T12068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.298606][T12068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.309160][T12068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.394554][ T3728] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.403454][ T3728] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.420237][ T3728] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.429448][ T3728] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.445135][ T3728] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.453515][ T3728] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.469765][ T3030] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.478240][ T3030] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.560949][T12076] bond0: (slave dummy0): Releasing backup interface [ 252.569605][T12076] bond1: (slave ip6gretap1): Releasing active interface [ 252.578591][T12076] bond2: (slave bond3): Releasing backup interface [ 252.588616][T12076] bond6: (slave veth11): Releasing backup interface [ 252.699402][T12082] netem: change failed [ 252.828125][T12089] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 252.951282][T12096] netlink: 'syz.3.1571': attribute type 1 has an invalid length. [ 252.958349][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 252.962726][T12096] netlink: 'syz.3.1571': attribute type 2 has an invalid length. [ 252.979878][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 252.996117][T12096] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 253.143647][T12109] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 253.173214][ T7278] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.185454][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1573'. [ 253.204294][ T7278] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.225457][T12109] bond6: entered promiscuous mode [ 253.230795][T12109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.238025][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 253.257300][T12113] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.266288][T12113] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 253.277233][T12113] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 253.292345][T12113] bond6: (slave wireguard0): making interface the new active one [ 253.300982][T12113] wireguard0: entered promiscuous mode [ 253.309521][T12113] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 253.319297][ T7278] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.338845][ T7278] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.381765][T12107] geneve3: entered promiscuous mode [ 253.411699][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 253.429122][ T7278] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.458052][ T7278] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.477367][ T7278] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 253.486434][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 253.512244][ T7278] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.522252][ T7278] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.533335][ T7278] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 253.544442][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 253.554629][ T7278] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 253.566009][ T7278] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 253.713406][T12139] syzkaller1: entered promiscuous mode [ 253.719894][T12139] syzkaller1: entered allmulticast mode [ 254.372172][T12177] netlink: 'syz.3.1589': attribute type 2 has an invalid length. [ 254.388607][T12177] @„;: entered promiscuous mode [ 255.178071][T12180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.411818][T12223] netem: incorrect ge model size [ 255.418287][T12223] netem: change failed [ 255.424344][T12224] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 255.468665][T12229] tun0: tun_chr_ioctl cmd 1074025675 [ 255.475653][T12224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.484407][T12229] tun0: persist enabled [ 256.677045][T12268] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 256.703569][ T5914] lo speed is unknown, defaulting to 1000 [ 256.720210][ T5914] syz1: Port: 1 Link DOWN [ 256.810254][T12278] __nla_validate_parse: 4 callbacks suppressed [ 256.810272][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'. [ 256.826842][T12281] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 256.900383][T12281] netlink: 'syz.3.1614': attribute type 10 has an invalid length. [ 257.018375][T12289] tipc: Enabling of bearer rejected, failed to enable media [ 257.152242][T12299] Bluetooth: MGMT ver 1.23 [ 257.201829][T12299] geneve2: entered promiscuous mode [ 257.227138][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.237203][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 257.256883][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.274737][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.293685][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.542568][T12312] xt_time: unknown flags 0xf4 [ 257.580292][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'. [ 257.792784][T12320] netlink: 'syz.2.1627': attribute type 12 has an invalid length. [ 257.843310][T12323] tipc: Enabled bearer , priority 0 [ 257.861100][T12323] syzkaller0: entered promiscuous mode [ 257.866965][T12323] syzkaller0: entered allmulticast mode [ 257.991186][T12322] tipc: Resetting bearer [ 258.036299][T12322] tipc: Disabling bearer [ 258.247922][T12353] syzkaller0: entered promiscuous mode [ 258.253508][T12353] syzkaller0: entered allmulticast mode [ 258.441731][T12365] batadv1: entered promiscuous mode [ 258.878643][T12394] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1648'. [ 259.770321][T12412] netlink: 'syz.0.1652': attribute type 2 has an invalid length. [ 259.836924][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 259.883111][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'. [ 259.893100][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 259.916840][T12419] netlink: 'syz.3.1655': attribute type 5 has an invalid length. [ 259.969806][T12424] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1653'. [ 260.250467][T12435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1656'. [ 260.533372][T12448] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 261.541710][T12505] syzkaller0: entered promiscuous mode [ 261.548613][T12505] syzkaller0: entered allmulticast mode [ 261.692639][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1677'. [ 261.695878][T12517] netlink: 'syz.3.1676': attribute type 1 has an invalid length. [ 261.745431][T12520] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 261.747329][T12517] bond7: entered promiscuous mode [ 261.760423][T12517] bond7: entered allmulticast mode [ 261.768104][T12517] 8021q: adding VLAN 0 to HW filter on device bond7 [ 262.056673][T12536] __nla_validate_parse: 1 callbacks suppressed [ 262.056691][T12536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1681'. [ 262.216190][T12548] syzkaller0: entered promiscuous mode [ 262.222100][T12548] syzkaller0: entered allmulticast mode [ 262.259728][T12555] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1686'. [ 262.305678][T12551] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.378505][T12551] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.478869][T12551] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.497741][T12575] xt_hashlimit: overflow, rate too high: 0 [ 262.733681][T12551] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.786637][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 262.799408][T12583] Cannot find set identified by id 65534 to match [ 262.819288][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.849286][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.888640][ T3030] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.910394][T12575] lo speed is unknown, defaulting to 1000 [ 262.922935][ T3030] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.146926][T12597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1694'. [ 263.167092][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'. [ 263.177743][T12597] macvlan0: entered allmulticast mode [ 263.183416][T12597] veth1_vlan: entered allmulticast mode [ 263.200976][T12603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1694'. [ 263.279875][T12608] m1Ie5nè‹Ò: entered promiscuous mode [ 263.285984][T12575] lo speed is unknown, defaulting to 1000 [ 263.293501][T12575] wg1 speed is unknown, defaulting to 1000 [ 263.470708][T12617] netlink: 'syz.3.1699': attribute type 13 has an invalid length. [ 263.894200][T12623] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 263.960210][T12624] pimreg: left allmulticast mode [ 264.008209][T12624] siw: device registration error -23 [ 264.017400][T12624] erspan0: left allmulticast mode [ 264.031984][T12624] bridge0: left promiscuous mode [ 264.032571][T12626] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 264.047682][T12626] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1702'. [ 264.057152][T12624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.106252][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 264.708116][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 264.717303][T12641] netlink: 'syz.0.1708': attribute type 30 has an invalid length. [ 264.787649][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 264.800045][T12641] netlink: 'syz.0.1708': attribute type 30 has an invalid length. [ 264.931368][T12648] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1711'. [ 264.995959][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.004711][ T5914] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.170452][T12651] lo speed is unknown, defaulting to 1000 [ 265.289817][T12659] netlink: 'syz.4.1714': attribute type 54 has an invalid length. [ 265.490641][T12651] lo speed is unknown, defaulting to 1000 [ 265.499054][T12651] wg1 speed is unknown, defaulting to 1000 [ 265.522487][T12652] lo speed is unknown, defaulting to 1000 [ 266.018383][T12652] lo speed is unknown, defaulting to 1000 [ 266.035609][ T7278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 266.044123][ T7278] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 266.077001][T12652] wg1 speed is unknown, defaulting to 1000 [ 266.198508][T12686] xt_hashlimit: size too large, truncated to 1048576 [ 266.276318][T12686] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 266.344591][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.361525][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.369937][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.383368][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.391244][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.615185][ T5938] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 267.242157][T12706] netlink: 'syz.3.1725': attribute type 11 has an invalid length. [ 267.382503][T12690] lo speed is unknown, defaulting to 1000 [ 267.755917][T12690] lo speed is unknown, defaulting to 1000 [ 267.763336][T12690] wg1 speed is unknown, defaulting to 1000 [ 267.780294][T12726] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001 [ 268.222551][T12690] chnl_net:caif_netlink_parms(): no params data found [ 268.338519][T12742] bond8: option arp_validate: invalid value (18446744073491447809) [ 268.349771][T12742] bond8 (unregistering): Released all slaves [ 268.435264][ T5832] Bluetooth: hci5: command tx timeout [ 268.618710][T12690] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.635141][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.642432][T12690] bridge_slave_0: entered allmulticast mode [ 268.650213][T12690] bridge_slave_0: entered promiscuous mode [ 268.660748][T12690] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.668280][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.675817][T12690] bridge_slave_1: entered allmulticast mode [ 268.683652][T12690] bridge_slave_1: entered promiscuous mode [ 268.791077][T12690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.808206][T12690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.860660][T12690] team0: Port device team_slave_0 added [ 268.870221][T12690] team0: Port device team_slave_1 added [ 268.959076][T12690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.966784][T12690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.993238][T12690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.009667][T12778] __nla_validate_parse: 4 callbacks suppressed [ 269.009684][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 269.027000][T12690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.034042][T12690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.037267][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 269.060621][T12690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.205226][T12690] hsr_slave_0: entered promiscuous mode [ 269.211931][T12690] hsr_slave_1: entered promiscuous mode [ 269.218517][T12690] debugfs: 'hsr0' already exists in 'hsr' [ 269.224262][T12690] Cannot create hsr debugfs directory [ 269.310224][T12790] syzkaller0: entered promiscuous mode [ 269.316160][T12790] syzkaller0: entered allmulticast mode [ 269.338464][T12790] tipc: Enabled bearer , priority 0 [ 269.394784][T12790] tipc: Resetting bearer [ 269.417301][T12787] tipc: Resetting bearer [ 269.432722][T12787] tipc: Disabling bearer [ 269.619563][T12690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.643182][T12690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.687631][T12690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.702174][T12690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.929667][T12690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.989161][T12690] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.007639][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.014967][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.049689][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.056977][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.195318][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 270.508961][T12816] lo speed is unknown, defaulting to 1000 [ 270.516173][ T5832] Bluetooth: hci5: command tx timeout [ 270.546521][T12826] pimreg: entered allmulticast mode [ 270.634018][T12690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.873570][T12840] tipc: Enabled bearer , priority 0 [ 270.897684][T12840] syzkaller0: entered promiscuous mode [ 270.918056][T12840] syzkaller0: entered allmulticast mode [ 270.941098][T12840] tipc: Resetting bearer [ 270.951974][T12839] tipc: Resetting bearer [ 270.977338][T12839] tipc: Disabling bearer [ 271.041045][T12816] lo speed is unknown, defaulting to 1000 [ 271.056747][T12816] wg1 speed is unknown, defaulting to 1000 [ 271.140191][T12851] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1760'. [ 271.161290][T12851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1760'. [ 271.248344][T12851] bond8: option ad_user_port_key: invalid value (65535) [ 271.265331][T12851] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 271.275746][T12851] bond8 (unregistering): Released all slaves [ 271.302518][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 271.334459][T12854] bond8: option ad_user_port_key: invalid value (65535) [ 271.350698][T12854] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 271.361186][T12854] bond8 (unregistering): Released all slaves [ 271.462644][T12690] veth0_vlan: entered promiscuous mode [ 271.485918][T12690] veth1_vlan: entered promiscuous mode [ 271.536473][T12690] veth0_macvtap: entered promiscuous mode [ 271.578825][T12690] veth1_macvtap: entered promiscuous mode [ 271.628058][T12690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.668215][T12690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.727329][ T4384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.756349][ T4384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.782003][ T4384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.819628][ T4384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.060785][ T6314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.085305][ T6314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.191348][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.218376][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.292415][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 272.327740][T12887] netlink: 149524 bytes leftover after parsing attributes in process `syz.3.1768'. [ 272.595175][ T5832] Bluetooth: hci5: command tx timeout [ 272.617582][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 272.630004][T12892] syzkaller0: entered promiscuous mode [ 272.638363][T12892] syzkaller0: entered allmulticast mode [ 272.656954][T12877] lo speed is unknown, defaulting to 1000 [ 272.666255][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 272.863442][T12903] netlink: 'syz.0.1773': attribute type 39 has an invalid length. [ 272.990681][T12877] lo speed is unknown, defaulting to 1000 [ 273.028908][T12877] wg1 speed is unknown, defaulting to 1000 [ 273.171189][T12912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'. [ 273.371173][T12920] netlink: 'syz.3.1777': attribute type 2 has an invalid length. [ 273.490655][ T30] audit: type=1800 audit(1767539856.526:3): pid=12909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1774" name="memory.events" dev="tmpfs" ino=33 res=0 errno=0 [ 273.569161][T12923] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.656126][T12923] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.754021][T12923] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.825411][T12915] lo speed is unknown, defaulting to 1000 [ 273.892802][T12923] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.045177][ T1012] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.056671][ T1012] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.098651][ T6314] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.128299][ T3728] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.203773][T12915] lo speed is unknown, defaulting to 1000 [ 274.225400][T12915] wg1 speed is unknown, defaulting to 1000 [ 274.395605][T12942] netlink: 'syz.5.1782': attribute type 4 has an invalid length. [ 274.531077][T12950] netlink: 'syz.5.1783': attribute type 1 has an invalid length. [ 274.583272][T12946] __nla_validate_parse: 3 callbacks suppressed [ 274.583293][T12946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1781'. [ 274.674959][ T5832] Bluetooth: hci5: command tx timeout [ 274.921377][T12969] macsec1: entered promiscuous mode [ 274.928483][T12969] macsec1: entered allmulticast mode [ 275.149563][T12981] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1790'. [ 275.304270][T12987] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1792'. [ 275.476303][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1797'. [ 275.654038][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.667600][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.676149][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.684050][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.693226][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.713766][T13011] x_tables: duplicate underflow at hook 2 [ 275.724033][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1798'. [ 275.730112][T13012] x_tables: duplicate underflow at hook 2 [ 275.782457][T13015] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 275.966189][T13022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1803'. [ 276.098097][T13004] lo speed is unknown, defaulting to 1000 [ 276.107735][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 276.215227][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1807'. [ 276.724504][T13065] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1810'. [ 276.888106][T13004] lo speed is unknown, defaulting to 1000 [ 276.902614][T13004] wg1 speed is unknown, defaulting to 1000 [ 277.018951][T13067] tipc: Enabled bearer , priority 0 [ 277.028261][T13067] syzkaller0: entered promiscuous mode [ 277.033772][T13067] syzkaller0: entered allmulticast mode [ 277.054751][T13072] openvswitch: netlink: VXLAN extension 50 out of range max 1 [ 277.205628][T13083] tipc: Resetting bearer [ 277.569322][T13004] chnl_net:caif_netlink_parms(): no params data found [ 277.596432][T13093] netlink: 'syz.5.1819': attribute type 12 has an invalid length. [ 277.621132][T13093] netlink: 'syz.5.1819': attribute type 29 has an invalid length. [ 277.630982][T13095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 277.715538][ T5832] Bluetooth: hci6: command tx timeout [ 278.198599][T13099] netlink: 'syz.4.1820': attribute type 5 has an invalid length. [ 278.253400][T13090] lo speed is unknown, defaulting to 1000 [ 278.284055][T13066] tipc: Resetting bearer [ 278.415775][T13066] tipc: Disabling bearer [ 278.675389][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 278.904586][T13004] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.916947][T13004] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.936319][T13004] bridge_slave_0: entered allmulticast mode [ 278.944169][T13004] bridge_slave_0: entered promiscuous mode [ 278.975809][T13004] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.984123][T13004] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.999515][T13004] bridge_slave_1: entered allmulticast mode [ 279.007411][T13004] bridge_slave_1: entered promiscuous mode [ 279.069882][T13090] lo speed is unknown, defaulting to 1000 [ 279.108244][T13090] wg1 speed is unknown, defaulting to 1000 [ 279.111314][T13004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.162870][T13004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.301676][T13004] team0: Port device team_slave_0 added [ 279.313200][T13004] team0: Port device team_slave_1 added [ 279.377377][T13004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.395830][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.444931][T13004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.513575][T13004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.528370][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.605446][T13004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.795372][ T5832] Bluetooth: hci6: command tx timeout [ 279.854288][T13148] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 279.879212][T13004] hsr_slave_0: entered promiscuous mode [ 279.888022][T13004] hsr_slave_1: entered promiscuous mode [ 279.897015][T13004] debugfs: 'hsr0' already exists in 'hsr' [ 279.902983][T13004] Cannot create hsr debugfs directory [ 279.919209][T13148] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 280.023980][T13148] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 280.121056][T13148] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 280.236683][ T1012] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 280.266213][ T1012] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 280.329148][ T1012] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 280.344203][ T1012] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 280.439813][T13004] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 280.460522][T13004] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 280.490811][T13004] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 280.518761][T13004] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 280.651563][T13204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.662272][T13200] wireguard0: entered promiscuous mode [ 280.668359][T13200] wireguard0: entered allmulticast mode [ 280.677883][T13200] team0: Port device wireguard0 added [ 280.699269][T13200] vlan0: entered promiscuous mode [ 280.704453][T13200] veth0: entered promiscuous mode [ 280.746089][T13004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.770402][T13004] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.789001][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.796224][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.820911][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.828138][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.029618][T13218] xt_hashlimit: size too large, truncated to 1048576 [ 281.170185][T13004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.885715][ T5832] Bluetooth: hci6: command tx timeout [ 281.967968][T13004] veth0_vlan: entered promiscuous mode [ 281.982288][T13004] veth1_vlan: entered promiscuous mode [ 281.991319][T13275] netlink: 'syz.5.1865': attribute type 1 has an invalid length. [ 282.009331][T13275] netlink: 'syz.5.1865': attribute type 2 has an invalid length. [ 282.025498][T13278] netlink: 'syz.5.1865': attribute type 1 has an invalid length. [ 282.034084][T13278] netlink: 'syz.5.1865': attribute type 2 has an invalid length. [ 282.081690][T13004] veth0_macvtap: entered promiscuous mode [ 282.107749][T13004] veth1_macvtap: entered promiscuous mode [ 282.147651][T13004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.159485][T13282] __nla_validate_parse: 4 callbacks suppressed [ 282.159503][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 282.183528][T13004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.201111][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 282.220483][ T1335] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.239297][ T1335] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.257470][ T1335] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.267678][ T1335] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.358661][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.381373][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.423898][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.445577][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.474294][T13291] netlink: 'syz.0.1868': attribute type 6 has an invalid length. [ 282.840055][T13305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1871'. [ 282.861391][T13305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1871'. [ 282.892841][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 282.914454][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 283.035847][T13309] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1870'. [ 283.434217][T12882] IPVS: starting estimator thread 0... [ 283.535119][T13318] IPVS: using max 26 ests per chain, 62400 per kthread [ 283.655843][T13306] lo speed is unknown, defaulting to 1000 [ 283.839377][T13328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1875'. [ 283.869420][T13328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1875'. [ 283.955165][ T5832] Bluetooth: hci6: command tx timeout [ 284.210502][T13306] lo speed is unknown, defaulting to 1000 [ 284.238601][T13306] wg1 speed is unknown, defaulting to 1000 [ 284.257662][T13341] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 284.270649][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1879'. [ 285.469741][T13376] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.478564][T13376] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.546668][T13376] syzkaller0: entered promiscuous mode [ 285.552175][T13376] syzkaller0: entered allmulticast mode [ 285.938413][T13386] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.994766][T13386] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.323701][T13386] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.334164][ T5915] IPVS: starting estimator thread 0... [ 286.367451][T13386] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.613161][T13404] x_tables: duplicate underflow at hook 1 [ 286.619769][T13386] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.649822][T13386] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.918230][T13386] team0: Port device netdevsim0 removed [ 286.953389][T13386] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.965440][T13400] IPVS: using max 33 ests per chain, 79200 per kthread [ 286.996082][T13386] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.076710][T13416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.220220][T13420] __nla_validate_parse: 5 callbacks suppressed [ 287.220240][T13420] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1902'. [ 287.251479][T13420] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1902'. [ 287.274256][T13420] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1902'. [ 287.276680][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.322895][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.374196][T13384] lo speed is unknown, defaulting to 1000 [ 287.380287][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.388987][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.407928][T13420] netlink: 'syz.5.1902': attribute type 9 has an invalid length. [ 287.416420][T13420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.430247][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.445407][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.515196][ T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.533585][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.924068][T13428] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1903'. [ 287.949859][T13408] lo speed is unknown, defaulting to 1000 [ 288.013632][T13384] lo speed is unknown, defaulting to 1000 [ 288.048935][T13384] wg1 speed is unknown, defaulting to 1000 [ 288.225199][T13447] netlink: 'syz.6.1906': attribute type 39 has an invalid length. [ 288.498630][T13447] hsr_slave_1 (unregistering): left promiscuous mode [ 288.510763][T13455] xt_ipcomp: unknown flags 1D [ 288.557345][T13408] lo speed is unknown, defaulting to 1000 [ 288.591313][T13408] wg1 speed is unknown, defaulting to 1000 [ 288.918640][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1915'. [ 289.557525][T13505] atomic_op ffff888054009998 conn xmit_atomic 0000000000000000 [ 289.984277][T13524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1926'. [ 290.005697][T13524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1926'. [ 290.621033][T13479] lo speed is unknown, defaulting to 1000 [ 290.845397][T13540] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1932'. [ 290.939698][T13543] openvswitch: netlink: Message has 4 unknown bytes. [ 290.947885][T13544] x_tables: duplicate underflow at hook 1 [ 290.954546][T13544] x_tables: duplicate underflow at hook 1 [ 290.954951][T13543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.321206][T13479] lo speed is unknown, defaulting to 1000 [ 291.347079][T13479] wg1 speed is unknown, defaulting to 1000 [ 291.408373][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 291.489879][T13560] veth0: entered promiscuous mode [ 292.134839][T13572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1941'. [ 292.226774][T13560] veth0: left promiscuous mode [ 292.303415][T13532] lo speed is unknown, defaulting to 1000 [ 292.329831][T13556] lo speed is unknown, defaulting to 1000 [ 292.656229][T13588] __nla_validate_parse: 1 callbacks suppressed [ 292.656249][T13588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1945'. [ 292.686100][T13588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1945'. [ 292.703899][T13588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1945'. [ 292.714095][T13589] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1945'. [ 292.721806][T13588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1945'. [ 292.785516][T13532] lo speed is unknown, defaulting to 1000 [ 292.794196][T13532] wg1 speed is unknown, defaulting to 1000 [ 292.993464][T13592] bridge0: entered promiscuous mode [ 293.012560][T13592] bridge0: port 1(vlan0) entered blocking state [ 293.025188][T13592] bridge0: port 1(vlan0) entered disabled state [ 293.031725][T13592] vlan0: entered allmulticast mode [ 293.045062][T13592] bridge0: entered allmulticast mode [ 293.053277][T13592] vlan0: left allmulticast mode [ 293.059051][T13592] bridge0: left allmulticast mode [ 293.068889][T13592] bridge0: left promiscuous mode [ 293.181964][T13556] lo speed is unknown, defaulting to 1000 [ 293.220196][T13556] wg1 speed is unknown, defaulting to 1000 [ 294.670511][T13621] syzkaller0: entered promiscuous mode [ 294.687947][T13621] syzkaller0: entered allmulticast mode [ 294.851654][T13627] netlink: 'syz.3.1956': attribute type 10 has an invalid length. [ 294.979133][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1958'. [ 295.006269][T13636] netlink: 'syz.5.1960': attribute type 4 has an invalid length. [ 295.021270][T13632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.081900][T13632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.181537][T13644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1961'. [ 295.224257][T13644] wg1: entered promiscuous mode [ 295.229401][T13644] wg1: entered allmulticast mode [ 295.240758][ T889] wg1 speed is unknown, defaulting to 1000 [ 295.284458][T13646] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1963'. [ 295.290121][T13650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.314572][T13658] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1963'. [ 295.551233][T13668] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1969'. [ 295.955957][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 296.076646][T13693] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 296.087541][T13693] CPU: 0 UID: 0 PID: 13693 Comm: syz.0.1975 Not tainted syzkaller #0 PREEMPT(full) [ 296.087567][T13693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.087594][T13693] Call Trace: [ 296.087603][T13693] [ 296.087612][T13693] dump_stack_lvl+0xe8/0x150 [ 296.087644][T13693] sysfs_warn_dup+0x8e/0xa0 [ 296.087665][T13693] sysfs_do_create_link_sd+0xc0/0x110 [ 296.087687][T13693] device_add_class_symlinks+0x1cf/0x240 [ 296.087716][T13693] device_add+0x475/0xb80 [ 296.087741][T13693] wiphy_register+0x1d2e/0x2d20 [ 296.087787][T13693] ? __pfx_wiphy_register+0x10/0x10 [ 296.087813][T13693] ? __pfx_netdev_run_todo+0x10/0x10 [ 296.087838][T13693] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 296.087869][T13693] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 296.087895][T13693] ieee80211_register_hw+0x34a7/0x4110 [ 296.087918][T13693] ? __lock_acquire+0x6b6/0x2cf0 [ 296.087951][T13693] ? ieee80211_register_hw+0x1411/0x4110 [ 296.087984][T13693] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 296.088020][T13693] ? __hrtimer_setup+0x181/0x200 [ 296.088045][T13693] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 296.088073][T13693] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 296.088121][T13693] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 296.088136][T13693] ? kstrndup+0xbf/0x160 [ 296.088166][T13693] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 296.088191][T13693] ? __pfx___nla_validate_parse+0x10/0x10 [ 296.088228][T13693] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 296.088257][T13693] ? rcu_is_watching+0x15/0xb0 [ 296.088291][T13693] ? __nla_parse+0x40/0x60 [ 296.088316][T13693] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 296.088345][T13693] genl_family_rcv_msg_doit+0x215/0x300 [ 296.088379][T13693] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 296.088414][T13693] ? bpf_lsm_capable+0x9/0x20 [ 296.088437][T13693] ? security_capable+0x7e/0x2e0 [ 296.088467][T13693] genl_rcv_msg+0x60e/0x790 [ 296.088493][T13693] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.088509][T13693] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 296.088545][T13693] netlink_rcv_skb+0x208/0x470 [ 296.088570][T13693] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.088590][T13693] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.088611][T13693] ? genl_rcv+0x19/0x40 [ 296.088660][T13693] ? down_read+0x274/0x2e0 [ 296.088680][T13693] ? genl_rcv+0xd/0x40 [ 296.088710][T13693] genl_rcv+0x28/0x40 [ 296.088736][T13693] netlink_unicast+0x82f/0x9e0 [ 296.088767][T13693] ? __pfx_netlink_unicast+0x10/0x10 [ 296.088787][T13693] ? __alloc_skb+0x198/0x3a0 [ 296.088808][T13693] ? netlink_sendmsg+0x642/0xb30 [ 296.088831][T13693] ? skb_put+0x11b/0x210 [ 296.088856][T13693] netlink_sendmsg+0x805/0xb30 [ 296.088893][T13693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.088922][T13693] ? aa_sock_msg_perm+0xf1/0x1b0 [ 296.088950][T13693] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.088968][T13693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.088995][T13693] __sock_sendmsg+0x21c/0x270 [ 296.089026][T13693] ____sys_sendmsg+0x505/0x820 [ 296.089057][T13693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.089090][T13693] ? import_iovec+0x74/0xa0 [ 296.089117][T13693] ___sys_sendmsg+0x21f/0x2a0 [ 296.089140][T13693] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.089169][T13693] ? futex_wake+0x4b2/0x560 [ 296.089231][T13693] ? __fget_files+0x2a/0x420 [ 296.089254][T13693] ? __fget_files+0x3a0/0x420 [ 296.089291][T13693] __x64_sys_sendmsg+0x19b/0x260 [ 296.089318][T13693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.089352][T13693] ? rcu_is_watching+0x15/0xb0 [ 296.089432][T13693] do_syscall_64+0xec/0xf80 [ 296.089453][T13693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.089472][T13693] ? trace_irq_disable+0x37/0x100 [ 296.089498][T13693] ? clear_bhb_loop+0x60/0xb0 [ 296.089522][T13693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.089542][T13693] RIP: 0033:0x7f56d218f749 [ 296.089560][T13693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.089579][T13693] RSP: 002b:00007f56d3010038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.089600][T13693] RAX: ffffffffffffffda RBX: 00007f56d23e5fa0 RCX: 00007f56d218f749 [ 296.089616][T13693] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 296.089629][T13693] RBP: 00007f56d2213f91 R08: 0000000000000000 R09: 0000000000000000 [ 296.089642][T13693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.089654][T13693] R13: 00007f56d23e6038 R14: 00007f56d23e5fa0 R15: 00007ffd05a4a1a8 [ 296.089691][T13693] [ 296.534490][T12882] IPVS: starting estimator thread 0... [ 296.551768][T13715] ip6gre1: entered allmulticast mode [ 296.645035][T13713] IPVS: using max 29 ests per chain, 69600 per kthread [ 296.901643][T13731] netlink: 'syz.6.1985': attribute type 4 has an invalid length. [ 296.951943][T13733] netlink: 'syz.6.1985': attribute type 4 has an invalid length. [ 297.354515][T13732] lo speed is unknown, defaulting to 1000 [ 297.732098][T13773] netlink: 'syz.5.1997': attribute type 12 has an invalid length. [ 297.754218][T13773] netlink: 'syz.5.1997': attribute type 4 has an invalid length. [ 297.817941][T13732] lo speed is unknown, defaulting to 1000 [ 297.825740][T13732] wg1 speed is unknown, defaulting to 1000 [ 298.181726][T13757] lo speed is unknown, defaulting to 1000 [ 298.973457][T13758] lo speed is unknown, defaulting to 1000 [ 298.997090][T13781] lo speed is unknown, defaulting to 1000 [ 299.005809][T13757] lo speed is unknown, defaulting to 1000 [ 299.013186][T13757] wg1 speed is unknown, defaulting to 1000 [ 299.512549][T13807] netlink: 'syz.5.2005': attribute type 1 has an invalid length. [ 299.597559][T13807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.621840][T13807] __nla_validate_parse: 3 callbacks suppressed [ 299.621859][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2005'. [ 299.685280][T13807] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 299.724497][T13807] bond1: (slave batadv1): making interface the new active one [ 299.758744][T13807] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 299.890688][T13758] lo speed is unknown, defaulting to 1000 [ 299.965331][T13781] lo speed is unknown, defaulting to 1000 [ 299.975135][T13758] wg1 speed is unknown, defaulting to 1000 [ 299.992147][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2005'. [ 300.009925][T13781] wg1 speed is unknown, defaulting to 1000 [ 300.410762][T13807] bond1 (unregistering): (slave batadv1): Releasing active interface [ 300.444054][T13807] bond1 (unregistering): Released all slaves [ 300.772328][T13814] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.780080][T13814] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.918239][T13814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.936052][T13814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.087312][T13814] macsec1: left promiscuous mode [ 301.121079][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2006'. [ 301.136644][ T7274] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.159355][ T7274] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.179664][ T7274] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.198855][ T7274] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.450145][T13827] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 301.459789][ T61] nci: nci_ntf_packet: unknown ntf opcode 0x5 [ 301.609875][T13827] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.705493][T13830] bond7: (slave geneve3): making interface the new active one [ 301.714678][T13830] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 301.746519][ T3728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.754738][ T3728] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.776938][ T3728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.794053][ T3728] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.281459][T13838] netlink: zone id is out of range [ 302.295021][T13838] netlink: zone id is out of range [ 302.308140][T13838] netlink: zone id is out of range [ 302.323590][T13838] netlink: zone id is out of range [ 302.331470][T13838] netlink: zone id is out of range [ 302.350885][T13838] netlink: zone id is out of range [ 302.369630][T13838] netlink: zone id is out of range [ 302.385081][T13838] netlink: zone id is out of range [ 302.582742][ T30] audit: type=1800 audit(1767539885.616:4): pid=13850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2015" name="memory.events" dev="tmpfs" ino=142 res=0 errno=0 [ 303.022805][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2019'. [ 303.111091][T13864] vlan2: entered allmulticast mode [ 303.165003][T13864] dummy0: entered allmulticast mode [ 304.667548][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 304.690026][T13917] netlink: 'syz.6.2032': attribute type 6 has an invalid length. [ 304.709876][T13917] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2032'. [ 305.152649][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2035'. [ 305.234608][T13935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2036'. [ 305.496191][T13946] tls_set_device_offload_rx: netdev not found [ 305.663872][T13954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2039'. [ 305.675504][T13953] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2040'. [ 305.713765][T13954] openvswitch: netlink: Flow key attr not present in new flow. [ 305.820492][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 305.850195][T13962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2041'. [ 306.144821][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 306.266355][T13979] pimreg: entered allmulticast mode [ 306.272763][T13979] pimreg: left allmulticast mode [ 306.342976][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 306.409428][T13987] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 307.252798][T14011] Bluetooth: MGMT ver 1.23 [ 307.506331][T14007] syzkaller0: entered promiscuous mode [ 307.523310][T14007] syzkaller0: entered allmulticast mode [ 307.552827][T14013] netlink: 'syz.3.2056': attribute type 2 has an invalid length. [ 308.105608][ T36] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 308.107650][T14045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.935426][T14080] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 310.146149][T14085] __nla_validate_parse: 3 callbacks suppressed [ 310.146167][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2071'. [ 310.179291][T14085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2071'. [ 310.194518][T14083] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 310.208607][T14083] bond8 (unregistering): Released all slaves [ 310.266418][T14059] lo speed is unknown, defaulting to 1000 [ 310.724164][T14059] lo speed is unknown, defaulting to 1000 [ 310.758366][T14059] wg1 speed is unknown, defaulting to 1000 [ 310.989096][T14110] tipc: Enabled bearer , priority 0 [ 311.021147][T14112] syzkaller0: entered promiscuous mode [ 311.047344][T14112] syzkaller0: entered allmulticast mode [ 311.124920][ C1] syzkaller0: tun_net_xmit 90 [ 311.263915][T14101] tipc: Resetting bearer [ 311.339113][T14101] tipc: Disabling bearer [ 312.051998][ T10] IPVS: starting estimator thread 0... [ 312.067133][T14118] lo speed is unknown, defaulting to 1000 [ 312.073416][T14143] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 312.184970][T14146] IPVS: using max 32 ests per chain, 76800 per kthread [ 312.256977][T14150] netlink: 'syz.6.2087': attribute type 12 has an invalid length. [ 312.271878][T14150] xt_TCPMSS: Only works on TCP SYN packets [ 312.431745][T14157] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2089'. [ 312.499508][T14160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.707696][T14168] vlan0: entered promiscuous mode [ 312.835962][T14118] lo speed is unknown, defaulting to 1000 [ 312.871010][T14118] wg1 speed is unknown, defaulting to 1000 [ 312.885221][T14121] lo speed is unknown, defaulting to 1000 [ 313.176913][T14175] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2095'. [ 313.196282][T14175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2095'. [ 313.402236][T14121] lo speed is unknown, defaulting to 1000 [ 313.415879][T14121] wg1 speed is unknown, defaulting to 1000 [ 313.798793][T14186] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 313.844418][T14195] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2100'. [ 313.976688][T14198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2101'. [ 313.991409][T14193] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2100'. [ 314.006752][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'. [ 314.026793][T14193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2100'. [ 314.158514][T14207] netlink: 'syz.5.2103': attribute type 4 has an invalid length. [ 314.195626][T14206] netlink: 'syz.5.2103': attribute type 4 has an invalid length. [ 314.409346][T14216] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 314.652770][T14219] bond_slave_0: entered promiscuous mode [ 314.658830][T14219] bond_slave_1: entered promiscuous mode [ 314.669990][T14219] macvlan2: entered promiscuous mode [ 314.694494][T14219] bond0: entered promiscuous mode [ 314.722755][T14219] macvlan2: entered allmulticast mode [ 314.744982][T14219] bond0: entered allmulticast mode [ 314.768046][T14219] bond_slave_0: entered allmulticast mode [ 314.774000][T14219] bond_slave_1: entered allmulticast mode [ 314.796911][T14219] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 314.889547][T14219] bond0: left allmulticast mode [ 314.899040][T14219] bond_slave_0: left allmulticast mode [ 314.922262][T14219] bond_slave_1: left allmulticast mode [ 314.927959][T14219] bond0: left promiscuous mode [ 314.934109][T14219] bond_slave_0: left promiscuous mode [ 314.939735][T14219] bond_slave_1: left promiscuous mode [ 315.009764][T14235] tc_dump_action: action bad kind [ 315.283954][T14255] tipc: Enabled bearer , priority 0 [ 315.292030][T14261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.300950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.494663][T14255] tipc: Disabling bearer [ 315.632945][T14268] lo speed is unknown, defaulting to 1000 [ 315.642416][T14275] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 315.757273][T14282] __nla_validate_parse: 7 callbacks suppressed [ 315.757291][T14282] netlink: 212356 bytes leftover after parsing attributes in process `syz.6.2126'. [ 315.803304][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 315.826276][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 315.862730][T14286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2127'. [ 315.890788][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 315.925893][T14286] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2127'. [ 315.949581][T14286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2127'. [ 316.002278][T14268] lo speed is unknown, defaulting to 1000 [ 316.021799][T14268] wg1 speed is unknown, defaulting to 1000 [ 316.083424][T14298] pim6reg: entered allmulticast mode [ 316.130019][T14300] pim6reg: left allmulticast mode [ 316.346784][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2135'. [ 316.363887][T14312] IPv6: Can't replace route, no match found [ 316.371506][T14283] lo speed is unknown, defaulting to 1000 [ 316.621545][T14325] netlink: 'syz.0.2140': attribute type 1 has an invalid length. [ 316.632667][T14329] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2141'. [ 316.662613][T14325] netlink: 'syz.0.2140': attribute type 2 has an invalid length. [ 316.758199][T14325] netlink: 'syz.0.2140': attribute type 1 has an invalid length. [ 316.789145][T14325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2140'. [ 316.929848][T14340] netlink: 'syz.0.2143': attribute type 10 has an invalid length. [ 316.972083][T14328] lo speed is unknown, defaulting to 1000 [ 317.177507][T14283] lo speed is unknown, defaulting to 1000 [ 317.189657][T14283] wg1 speed is unknown, defaulting to 1000 [ 317.285432][T14322] lo speed is unknown, defaulting to 1000 [ 317.843701][T14355] netlink: 'syz.4.2147': attribute type 1 has an invalid length. [ 317.898685][T14328] lo speed is unknown, defaulting to 1000 [ 317.898688][T14339] lo speed is unknown, defaulting to 1000 [ 317.973056][T14322] lo speed is unknown, defaulting to 1000 [ 317.974464][T14328] wg1 speed is unknown, defaulting to 1000 [ 318.168903][T14322] wg1 speed is unknown, defaulting to 1000 [ 318.663991][T14362] lo speed is unknown, defaulting to 1000 [ 318.685291][T14339] lo speed is unknown, defaulting to 1000 [ 318.924785][T14370] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 319.071851][T14339] wg1 speed is unknown, defaulting to 1000 [ 319.108314][T14362] lo speed is unknown, defaulting to 1000 [ 319.146727][T14362] wg1 speed is unknown, defaulting to 1000 [ 319.221461][T14379] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 319.396469][T14379] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.457978][T14382] bond8: (slave ip6erspan0): making interface the new active one [ 319.468102][T14382] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 319.601247][T14387] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 319.880965][T14398] netlink: 'syz.5.2160': attribute type 1 has an invalid length. [ 319.950328][T14398] bond2: entered promiscuous mode [ 319.956911][T14398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.969178][T14397] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 319.982070][T14397] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 319.992479][T14397] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 320.789531][T14417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.797722][T14417] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 321.172043][T14432] netlink: 'syz.0.2169': attribute type 1 has an invalid length. [ 321.180234][T14432] __nla_validate_parse: 4 callbacks suppressed [ 321.180253][T14432] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2169'. [ 321.303531][T14432] vxcan2: entered allmulticast mode [ 321.776246][T14448] netlink: 'syz.5.2172': attribute type 4 has an invalid length. [ 321.791562][T14448] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 321.804142][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2172'. [ 321.840628][ T3728] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.852861][ T3728] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.862970][ T3728] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.890065][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2172'. [ 321.901175][ T3728] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.021605][T14452] syzkaller0: entered promiscuous mode [ 322.036788][T14452] syzkaller0: entered allmulticast mode [ 322.285433][T14464] tipc: Enabled bearer , priority 0 [ 322.305242][T14464] syzkaller0: entered promiscuous mode [ 322.324981][T14464] syzkaller0: entered allmulticast mode [ 322.427693][T14468] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2175'. [ 322.447745][T14468] tipc: Resetting bearer [ 322.487623][T14462] tipc: Resetting bearer [ 322.532296][T14462] tipc: Disabling bearer [ 322.600825][T14474] bond0: entered promiscuous mode [ 322.617458][T14474] batadv0: entered promiscuous mode [ 322.634079][T14474] debugfs: 'hsr0' already exists in 'hsr' [ 322.650174][T14474] Cannot create hsr debugfs directory [ 322.654894][T14477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 322.664832][T14474] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 322.693311][T14474] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 322.715763][T14474] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 322.736454][T14477] netlink: 'syz.5.2178': attribute type 2 has an invalid length. [ 322.746100][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2179'. [ 323.169383][T14506] netlink: 'syz.4.2185': attribute type 1 has an invalid length. [ 323.269515][T14511] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 323.281871][T14511] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 323.311615][T14510] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2186'. [ 323.559490][T14506] bond9: (slave bridge4): Enslaving as an active interface with a down link [ 323.585677][T14515] macvlan0: entered promiscuous mode [ 323.591540][T14515] macvlan0: entered allmulticast mode [ 323.597979][T14515] bond9: entered promiscuous mode [ 323.603969][T14515] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 323.617384][T14515] bond9: left promiscuous mode [ 323.786663][T14524] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2190'. [ 323.921672][T14530] syzkaller1: entered allmulticast mode [ 324.103758][ T30] audit: type=1804 audit(1767539907.136:5): pid=14543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2194" name="/newroot/110/memory.events" dev="tmpfs" ino=584 res=1 errno=0 [ 324.166349][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2197'. [ 324.307916][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.335197][T14557] : renamed from bond_slave_0 [ 324.388217][T14561] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2202'. [ 324.436245][T14561] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2202'. [ 324.702033][T14575] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 325.083058][ T1148] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.097430][ T1148] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.114789][ T1148] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.155881][ T3728] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.357924][T14602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.385845][T14602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.397328][T14608] team_slave_0: entered promiscuous mode [ 325.403330][T14608] team_slave_1: entered promiscuous mode [ 325.414152][T14608] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 325.423343][T14602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.438177][T14602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.447973][T14602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.458166][T14602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.484012][T14602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.498548][T14613] netlink: 'syz.5.2216': attribute type 1 has an invalid length. [ 325.501702][T14602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.594468][T14624] netlink: 'syz.4.2219': attribute type 6 has an invalid length. [ 325.847218][T14645] nbd: must specify a device to reconfigure [ 326.056692][T14655] macvlan0: left allmulticast mode [ 326.077677][T14655] veth1_vlan: left allmulticast mode [ 326.170428][T14641] lo speed is unknown, defaulting to 1000 [ 326.395536][T14641] lo speed is unknown, defaulting to 1000 [ 326.403242][T14641] wg1 speed is unknown, defaulting to 1000 [ 326.615572][T14667] netlink: 'syz.6.2232': attribute type 11 has an invalid length. [ 326.636726][T14667] netlink: 'syz.6.2232': attribute type 11 has an invalid length. [ 326.644569][T14667] __nla_validate_parse: 11 callbacks suppressed [ 326.644587][T14667] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2232'. [ 326.762781][T14664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.937015][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'. [ 327.018804][T14687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2237'. [ 327.076050][T14683] bridge5: port 1(veth0_to_bond) entered blocking state [ 327.101934][T14683] bridge5: port 1(veth0_to_bond) entered disabled state [ 327.110107][T14683] veth0_to_bond: entered allmulticast mode [ 327.123054][T14687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2237'. [ 327.146200][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2239'. [ 327.156966][T14683] veth0_to_bond: entered promiscuous mode [ 327.250965][T14691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.625571][T14705] netlink: 420 bytes leftover after parsing attributes in process `syz.3.2243'. [ 327.706029][T14709] netlink: 'syz.5.2242': attribute type 1 has an invalid length. [ 327.735383][T14709] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2242'. [ 327.855319][T14714] netlink: 'syz.3.2245': attribute type 58 has an invalid length. [ 327.880263][T14714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2245'. [ 328.143687][T14728] geneve3: entered promiscuous mode [ 328.218119][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2250'. [ 328.235650][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2250'. [ 328.497290][T14742] : entered promiscuous mode [ 328.614360][T14746] syzkaller0: entered promiscuous mode [ 328.619950][T14746] syzkaller0: entered allmulticast mode [ 328.887590][T14767] wg1: entered promiscuous mode [ 328.892489][T14767] wg1: entered allmulticast mode [ 329.438082][T14796] : renamed from bond_slave_0 [ 329.875154][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 330.019868][ T10] hid-generic 0005:15C2:FFF9.0001: item fetching failed at offset 0/1 [ 330.085526][T14815] netlink: 'syz.3.2274': attribute type 10 has an invalid length. [ 330.105756][ T10] hid-generic 0005:15C2:FFF9.0001: probe with driver hid-generic failed with error -22 [ 330.668729][T14809] lo speed is unknown, defaulting to 1000 [ 330.933650][T14828] tipc: Enabled bearer , priority 0 [ 330.958363][T14828] syzkaller0: entered promiscuous mode [ 330.974674][T14828] syzkaller0: entered allmulticast mode [ 331.105453][T14823] tipc: Resetting bearer [ 331.157092][T14823] tipc: Disabling bearer [ 331.232018][T14809] lo speed is unknown, defaulting to 1000 [ 331.239836][T14809] wg1 speed is unknown, defaulting to 1000 [ 331.337452][T14832] batadv1: entered promiscuous mode [ 331.439133][T14817] lo speed is unknown, defaulting to 1000 [ 331.941850][T14819] lo speed is unknown, defaulting to 1000 [ 331.957399][T14817] lo speed is unknown, defaulting to 1000 [ 331.979633][T14817] wg1 speed is unknown, defaulting to 1000 [ 332.145717][T14846] __nla_validate_parse: 2 callbacks suppressed [ 332.145736][T14846] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2281'. [ 332.349994][T14851] netlink: 'syz.0.2281': attribute type 3 has an invalid length. [ 332.503077][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2283'. [ 332.512978][T14819] lo speed is unknown, defaulting to 1000 [ 332.526471][T14819] wg1 speed is unknown, defaulting to 1000 [ 332.801634][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2283'. [ 332.990214][T14864] tipc: Can't bind to reserved service type 1 [ 333.248658][T14873] netlink: 'syz.4.2287': attribute type 10 has an invalid length. [ 333.259843][T14873] team0: Device dummy0 is of different type [ 333.397591][T14861] lo speed is unknown, defaulting to 1000 [ 333.398214][T14875] netlink: 'syz.5.2288': attribute type 1 has an invalid length. [ 334.061994][T14861] lo speed is unknown, defaulting to 1000 [ 334.095154][T14861] wg1 speed is unknown, defaulting to 1000 [ 334.735717][T14900] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2294'. [ 334.756807][T14893] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2294'. [ 335.690775][T14909] tc_dump_action: action bad kind [ 336.149218][T14927] net_ratelimit: 57 callbacks suppressed [ 336.149240][T14927] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 336.243478][T14932] netlink: 'syz.5.2305': attribute type 6 has an invalid length. [ 336.265324][T14932] netlink: 'syz.5.2305': attribute type 7 has an invalid length. [ 336.276138][T14932] netlink: 'syz.5.2305': attribute type 8 has an invalid length. [ 336.552379][T14924] lo speed is unknown, defaulting to 1000 [ 336.863746][T14924] lo speed is unknown, defaulting to 1000 [ 336.871656][T14924] wg1 speed is unknown, defaulting to 1000 [ 337.983212][T14969] netlink: 'syz.0.2313': attribute type 1 has an invalid length. [ 338.070416][T14964] lo speed is unknown, defaulting to 1000 [ 338.425598][T14976] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 338.433227][T14964] lo speed is unknown, defaulting to 1000 [ 338.467901][T14964] wg1 speed is unknown, defaulting to 1000 [ 338.763484][T14990] tipc: Enabling of bearer rejected, failed to enable media [ 338.796157][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2319'. [ 339.117370][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2321'. [ 339.846595][T15016] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2324'. [ 340.104328][T15034] SET target dimension over the limit! [ 340.664251][T15031] lo speed is unknown, defaulting to 1000 [ 340.853984][T15069] netlink: 'syz.0.2337': attribute type 1 has an invalid length. [ 340.877462][T15069] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2337'. [ 341.000905][T15031] lo speed is unknown, defaulting to 1000 [ 341.046649][T15031] wg1 speed is unknown, defaulting to 1000 [ 341.882043][T15096] netlink: 'syz.0.2344': attribute type 39 has an invalid length. [ 341.949663][T15098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.968743][T15099] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2344'. [ 341.979429][ T889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 341.995688][T15099] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2344'. [ 342.037976][T15099] netlink: 'syz.0.2344': attribute type 5 has an invalid length. [ 342.059672][T15099] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2344'. [ 342.070978][T15100] vlan2: entered allmulticast mode [ 342.076498][ T889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 342.097951][T15100] bridge_slave_0: entered allmulticast mode [ 342.331686][T15102] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2345'. [ 342.371930][T15102] bond1: entered allmulticast mode [ 342.377910][T15102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.385885][T15104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2346'. [ 342.909227][T15128] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 343.055534][T15128] 8021q: adding VLAN 0 to HW filter on device bond8 [ 343.146199][T15132] veth7: entered promiscuous mode [ 343.162867][T15132] bond8: (slave veth7): Enslaving as an active interface with a down link [ 343.239342][T15128] erspan0: entered allmulticast mode [ 343.436266][T15142] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2356'. [ 343.905624][T15155] bond4: (slave ip6gretap0): making interface the new active one [ 343.927009][T15155] bond4: (slave ip6gretap0): Enslaving as an active interface with an up link [ 344.148528][T15163] netlink: 'syz.6.2362': attribute type 1 has an invalid length. [ 344.157019][T15165] __nla_validate_parse: 1 callbacks suppressed [ 344.157036][T15165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2363'. [ 344.326748][T15163] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.466585][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 344.651742][T15186] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2368'. [ 344.690929][T15186] netlink: 'syz.5.2368': attribute type 8 has an invalid length. [ 344.898023][T15169] lo speed is unknown, defaulting to 1000 [ 345.266531][T15200] netlink: zone id is out of range [ 345.271928][T15200] netlink: zone id is out of range [ 345.277354][T15200] netlink: zone id is out of range [ 345.477010][T15188] lo speed is unknown, defaulting to 1000 [ 345.516178][T15169] lo speed is unknown, defaulting to 1000 [ 345.523822][T15169] wg1 speed is unknown, defaulting to 1000 [ 345.804604][T15208] netlink: 'syz.3.2374': attribute type 1 has an invalid length. [ 346.049410][T15188] lo speed is unknown, defaulting to 1000 [ 346.057571][T15192] lo speed is unknown, defaulting to 1000 [ 346.066953][T15188] wg1 speed is unknown, defaulting to 1000 [ 346.617225][T15192] lo speed is unknown, defaulting to 1000 [ 346.624622][T15192] wg1 speed is unknown, defaulting to 1000 [ 348.290778][T15230] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 349.756551][T15263] netlink: 'syz.5.2386': attribute type 12 has an invalid length. [ 349.826806][T15263] netlink: 'syz.5.2386': attribute type 4 has an invalid length. [ 350.233228][T15251] lo speed is unknown, defaulting to 1000 [ 350.413454][T15270] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2390'. [ 350.921424][T15251] lo speed is unknown, defaulting to 1000 [ 350.946820][T15251] wg1 speed is unknown, defaulting to 1000 [ 351.739328][T15290] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2393'. [ 352.912912][T15317] lo speed is unknown, defaulting to 1000 [ 353.101175][T15329] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2402'. [ 353.156625][T15329] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2402'. [ 353.208246][T15317] lo speed is unknown, defaulting to 1000 [ 353.216650][T15317] wg1 speed is unknown, defaulting to 1000 [ 353.575221][T15345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2406'. [ 353.812744][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.824711][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.163831][T15359] geneve2: entered promiscuous mode [ 354.169763][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2408'. [ 354.190499][T15359] geneve2: entered allmulticast mode [ 354.194672][T15372] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2410'. [ 354.612010][T15371] 8021q: adding VLAN 0 to HW filter on device bond10 [ 354.693162][T15355] lo speed is unknown, defaulting to 1000 [ 354.838366][T15383] syzkaller0: entered promiscuous mode [ 354.843952][T15383] syzkaller0: entered allmulticast mode [ 355.006380][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 356.633887][T15412] netlink: 'syz.0.2418': attribute type 23 has an invalid length. [ 356.953755][T15355] lo speed is unknown, defaulting to 1000 [ 357.004522][T15355] wg1 speed is unknown, defaulting to 1000 [ 357.080890][T15414] syzkaller0: entered promiscuous mode [ 357.087823][T15414] syzkaller0: entered allmulticast mode [ 357.096882][T15414] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2419'. [ 357.525478][T15434] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2425'. [ 357.539930][T15437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2426'. [ 357.777436][T15453] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2431'. [ 358.409328][T15477] syzkaller1: entered promiscuous mode [ 358.448181][T15477] syzkaller1: entered allmulticast mode [ 358.469149][T15481] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2438'. [ 358.517775][T15479] syzkaller0: entered promiscuous mode [ 358.547171][T15479] syzkaller0: entered allmulticast mode [ 358.790661][T15481] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2438'. [ 358.819892][T15481] netlink: 'syz.3.2438': attribute type 6 has an invalid length. [ 359.015998][T15460] lo speed is unknown, defaulting to 1000 [ 359.027242][T15481] netlink: 'syz.3.2438': attribute type 5 has an invalid length. [ 359.051808][T15481] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2438'. [ 359.255860][T15489] sctp: [Deprecated]: syz.3.2440 (pid 15489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.255860][T15489] Use struct sctp_sack_info instead [ 359.344716][T15491] netlink: 'syz.6.2441': attribute type 9 has an invalid length. [ 359.403679][T15460] lo speed is unknown, defaulting to 1000 [ 359.429516][T15460] wg1 speed is unknown, defaulting to 1000 [ 359.440523][T15496] netem: change failed [ 360.012374][T15496] lo speed is unknown, defaulting to 1000 [ 360.024519][T15520] netlink: 'syz.5.2448': attribute type 13 has an invalid length. [ 360.171579][T15525] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 360.210755][T15525] syzkaller0: entered promiscuous mode [ 360.235029][T15525] syzkaller0: entered allmulticast mode [ 360.316938][T15520] tipc: Started in network mode [ 360.321854][T15520] tipc: Node identity 0ef2d611db74, cluster identity 4711 [ 360.356461][T15520] tipc: Enabled bearer , priority 0 [ 360.385987][T15519] tipc: Resetting bearer [ 360.433427][T15529] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2451'. [ 360.467452][T15519] tipc: Disabling bearer [ 360.514136][T15496] lo speed is unknown, defaulting to 1000 [ 360.533006][T15496] wg1 speed is unknown, defaulting to 1000 [ 360.581001][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2453'. [ 360.741997][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2455'. [ 360.799072][T15544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.806362][T15544] IPv6: NLM_F_CREATE should be set when creating new route [ 360.851886][T15541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.859179][T15541] IPv6: NLM_F_CREATE should be set when creating new route [ 361.067110][T15537] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.074329][T15537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.081964][T15537] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.089261][T15537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.165589][T15537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.195402][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'. [ 362.232420][T15570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2461'. [ 362.300131][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2461'. [ 362.499576][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 362.530151][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2465'. [ 362.826367][T15597] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 363.049208][T15608] syzkaller0: entered promiscuous mode [ 363.054728][T15608] syzkaller0: entered allmulticast mode [ 363.170419][T15609] netlink: 'syz.5.2472': attribute type 11 has an invalid length. [ 363.391116][T15589] lo speed is unknown, defaulting to 1000 [ 364.277540][T15644] Cannot find del_set index 4 as target [ 364.291740][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2481'. [ 364.343156][T15589] lo speed is unknown, defaulting to 1000 [ 364.352881][T15589] wg1 speed is unknown, defaulting to 1000 [ 364.363352][T15614] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 365.297297][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2487'. [ 365.355491][T15672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2487'. [ 365.430222][T15674] tipc: Started in network mode [ 365.435755][T15674] tipc: Node identity 7a68e77485d6, cluster identity 4711 [ 365.465046][T15674] tipc: Enabled bearer , priority 0 [ 365.477551][T15674] syzkaller0: entered promiscuous mode [ 365.483054][T15674] syzkaller0: entered allmulticast mode [ 365.501297][T15674] tipc: Resetting bearer [ 365.534468][T15673] tipc: Resetting bearer [ 365.580969][T15673] tipc: Disabling bearer [ 365.768056][T15684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2490'. [ 366.063122][T15694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2493'. [ 366.102338][T15694] bond0: (slave rose0): Enslaving as an active interface with an up link [ 366.425525][T15689] lo speed is unknown, defaulting to 1000 [ 366.776235][T15689] lo speed is unknown, defaulting to 1000 [ 366.784073][T15689] wg1 speed is unknown, defaulting to 1000 [ 367.121028][T15706] syzkaller0: entered promiscuous mode [ 367.135095][T15706] syzkaller0: entered allmulticast mode [ 367.403981][T15708] lo speed is unknown, defaulting to 1000 [ 367.956330][T15708] lo speed is unknown, defaulting to 1000 [ 367.999343][T15708] wg1 speed is unknown, defaulting to 1000 [ 368.127937][T15745] __nla_validate_parse: 1 callbacks suppressed [ 368.127954][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2506'. [ 368.449514][T15753] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2505'. [ 368.532262][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2510'. [ 368.577681][T15756] syzkaller1: entered promiscuous mode [ 368.583318][T15756] syzkaller1: entered allmulticast mode [ 368.599245][T15756] tipc: Failed to remove unknown binding: 66,0,0/0:148367302/148367303 [ 368.608456][T15756] tipc: Failed to remove unknown binding: 66,0,0/0:148367302/148367303 [ 368.645517][T15763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.729033][T15766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.124525][T15760] lo speed is unknown, defaulting to 1000 [ 369.146675][T15786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2516'. [ 369.336817][T15760] lo speed is unknown, defaulting to 1000 [ 369.344546][T15760] wg1 speed is unknown, defaulting to 1000 [ 370.104194][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2524'. [ 370.116273][T15812] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2525'. [ 370.125665][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2524'. [ 370.433538][T15807] batadv1: entered promiscuous mode [ 370.497436][T15807] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 370.804836][T15840] netlink: 'syz.5.2530': attribute type 4 has an invalid length. [ 371.138082][T15847] tipc: Enabled bearer , priority 0 [ 371.152591][T15847] tipc: Resetting bearer [ 371.200783][T15846] tipc: Disabling bearer [ 371.373401][T15826] lo speed is unknown, defaulting to 1000 [ 371.539552][T15851] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 371.797760][T15857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2534'. [ 371.811232][T15826] lo speed is unknown, defaulting to 1000 [ 371.824625][T15828] lo speed is unknown, defaulting to 1000 [ 371.832293][T15826] wg1 speed is unknown, defaulting to 1000 [ 372.102753][T15863] batadv0: mtu less than device minimum [ 372.186883][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 372.392132][T15828] lo speed is unknown, defaulting to 1000 [ 372.425552][T15828] wg1 speed is unknown, defaulting to 1000 [ 372.713577][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 373.025328][T15885] netlink: 'syz.5.2542': attribute type 12 has an invalid length. [ 373.423583][T15903] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2547'. [ 374.051102][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2548'. [ 374.783265][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'. [ 374.818469][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'. [ 374.854288][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'. [ 374.868049][T15956] xt_CT: No such helper "snmp" [ 374.929270][T15962] netlink: 'syz.4.2561': attribute type 10 has an invalid length. [ 375.015881][T15963] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2561'. [ 375.681953][T15974] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2565'. [ 375.846146][T15978] tipc: Enabled bearer , priority 0 [ 375.875551][T15978] syzkaller0: entered promiscuous mode [ 375.881073][T15978] syzkaller0: entered allmulticast mode [ 375.937422][T15978] tipc: Resetting bearer [ 375.977845][T15977] tipc: Resetting bearer [ 376.042475][T15977] tipc: Disabling bearer [ 376.157449][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2568'. [ 376.264335][T15994] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2571'. [ 376.325047][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2571'. [ 376.609763][T15985] lo speed is unknown, defaulting to 1000 [ 376.871030][T16009] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 377.072831][T15985] lo speed is unknown, defaulting to 1000 [ 377.080611][T15985] wg1 speed is unknown, defaulting to 1000 [ 377.635851][T16019] netlink: 'syz.0.2576': attribute type 3 has an invalid length. [ 377.643618][T16019] netlink: 'syz.0.2576': attribute type 16 has an invalid length. [ 378.160628][T16036] tipc: Enabling of bearer rejected, failed to enable media [ 378.170410][T16031] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20003 [ 378.454413][T16054] __nla_validate_parse: 4 callbacks suppressed [ 378.454433][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2587'. [ 378.510841][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2586'. [ 378.820847][T16061] syzkaller1: entered promiscuous mode [ 378.826500][T16061] syzkaller1: entered allmulticast mode [ 379.258150][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 379.838824][T16095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2597'. [ 379.866795][T16080] netlink: 'syz.5.2594': attribute type 25 has an invalid length. [ 379.893342][T16098] netlink: 'syz.0.2598': attribute type 10 has an invalid length. [ 379.937642][T16098] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2598'. [ 379.982772][T16100] netlink: 'syz.6.2599': attribute type 1 has an invalid length. [ 380.000214][T16100] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2599'. [ 380.241507][T16108] netlink: 'syz.0.2601': attribute type 1 has an invalid length. [ 380.453690][T16112] ipt_REJECT: ECHOREPLY no longer supported. [ 380.851599][T16110] lo speed is unknown, defaulting to 1000 [ 381.005666][T16129] openvswitch: netlink: Message has 572 unknown bytes. [ 381.024521][T16129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.098642][T16132] netlink: 'syz.3.2608': attribute type 2 has an invalid length. [ 381.119475][T16132] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2608'. [ 381.129098][T16132] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2608'. [ 381.376894][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2611'. [ 381.431140][T16140] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 381.451149][T16110] lo speed is unknown, defaulting to 1000 [ 381.535975][T16110] wg1 speed is unknown, defaulting to 1000 [ 381.543465][T16150] x_tables: duplicate underflow at hook 2 [ 381.677917][T16142] lo speed is unknown, defaulting to 1000 [ 381.734743][T16153] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2613'. [ 381.778145][T16153] ip6gretap0: entered promiscuous mode [ 382.029993][T16142] lo speed is unknown, defaulting to 1000 [ 382.038479][T16142] wg1 speed is unknown, defaulting to 1000 [ 382.533505][T16175] netlink: 'syz.6.2618': attribute type 1 has an invalid length. [ 382.712692][T16160] lo speed is unknown, defaulting to 1000 [ 382.729673][T16151] lo speed is unknown, defaulting to 1000 [ 383.337928][T16160] lo speed is unknown, defaulting to 1000 [ 383.347750][T16160] wg1 speed is unknown, defaulting to 1000 [ 383.701870][T16151] lo speed is unknown, defaulting to 1000 [ 383.743068][T16151] wg1 speed is unknown, defaulting to 1000 [ 384.946613][T16221] bridge0: entered promiscuous mode [ 384.953653][T16221] bridge0: port 1(vlan2) entered blocking state [ 384.967066][T16221] bridge0: port 1(vlan2) entered disabled state [ 384.975346][T16221] vlan2: entered allmulticast mode [ 384.990787][T16221] bridge0: entered allmulticast mode [ 385.043241][T16221] vlan2: left allmulticast mode [ 385.048680][T16221] bridge0: left allmulticast mode [ 385.063495][T16221] bridge0: left promiscuous mode [ 385.724061][T16259] __nla_validate_parse: 4 callbacks suppressed [ 385.724080][T16259] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2641'. [ 385.915631][T16268] netlink: 'syz.4.2644': attribute type 1 has an invalid length. [ 386.261955][T16269] erspan0: left allmulticast mode [ 386.498627][T16269] bridge0: port 3(bond0) entered disabled state [ 386.505480][T16269] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.512847][T16269] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.669822][T16269] wg1: left promiscuous mode [ 386.674532][T16269] wg1: left allmulticast mode [ 387.093336][T16311] netlink: 'syz.5.2652': attribute type 10 has an invalid length. [ 387.290649][T16269] macvlan2: left promiscuous mode [ 387.304622][T16269] macvlan2: left allmulticast mode [ 387.321349][T16269] team1: left promiscuous mode [ 387.334232][T16269] team1: left allmulticast mode [ 387.344791][T16269] gre2: left allmulticast mode [ 387.367566][T16269] veth1: left promiscuous mode [ 387.373487][T16269] gretap1: left allmulticast mode [ 387.429410][T16269] veth5: left promiscuous mode [ 387.441152][T16269] bond7: left promiscuous mode [ 387.446212][T16269] bond7: left allmulticast mode [ 387.463981][T16269] ip6gre1: left allmulticast mode [ 387.516643][T16269] geneve3: left promiscuous mode [ 387.547275][T16269] veth7: left promiscuous mode [ 387.567374][T16230] lo speed is unknown, defaulting to 1000 [ 387.618023][T16311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.636763][ T889] wg1 speed is unknown, defaulting to 1000 [ 387.643427][ T889] syz: Port: 1 Link DOWN [ 387.648012][T16311] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 387.657272][ T1012] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.666195][ T1012] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.685104][ T1012] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.698767][ T1012] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.713519][ T1012] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.732969][ T1012] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.748270][ T1012] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.757291][ T1012] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.862548][T16320] dvmrp0: entered allmulticast mode [ 387.887802][T16320] netlink: 'syz.4.2656': attribute type 2 has an invalid length. [ 387.941774][T16326] netlink: zone id is out of range [ 387.955582][T16325] netlink: zone id is out of range [ 387.971121][T16325] netlink: zone id is out of range [ 387.991945][T16326] netlink: zone id is out of range [ 388.023610][T16325] netlink: zone id is out of range [ 388.037113][T16326] netlink: zone id is out of range [ 388.052515][T16325] netlink: zone id is out of range [ 388.095191][T16326] netlink: zone id is out of range [ 388.106288][T16326] netlink: zone id is out of range [ 388.116119][T16325] netlink: zone id is out of range [ 388.301978][T16230] lo speed is unknown, defaulting to 1000 [ 388.315496][T16230] wg1 speed is unknown, defaulting to 1000 [ 388.375853][T16306] lo speed is unknown, defaulting to 1000 [ 388.398710][T16341] netlink: 'syz.4.2660': attribute type 1 has an invalid length. [ 388.658804][T16350] Cannot find del_set index 4 as target [ 388.915255][T16350] bond0: (slave batadv0): Releasing backup interface [ 389.022209][T16350] bridge_slave_0: left allmulticast mode [ 389.088176][T16350] bridge_slave_0: left promiscuous mode [ 389.129823][T16350] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.174603][T16350] bridge_slave_1: left allmulticast mode [ 389.189595][T16350] bridge_slave_1: left promiscuous mode [ 389.203929][T16350] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.244135][T16350] bond0: (slave bond_slave_0): Releasing backup interface [ 389.278848][T16350] bond0: (slave bond_slave_1): Releasing backup interface [ 389.327950][T16350] team0: Port device team_slave_0 removed [ 389.357902][T16350] team0: Port device team_slave_1 removed [ 389.364249][T16350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.459090][T16306] lo speed is unknown, defaulting to 1000 [ 389.483596][T16306] wg1 speed is unknown, defaulting to 1000 [ 389.884280][T16392] netlink: 'syz.3.2674': attribute type 1 has an invalid length. [ 390.061465][T16404] netlink: 'syz.4.2675': attribute type 1 has an invalid length. [ 390.075618][T16392] 8021q: adding VLAN 0 to HW filter on device bond9 [ 390.118053][T16408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2675'. [ 390.837897][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 391.176736][T16451] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.188561][T16451] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 391.290088][T16451] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.314294][T16451] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 391.339971][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2690'. [ 391.353046][T16438] lo speed is unknown, defaulting to 1000 [ 391.360360][T16457] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2690'. [ 391.402406][T16451] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.428576][T16451] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 391.563530][T16451] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.590260][T16451] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 391.746096][T15824] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.754486][T15824] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 391.798645][T15824] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.807250][T15824] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 391.830886][T15824] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.842498][T15824] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 391.855789][T16438] lo speed is unknown, defaulting to 1000 [ 391.862187][T15824] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.870977][T15824] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 391.910915][T16438] wg1 speed is unknown, defaulting to 1000 [ 391.984449][T16476] netlink: 'syz.4.2694': attribute type 3 has an invalid length. [ 392.077350][T16476] syzkaller0: entered promiscuous mode [ 392.082828][T16476] syzkaller0: entered allmulticast mode [ 392.103255][T16478] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2695'. [ 392.112886][T16480] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2696'. [ 392.162876][T16478] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2695'. [ 392.301358][T16482] IPVS: Unknown mcast interface: veth0_virt_wifi [ 392.407034][T16489] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2699'. [ 392.488071][T16491] ip6tnl0: Caught tx_queue_len zero misconfig [ 392.569502][T16496] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2703'. [ 392.589861][T16496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2703'. [ 392.642257][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.661212][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.684134][T16496] netlink: 'syz.6.2703': attribute type 1 has an invalid length. [ 392.684919][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.730249][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.994625][T16519] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2708'. [ 393.009611][T16519] net_ratelimit: 79 callbacks suppressed [ 393.009629][T16519] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 393.023929][T16519] openvswitch: netlink: Message has 75 unknown bytes. [ 393.036301][T16519] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2708'. [ 393.219485][T16538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.249619][T16536] tipc: Enabled bearer , priority 0 [ 393.382474][T16536] syzkaller0: entered promiscuous mode [ 393.398093][T16536] syzkaller0: entered allmulticast mode [ 393.417071][T16536] tipc: Resetting bearer [ 393.495194][T16536] tipc: Resetting bearer [ 393.670309][T16539] infiniband syû: set down [ 393.683552][T16539] infiniband syû: added bond_slave_0 [ 393.725817][T16539] RDS/IB: syû: added [ 393.729816][T16539] smc: adding ib device syû with port count 1 [ 393.737254][T16539] smc: ib device syû port 1 has no pnetid [ 395.071838][T16536] tipc: Disabling bearer [ 395.105975][ T889] tipc: Node number set to 3582383633 [ 395.337272][T16584] mac80211_hwsim hwsim24 wlan1: Caught tx_queue_len zero misconfig [ 395.626196][T16595] syzkaller1: entered promiscuous mode [ 395.640517][T16595] syzkaller1: entered allmulticast mode [ 396.795888][T16581] siw: device registration error -23 [ 397.041807][T16614] lo speed is unknown, defaulting to 1000 [ 397.329683][T16595] lo speed is unknown, defaulting to 1000 [ 397.396885][T16614] lo speed is unknown, defaulting to 1000 [ 397.412401][T16614] wg1 speed is unknown, defaulting to 1000 [ 397.718982][T16595] lo speed is unknown, defaulting to 1000 [ 397.726622][T16595] wg1 speed is unknown, defaulting to 1000 [ 398.034258][T16629] __nla_validate_parse: 5 callbacks suppressed [ 398.034276][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2733'. [ 398.065760][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2733'. [ 398.081375][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2733'. [ 398.103833][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2733'. [ 398.126351][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2733'. [ 398.136960][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2733'. [ 398.146365][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2733'. [ 398.156491][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2733'. [ 398.166339][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2733'. [ 398.175663][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2733'. [ 398.349935][T16616] lo speed is unknown, defaulting to 1000 [ 398.390333][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.399141][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 398.413119][T16633] syzkaller1: entered promiscuous mode [ 398.419003][T16633] syzkaller1: entered allmulticast mode [ 398.426211][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.436776][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 398.549987][ T36] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.564636][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 398.577118][ T36] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.615771][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 398.911851][T16616] lo speed is unknown, defaulting to 1000 [ 398.976849][T16616] wg1 speed is unknown, defaulting to 1000 [ 399.683869][T16649] lo speed is unknown, defaulting to 1000 [ 400.163778][T16659] netlink: 'syz.0.2740': attribute type 1 has an invalid length. [ 400.282863][T16656] lo speed is unknown, defaulting to 1000 [ 400.301405][T16649] lo speed is unknown, defaulting to 1000 [ 400.309870][T16649] wg1 speed is unknown, defaulting to 1000 [ 400.828335][T16656] lo speed is unknown, defaulting to 1000 [ 400.840299][T16656] wg1 speed is unknown, defaulting to 1000 [ 401.124630][T16696] tipc: Enabled bearer , priority 0 [ 401.176143][T16696] syzkaller0: entered promiscuous mode [ 401.181655][T16696] syzkaller0: entered allmulticast mode [ 401.205092][T16695] tipc: Resetting bearer [ 401.246877][T16695] tipc: Disabling bearer [ 403.140129][T16761] xt_CT: No such helper "netbios-ns" [ 403.331480][T16775] __nla_validate_parse: 207 callbacks suppressed [ 403.331494][T16775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2766'. [ 403.379284][T16755] lo speed is unknown, defaulting to 1000 [ 403.861066][T16755] lo speed is unknown, defaulting to 1000 [ 403.888749][T16755] wg1 speed is unknown, defaulting to 1000 [ 403.960020][T16798] netlink: 'syz.0.2775': attribute type 16 has an invalid length. [ 403.995520][T16798] netlink: 'syz.0.2775': attribute type 3 has an invalid length. [ 404.075456][T16798] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2775'. [ 404.313884][T16809] netlink: 'syz.0.2777': attribute type 4 has an invalid length. [ 404.355912][T16809] netlink: 'syz.0.2777': attribute type 4 has an invalid length. [ 404.378923][T16809] netlink: 'syz.0.2777': attribute type 4 has an invalid length. [ 404.405186][T16809] netlink: 'syz.0.2777': attribute type 4 has an invalid length. [ 404.411642][T16808] bond0: left allmulticast mode [ 404.422561][T16809] netlink: 'syz.0.2777': attribute type 4 has an invalid length. [ 404.424987][T16808] bond_slave_0: left allmulticast mode [ 404.431060][T16809] netlink: 'syz.0.2777': attribute type 4 has an invalid length. [ 404.444054][T16809] netlink: 'syz.0.2777': attribute type 4 has an invalid length. [ 404.453960][T16808] bond_slave_1: left allmulticast mode [ 404.467087][T16808] bond0: left promiscuous mode [ 404.482114][T16808] bond_slave_0: left promiscuous mode [ 404.505356][T16808] bond_slave_1: left promiscuous mode [ 404.521405][T16808] bridge0: port 3(bond0) entered disabled state [ 404.552759][T16808] bridge_slave_0: left promiscuous mode [ 404.569329][T16808] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.581050][T16821] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2781'. [ 404.600919][T16808] bridge_slave_1: left allmulticast mode [ 404.615064][T16808] bridge_slave_1: left promiscuous mode [ 404.620977][T16808] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.645945][T16808] veth0_to_bond: left allmulticast mode [ 404.661771][T16808] veth0_to_bond: left promiscuous mode [ 404.677693][T16808] bridge5: port 1(veth0_to_bond) entered disabled state [ 404.700044][T16808] bond0: (slave bond_slave_0): Releasing backup interface [ 404.710321][T16808] bond0: (slave bond_slave_1): Releasing backup interface [ 404.722699][T16808] team0: Port device team_slave_0 removed [ 404.746072][T16808] team0: Port device team_slave_1 removed [ 404.752618][T16808] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 404.889258][T16828] geneve4: entered promiscuous mode [ 404.920118][ T7274] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 404.956620][ T7274] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 404.989443][ T7274] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 405.177297][ T7274] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 405.442169][T16863] validate_nla: 59 callbacks suppressed [ 405.442188][T16863] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 405.508814][T16871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2793'. [ 405.703896][T16880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2797'. [ 405.732721][T16881] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.2796'. [ 406.137057][T16895] syzkaller0: entered promiscuous mode [ 406.142652][T16895] syzkaller0: entered allmulticast mode [ 406.221556][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 406.479949][T16877] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 406.627763][T16908] lo speed is unknown, defaulting to 1000 [ 406.739594][T16917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2804'. [ 406.882460][T16908] lo speed is unknown, defaulting to 1000 [ 406.900632][T16908] wg1 speed is unknown, defaulting to 1000 [ 408.482237][T16958] netlink: 664 bytes leftover after parsing attributes in process `syz.0.2815'. [ 410.266015][T16963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.519355][T16973] netlink: 'syz.6.2819': attribute type 1 has an invalid length. [ 410.545945][T16973] netlink: 'syz.6.2819': attribute type 3 has an invalid length. [ 410.553872][T16973] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2819'. [ 410.655407][T16988] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2820'. [ 411.101639][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2825'. [ 411.425692][T17022] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2828'. [ 411.693073][T17024] lo speed is unknown, defaulting to 1000 [ 411.762991][T17039] tipc: Enabled bearer , priority 0 [ 411.842395][T17039] tipc: Disabling bearer [ 411.864000][T17046] syzkaller0: entered promiscuous mode [ 411.870313][T17046] syzkaller0: entered allmulticast mode [ 411.940431][T17046] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 412.022092][T17048] netlink: 'syz.0.2835': attribute type 1 has an invalid length. [ 412.050292][T17028] lo speed is unknown, defaulting to 1000 [ 412.245788][T17024] lo speed is unknown, defaulting to 1000 [ 412.253237][T17024] wg1 speed is unknown, defaulting to 1000 [ 412.289204][T17055] netlink: 'syz.0.2838': attribute type 142 has an invalid length. [ 412.373908][T17059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2838'. [ 412.395417][T17059] unsupported nlmsg_type 40 [ 412.570972][T17063] netlink: 'syz.3.2840': attribute type 11 has an invalid length. [ 412.586133][T17063] openvswitch: netlink: Missing key (keys=40, expected=80) [ 412.614779][T17028] lo speed is unknown, defaulting to 1000 [ 412.631786][T17028] wg1 speed is unknown, defaulting to 1000 [ 413.271218][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2843'. [ 413.723918][ T31] INFO: task syz.2.1659:12442 blocked for more than 143 seconds. [ 413.754939][ T31] Not tainted syzkaller #0 [ 413.769889][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.799093][ T31] task:syz.2.1659 state:D stack:25760 pid:12442 tgid:12441 ppid:5843 task_flags:0x400140 flags:0x00080002 [ 413.831685][ T31] Call Trace: [ 413.841081][ T31] [ 413.846252][ T31] __schedule+0x149b/0x4fd0 [ 413.851084][ T31] ? preempt_schedule_notrace+0x57/0x90 [ 413.865452][ T31] ? __pfx___schedule+0x10/0x10 [ 413.876029][ T31] ? schedule+0x91/0x360 [ 413.880326][ T31] schedule+0x165/0x360 [ 413.894692][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.904811][ T31] __mutex_lock+0x7e6/0x1350 [ 413.909586][ T31] ? __mutex_lock+0x5bb/0x1350 [ 413.914379][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 413.930389][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.935638][ T31] ? __nlmsg_put+0xef/0x1b0 [ 413.950605][ T31] ? genlmsg_put+0x137/0x2e0 [ 413.960709][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 413.984974][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 414.001298][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 414.011412][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 414.034946][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 414.041080][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 414.055694][ T31] genl_rcv_msg+0x60e/0x790 [ 414.064769][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.085356][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 414.098591][ T31] netlink_rcv_skb+0x208/0x470 [ 414.110373][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.122437][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.135003][ T31] ? genl_rcv+0x19/0x40 [ 414.144956][ T31] ? down_read+0x274/0x2e0 [ 414.149425][ T31] ? genl_rcv+0xd/0x40 [ 414.159753][ T31] genl_rcv+0x28/0x40 [ 414.163774][ T31] netlink_unicast+0x82f/0x9e0 [ 414.179122][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 414.184761][ T31] ? __alloc_skb+0x198/0x3a0 [ 414.190643][ T31] ? netlink_sendmsg+0x642/0xb30 [ 414.198042][ T31] ? skb_put+0x11b/0x210 [ 414.202543][ T31] netlink_sendmsg+0x805/0xb30 [ 414.207557][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.213061][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 414.218362][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.223842][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.229380][ T31] __sock_sendmsg+0x21c/0x270 [ 414.234256][ T31] ____sys_sendmsg+0x505/0x820 [ 414.239248][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.244770][ T31] ? import_iovec+0x74/0xa0 [ 414.249436][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 414.254276][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.259704][ T31] ? futex_wait+0x285/0x360 [ 414.264262][ T31] ? __fget_files+0x2a/0x420 [ 414.268939][ T31] ? __fget_files+0x3a0/0x420 [ 414.273627][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 414.278807][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.284301][ T31] ? rcu_is_watching+0x15/0xb0 [ 414.289190][ T31] do_syscall_64+0xec/0xf80 [ 414.293720][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.300170][ T31] ? clear_bhb_loop+0x60/0xb0 [ 414.304898][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.310824][ T31] RIP: 0033:0x7fc100b8f749 [ 414.315343][ T31] RSP: 002b:00007fc0fedf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.323774][ T31] RAX: ffffffffffffffda RBX: 00007fc100de5fa0 RCX: 00007fc100b8f749 [ 414.331986][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 000000000000000d [ 414.340064][ T31] RBP: 00007fc100c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 414.348076][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.359195][ T31] R13: 00007fc100de6038 R14: 00007fc100de5fa0 R15: 00007ffd43992758 [ 414.367256][ T31] [ 414.412828][ T31] [ 414.412828][ T31] Showing all locks held in the system: [ 414.436160][ T31] 1 lock held by pool_workqueue_/3: [ 414.441645][ T31] 1 lock held by khungtaskd/31: [ 414.447226][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 414.457615][ T31] 3 locks held by kworker/u8:4/61: [ 414.462916][ T31] 5 locks held by kworker/u8:8/1148: [ 414.468601][ T31] 2 locks held by getty/5592: [ 414.473452][ T31] #0: ffff88814e6c40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 414.483599][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 414.494082][ T31] 5 locks held by kworker/u8:16/6314: [ 414.499824][ T31] 2 locks held by syz.1.1549/12036: [ 414.505557][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.513974][ T31] #1: ffffffff8e237b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 414.527342][ T31] 2 locks held by syz.2.1659/12442: [ 414.532759][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.541585][ T31] #1: ffffffff8e237b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 414.551912][ T31] 2 locks held by syz.4.2831/17028: [ 414.557191][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 414.567266][ T31] #1: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120 [ 414.577496][ T31] [ 414.585172][ T31] ============================================= [ 414.585172][ T31] [ 414.593607][ T31] NMI backtrace for cpu 1 [ 414.593623][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 414.593635][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.593642][ T31] Call Trace: [ 414.593648][ T31] [ 414.593655][ T31] dump_stack_lvl+0xe8/0x150 [ 414.593677][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 414.593693][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 414.593711][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 414.593727][ T31] sys_info+0x135/0x170 [ 414.593738][ T31] watchdog+0xf95/0xfe0 [ 414.593755][ T31] ? watchdog+0x20a/0xfe0 [ 414.593772][ T31] kthread+0x711/0x8a0 [ 414.593787][ T31] ? __pfx_watchdog+0x10/0x10 [ 414.593801][ T31] ? __pfx_kthread+0x10/0x10 [ 414.593815][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.593830][ T31] ? __pfx_kthread+0x10/0x10 [ 414.593843][ T31] ret_from_fork+0x510/0xa50 [ 414.593854][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 414.593862][ T31] ? __switch_to+0xc9e/0x1480 [ 414.593878][ T31] ? __pfx_kthread+0x10/0x10 [ 414.593892][ T31] ret_from_fork_asm+0x1a/0x30 [ 414.593913][ T31] [ 414.593917][ T31] Sending NMI from CPU 1 to CPUs 0: [ 414.714728][ C0] NMI backtrace for cpu 0 [ 414.714745][ C0] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 414.714765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.714775][ C0] RIP: 0010:__x64_sys_clock_nanosleep+0x60/0xb0 [ 414.714802][ C0] Code: 4c 8b 73 70 48 8d 7b 68 48 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 0f 33 76 00 4c 8b 7b 68 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 f4 32 76 00 4c 8b 63 60 48 83 c3 38 48 89 [ 414.714817][ C0] RSP: 0018:ffffc90003e5fec0 EFLAGS: 00000a06 [ 414.714833][ C0] RAX: 1ffff920007cbff5 RBX: ffffc90003e5ff48 RCX: ffff8880300dbd00 [ 414.714848][ C0] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: ffffc90003e5ffa8 [ 414.714859][ C0] RBP: ffffc90003e5ff38 R08: ffffffff8f822277 R09: 1ffffffff1f0444e [ 414.714870][ C0] R10: dffffc0000000000 R11: fffffbfff1f0444f R12: 00000000000000e6 [ 414.714882][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.714892][ C0] FS: 0000555592bd3500(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 414.714905][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.714917][ C0] CR2: 000055555755f5c8 CR3: 0000000076b4a000 CR4: 00000000003526f0 [ 414.714931][ C0] Call Trace: [ 414.714938][ C0] [ 414.714947][ C0] do_syscall_64+0xec/0xf80 [ 414.714966][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.714982][ C0] ? clear_bhb_loop+0x60/0xb0 [ 414.715001][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.715017][ C0] RIP: 0033:0x7fc2fc5c1fc3 [ 414.715030][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 414.715044][ C0] RSP: 002b:00007ffe68ea5dd8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 414.715061][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc2fc5c1fc3 [ 414.715072][ C0] RDX: 00007ffe68ea5df0 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.715083][ C0] RBP: 0000000000000000 R08: 7fffffffffffffff R09: 3fffffffffffffff [ 414.715095][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe68ea6240 [ 414.715105][ C0] R13: 0000000000000004 R14: 00007ffe68ea5e2c R15: 00007ffe68ea5ec0 [ 414.715127][ C0] [ 414.794991][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 414.795012][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 414.795035][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.795046][ T31] Call Trace: [ 414.795056][ T31] [ 414.795064][ T31] vpanic+0x1e0/0x670 [ 414.795095][ T31] panic+0xb9/0xc0 [ 414.795117][ T31] ? __pfx_panic+0x10/0x10 [ 414.795141][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 414.795166][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 414.795197][ T31] watchdog+0xfdf/0xfe0 [ 414.795228][ T31] ? watchdog+0x20a/0xfe0 [ 414.795260][ T31] kthread+0x711/0x8a0 [ 414.795288][ T31] ? __pfx_watchdog+0x10/0x10 [ 414.795312][ T31] ? __pfx_kthread+0x10/0x10 [ 414.795340][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.795367][ T31] ? __pfx_kthread+0x10/0x10 [ 414.795392][ T31] ret_from_fork+0x510/0xa50 [ 414.795414][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 414.795438][ T31] ? __switch_to+0xc9e/0x1480 [ 414.795467][ T31] ? __pfx_kthread+0x10/0x10 [ 414.795493][ T31] ret_from_fork_asm+0x1a/0x30 [ 414.795533][ T31] [ 415.050878][ T31] Kernel Offset: disabled [ 415.055185][ T31] Rebooting in 86400 seconds..