last executing test programs: 4m32.824686183s ago: executing program 32 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x2, {}, 0xfd}, 0x18) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x10, 0x8, 0xa19, 0x3, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x64, 0x0, 0xdc, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}]}}}}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010db77ae80e0000000007000000", @ANYRES32=r7, @ANYBLOB="000d05000000000014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x81, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd8, 0x0, 0x311, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2400c000}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) 3m0.616407969s ago: executing program 5 (id=1265): r0 = socket$can_j1939(0x1d, 0x2, 0x7) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0xa, 0x801}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x5, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) accept(r1, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000000)=0x80) getsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000280)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x400002, 0x4) 3m0.340437116s ago: executing program 5 (id=1268): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x32}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x8c0]}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x0, 0xa062, 0x1]}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) close(r0) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000400)={'wlan1\x00'}) 3m0.143597728s ago: executing program 5 (id=1272): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x10, 0x8000, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4f}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x1c, r1, 0x3, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x858}, 0x2004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x90) 2m59.92064689s ago: executing program 5 (id=1276): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r2, &(0x7f0000000140)=""/186, 0xba, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000008c0)=r4, 0x4) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 2m58.888284886s ago: executing program 5 (id=1292): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x24801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) close(0x3) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000100)={0x18, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x200, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3a6be}}, 0x20}, 0x1, 0x0, 0x0, 0x20044011}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendto$packet(r1, &(0x7f0000000400)="307f3001580621c6f9c267b914f5150813788d26af3bcb1f81220d3cc722b5d61ac73ba0aa6c6203fee8253e0559367ea0d1f5a96d5df170204cfb66653727f1dfc2493c32cfc5a14d6ba5ea7604882821cb063382f562d723d0ebad9fc92ac7b81fd90530a80feaf3ac633b126a1ed06ee23285c357e7302c8e4ec4", 0x7c, 0x24000050, &(0x7f00000000c0)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m57.892696332s ago: executing program 33 (id=1296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff"], 0x3c}}, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x401c5820, &(0x7f0000000040)) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000808000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) 2m57.848439242s ago: executing program 5 (id=1299): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x80087601, 0x0) 2m57.40302312s ago: executing program 34 (id=1299): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x80087601, 0x0) 2m29.416137303s ago: executing program 6 (id=1599): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r1, 0x301, 0x709d26, 0x0, {0x34}}, 0x14}}, 0x40080) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r3, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) 2m29.284277375s ago: executing program 6 (id=1602): r0 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000015c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1000"/12, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0xffffffffffffffff, 0x39}, 0x48) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c90d1df63b4198f55448aba8a654000000438ba94c6091dcd1e98b05be88558976", @ANYRES16=r3, @ANYBLOB="010000000000000000002d0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000012ff8e000000000002008f0000000000000000000c0090000000000000000000"], 0xa0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000001540)={r9}, 0x8) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r11, 0x11, 0x0, 0x0, @void, @value=r10}, 0x20) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000200)=0x3) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'macvlan1\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "0ee8a808941c4da72524f794b5edc67608616d924ca70d8235ff19fd43cfbbdc", "bfe519402c358b35d3605adfd271a54806ff5004e7186adc2cccd48265ef3a4b", "49b2f2e05ac6b34d7b93d55fbea1d36c5a838fdd6f7c536af96335affbcf4c27", "89e6f349fd75d21b00d5f3c79164081b1202fe3586b20c1750be1146bcf001ec", "64fde8cc0b51858d4bbed89b789057adf7894f4b1c8bbeb0e1850144997bf967", "ae010cd12d01e1bbf73405af", 0x4, 0x7f, 0x1, 0x8a, 0xaa}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x9, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}}, 0x24000000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) 2m29.085715465s ago: executing program 6 (id=1607): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x6, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0xffffff44}], 0x10}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="15e300000a600400140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m28.561330002s ago: executing program 6 (id=1614): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x5}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20048840) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000080012800400"], 0x28}}, 0x0) r3 = socket(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12001) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x6}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r7, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, @dev, 0x0, 0x0, 0x0, 0xfffffffe}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@gettaction={0xa8, 0x32, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@deltclass={0x3c, 0x29, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0x8, 0x8}, {0xfff1, 0x2}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cake={0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x100000c1) 2m28.398875315s ago: executing program 6 (id=1617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) (rerun: 64) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, 0x0, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x70bd29, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x80) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5d}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r3, 0x1ff, 0x6, 0x9}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0xe, 0x4, 0x9, 0x5, 0x8, 0x3, 0x6}, 0x9c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lblcr\x00', 0x1a, 0x323b, 0x55}, {@multicast2, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4040840}, 0x40) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m27.576299003s ago: executing program 6 (id=1629): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) unshare(0x22020600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000000c0)={0x8, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @empty}}}, 0x108) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = accept4(r0, 0x0, &(0x7f0000000200), 0x800) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @multicast2}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000002c0)=0x10000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000242b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a020201"], 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) close(r7) r8 = socket$inet6(0x10, 0x2, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0) 2m16.685596099s ago: executing program 3 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 2m16.503854821s ago: executing program 3 (id=1796): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) 2m16.435172242s ago: executing program 3 (id=1797): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f0000000040)='ns/time_for_children\x00') sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@RTM_GETNSID={0x54, 0x5a, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r8, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x10004, 0x1c05}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x4008042) 2m16.216430718s ago: executing program 3 (id=1800): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000"], 0xb8}}, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000003c0)={r2, 0x68}, &(0x7f0000000400)=0x8) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (rerun: 32) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x4, &(0x7f0000000000)=0x5, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) 2m16.011665424s ago: executing program 3 (id=1805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r2, 0x0, 0x50, 0x0, &(0x7f0000000100)) listen(r1, 0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="efacc942a572b8ae00", @ANYRES32=r6, @ANYBLOB="1400040070696d3672656730000000000000000008000500060000001c00e70031329eae551326051c0ecba1df0ef9cc9415b343831f26fe0c0017800400030004000400"], 0x60}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m15.865806299s ago: executing program 3 (id=1809): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcb, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x4000007, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000160a03000000000000000000000000070900010073797a3000000000140000001100010000000000000000000700000a3879d96db51b5d6071e887112bade734bfbb4037352f70875264ac45060a28cf17ee744f99336efa91d2674a4ab3b1fffdf15dc7d10f2773f146679958a5a4ec119d61d12197864a08d66d41b5f9cf0597b6cfb3332b32d914da73a8f54a9c67f260c6cdcba7031d1883127696515f69817c296d5232c98d4fa415d657bf06468d91550a0d5425160000000000000000000000000000059e400194c72b11d524636cbbc36fc74af5c027ec0a4f77ddb3db23197c49c690c37e1cf8bf436ef280b2a7dc530235d93d7122d7892b5fdb67a21fdd76deae0b231826c8fa578fb95c6c5cb888095c15a8d8088a97"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x4004080) setsockopt$MRT6_ASSERT(r4, 0x29, 0xcf, &(0x7f00000000c0), 0x4) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r5 = socket(0x1e, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="456f5e000000000000000a0000000800028004000400"], 0x1c}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 2m12.519972486s ago: executing program 35 (id=1629): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) unshare(0x22020600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000000c0)={0x8, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @empty}}}, 0x108) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = accept4(r0, 0x0, &(0x7f0000000200), 0x800) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @multicast2}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000002c0)=0x10000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000242b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a020201"], 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) close(r7) r8 = socket$inet6(0x10, 0x2, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0) 2m0.698484849s ago: executing program 36 (id=1809): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcb, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x4000007, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x4004080) setsockopt$MRT6_ASSERT(r4, 0x29, 0xcf, &(0x7f00000000c0), 0x4) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r5 = socket(0x1e, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="456f5e000000000000000a0000000800028004000400"], 0x1c}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 1m14.607670817s ago: executing program 1 (id=2615): r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd9, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async) sendmsg$unix(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x2f, 0x2e}, 0x6e, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000880) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0) 1m14.465422951s ago: executing program 1 (id=2618): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @empty}, @in={0x2, 0x0, @local}], 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010001fff00000000ffdbdf2500000000c622c6f671cb6e6d49c12e6bf431da279893896b5a284c6a96af5e5a117fa644bad75ce51e5884e7b668205fa8b9a0e5def597da71f0e007e29b3f69f0da9ccf4ec2f73dde3a4db2ad05702b981844376102383fca6cbee819a9c794077ccea04fc4a6e3f319622d4144ac8d86c52ee909761806df144bb9915b8aba347276b894e044cea48f4c417aad92d4601cf1e03a21ad085bfdf66e5535543cc13f08a36af403f4b8df9c96fd3aec0aac", @ANYRES32=0x0, @ANYBLOB="0000040088520300300012800b0001006970366772650000200002800600030007000000060002000400000008000d000700000004001200"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0xc0000) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r4, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff9970, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x999}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_USE_RRM={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa1a}], @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x40046) 1m14.316494339s ago: executing program 1 (id=2621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1m13.80848985s ago: executing program 1 (id=2627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x570afb38fd555380}, '\x00\x00\x00\x00\t\x00', "5171bb74cd3660dab9bef700", "d8a024e5", "20000926000200"}, 0x38) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba189", 0x8, 0xfa068fc268af028d, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x7fff, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="c537e0eec4b21f82d7b488b65ba9f4f9d670dedf32e5d41b6caf3d909ffcdbd82a658119d6c5c9", @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf250900000008000300", @ANYRES32=r6, @ANYBLOB="0500080006000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4804) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "c43cf3f93d83225a", "b4f6757f3dca139728ecd2e88b7fc0b0", "4ae1a5fd", "b9e13446520c6328"}, 0x28) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x40004) 1m13.478043156s ago: executing program 1 (id=2633): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x38, r2, 0x8d61ddcfedb48df, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x84) (async) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000000) (async) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) socket$kcm(0x2, 0x3, 0x2) (async) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e9000232c1ffb0e6c126a861d4e76f9fd29605d78d14d53159703b19e15aa20627116c7bd0cfa1828f805ba3079a0b870e73a5da9045e8f57d4c2a0640bdd72277cc3038c96a0950369faaa79e464b4cdec30fdf12433447a513d6cce0d4ebd979a202b396cfe3f8790130d87b4ab99c3eedd5f9a0f8a35ec1b66f99f1d58bbe1e1135f7cc521c7e4400fdca9b1b444e5aafdfd9cf4cd2f7799948b6fd018ed01bab869f7a3d33f3c99e6e5f903c3a325e0ac2d9ea23bdd483157d8b871296738619665c8cce0a41a584e2df4e9ce032"], 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1m13.204496638s ago: executing program 1 (id=2636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x1404, 0x10, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x42}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc01, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x3, 0xc89, 0x6, 0x6, 0x5}, @multicast2, @private=0xa010102, 0xff}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x5, 0x7c, 0x4, 0x5, 0x7ff}, @remote, @rand_addr=0x64010101, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r7, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x1c, r8, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x8040) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000500)=0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r10, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 58.123434221s ago: executing program 37 (id=2636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x1404, 0x10, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x42}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc01, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x3, 0xc89, 0x6, 0x6, 0x5}, @multicast2, @private=0xa010102, 0xff}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x5, 0x7c, 0x4, 0x5, 0x7ff}, @remote, @rand_addr=0x64010101, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r7, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x1c, r8, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x8040) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000500)=0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r10, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 38.402960797s ago: executing program 0 (id=3116): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r2) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x14, r3, 0x926fdb2c68a18847, 0x70bd2d, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24048001}, 0x44040) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000001060101000000000000000001000015050001bf07000000050001000700000025000100070000000500cd7e430200176103c31b9665223de24156991dc901000700"/80], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x810) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r7 = socket(0x1, 0x3, 0x0) (rerun: 64) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) (async) recvmsg$can_raw(r7, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40012020) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x4020) 38.037749302s ago: executing program 0 (id=3122): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600fe8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000c001a800800028004000180080004"], 0x34}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@newae={0x180, 0x1e, 0x302, 0x70bd2b, 0x25dfdbfb, {{@in6=@remote, 0x4d4, 0x2, 0x33}, @in=@loopback, 0x10, 0x3504}, [@tfcpad={0x8, 0x16, 0xffff7fff}, @etimer_thresh={0x8}, @algo_crypt={0x4b, 0x2, {{'ctr(aes-aesni)\x00'}, 0x18, "09bace"}}, @sa={0xe4, 0x6, {{@in=@multicast1, @in6=@mcast2, 0x4e24, 0x395, 0x4e22, 0x2, 0x0, 0x180, 0x20, 0x87, r4, r5}, {@in=@private=0xa010102, 0x4d5, 0x33}, @in=@private=0xa010100, {0x6284, 0x0, 0x4a, 0x80, 0x8000, 0x3, 0x4, 0x6}, {0x2, 0xfa05, 0xc, 0x1}, {0x8, 0xcc, 0x101}, 0x70bd2c, 0x34ff, 0x2, 0x4, 0x2, 0x40}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40040}, 0x480c0) 37.771901444s ago: executing program 0 (id=3127): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x22, 0x80002, 0xfff) (async) r1 = socket(0x22, 0x80002, 0xfff) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffdfff1e00ffaaaaaa00000000ffffff"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRESOCT=r1, @ANYBLOB="00000000ff7f00001c001a800800038004000500080000003e"], 0x44}}, 0x0) 37.719389996s ago: executing program 0 (id=3129): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000010) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000010) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x800}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 37.275656437s ago: executing program 0 (id=3135): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 64) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) shutdown(r1, 0x1) (async) r2 = socket(0x1000000010, 0x80002, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x10}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) (async, rerun: 32) syz_emit_ethernet(0xc2, &(0x7f0000000380)={@broadcast, @random="74eca04e0fb0", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x9, 0xb4, 0x68, 0x0, 0x0, 0x3a, 0x0, @empty, @multicast1, {[@end, @rr={0x7, 0x3, 0xec}]}}, {0x4e24, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "68a44e9390e1b96305ef26836b3c9c1f8bc4d9ac60291b70ea627f6d1ab003fc", "74e698bda2c0e37d6aa18509fb05244cfe09bb7850b8e68d829d874bcaa5ca80473dcdcedf1ed699c1829499c671ffab", "96eb7b93133209d1007ac68d9b619a8cf87b4fa609d02c370f25e196", {"d2ff302bdb9f67a0f9db7e7bac1aee6f", "225cabb19adca44b3620cdf9f3b2af33"}}}}}}}, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="6af181fc91ba042f021a7ab4ea0500000022ded63f0f149695a3ab30", 0x1c}, {&(0x7f0000000140)="c3", 0x1}], 0x2}}], 0x1, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 37.158706292s ago: executing program 0 (id=3137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r2, 0x0, 0x3}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xc9f2, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000200)=""/76}, 0x20) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 22.021154669s ago: executing program 38 (id=3137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r2, 0x0, 0x3}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xc9f2, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000200)=""/76}, 0x20) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 12.007902395s ago: executing program 9 (id=3436): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) (async, rerun: 64) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) (async, rerun: 64) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x70, 0x24, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff2, 0xc}, {0x1, 0xffff}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xf7}}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x5, 0x10000, 0x9, 0x5, 0x400004, 0x10001, 0xffff26f3, 0x2}}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000069107dd000"/24], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001008210404000000070000000000000036099dc6b82074ccff7cd8ef6df6", @ANYRES32=0x0, @ANYBLOB="adffa888d2260000240012"], 0x50}}, 0xc080) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x4, {{0x2, 0xffff, @multicast2}}}, 0x88) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) (rerun: 32) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x1, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000004c0)={0xe2e7, {{0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, '\x00', 0x43}, 0x2}}, {{0xa, 0x4e22, 0xfffeffff, @mcast1, 0x7}}}, 0x108) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r7, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 11.700751157s ago: executing program 9 (id=3439): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x51, 0x3e]}}, 0x0, 0x38}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x80}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x0, 0x288, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000001}, {0x6, 0x0, 0x7, 0x8000}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f00000004c0)=0x1ff) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r5, 0x0, r4, 0x0, 0x7ffff041, 0x1200000000000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x78, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x14}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x200}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x254}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8b9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}]]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000000071114f0000000000851000000200000085000000001cb50095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 8.828132364s ago: executing program 9 (id=3445): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4e4ffffff00000079100000000000006300f8ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2c}, 0x94) 8.630041936s ago: executing program 9 (id=3447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESOCT=r1, @ANYRES64=r2, @ANYRESHEX=r0, @ANYBLOB="0c002d80050001000800000024002d800800020003000000080003000700000005000100080000000800030000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x1000000c}) socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000140)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x0, &(0x7f0000000080), 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x800448d7, 0x0) r7 = socket(0x3, 0x800, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x5, 0x6, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x64, 0x0, 0xd5, 0x29, 0x0, @private=0xa010101, @local, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32=r12], 0x50) r14 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c000000", @ANYRESDEC=r9, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES64=r13, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x2004c880) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xffffffffffffffc2, &(0x7f00000007c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="20020000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf2513e7ffff2b00018014000200626f6e643000000000000000000000001400020074756e6c300000000000000000400000440001801400020070696d726567310000000000000000001400020070696d726547cf08701c966359439bbe98e371ca673000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="58000180140002006361696630000000000000000000000014000200776732000000000000000000000000000800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f62726964676500440001801400020067656e6576653100000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYBLOB="c91b700545bcef39f8f4cc0b9dfacb8be9ceffa782c6f9de0ab50807c1b823a5655bc5f99abd0336a2ed2e57e56a3ffb0e221c7853926e62a91891a42c567ed15f620ed42479c5e799e0c936eac46ec8d3e51113a94ebb810dce839fdb206926b8700bec5865c3787e40d54b7d926d4c0c0c308d3c50d725e933869a814daa193bb344e7078b882443db65dd2e67c91ec48bfa81370b0c5773b338a2c63f574cc9eaefd41226c7ad8823aecc06856c3743a4e11ab38471935eb8140c35655a836852bfc3e268acedc982ff5dc535cc", @ANYBLOB="22000100", @ANYRES32=r9, @ANYBLOB="1400020073797a6b616c6c6572300000000000004400018008000100", @ANYRES32=r10, @ANYBLOB="08000300020000001400020074756e6c3000000000000000000000001400020067656e65766530000000000000000000080003000100000028000180140002006772653000000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRESOCT, @ANYBLOB="0c00018008000300020000002c00018014000200766574683100000000000000000000001400020069703667726574617030000000000000440001800800030000000000080003000200000008000100", @ANYRES32=r15, @ANYBLOB="140002007465616d5f736c6176655f3100000000140002006e657464657673696d30000000000000180001801400020077673200"/64], 0x220}, 0x1, 0x0, 0x0, 0x44010}, 0x30044004) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r16 = socket$kcm(0x10, 0x2, 0x4) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500218311001fa2660fcf063eb8eedd589ebe79b30d4aff6505acb612f691f3bd3508abca1be6eeb89c44ebb3", 0x39}], 0x1}, 0x20000050) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20001200010ab30000000000"], 0x26}}, 0x0) 8.057276431s ago: executing program 9 (id=3455): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x8200, 0x7, 0x5, r1}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="8e6ce6", 0x3, 0x4005, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000180)={0xfffffffffffffff9, 0x20, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) (async) sendto$inet(r0, &(0x7f00000001c0)="7018961c0572f73880dd030fb3a5615766abe833343c18911925598b99c9674e00271d47f2e02c683d03af1964910c5bbffc211d8ef5dbf551d106f37a14eafed70b0f9e8c2d1fc3", 0x48, 0x40080, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x2, 0x3, 0x9}) sendto$isdn(r3, &(0x7f00000002c0)={0x6f87, 0x7ff, "9ac9cc9e5f31cc06c55e417274f7875252a7b9bf32d6b380bbfd66eee2d016c187e63783b3fb7a41d841b891f4002ea107b675ff6669fdef87e6a3b65e3dda8f6f32735f8f4e9acf9028ba6b653a759a0da9218ca2d6a9aef6b2d26ca79f51d379271ed298fdacbc1e607ca919055fa9cbaba0929dbd2eacf52ab0e170986a9729dc83f1e2e42388a40373a12e87b612992d1b43dd82464136db5dd0ffe1421c84add10c2d3654b27d294ee9b90cd51db8630d3481b583bb354e44c69259293a4c3748800602f4fd93100eb81bbdef84ae0c737f070e17ad63bd6780ad6c85d793"}, 0xe9, 0x4000000, &(0x7f00000003c0)={0x22, 0x5c, 0x9, 0x6, 0x8}, 0x6) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000400)=0x2, 0x4) (async) sendmsg$xdp(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000440)="ae793ea82fd302b9d465aca421f71e1b7ca0c48558287a1065e4a34980dbd5b7e435f043739eb6333a0bed202845902e62f26f75559ee9c09de67ecba793653d49420211dce7e3532e5294f282b2b5cf32a2a8a098e8377536cf495898e79a3a0cce8ffefea22783a72781ab58dcdba792dede74a539f3af0db98b762f9b6e198767b4dc107db11eed674c30787c82bbaa169af63c8d48e4ad06a1e17f9d0d6e71aebb89cba0b58b70cc55431247a29952e3534ef2fe3b74db9620c15e7d14552f963fa7bb209f30d2bc4901", 0xcc}, {&(0x7f0000000540)="85feb0a713c51af26f41abbbce5ecfae627dcbbeabdf245fe044924a09d48e863a028036b2d62f7617038033f686d51a2acdfeddaefa4304cc724151c775e03c0828202364e62cfab35cac8972c97e314f697b96c8f27af2d71674f1383b53f99fe1da036a9dd0048aad41c08106d7262bf82e91cfa721a4af1edf59f3c22ee6b7e5030134e88f689e51954077c399733cb66a255c9c132910b7ee613e59c789a2f182cef567fb92af6a4bdee0e9336b4bda053d6dc3400884d7", 0xba}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="716f9f205b748459ea36bf67f3007c39d6ca23d321f40c5ded65599c81399266b055e821cd2bf18f7fa659f168d016bace31def1156ece699dcc3ea3a268447eb6a79b3c5843053ddcfe0380cd668476ed54bf2a2839e4a08a922e21800af9eb17e7fcffb3792e", 0x67}, {&(0x7f0000001680)="8eac42b04d7f845ea75337e33246afc7b0ee6ccf43b8cd671d2bc305eeb06a0dde3a7e633b9fc39468be35d646f29b7a3df0e5bbbc2b7515bed0133b01a74862b76a83f23badca36d264db25916dacf8ede5d27ffd64d7494bedf78b21183d5f4530db9994", 0x65}, {&(0x7f0000001700)="3c0388fd49332f3bf166771950a40ef91f66a332abba0946937a23e659b9e9c43a0405c443ce5972046e036d4d0ede56f8f7cc9f2dfe9f2f27b9115666161aea7d4bf3a091f918869dc4afc5f8c91ff5e112312d25790569ffc0296663f5e8ed4a4e8ed9962a367a24916da6f3fccadd99a9c859ba7cb3bc25498f562b307f698738d0ff76f21cadd6c3177290d3eedb04ea0fcdc23cef8a8c177c2a91318906c21c70b126ba7252ac7ea4e67a0a8f7ceb3863ee72d5e89495f90d1a48d366c279b00705cee6b85f4c10", 0xca}], 0x6, 0x0, 0x0, 0x20000000}, 0x0) (async) sendto$inet(r3, &(0x7f00000018c0)="5b2b8e3ecf63a6f1a0ba3004c53192f0a991c64ba1ebd3bdc3db12756b213de08256fe15bc0a0146896e3bdd3777cb5395eb9edd5d711e075e5de6cf8f252505ab39b432d7c3ea6e9258e0c6e5b7b7ffd05c7713b6b5b220a86957eebac3f0f563343159a8622589d8fb703336964485dd9ab1008c1e3e0784599f2043c21ab6d296b64d1d670e47fb089fe598834b3f54fcf1e189150c8dc7b8ce9e8d0fcfbbccb449d8cc7e4555e5a52933b9aba4be9c9f1e8ae3ad54596029dc15c9c394ac679e11af26df1c2ab0a249260e510f904286712890486141a561cb43154fbba1483c6e6e00a732580fa2273837615299fe7a01fed1f30c", 0xf7, 0x814, &(0x7f00000019c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000001a00)=0x1, 0x4) (async) getsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000001a40)=""/216, &(0x7f0000001b40)=0xd8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001c00)={'syztnl2\x00', &(0x7f0000001b80)={'gretap0\x00', 0x0, 0x40, 0x700, 0x7, 0x80000001, {{0x14, 0x4, 0x3, 0x3c, 0x50, 0x65, 0x0, 0x2, 0x7fb0ae6a4d0587f3, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, {[@generic={0x7, 0xe, "2f19a20a5074b505792fd1c0"}, @cipso={0x86, 0x2d, 0x3, [{0x5, 0xd, "26d517375961ae0bccc771"}, {0x6, 0xc, "3acfd16aff5f58bb80f7"}, {0x6, 0xe, "5ccbd93c4ac20ea66229c578"}]}]}}}}}) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001c40)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000001d40)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001d80)={{{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@remote, 0x4e23, 0x3, 0x4e20, 0x5, 0xa, 0x20, 0x20, 0x73, r4, r6}, {0x0, 0x6, 0x400000000000000, 0x2, 0x10000, 0x9, 0x7, 0x3}, {0xffffffffffffffff, 0x7, 0x8, 0x9}, 0x7fffffff, 0x6e6bc0, 0x2, 0x1, 0x2}, {{@in=@local, 0x4d3}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3504, 0x2, 0x1, 0x89, 0x8, 0x3, 0x1}}, 0xe8) (async) sendmsg$nl_generic(r3, &(0x7f0000002400)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000023c0)={&(0x7f0000001ec0)={0x4dc, 0x19, 0x24, 0x70bd29, 0x25dfdbfb, {0x1c}, [@typed={0x9a, 0x4, 0x0, 0x0, @binary="8c5fe515ae7701c7173cce39c50f60f417afc907962a3a57e7609681b35d6f35173d223bc527effdd5001ff23ef088fd4a77261a28ff4c56f66ca35181a396f1117a25706b94c3404cfbee3ea52eabd456e6de059587def9fdc4f5c72e1ef59afe22042aa4f8777213ca453ce917139868deb8339f6bf345260d0ddc80f0fe459fa46d759a317b5259c52548b4917c1ccaf3b83aa39a"}, @typed={0x14, 0xb5, 0x0, 0x0, @ipv6=@remote}, @nested={0x28, 0x2, 0x0, 0x1, [@nested={0x4, 0xdf}, @typed={0x8, 0xfa, 0x0, 0x0, @u32=0xffff}, @typed={0xb, 0xc4, 0x0, 0x0, @str='#*.-^]\x00'}, @typed={0xc, 0xb7, 0x0, 0x0, @u64=0x4}]}, @generic="a3819e3a90ad773437d1a7f5006bec5d3533d5b3835bf43a609b27984e795ed5d45e9b02e674", @generic="b6973e06823d819381a7e789dddcaa70b37ce4c924b370dd36a5ae80bce4186787e7949480c7d12e1e5c446d3d849030999f29454edae107b50cedf681fd5137914326788e026f3a885670f562989377e8498b644b852899f72e18fb694a89e57fb8e632a309b95c9406f72f23621bd9066144e063fdb419ba5ddaeaca0592882ece13200235b3bed2f91f32f96322601e6063b7c3b8fedf12cc445cc83497835b377d77ab42d81c4bbbbcc83718037c4f270d901831e11c0a7884f4fd8b71dbaf6f996d03c7010ba72590ce271e7cae37e72a2cf5e819afbafa3f115a90dd8877954bfd8a71acf6a1", @nested={0x1d1, 0x113, 0x0, 0x1, [@typed={0x14, 0xa5, 0x0, 0x0, @ipv6=@mcast2}, @generic="15fec1b20ad3e0b86f339e05e6db9c7f62314d66bd0107ec73c24d55479e4fe95dbfae9204c7539d203bc3e400a61e74f37a95754930e574803c774aa0908eb7d80f55710b420df34e8c03b1afa7c75a649acac8962a852b711554d783ffe694028a65ad28e54e25849fbbcb2d7c70c9615813754e1fd453f21e61084a85dab72abe69923bf8b45a9edf9133b17dc8cc36252cdaac35450cea78354d3974b6c9416ff75869d257f3516aa4b48782a0d722e420dc09979d1581ed80cc94f8", @typed={0xa, 0x1b, 0x0, 0x0, @str='\\{\\,\x12\x00'}, @generic="471a1c5ab76b0bc85960b4af64ec88261382e8b476b3e6e0a975967820d8b20040d6ac57d6f2322855540d930a9e7ae5014b00d7a31fd4211872e697584e43874a05a5d4cf005799331ced5cc81a4e08ad3f5a6ce55113a201e34a976ffab5a79b1edfdfd7cba91ee468cf7577d7e6c829dc3037e429cfa745f468313bec6747e5cddda11c5e4a3e110f094dc0c58b00e3afb8b6fb43e4cd94cee168b822531410054a282a4293ab63419077ae92a1eaae2005059f714848e5aadc9c31c9c5f4a3415b3994666203a53a6e830bac3683ff1a14c798904f98ea535c9cf389344068d37a2b9e7d71108fcd38", @nested={0x4, 0x89}]}, @nested={0xfe, 0xaf, 0x0, 0x1, [@generic="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"]}, @nested={0xc, 0xa1, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0x72}]}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x18001}, 0x0) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002640)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000026c0)={0xc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x1d, 0x13, &(0x7f0000002440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @generic={0xd2, 0x7, 0x6, 0x4, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002500)='GPL\x00', 0x0, 0xed, &(0x7f0000002540)=""/237, 0x100, 0x0, '\x00', r5, @lsm=0x1b, r7, 0x8, &(0x7f0000002680)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, r8, r3, 0xa, &(0x7f0000002700)=[r3, r3, r3], &(0x7f0000002740)=[{0x5, 0x5, 0x4, 0x5}, {0x0, 0x4, 0x10, 0xa}, {0x2, 0x1, 0xa, 0x7}, {0x1, 0x1, 0x10, 0xa}, {0x0, 0x5, 0xf, 0x1}, {0x5, 0x70578c02, 0x0, 0x4}, {0x0, 0x5, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x8}, {0x2, 0x3, 0xd, 0x2}, {0x4, 0x1, 0x9, 0x8}], 0x10, 0x2}, 0x94) r9 = socket(0x1e, 0xa546e3bab25c005e, 0x5229cd55) bind$packet(r9, &(0x7f00000028c0)={0x11, 0x10, r5, 0x1, 0x15, 0x6, @local}, 0x14) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x90) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000002a00)=0x8, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000002a40)={r1, 0x6, 0x28d, 0x10001, 0x63, 0x4}, &(0x7f0000002a80)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000002ac0)={r10, 0x2}, 0xc) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000002b00)={{{@in6=@initdev, @in=@private}}, {{@in6=@dev}}}, &(0x7f0000002c00)=0xe8) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000002c40)) socket$nl_route(0x10, 0x3, 0x0) 7.924486593s ago: executing program 9 (id=3456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r3, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0xffffffffffffffe8}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 6.756487152s ago: executing program 4 (id=3470): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000005800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000080)="8b091f56f1", 0x5}], 0x1}}], 0x1, 0x20000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r2, 0x607, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000812) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x1c, r7, 0x1, 0x70bd2a, 0xfffffffd, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a0000090900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.429193365s ago: executing program 4 (id=3477): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x5, 0x3}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x66, "d327441c0648f9ad12fdbc756813bc153c740f30f04ac5f3872c9148c191ebfc73d3063c1f557d2992b6f6eaee709b6966065fc2bcd5c307fca4208e32334b9fd468bb9f9f479aa6350e09ada532740650e4f740a47c762295d91a58db5353cfa789df0a66bf"}, &(0x7f00000000c0)=0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x81, 0x8201, 0xffbfdff8, 0x83, 0x7ff, 0x5, 0x5, r4}, &(0x7f00000001c0)=0x20) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08002f00005c00000000002f9078ac141400ac1414ff0420880b000000000000080000010006000086ddfc9ab4350f24d4fc7bb5eb08840f5c15080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x5, 0x3}) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000280)=0x1, 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x66, "d327441c0648f9ad12fdbc756813bc153c740f30f04ac5f3872c9148c191ebfc73d3063c1f557d2992b6f6eaee709b6966065fc2bcd5c307fca4208e32334b9fd468bb9f9f479aa6350e09ada532740650e4f740a47c762295d91a58db5353cfa789df0a66bf"}, &(0x7f00000000c0)=0x6e) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x81, 0x8201, 0xffbfdff8, 0x83, 0x7ff, 0x5, 0x5, r4}, &(0x7f00000001c0)=0x20) (async) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08002f00005c00000000002f9078ac141400ac1414ff0420880b000000000000080000010006000086ddfc9ab4350f24d4fc7bb5eb08840f5c15080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) (async) 6.303503261s ago: executing program 4 (id=3480): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) 6.128599364s ago: executing program 4 (id=3484): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)="0a958227809e4473150c1aef590feebb5ea2ba2a74be82ca8c337fa85dcd0be977df9203049e8b01862aa071dfd7c99fcce368b527869cadf4dffd32379c091d67d46b22aeed2cb923bd09755c61da33679f9bba2acedce7827f1b406c93c5f23356c93b047aa499a4a8b7df61260af0") (async) ioctl(r0, 0x1, &(0x7f0000000080)="0a958227809e4473150c1aef590feebb5ea2ba2a74be82ca8c337fa85dcd0be977df9203049e8b01862aa071dfd7c99fcce368b527869cadf4dffd32379c091d67d46b22aeed2cb923bd09755c61da33679f9bba2acedce7827f1b406c93c5f23356c93b047aa499a4a8b7df61260af0") 5.899667515s ago: executing program 4 (id=3487): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000340)="c2bb301a4e4f670f2ec6285f62a01f66bf847ab41a6e8e7aaf27b8030483078be33d390697733f443b3ba7b8ad9ca7c3be80d39bbcdeac5cc0e1c1f6b105fe3c4c9fbe2ddfdeea04a6d6c57c6eb6d41c5f3e245275800871b3cefdc0b33e44a2798e30d98fcacc1e55cac5f96c07405813992692b3f0bdabb4", &(0x7f0000000080)=@udp6=r1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0xb0, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44040}, 0x6004004) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, r9, 0x431, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$NS_GET_OWNER_UID(r10, 0xb704, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, 0xffffffffffffffff, r0, r0], 0x0, 0x10, 0xc}, 0x94) 5.610676573s ago: executing program 4 (id=3490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x21, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r8, 0x0, 0x1}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r10, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1b53}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r14 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r12, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000005740)={0x28, r13, 0x105, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r10, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20000, 0x4e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r16, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) 2.93226805s ago: executing program 2 (id=3534): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000180)={0xe4, 0x13, 0x1, 0x0, 0x0, "", [@nested={0xd1, 0x0, 0x0, 0x1, [@typed={0xc, 0xe5, 0x0, 0x0, @u64=0x6}, @generic="3335daa3f516884808d1f74cc705506875c4e919132781cb91c73fbad59538fb3eae1f6fb0139940dad167122f28f87b6777351aae84905a919858312f1881ff5c5e814f3aa23445ca7b70d2969b9fa7be4186cfde9e64ec271460e0c1f31a5e35f499ec84eeff602de3e0bb0f65ff585346cb6981a06e6a59b6fcd88a5e662677aa1c930a0d0945390cf60f3a373b2d72e782c79733eeac20c0d1ea931940db18e8d4008e525ee3f2423c0e27a8124b700e766a668b007b085841bdf65c2f87f8"]}]}, 0xe4}], 0x1}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.764589682s ago: executing program 2 (id=3537): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @multicast1}, &(0x7f00000000c0)=0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r2, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x18}}], 0x1, 0x20049008) sendmsg$xdp(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x2c, 0x3, r1, 0x4}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000140)="355c311e7e78dc5304cda6826615f012e7ef34fa7afa70fe26d0ca0c2269676ca41d22c055549699358556b97bba5381eb52eb0233a287a079e6c1670afbb73f34545c58e337cfb7d8c50dbed8b13136c8a87bed9e206027907c48f77a5850945a91028f8cd536bad6b0bb4370b9e79b4ed96cc47f4270eeb7a21d2a7eec8b733bb567584fb5e06f5993eca04b03bbaf06d85f1cc34f918a487b41a9cd93b3cb4c79912501a6e9ee6d90fe6ab1873a720f194e60852198", 0xb7}, {&(0x7f00000002c0)="01b6b69213d0ca24632195c519426b5b5be2827b3a8addc43bbbe7cf92ea136d89611036455d7c0a6d7837a0ae30662ef19bff5038fd34da7621f4c5c216d58aae4db394af47ac9ab3bf97cfffde513f80099def86507a8d23b996017205c162ca72e792c1038698700842d68e1a846897923cb5ba7ddb7d8ab3f37a4bdede8ce7fddb928e06b5ad699761c0898fbe969c98f65f9195e7b20b587b5c0d7255d739036a34d3cda59db5782886477bea76d08ad459ccf26d0720c15852ab8435bba4e41b65840fe63d988a60015103c243b1c316a623c0739062161559f29865c2f589808b9da6cf8bf0b59e306d67", 0xee}, {&(0x7f0000000200)="23de1791d1f325290e2f840b16e4334dcc06063c6c5cfec4bcc2e4de9a9d09565019ec9162f9aa068600ebebd36abf370bf336172f5b40f7717fd570b63e95814bd016f57093f0b669a1accc8e7c883fa7c59a614f3733257993f72be8ca3382e9f78f405e6b88d46058b3b59eab49975b1140432d", 0x75}, {&(0x7f00000003c0)="5e544d747c43c68f052d31688b6a9653e0a7a5327506ce5c760009a79b200c18c5458bc5d1d23cac24a49f47ae86b8799fa5ee3d9a109670d7279a17c7f218d189d157b0123ffb5aa0195b46babdda97307399846d4cb583f2f43bc5700f90c87616eeebe0098b741f9e", 0x6a}, {&(0x7f0000000440)}, {&(0x7f0000000480)="cb2de8a1cbea83aabcbfcde65714cfe8464de510cb5e7281cd3bb2c2654e4b798fd5ff58fde4f45aef7b2eaceb62f6b5b6e4663fe2c7a076bd85eda18a45c9", 0x3f}, {&(0x7f00000004c0)="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", 0xff}], 0x7, 0x0, 0x0, 0x4000800}, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000280)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7d37bcf9e433c29", 0x28}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) 2.705940085s ago: executing program 2 (id=3538): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x140, &(0x7f0000002e80)) r2 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0x0, 0x0, 0x2}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in6=@mcast2}, {{@in6=@remote, 0x4d4, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) close(0x3) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r5, 0x80) r6 = accept$netrom(r5, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000040)=0xd06, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0x86, 0x8f, 0x8, 0x2e, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8000, 0x0, 0x80000000, 0x4}}) 1.804090657s ago: executing program 8 (id=3547): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7f00, 0x7800, 0x34, 0x8000, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback, {[@rr={0x7, 0x17, 0x71, [@empty, @local, @multicast2, @local, @multicast2]}, @lsrr={0x83, 0x17, 0x6, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @broadcast]}]}}}}}) r0 = socket$inet6(0xa, 0x3, 0x20) sendto$inet6(r0, &(0x7f00000003c0)="432e0fab9b46979e90f6ff778d0014661b9e3a15f2c160b828ad9cbc87f5fb03748123dac6686a87903440b71134b5a336770fa4959365dcc2b0a01a93632fd969d8e5f43a0d06bfe8b644bb8bbc24145ff0e2679f619173b9ebdc2bd8b8c563afcbeee456b74a3f0fb0a480605451caa3dac04ffac740a9c2dd115a0aaf7e2bbc4e5b5217a316d853dafbfe2c118da122ffafcde84695acc29c449824ea98e336850389d0b469dc33639f5df0bc42c65952f2eaabb930048d439157455785e53b255f24c5da655c3221513e3018648100c990324061a13feb42c5a4", 0xdc, 0x8000, &(0x7f0000000200)={0xa, 0x4e21, 0x8001, @private2, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000020000"], 0x28}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f00008b8000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00'], 0x58}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x80d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0xb}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0x3c, &(0x7f0000000540)={&(0x7f00000005c0)=@newchain={0x104, 0x64, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff3, 0xb}, {0x1, 0x5}, {0xd, 0x7ff1}}, [@TCA_RATE={0x6, 0x5, {0xa4, 0x57}}, @TCA_CHAIN={0x8, 0xb, 0xfffffeff}, @filter_kind_options=@f_matchall={{0xd}, {0xb8, 0x2, [@TCA_MATCHALL_ACT={0xb4, 0x2, [@m_skbedit={0xb0, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x0, 0xffffffffffffffff, 0x7, 0x400}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4322}]}, {0x59, 0x6, "23debbf32a23e10a66d9d0940e692a9eccdd53bb89e4f3e636d068cbc6cf79aa9f6371bc006ff5fd26f14fd8c639ad87e3fad299258de8eaf9fb933271cd9f6f1f3819311b5c3b0570a0a3938f5c49d0de3f0b61c1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc5, 0x43}}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x240000d1) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x44}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000020000000000000000c61f16b207902b40e3cdf8180e768069bd3a8eb6ed5b2249f5456a788ca28afdb8fe68526d5ab6c03db507ff08e7b99e975cb3275bafb285b2", @ANYRESOCT=r6, @ANYRESHEX=r7], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x84) 1.775323133s ago: executing program 2 (id=3548): write(0xffffffffffffffff, &(0x7f0000000240)="6ff73cf0549bd9ab350b5e901637e2aa67afa4dd769b2a587222d217fa7b235499795cfeddb060ec517b777924510a6c8bb403d7a5ae8c7939fdd7c1b1", 0x3d) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001680)='ns/uts\x00') r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500182c00fe8000000000000000000000000000bbfe000000000000000000aa0802022100"/73], 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001640)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e000000000000810020009fe000143aff20010000000000000000000000000001ff02000000000000000000000000000187009078ff020000000000000000000000000001"], 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000001440)={'ip6_vti0\x00', r6, 0x4, 0x6, 0x5, 0x1, 0x23, @local, @empty, 0x700, 0x10, 0x1e08, 0x7}}) sendto$packet(r2, &(0x7f0000001340)="b14b1962b5d89234be0ae86f2da6ed43f361379fd15009f6f4346e1eebc2a78604c15928ab5f698de2a74cefd550d69efbee6b96ebcd96abe765f4658cbfed5fe0fb7a32e1e87d07746783800aaf7c42741108ad9f7823fd2c8d16a13ee0db692c4c49b2c0cbae81d7f185c68cb0c7668fe532f3942edbaa19c326f41f446911f45e92d3ff7972629a2f053c2b28e3d949363d5b1175491aa6bb7531056123359e226bf12658c0f16dfd2592a2a8f8ceac6a3cd78bfb5239374bf4a2e423838f4bc0e8daf7f68fc41cfb0751268a8c13b300", 0xd2, 0x4000005, &(0x7f0000000040)={0x11, 0x17, r7, 0x1, 0x3, 0x6, @random="a46bd074ca5a"}, 0x14) 1.668484249s ago: executing program 8 (id=3549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x10122, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="080005000c0000001400040074756e6c3000"/28], 0x38}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x1f, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xae1}}, @ldst={0x2, 0x3, 0x6, 0x2, 0xa, 0xfffffffffffffff8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000040)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41100, 0xa1f81127b472e8ff, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x5, 0xfffffff9, 0x7c0000}, 0x10, 0x15965, 0xffffffffffffffff, 0x4, &(0x7f0000000180)=[0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x3, 0x3, 0x8, 0x3}, {0x2, 0x1, 0x7, 0x5}, {0x4, 0x4, 0x2, 0x8}, {0x3, 0x5, 0x2, 0xa}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r0, 0x0, 0x0, 0x8001, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@fallback=r0, r5, 0x4, 0x18, 0x0, @void, @value=r7, @void, @void, r6}, 0x20) r8 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r8, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) write(r1, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000580)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.59731053s ago: executing program 8 (id=3550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r4, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xb8b9}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x43}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfd}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004019}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r7}]}, 0x3c}, 0x1, 0x620b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x90) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r9, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f00000000c0)) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) 1.261023168s ago: executing program 7 (id=3554): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r1, &(0x7f0000000380)="075fdaf9"}, 0x20) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x15, 0xb3, 0x7f, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f00000002c0)=0xb58d, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) getpeername(r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x92, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x3}}, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@private=0xa010101, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0xc6, 0x1, 0x0, [{@multicast1}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0x801}, {@multicast2}, {@local, 0x4}]}]}}}}}}}, 0x0) 1.169405413s ago: executing program 7 (id=3555): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x385, 0x0, 0x0, {0x2, 0x1, 0x48}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000500), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000440)=[{&(0x7f0000000140)="df", 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000088000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc2, &(0x7f0000000400)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) 848.859935ms ago: executing program 2 (id=3556): r0 = socket(0x9, 0x5, 0x4) (async, rerun: 64) r1 = socket$kcm(0x2, 0x922000000001, 0x106) (rerun: 64) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x42) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x3e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40814}, 0x20000044) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c0002800c0004800500010084000000080001400002000008000240000000000c00038005000100430000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 736.094016ms ago: executing program 8 (id=3557): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xae}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4da, 0x3}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0xfffffffe, 0x5, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x2, 0x20}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) 660.653271ms ago: executing program 2 (id=3558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0), 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x81}}}}}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0x5, 0x4) recvmsg(r2, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000100)=@default_ap_ssid, 0x6, 0x0) 628.923848ms ago: executing program 8 (id=3559): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x56}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x44008880) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) 627.502763ms ago: executing program 8 (id=3560): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) sendmsg$xdp(r0, &(0x7f0000000800)={&(0x7f0000000400)={0x2c, 0x4, r3, 0xa}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000440)="c99ef67d6831d8f3ea3703f003506d450a6e17f2d4aba9645d3bfc44080e1f33361e4915f42fde31fca7531adb37f9e89f", 0x31}, {&(0x7f0000000480)="3f52e33c84b1bb090cc8c52c4eba2489b5243a12352d0fb86f7273c78281ab96cb26f4ece96e4f9fce35c70f0979828472ef63c4eccde53748f11d8c8c87b8ea775c4cd2c6f9edda01fd41a455a5d4f270c1713757ea158fb537bbf334c82cc4b8f01067a282f867b6436a1f416ac6726e9ba56e61095b487423", 0x7a}, {&(0x7f0000000500)="d0009443c8f0c4d761295551b0432bc8db7d1aba884955c4daef5045da35b22b06c17449c8bccfcb7848010f2d27a9726fb21783d381c2145559c3694022db5eaa8a2a587a25aa1d1f2fca408b5f9edc71a2fe163997d02a6469f1ba13a9da7c939705ad6b5cf3f1918c94c1f508dafae1168f689f9ad1c0e05b466ce1b685973ed5208b52446e45e6d6ed415c228ab83dbf5fb2cc9c21e9f772618cf3b3776ec7", 0xa1}, {&(0x7f00000005c0)="3839a548c39847e0bdbc6fc323ab55fdc206cfdbc8d03ff2c4f1d139a407ec8695d2af3a7ad673cbb06a94e177e0626d258ecf41575d52df01ce1b1c8528810ba08e28ac1a4472bb4b2ddcbe6445d5d33bf3a5bec507545240018bad11db91cb11aeeb18f737e71f83ec0aeb1500ff07d8046cd9eb4bc7e6be5137678a7c91e4c0e4e831d9750d7438776c0a9697fd33acf486f8d1ac01617b33", 0x9a}, {&(0x7f0000000680)="9ccdf8c51566283cbd414ddde1004cedd8a221db67282c0c07a3783db68220f5e13977bbb7dd345cd9e37b933ebaf7ccf019d3e021e8245871541d7de099cac8200f39ede760e8c154a7c29008052be9bf3a0cec4877f67a6763cf431f97a67cf8f5d2a4d5741efee8c064eb247c166544b282722c23dd4bb49b974e03c7dedb167f00a726630bd70cd94e12f828ef83b9fc1c64c6ce568e94b1aac4980a999bf11fb551621380fd616a1ba52e1cd6410edda546b3c356bbd2b4e42e12b05e6afb11fcc727dc140e64d58919500a0530954e812ed59ab8fe2e80d93d0f7891a300785c54abcb65c6c64cc42763a7dd3c7ced5256f83cd347692a452f2bab34", 0xff}], 0x5, 0x0, 0x0, 0x80}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000252073250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r1, @ANYRESDEC=r0], 0x38}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000005580)=ANY=[@ANYBLOB="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", @ANYRESDEC=r4, @ANYBLOB="1d784d2610a0018645b3da61ffcd09d0281c7d7b8a75af3aa9cd822c28f7d1a6404119c54171a66de55e1d01b2a22c56f7c4742bb9798d3eb5e1c8fc6feecac5807bfc2a6d3f484e7c38bec09f193a9686d19f225ae06d1af1f48262b73327b01c392a7212711c68a85c18e2aa0af8297aa001230a9fb1ae589954b5d8611b804ee90d1a95c388867d0c324d08964a728b026719923b53e4fa41ba3c2bc463dc3d40f15ff6731505600b8cb563e32f177f4a8f7dff6a9538ce784a03c6d1bc955889b3b5b9413e06e792018d5ea759977073b3fb79d6c90e5662c9fa399442e3ceea5c6df0cd94893285a2ceca30df8213fae0e0b0fc27"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_emit_ethernet(0x2f, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000210000000000119078000000000000000000004e20000d90785e600c559f1f965e47db42898bf31d7bcdb97c8dbf687e8c5cdb4bdeedb403d905c670d4cccc62981845f8c0711b52aa02426c7d600d65a61dcc1f7a66c6dc0f195bdd8cd1a96480278e658fe7a8608e522e4c78a863bf2c7de0ad58327721e2687699f5151547308c5fe0664e7ce669e6d9f77c49d8dc854b59f4b502240a21d9873ba01965467dc3629876475cd93d8aada831fb4a3a7a1a1997ff9791d45926b5520475b8ce6282890ab23c3a25e54180c52d1f23f500"/237], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0xb8825000) recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001740)=""/56, 0x38}, {&(0x7f0000001780)=""/201, 0xc9}], 0x2, &(0x7f00000018c0)=""/6, 0x6}, 0x2}, {{&(0x7f0000001900)=@qipcrtr, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001980)=""/38, 0x26}, {&(0x7f00000019c0)=""/49, 0x31}, {&(0x7f0000001a00)=""/201, 0xc9}], 0x3, &(0x7f0000001b40)=""/76, 0x4c}, 0x33b}, {{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001c40)=""/217, 0xd9}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/211, 0xd3}, {&(0x7f0000002e40)=""/67, 0x43}, {&(0x7f0000002ec0)=""/71, 0x47}, {&(0x7f0000002f40)=""/154, 0x9a}, {&(0x7f0000003000)=""/105, 0x69}, {&(0x7f0000003080)=""/233, 0xe9}, {&(0x7f0000003180)=""/160, 0xa0}, {&(0x7f0000003240)=""/162, 0xa2}], 0xa, &(0x7f00000033c0)=""/155, 0x9b}, 0x8}, {{&(0x7f0000003480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003500)=""/159, 0x9f}], 0x1}, 0x8}, {{&(0x7f0000003600)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003980)=[{&(0x7f0000003680)=""/163, 0xa3}, {&(0x7f0000003740)=""/45, 0x2d}, {&(0x7f0000003780)=""/124, 0x7c}, {&(0x7f0000003800)=""/193, 0xc1}, {&(0x7f0000003900)=""/98, 0x62}], 0x5, &(0x7f0000003a00)=""/213, 0xd5}, 0x5}, {{&(0x7f0000003b00)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003b80)=""/178, 0xb2}, {&(0x7f0000003c40)=""/225, 0xe1}, {&(0x7f0000003d40)=""/207, 0xcf}, {&(0x7f0000003e40)=""/81, 0x51}, {&(0x7f0000003ec0)=""/28, 0x1c}, {&(0x7f0000003f00)=""/108, 0x6c}], 0x6}, 0xd}, {{&(0x7f0000004000)=@generic, 0x80, &(0x7f0000004340)=[{&(0x7f0000004080)=""/58, 0x3a}, {&(0x7f00000040c0)=""/241, 0xf1}, {&(0x7f00000041c0)=""/111, 0x6f}, {&(0x7f0000004240)=""/208, 0xd0}], 0x4, &(0x7f0000004380)=""/129, 0x81}, 0xfffffffd}, {{&(0x7f0000004440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)=""/167, 0xa7}], 0x1, &(0x7f00000045c0)=""/110, 0x6e}, 0x80}], 0x8, 0x100, &(0x7f0000004840)={0x0, 0x3938700}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xd7b3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$key(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000015c0)={0x2, 0x11, 0x0, 0x9, 0x27, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bc0, 0x2, {0x6, 0x3c, 0x5, 0xa, 0x0, 0x6, 0x0, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xf}}}, @sadb_x_nat_t_port={0x1, 0x3a, 0x4e24}, @sadb_lifetime={0x4, 0x3, 0x1, 0x1, 0x401, 0x23a5}, @sadb_key={0x18, 0x1, 0x598, 0x0, "71a19ed6d309bff9d4029703a4e54d569a7bea8aae0d1c1ce353dd10158f71f93043d1f0ef71056d9eea23ed23c319a54e92437f2c05bd878de07ea45617b92476730bea107a0c2e8ae1e9d35c10458ba3465748869da33d1c16894c6da76ba4b5503d9498d04c8af46f7e792bd51c4817a5f2cf09db2ff45da6aa42552d312156341d510058b574e6d616a8be0d6ebcfcb59c7252a44bd869f720d8377383d29bc9e4b754885835f31c5ac2729ec9bce5a6b1"}]}, 0x138}}, 0x2000) 339.811996ms ago: executing program 7 (id=3561): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x5, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r3, @ANYBLOB="daf172628bf24bbcb5188cc14dd7c963074d7f7077bcc5e409da6cf601d7fbfde80efee59276b6c5c58149a982ae745fe7c325bbfd2567b2164fb1f757ba65a273bb6cd4dfbf42360a5a0456e0a29a9ee9537bc07ff2697ac1ed3a115e52c17badaa0537361b5d9aebe9c88640292fcb4657f4120f16e9000864a0fd49cada78288e62b3f7a6b4b5fbb649d2458ab3f86e80dde6660ac4a7926a474cb73c88"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0xc) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) accept(r7, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0000000000000208", "5171bb74cd3660dab9e2f76d2405390b6903e0a44109000000004000", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000001840), 0x4) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000380)={r10, 0x5, 0x2, 0xde92}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000680)={r10, 0x1, 0x20}, &(0x7f00000006c0)=0xc) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) splice(r8, 0x0, r11, &(0x7f0000000040), 0x8f5, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="38154a0000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x1000005, 0xbb, &(0x7f0000000340)=""/187, 0x41100, 0x50, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x9, 0x6, 0x7}, 0x10, 0x18a11, r2, 0x7, 0x0, &(0x7f0000000400)=[{0x4, 0x5, 0xd, 0x5}, {0x4, 0x2, 0x1, 0x3}, {0x2, 0x3, 0x4, 0x3}, {0x20000005, 0x3, 0xd}, {0x0, 0x5, 0x4, 0x7}, {0x4, 0x5, 0x0, 0x3}, {0x1, 0x2, 0x80000f, 0x6}], 0x10, 0x3}, 0x94) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000480)=r12) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f00000004c0)={0xffffffffffffffff}) 165.927966ms ago: executing program 7 (id=3562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04010000000000000002000000400004803c0001800a0001006c696d69740000002c000280080003400000000408000440000000000c00783600000000000000020c000140000000004a9c4b670900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000002d03a9310c324a3f3a12ca4f168d43feecd83c05cfe2566127589f03e92f5cb37b7f1993abb33d91788cbbaef94d54f2286d7427b4c47f12a7976623e2efee7c32a912f079eeb54d05a183acf4d9c7770496fa14b813644b87ae8b04cca85ba83476960000c435af864cf15b48dd53fdee565ac8b88537b551c71a551c9021be3bcd00173781b196e0e7f9a609f639b8ef582edf4c608a6d4abd5df6cbea5478b628c88fdf41d482a5e0bead5f1b8aeed574b9748e02c70162156a"], 0x94}}, 0x4) 60.396278ms ago: executing program 7 (id=3563): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}, "a815a23da43974ff"}}}}}, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbdf251e00000008000300", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfe}]}, 0x4c}, 0x4, 0x700000000000000}, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r14, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd70fffddbdf25310000000a0001007770616e3400000005003400070000000500360f0000000005003500000a0001007770616e3000000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB="050035000c00000008000200", @ANYRES32=r14, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x20048800) (rerun: 64) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r16 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r16, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40050}, 0x8000) r17 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x20) bind$bt_hci(r17, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r17, 0x1, 0x25, &(0x7f00000002c0)=0x7b73, 0x4) recvmmsg(r17, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYRESOCT=r15], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 7 (id=3564): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x268}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x803, r1}, 0x38) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000001501050600030080"], 0x16b) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x824) kernel console output (not intermixed with test programs): aller0>, priority 0 [ 250.427096][T11613] netlink: 'syz.7.1515': attribute type 1 has an invalid length. [ 250.427105][T11611] syzkaller0: entered promiscuous mode [ 250.427122][T11611] syzkaller0: entered allmulticast mode [ 250.466395][T11613] netlink: 'syz.7.1515': attribute type 2 has an invalid length. [ 250.487836][ T7957] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.496374][T11613] netlink: 'syz.7.1515': attribute type 1 has an invalid length. [ 250.510572][T11623] netlink: 'syz.6.1516': attribute type 30 has an invalid length. [ 250.526293][ T7957] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.534437][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.791784][T11631] tipc: Resetting bearer [ 250.819690][T11610] tipc: Resetting bearer [ 250.890322][T11610] tipc: Disabling bearer [ 251.023136][T11646] IPv6: sit2: Disabled Multicast RS [ 251.046587][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.051579][T11646] sit2: entered allmulticast mode [ 251.108700][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.471040][T11667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1524'. [ 251.576372][ T7958] net_ratelimit: 17 callbacks suppressed [ 251.576392][ T7958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 251.695822][T11675] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 251.782028][T11679] netlink: 'syz.0.1527': attribute type 1 has an invalid length. [ 251.811042][T11691] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 251.877787][T11691] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 252.005100][ T7954] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.144173][ T7951] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.439591][ T7952] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.618758][ T7952] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.804179][ T7952] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.935734][ T7951] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 253.044242][ T7957] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 253.127691][T11758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.366784][T11769] nbd: couldn't find a device at index 0 [ 253.727702][T11742] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 253.871332][T11795] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 253.963180][T11797] netlink: 'syz.0.1557': attribute type 1 has an invalid length. [ 254.041102][T11797] netlink: 'syz.0.1557': attribute type 4 has an invalid length. [ 254.214249][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.405421][T11824] __nla_validate_parse: 15 callbacks suppressed [ 254.405440][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1565'. [ 254.529463][T11836] tipc: Started in network mode [ 254.582106][T11836] tipc: Node identity , cluster identity 4711 [ 254.674248][T11836] tipc: Failed to obtain node identity [ 254.679776][T11836] tipc: Enabling of bearer rejected, failed to enable media [ 254.888712][T11858] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1574'. [ 254.899376][T11858] NCSI netlink: No device for ifindex 0 [ 255.340425][T11884] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1582'. [ 255.378290][T11884] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1582'. [ 255.532745][T11893] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1585'. [ 255.743628][T11901] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.821429][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.088452][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.097300][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.151133][T11922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.270808][T11922] bond3: left promiscuous mode [ 256.277575][T11922] wireguard0: left promiscuous mode [ 256.286491][T11922] geneve2: left promiscuous mode [ 256.291555][T11922] geneve2: left allmulticast mode [ 256.300167][T11922] vlan3: left allmulticast mode [ 256.305874][T11922] erspan0: left allmulticast mode [ 256.313092][T11922] xfrm1: left allmulticast mode [ 256.332452][ T7957] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.341531][ T7957] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.350427][ T7957] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.360089][ T7957] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.449605][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1596'. [ 256.463347][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1596'. [ 256.851873][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 257.090968][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1603'. [ 257.121368][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1603'. [ 257.223975][T11986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.287283][T11986] bond0: (slave rose0): Enslaving as an active interface with an up link [ 257.349536][T11993] tipc: Enabled bearer , priority 0 [ 257.366407][ T7957] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.384341][ T7957] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.461035][ T7957] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.472118][ T7957] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.492911][T12003] tipc: Enabled bearer , priority 0 [ 257.531985][T12000] syzkaller0: entered promiscuous mode [ 257.551771][T12000] syzkaller0: entered allmulticast mode [ 257.667351][T12000] tipc: Resetting bearer [ 257.758151][T11999] tipc: Resetting bearer [ 257.851493][T11999] tipc: Disabling bearer [ 257.951212][T12023] validate_nla: 3 callbacks suppressed [ 257.951232][T12023] netlink: 'syz.0.1618': attribute type 7 has an invalid length. [ 257.982127][T12023] netlink: 'syz.0.1618': attribute type 8 has an invalid length. [ 258.438946][T12046] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 258.475027][ T5892] tipc: Node number set to 2562385045 [ 258.539877][ T7645] IPVS: starting estimator thread 0... [ 258.644793][T12054] IPVS: using max 32 ests per chain, 76800 per kthread [ 258.750238][T12058] tipc: Enabled bearer , priority 0 [ 258.759199][T12055] netlink: 'syz.6.1629': attribute type 6 has an invalid length. [ 258.802819][T12058] syzkaller0: entered promiscuous mode [ 258.819238][T12058] syzkaller0: entered allmulticast mode [ 258.910585][T12058] tipc: Resetting bearer [ 258.927154][T12056] tipc: Resetting bearer [ 258.991944][T12056] tipc: Disabling bearer [ 259.084248][T12078] netlink: 'syz.7.1638': attribute type 33 has an invalid length. [ 259.549555][T12101] __nla_validate_parse: 18 callbacks suppressed [ 259.549575][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 259.701922][T12107] raw_sendmsg: syz.3.1646 forgot to set AF_INET. Fix it! [ 260.076010][T12130] vlan2: entered promiscuous mode [ 260.081077][T12130] bridge0: entered promiscuous mode [ 260.521344][T12142] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1657'. [ 260.590536][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 260.602312][T12144] netlink: 'syz.0.1658': attribute type 18 has an invalid length. [ 260.610718][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1658'. [ 260.620556][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 260.630165][T12144] netlink: 'syz.0.1658': attribute type 18 has an invalid length. [ 260.638562][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1658'. [ 260.839915][T12151] net_ratelimit: 87 callbacks suppressed [ 260.839935][T12151] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 260.847231][T12153] netlink: 'syz.3.1662': attribute type 1 has an invalid length. [ 260.861978][T12153] netlink: 'syz.3.1662': attribute type 1 has an invalid length. [ 260.874285][T12151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.075329][T12163] erspan0: entered allmulticast mode [ 261.091878][T12163] lo: entered allmulticast mode [ 261.119079][T12163] lo: left allmulticast mode [ 261.353565][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1669'. [ 261.429924][T12182] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 261.438775][T12182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.461143][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1670'. [ 261.497181][T12175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1669'. [ 261.574282][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 261.820511][T12203] tc_dump_action: action bad kind [ 261.966081][T12207] netlink: 'syz.3.1679': attribute type 1 has an invalid length. [ 261.984975][T12207] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1679'. [ 262.504576][T12228] bond6: option miimon: invalid value (18446744073709551585) [ 262.527327][T12228] bond6: option miimon: allowed values 0 - 2147483647 [ 262.561066][T12228] bond6 (unregistering): Released all slaves [ 263.792255][T12296] policy can only be matched on NF_INET_PRE_ROUTING [ 263.792277][T12296] unable to load match [ 263.822176][T12295] policy can only be matched on NF_INET_PRE_ROUTING [ 263.822196][T12295] unable to load match [ 263.906870][T12298] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 264.393556][T12320] geneve3: entered promiscuous mode [ 264.401981][T12320] geneve3: entered allmulticast mode [ 264.504800][T12330] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 264.543374][T12313] syzkaller1: entered promiscuous mode [ 264.552863][T12313] syzkaller1: entered allmulticast mode [ 264.582201][T12313] __nla_validate_parse: 13 callbacks suppressed [ 264.582220][T12313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1712'. [ 264.817038][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 264.911105][T12343] validate_nla: 1 callbacks suppressed [ 264.911124][T12343] netlink: 'syz.1.1721': attribute type 5 has an invalid length. [ 265.053526][T12347] netlink: 'syz.1.1724': attribute type 3 has an invalid length. [ 265.191172][T12357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.455310][T12366] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 265.467441][T12366] bond9 (unregistering): Released all slaves [ 265.469179][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 265.482507][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 265.627565][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'. [ 265.930997][T12400] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1738'. [ 265.975343][T12402] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1739'. [ 265.975382][ T7958] wlan1: Trigger new scan to find an IBSS to join [ 266.045180][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'. [ 266.092983][T12404] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 266.109774][T12404] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1740'. [ 266.224935][T12407] veth5: entered allmulticast mode [ 266.373331][T12417] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1746'. [ 266.402927][T12419] netlink: 'syz.0.1745': attribute type 24 has an invalid length. [ 266.413466][T12414] team0: Device wireguard0 is of different type [ 267.123660][T12450] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 267.272343][T12458] netlink: 'syz.1.1758': attribute type 9 has an invalid length. [ 268.791686][T12523] 8021q: VLANs not supported on ip_vti0 [ 268.927683][T12528] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 269.017565][ T7958] wlan1: Trigger new scan to find an IBSS to join [ 269.646802][T12567] netlink: 'syz.7.1794': attribute type 4 has an invalid length. [ 269.662487][T12570] __nla_validate_parse: 6 callbacks suppressed [ 269.662507][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1795'. [ 269.759890][T12579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1798'. [ 269.802149][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 270.009471][T12588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1800'. [ 270.363727][T12607] netlink: 'syz.3.1809': attribute type 14 has an invalid length. [ 270.391442][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'. [ 270.412111][T12607] netlink: 'syz.3.1809': attribute type 14 has an invalid length. [ 270.421037][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'. [ 270.438650][T12615] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1809'. [ 270.829764][T12637] tipc: Enabled bearer , priority 0 [ 270.838807][T12637] syzkaller0: entered promiscuous mode [ 270.846063][T12637] syzkaller0: entered allmulticast mode [ 270.867240][T12637] tipc: Resetting bearer [ 270.876303][T12636] tipc: Resetting bearer [ 270.889979][T12636] tipc: Disabling bearer [ 271.082260][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1821'. [ 271.278178][T12651] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1823'. [ 271.457215][T12656] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 271.894374][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 271.974710][ T7957] wlan1: Trigger new scan to find an IBSS to join [ 272.230567][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 272.679534][T12731] netlink: 'syz.1.1847': attribute type 11 has an invalid length. [ 272.875220][ T7958] wlan1: Creating new IBSS network, BSSID 0a:ff:8d:00:00:00 [ 273.101901][T12745] netlink: 'syz.1.1852': attribute type 83 has an invalid length. [ 273.338323][T12765] netlink: 'syz.7.1856': attribute type 4 has an invalid length. [ 273.461116][T12767] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 273.473982][T12767] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 273.516271][T12773] macvlan4: entered promiscuous mode [ 273.521721][T12773] macvlan4: entered allmulticast mode [ 273.528233][T12773] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 274.198379][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.210495][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.222929][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.233894][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.243119][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.276525][T12805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.688655][T12818] syzkaller0: entered promiscuous mode [ 274.702893][T12818] syzkaller0: entered allmulticast mode [ 274.715984][T12815] __nla_validate_parse: 8 callbacks suppressed [ 274.716002][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'. [ 274.760364][T12815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1868'. [ 275.014294][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 275.211287][T12836] tipc: Enabling of bearer rejected, already enabled [ 275.221708][T12834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.226673][T12833] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 275.239498][T12833] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 275.257819][T12836] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.312956][T12835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.332543][T12833] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.350140][T12799] chnl_net:caif_netlink_parms(): no params data found [ 275.385650][T12834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.440383][T12833] tipc: Resetting bearer [ 275.462017][T12834] netlink: 'syz.7.1874': attribute type 1 has an invalid length. [ 275.560892][T12834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.567055][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1874'. [ 275.673025][T12854] bond2 (unregistering): Released all slaves [ 275.706964][T12852] tipc: Enabled bearer , priority 0 [ 275.783262][T12852] tipc: Disabling bearer [ 275.798733][T12799] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.806914][T12799] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.815030][T12799] bridge_slave_0: entered allmulticast mode [ 275.822253][T12799] bridge_slave_0: entered promiscuous mode [ 275.831561][T12799] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.839142][T12799] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.860903][T12799] bridge_slave_1: entered allmulticast mode [ 275.869273][T12799] bridge_slave_1: entered promiscuous mode [ 275.942913][T12862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1881'. [ 275.959254][T12799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.975484][T12799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.072396][T12799] team0: Port device team_slave_0 added [ 276.094949][T12799] team0: Port device team_slave_1 added [ 276.175032][T12799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.183136][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.210261][T12799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.227050][T12799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.236546][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.263815][T12799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.295436][ T5852] Bluetooth: hci6: command tx timeout [ 276.489573][T12799] hsr_slave_0: entered promiscuous mode [ 276.513602][T12885] netlink: 'syz.0.1888': attribute type 1 has an invalid length. [ 276.513996][T12799] hsr_slave_1: entered promiscuous mode [ 276.529360][T12799] debugfs: 'hsr0' already exists in 'hsr' [ 276.545542][T12799] Cannot create hsr debugfs directory [ 276.652458][T12890] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 276.680097][T12890] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 276.723217][T12885] gretap3: entered promiscuous mode [ 276.728915][T12885] gretap3: entered allmulticast mode [ 276.741180][T12885] bond6: (slave gretap3): making interface the new active one [ 276.749498][T12885] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 276.851796][T12899] tc_dump_action: action bad kind [ 276.977202][T12894] syzkaller1: entered promiscuous mode [ 276.983452][T12894] syzkaller1: entered allmulticast mode [ 277.143593][T12799] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 277.165522][T12799] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 277.167480][T12907] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.191298][T12799] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 277.204851][T12799] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 277.304728][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'. [ 277.341907][T12799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.381028][T12799] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.403258][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.410518][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.422332][T12917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1896'. [ 277.428711][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.438479][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.462299][T12921] netlink: 'syz.7.1898': attribute type 1 has an invalid length. [ 277.479308][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1898'. [ 277.732018][T12799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.846534][T12935] syzkaller1: entered promiscuous mode [ 277.852061][T12935] syzkaller1: entered allmulticast mode [ 277.863953][T12935] tipc: Started in network mode [ 277.884874][T12935] tipc: Node identity ac14140f, cluster identity 4711 [ 277.891957][T12935] tipc: New replicast peer: 255.255.255.255 [ 277.906688][T12935] tipc: Enabled bearer , priority 10 [ 278.234358][T12799] veth0_vlan: entered promiscuous mode [ 278.262599][T12799] veth1_vlan: entered promiscuous mode [ 278.339749][T12799] veth0_macvtap: entered promiscuous mode [ 278.361797][T12799] veth1_macvtap: entered promiscuous mode [ 278.375314][ T5852] Bluetooth: hci6: command tx timeout [ 278.430604][T12799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.483334][T12799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.559373][ T1095] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.574993][ T1095] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.595880][T12960] openvswitch: netlink: Message has 5368 unknown bytes. [ 278.602963][T12960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.613631][ T1095] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.638374][ T1095] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.815517][T12973] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1913'. [ 278.836895][ T7951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.859191][ T7951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.903944][T12973] bond2: (slave gretap0): Device is not bonding slave [ 278.938043][T12973] bond2: option active_slave: invalid value (gretap0) [ 278.951181][T12973] bond2 (unregistering): Released all slaves [ 278.981368][T12978] netlink: 'syz.0.1914': attribute type 1 has an invalid length. [ 279.001764][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'. [ 279.002644][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.032953][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.047222][ T977] tipc: Node number set to 2886997007 [ 279.418738][T12992] syzkaller0: entered promiscuous mode [ 279.425271][T12992] syzkaller0: entered allmulticast mode [ 279.459639][ T7957] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 279.707052][T13009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1922'. [ 279.717120][T13009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.042964][T13017] __nla_validate_parse: 1 callbacks suppressed [ 280.042983][T13017] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1926'. [ 280.112250][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 280.178270][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'. [ 280.458389][ T5852] Bluetooth: hci6: command tx timeout [ 281.118860][ T7957] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 281.145374][T13017] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 281.154319][ T7957] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 281.245264][ T7957] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 281.825163][T13056] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1934'. [ 281.844974][T13064] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1934'. [ 281.986756][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'. [ 282.164631][T13074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1938'. [ 282.250662][T13080] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1942'. [ 282.460401][T13090] netlink: 'syz.1.1947': attribute type 6 has an invalid length. [ 282.497316][T13091] veth1_macvtap: left promiscuous mode [ 282.536663][ T5852] Bluetooth: hci6: command tx timeout [ 282.604555][T13100] netlink: 'syz.0.1945': attribute type 13 has an invalid length. [ 282.633846][T13100] netlink: 'syz.0.1945': attribute type 58 has an invalid length. [ 282.652580][T13100] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1945'. [ 282.667733][T13102] netlink: 'syz.8.1950': attribute type 12 has an invalid length. [ 282.767398][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 283.118433][T13128] netlink: 'syz.1.1955': attribute type 5 has an invalid length. [ 283.153603][T13125] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 283.166389][T13125] bond2: (slave vcan1): Error -95 calling set_mac_address [ 283.211889][T13128] netlink: 'syz.1.1955': attribute type 5 has an invalid length. [ 283.235909][T13128] netlink: 'syz.1.1955': attribute type 5 has an invalid length. [ 283.256517][T13128] netlink: 'syz.1.1955': attribute type 5 has an invalid length. [ 283.279493][T13128] netlink: 'syz.1.1955': attribute type 5 has an invalid length. [ 283.282553][T13133] macsec0: entered promiscuous mode [ 283.293728][T13133] macsec0: entered allmulticast mode [ 283.300288][T13128] netlink: 'syz.1.1955': attribute type 5 has an invalid length. [ 283.306487][T13133] veth1_macvtap: entered promiscuous mode [ 283.316366][T13133] veth1_macvtap: entered allmulticast mode [ 283.323332][T13133] macsec0: left promiscuous mode [ 283.332540][T13133] macsec0: left allmulticast mode [ 283.363134][T13133] veth1_macvtap: left allmulticast mode [ 283.771174][T13160] syzkaller0: entered promiscuous mode [ 283.779810][T13160] syzkaller0: entered allmulticast mode [ 283.956266][T13174] IPVS: set_ctl: invalid protocol: 50 172.20.20.13:20003 [ 284.595558][T13201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.711871][T13204] Bluetooth: hci1: too big key_count value 32778 [ 284.999716][T13220] IPVS: Unknown mcast interface: veth1_to_team [ 285.097112][T13230] __nla_validate_parse: 7 callbacks suppressed [ 285.097129][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1986'. [ 285.106844][T13228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.115653][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1986'. [ 285.272922][T13228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.343352][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1987'. [ 285.376766][T13236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.545722][T13228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.665076][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1993'. [ 285.674240][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1993'. [ 285.695353][T13254] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1993'. [ 285.832690][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 285.843833][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 285.857620][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 285.867650][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 285.875586][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 286.097745][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1997'. [ 286.435446][T13281] sctp: [Deprecated]: syz.7.2003 (pid 13281) Use of int in max_burst socket option deprecated. [ 286.435446][T13281] Use struct sctp_assoc_value instead [ 286.540322][T13283] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2005'. [ 286.886473][T13294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.962458][T13294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.000207][T13255] chnl_net:caif_netlink_parms(): no params data found [ 287.040457][T13294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.095866][T13308] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2013'. [ 287.151995][T13294] 8021q: adding VLAN 0 to HW filter on device bond9 [ 287.325540][T13255] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.332864][T13255] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.347216][T13255] bridge_slave_0: entered allmulticast mode [ 287.356812][T13255] bridge_slave_0: entered promiscuous mode [ 287.367638][T13255] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.375620][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.385342][T13255] bridge_slave_1: entered allmulticast mode [ 287.396297][T13255] bridge_slave_1: entered promiscuous mode [ 287.557526][T13255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.579963][T13255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.615153][T13334] tipc: Enabled bearer , priority 0 [ 287.688970][T13334] syzkaller0: entered promiscuous mode [ 287.695315][T13334] syzkaller0: entered allmulticast mode [ 287.701344][T13334] tipc: Resetting bearer [ 287.753232][T13255] team0: Port device team_slave_0 added [ 287.783184][T13333] tipc: Resetting bearer [ 287.985897][ T5852] Bluetooth: hci7: command tx timeout [ 287.991370][T13358] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2025'. [ 288.047545][T13359] netlink: 'syz.1.2025': attribute type 11 has an invalid length. [ 289.260341][T13333] tipc: Disabling bearer [ 289.281325][T13255] team0: Port device team_slave_1 added [ 289.490159][T13255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.522831][T13255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.565869][T13255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.580595][T13377] validate_nla: 63 callbacks suppressed [ 289.580610][T13377] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 289.803734][T13255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.810825][T13255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.836053][T13387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.838983][T13255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.874700][T13377] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.910331][T13383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.922071][T13388] syz_tun: entered promiscuous mode [ 289.975513][T13383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.011507][T13255] hsr_slave_0: entered promiscuous mode [ 290.019071][T13255] hsr_slave_1: entered promiscuous mode [ 290.019350][T13383] netlink: 'syz.1.2031': attribute type 1 has an invalid length. [ 290.027432][T13255] debugfs: 'hsr0' already exists in 'hsr' [ 290.054310][T13255] Cannot create hsr debugfs directory [ 290.056316][ T5852] Bluetooth: hci7: command tx timeout [ 290.072162][T13384] syz_tun: left promiscuous mode [ 290.110605][T13392] syzkaller1: entered promiscuous mode [ 290.117023][T13392] syzkaller1: entered allmulticast mode [ 290.168666][T13383] 8021q: adding VLAN 0 to HW filter on device bond10 [ 290.748462][T13426] __nla_validate_parse: 1 callbacks suppressed [ 290.748480][T13426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2041'. [ 290.830835][T13255] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 290.896199][T13255] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 290.908515][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2044'. [ 290.952344][T13255] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 290.981619][T13436] netlink: 'syz.7.2046': attribute type 1 has an invalid length. [ 290.989996][T13437] netlink: 'syz.7.2046': attribute type 1 has an invalid length. [ 290.995796][T13255] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 291.005207][T13436] netlink: 'syz.7.2046': attribute type 4 has an invalid length. [ 291.013433][T13437] netlink: 'syz.7.2046': attribute type 4 has an invalid length. [ 291.016684][T13436] netlink: 9422 bytes leftover after parsing attributes in process `syz.7.2046'. [ 291.026671][T13437] netlink: 9422 bytes leftover after parsing attributes in process `syz.7.2046'. [ 291.041240][T13438] netlink: 'syz.8.2045': attribute type 11 has an invalid length. [ 291.054233][T13438] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2045'. [ 291.081285][T13438] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2045'. [ 291.291509][T13454] netlink: 'syz.0.2048': attribute type 21 has an invalid length. [ 291.331683][T13438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.348357][T13438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.359471][T13438] bond0 (unregistering): Released all slaves [ 291.423661][T13454] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 291.440365][T13454] bond8 (unregistering): Released all slaves [ 291.528045][T13462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.600519][T13464] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5 [ 291.601558][T13462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.693245][T13467] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2052'. [ 291.757450][T13462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.786016][T13462] netlink: 'syz.8.2051': attribute type 1 has an invalid length. [ 291.799725][T13255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.807878][T13464] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2052'. [ 291.897806][T13462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.926360][T13478] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2055'. [ 291.968703][T13255] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.989746][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.996989][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.030061][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.037279][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.134382][ T5852] Bluetooth: hci7: command tx timeout [ 292.180344][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2059'. [ 292.347189][T13493] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20003 [ 292.380311][T13493] netlink: 'syz.0.2062': attribute type 1 has an invalid length. [ 292.382644][T13496] netlink: 'syz.7.2063': attribute type 24 has an invalid length. [ 292.551666][T13493] 8021q: adding VLAN 0 to HW filter on device bond8 [ 292.656923][T13511] tc_dump_action: action bad kind [ 292.767972][T13515] IPVS: Error connecting to the multicast addr [ 292.853489][T13255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.181625][T13542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.260184][T13542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.344364][T13551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.476206][T13542] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.610858][T13255] veth0_vlan: entered promiscuous mode [ 293.629830][T13255] veth1_vlan: entered promiscuous mode [ 293.687967][T13255] veth0_macvtap: entered promiscuous mode [ 293.700999][T13255] veth1_macvtap: entered promiscuous mode [ 293.743648][T13255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.793421][T13255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.828560][ T7951] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.856971][ T7951] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.879974][ T7951] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.896075][ T7951] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.190106][ T7954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.215984][ T5852] Bluetooth: hci7: command tx timeout [ 294.227243][ T7954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.291141][ T7793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.310340][ T7793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.376310][T13602] : renamed from bridge_slave_0 (while UP) [ 294.780427][T13617] bond1: entered promiscuous mode [ 294.791728][T13617] bond1: entered allmulticast mode [ 294.806051][T13617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.870177][T13618] bond2: entered promiscuous mode [ 294.875786][T13618] bond2: entered allmulticast mode [ 294.881433][T13618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.955743][T13622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.048174][T13622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.078468][T13635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.120906][T13622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.174542][T13622] validate_nla: 1 callbacks suppressed [ 295.174561][T13622] netlink: 'syz.0.2099': attribute type 1 has an invalid length. [ 295.231451][T13622] 8021q: adding VLAN 0 to HW filter on device bond9 [ 295.261946][T13644] veth1_to_bond: entered allmulticast mode [ 295.373324][T13644] bond0: (slave bond_slave_1): Releasing backup interface [ 295.924007][T13690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.132880][T13699] __nla_validate_parse: 10 callbacks suppressed [ 296.132901][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 296.310947][T13712] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2126'. [ 296.548834][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2128'. [ 296.645797][T13715] bond0: (slave team0): Releasing backup interface [ 296.685875][T13715] team0 (unregistering): Port device team_slave_0 removed [ 296.910331][T13744] xt_l2tp: missing protocol rule (udp|l2tpip) [ 296.990823][T13750] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2138'. [ 297.041463][T13754] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2137'. [ 297.127720][T13751] netlink: 536 bytes leftover after parsing attributes in process `syz.8.2137'. [ 297.149314][T13751] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2137'. [ 297.166789][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'. [ 297.635190][T13787] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 297.710164][T13791] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2148'. [ 297.773003][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2151'. [ 297.929286][T13799] nbd: device at index 1 is going down [ 298.213769][T13826] sctp: [Deprecated]: syz.1.2159 (pid 13826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.213769][T13826] Use struct sctp_sack_info instead [ 298.264227][T13822] sctp: [Deprecated]: syz.1.2159 (pid 13822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.264227][T13822] Use struct sctp_sack_info instead [ 298.340686][T13831] bridge_slave_1: left allmulticast mode [ 298.363801][T13831] bridge_slave_1: left promiscuous mode [ 298.382550][T13831] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.398210][T13831] bridge_slave_0: left allmulticast mode [ 298.407351][T13831] bridge_slave_0: left promiscuous mode [ 298.413200][T13831] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.639202][T13842] bond0: (slave bridge_slave_1): Releasing backup interface [ 298.946285][T13865] netlink: 'syz.9.2170': attribute type 3 has an invalid length. [ 299.543473][T13896] syzkaller1: entered promiscuous mode [ 299.549228][T13896] syzkaller1: entered allmulticast mode [ 300.284600][T13932] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 300.443046][T13940] Unsupported ieee802154 address type: 0 [ 300.978519][T13969] wg2: entered promiscuous mode [ 300.991260][T13969] wg2: entered allmulticast mode [ 301.354113][T13995] __nla_validate_parse: 14 callbacks suppressed [ 301.354132][T13995] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2206'. [ 301.586082][T14002] batadv_slave_1: entered allmulticast mode [ 301.616844][T14001] batadv_slave_1: left allmulticast mode [ 301.703299][T14008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2212'. [ 301.734292][T14008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2212'. [ 301.889129][T14020] netlink: 'syz.9.2214': attribute type 1 has an invalid length. [ 301.929144][T14020] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2214'. [ 302.018139][T14020] gretap1: entered promiscuous mode [ 302.039658][T14020] bond1: (slave gretap1): making interface the new active one [ 302.057502][T14020] gretap1: entered allmulticast mode [ 302.066431][T14020] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 302.091759][T14023] macvlan2: entered promiscuous mode [ 302.110956][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2220'. [ 302.115198][T14023] macvlan2: entered allmulticast mode [ 302.135313][T14023] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.143549][T14023] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 302.534469][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.680400][T14054] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2223'. [ 303.734387][ T51] Bluetooth: hci7: command tx timeout [ 305.455831][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2227'. [ 305.496518][T14081] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2232'. [ 305.555793][T14085] netlink: 'syz.8.2232': attribute type 83 has an invalid length. [ 305.610043][T14081] netlink: 'syz.8.2232': attribute type 13 has an invalid length. [ 305.714781][T14081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.829223][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2235'. [ 305.961253][T14103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.350366][T14128] tipc: Enabling of bearer rejected, already enabled [ 306.457328][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'. [ 306.536297][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2248'. [ 306.569264][T14145] bridge_slave_0: left allmulticast mode [ 306.575228][T14145] bridge_slave_0: left promiscuous mode [ 306.582529][T14145] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.757533][T14146] dvmrp0: left allmulticast mode [ 306.846962][T14145] 8021q: VLANs not supported on ip6gre0 [ 306.975576][T14160] netlink: 'syz.9.2256': attribute type 10 has an invalid length. [ 307.002826][T14160] veth0_virt_wifi: entered allmulticast mode [ 307.053849][T14160] team0: Port device veth0_virt_wifi added [ 307.411373][T14189] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2267'. [ 307.538918][T14194] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2268'. [ 307.751732][T14209] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2273'. [ 308.003886][T14220] netlink: 796 bytes leftover after parsing attributes in process `syz.0.2277'. [ 308.023145][T14220] unsupported nla_type 9294 [ 308.121013][T14228] netlink: 'syz.8.2280': attribute type 39 has an invalid length. [ 308.271959][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 308.621740][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2288'. [ 308.667497][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2288'. [ 309.116095][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2298'. [ 309.276304][ C0] vcan0: j1939_session_tx_dat: 0xffff88807e163000: queue data error: -100 [ 309.280828][T14281] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 309.413796][T14304] netlink: 'syz.7.2302': attribute type 1 has an invalid length. [ 309.609751][T14310] bond6 (unregistering): Released all slaves [ 309.857021][T14316] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 309.874226][T14316] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 309.917038][T14316] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 310.260011][T14353] netlink: 'syz.1.2314': attribute type 8 has an invalid length. [ 310.403132][T14349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.870918][T14390] IPVS: set_ctl: invalid protocol: 4 172.20.20.45:20000 [ 311.078642][T14401] bridge5: entered promiscuous mode [ 311.111732][T14401] bridge5: entered allmulticast mode [ 311.141967][T14399] bridge6: entered promiscuous mode [ 311.148611][T14399] bridge6: entered allmulticast mode [ 311.330773][T14418] netlink: zone id is out of range [ 311.358376][T14418] netlink: get zone limit has 8 unknown bytes [ 311.607464][T14431] __nla_validate_parse: 6 callbacks suppressed [ 311.607482][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2336'. [ 311.771867][ T7958] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.781935][ T7958] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.832247][ T7958] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.864742][ T7958] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.914445][T14456] sctp: [Deprecated]: syz.1.2342 (pid 14456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.914445][T14456] Use struct sctp_sack_info instead [ 312.004612][T14460] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2345'. [ 312.316337][T14479] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 312.347743][T14480] netlink: 22 bytes leftover after parsing attributes in process `syz.9.2349'. [ 312.899231][T14508] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2357'. [ 313.235740][T14530] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.2361'. [ 313.260852][T14528] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.2361'. [ 313.283466][T14530] netlink: zone id is out of range [ 313.296253][T14487] pim6reg1: entered promiscuous mode [ 313.301848][T14487] pim6reg1: entered allmulticast mode [ 313.303510][T14528] netlink: zone id is out of range [ 313.312227][T14530] netlink: zone id is out of range [ 313.319483][T14530] netlink: zone id is out of range [ 313.340231][T14528] netlink: zone id is out of range [ 313.351389][T14528] netlink: zone id is out of range [ 313.358179][T14528] netlink: zone id is out of range [ 313.363471][T14528] netlink: zone id is out of range [ 313.376706][T14537] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 313.517847][T14542] netlink: 'syz.1.2366': attribute type 32 has an invalid length. [ 313.526476][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2366'. [ 313.586624][T14542] bond11: Setting coupled_control to off (0) [ 313.852621][T14557] netlink: 'syz.9.2371': attribute type 62 has an invalid length. [ 313.933696][T14565] netlink: 'syz.0.2373': attribute type 28 has an invalid length. [ 313.942168][T14565] netlink: 'syz.0.2373': attribute type 3 has an invalid length. [ 313.952683][T14565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2373'. [ 313.981172][T14557] syzkaller0: entered promiscuous mode [ 313.987169][T14557] syzkaller0: entered allmulticast mode [ 315.662587][T14575] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2376'. [ 316.247555][T14616] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2388'. [ 316.399663][T14624] bond2: Removing last ns target with arp_interval on [ 316.662571][T14642] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 316.975911][T14647] __nla_validate_parse: 1 callbacks suppressed [ 316.975932][T14647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2399'. [ 317.271708][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.282562][T14656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2401'. [ 317.392411][T14658] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2402'. [ 317.820908][T14671] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2405'. [ 317.939512][T14675] syzkaller0: entered promiscuous mode [ 317.945539][T14675] syzkaller0: entered allmulticast mode [ 317.966880][T14675] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 318.166105][T14681] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.199532][T14680] netlink: 'syz.9.2408': attribute type 11 has an invalid length. [ 318.221570][T14681] netlink: 'syz.8.2409': attribute type 1 has an invalid length. [ 318.284293][T14680] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2408'. [ 318.632684][T14693] netlink: 'syz.8.2413': attribute type 12 has an invalid length. [ 319.256885][T14707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.277075][T14707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.368030][T14707] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 319.441548][ T7951] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.484982][ T7951] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.493909][ T7951] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.563999][ T7951] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.596890][ T7951] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.609105][ T7951] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.637797][T14721] IPv6: sit2: Disabled Multicast RS [ 319.659633][T14721] sit2: entered allmulticast mode [ 319.752500][ T7951] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.766225][ T7951] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.780576][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2421'. [ 319.791666][T14727] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2422'. [ 319.815903][T14727] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2422'. [ 319.853115][T14727] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2422'. [ 320.202525][T14753] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2430'. [ 320.537317][T14770] vxcan1: tx address claim with dlc 0 [ 320.613341][T14774] syzkaller1: entered promiscuous mode [ 320.623862][T14774] syzkaller1: entered allmulticast mode [ 320.670347][T14774] netlink: 'syz.8.2436': attribute type 12 has an invalid length. [ 321.042882][T14802] net_ratelimit: 18 callbacks suppressed [ 321.042903][T14802] netlink: zone id is out of range [ 321.077849][T14802] netlink: zone id is out of range [ 321.083032][T14802] netlink: zone id is out of range [ 321.142319][T14802] netlink: get zone limit has 8 unknown bytes [ 321.921627][T14845] tipc: Enabled bearer , priority 0 [ 321.931111][T14845] syzkaller0: entered promiscuous mode [ 321.945226][T14845] syzkaller0: entered allmulticast mode [ 321.969346][T14847] netlink: 'syz.1.2460': attribute type 1 has an invalid length. [ 321.977849][T14852] netlink: 'syz.1.2460': attribute type 1 has an invalid length. [ 322.035636][T14858] C: renamed from lo (while UP) [ 322.036293][T14845] __nla_validate_parse: 10 callbacks suppressed [ 322.036310][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2459'. [ 322.108181][T14862] tipc: Resetting bearer [ 322.117177][T14861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2464'. [ 322.144584][T14844] tipc: Resetting bearer [ 322.213685][T14844] tipc: Disabling bearer [ 322.428620][T14883] pimreg: entered allmulticast mode [ 322.511703][T14882] netlink: 'syz.7.2472': attribute type 11 has an invalid length. [ 322.528963][T14882] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2472'. [ 322.599636][T14891] netlink: 'syz.8.2475': attribute type 4 has an invalid length. [ 322.634674][T14894] vlan1: entered allmulticast mode [ 322.639835][T14894] veth0_vlan: entered allmulticast mode [ 322.688372][T14893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.762952][T14893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.806248][T14909] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2480'. [ 322.842557][T14893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.879341][T14909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.897339][T14893] netlink: 'syz.1.2476': attribute type 1 has an invalid length. [ 322.917999][T14911] netlink: 'syz.9.2481': attribute type 10 has an invalid length. [ 322.938847][T14911] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.960678][T14911] bridge_slave_1: left allmulticast mode [ 322.968732][T14911] bridge_slave_1: left promiscuous mode [ 322.976274][T14911] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.007039][T14911] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 323.145920][T14928] netlink: 'syz.8.2485': attribute type 10 has an invalid length. [ 323.222787][T14928] netlink: 'syz.8.2485': attribute type 1 has an invalid length. [ 323.236633][T14928] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2485'. [ 323.276063][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2485'. [ 323.336631][T14936] netlink: 'syz.9.2489': attribute type 12 has an invalid length. [ 323.531851][T14946] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2491'. [ 323.545739][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2494'. [ 323.618947][T14950] chnl_net:caif_netlink_parms(): no params data found [ 323.708320][T14953] bond6: (slave gretap1): making interface the new active one [ 323.715661][T14959] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2495'. [ 323.718340][T14953] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 324.100756][T14978] netlink: 212288 bytes leftover after parsing attributes in process `syz.8.2501'. [ 324.195891][T14982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.292740][T14992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.380540][T14982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.421588][T14982] validate_nla: 1 callbacks suppressed [ 324.421606][T14982] netlink: 'syz.7.2503': attribute type 1 has an invalid length. [ 324.598815][T15010] syzkaller1: entered promiscuous mode [ 324.604520][T15010] syzkaller1: entered allmulticast mode [ 325.411789][T15051] netlink: 'syz.0.2524': attribute type 2 has an invalid length. [ 325.763087][T15066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.827530][T15066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.889898][T15066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.919824][T15072] lo: entered allmulticast mode [ 325.920306][T15066] netlink: 'syz.0.2528': attribute type 1 has an invalid length. [ 325.934400][T15072] tunl0: entered allmulticast mode [ 325.939882][T15072] gre0: entered allmulticast mode [ 325.946334][T15072] gretap0: entered allmulticast mode [ 325.952829][T15072] erspan0: entered allmulticast mode [ 325.958925][T15072] ip_vti0: entered allmulticast mode [ 325.966074][T15072] ip6_vti0: entered allmulticast mode [ 325.974932][T15072] sit0: entered allmulticast mode [ 325.981181][T15072] ip6tnl0: entered allmulticast mode [ 325.990007][T15072] ip6gre0: entered allmulticast mode [ 325.996111][T15072] syz_tun: entered allmulticast mode [ 326.001857][T15072] ip6gretap0: entered allmulticast mode [ 326.008826][T15072] team0: entered allmulticast mode [ 326.016316][T15072] team_slave_0: entered allmulticast mode [ 326.022220][T15072] team_slave_1: entered allmulticast mode [ 326.028776][T15072] dummy0: entered allmulticast mode [ 326.038313][T15072] nlmon0: entered allmulticast mode [ 326.043834][T15072] caif0: entered allmulticast mode [ 326.049301][T15072] batadv0: entered allmulticast mode [ 326.055915][T15072] vxcan0: entered allmulticast mode [ 326.061585][T15072] vxcan1: entered allmulticast mode [ 326.067607][T15072] veth0: entered allmulticast mode [ 326.073083][T15072] veth1: entered allmulticast mode [ 326.078621][T15072] wg1: entered allmulticast mode [ 326.106320][T15072] wg2: entered allmulticast mode [ 326.111485][T15072] veth0_to_bridge: entered allmulticast mode [ 326.136861][T15072] bridge_slave_0: entered allmulticast mode [ 326.142998][T15072] veth1_to_bridge: entered allmulticast mode [ 326.163588][T15072] bridge_slave_1: entered allmulticast mode [ 326.182117][T15072] veth0_to_bond: entered allmulticast mode [ 326.195040][T15072] bond_slave_0: entered allmulticast mode [ 326.201249][T15072] veth1_to_bond: entered allmulticast mode [ 326.251143][T15072] bond_slave_1: entered allmulticast mode [ 326.257225][T15072] veth0_to_team: entered allmulticast mode [ 326.263462][T15072] veth1_to_team: entered allmulticast mode [ 326.278666][T15072] veth0_to_batadv: entered allmulticast mode [ 326.304320][T15072] batadv_slave_0: entered allmulticast mode [ 326.332218][T15072] veth1_to_batadv: entered allmulticast mode [ 326.342618][T15072] batadv_slave_1: entered allmulticast mode [ 326.349012][T15072] xfrm0: entered allmulticast mode [ 326.356530][T15072] veth0_to_hsr: entered allmulticast mode [ 326.362498][T15072] hsr_slave_0: entered allmulticast mode [ 326.369404][T15072] veth1_to_hsr: entered allmulticast mode [ 326.375946][T15072] hsr_slave_1: entered allmulticast mode [ 326.381787][T15072] hsr0: entered allmulticast mode [ 326.387170][T15072] veth1_virt_wifi: entered allmulticast mode [ 326.393341][T15072] veth0_virt_wifi: entered allmulticast mode [ 326.399586][T15072] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 326.407239][T15072] veth1_macvtap: entered allmulticast mode [ 326.413372][T15072] veth0_macvtap: entered allmulticast mode [ 326.421490][T15072] macvtap0: entered allmulticast mode [ 326.427333][T15072] macsec0: entered allmulticast mode [ 326.432946][T15072] geneve0: entered allmulticast mode [ 326.453395][T15072] geneve1: entered allmulticast mode [ 326.459076][T15072] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 326.467309][T15072] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 326.475384][T15072] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 326.483042][T15072] netdevsim netdevsim8 netdevsim3: entered allmulticast mode [ 326.491562][T15072] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 326.499493][T15072] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 326.507365][T15072] ip6tnl1: entered allmulticast mode [ 326.512923][T15072] bridge1: entered allmulticast mode [ 326.518736][T15072] vti60: entered allmulticast mode [ 326.524166][T15072] erspan1: entered allmulticast mode [ 326.529600][T15072] bond0: entered allmulticast mode [ 326.541355][T15072] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 326.552873][T15072] vxcan2: entered allmulticast mode [ 326.558775][T15072] vxcan3: entered allmulticast mode [ 326.564276][T15072] bond1: entered allmulticast mode [ 326.569504][T15072] vxlan0: entered allmulticast mode [ 326.576699][T15072] bond2: entered allmulticast mode [ 326.677223][T15092] bond0: Device is already in use. [ 327.076967][ T30] audit: type=1800 audit(1759550247.127:2): pid=15117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2542" name="memory.events" dev="tmpfs" ino=475 res=0 errno=0 [ 327.218473][T15116] __nla_validate_parse: 4 callbacks suppressed [ 327.218492][T15116] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2543'. [ 327.379345][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2547'. [ 327.586514][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2549'. [ 327.680667][T15136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.699090][T15136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.790440][T15136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.828928][T15136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.887366][T15155] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2553'. [ 327.889544][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2552'. [ 327.932580][T15157] netlink: 'syz.8.2554': attribute type 3 has an invalid length. [ 327.948078][T15159] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 328.144891][T15165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.282396][T15165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.404451][T15165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.454785][T15165] netlink: 'syz.0.2555': attribute type 1 has an invalid length. [ 328.605984][T15184] netlink: 'syz.9.2560': attribute type 64 has an invalid length. [ 328.636150][T15184] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2560'. [ 328.713491][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2563'. [ 328.728245][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2563'. [ 328.875295][T15198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2566'. [ 328.981450][T15205] netlink: 'syz.7.2569': attribute type 1 has an invalid length. [ 329.021027][T15202] bond5: option resend_igmp: invalid value (32767) [ 329.028374][T15202] bond5: option resend_igmp: allowed values 0 - 255 [ 329.038824][T15202] bond5 (unregistering): Released all slaves [ 329.056104][T15210] x_tables: ip_tables: udp match: only valid for protocol 17 [ 329.123497][T15205] 8021q: adding VLAN 0 to HW filter on device bond7 [ 329.165660][T15209] bond7: (slave ip6erspan0): making interface the new active one [ 329.175860][T15209] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 329.219632][T15218] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 329.260039][T15218] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 329.372140][T15227] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2575'. [ 329.580131][T15235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.610388][T15238] batadv_slave_0: entered promiscuous mode [ 329.659076][T15238] batadv_slave_0: left allmulticast mode [ 329.669697][T15235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.702056][T15240] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 329.737676][T15235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.780444][T15235] netlink: 'syz.0.2581': attribute type 1 has an invalid length. [ 330.152001][T15276] netlink: 'syz.9.2589': attribute type 3 has an invalid length. [ 330.437356][T15292] netlink: 'syz.7.2596': attribute type 1 has an invalid length. [ 330.968065][T15323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.046908][T15330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.124767][T15323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.141350][T15323] netlink: 'syz.8.2605': attribute type 1 has an invalid length. [ 332.101602][T15387] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 332.542931][T15426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.690434][T15426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.781014][T15426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.823873][T15426] netlink: 'syz.0.2630': attribute type 1 has an invalid length. [ 332.945104][T15449] __nla_validate_parse: 11 callbacks suppressed [ 332.945124][T15449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2636'. [ 333.008875][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2637'. [ 333.021192][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2637'. [ 333.240571][T15461] bridge0: port 2(veth0) entered blocking state [ 333.252378][T15461] bridge0: port 2(veth0) entered disabled state [ 333.259949][T15461] veth0: entered allmulticast mode [ 333.269966][T15461] veth0: entered promiscuous mode [ 333.280293][T15461] bridge0: port 2(veth0) entered blocking state [ 333.286795][T15461] bridge0: port 2(veth0) entered forwarding state [ 333.487222][T15465] rdma_rxe: rxe_newlink: failed to add bond0 [ 333.510528][T15465] netlink: 'syz.8.2642': attribute type 13 has an invalid length. [ 333.605767][T15465] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.620124][T15465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.960920][T15488] º: renamed from veth1_vlan [ 334.094875][T15500] netlink: 'syz.9.2649': attribute type 21 has an invalid length. [ 334.205246][T15506] netlink: 666 bytes leftover after parsing attributes in process `syz.9.2651'. [ 334.303500][T15508] netlink: 'syz.7.2652': attribute type 1 has an invalid length. [ 334.323287][T15508] tipc: Enabled bearer , priority 0 [ 334.402498][T15508] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2652'. [ 334.447159][T15517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.512693][T15522] tap0: tun_chr_ioctl cmd 1074025677 [ 334.514859][T15517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.519747][T15522] tap0: linktype set to 65534 [ 334.595733][T15517] netlink: 'syz.9.2654': attribute type 1 has an invalid length. [ 334.803993][T15543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2664'. [ 334.877131][T15550] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2666'. [ 334.902752][T15550] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2666'. [ 335.288354][T15572] tipc: Enabled bearer , priority 0 [ 335.295855][T15572] syzkaller0: entered promiscuous mode [ 335.301343][T15572] syzkaller0: entered allmulticast mode [ 335.367320][T15582] tipc: Resetting bearer [ 335.449917][T15582] tipc: Resetting bearer [ 335.483006][T15582] tipc: Disabling bearer [ 335.606931][T15599] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2678'. [ 335.637376][T15598] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2678'. [ 335.840133][T15613] netlink: zone id is out of range [ 335.845517][T15613] netlink: zone id is out of range [ 335.850697][T15613] netlink: zone id is out of range [ 335.855964][T15613] netlink: get zone limit has 8 unknown bytes [ 336.416318][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 336.429119][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 336.439222][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 336.452627][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 336.468155][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 336.534447][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 336.546594][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 336.802814][T15638] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 337.266746][T15653] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 337.289036][T15652] bridge: RTM_NEWNEIGH with invalid ether address [ 337.343427][T15623] chnl_net:caif_netlink_parms(): no params data found [ 337.510935][T15664] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.631125][T15623] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.640248][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.647900][T15623] bridge_slave_0: entered allmulticast mode [ 337.657897][T15623] bridge_slave_0: entered promiscuous mode [ 337.668201][T15664] netlink: 'syz.7.2698': attribute type 12 has an invalid length. [ 337.678991][T15623] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.701949][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.712071][T15623] bridge_slave_1: entered allmulticast mode [ 337.721256][T15623] bridge_slave_1: entered promiscuous mode [ 337.789525][T15623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.803312][T15623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.880355][T15623] team0: Port device team_slave_0 added [ 337.898413][T15623] team0: Port device team_slave_1 added [ 337.956858][T15682] __nla_validate_parse: 12 callbacks suppressed [ 337.956876][T15682] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2704'. [ 338.006717][T15623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.006808][T15682] netlink: 'syz.7.2704': attribute type 1 has an invalid length. [ 338.016825][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.051073][T15623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.065234][T15680] tipc: Started in network mode [ 338.070127][T15680] tipc: Node identity 080211, cluster identity 4711 [ 338.078161][T15680] tipc: Enabled bearer , priority 0 [ 338.089040][T15623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.096582][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.126207][T15623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.163799][T15685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.288857][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2707'. [ 338.313401][T15623] hsr_slave_0: entered promiscuous mode [ 338.332282][T15623] hsr_slave_1: entered promiscuous mode [ 338.341231][T15623] debugfs: 'hsr0' already exists in 'hsr' [ 338.351902][T15623] Cannot create hsr debugfs directory [ 338.534466][ T51] Bluetooth: hci8: command tx timeout [ 338.553176][T15704] tipc: Trying to set illegal importance in message [ 338.565450][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2712'. [ 339.134994][T15711] team0 (unregistering): Port device team_slave_0 removed [ 339.151627][T15711] team0 (unregistering): Port device team_slave_1 removed [ 339.178803][T15711] team0 (unregistering): Port device veth0_virt_wifi removed [ 339.194763][ T7636] tipc: Node number set to 134353152 [ 339.329375][T15733] netlink: 'syz.8.2723': attribute type 3 has an invalid length. [ 339.415050][T15733] bond3 (unregistering): Released all slaves [ 339.454365][T15739] dvmrp0: entered allmulticast mode [ 339.658367][T15747] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2728'. [ 339.721948][T15623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 339.770719][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2730'. [ 339.784915][T15623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 339.807567][T15750] gtp1: entered promiscuous mode [ 339.813087][T15750] gtp1: entered allmulticast mode [ 339.821051][T15623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.843980][T15623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 340.037057][T15623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.077107][T15623] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.090540][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2734'. [ 340.102163][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.105650][T15766] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2733'. [ 340.109380][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.128126][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.135344][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.158745][T15766] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 340.174676][T15766] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 340.221519][T15766] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2733'. [ 340.614528][ T51] Bluetooth: hci8: command tx timeout [ 340.632964][T15623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.700802][T15623] veth0_vlan: entered promiscuous mode [ 340.717936][T15623] veth1_vlan: entered promiscuous mode [ 340.796577][T15623] veth0_macvtap: entered promiscuous mode [ 340.813524][T15623] veth1_macvtap: entered promiscuous mode [ 340.873092][T15623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.942973][T15623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.988323][ T7954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.003397][ T7954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.028976][T15804] netlink: 165 bytes leftover after parsing attributes in process `syz.8.2742'. [ 341.038336][ T7954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.038410][ T7954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.275502][ T7804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.308789][ T7804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.384541][ T7804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.410255][ T7804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.587674][T15829] netlink: 'syz.7.2747': attribute type 1 has an invalid length. [ 341.673638][T15829] 8021q: adding VLAN 0 to HW filter on device bond8 [ 341.714745][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2747'. [ 341.767956][T15840] netlink: 'syz.0.2750': attribute type 5 has an invalid length. [ 341.780081][T15840] netlink: 'syz.0.2750': attribute type 6 has an invalid length. [ 341.815306][T15831] dvmrp0: entered allmulticast mode [ 341.849161][T15838] dvmrp0: left allmulticast mode [ 342.073832][T15851] block nbd2: Unsupported socket: should be TCP or UNIX. [ 342.694294][ T51] Bluetooth: hci8: command tx timeout [ 342.725716][T15846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 342.735968][T15846] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 342.755356][T15846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.762894][T15846] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 342.778512][T15846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 342.794348][T15846] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 343.119055][T15846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 343.134007][T15846] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 343.155361][T15846] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 343.164321][T15846] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 343.293854][T15903] __nla_validate_parse: 5 callbacks suppressed [ 343.293872][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2766'. [ 343.488381][T15846] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 343.516180][T15846] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 343.530329][T15914] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 343.542981][T15846] tipc: Resetting bearer [ 343.603599][T15846] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 343.620624][T15846] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 343.638573][T15917] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 343.647210][T15917] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 343.752983][T15923] netlink: 165 bytes leftover after parsing attributes in process `syz.9.2774'. [ 343.781216][T15846] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 343.800005][T15846] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 343.896990][T15933] netlink: 'syz.8.2777': attribute type 11 has an invalid length. [ 343.918986][T15933] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2777'. [ 343.971765][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2778'. [ 343.987726][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2778'. [ 344.021846][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2778'. [ 344.034521][ T7957] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.048881][ T7957] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.064295][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2778'. [ 344.082329][ T7957] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.126876][ T7957] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.412121][T15963] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2787'. [ 344.494952][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2787'. [ 344.506334][T15966] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2788'. [ 344.719041][T15978] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.864780][T15985] syzkaller1: entered promiscuous mode [ 344.870451][T15985] syzkaller1: entered allmulticast mode [ 344.936615][T15989] netlink: 'syz.9.2797': attribute type 1 has an invalid length. [ 345.441606][T16019] netlink: 'syz.9.2808': attribute type 1 has an invalid length. [ 345.574155][ T51] Bluetooth: hci0: command tx timeout [ 345.867672][T16039] tipc: Started in network mode [ 345.872749][T16039] tipc: Node identity 120362280ce6, cluster identity 4711 [ 345.934268][T16039] tipc: Enabled bearer , priority 0 [ 346.036473][T16045] tipc: Disabling bearer [ 347.080091][T16114] tipc: Enabling of bearer rejected, failed to enable media [ 347.188304][T16129] netlink: 'syz.9.2831': attribute type 5 has an invalid length. [ 347.322344][T16133] netlink: 'syz.8.2833': attribute type 1 has an invalid length. [ 347.344895][T16132] netlink: 'syz.8.2833': attribute type 1 has an invalid length. [ 347.384713][T16137] veth1: entered promiscuous mode [ 347.395602][T16137] netlink: 'syz.0.2835': attribute type 1 has an invalid length. [ 347.417341][T16137] netlink: 'syz.0.2835': attribute type 2 has an invalid length. [ 347.424935][T16139] xt_l2tp: invalid flags combination: 0 [ 347.567300][T16149] netlink: 'syz.9.2839': attribute type 1 has an invalid length. [ 347.576271][T16149] netlink: 'syz.9.2839': attribute type 1 has an invalid length. [ 347.704892][T16153] openvswitch: netlink: Missing key (keys=40, expected=80) [ 348.836635][T16218] __nla_validate_parse: 47 callbacks suppressed [ 348.836653][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2849'. [ 348.910172][T16220] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 349.069044][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.080517][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.093687][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.104368][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.114171][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.143431][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.153108][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.163936][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.174704][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.183877][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.253667][T16240] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2853'. [ 349.307536][T16244] tipc: Enabling of bearer rejected, already enabled [ 349.402709][T16246] tipc: Started in network mode [ 349.409959][T16246] tipc: Node identity c61ca48f5f8e, cluster identity 4711 [ 349.420804][T16246] tipc: Enabled bearer , priority 0 [ 349.431149][T16244] netlink: 'syz.8.2855': attribute type 12 has an invalid length. [ 349.449771][T16242] syzkaller0: entered promiscuous mode [ 349.459240][T16242] syzkaller0: entered allmulticast mode [ 349.496195][T16242] tipc: Resetting bearer [ 349.567513][T16241] tipc: Resetting bearer [ 349.606573][T16241] tipc: Disabling bearer [ 349.704926][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2857'. [ 349.713905][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2857'. [ 349.847381][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2857'. [ 349.857342][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2857'. [ 349.902663][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2861'. [ 350.075402][T16280] ieee802154 phy0 wpan0: encryption failed: -22 [ 350.082051][T16281] ieee802154 phy0 wpan0: encryption failed: -22 [ 350.132063][T16277] validate_nla: 2 callbacks suppressed [ 350.132084][T16277] netlink: 'syz.9.2864': attribute type 1 has an invalid length. [ 350.144683][T16284] netlink: 348 bytes leftover after parsing attributes in process `syz.8.2866'. [ 350.156599][T16279] netlink: 'syz.9.2864': attribute type 1 has an invalid length. [ 350.323220][T16279] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.666694][T16300] netlink: 'syz.9.2869': attribute type 1 has an invalid length. [ 350.760905][T16231] chnl_net:caif_netlink_parms(): no params data found [ 350.822648][T16307] sit1: entered promiscuous mode [ 350.827874][T16307] sit1: entered allmulticast mode [ 351.058070][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2872'. [ 351.190647][T16326] veth0: left allmulticast mode [ 351.204243][T16326] veth0: left promiscuous mode [ 351.243419][T16326] bridge0: port 2(veth0) entered disabled state [ 351.254868][ T51] Bluetooth: hci2: command tx timeout [ 351.278089][T16326] bridge_slave_0: left allmulticast mode [ 351.283925][T16326] bridge_slave_0: left promiscuous mode [ 351.290632][T16326] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.366868][T16337] netlink: 'syz.0.2875': attribute type 12 has an invalid length. [ 351.376212][T16337] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2875'. [ 351.393723][T16231] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.401255][T16231] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.408986][T16231] bridge_slave_0: entered allmulticast mode [ 351.422721][T16231] bridge_slave_0: entered promiscuous mode [ 351.431907][T16231] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.441130][T16231] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.448829][T16231] bridge_slave_1: entered allmulticast mode [ 351.457041][T16231] bridge_slave_1: entered promiscuous mode [ 351.580755][T16231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.616472][T16231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.676350][T16356] openvswitch: netlink: Flow actions attr not present in new flow. [ 351.718373][T16231] team0: Port device team_slave_0 added [ 351.728451][T16231] team0: Port device team_slave_1 added [ 351.832760][T16231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.840301][T16231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.867529][T16231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.889144][T16231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.904538][T16231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.932949][T16231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.951216][T16367] netlink: 'syz.8.2884': attribute type 1 has an invalid length. [ 351.959903][T16367] netlink: 'syz.8.2884': attribute type 1 has an invalid length. [ 352.001306][T16369] netlink: 'syz.9.2883': attribute type 21 has an invalid length. [ 352.064396][T16231] hsr_slave_0: entered promiscuous mode [ 352.071109][T16231] hsr_slave_1: entered promiscuous mode [ 352.078231][T16231] debugfs: 'hsr0' already exists in 'hsr' [ 352.084461][T16231] Cannot create hsr debugfs directory [ 352.110770][T16375] netlink: 'syz.0.2885': attribute type 1 has an invalid length. [ 352.176078][T16375] bond1: entered promiscuous mode [ 352.182902][T16375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.400316][T16231] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.509888][T16231] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.581246][ T7636] IPVS: starting estimator thread 0... [ 352.597729][T16231] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.694372][T16398] IPVS: using max 30 ests per chain, 72000 per kthread [ 352.715088][T16231] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.975334][T16415] tipc: Enabling of bearer rejected, already enabled [ 353.018652][T16415] netlink: 'syz.8.2897': attribute type 10 has an invalid length. [ 353.067224][T16231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 353.090429][T16231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.156934][T16231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 353.191649][T16231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.337424][ T51] Bluetooth: hci2: command tx timeout [ 353.583595][T16231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.633084][T16231] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.719586][T16448] bond9: Removing last ns target with arp_interval on [ 353.728570][T16170] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.735774][T16170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.847915][T16170] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.855253][T16170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.050114][T16473] __nla_validate_parse: 7 callbacks suppressed [ 354.050134][T16473] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2914'. [ 354.069322][T16476] netlink: 'syz.8.2913': attribute type 2 has an invalid length. [ 354.165461][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2916'. [ 354.231771][T16482] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.343222][T16484] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.351942][T16484] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 354.366698][T16484] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 354.426417][T16231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.521873][T16231] veth0_vlan: entered promiscuous mode [ 354.562010][T16231] veth1_vlan: entered promiscuous mode [ 354.678430][T16231] veth0_macvtap: entered promiscuous mode [ 354.717185][T16231] veth1_macvtap: entered promiscuous mode [ 354.759694][T16231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.839864][T16231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.871670][ T7959] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.889416][ T7959] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.926432][ T7959] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.979138][ T7959] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.336938][T16157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.368799][T16157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.415140][ T51] Bluetooth: hci2: command tx timeout [ 355.433011][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.502456][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.051335][T16566] syzkaller1: entered promiscuous mode [ 356.059194][T16566] syzkaller1: entered allmulticast mode [ 356.393169][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2940'. [ 356.453094][T16574] validate_nla: 1 callbacks suppressed [ 356.453115][T16574] netlink: 'syz.8.2940': attribute type 6 has an invalid length. [ 356.497065][T16574] netlink: 'syz.8.2940': attribute type 1 has an invalid length. [ 356.529299][T16574] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.2940'. [ 356.541781][T16577] netlink: 'syz.9.2942': attribute type 26 has an invalid length. [ 356.691478][T16582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2943'. [ 356.771837][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2946'. [ 356.797182][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2946'. [ 356.948409][T16597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.039601][T16597] netlink: 'syz.2.2948': attribute type 1 has an invalid length. [ 357.114672][T16605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2951'. [ 357.141953][T16610] netlink: 'syz.8.2953': attribute type 6 has an invalid length. [ 357.165594][T16610] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2953'. [ 357.322149][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2956'. [ 357.495113][ T51] Bluetooth: hci2: command tx timeout [ 357.863250][T16654] netlink: 'syz.7.2968': attribute type 1 has an invalid length. [ 358.030875][T16654] 8021q: adding VLAN 0 to HW filter on device bond11 [ 358.111920][T16655] bond11: (slave geneve3): making interface the new active one [ 358.127264][T16655] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 358.219028][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.446486][T16676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.536593][T16676] netlink: 'syz.7.2974': attribute type 1 has an invalid length. [ 358.661323][T16684] unsupported nlmsg_type 40 [ 358.949481][T16698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.959066][T16698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.978107][T16698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.994425][T16698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.296055][T16712] syzkaller0: entered promiscuous mode [ 359.301687][T16712] syzkaller0: entered allmulticast mode [ 359.318501][T16713] bond_slave_0: mtu less than device minimum [ 359.326099][T16720] bond_slave_0: mtu less than device minimum [ 359.333272][T16712] __nla_validate_parse: 8 callbacks suppressed [ 359.333287][T16712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2985'. [ 359.603730][T16727] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 359.619309][T16727] bond12 (unregistering): Released all slaves [ 359.651490][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2989'. [ 359.663699][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2989'. [ 360.004659][T16749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.077389][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2999'. [ 360.121091][T16749] netlink: 'syz.0.2996': attribute type 1 has an invalid length. [ 360.163172][T16765] netlink: 'syz.2.3000': attribute type 10 has an invalid length. [ 360.187199][T16765] openvswitch: netlink: Flow key attr not present in new flow. [ 360.312970][T16778] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 360.341821][T16778] tipc: Enabled bearer , priority 10 [ 360.372595][T16779] tipc: Enabling of bearer rejected, already enabled [ 360.427691][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3005'. [ 360.452797][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3005'. [ 360.496007][T16784] netlink: 'syz.8.3005': attribute type 14 has an invalid length. [ 360.725896][T16802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.870815][T16808] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 360.887112][T16808] bond2 (unregistering): Released all slaves [ 361.466480][T16846] validate_nla: 1 callbacks suppressed [ 361.466501][T16846] netlink: 'syz.7.3018': attribute type 4 has an invalid length. [ 361.629839][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3019'. [ 361.701201][T16853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.714931][T16851] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3019'. [ 361.795475][T16853] netlink: 'syz.9.3020': attribute type 1 has an invalid length. [ 361.836909][T16862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3023'. [ 361.850177][T16862] netlink: 'syz.7.3023': attribute type 12 has an invalid length. [ 361.979993][T16866] netlink: 'syz.7.3024': attribute type 11 has an invalid length. [ 361.990932][T16866] netlink: 'syz.7.3024': attribute type 11 has an invalid length. [ 361.999250][T16866] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3024'. [ 362.092281][T16873] bond0: entered promiscuous mode [ 362.098807][T16873] bond_slave_0: entered promiscuous mode [ 362.108246][T16873] bond0: left promiscuous mode [ 362.113170][T16873] bond_slave_0: left promiscuous mode [ 362.493061][T16898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.972593][T16927] bond0: Error: Cannot enslave bond to itself. [ 363.000176][T16928] bond0: Error: Cannot enslave bond to itself. [ 363.039371][T16936] netlink: 'syz.9.3043': attribute type 83 has an invalid length. [ 363.069153][T16927] syzkaller1: entered promiscuous mode [ 363.075049][T16927] syzkaller1: entered allmulticast mode [ 363.390981][T16945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.485588][T16951] tipc: Enabling of bearer rejected, already enabled [ 363.823716][T16980] veth1_macvtap: left promiscuous mode [ 363.830075][T16980] macsec0: entered promiscuous mode [ 363.860368][T16976] syzkaller0: entered promiscuous mode [ 363.867199][T16976] syzkaller0: entered allmulticast mode [ 364.418625][T16990] __nla_validate_parse: 7 callbacks suppressed [ 364.418645][T16990] netlink: 512 bytes leftover after parsing attributes in process `syz.8.3059'. [ 364.446400][T16993] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3058'. [ 364.481127][T16995] bond7 (unregistering): Released all slaves [ 364.508420][T16994] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3060'. [ 364.971293][T17026] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3069'. [ 365.005858][T17026] netlink: zone id is out of range [ 365.018575][T17026] netlink: get zone limit has 8 unknown bytes [ 365.037377][T17035] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3069'. [ 365.065821][T17035] netlink: zone id is out of range [ 365.069412][T17033] netlink: 'syz.8.3073': attribute type 10 has an invalid length. [ 365.070998][T17035] netlink: get zone limit has 8 unknown bytes [ 365.079112][T17033] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 365.115617][T17033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.205328][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3075'. [ 365.249979][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3075'. [ 365.559120][T17063] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3082'. [ 365.640639][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3083'. [ 365.650985][T17066] bridge_slave_1: left allmulticast mode [ 365.667207][T17066] bridge_slave_1: left promiscuous mode [ 365.677555][T17066] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.703466][T17068] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3084'. [ 365.726279][T17066] bridge_slave_0: left allmulticast mode [ 365.731955][T17066] bridge_slave_0: left promiscuous mode [ 365.756242][T17071] openvswitch: netlink: Message has 5380 unknown bytes. [ 365.757302][T17066] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.763763][T17071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.846486][T17075] netlink: 'syz.8.3086': attribute type 4 has an invalid length. [ 365.857839][T17074] netlink: 'syz.8.3086': attribute type 4 has an invalid length. [ 366.161482][T17089] netlink: 'syz.2.3089': attribute type 83 has an invalid length. [ 366.427944][T17105] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 367.335788][T17134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.349282][T17134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.360160][T17134] bond0 (unregistering): Released all slaves [ 367.488350][T17162] netlink: 'syz.7.3109': attribute type 11 has an invalid length. [ 367.788821][T17175] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.157625][T17204] netlink: 'syz.0.3122': attribute type 4 has an invalid length. [ 368.203281][T17204] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 368.300807][T17208] tipc: Enabled bearer , priority 0 [ 368.348117][T17214] bond0: entered promiscuous mode [ 368.391644][T17214] bond_slave_0: entered promiscuous mode [ 368.413487][T17214] bond_slave_1: entered promiscuous mode [ 368.439179][T17214] bridge_slave_1: entered promiscuous mode [ 368.478988][T17214] bond0: entered allmulticast mode [ 368.482620][T17221] netlink: 'syz.0.3129': attribute type 1 has an invalid length. [ 368.485355][T17214] bond_slave_0: entered allmulticast mode [ 368.498413][T17214] bond_slave_1: entered allmulticast mode [ 368.504592][T17214] bridge_slave_1: entered allmulticast mode [ 368.512217][T17224] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 368.570536][T17221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.633532][T17222] bond0: (slave geneve2): making interface the new active one [ 368.663712][T17222] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 368.682026][T17225] gtp2: entered promiscuous mode [ 368.687424][T17225] gtp2: entered allmulticast mode [ 368.722604][T17214] tipc: Resetting bearer [ 368.843010][T17207] tipc: Disabling bearer [ 369.696278][T17279] syzkaller1: entered promiscuous mode [ 369.701809][T17279] syzkaller1: entered allmulticast mode [ 369.783471][T17284] __nla_validate_parse: 12 callbacks suppressed [ 369.783491][T17284] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3150'. [ 369.963997][T17297] netlink: 'syz.8.3155': attribute type 4 has an invalid length. [ 369.979202][T17297] netlink: 17 bytes leftover after parsing attributes in process `syz.8.3155'. [ 370.076493][T17300] nbd: nbd7 already in use [ 370.297373][T17311] netlink: 'syz.8.3159': attribute type 11 has an invalid length. [ 371.115870][T17345] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 371.148442][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3172'. [ 371.164171][T17345] netlink: 'syz.9.3171': attribute type 21 has an invalid length. [ 371.195877][T17345] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3171'. [ 371.220033][T17345] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3171'. [ 371.247201][T17345] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3171'. [ 371.298020][T17358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.469238][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3177'. [ 371.682695][T17381] syzkaller1: entered promiscuous mode [ 371.689700][T17381] syzkaller1: entered allmulticast mode [ 371.852973][T17390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3185'. [ 371.888492][T17390] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3185'. [ 372.472539][T17403] bridge_slave_0: entered promiscuous mode [ 372.484897][T17406] syzkaller1: entered promiscuous mode [ 372.490393][T17406] syzkaller1: entered allmulticast mode [ 372.511960][T17406] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3192'. [ 372.561628][T17407] netlink: 'syz.8.3191': attribute type 10 has an invalid length. [ 373.193632][T17444] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20002 [ 373.205744][T17447] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20002 [ 373.345444][T17454] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 373.557360][T17467] netlink: 'syz.7.3209': attribute type 1 has an invalid length. [ 373.676655][T17467] 8021q: adding VLAN 0 to HW filter on device bond12 [ 373.740837][T17468] bond12: (slave gretap2): making interface the new active one [ 373.757890][T17468] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 374.081083][T17501] veth0: entered promiscuous mode [ 374.111145][T17501] veth0 (unregistering): left promiscuous mode [ 374.332305][T17517] block nbd2: Unsupported socket: should be TCP or UNIX. [ 374.402347][T17519] netlink: 'syz.8.3224': attribute type 10 has an invalid length. [ 374.486947][T17527] netlink: 'syz.8.3225': attribute type 4 has an invalid length. [ 374.548986][T17529] netlink: 'syz.7.3226': attribute type 7 has an invalid length. [ 374.556991][T17529] netlink: 'syz.7.3226': attribute type 8 has an invalid length. [ 374.572885][T17529] netlink: 'syz.7.3226': attribute type 2 has an invalid length. [ 374.803536][T17541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.818819][T17543] nbd: must specify an index to disconnect [ 374.897821][T17541] netlink: 'syz.9.3230': attribute type 1 has an invalid length. [ 374.928615][T17547] __nla_validate_parse: 8 callbacks suppressed [ 374.928635][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3233'. [ 375.075202][T17556] erspan0: entered promiscuous mode [ 375.354175][T17564] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 375.368367][T17564] bond1: option packets_per_slave: allowed values 0 - 65535 [ 375.381151][T17564] bond1 (unregistering): Released all slaves [ 375.601945][T17580] nbd: must specify a size in bytes for the device [ 376.078776][T17605] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 376.108304][T17605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.154632][T17605] bond1: (slave ip6erspan0): making interface the new active one [ 376.163616][T17605] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 376.308321][T17610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.382723][T17610] netlink: 'syz.9.3255': attribute type 1 has an invalid length. [ 376.719667][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3260'. [ 377.047034][T17638] nbd: couldn't find device at index 7 [ 377.058969][T17639] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3263'. [ 377.295875][T17648] veth1_macvtap: left promiscuous mode [ 377.301908][T17648] macsec0: entered promiscuous mode [ 377.423600][T17651] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3268'. [ 377.682944][T17661] netlink: 'syz.8.3273': attribute type 1 has an invalid length. [ 377.765367][T17661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 377.829704][T17674] bond4: (slave geneve2): making interface the new active one [ 377.840609][T17674] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 377.881829][ T7958] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.907119][ T7958] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.940320][ T7958] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.975674][ T7958] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.059728][T17686] veth0: entered promiscuous mode [ 378.072902][T17686] veth0: left promiscuous mode [ 378.312907][T17701] netlink: 252 bytes leftover after parsing attributes in process `syz.8.3283'. [ 378.708810][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.728425][T17722] netlink: 'syz.7.3289': attribute type 1 has an invalid length. [ 378.770121][T17722] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3289'. [ 378.954262][T17734] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 378.957755][T17728] netlink: 'syz.7.3293': attribute type 1 has an invalid length. [ 378.961549][T17734] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 378.989437][T17734] tipc: Resetting bearer [ 379.072022][T17734] tipc: Resetting bearer [ 379.098023][T17734] netlink: 'syz.8.3294': attribute type 1 has an invalid length. [ 379.510396][T17760] tc_dump_action: action bad kind [ 381.976138][T17794] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3312'. [ 381.997850][T17793] netlink: 'syz.7.3313': attribute type 1 has an invalid length. [ 382.266752][T17808] tipc: Resetting bearer [ 382.276088][T17812] netlink: 'syz.8.3314': attribute type 16 has an invalid length. [ 382.287045][T17812] netlink: 'syz.8.3314': attribute type 17 has an invalid length. [ 382.296423][T17793] netlink: 'syz.7.3313': attribute type 10 has an invalid length. [ 382.307205][T17812] netlink: 'syz.8.3314': attribute type 27 has an invalid length. [ 382.339095][T17793] team0: Port device dummy0 added [ 382.745154][T17828] tipc: Enabling of bearer rejected, failed to enable media [ 382.791220][T17828] syzkaller0: entered promiscuous mode [ 382.798525][T17828] syzkaller0: entered allmulticast mode [ 382.944341][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3321'. [ 382.963694][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3321'. [ 382.978442][T17840] netlink: 'syz.8.3322': attribute type 1 has an invalid length. [ 383.076661][T17846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3323'. [ 383.117580][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3321'. [ 383.128857][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3321'. [ 383.146654][T17840] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 383.318165][T17855] tipc: Started in network mode [ 383.363805][T17855] tipc: Node identity 0efbaa82af8f, cluster identity 1 [ 383.378216][T17855] tipc: Enabled bearer , priority 0 [ 383.392022][T17851] syzkaller0: entered promiscuous mode [ 383.414473][T17851] syzkaller0: entered allmulticast mode [ 383.438086][T17851] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 383.496826][T17864] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3327'. [ 383.521106][T17864] netlink: 'syz.7.3327': attribute type 7 has an invalid length. [ 383.533021][T17851] tipc: Resetting bearer [ 383.548204][T17864] netlink: 'syz.7.3327': attribute type 8 has an invalid length. [ 383.557333][T17849] tipc: Resetting bearer [ 383.574969][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3327'. [ 383.575136][T17869] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 383.599714][T17868] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 383.606826][T17869] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3327'. [ 383.647053][T17849] tipc: Disabling bearer [ 383.688052][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3330'. [ 384.881384][T17930] netlink: 'syz.7.3348': attribute type 1 has an invalid length. [ 385.010037][T17939] netlink: 'syz.2.3351': attribute type 1 has an invalid length. [ 385.074107][ T5852] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 385.086495][ T5852] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 385.098731][ T5852] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 385.110346][ T5852] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 385.119609][ T5852] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 385.143895][T17945] netlink: 'syz.7.3352': attribute type 1 has an invalid length. [ 385.186580][T17939] bond2 (unregistering): Released all slaves [ 386.949725][T17941] chnl_net:caif_netlink_parms(): no params data found [ 387.175116][ T51] Bluetooth: hci9: command tx timeout [ 387.285286][T18042] __nla_validate_parse: 8 callbacks suppressed [ 387.285306][T18042] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3376'. [ 387.367222][T18050] ip6erspan0: entered promiscuous mode [ 387.373265][T18050] ip6erspan0: entered allmulticast mode [ 387.398685][T17941] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.427617][T17941] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.435565][T17941] bridge_slave_0: entered allmulticast mode [ 387.443756][T17941] bridge_slave_0: entered promiscuous mode [ 387.456873][T17941] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.464356][T17941] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.472617][T17941] bridge_slave_1: entered allmulticast mode [ 387.485950][T17941] bridge_slave_1: entered promiscuous mode [ 387.637356][T17941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.757749][T17941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.918874][T17941] team0: Port device team_slave_0 added [ 387.938103][T17941] team0: Port device team_slave_1 added [ 388.067212][T18072] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3385'. [ 388.077176][T17941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.085058][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.145099][T17941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.205991][T17941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.221085][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.264506][T17941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.442074][T17941] hsr_slave_0: entered promiscuous mode [ 388.462250][T17941] hsr_slave_1: entered promiscuous mode [ 388.481807][T17941] debugfs: 'hsr0' already exists in 'hsr' [ 388.498401][T17941] Cannot create hsr debugfs directory [ 388.611833][T18085] netlink: 'syz.8.3389': attribute type 1 has an invalid length. [ 388.620161][T18085] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3389'. [ 388.754936][T18090] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3390'. [ 388.786730][T18090] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3390'. [ 389.277111][ T51] Bluetooth: hci9: command tx timeout [ 390.016795][T18122] tipc: Enabling of bearer rejected, already enabled [ 390.043890][T18122] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 390.068553][T18122] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 390.100421][T18122] tipc: Resetting bearer [ 390.219669][T18130] netlink: 'syz.8.3402': attribute type 3 has an invalid length. [ 390.588726][T17941] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 390.610486][T17941] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 390.746506][T18144] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 390.836891][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3408'. [ 390.925027][T18144] can: request_module (can-proto-3) failed. [ 391.137168][T18139] team0 (unregistering): Port device team_slave_0 removed [ 391.167243][T18139] team0 (unregistering): Port device team_slave_1 removed [ 391.191061][T18139] team0 (unregistering): Port device dummy0 removed [ 391.216888][T17941] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 391.313734][T17941] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 391.337977][ T51] Bluetooth: hci9: command tx timeout [ 391.796614][T17941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.900877][T17941] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.938069][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.946173][ T7958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.992603][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3414'. [ 392.028734][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.036464][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.050713][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3414'. [ 392.391556][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3417'. [ 392.439817][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3417'. [ 392.477475][T18194] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3417'. [ 392.509951][T18202] netlink: 'syz.7.3417': attribute type 1 has an invalid length. [ 392.543090][T18011] Set syz1 is full, maxelem 65536 reached [ 392.661029][T17941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.752349][T18218] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3421'. [ 392.784849][ T51] Bluetooth: hci0: command tx timeout [ 393.203138][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3425'. [ 393.242749][T18238] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3426'. [ 393.264476][T18238] netlink: 'syz.8.3426': attribute type 7 has an invalid length. [ 393.276601][T18233] vlan2: entered promiscuous mode [ 393.281688][T18233] bond0: entered promiscuous mode [ 393.287547][T18238] netlink: 'syz.8.3426': attribute type 8 has an invalid length. [ 393.300089][T18233] bond_slave_0: entered promiscuous mode [ 393.308483][T18233] bond_slave_1: entered promiscuous mode [ 393.314852][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3426'. [ 393.414697][ T5852] Bluetooth: hci9: command tx timeout [ 393.505851][T18245] vlan2: entered allmulticast mode [ 393.576809][T18250] dvmrp0: entered allmulticast mode [ 393.727442][T17941] veth0_vlan: entered promiscuous mode [ 393.773174][T17941] veth1_vlan: entered promiscuous mode [ 393.929486][T17941] veth0_macvtap: entered promiscuous mode [ 393.988368][T17941] veth1_macvtap: entered promiscuous mode [ 394.081230][T17941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.162115][T17941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.244876][T16170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.277257][T16170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.331436][T16170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.354713][T16170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.540625][T18296] wg1: entered promiscuous mode [ 394.553962][T18296] wg1: entered allmulticast mode [ 394.626656][T18300] gtp2: entered promiscuous mode [ 394.631827][T18300] gtp2: entered allmulticast mode [ 394.644205][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.672106][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.700812][T18304] netlink: 'syz.2.3443': attribute type 1 has an invalid length. [ 394.858856][T18308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.868354][T18308] bond2: (slave bond3): making interface the new active one [ 394.877931][T18308] bond2: (slave bond3): Enslaving as an active interface with an up link [ 397.285045][T16170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.349777][T16170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.368196][T18319] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3444'. [ 397.386875][T18319] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3444'. [ 397.413861][T18319] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3444'. [ 398.336234][T18376] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3459'. [ 399.015406][T18389] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3465'. [ 399.443174][T18412] tls_set_device_offload: netdev not found [ 399.584395][T18419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3470'. [ 399.709836][T18421] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3476'. [ 399.730785][T18421] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3476'. [ 399.812613][T18432] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3478'. [ 399.951647][T18441] netlink: 'syz.7.3482': attribute type 1 has an invalid length. [ 400.034008][T18449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.074912][T18441] bond14: (slave bridge12): making interface the new active one [ 400.088280][T18441] bond14: (slave bridge12): Enslaving as an active interface with an up link [ 400.297441][T18464] netlink: 'syz.2.3486': attribute type 2 has an invalid length. [ 400.307769][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3485'. [ 400.352735][T18465] macvtap1: entered promiscuous mode [ 400.362200][T18465] vlan0: entered promiscuous mode [ 400.368620][T18465] macvtap1: entered allmulticast mode [ 400.376724][T18465] vlan0: entered allmulticast mode [ 400.383364][T18465] veth0_vlan: entered allmulticast mode [ 400.406685][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3485'. [ 401.109906][T18505] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3498'. [ 401.412025][T18522] xt_l2tp: invalid flags combination: 8 [ 401.511338][T18527] netlink: 'syz.8.3505': attribute type 13 has an invalid length. [ 401.534381][T18527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.576895][T18528] netlink: 'syz.7.3506': attribute type 2 has an invalid length. [ 401.610483][T18531] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 402.274646][T18572] mac80211_hwsim hwsim28 syzkaller0: Caught tx_queue_len zero misconfig [ 402.430091][T18580] IPVS: Unknown mcast interface: vcan0 [ 402.450719][T18580] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 402.614012][T18585] __nla_validate_parse: 6 callbacks suppressed [ 402.631296][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3524'. [ 402.670112][T18589] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3524'. [ 403.245562][T18612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3534'. [ 404.176679][T18647] netlink: 'syz.8.3545': attribute type 39 has an invalid length. [ 404.216563][T18649] : renamed from hsr0 [ 404.355090][T18655] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3547'. [ 404.469744][T18661] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3549'. [ 404.480992][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3549'. [ 404.531075][T18663] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3550'. [ 405.504233][T18693] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3560'. [ 405.972372][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3562'. [ 406.217780][ T31] INFO: task syz.6.1629:12057 blocked for more than 143 seconds. [ 406.226646][ T31] Not tainted syzkaller #0 [ 406.231809][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 406.241920][ T31] task:syz.6.1629 state:D stack:27368 pid:12057 tgid:12053 ppid:10742 task_flags:0x400140 flags:0x00080002 [ 406.255238][ T31] Call Trace: [ 406.258560][ T31] [ 406.261507][ T31] __schedule+0x1798/0x4cc0 [ 406.266461][ T31] ? __lock_acquire+0xab9/0xd20 [ 406.271861][ T31] ? __lock_acquire+0xab9/0xd20 [ 406.277280][ T31] ? __pfx___schedule+0x10/0x10 [ 406.282642][ T31] ? schedule+0x91/0x360 [ 406.287393][ T31] schedule+0x165/0x360 [ 406.291616][ T31] schedule_preempt_disabled+0x13/0x30 [ 406.297687][ T31] __mutex_lock+0x7e6/0x1350 [ 406.302324][ T31] ? __mutex_lock+0x5bb/0x1350 [ 406.308176][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 406.315628][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 406.321400][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 406.330072][ T31] ? __nlmsg_put+0xef/0x1b0 [ 406.336547][ T31] ? genlmsg_put+0x137/0x2e0 [ 406.341423][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 406.354841][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 406.361130][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 406.369379][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 406.376756][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 406.384529][ T31] genl_rcv_msg+0x60e/0x790 [ 406.389480][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.395458][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 406.401916][ T31] ? __asan_memcpy+0x40/0x70 [ 406.406703][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 406.412761][ T31] netlink_rcv_skb+0x205/0x470 [ 406.418302][ T31] ? __lock_acquire+0xab9/0xd20 [ 406.423468][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.428717][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.434221][ T31] ? down_read+0x1ad/0x2e0 [ 406.438861][ T31] genl_rcv+0x28/0x40 [ 406.442914][ T31] netlink_unicast+0x82c/0x9e0 [ 406.448057][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 406.453646][ T31] ? netlink_sendmsg+0x642/0xb30 [ 406.459523][ T31] ? skb_put+0x11b/0x210 [ 406.464356][ T31] netlink_sendmsg+0x805/0xb30 [ 406.469189][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.474692][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 406.479863][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.486305][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.492283][ T31] __sock_sendmsg+0x219/0x270 [ 406.497485][ T31] ____sys_sendmsg+0x505/0x830 [ 406.502445][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.508234][ T31] ? import_iovec+0x74/0xa0 [ 406.512860][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 406.518983][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.524881][ T31] ? __fget_files+0x2a/0x420 [ 406.529538][ T31] ? __fget_files+0x3a0/0x420 [ 406.535045][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 406.540035][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.546039][ T31] ? rcu_is_watching+0x15/0xb0 [ 406.550938][ T31] ? do_syscall_64+0xbe/0x3b0 [ 406.555875][ T31] do_syscall_64+0xfa/0x3b0 [ 406.560591][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.565950][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.572128][ T31] ? clear_bhb_loop+0x60/0xb0 [ 406.577242][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.583251][ T31] RIP: 0033:0x7f476eb8eec9 [ 406.587946][ T31] RSP: 002b:00007f476f959038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.596907][ T31] RAX: ffffffffffffffda RBX: 00007f476ede6090 RCX: 00007f476eb8eec9 [ 406.606858][ T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000006 [ 406.615634][ T31] RBP: 00007f476ec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 406.625592][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.633752][ T31] R13: 00007f476ede6128 R14: 00007f476ede6090 R15: 00007ffc70aedd18 [ 406.642195][ T31] [ 406.646180][ T31] [ 406.646180][ T31] Showing all locks held in the system: [ 406.655137][ T31] 1 lock held by khungtaskd/31: [ 406.665710][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 406.682254][ T31] 3 locks held by kworker/u8:4/59: [ 406.687587][ T31] #0: ffff88801a089948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 406.700653][ T31] #1: ffffc9000210fbc0 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 406.712725][ T31] #2: ffffffff8dd401c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 406.725571][ T31] 3 locks held by kworker/u8:7/1156: [ 406.731077][ T31] #0: ffff88801a089948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 406.744188][ T31] #1: ffffc9000418fbc0 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 406.757000][ T31] #2: ffffffff8dd401c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 406.767508][ T31] 2 locks held by getty/5598: [ 406.772291][ T31] #0: ffff888032f550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 406.782236][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 406.792983][ T31] 2 locks held by syz.2.289/6993: [ 406.798136][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.806479][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 406.819364][ T31] 2 locks held by syz.6.1629/12057: [ 406.825739][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.834493][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 406.845477][ T31] 2 locks held by syz.3.1809/12607: [ 406.850683][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.860035][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 406.870743][ T31] 2 locks held by syz.1.2636/15449: [ 406.879277][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.889126][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 406.900436][ T31] 2 locks held by syz.0.3137/17247: [ 406.906187][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.914946][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 406.927420][ T31] 2 locks held by syz.9.3456/18367: [ 406.933144][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.943427][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 406.955169][ T31] 2 locks held by syz.4.3490/18476: [ 406.960560][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.970916][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 406.981307][ T31] [ 406.983651][ T31] ============================================= [ 406.983651][ T31] [ 406.993578][ T31] NMI backtrace for cpu 0 [ 406.993604][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 406.993622][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 406.993633][ T31] Call Trace: [ 406.993641][ T31] [ 406.993650][ T31] dump_stack_lvl+0x189/0x250 [ 406.993682][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.993707][ T31] ? __pfx__printk+0x10/0x10 [ 406.993756][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 406.993786][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 406.993812][ T31] ? __pfx__printk+0x10/0x10 [ 406.993841][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 406.993861][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 406.993891][ T31] watchdog+0xf93/0xfe0 [ 406.993916][ T31] ? watchdog+0x1de/0xfe0 [ 406.993941][ T31] kthread+0x711/0x8a0 [ 406.993969][ T31] ? __pfx_watchdog+0x10/0x10 [ 406.993986][ T31] ? __pfx_kthread+0x10/0x10 [ 406.994017][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.994040][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.994065][ T31] ? __pfx_kthread+0x10/0x10 [ 406.994089][ T31] ret_from_fork+0x436/0x7d0 [ 406.994110][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 406.994137][ T31] ? __switch_to_asm+0x39/0x70 [ 406.994158][ T31] ? __switch_to_asm+0x33/0x70 [ 406.994182][ T31] ? __pfx_kthread+0x10/0x10 [ 406.994208][ T31] ret_from_fork_asm+0x1a/0x30 [ 406.994251][ T31] [ 407.135860][ T31] Sending NMI from CPU 0 to CPUs 1: [ 407.141114][ C1] NMI backtrace for cpu 1 [ 407.141133][ C1] CPU: 1 UID: 0 PID: 16157 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 407.141154][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.141167][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 407.141196][ C1] RIP: 0010:unwind_next_frame+0x387/0x2390 [ 407.141221][ C1] Code: 37 01 00 00 4c 8d 62 04 4c 8d 6a 05 4c 89 e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 6d 19 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 80 19 00 00 41 0f b6 44 24 01 83 e0 07 0f 84 75 15 00 [ 407.141237][ C1] RSP: 0018:ffffc9000be87478 EFLAGS: 00000a02 [ 407.141251][ C1] RAX: 0000000000000000 RBX: ffffffff8f6fa9cc RCX: ffffffff8f6fa9d0 [ 407.141265][ C1] RDX: ffffffff8fea157c RSI: ffffffff8fea157c RDI: ffffffff8b9ec480 [ 407.141278][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff81725d05 [ 407.141291][ C1] R10: ffffc9000be87598 R11: ffffffff81aaf070 R12: ffffffff8fea1580 [ 407.141305][ C1] R13: ffffffff8fea1581 R14: ffffc9000be87548 R15: ffffffff8f6fa9cc [ 407.141319][ C1] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 407.141333][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.141346][ C1] CR2: 0000001b33524220 CR3: 00000000755dc000 CR4: 00000000003526f0 [ 407.141362][ C1] Call Trace: [ 407.141370][ C1] [ 407.141383][ C1] ? unwind_next_frame+0xa5/0x2390 [ 407.141404][ C1] ? process_scheduled_works+0xade/0x17b0 [ 407.141426][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 407.141450][ C1] arch_stack_walk+0x11c/0x150 [ 407.141474][ C1] ? process_scheduled_works+0xade/0x17b0 [ 407.141495][ C1] stack_trace_save+0x9c/0xe0 [ 407.141516][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 407.141541][ C1] ? stack_trace_save+0x9c/0xe0 [ 407.141565][ C1] kasan_save_track+0x3e/0x80 [ 407.141584][ C1] ? kasan_save_track+0x3e/0x80 [ 407.141601][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 407.141619][ C1] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 407.141640][ C1] ? __alloc_skb+0x112/0x2d0 [ 407.141657][ C1] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 407.141679][ C1] ? process_scheduled_works+0xade/0x17b0 [ 407.141724][ C1] ? kmem_cache_alloc_node_noprof+0x2f5/0x3c0 [ 407.141747][ C1] __kasan_slab_alloc+0x6c/0x80 [ 407.141768][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 407.141796][ C1] ? __alloc_skb+0x112/0x2d0 [ 407.141815][ C1] __alloc_skb+0x112/0x2d0 [ 407.141835][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 407.141869][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 407.141887][ C1] process_scheduled_works+0xade/0x17b0 [ 407.141922][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 407.141951][ C1] worker_thread+0x8a0/0xda0 [ 407.141985][ C1] kthread+0x711/0x8a0 [ 407.142014][ C1] ? __pfx_worker_thread+0x10/0x10 [ 407.142032][ C1] ? __pfx_kthread+0x10/0x10 [ 407.142054][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 407.142080][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.142106][ C1] ? __pfx_kthread+0x10/0x10 [ 407.142129][ C1] ret_from_fork+0x436/0x7d0 [ 407.142149][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 407.142170][ C1] ? __switch_to_asm+0x39/0x70 [ 407.142194][ C1] ? __switch_to_asm+0x33/0x70 [ 407.142215][ C1] ? __pfx_kthread+0x10/0x10 [ 407.142237][ C1] ret_from_fork_asm+0x1a/0x30 [ 407.142270][ C1] [ 407.470901][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 407.477828][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 407.486948][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.497096][ T31] Call Trace: [ 407.500369][ T31] [ 407.503287][ T31] dump_stack_lvl+0x99/0x250 [ 407.507880][ T31] ? __asan_memcpy+0x40/0x70 [ 407.512472][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.517665][ T31] ? __pfx__printk+0x10/0x10 [ 407.522266][ T31] vpanic+0x281/0x750 [ 407.526245][ T31] ? __pfx_vpanic+0x10/0x10 [ 407.530747][ T31] ? preempt_schedule+0xae/0xc0 [ 407.535644][ T31] ? preempt_schedule_common+0x83/0xd0 [ 407.541119][ T31] panic+0xb9/0xc0 [ 407.544866][ T31] ? __pfx_panic+0x10/0x10 [ 407.549294][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 407.554688][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 407.560861][ T31] watchdog+0xfd2/0xfe0 [ 407.565015][ T31] ? watchdog+0x1de/0xfe0 [ 407.569340][ T31] kthread+0x711/0x8a0 [ 407.573430][ T31] ? __pfx_watchdog+0x10/0x10 [ 407.578114][ T31] ? __pfx_kthread+0x10/0x10 [ 407.582720][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 407.587937][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.593156][ T31] ? __pfx_kthread+0x10/0x10 [ 407.597771][ T31] ret_from_fork+0x436/0x7d0 [ 407.602386][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 407.607506][ T31] ? __switch_to_asm+0x39/0x70 [ 407.612279][ T31] ? __switch_to_asm+0x33/0x70 [ 407.617143][ T31] ? __pfx_kthread+0x10/0x10 [ 407.621737][ T31] ret_from_fork_asm+0x1a/0x30 [ 407.626657][ T31] [ 407.630136][ T31] Kernel Offset: disabled [ 407.634657][ T31] Rebooting in 86400 seconds..