last executing test programs: 3m36.334439643s ago: executing program 2 (id=1233): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) listen(r0, 0x4) recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000180)=""/49, 0x40}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4082, 0xff2}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f00000028c0)=""/153, 0x99}, {&(0x7f0000002980)=""/219, 0xdb}, {&(0x7f0000000540)=""/202, 0xca}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000640)=""/141, 0x8d}], 0x51, &(0x7f0000003100)=""/4096, 0x1000}, 0x4}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r2, 0x917, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}]}, 0x3c}}, 0x8800) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004009fc1f47538cc000004000000f000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7fffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcef, 0x0, 0x0, 0x0}, 0x94) socket(0x1f, 0x1, 0xfffffffd) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x44c, 0x31, 0x1, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0xfff, 0x0, 0xffc, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb1e, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400044, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5, 0x5, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44c}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x27}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c000004004580480201"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) shutdown(r1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES64=r8, @ANYRES32=r2, @ANYRESOCT=r8], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r9}, 0x10) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x44}}, 0x20008040) 3m34.294760598s ago: executing program 2 (id=1249): socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x48044}, 0x24001850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x11) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getaddr={0x14, 0x16, 0x300, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x801) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd699e00000018060ffe800000000000000000000000000039fe8000000000000000000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="61c2fffda3d4"], 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x5a, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], &(0x7f00000000c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1) 3m34.069209879s ago: executing program 2 (id=1253): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x428, 0x3f3, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x1a, [0x4, 0x9, 0x0, 0x581c, 0x5, 0x0, 0x3, 0x5, 0x3, 0x8000, 0x7, 0xffffffff, 0xc34, 0x2, 0x10, 0x2, 0xfffffff7, 0x4, 0x7fff, 0x3, 0x0, 0x6, 0x400, 0x2, 0x2, 0x8, 0xd16c, 0x5, 0x9, 0x5, 0x4, 0x9fa1, 0x2, 0x7, 0x7ff, 0x5, 0x30, 0x1, 0x6, 0x800, 0x7, 0x8ecf, 0x2, 0x100, 0x0, 0x1, 0x5, 0xffff, 0x7, 0x9, 0x7, 0x0, 0x80, 0x40, 0xe, 0x2, 0x6, 0x3, 0x4, 0x0, 0x0, 0x101, 0x4, 0x800000], [0xef94, 0x1, 0x9, 0x7ff, 0x7, 0xfff, 0x7, 0xe, 0x7, 0x8, 0x401, 0x6, 0x2, 0x1, 0x2, 0x10000, 0x8, 0x7, 0x3d3, 0xff, 0x6, 0x60, 0x80000000, 0xfffffff0, 0x9, 0x0, 0xf, 0x0, 0x8, 0x0, 0x5, 0xfffffffa, 0x4, 0x6a71, 0x6, 0x3, 0x8, 0x8, 0x1, 0x27bc3dcc, 0xff, 0x7, 0x68, 0xfffffffb, 0x4, 0x10001, 0x9, 0xffffffff, 0x6, 0xe, 0x2, 0x6, 0x797, 0x9, 0x10, 0x7, 0xffff, 0x9, 0x5, 0x9fd, 0x9, 0x1ff, 0x3, 0x7fff], [0x7fffffff, 0x72d, 0x4, 0x9, 0x8, 0x5, 0xffffffff, 0xe, 0xf7ed, 0x401, 0x81, 0x7, 0x2, 0x1, 0xf, 0x7, 0x7, 0x2, 0x0, 0x1, 0x2, 0x4, 0x10000, 0x6, 0x1ff, 0x7, 0x4, 0x3, 0x8000, 0x3, 0x0, 0x5, 0x7f, 0x6, 0x5, 0x7, 0xfffffff7, 0xe, 0xffff, 0x81, 0x8, 0xa, 0xe, 0x76b, 0x3, 0x9, 0x64356ab1, 0x9, 0x85e, 0x5, 0x4, 0xd7, 0x2, 0xc67e, 0x0, 0x40, 0x0, 0x5, 0x0, 0xfffffff8, 0x56, 0x2, 0x76, 0x4], [0x1ff, 0x0, 0x6, 0x7, 0x7, 0x1, 0x1, 0x476a, 0xf, 0x3, 0xf33, 0x18d2a00, 0x4, 0x4, 0x3, 0x5, 0x109, 0x95f, 0x0, 0x80000001, 0x6, 0x65, 0x80, 0x2, 0x5, 0x0, 0xb, 0x1, 0x4, 0x3, 0x10000, 0x97, 0x9000000, 0x2, 0x4, 0xdd, 0xffff, 0x1, 0x1ff, 0x1ff, 0x101, 0xd, 0x8, 0x9, 0x7, 0x9, 0xd, 0x3, 0xfffffffd, 0xee8, 0x1, 0x2, 0x6, 0x8, 0xffff, 0x699d8be, 0x0, 0xc, 0x3, 0x7f, 0x356d675b, 0xfffffffc, 0x0, 0x400], 0x7, ['{&+%}-\x00']}, ["", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x280008c1}, 0x8850) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ppoll(&(0x7f0000000780)=[{r0}, {r0, 0x615}, {r0, 0x8200}], 0x3, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={[0x4]}, 0x8) r1 = socket(0x1f, 0x4, 0x133) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x8, 0x0, 0x8, @mcast1, @remote, 0x40, 0x1, 0x1, 0x1}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r1) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004084) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000a40)=""/253, &(0x7f0000000b40)=0xfd) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x1}, @const={0xd, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000bc0)=""/33, 0x3f, 0x21, 0x0, 0x7, 0x10000, @value=r0}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x1, 0x0, 0x8, 0x21113, 0xffffffffffffffff, 0x6, '\x00', 0x0, r5, 0x1, 0x1, 0x4, 0x8}, 0x50) recvmmsg(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/54, 0x36}, {&(0x7f0000000dc0)=""/236, 0xec}, {&(0x7f0000000ec0)=""/238, 0xee}, {&(0x7f0000000fc0)=""/176, 0xb0}, {&(0x7f0000001080)=""/76, 0x4c}, {&(0x7f0000001100)=""/167, 0xa7}], 0x7}, 0xa}], 0x1, 0x22, &(0x7f0000001280)={0x77359400}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x80, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfff}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x20000001) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, r8, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}}, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000001580)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x5, @empty, 0x4}, @in6={0xa, 0x4e20, 0x80000000, @private1, 0x10001}], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001640)={r5, 0x8, 0x7fffffff, 0x100}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000001600)='rxrpc_conn\x00', r10, 0x0, 0x4}, 0x18) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f00000016c0)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) getpeername$l2tp6(r1, &(0x7f0000001840)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001880)=0x20) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000018c0)={0x7, 0xfb, 0xc, 0x7, 0x3, 0x2, 0xc, 0x1, 0xb, 0x3, 0x81, 0x64, 0x49, 0x7f}, 0xe) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x7, 0x0, r10, 0x3, '\x00', r2, r7, 0x5, 0x2, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001b80)={'veth1_to_team\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e80)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000001980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5a5a}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@generic={0x1, 0x1, 0x4, 0x9, 0xea2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001a80)='GPL\x00', 0x3, 0x82, &(0x7f0000001ac0)=""/130, 0x40f00, 0xc, '\x00', r13, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001c00)={0x5, 0x4, 0x7, 0x161}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001d80)=[r7, 0xffffffffffffffff, r7, r7, r10, r6, 0xffffffffffffffff, r6], &(0x7f0000001dc0)=[{0x1, 0x3, 0x3, 0x2}, {0x3, 0x5, 0x6, 0x6}, {0x5, 0x2, 0x1, 0x4}, {0x5, 0x2, 0xe, 0x9}, {0x3, 0x5, 0x3}, {0x4, 0x3, 0x3}, {0x0, 0x3, 0x7, 0x5}, {0x1, 0x5, 0x1, 0xb}, {0x5, 0x5, 0x10, 0x7}], 0x10, 0x5}, 0x94) 3m33.102252087s ago: executing program 2 (id=1270): bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x3, 0x4, 0x4, 0x10001}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x648101, 0x0) unshare(0x400) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, 0x0, 0x40}, 0x20000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) epoll_create1(0x0) (async) epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) (async) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) 3m32.87494594s ago: executing program 2 (id=1271): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r5}, &(0x7f00000009c0), &(0x7f0000000a00)='%pS \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr, 0x80, 0x0}, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r1, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close(0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x0, 0x0, 0x1, 0x1, 0x7, 0x9}, 0x20) 3m32.039479957s ago: executing program 2 (id=1278): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x80001, 0x1004, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4048000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="8708020700000000fc000000000000000000000000000001fc020000000000000000000000000001200100000000000000009ecce3717c000000000000fc0200"/77], 0x48) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 3m16.856616162s ago: executing program 32 (id=1278): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x80001, 0x1004, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4048000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="8708020700000000fc000000000000000000000000000001fc020000000000000000000000000001200100000000000000009ecce3717c000000000000fc0200"/77], 0x48) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 2m40.157270579s ago: executing program 4 (id=1851): r0 = socket(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r3, 0xd}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x0, 0x8, 0x7, 0x7f, 0xfff, 0x1, 0x2, r3}, &(0x7f0000000300)=0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000102000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r5, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2m39.876771447s ago: executing program 4 (id=1857): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x200, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x28}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800090005000000000000000000000079100000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 2m39.540531669s ago: executing program 4 (id=1859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3800004, 0x12, r1, 0xee87c000) socket$inet(0x2, 0x5, 0x2) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r1, 0x0, r0}, 0x10) 2m39.178561907s ago: executing program 4 (id=1861): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060008060000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) 2m38.918121654s ago: executing program 4 (id=1865): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000d68f32c16dc47b8733ffa1cd0000410000000e0001006e657464657673696d0000000f00026e657464657673696d3000000d0087006c325f64726f7073"], 0x4c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000200)=""/59, 0x3b}], 0x2, 0x0, 0x0, 0x4000001}, 0x40000) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000800)={0x767, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x10001, @loopback, 0x7caf9ce1}, @in6={0xa, 0x0, 0x0, @loopback, 0x5fc}], 0x38) 2m38.630579255s ago: executing program 4 (id=1869): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0xfffffc4d) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001f40)=ANY=[], 0x107e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x4, @private1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x2, 0xca}, 0x8) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf251700000004000680"], 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r7 = epoll_create1(0x0) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x18) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000080)={0xa0000001}) 2m23.523596555s ago: executing program 33 (id=1869): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0xfffffc4d) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001f40)=ANY=[], 0x107e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x4, @private1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x2, 0xca}, 0x8) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf251700000004000680"], 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r7 = epoll_create1(0x0) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x18) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000080)={0xa0000001}) 1m54.177969882s ago: executing program 6 (id=2359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x3a, 0x0, &(0x7f0000000000)) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) (async) getsockopt$inet6_mreq(r1, 0x29, 0x3a, 0x0, &(0x7f0000000000)) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) (async) 1m53.954284445s ago: executing program 6 (id=2363): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r3, 0xe31ef63cecf0e867, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_EXT_MASK={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x507f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 1m53.54903169s ago: executing program 6 (id=2369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x1}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'erspan0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f13a1f8480b0000005e140002000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4004) 1m53.246094862s ago: executing program 6 (id=2375): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x100, @empty, 0xbf}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x28) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r2, &(0x7f0000000180)=0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x2d, 'hugetlb'}, {0x2b, 'memory'}, {0x2d, 'cpu'}, {0x6, 'net'}]}, 0x1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x2d, 'hugetlb'}, {0x2b, 'memory'}, {0x2d, 'cpu'}, {0x6, 'net'}]}, 0x1b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x50010000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r5, 0x203, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x58}}}}, [@NL80211_ATTR_IE={0x45, 0x2a, [@ibss={0x6, 0x2, 0x40}, @ibss={0x6, 0x2, 0x400}, @sec_chan_ofs={0x3e, 0x1}, @rann={0x7e, 0x15, {{0x1, 0x5c}, 0x8, 0x7, @device_b, 0x9}}, @challenge={0x10, 0x1, 0x42}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x1, 0x1, @device_a, 0x9, 0x4, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xac, 0x19}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x80}]}, 0x70}, 0x1, 0x0, 0x0, 0x408c}, 0x8000) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x50010000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r5, 0x203, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x58}}}}, [@NL80211_ATTR_IE={0x45, 0x2a, [@ibss={0x6, 0x2, 0x40}, @ibss={0x6, 0x2, 0x400}, @sec_chan_ofs={0x3e, 0x1}, @rann={0x7e, 0x15, {{0x1, 0x5c}, 0x8, 0x7, @device_b, 0x9}}, @challenge={0x10, 0x1, 0x42}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x1, 0x1, @device_a, 0x9, 0x4, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xac, 0x19}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x80}]}, 0x70}, 0x1, 0x0, 0x0, 0x408c}, 0x8000) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000003c0)=0x8, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000003c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r5, 0x4, 0x5, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xc3}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x12}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40181}, 0x8000) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r5, 0x4, 0x5, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xc3}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x12}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40181}, 0x8000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r5, 0x6, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xa, 0x80}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r4) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe8, r7, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4d61}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4102}, 0x40800) (async) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe8, r7, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4d61}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4102}, 0x40800) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) r8 = accept(r0, &(0x7f00000008c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000940)=0x80) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r3) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r3) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a00)={0x0, @rand_addr, @broadcast}, &(0x7f0000000a40)=0xc) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x88, r9, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xdf21}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0xc0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000c00)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x9, 0x4, 0x2, 0x5, 0x0, 0xe}, {0x8, 0xa, 0x3, 0x2, 0x101, 0x7}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000c00)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x9, 0x4, 0x2, 0x5, 0x0, 0xe}, {0x8, 0xa, 0x3, 0x2, 0x101, 0x7}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) accept4$inet6(r1, &(0x7f0000000ec0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000f00)=0x1c, 0x800) (async) r11 = accept4$inet6(r1, &(0x7f0000000ec0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000f00)=0x1c, 0x800) r12 = gettid() ioctl$sock_FIOSETOWN(r11, 0x8901, &(0x7f0000000f40)=r12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r3}, &(0x7f0000000f80), &(0x7f0000000fc0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r3}, &(0x7f0000000f80), &(0x7f0000000fc0)=r0}, 0x20) 1m53.043262163s ago: executing program 6 (id=2379): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000300)={@multicast1, @local, 0x1}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) 1m52.856829183s ago: executing program 6 (id=2384): r0 = socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYRES32=r1, @ANYRES32=r3], 0x270}}, 0x4090) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0200000156a4536f5f1d54e9c23334a898539b0ce77ce7927b00b0a5fa771d9c44ea13499cd90edfcecf0d1a03b99fd36534840c76f1d27fc1d609c3c38264bac28b675b8d36939b0cedf0b6caa9ee502da4ceeb12b63eaa218a9f653a0549c7aade7ac8afdf7cdbb060e06b02e94aa49e34ea672ef91a2d57950407e5764d91b470b605423242c7a3fe4ea9839d83a1f55bfa5e6e13e63f88cf668af7be3503e561275ba7bf72055f1e760d5af8a1adaaf754626e51de3e7e0f88f4bbd615e52a5f205d9ede6a929cba726b2e10f0cd5b0560852be44e5537d709ed5c24d96dc8d097307261b76d7e642ff67fd3965f2e0dba45c39aa86a7967c72970435bb64460cc7262b4af86edddd9a1c228a8be1d1c7f0b94a5e0acc716f6408e821bc90b661fcfae5bb5fe150c78c2099416ef9162ef3db6e01bac81dbd8f363ff7f04c585488ed4c202717147e85fc96e81e1a8e69cc402ec499084b1077db59bb59ffbc7e7a09e9919820e1ad384d471af9fe884ef0b"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1801e3600000000000000723af0095d96d00000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) unshare(0x40600) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x19, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r5}, 0x18) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000001280)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x9) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x30, "6e1f7bfb7cb236158ac85f18a3e6560710b6db5f23b6d94f3224b4624f4eb117aeaa6589f091fa9c8e7248f00db67b53"}, &(0x7f00000000c0)=0x38) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r10, 0x6, 0x193}, &(0x7f0000000140)=0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}]}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000400)=0x8) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 51.871688225s ago: executing program 34 (id=2384): r0 = socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYRES32=r1, @ANYRES32=r3], 0x270}}, 0x4090) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1801e3600000000000000723af0095d96d00000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) unshare(0x40600) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x19, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r5}, 0x18) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000001280)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x9) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x30, "6e1f7bfb7cb236158ac85f18a3e6560710b6db5f23b6d94f3224b4624f4eb117aeaa6589f091fa9c8e7248f00db67b53"}, &(0x7f00000000c0)=0x38) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r10, 0x6, 0x193}, &(0x7f0000000140)=0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}]}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000400)=0x8) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 12.123381396s ago: executing program 1 (id=2908): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000b7600000085100000fcffffff2500000010000000f4fffffff9ffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) 11.906266582s ago: executing program 1 (id=2910): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc000100180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="443b6164ec0faec6180fe94d6ad4", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000100000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x17a4, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x32}}}}, [@NL80211_ATTR_NAN_FUNC={0x53c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x318, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "3f6874a2a0e760b38bd2b801515d563f1905802c007ab1e0bb227118a2cca9f7541243b46dfea3772eb6896924b25521ab8f8dc05f366757f6a2dec0a9ba4687e2221a9a3168b65d3d673b2478327b1b4c4b9698e590d56a6739ccb8a416beef25684c21e45869fd7dfcbc285c4dee03e1f8b05c1f9b9949c637c339d4a3259492f9ed2376221827b0e16eb37e77a7e578f9440067cab446fa54543966052acdfea574b21edee42d90fd26f5a0017232624f1d8edf5f9003a3bfd06238aa6cdcb39978e7b834ff99cf2cbc7d835d002ca7e2d3ab784ce70bb404b37bbe9a0a67641c379fb235acdd9b8f12508a4771640304828ddde822c914e1a27b42a5bb"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_BF={0x103, 0x2, "c85a8a6ee7b7725b4681f71352761be6e06be4eac6ba99b0dd239d4531ebaf34069f95c70a726a7cb00a445991b9552b34d82ced841c5e460ef11b8c45d3087a07de4232507b056dbc44cfe8fe6e2cb8ba1f3c3a357299f350793c9dec5efe6e8a99c523c17cf241d8bacd6061233f5d773e18fb118d91fe15b6a2def532ba1431825bc5a6083d11492b8fac27c69a63fa00f139f8aaa4c9d7f26d507d645790738847459ab4e48c8f0fe54e472f7b5e9b366205b9f5874ba6db44d2894d3438cf587f37f39adcfb3c664aac825ec7055ed835791231c7089107d48c5c08e68f2229698963c1384af8ec5a214a89e9aa6964867fb9c08d3680407e3db737a7"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x178, 0xe, 0x0, 0x1, [{0x4a, 0x0, "f2e9bcc7f35a9aa435f5b847ae9ef626229432c87698ef7936584be78b0161688b6169b37d31571cc2f4c4216f485d1446331356a241cf2698a1eccae55f33ef6b99e97f305b"}, {0x50, 0x0, "10d4c23621ab4684be23657e77d56034ba3d469bea4594762ed90b0fddb866761a78f676004034123328276a3e014a5948322b7099a59167b0577b4d4a2b6755f3c08937409959eca963abd0"}, {0x5f, 0x0, "d94b23eb743f75dc27511f39bff5629b5ec5d937a716ff6891662d9359e9ccd841e9cc3e484f3c9f5ca9b35b29c102066bf6acb3f012995a68a4f963d73d5a9639a24b08eb996c008b51b54c3a894021cb3d7bc4ccb70ff121bfde"}, {0x75, 0x0, "d11b15d06b66a780992f0bade25a45c2f31ce38381b2f786f8b66e25be95e4cdaa72851e7f98b7c1d7e497d36cf8e56d8da039eef40bba586f16c9ec9c903f9f898961eec39387d81d1cf9262495707825b36a647633f374ee1813afa84ed34324273952078bb268a8e9201827b283d200"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x88, 0xe, 0x0, 0x1, [{0x82, 0x0, "795a6871ba7309b0cb2b750d3f21ac43c9850f3b75d578fe7913ad70aae2a8f753b7e8ab24dbbef863f8537828e4981e6a8dee4103f9c6aa2159ffd83a00e8ce127a98af30fbbfe818941e541863a2f3bf926e9f6fb7361b865379d1986403b1f16d73ec92b292bc4617ea128a93604f9d2dae30c8e7b606a3995e21b346"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "66f3bf55bb44"}]}, @NL80211_ATTR_NAN_FUNC={0x1248, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1224, 0xd, 0x0, 0x1, [{0xac, 0x0, "1fc08f6e757aaa89e08b2c000be8362e509cb95a077a6cada2c1214b3aa6cf1d65e5408fd82922995d7041d828d756231dd1bddd40c10960d270e041a36613b6cd001cb71afa5c4e33fbe6ce88bd48a5609581e21a4d5ce73a54280198635670729a0ed461d8bdac89ffb13d4d00416d1e89e002d11ef6fe3fccb080f0d3db6a72da21d509676a12fc2da1051ff5ffa403f980e712e0a3aa7d119c8e6210f3cac2a87f4994b1efb6"}, {0x1004, 0x0, "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"}, {0x90, 0x0, "6fe8f236c3109a77810451cafbed76ec631dbbb9892c705d88ba49698f16fc27b08436bba10c52a4d298a7740fc044029a071e6f4dc541efb0b66708c8d303886aa6f84e281b630e3cc4bec8a9d397b5eb23dc9255b66147514d59d4a97005099988d08c1341572772a17f3966abd3789056579014e3bc34e4b8476e0af89beefe26b656c971f7ecd23e0bde"}, {0x73, 0x0, "e445cb4b5549c262c3c4d82c0a889668d8e4a9bd2e6f3be6b7544134624f4612b809ee6458f75faf9eba6001db50cab7ac120768b0f1a9cd937dbdca162addb5f7ca10b98b514eddbdf59b3dd76c991fd37fdb7730244f807cc427a05afbf113fadf81687e452f2f799174ddf17499"}, {0x6a, 0x0, "546e0eba293199d3fd1c76506259696e852e9ff07ab867d168066fe90729e561f9aefbe8c1d460795d02ef4cf6348d721c705b7b5f29d5a5f4f17aac87abbed5ea9f16892e511910e83c5347f1550ca1fa8053f10b4625d71e3a09e3570d496acb8251bf532a"}]}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "1168791bb157"}]}]}, 0x17a4}, 0x1, 0x0, 0x0, 0x100}, 0x40000) 11.638231843s ago: executing program 1 (id=2914): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xd8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r1, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000000)=';', 0x1, 0x40000e0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x15) socket$inet_udp(0x2, 0x2, 0x0) close(0x4) 10.716091306s ago: executing program 1 (id=2922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xce}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000020000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f9008500000082000000850000000e00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 10.574941789s ago: executing program 1 (id=2923): socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x30000, @empty, 0x7}, 0x1c, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)="2609ba3d7dfe8fc8990341b0d290546e85636a", 0x13}], 0x2}}, {{&(0x7f00000016c0)={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000003940)=[@tclass={{0x14, 0x29, 0x43, 0x800}}, @hopopts={{0x18, 0x29, 0x36, {0x16}}}], 0x30}}, {{&(0x7f00000020c0)={0xa, 0x4e20, 0xd031, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}, 0x1c, 0x0}}], 0x3, 0x20000048) 10.456982415s ago: executing program 1 (id=2925): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) 2.910783605s ago: executing program 0 (id=3011): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff000000, 0xff], 'veth1_to_team\x00', 'geneve1\x00', {}, {}, 0x3a, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xe8, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x3, 0x7, 0x2, 0x7fff, 0x1, 0xa, 0x1]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) 2.801390422s ago: executing program 5 (id=3013): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000280)="0000000000000076a3f386dbe93b81", 0xf}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@local}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40}}}}}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 2.169423107s ago: executing program 5 (id=3018): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x50, 0x3, "4161e60f16c47c6f40bb3346fab0e3061ad6313fd6b189e907d3c3e840599152711ca7529a33ffccae6e91b01445e9f8103cc357e8d31101e88d7afa9915dd97586969c7eca4eb92eb106138"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) r6 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000800)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) sendmsg$netlink(r3, &(0x7f0000000a00)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)=[{&(0x7f0000000240)={0xb4, 0x13, 0x4, 0x70bd2b, 0x25dfdbff, "", [@nested={0xa3, 0x74, 0x0, 0x1, [@nested={0x4, 0x1f}, @generic="10898616b856", @nested={0x4, 0x35}, @nested={0x4, 0x5f}, @generic="76be60dcdbb894a891edca8267e38c08805b4bf4e160", @generic="658a76ca3772116b4f025d1bfbe334b7e9418a630e4e90dd8ef308c304a53dee98f516941628ef7b073b36962bf2494d7b5d7f97e0b47fb1610af815da3f396f06e5702ba20dfab8b228ec7adec77beeabe464b964ed2711a5142e13851c7bb6ef8c9bbf33a3865d9e4a76", @nested={0x4, 0x64}, @nested={0x4, 0xef}, @nested={0x4, 0xb1}]}]}, 0xb4}, {&(0x7f0000000300)={0x228, 0x2c, 0x100, 0x70bd25, 0x25dfdbfb, "", [@generic="f1894888999d39c5a3463406c72b768cde3d070d992320c96c3d1eecb1f5cda83c701abaa03d6b6242698842043d21f9e3fa41f1d0fc6c2f2e3a433e478570306e936dbed17db231760bc81d8b0e854f144c4b51dae6a6c4b65fe510837b25e1178fece253cc817265c8955bd455b439aeaf878b6d27f9f7f84424a1b407990a8db22734c7073a286c41cec2576cdd8b30b540d465b67da49fee2b633470206026abaa4fbcc9c9ebda96849b0168815b85a005f8db2c8575d9251c729358acc8f75073abd6f8", @nested={0x8, 0xcf, 0x0, 0x1, [@nested={0x4, 0x89}]}, @generic="a0ae2986100d9da59b40248993e600b8aba0143bcb2aebfedee960aeb746e96adb94dc0072839c54cfd28b7ddb6b5384639cd778aeee95cebf8db6ba3c4f8bea4b1148876ea11ad62208752b741f133ea6bd4f85d40077be3a02faf5d120a8f27668d9f5012324142c104d50d39ed2281de84ea59f26ebcf519cf430f20e998c0261ee2ead36fcdac2ae", @typed={0xbf, 0x137, 0x0, 0x0, @binary="064cd292fcebdf4eb246e4b2ca005b5b0ea796a1327880b8b4da65d1231e062cb5dd7ef988481d8656fffecb55b21c23606e37d9f093cf8b1f34dc85eb9c76e2c2ce3519ee38b1807f351f6a9d100313476b0a1369e2e82017d04645be0ee489d3c5732731d4f0aaaf76597342091d03276b44f05b5bcb58fce4af897010dacc930ac54fce87ba03500fd4ac9d0f597928f33b91120cfce6cb33fdd8f6775410a4f8e13b9f4606e792bada037596b2b97e164a778894f79bab757e"}]}, 0x228}, {&(0x7f0000000540)={0x58, 0x2b, 0x200, 0x70bd28, 0x25dfdbfd, "", [@nested={0x48, 0x5d, 0x0, 0x1, [@nested={0x4, 0x9}, @typed={0x4, 0x14b}, @nested={0x4, 0x15}, @generic="75f971ae15fb852de38bd33fc8ad0cf12c587ad6c5db76b7c73d250bd36590ddd8a9670ef4045166a894db4f1218a103f70a0733ee39d5a3"]}]}, 0x58}, {&(0x7f0000000640)={0x7c, 0x29, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x64, 0x55, 0x0, 0x1, [@typed={0x14, 0xd4, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x5e}, @nested={0x4, 0xbf}, @nested={0x4, 0x10}, @typed={0x8, 0xcc, 0x0, 0x0, @uid=r4}, @typed={0x33, 0x11c, 0x0, 0x0, @binary="c2ed282d8e851afc43ed6617a4c56cd24bced5bd059ed872eb0e7e6842af603d4318d7b9caee1157b0bdc86089de20"}, @nested={0x4, 0x131}]}, @typed={0x8, 0x4d, 0x0, 0x0, @pid=r5}]}, 0x7c}], 0x4, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x24, 0x1, 0x1, [r10, r11, r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r12}}}], 0x68, 0x4000000}, 0x4000) getsockopt$MRT6(r10, 0x29, 0x1, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r10) sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f00000010c0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000000b40)={0x53c, r13, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x21a3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x567}]}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @empty, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x294, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "4bc7d59d4279a2e36fe83170d928338b73220b776a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d25bf16949b77f667afbf782d06aaa394c3840a2bf"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "a938ef62437d05e970992820f2b37c5265cd4fe9c6b603296a51c40fa79fbe99c9f7e550dfe6"}, @TIPC_NLA_NODE_ID={0x34, 0x3, "a760902c103667b4cb1c8b6f9ddc95171c130dbf9dae1c06fd55abbcce43260cf1088c75c97468c604c00e3518492ac3"}, @TIPC_NLA_NODE_ID={0xf8, 0x3, "e23cca9c4ed7604b2577fc956ed941e8095363adb4e714b4335b87da677e114acb32b24f13bc6fd99948aea06fbf4c0a2bbd5168b5b0f9e5ed84db65122c24d19cc0eb72a3ddffd5aece9e8608f0c02469172633141c81213a7e5f6dcef1ee5534c98159fb5d36246420646708c22dbbf4982a08ebdd1bf55070ce15ecc7c7bdf0ad08ec17697a408648d2fdf7802206750a7a3c52d9de3978d317c89867cc0563a033a79aac929f54b3fd07db7ae9bf7020a62f3cbd7894eb0aa6d6f9d9001896792acf6dda2890ff72d7e551672ba9b9996b279961d983bdca177a1d96c2bbe18551916961c035d52a1c65faf408cd97b77cc6"}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "879184b43875e6746aa0359a62552d16dc238898ee0a8d0909774a299bd2e65268a44921df0d23550816ebf77a2009b8392cb07e72a84fe0a0bed93103c3f586d40b469b8e5a06fc55da1b577564645914bcdca7b5096e324dd041ea505e70c900ff7fb5a05fe6d1118a42ebf4878a2b17fd406ce4f8a339b1e8f2ba80a1883d97fb48468efe81cc0fe20b3736a7c2e1dffd9128374a7be3aa224f24f5b6ceab0797"}]}]}, 0x53c}}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001380)={'gretap0\x00', &(0x7f0000001300)={'syztnl0\x00', 0x0, 0x7, 0x1, 0xd, 0x3f, {{0x11, 0x4, 0x1, 0x34, 0x44, 0x65, 0x0, 0x5, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x41, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x1}, {@private=0xa010102, 0xa}, {@loopback, 0x1}]}, @timestamp={0x44, 0x14, 0xdd, 0x0, 0x9, [0x0, 0x0, 0x2, 0x7fff]}]}}}}}) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0xffffffffffffffff, 0x6, 0x1c}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0x13, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000011c0)='GPL\x00', 0x0, 0xea, &(0x7f0000001200)=""/234, 0x40f00, 0x8, '\x00', r14, 0x0, r10, 0x8, &(0x7f00000013c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x2, 0x1, 0x20000, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001480)=[r9, 0x1, r9, r9, r10, r15, r10, r10, r9], &(0x7f00000014c0)=[{0x1, 0x1, 0x1, 0x5}, {0x0, 0x1, 0x0, 0x4}, {0x2, 0x1}, {0x0, 0x5, 0xd, 0x3}], 0x10, 0xfffff000}, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f00000015c0)={0x0, 0x69b, 0x0, 0xfffffffffffffc00, 0x8}, &(0x7f0000001600)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000001640)={r16, 0x9}, &(0x7f0000001680)=0x8) accept$packet(r9, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001700)=0x14) r17 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r17, 0x1, 0x64, &(0x7f0000001740)=0x2, 0x4) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000001780)={0x0, 0x1, 0x13, r14, 0x3}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000001c80)=[{{&(0x7f00000017c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001840)=""/164, 0xa4}, {&(0x7f0000001900)=""/82, 0x52}, {&(0x7f0000001980)=""/52, 0x34}, {&(0x7f00000019c0)=""/86, 0x56}, {&(0x7f0000001a40)=""/166, 0xa6}], 0x5, &(0x7f0000001b80)=""/243, 0xf3}, 0x4}], 0x1, 0x2020, 0x0) 2.034193604s ago: executing program 5 (id=3019): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000091}, 0x40010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x7}, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x28011, r8, 0x513e9000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x2000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x31, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a00340001010101010100021800490001ac0f0005ac0f000bac0f"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20004050) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c31800000001000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) 2.031034625s ago: executing program 3 (id=3020): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@etimer_thresh={0x8, 0xc, 0xca1e}, @tfcpad={0x8, 0x24, 0x6}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000b00040801020000000000000000000000000600024000000000050003002f000000"], 0x24}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff", 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.97529348s ago: executing program 0 (id=3021): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x10, 0x1, 0x0, 0x13, 0x1, 0xc, [{0x1, 0x2, 0x2}]}]}, {0x0, [0x71, 0x5f, 0x61, 0x0, 0x61, 0x0]}}, &(0x7f0000000300)=""/113, 0x38, 0x71, 0x0, 0x7b}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0xa, [@typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @union={0x4, 0x2, 0x0, 0x5, 0x0, 0x5, [{0xe, 0x4, 0x7fff}, {0x1, 0x0, 0x81}]}, @union={0x7, 0x1, 0x0, 0x5, 0x0, 0x4, [{0x3, 0x2, 0x3}]}, @struct={0x10, 0x5, 0x0, 0x4, 0x0, 0x7, [{0x3, 0x5, 0xe9}, {0x10, 0x3, 0x4}, {0xd, 0x2}, {0xf, 0x5, 0xf3}, {0xd, 0x1, 0x6}]}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x3, 0x4}]}, {0x0, [0x33, 0x2e, 0x0, 0x61, 0x30, 0x30, 0x61, 0x30]}}, &(0x7f0000000580)=""/163, 0xc2, 0xa3, 0x0, 0x5, 0x10000, @value=r0}, 0x28) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r1, 0x4, 0x4, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x8, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 1.923077086s ago: executing program 7 (id=3022): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0xa6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20000009}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000006c0)="8e4151a067", 0x5}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000000000000029000000360000002f000000000000004000000000000000290000003700000002040000000000000001000401ff0502000204010405026c0dc910fc0100000000000000000000000000000000000000d80000000000000029000000360000000c1800000000000004bbeb353498e7e22319fdfe60398e84453cf1d32de1ce9ef3e1a1202416f47960883771e1dc8e38e17928465d73ea3efbb8b54b4b0793a7e81b6ab0a65b757d25e5152e2fdfdea944df669c99dd6fb0ee47b469d9f4ed57ba69b4ccd58ecf420fe3b4c02739836cdf33ea8f61f74796118beb7d891276e8583057872cab7a6b3a0862b5e0be10d4c3624ba39b3ba2ca972c614af71302eaeb1c203da1db569347e65c488c2b8fe2b73a2627602dea6d9e567698019aab06c9ff57008401010038000000000000002900000037000000740400000000000007180000000004810010040000000000000040000000000000000104000000001400000000000000290000000b0000000000000400000000580000000000000029000000360000008207000000000000040104c910ff020000000000000000000000000001c910fe8000000000000000000000000000bb05020000c20400000f2a000100000100c20402b9519300000028000000000000002900000039000000330200e600000000fe800000000000000000000000000021180000000000000029000000360000005c0000000000000018010000000000002900000036000000881f000000000000000100050200000718000000020407acac66650000000000000000e00000000000c910fe8000000000000000000000000000aa072000000003060900000100008000000000a703000000000000050000000000000000010001050000000000109c7971cdaf83af16ca6acd35962eced527d9a7ca08a576662c7a9fcaca4866dcce92b2ec4346b2f5f535b5f26ea7411ed2101b82a6d8ce5e3085e7aa8efcc2e926bd6d9ae80e518e404d44abc88ec9cc67821887f2d463831e9701ea66ed882bebf1d65b8822c6fc65658bbb769a8c576916fcf9daabfca49b1167763281dedde93bba6815ac383bd49d613ba2ee90eafb72781f1058c3dacf68cd398c00000048"], 0x378}}], 0x2, 0x931766f6319eed44) (async) shutdown(r0, 0x1) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002840)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x1e8, 0xffffffff, 0xf4, 0x1e8, 0x3ac, 0x3ac, 0xffffffff, 0x3ac, 0x3ac, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @empty, @multicast2, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @broadcast, @multicast2, @icmp_id=0x64, @gre_key=0x5}}}}, {{@ip={@multicast1, @multicast1, 0xff, 0xffffffff, 'ipvlan1\x00', 'caif0\x00', {0xff}, {0xff}, 0x21, 0x6, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @broadcast, @remote, @icmp_id=0x67, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x33, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x81, 0x10}, 0x8) (async) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000403d9af295ffffff00000000010004896005fbc8018006000600800a0000340102802e01178021c5f3a400"], 0x158}, 0x1, 0x0, 0x0, 0x240488d7}, 0xc000) 1.878199207s ago: executing program 7 (id=3023): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x16, r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in=@remote, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x67, 0x0, 0xffffffffffffffff}, {0xc}, {0x6, 0xffffffffffffffff, 0x80}, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010100, 0x0, 0x3c}, 0x0, @in=@multicast1, 0x34ff, 0x0, 0x2, 0x0, 0x548}, {{@in=@local, 0x0, 0x3c}, 0xa, @in=@private=0xa010102, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}]}]}, 0x13c}}, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r8 = socket(0x11, 0x4, 0x8) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={0x14, 0x12, 0xa01, 0x70bd2d, 0x0, {0xa}}, 0x14}}, 0x0) syz_emit_ethernet(0x2d6, &(0x7f0000000840)=ANY=[@ANYRES32=r8, @ANYBLOB="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", @ANYRESHEX=r0], 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) accept4$unix(r8, &(0x7f0000000380)=@abs, &(0x7f0000000240)=0x6e, 0x80000) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0xec, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0x8, 0x90f0, 0x4, 0x0, 0x0, 0x4}, [@TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xa66, 0x7, 0x12000}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x7, 0xfff, 0x0, 0xb54af9cc}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x5, 0xa, 0xa7a3}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x8}}, @TCA_NETEM_DELAY_DIST={0x3e, 0x2, "ba181d8bf3c1cb21fdf81ed083141ebf59a49158c91f67f2628ad2cd8e850c94a1d0a6e91ad0e48c3f2bf8885d1759f612b200fa6529b693dce9"}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x1, 0x56f5}}]}}}]}, 0xec}}, 0x0) 1.637056247s ago: executing program 5 (id=3024): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b00000019000100007f0000000094bc2d"], 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x7}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x101, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.534327554s ago: executing program 0 (id=3025): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c1401030000000000000000040001"], 0x18}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2c080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x3fa, 0x1, 0x70bd25, 0x25dfdbff, {0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40c9) r2 = socket(0x1d, 0x2, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x10004}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x6, 0x4) 1.508563313s ago: executing program 5 (id=3026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000008060108000000000000000400000004050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="00d0329396ceb57f2a4102a84b9edfc601ae1391e1", 0x15, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='cachefiles_mark_inactive\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f0000000000000000140002"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000001400020029bd7000fcdbdf250a4000fee9d3d8a599d12995d77b930768", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x33d3948374ee73f4}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$nci(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="1400c1ad0eaea80b038295834ea173e68d675260dd3d9140c60a22b2344d204461141c085c812bffe3d73e056bfb935ad9239c0c164068"], 0x37) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000009"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4ac60024", @ANYRES16=r8, @ANYBLOB="00032dbd7000fcdbdf25040000001400020070696d36726567310000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20000004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800000076f396cead792e3f6318bc2a0fa57e85d57ced582c90d9edc729bee0d585e8", @ANYRES16=r10, @ANYBLOB="07002abd70000000000002000000140001800500020006000000060005004e220000"], 0x28}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc66", 0x9) r11 = accept4(r3, 0x0, 0x0, 0x80800) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) accept4$unix(r11, 0x0, 0x0, 0x800) 1.440015813s ago: executing program 7 (id=3027): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f00000000c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000400)={0x1d, r4, 0x1, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) sendto$packet(r0, &(0x7f0000000100)="0ae7939a408120501b5a5e10def96dd2aa62723652c4734f3d275a6618fd9c2a49a8e1276a654f3611e294fadd239bfbf439e305ddc3d2939c013465f75697e0b83139f3d875419c6ffd1d0ad522f93e7ea16e96f0d7b63cc161ee8c592abd05d50ac05c046d25d3624012d63a6e1a4f86e12c4d8cf0b39aafe3", 0x7a, 0x0, &(0x7f00000001c0)={0x11, 0xb, r1, 0x1, 0x80, 0x6, @broadcast}, 0x14) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000008a500000086000000bf0900000000000055090100000000409500000000000000bf91000000000000b702000003000000850000002a000000b70000010000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 1.344465888s ago: executing program 3 (id=3028): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0xfffffdb2, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.250879039s ago: executing program 3 (id=3029): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$inet6(0xa, 0x5, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x4}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x80, @private1, 0x3}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x96cb52d76fb9d5da, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2000) r9 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$sock(r9, &(0x7f00000000c0)={&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x37}}], 0x18}, 0x20004080) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r11 = accept4(r10, 0x0, 0x0, 0x80800) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000940)=0x1000008, 0x4) (async) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmmsg$unix(r11, &(0x7f0000004940)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/157, 0x9d}, {&(0x7f0000004a00)=""/136, 0x88}, {&(0x7f00000017c0)=""/100, 0x64}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000840)=""/4, 0x4}, {&(0x7f0000000780)=""/184, 0xb8}, {&(0x7f0000000bc0)=""/194, 0xc2}], 0x9, &(0x7f0000000d80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000f80)=""/102, 0x66}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000001000)=""/85, 0x55}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000001080)=""/182, 0xb6}, {&(0x7f0000001140)=""/133, 0x85}, {&(0x7f0000001240)=""/250, 0xfa}], 0x8, &(0x7f00000013c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001440)=""/142, 0x8e}, {&(0x7f0000001500)=""/91, 0x5b}, {&(0x7f0000001580)=""/153, 0x99}, {&(0x7f0000001640)=""/168, 0xa8}, {&(0x7f0000001700)=""/7, 0x7}], 0x5, &(0x7f0000004840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x3, 0x0, 0x0) (async) pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r0, &(0x7f0000001200)={0x60000010}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="040100001600010025bd7000ffdbdf25fe800000000000000000000000000044ffffffff0000000000000000000000004e2300004e220003020020103a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d233000000ac1414aa00000000000000000000000001000000000000001000000000000000040000000000000001800000000000000800a400000000000500000000000000f0aa00000000000001000000000000000200500000000000040000000000000004000000000000000200000000000000060000008a262721080000002b3d70000a3500000a000000100000000000000000000000020000800c0008000800080001040000"], 0x104}, 0x1, 0x0, 0x0, 0x63a0f7cf031481fc}, 0x48080) 1.15478816s ago: executing program 7 (id=3030): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r1], 0x24}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000001e00)=0x8001) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYRESDEC=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) close(0x4) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\n\x00\x00', @ANYRES16=r14, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000980), 0x0, 0x800) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10000000) 1.061593959s ago: executing program 3 (id=3031): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f00000000c0)={0x110, r1, 0x11, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9089605208bdfedaae4f78985dbcb93895edea97db7c0bcd"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5c52e181a2fff0ebf07a7845df88a3587323c158f147597d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "627cd2eb402a3cb18c2e44b38c1c7849cef81c70c6991e48"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x110}, 0x1, 0x0, 0x0, 0x40c1}, 0x20004014) 989.168528ms ago: executing program 0 (id=3032): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14debb4463de59fc387344171eb89bbfc16e27000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @remote}, &(0x7f00000000c0)=0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r8, &(0x7f0000000580)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80) 974.712823ms ago: executing program 3 (id=3033): pipe(&(0x7f0000000600)) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000000)={0xfffffff9, [0xfffff800], 0x4}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) close(r4) (async, rerun: 32) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async, rerun: 32) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0xc048804) (async) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x200004}}, 0x10) (async, rerun: 32) bind$tipc(r6, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) close(0x3) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="010600000000000000216aca35f36bc14180"], 0x18}}, 0x4040001) 818.221043ms ago: executing program 3 (id=3034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r1, 0xffffffffffffffff, 0xd, 0x0, @val=@tracing={0x0, 0x87}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016", @ANYRES16=r4, @ANYRES16=r2, @ANYBLOB="5a1515cc46061aa842ad4e8bf8a73dd1cf35b04f7ce6b54a28e9e88926b8e2817f100b9ef0b33232424fd8155408047335e40168dd0ade3cc8757af141f410c87c98fb4a1d7478c91bf575ba933e08595ba183372e0f123cd293f3975e52b1d3e22c0e28d0932559c618da0a4f951fe8b96db1c5266ff4"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x200, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 524.831635ms ago: executing program 7 (id=3035): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x30}}, 0x0) getsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000080), &(0x7f0000000100)=0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 503.063274ms ago: executing program 5 (id=3036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000001800)="1e253ec931cc2734d5462725cddf6374995c82eceeca917f107e897432b51de03d3abf33ccfe22c152a693d1c169216b00fc6f4fe59798df24f443d7d981499940ca3d0e7b639a9c5699f40130615e8699408a777f5e92eb4179005efedbc946304666375d5d574e27aed6dce365611418c626ce7655ab5a0fe9e00a99f9ea1e8bfb3e5a76e1a34b33f767108f528b26b97ee08cb6706031454e8c6835cf077a2b0015e7a5ad84006b8ee7e416f7fadd4f3a59d9b8bca7bbdc3202f972ed42f3bff0981ce8f99ed93be4171d0a42feedebc274526115293e6deba184062ef3be97711af06d6abf576bf08cb099c6181380b3aa2b48a8b254090a6a2c2cdb37b69d975af91d344c646aadc5ebdc26e1b652eb6b0363b98b03a7b7db3600b258ba87fe77ff18a3dbd2bdd24f8d7961602ced3562dce471a4f3d3397900e1c8629da04127ecd8b24bbf75052fa4b84d3a52c31f0d541e813c4ebb95e9067b452fa13314033dbe8e726ad3b14e7a29fcb3215932d2269b2bf8792c847e4542c6be4f9d1d6ff235dd9df3508b26566f0e193811a7f0a8cee12ca6bb11f69dc84b3e8e0c7f6beefee4af3571b8c83f52e2d6ebf04ed1d687fafc13174d428756aefb7c7b75fa6f50b7a169e52e3a13388bc3c6066a967684da965877e69c16e60ae8fd4c437e9f6cafc979502895bb51c48f17a5692204a17760f719911b33d07436f5b976637d405ddb214fa7452efe0892aa8715fc6aa3f674fbb6f6baaa6de869a781ac9944767a5edf9ce99c766262dca2003a8743ec33d436ac2256185b89cba63a387bfb034e8f13770dda355706e41bb9774dacd19c42b9436ae60744cd0e587802e93f2046b61194e2bbb6e5debac9feb601f2084f0d82e95d26813047ddf15b19659f25bded4a1fc05540af6432bf4c0c6d5489cdbdc1e89462ffd7b8a85a024fb66b0b697e8340b01226fe27d1d78e96f7eb4d90d0f1ae7217c61a1c29072157852e34df4824c1ee2926ecb7c31443a24470c4fb12b053c638d30c22a94ec145c50d582826ca4fdff72c687130a17c2ccf340fcde10fc8dc91cb8b593fba17ba50c7b12577cc860175312bcb52863013501b39e819b7e56441cfafe0cd13c5ec6cd55569f5fffa5aa0b8cbcb3d6ea3a4552173141b2bf5adab8a3f2738d2f0df749d4c59e464c3a3b6a3991ee13a07118ebc81b214716ae01d00ac660955c22d25846143e4054df8ac495ec86f19bb683e9842c875b51a95e422cb5438ea9fe39173cb26bef54a11cab1c08499c137081101d20074f94606d58d32c618391b4c110b6b7a0fa4d5ed47b7391929b78d6c2ec805ec92d4b579bffba4a2fdec41c3ce3d8239057d20592d5975a940336cd90419c157c5c7b64e62ee633c791da8e2265bbbf6b2ee93ef85cee2db467cbf77a7003c21e71bce18be0253c7901ce3ad62443009e891d8c1ae388e19c888cce02748cefb2a82a0d3da51ffe68e64da44de0602bc3196b6bffa9947967ce3facfd46a2299e7956baa231a09f460f9c068346cc6dc361fcc6c0ea3a4d0426ca365166a57c2bc61a5217fd7f2416310380fa3384496af7e14615419b6a221b3c3ab96cd050edc287cc8568be54765e67b1e45e1997c50b8a14d691aceedab514628af37ae04a2baf898a0dd29ce5fce183eed2cbb494d20cae2488fd19dac1f7de95a6a836d644ec41ba4594c1bd4df9d6c26f8c7bbee84dc048741e401c87e1c88a0bf999b9ea4a3de47787935ff80e2d01e6a536d9f061e470c23d7f89f78f4608a815e0bac1df9fd6d080f92ee6c7be7497f8ed318d3685ee9afb0c5de5736ffd66977878e17c6b70ad2fa7c43ef7583a33b8b713f9b479be58ba5c61f628afcee2dc747813eeedee6c5e9268da84c6c0075e64e681ba4398b32e2e6862b8519a8ef84802dfed1f1e4da2aa54673976fb89c9a6a13d89a8d3a362b44e21c2b780cf5d363c894e2553003f984b6e69f3081ec36fb0dd7821c81225623b6098bd13fb9f5b4a845664dd8a94207c09c30bbc6fb919268665eae3c3afb0b0866e0a6fa6fdfcfbab800e8e2f5f5daf36f4ca36dbbae6773b14770640221bc358f48dc0568c03c700919c12652951cec6762adfc6be65791e9b56d9008fd12f63689f4d2f16bc867e50df4d43feaef31bac5066cf5fb6eaf810b41b4a621384a7bd8aab04e6c20a7cd4c27598d52aeb21f1a053d59a37c05af71f3117f7c3bb0b0db218a046d3e06b8e9a98a48c71ee3c7449858a9237935152e73adc8a02fa34d20f46c3d96ce693634633cdff973026ad9e85ed8f86d1105bf7f2a72f4f32e1253beb78797c4edb3ab75df3a1db9a9bc600a7e0eb205f97e54ddef789a7568b0b6749aa3851e907982a6368a17b61d7671c03e05952cd474b274f17d7a8473640246251dbe4ef30e87dd862f7b5f1b407684df3f058f4dcf1954019997168eb71ae37173ca8a90ef7a9dfc4a4a87a2b1ad8ebd9ee510f5125683dcf53f416e329011e5aa7089118a82564bb9d65de10f7476218d3ab9e931c85683a5dc970eaea32071f06360bd749caf9a01c2f618e7e7fea2770a5aa484d1d3693e8f1a2ccfa8bac5d6f54220a88eb86c8ab57bbc9281fa8bde720c452400f6cd62406797d728ce19b6b5d0972f139b7cbc5b8f9c1f346a73fa10afa1d2951d12eca4d8ca3969b052d55f8784d8bdca5224ef38e2a396f7f943f8d760344f900185003c1b1ab94e3746563444e85c3aa2d99f271eb5719de2a39019afc386c32aa666964e1b22c0f80ad3bae3c087d1268e9cc213b1735e7c47b9837ab2a2cd2330254a58fa1e4efd2ee79bcfa76fd762130bfbbf526e00902e83ed47b3538d565b5f2f2c1efc00dd9eee560c763dd8ef6f39be9047c4dfc4c1b56fe5005df571e91aaa4b7980d0065b5211dc1f57d61204e501b1bcbdf88561c3ed6763b37b63be45f825ff5b7b828e7da526ab2d872bd5151ec0699cacb1458753ebf7a7d9f25219d435b85172215cde94c415246451a371c7429ef4a50a74cae4b9df1ab87ceefaeeab649b57f8e53ea709f5516537f5cbce49ce609fe8bdc421fb6682fe9049dedad9c9a3e30360b311f85bc08c4a725b0902430942753fa988f380505b246e98eeedd28d7307bb8beef2a73098c8ea269009430e50d34cc98b417b857485d1047cfd306b1c1adc5138912cb79c4c780d15c3f27086feb3a2823f54c60050e4b94286d6098b7701eec1f2dde0280209cf50aca7a27064e0e51373cbc430e7764dbfed0ca7e0203a4594aeeb90aac58b3e1b44e2900e87213ec385a6aae8c68ca1e14cfb435fa933ef818b4c74a88dba4221ee6540c9ae139f625096343f11ad2c60d897c77ebb26bca8e126b0900abaa89c7a124f6021c57d4f842875e2d8ee520cc804940d8df2736d5bc33abf3d4ec1632d3a7fc726a1a0037dff38720dc5ae3859ff4a1c3269b850ff6d73c7229040ac3c1a303abb2b2fccc8ad2b57bb5d0dd7c55ed2a562aaa91c83042ff12eb98cabdb92ab58ac716cdec3522fb57085b479b5f97bf0f36943c3cf3952e5a9d4620501fd6d8737d42a897ee861fb85a8b2b0ee621a8f3b1b6a8c043042003502f2915cf874eb2e071b9d8479a00acf689f1e6bcf679a7a379ac8d4fb9deabf83396071606a2327dabdbf4751b9b4dbead6971662318da04e8a11f249303c6fbd0e6bf47d0cfcd2886133bafcd38d2c203635dfdaca04edea6e3fea651e679c6aacd88d6f23af4b6bbca79c778b3f7195a1a93e1c227a2565f315fae256bc73d6596edcfe87e6bdf004c885fc196e51dfdbd00f3f9e7e8247e76288b60256a347c6afab86634723e46ea2f6abfb62b9bda447a74665193b6575648e8c52979ac0f4e1ed117dfb2d254f75ba03dd1a2d8e62fc9ebcace028a8370f76e9a33deb1875d315b766ab3c54fe48169863aeb88a3f2a5137e32f87af3bcfa4e070e7eae622e53f74ab6ee0b2b5f4f7a590cee4a45d0d548c676ecef1df64e96b7ba7baf50e45b51168f5f5f9a9627a1f3be744c3dc43596f22bcc3ff3691dd7d85ff79124fecffee052ce8ff998a87e93041dff1fc6231f4cdf0b5140f373d4573d57cee13131508dcd4d43e9716e25bc9fe4db0de779cbe579afc0a59c94f7d97c68505438c0800000000000000a5086977fb375cff19c5c513879f3cff0ce5a64d5ed26b2744b8ccd9c0a4354da3516415f605975de4ea98107483bc06697467221e629fcaf7375120c2d8df88b3efae1715e9441c57cfea6c4d39ee540ac891cf7378783ac19305933bc6aa16fe8d9aea25375df9faa18bd5718f3e0f45ddee95750b87c42c5974adfd9232cbcd66088aad9d185a736f33eb56ffdf9c9c16b7aed0119630097bb87814c79d073a770127613d46ba21fa79cc710f4118ec1398b960746a81eea96eafa2dd6a13a42a079215963f19f71ec90133ff64b5592a0391384dfa73addf99eefba416244bab6bf62da53229d0e3477007ab29747af11a738cb41fd74473f2a9667d7dd501991684d914867ddad45d7cb93472a47284444c9546edc4cc834f570c083345d83409a3507d25c1979ce9d3f6fbe073d26e95074a020ebdba442fe420b3c2b80180a3dd24cd089ae37c302b597df5b3d8b7c00bdde719b17785b6edd96a09ab21ee6e58211bdeb5a85c510274512336e2af686afa65d6dc7c4289ee5d279195b38ca49e40fb6fcfe710c816a3a98e94858a0b5031f4033296d9e59879e35177365d0a999ce28f925d2ecb2e3317a5b734c9dafec51ee926e3c93288435bb37f0305896cce17db15bd43a7b6c53b4118cc2f6a31e44d7a6ea0a65a98a614704ba03f4de8d0acf9685460958ee6a035e408ef09784ab90ca0f8c2c3ab5a7227d02e70ff5f289e1c14cc3e1d542386b9641ac5755ade49374341da0aef5937b9711d84d4314b834b19adcc1ddadef5387424ca306cd5444b1676abab20103c6fb5efc081a91c52dee291f8db45c77b7dc006b15e1b7ae224a397edd5fa7ad615bb38ddfb4d44c7c9c76ab8308d93e2d481a6594a6e71e6e0f23d4799510f59f77095b51a90aeb331309c2177d791ae8ca78cb82302822b9380436bcdce801810b0b2e729d647694523f56fb86d4b6991688c20a227f06bccfbdf971d2038fba97445ceb300352318e4c86e9fa318826af85cf29bff7856dc076f31f1a549f7070e7fd4ba17cefda8edddd491b09885b00c6258ee1dfa67dd02e40cd9a95683a86f5c0a176bb591742e9b718e35bb9b8b14e4c7295fd4931f0bbe3bedbf328e9a5d8f21588bf11d622e610bdb3eeebded139b20150c7e46f6f9f947ba187ff51a831f90c05d11076e1bfabe1cb2cc39b0e9a709340e5d3c2a235684a242c344517f5a1c3638300160ff77f46a8f2eec7b873f7d2a9093318c954bba0f3c95c627adb5b0fc9aeb97a7778f261a8f4defcdc9de2abd6593bd70ec74cc06978a53678d272f9648d08ac676fc7497274c75cbe86773f207bd611bbda9ac5c91d85514b357fb78c342cf217558319a91715c328b22191fc0de598dec62cadc48ebee39ebe83c4134441f8f59d77ce493ab482ff9bfd661e17f24a6be16e4c15817293ad3c40db3704368a5a6c3f55dd44cb02bb42a5899c26642a8ca8168fe1453e6430be911638dc6262abf91750f30d2be49a6aa4b07eaf04e70d39bee968c569bca8967d5", 0xfc8}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) close(0x3) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r1], 0xb0}}, 0x4000080) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9, 0x9}}, {0x16, 0x2, [0x1, 0x9, 0x9, 0x1, 0x4, 0x4, 0x7, 0x5, 0x7]}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8, 0x8}}, {0xfffffffffffffea5, 0x2, [0x9, 0x7, 0x200, 0x6, 0x5, 0x6, 0x5fcd, 0x0]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000002c0)={@initdev, @empty, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @private}, &(0x7f0000000380)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xf, 0x10000, 0x2e, @dev={0xfe, 0x80, '\x00', 0x28}, @empty, 0x20, 0x20, 0x965300, 0x9}}) r13 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xbf44, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r14, 0x20c, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r15, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@gettaction={0x2c, 0x32, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x12c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x12c}}, 0x40010) ioctl$sock_ifreq(r1, 0x8915, &(0x7f0000000140)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 188.906047ms ago: executing program 0 (id=3037): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x32}, @in6=@mcast1, {0x0, 0xb0a, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x0, 0x4, 0xaf}, [@algo_auth_trunc={0x4c, 0x14, {{'cryptd(cryptd(nhpoly1305))\x00'}, 0x0, 0x3a0}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x0, 0x0, 0x70bd29}}]}, 0x158}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14}}, 0x90}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, 0x0, 0x404c045) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000340)={0x0, 0x5, [0xfffffffffffffbe5, 0x100000001, 0x8, 0x5, 0x10]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x8c}}, 0x200508d4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000000c0)={0x14, r6, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000080)=0x1000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSUUID(r7, 0x80111500, &(0x7f00000002c0)) r11 = socket$inet6(0xa, 0x4, 0xeb3) setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@acquire={0x1ac, 0x17, 0x90d, 0x0, 0x0, {{@in=@local}, @in=@multicast2, {@in=@private=0xa010100, @in6=@mcast2, 0x0, 0x0, 0x4e21}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0xaf, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d4, 0xff}, 0xa, @in=@broadcast, 0x0, 0x3, 0x3, 0x7f, 0xc1, 0x9, 0x43}, {{@in=@multicast2, 0x4d6, 0x32}, 0xa, @in=@private=0xa010101, 0x34ff, 0x3, 0x3, 0x4, 0x1, 0x2, 0xe7}]}]}, 0x1ac}}, 0x0) 3.662156ms ago: executing program 0 (id=3038): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async, rerun: 32) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x4e, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x3, 0xffe0}, {0x3, 0xc}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="ff000039", @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000004700000000170000e4000000000074683a73797a01106c656572300000"], 0x38}}, 0x8001) (async, rerun: 32) sendmmsg$alg(r0, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e8100a13e7fcca4310085ea82993babea06255779d0dfa66f589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae9dade5d7a11f0f2bbdec62e2df3daf9875c79c6763fdcb88306000000bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd409823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a00", 0xdd}, {&(0x7f00000012c0)="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", 0xf23}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) (rerun: 32) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2100, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000b00e2f21fcffffff9de06b0b04", @ANYRES16=r10, @ANYBLOB="01000000000000000000020000000c0001800600050000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) socket$l2tp(0x2, 0x2, 0x73) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x3032, 0xffffffffffffffff, 0xe2d93000) (async, rerun: 64) socket$inet6(0xa, 0x80001, 0x0) (async, rerun: 64) r11 = socket$kcm(0x10, 0x2, 0x0) shutdown(r8, 0x0) (async) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="5c006b8703340000001f00000000010000040014000d000a00140000eb9dcb1c0cb939e287643d87b556a705251e6182949a3651f60a84c9f5d1938837e786a6d01a3353c60e4509c5bb5a00f6985300"/94, 0x5e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b1fa06a21e16fd50286c557f300000000000000000000000020000000d60000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r12, 0x0) 0s ago: executing program 7 (id=3039): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691058000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1e, 0x80}, 0x2c) socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f3bd14", 0x3}, {&(0x7f00000002c0)="b7f92f9a0ccd8effb88da8b742f0e59a9eb22c1af35fa2f995dde0b7a54fe5ed689a88db027e9450cf327d8767058daa681b04dd66debe5360b7d6b0d4a2529029c9b4a463bd5b66689882a99f37c6b3975367fc58f4b9e73b46703a478ae0d1c614162f300d429ccdf937dcfa1c6b14484d5bb3bfc59e6eb8e42be611c6484753bcc650fe29314d5b7bab9498f415cec7510369a9", 0x95}], 0x2}, 0x20000000}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a1ab00000000020000003200000008000300", @ANYRES32=r4, @ANYBLOB="f48547b4529d52c697286b102a8012a2f62bae10c3c9e9c7b4aaa9da3b4ed1e68fb153b11c9acce42495d6826127d717c0194de3c70647542583faf3f51fb54889cd27d6fa8ff4d8f566e52e4f8c0ded456169835199d26bd2685aeb600f716728c4aedebb9f70aad4c0253a1070a6bb06693628d5a29c28d32aa45850b6e54fdd1731fcad3a67d89977cc2678f91a46a221a84be41a2e1129251d22de346b5f8460556c1269144ab26d24866ec02288b12631a00212e226c20227bb6fdeb45a8c1c3d569f01bcfe86822187f69801edacacae90080860"], 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = epoll_create1(0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000000)={0x40002000}) sendmsg$inet(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x20040005) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000900)="9bd4c59a2af50fab05c27ed55db4", 0x0, 0x5043, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000006a6be8f2798daf7b9c1c3163"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="080000000005000000090000000100000091be369b776a47256b21ead53ca5c41b91e8d0e581bf12ea384ecb5d66ddb7dd98abaa0f7ac9bde50ada2de210a3dfbdba000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r10, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x2000300, 0xe, 0x0, &(0x7f0000000040)="63eced324031f2a2be0db81e115d", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r9, &(0x7f0000000280)="a7abc451b3", &(0x7f0000000140)=""/75}, 0x20) kernel console output (not intermixed with test programs): : interface not active [ 219.935364][T11975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.956482][T11975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.079370][T12102] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 220.124103][T11975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.271631][T12103] bond5: (slave veth1): Enslaving as an active interface with a down link [ 220.301628][T12102] bond5 (unregistering): (slave veth1): Releasing active interface [ 220.314890][T12102] bond5 (unregistering): Released all slaves [ 220.452160][T11975] hsr_slave_0: entered promiscuous mode [ 220.468957][T11975] hsr_slave_1: entered promiscuous mode [ 220.583878][T12134] ip_vti0: entered promiscuous mode [ 220.602567][T12139] netlink: 'syz.4.1506': attribute type 1 has an invalid length. [ 220.810321][T12136] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 220.828872][T12136] bond5: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 220.843906][T12136] bond5: (slave vxcan1): making interface the new active one [ 220.852444][T12136] bond5: (slave vxcan1): Enslaving as an active interface with an up link [ 220.867963][T12146] bond5 (unregistering): (slave vxcan1): Releasing backup interface [ 220.888665][T12146] bond5 (unregistering): Released all slaves [ 220.910558][T12154] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 220.940902][T12154] bond9: entered promiscuous mode [ 220.946342][T12154] 8021q: adding VLAN 0 to HW filter on device bond9 [ 221.014931][T12154] bond9: (slave bridge7): making interface the new active one [ 221.022743][T12154] bridge7: entered promiscuous mode [ 221.031453][T12154] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 221.063043][T12158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.164490][T12162] netlink: 'syz.4.1513': attribute type 1 has an invalid length. [ 221.240194][T12162] bond5: entered promiscuous mode [ 221.245516][T12162] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.260228][T12163] bond5: entered allmulticast mode [ 221.460277][T11975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.493228][T11975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.633435][T11975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.661587][T11975] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.746134][T12179] x_tables: duplicate underflow at hook 3 [ 221.854112][T11975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.920046][T12191] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 221.927911][ T5843] Bluetooth: hci5: command tx timeout [ 221.946345][T11975] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.981024][T12194] netlink: 'syz.4.1518': attribute type 4 has an invalid length. [ 222.013961][T11868] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.021164][T11868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.094415][T12196] __nla_validate_parse: 12 callbacks suppressed [ 222.094434][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 222.122955][T11868] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.130143][T11868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.191593][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1521'. [ 222.233185][T12200] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 222.247581][T12205] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 222.255613][T12205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1521'. [ 222.281841][T12200] tipc: Enabled bearer , priority 0 [ 222.328713][T11975] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.337910][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 222.339483][T11975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.450583][ T5898] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 222.517913][ T3951] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 222.558028][T12213] syzkaller0: entered promiscuous mode [ 222.563571][T12213] syzkaller0: entered allmulticast mode [ 222.796647][T12231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'. [ 222.803936][T12229] netlink: 'syz.4.1527': attribute type 32 has an invalid length. [ 222.814317][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 222.900758][T12244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'. [ 222.932099][T12229] bond6: Setting coupled_control to off (0) [ 222.969528][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 222.992936][T11975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.053254][T12252] x_tables: unsorted entry at hook 3 [ 223.212109][ T5898] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 223.431658][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1536'. [ 223.444633][T12276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1536'. [ 223.459125][ T5898] tipc: Node number set to 45970418 [ 223.530478][T11868] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 223.557173][T11868] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 223.623169][T12285] syzkaller1: entered promiscuous mode [ 223.628901][T12285] syzkaller1: entered allmulticast mode [ 223.754927][T11975] veth0_vlan: entered promiscuous mode [ 223.814939][T11975] veth1_vlan: entered promiscuous mode [ 223.901052][ T5855] udevd[5855]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 223.971535][T11975] veth0_macvtap: entered promiscuous mode [ 223.985393][T11975] veth1_macvtap: entered promiscuous mode [ 224.008091][ T5843] Bluetooth: hci5: command tx timeout [ 224.038245][T11975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.058571][T11975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.085075][T11869] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.120893][T11869] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.150822][T11869] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.195890][T11869] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.222913][T12309] sch_tbf: burst 0 is lower than device tunl0 mtu (68) ! [ 224.400517][T11869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.418207][T11869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.430306][ T5852] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 224.518709][ T6487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.536560][ T6487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.190937][T12352] netlink: 'syz.4.1557': attribute type 2 has an invalid length. [ 225.193894][T12350] syzkaller0: create flow: hash 3394391849 index 1 [ 225.199205][T11868] syzkaller0: tun_net_xmit 76 [ 225.224259][T11868] syzkaller0: tun_net_xmit 48 [ 225.232216][ T5852] syzkaller0: tun_net_xmit 76 [ 225.298217][ T5852] syzkaller0: tun_net_xmit 76 [ 225.322723][T12350] siw: device registration error -23 [ 225.329395][T12354] syzkaller0: delete flow: hash 3394391849 index 1 [ 225.756356][T12367] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 226.089194][ T5843] Bluetooth: hci5: command tx timeout [ 226.728640][T12367] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 226.798778][T12371] batman_adv: batadv0: Interface deactivated: dummy0 [ 226.835856][T12371] batman_adv: batadv0: Removing interface: dummy0 [ 226.909882][T12375] syzkaller0: entered promiscuous mode [ 226.915537][T12375] syzkaller0: entered allmulticast mode [ 226.944981][T12389] ip6erspan0: entered allmulticast mode [ 227.029112][T12389] batadv_slave_0: Caught tx_queue_len zero misconfig [ 227.157266][T12405] netlink: 'syz.4.1563': attribute type 2 has an invalid length. [ 227.165241][T12405] netlink: 'syz.4.1563': attribute type 11 has an invalid length. [ 227.176433][T12405] __nla_validate_parse: 7 callbacks suppressed [ 227.176451][T12405] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1563'. [ 227.231384][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'. [ 228.008067][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 228.170908][ T5843] Bluetooth: hci5: command tx timeout [ 228.402774][T12390] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 229.065794][T12436] tipc: Enabling of bearer rejected, failed to enable media [ 229.077213][T12436] syzkaller0: entered promiscuous mode [ 229.083674][T12436] syzkaller0: entered allmulticast mode [ 229.128504][T12438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1577'. [ 229.140910][T12438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1577'. [ 229.413148][T12446] netlink: 'syz.5.1580': attribute type 21 has an invalid length. [ 229.445532][T12446] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1580'. [ 229.455617][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1580'. [ 229.502671][T12446] bond1: Removing last ns target with arp_interval on [ 229.552837][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 229.910307][T12472] sit0: left promiscuous mode [ 229.943528][T12471] netlink: 'syz.0.1584': attribute type 11 has an invalid length. [ 229.960938][T12471] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1584'. [ 229.989618][T12472] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.996863][T12472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.004389][T12472] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.011576][T12472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.024309][T12472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.035827][T12472] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 230.263815][T12489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1593'. [ 230.730558][T12515] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 230.795840][T12528] syzkaller1: entered promiscuous mode [ 230.816791][T12528] syzkaller1: entered allmulticast mode [ 231.050099][T12547] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1604'. [ 231.077876][T12547] netlink: zone id is out of range [ 231.205745][T12554] netlink: 'syz.3.1607': attribute type 1 has an invalid length. [ 231.255075][T12554] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 231.268960][T12554] bond10: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 231.295187][T12554] bond10: (slave vxcan3): making interface the new active one [ 231.304033][T12554] bond10: (slave vxcan3): Enslaving as an active interface with an up link [ 231.315160][T12558] bond10 (unregistering): (slave vxcan3): Releasing backup interface [ 231.324863][T12558] bond10 (unregistering): Released all slaves [ 231.806795][T12576] bond4: option arp_validate: invalid value (18446744073491447809) [ 231.817563][T12576] bond4 (unregistering): Released all slaves [ 231.846426][T12580] netlink: 'syz.0.1613': attribute type 13 has an invalid length. [ 231.977329][ T6487] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.986243][ T6487] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.028119][ T3951] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.046405][ T3951] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.147271][T12594] x_tables: duplicate entry at hook 3 [ 232.970978][T12648] __nla_validate_parse: 1 callbacks suppressed [ 232.970997][T12648] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1628'. [ 233.193463][T12655] syzkaller0: entered promiscuous mode [ 233.228614][T12655] syzkaller0: entered allmulticast mode [ 233.679064][T12684] netlink: 'syz.3.1637': attribute type 14 has an invalid length. [ 233.909837][T12693] netlink: 'syz.4.1638': attribute type 33 has an invalid length. [ 233.917938][T12693] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1638'. [ 234.007163][T12693] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 234.259249][T12704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1640'. [ 234.424373][T12706] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 234.467782][T12706] bond5: entered promiscuous mode [ 234.473231][T12706] bond5: entered allmulticast mode [ 234.480018][T12706] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.492466][T12708] macvlan0: entered promiscuous mode [ 234.537143][T12708] macvlan0: entered allmulticast mode [ 234.572570][T12708] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 234.945446][T12723] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1646'. [ 234.988870][T12723] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1646'. [ 235.005048][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1645'. [ 235.104123][T12731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1647'. [ 235.303870][T12733] tipc: Enabling of bearer rejected, failed to enable media [ 235.410896][T12742] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 235.411935][T12744] ip6t_srh: unknown srh match flags 4000 [ 235.990092][T12767] batadv_slave_1: entered promiscuous mode [ 236.092788][T12769] dummy0: mtu less than device minimum [ 236.100661][T12769] dummy0: mtu less than device minimum [ 236.106321][T12769] dummy0: mtu less than device minimum [ 236.112548][T12769] dummy0: mtu less than device minimum [ 236.118242][T12769] dummy0: mtu less than device minimum [ 236.124018][T12769] dummy0: mtu less than device minimum [ 236.129834][T12769] dummy0: mtu less than device minimum [ 236.136377][T12769] dummy0: mtu less than device minimum [ 236.142177][T12769] dummy0: mtu less than device minimum [ 236.148301][T12769] dummy0: mtu less than device minimum [ 236.159646][T12766] batadv_slave_1: left promiscuous mode [ 236.249884][T12771] syzkaller0: entered promiscuous mode [ 236.255400][T12771] syzkaller0: entered allmulticast mode [ 236.377966][T12781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1662'. [ 236.399289][T12781] netlink: 'syz.1.1662': attribute type 1 has an invalid length. [ 236.478125][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 236.499905][T12783] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 236.664903][T12793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.672192][T12793] IPv6: NLM_F_CREATE should be set when creating new route [ 236.679812][T12793] IPv6: NLM_F_CREATE should be set when creating new route [ 236.790528][T12800] No such timeout policy "syz1" [ 236.953595][T12810] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1670'. [ 237.163386][T12816] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 237.208186][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 237.265943][T12826] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 238.036375][T12865] sctp: [Deprecated]: syz.4.1684 (pid 12865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.036375][T12865] Use struct sctp_sack_info instead [ 238.064954][T12867] __nla_validate_parse: 3 callbacks suppressed [ 238.064972][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 238.103329][T12867] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 238.113342][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'. [ 238.205279][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'. [ 238.224643][T12876] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 238.232956][T12876] netlink: 'syz.3.1690': attribute type 3 has an invalid length. [ 238.245009][T12876] netlink: 'syz.3.1690': attribute type 7 has an invalid length. [ 238.254311][T12876] netlink: 'syz.3.1690': attribute type 8 has an invalid length. [ 238.262430][T12876] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1690'. [ 238.272268][T12876] NCSI netlink: No device for ifindex 131092 [ 238.278134][T12884] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1691'. [ 238.291881][T12879] netlink: 'syz.5.1688': attribute type 1 has an invalid length. [ 238.299920][T12879] netlink: 'syz.5.1688': attribute type 1 has an invalid length. [ 238.334815][T12885] x_tables: ip_tables: ah match: only valid for protocol 51 [ 238.474658][T11868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.484038][T11868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.582082][T12898] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1695'. [ 238.639996][T12907] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 238.668150][T12908] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1695'. [ 238.728829][T12898] syzkaller1: entered promiscuous mode [ 238.745181][T12898] syzkaller1: entered allmulticast mode [ 238.776950][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1695'. [ 239.240319][T12932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 239.549464][T12956] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 240.091053][T12961] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1707'. [ 240.245260][T12960] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1707'. [ 240.602521][T12997] netlink: 'syz.4.1714': attribute type 5 has an invalid length. [ 240.765670][T12987] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 240.800175][T12987] erspan1: entered allmulticast mode [ 241.540635][T13032] delete_channel: no stack [ 241.613473][T13041] syzkaller0: entered promiscuous mode [ 241.638135][T13041] syzkaller0: entered allmulticast mode [ 242.656523][T13095] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 242.672455][T13097] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 242.863875][ T40] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 242.883663][ T40] syz2: Port: 1 Link DOWN [ 243.170562][T13115] net_ratelimit: 27 callbacks suppressed [ 243.170580][T13115] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 243.192125][T13115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.419127][T13124] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 243.746355][T13141] syzkaller0: entered promiscuous mode [ 243.778054][T13141] syzkaller0: entered allmulticast mode [ 243.861679][T13142] netlink: 'syz.0.1746': attribute type 4 has an invalid length. [ 244.444787][T13167] __nla_validate_parse: 14 callbacks suppressed [ 244.444806][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 244.478534][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1753'. [ 246.285937][T13197] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20003 [ 246.525122][T13208] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 247.177018][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 247.364783][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1765'. [ 247.667509][T13247] netlink: 'syz.0.1773': attribute type 1 has an invalid length. [ 247.686612][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1774'. [ 247.703363][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1773'. [ 247.789227][T13252] syzkaller1: entered promiscuous mode [ 247.795199][T13252] syzkaller1: entered allmulticast mode [ 247.915753][T13274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.644359][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1787'. [ 248.786056][T13307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1787'. [ 248.820900][T13307] nbd: must specify at least one socket [ 248.850337][T13312] gtp0: entered promiscuous mode [ 248.855324][T13312] gtp0: entered allmulticast mode [ 249.045097][T13328] xt_hashlimit: max too large, truncated to 1048576 [ 249.049386][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'. [ 249.063044][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1793'. [ 249.246085][T13328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.455324][T13346] netpci0: tun_chr_ioctl cmd 1074025677 [ 249.461230][T13346] netpci0: linktype set to 6 [ 249.466082][T13347] netpci0: tun_chr_ioctl cmd 1074025677 [ 249.473272][T13347] netpci0: linktype set to 6 [ 249.485135][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 249.502311][T13358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1799'. [ 249.518668][T13346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1797'. [ 249.559992][T13346] geneve0: entered promiscuous mode [ 249.570285][T13346] geneve0: entered allmulticast mode [ 249.611621][ T1087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.633611][ T1087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.644622][ T1087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.664178][ T1087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.841271][T13371] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 250.282885][T13399] pim6reg: entered allmulticast mode [ 250.291623][T13387] pim6reg: left allmulticast mode [ 250.377274][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1811'. [ 250.423836][T13405] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.455437][T13405] bond5: (slave vlan0): Opening slave failed [ 250.491498][T13417] netlink: 'syz.3.1813': attribute type 5 has an invalid length. [ 250.675117][T13423] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1815'. [ 250.703400][T13405] bond5 (unregistering): Released all slaves [ 250.739457][T13421] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 250.747390][T13421] syzkaller0: entered promiscuous mode [ 250.761297][T13421] syzkaller0: entered allmulticast mode [ 250.867062][T13421] tipc: Started in network mode [ 250.872077][T13421] tipc: Node identity 4257c65521b6, cluster identity 4711 [ 250.881053][T13421] tipc: Enabled bearer , priority 0 [ 250.900469][T13420] tipc: Resetting bearer [ 250.916578][T13426] ipt_REJECT: TCP_RESET invalid for non-tcp [ 250.949283][T13420] tipc: Disabling bearer [ 251.318538][T13448] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 251.541212][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1826'. [ 251.662694][T13460] bridge_slave_1: left allmulticast mode [ 251.685458][T13460] bridge_slave_1: left promiscuous mode [ 251.712487][T13460] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.754726][T13460] bridge_slave_0: left allmulticast mode [ 251.771251][T13460] bridge_slave_0: left promiscuous mode [ 251.784344][T13460] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.997890][T13449] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 252.027048][T13475] Bluetooth: MGMT ver 1.23 [ 252.035722][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1832'. [ 252.268458][T13485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1834'. [ 252.297432][T13484] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1835'. [ 252.425004][T13487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1836'. [ 252.932410][T13504] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 253.168546][T13513] veth1_to_batadv: left promiscuous mode [ 253.214249][T13513] macsec0: left promiscuous mode [ 253.252232][T13513] syzkaller0: left promiscuous mode [ 253.270395][T13513] bridge8: left promiscuous mode [ 253.287466][T13513] geneve2: left promiscuous mode [ 253.301770][T13513] bond5: left promiscuous mode [ 253.648214][T13534] netlink: 'syz.4.1848': attribute type 1 has an invalid length. [ 253.692834][T13534] bond7: entered promiscuous mode [ 253.699764][T13534] 8021q: adding VLAN 0 to HW filter on device bond7 [ 254.205922][T13561] netlink: 'syz.5.1856': attribute type 11 has an invalid length. [ 254.732928][T13561] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 254.776338][T13588] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 254.836914][T13590] __nla_validate_parse: 11 callbacks suppressed [ 254.836932][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 255.753241][T13632] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1873'. [ 255.773827][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.125494][T13640] netlink: 'syz.3.1876': attribute type 13 has an invalid length. [ 256.133948][T13640] netlink: 'syz.3.1876': attribute type 17 has an invalid length. [ 256.241978][T13640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.249585][T13643] netlink: 408 bytes leftover after parsing attributes in process `syz.0.1877'. [ 256.264286][T13640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.333734][T13641] tipc: Enabling of bearer rejected, failed to enable media [ 256.408278][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 256.585177][T13660] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1882'. [ 257.192948][T13695] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 257.201245][T13695] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1890'. [ 257.816509][T13724] netlink: 'syz.5.1902': attribute type 1 has an invalid length. [ 257.929628][T13731] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.962959][T13734] veth3: entered promiscuous mode [ 258.039969][T13737] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1905'. [ 258.050959][T13737] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 258.171891][T13719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1900'. [ 258.330795][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1908'. [ 258.372890][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 258.784930][T13776] 8021q: VLANs not supported on sit0 [ 258.791990][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1913'. [ 258.798900][T13775] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 258.825073][T13777] netlink: 'syz.0.1917': attribute type 8 has an invalid length. [ 258.873488][T13780] netlink: 'syz.1.1918': attribute type 3 has an invalid length. [ 258.908905][T13780] netlink: 'syz.1.1918': attribute type 1 has an invalid length. [ 258.930218][T13780] netlink: 'syz.1.1918': attribute type 10 has an invalid length. [ 259.603305][T13822] wireguard0: entered promiscuous mode [ 259.613334][T13822] wireguard0: entered allmulticast mode [ 259.648767][T13822] team0: Device wireguard0 is of different type [ 259.932421][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1935'. [ 259.942119][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1935'. [ 259.979279][T13836] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 260.024849][T13836] bond5: entered promiscuous mode [ 260.038040][T13836] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.134455][T13837] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.162245][T13837] bond5: (slave bond6): making interface the new active one [ 260.171963][T13837] bond6: entered promiscuous mode [ 260.178661][T13837] bond5: (slave bond6): Enslaving as an active interface with an up link [ 260.681890][T13878] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 260.699830][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1945'. [ 260.735503][T13878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1944'. [ 260.740276][T13881] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 260.752806][T13881] nbd: error processing sock list [ 260.769607][T13884] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1943'. [ 260.779184][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'. [ 260.803078][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1945'. [ 260.919052][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 261.000857][T13902] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 261.065551][T13907] sctp: [Deprecated]: syz.5.1952 (pid 13907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.065551][T13907] Use struct sctp_sack_info instead [ 261.070528][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 261.113503][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 261.293342][T13926] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 261.425577][T13936] unsupported nlmsg_type 40 [ 261.507173][T13939] tipc: Enabled bearer , priority 0 [ 261.568900][T13939] syzkaller0: entered promiscuous mode [ 261.574770][T13939] syzkaller0: entered allmulticast mode [ 261.583789][T13939] tipc: Resetting bearer [ 261.746251][T13942] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 261.978178][T13938] tipc: Resetting bearer [ 262.116807][T13955] validate_nla: 1 callbacks suppressed [ 262.116825][T13955] netlink: 'syz.5.1968': attribute type 1 has an invalid length. [ 262.143240][T13956] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 262.319813][T13970] netlink: 'syz.5.1971': attribute type 1 has an invalid length. [ 263.453577][T13938] tipc: Disabling bearer [ 263.467992][T13970] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 263.573937][ T5898] tipc: Node number set to 2090557376 [ 263.634066][T13972] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 263.782813][T13984] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 264.383466][T14006] bond0: (slave team0): Releasing backup interface [ 264.392124][T14006] team0: left promiscuous mode [ 264.397033][T14006] team_slave_0: left promiscuous mode [ 264.414416][T14006] team_slave_1: left promiscuous mode [ 264.420353][T14006] bridge3: left promiscuous mode [ 264.434398][T14006] bond0: (slave batadv0): Releasing backup interface [ 264.442147][T14006] batadv0: left promiscuous mode [ 264.451276][T14006] bond0: (slave 30): Releasing backup interface [ 264.459701][T14006] : left promiscuous mode [ 264.466223][T14006] bond0: (slave bond_slave_1): Releasing backup interface [ 264.474916][T14006] bond_slave_1: left promiscuous mode [ 264.484023][T14006] team0: Failed to send options change via netlink (err -105) [ 264.495591][T14006] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 264.509147][T14006] team0: Port device team_slave_0 removed [ 264.516639][T14006] team0: Failed to send options change via netlink (err -105) [ 264.524659][T14006] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 264.534482][T14006] team0: Port device team_slave_1 removed [ 264.541122][T14006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.549510][T14006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.558328][T14006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 264.624262][T14010] team0 (unregistering): Failed to send options change via netlink (err -105) [ 264.656835][T14010] team0 (unregistering): Failed to send port change of device bridge3 via netlink (err -105) [ 264.667540][T14010] team0 (unregistering): Port device bridge3 removed [ 264.692841][T14020] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 264.701710][T14020] syzkaller1: linktype set to 823 [ 264.713506][T14020] netlink: 'syz.5.1983': attribute type 13 has an invalid length. [ 264.941374][T14036] syzkaller1: entered promiscuous mode [ 264.947034][T14036] syzkaller1: entered allmulticast mode [ 264.954306][T14037] syzkaller1: left promiscuous mode [ 264.960353][T14037] syzkaller1: left allmulticast mode [ 265.059813][T14043] __nla_validate_parse: 9 callbacks suppressed [ 265.059833][T14043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1990'. [ 265.370769][T14047] bond8: entered promiscuous mode [ 265.375856][T14047] bond8: entered allmulticast mode [ 265.397357][T14047] 8021q: adding VLAN 0 to HW filter on device bond8 [ 265.414717][T14064] netlink: 'syz.3.1996': attribute type 1 has an invalid length. [ 265.457106][T14064] 8021q: adding VLAN 0 to HW filter on device bond10 [ 265.489900][T14068] bond10: (slave geneve4): making interface the new active one [ 265.499732][T14068] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 265.512178][T14067] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 265.566203][T14052] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 265.773162][T14086] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2003'. [ 265.782758][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2002'. [ 265.795388][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2002'. [ 265.810149][T14080] tipc: Enabling of bearer rejected, failed to enable media [ 265.838072][T14087] netlink: 'syz.1.2002': attribute type 13 has an invalid length. [ 266.007540][T14100] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 266.042145][T14097] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2005'. [ 266.300254][T14116] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 266.310284][T14118] IPv6: addrconf: prefix option has invalid lifetime [ 266.844791][T14137] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 266.869655][T14146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.895509][T14146] netlink: 'syz.1.2017': attribute type 11 has an invalid length. [ 267.150116][T14153] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2019'. [ 267.198526][T14153] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2019'. [ 267.210477][T14153] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2019'. [ 267.280833][T14157] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2019'. [ 267.427141][T14162] tipc: Enabled bearer , priority 0 [ 267.441409][T14162] syzkaller0: entered promiscuous mode [ 267.447458][T14162] syzkaller0: entered allmulticast mode [ 267.458785][T14162] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 267.478664][T14164] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2023'. [ 267.491216][T14162] tipc: Resetting bearer [ 267.499517][T14161] tipc: Resetting bearer [ 267.515318][T14161] tipc: Disabling bearer [ 268.306429][T14191] xt_hashlimit: overflow, try lower: 3/0 [ 268.664631][T14214] netlink: 'syz.1.2037': attribute type 83 has an invalid length. [ 268.918008][T14231] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 269.272694][T14249] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 269.435394][T14255] team0: No ports can be present during mode change [ 269.469542][T14243] netlink: 'syz.1.2042': attribute type 6 has an invalid length. [ 270.001713][T14275] netlink: 'syz.1.2051': attribute type 1 has an invalid length. [ 270.090828][T14275] bond6: (slave bridge11): making interface the new active one [ 270.100142][T14275] bond6: (slave bridge11): Enslaving as an active interface with an up link [ 270.325169][T14283] : entered promiscuous mode [ 270.458629][T14287] __nla_validate_parse: 8 callbacks suppressed [ 270.458647][T14287] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2056'. [ 270.474546][T14288] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2056'. [ 270.785210][T14303] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 270.855061][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2061'. [ 270.922418][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.932231][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.940636][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.949390][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.961037][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.006455][T14313] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 271.135971][T14313] chnl_net:caif_netlink_parms(): no params data found [ 271.240421][T14313] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.247614][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.254908][T14313] bridge_slave_0: entered allmulticast mode [ 271.265573][T14313] bridge_slave_0: entered promiscuous mode [ 271.274264][T14313] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.287728][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.302098][T14313] bridge_slave_1: entered allmulticast mode [ 271.310179][T14313] bridge_slave_1: entered promiscuous mode [ 271.363992][T14313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.398150][T14313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.485351][T14313] team0: Port device team_slave_0 added [ 271.498225][T14313] team0: Port device team_slave_1 added [ 271.531543][T14332] netlink: 'syz.3.2065': attribute type 96 has an invalid length. [ 271.544397][T14332] netlink: 'syz.3.2065': attribute type 96 has an invalid length. [ 271.564834][T14313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.572064][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.599118][T14313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.602869][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2067'. [ 271.613936][T14313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.626457][T14336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2066'. [ 271.626452][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.626480][T14313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.757347][T14339] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 271.817862][T14313] hsr_slave_0: entered promiscuous mode [ 271.829414][T14313] hsr_slave_1: entered promiscuous mode [ 271.835956][T14313] debugfs: 'hsr0' already exists in 'hsr' [ 271.846516][T14313] Cannot create hsr debugfs directory [ 271.969480][T14351] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.977955][T14351] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.137457][T14362] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 272.393701][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2077'. [ 272.395952][T14313] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 272.464683][T14368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.506291][T14313] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 272.524473][T14313] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 272.605602][T14313] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 272.649735][T14395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2084'. [ 272.663078][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 272.880472][T14313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.917124][T14313] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.963634][T11868] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.970832][T11868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.991086][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.998267][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.052367][ T5843] Bluetooth: hci6: command tx timeout [ 273.134485][T14313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.147472][T14313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.374972][T14442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2095'. [ 273.387307][T14441] netlink: 'syz.1.2096': attribute type 3 has an invalid length. [ 273.473706][T14442] bond9: entered promiscuous mode [ 273.481117][T14442] bond9: entered allmulticast mode [ 273.497977][T14442] 8021q: adding VLAN 0 to HW filter on device bond9 [ 273.558841][T14446] 8021q: adding VLAN 0 to HW filter on device bond9 [ 273.579518][T14446] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 273.591017][T14446] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 273.729429][T14442] veth13: entered promiscuous mode [ 273.760083][T14442] bond9: (slave veth13): Enslaving as an active interface with an up link [ 273.810816][T14313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.868924][T14449] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 273.939738][T14458] bond0: (slave sit0): Error: Device type is different from other slaves [ 274.578486][T14479] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 274.588515][T14479] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 274.696690][T14313] veth0_vlan: entered promiscuous mode [ 274.728188][T14313] veth1_vlan: entered promiscuous mode [ 274.741531][T14484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2104'. [ 274.794128][T14313] veth0_macvtap: entered promiscuous mode [ 274.830103][T14313] veth1_macvtap: entered promiscuous mode [ 274.891431][T14313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.905292][T14491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.923741][T14491] bond0: (slave batadv0): Releasing backup interface [ 274.972754][T14313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.004365][ T6502] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.022206][ T6502] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.044883][ T6502] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.123988][ T6502] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.128009][ T5843] Bluetooth: hci6: command tx timeout [ 275.202387][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.218719][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.281418][T14500] netlink: zone id is out of range [ 275.294214][ T6656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.294639][T14500] netlink: zone id is out of range [ 275.307045][ T6656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.312801][T14500] netlink: zone id is out of range [ 275.323031][T14500] netlink: zone id is out of range [ 275.330150][T14500] netlink: zone id is out of range [ 275.341577][T14500] netlink: zone id is out of range [ 275.350143][T14500] netlink: zone id is out of range [ 275.357097][T14500] netlink: zone id is out of range [ 275.387555][T14500] netlink: zone id is out of range [ 275.425266][T14500] netlink: zone id is out of range [ 275.757113][T14525] __nla_validate_parse: 3 callbacks suppressed [ 275.757131][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2113'. [ 275.776455][T14523] netlink: 'syz.6.2055': attribute type 1 has an invalid length. [ 275.832773][T14525] bond9: left promiscuous mode [ 275.845209][T14525] bridge7: left promiscuous mode [ 275.871205][T14525] geneve0: left promiscuous mode [ 275.899228][ T5941] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 275.959070][T14529] gretap1: entered promiscuous mode [ 275.969531][T14523] can: request_module (can-proto-0) failed. [ 275.991687][T14541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2117'. [ 275.995833][T14523] x_tables: duplicate underflow at hook 1 [ 276.273622][T14558] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 276.335159][T14567] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2123'. [ 276.460270][T14578] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2125'. [ 276.482685][T14578] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2125'. [ 276.494752][T14553] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 276.728217][ T5898] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 276.801785][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2131'. [ 276.894763][T14609] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2133'. [ 276.922987][T14611] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2134'. [ 277.190497][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 277.199970][T14624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2139'. [ 277.209770][ T5843] Bluetooth: hci6: command tx timeout [ 277.215544][T14619] netlink: 'syz.5.2137': attribute type 1 has an invalid length. [ 277.417202][T14619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.479447][T14631] bond3: (slave veth3): Enslaving as an active interface with a down link [ 277.649561][T14644] tipc: Started in network mode [ 277.659689][T14644] tipc: Node identity 4ab0022b1e8f, cluster identity 4711 [ 277.669976][T14644] tipc: Enabled bearer , priority 0 [ 277.696380][T14643] tipc: Enabling of bearer rejected, already enabled [ 277.710924][T14644] syzkaller0: entered promiscuous mode [ 277.716658][T14644] syzkaller0: entered allmulticast mode [ 277.760075][T14643] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 277.872112][T14642] tipc: Resetting bearer [ 277.921845][T14642] tipc: Disabling bearer [ 278.148421][T14659] netem: unknown loss type 0 [ 278.170813][T14659] netem: change failed [ 278.713155][T14691] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 279.072822][T14715] vlan3: entered promiscuous mode [ 279.080974][T14715] batadv0: entered promiscuous mode [ 279.288210][ T5847] Bluetooth: hci6: command tx timeout [ 279.293207][T14725] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 279.559768][T14724] delete_channel: no stack [ 279.712636][T14738] netlink: 'syz.0.2170': attribute type 39 has an invalid length. [ 280.164575][T14743] veth6: entered allmulticast mode [ 280.853721][T14799] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 280.882064][T14805] net_ratelimit: 44 callbacks suppressed [ 280.882081][T14805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.013450][T14811] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 281.307388][T14824] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 281.368230][ T5847] Bluetooth: hci6: command 0x0405 tx timeout [ 281.419719][T14835] __nla_validate_parse: 28 callbacks suppressed [ 281.419738][T14835] netlink: 1315 bytes leftover after parsing attributes in process `syz.3.2197'. [ 281.549591][T14850] netlink: 'syz.3.2200': attribute type 1 has an invalid length. [ 281.634671][T14850] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 281.646172][T14850] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 281.659951][T14856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2200'. [ 281.713473][T14862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2200'. [ 281.737348][T14864] xt_connbytes: Forcing CT accounting to be enabled [ 281.756426][T14864] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 281.863946][T14856] 8021q: adding VLAN 0 to HW filter on device bond11 [ 281.908028][T14850] macvlan3: entered promiscuous mode [ 281.913390][T14850] macvlan3: entered allmulticast mode [ 281.919761][T14850] bond11: entered promiscuous mode [ 281.925351][T14850] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 281.938303][T14850] bond11: left promiscuous mode [ 281.974833][T14866] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 282.271078][T14879] netlink: 'syz.0.2204': attribute type 8 has an invalid length. [ 282.432680][T14879] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 282.480579][T14873] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 282.732642][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'. [ 282.954605][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2215'. [ 282.998817][T14914] macvtap1: entered promiscuous mode [ 283.007218][T14916] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 283.016939][T14914] dummy0: entered promiscuous mode [ 283.025028][T14914] macvtap1: entered allmulticast mode [ 283.030981][T14914] dummy0: entered allmulticast mode [ 283.117247][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2218'. [ 283.122919][T14910] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 283.151757][T14927] bond10: (slave geneve2): making interface the new active one [ 283.160276][T14927] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 283.180582][ T147] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.191479][ T147] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.216732][ T147] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.225365][ T147] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.360271][T14933] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 283.822141][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2224'. [ 283.844612][ T5911] IPVS: starting estimator thread 0... [ 283.848206][T14950] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2224'. [ 283.902460][T14953] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.957735][T14954] IPVS: using max 33 ests per chain, 79200 per kthread [ 283.975613][ T3508] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.976498][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2224'. [ 284.000747][ T3508] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.012909][T14950] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2224'. [ 284.071858][T14953] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.119018][ T3508] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.135991][ T3508] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.416876][T14956] pim6reg1: entered promiscuous mode [ 284.432651][T14956] pim6reg1: entered allmulticast mode [ 284.806793][T14986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.906334][T14953] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.927908][T14985] 8021q: VLANs not supported on ip6_vti0 [ 285.141375][T15004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.217281][T14953] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.529435][ T5847] Bluetooth: hci6: command 0x0405 tx timeout [ 285.571558][T15018] geneve4: entered promiscuous mode [ 285.576793][T15018] geneve4: entered allmulticast mode [ 285.648761][T11869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 1536 - 0 [ 285.677845][T11869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 1536 - 0 [ 285.699505][T11869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 1536 - 0 [ 285.718339][T11869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 1536 - 0 [ 285.763721][ T6502] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.884812][T15030] siw: device registration error -23 [ 285.902944][ T6656] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.952103][ T6502] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.041781][ T6502] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.291621][T15055] syzkaller1: entered promiscuous mode [ 286.328218][T15055] syzkaller1: entered allmulticast mode [ 286.404519][T15056] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 286.649599][T15056] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 286.714905][T15043] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 286.810864][T15056] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 286.929261][T15056] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 287.081333][ T3508] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.094618][T15090] __nla_validate_parse: 6 callbacks suppressed [ 287.094634][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2249'. [ 287.142205][T15101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2252'. [ 287.169205][ T6656] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.210138][ T6656] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.268792][ T3508] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.286028][T15108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2253'. [ 287.450760][T15111] syzkaller0: entered promiscuous mode [ 287.458353][T15111] syzkaller0: entered allmulticast mode [ 287.729982][T15135] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2259'. [ 287.741716][T15135] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2259'. [ 287.751097][T15135] netlink: 'syz.0.2259': attribute type 6 has an invalid length. [ 287.759379][T15135] netlink: 'syz.0.2259': attribute type 5 has an invalid length. [ 287.770335][T15135] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2259'. [ 287.807518][T15139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2257'. [ 287.828836][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 289.189397][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2262'. [ 289.200378][T15149] netlink: 'syz.6.2262': attribute type 1 has an invalid length. [ 289.213234][T15148] netlink: 'syz.6.2262': attribute type 1 has an invalid length. [ 289.284495][T15149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.452663][T15170] netlink: 'syz.6.2266': attribute type 1 has an invalid length. [ 289.542973][T15164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2265'. [ 289.611793][T15170] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 289.873270][T15181] syzkaller0: entered promiscuous mode [ 289.930760][T15181] syzkaller0: entered allmulticast mode [ 290.075601][T15194] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 290.213327][T15193] nbd: device at index 6 is going down [ 292.666262][T15225] veth0: entered promiscuous mode [ 292.685603][T15225] veth0: left promiscuous mode [ 292.761693][T15247] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 292.895041][T15259] __nla_validate_parse: 3 callbacks suppressed [ 292.895061][T15259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2276'. [ 292.936666][T15261] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2277'. [ 293.078002][T15270] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2281'. [ 293.191595][T15276] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2282'. [ 293.528108][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 293.550220][T15299] pim6reg: entered allmulticast mode [ 293.560691][T15301] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2286'. [ 293.570531][T15299] pim6reg: left allmulticast mode [ 293.637081][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2288'. [ 293.813991][T15316] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2289'. [ 294.457763][ T3508] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.485504][ T3508] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.529115][T11869] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.568449][T11869] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.676223][T15353] can: request_module (can-proto-0) failed. [ 294.742560][T15355] batadv0: entered promiscuous mode [ 294.774907][T15355] macvtap1: entered promiscuous mode [ 294.798375][T15355] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 294.859699][T15355] batadv0: left promiscuous mode [ 294.926831][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2302'. [ 295.274557][T15398] tipc: Enabled bearer , priority 0 [ 295.304121][T15398] syzkaller0: entered promiscuous mode [ 295.344352][T15398] syzkaller0: entered allmulticast mode [ 295.378440][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 295.423106][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 295.908018][T15404] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 295.971037][T15421] syzkaller0: entered promiscuous mode [ 295.992867][T15421] syzkaller0: entered allmulticast mode [ 296.178598][T15397] tipc: Resetting bearer [ 296.254762][T15397] tipc: Disabling bearer [ 296.300469][T15435] netlink: 'syz.1.2315': attribute type 83 has an invalid length. [ 296.325924][T15437] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 296.514597][T15437] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 296.656149][T15437] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 296.840527][T15437] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 297.016263][ T1168] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 297.078494][ T1087] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 297.165115][ T1168] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 297.216462][ T1168] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 297.277110][T15495] syzkaller0: entered promiscuous mode [ 297.283170][T15495] syzkaller0: entered allmulticast mode [ 297.488921][T15505] macsec1: entered promiscuous mode [ 297.494280][T15505] macsec1: entered allmulticast mode [ 297.524074][T15504] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 297.710497][T15515] Cannot find map_set index 135 as target [ 297.922469][T15522] __nla_validate_parse: 2 callbacks suppressed [ 297.922487][T15522] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2335'. [ 297.925400][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2334'. [ 297.961485][T15524] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 297.970709][T15524] bridge1: entered allmulticast mode [ 297.978059][T15524] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2334'. [ 298.043724][T15526] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 298.069393][T15528] bridge_slave_0: left allmulticast mode [ 298.075082][T15528] bridge_slave_0: left promiscuous mode [ 298.081065][T15528] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.092543][T15528] bridge_slave_1: left allmulticast mode [ 298.098837][T15528] bridge_slave_1: left promiscuous mode [ 298.104708][T15528] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.119110][T15528] bond0: (slave bond_slave_0): Releasing backup interface [ 298.141758][T15528] bond0: (slave bond_slave_1): Releasing backup interface [ 298.186480][T15528] team0: Port device team_slave_0 removed [ 298.217119][T15528] team0: Port device team_slave_1 removed [ 298.264100][T15528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.289119][T15528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.314732][T15528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.344867][T15528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.363151][T15528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.903609][T15561] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 298.926197][T15568] netlink: 'syz.0.2345': attribute type 39 has an invalid length. [ 299.121196][T15585] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 299.209800][T15589] veth0: entered promiscuous mode [ 299.238161][T15589] veth0: left promiscuous mode [ 299.321948][T15575] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 299.753751][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'. [ 299.802108][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'. [ 299.835909][T15628] delete_channel: no stack [ 299.906108][T15637] netlink: 'syz.1.2361': attribute type 6 has an invalid length. [ 299.921713][T15637] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2361'. [ 300.028287][T15646] netlink: 'syz.6.2363': attribute type 1 has an invalid length. [ 300.125595][T15646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.164631][T15642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.172650][T15642] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 300.185171][T15642] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 300.249841][T15646] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 300.279121][T15646] bond2: (slave wlan0): Opening slave failed [ 300.479105][T15675] netlink: 'syz.6.2369': attribute type 10 has an invalid length. [ 300.515433][T15675] team0: Port device syz_tun added [ 301.155165][T15716] bridge0: port 1(macvtap0) entered blocking state [ 301.178384][T15716] bridge0: port 1(macvtap0) entered disabled state [ 301.185237][T15716] macvtap0: entered allmulticast mode [ 301.198042][T15716] bridge0: entered allmulticast mode [ 301.204794][T15716] macvtap0: left allmulticast mode [ 301.227746][T15716] bridge0: left allmulticast mode [ 301.272792][T15721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2385'. [ 301.690993][T15739] netlink: 584 bytes leftover after parsing attributes in process `syz.0.2387'. [ 302.077852][T15749] netlink: 'syz.3.2389': attribute type 12 has an invalid length. [ 302.156735][T15749] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2389'. [ 302.518154][T15762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2394'. [ 302.544466][T15759] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 302.728717][T15770] sctp: [Deprecated]: syz.5.2395 (pid 15770) Use of int in max_burst socket option. [ 302.728717][T15770] Use struct sctp_assoc_value instead [ 302.854418][T15773] netlink: 'syz.0.2396': attribute type 3 has an invalid length. [ 303.127108][T15788] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 303.185824][T15793] netlink: 'syz.0.2400': attribute type 8 has an invalid length. [ 303.346845][T15793] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 303.678549][T15816] __nla_validate_parse: 2 callbacks suppressed [ 303.678562][T15816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2407'. [ 303.690597][T15817] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2408'. [ 303.750436][T15816] bridge11: port 1(ip6gretap4) entered blocking state [ 303.757503][T15816] bridge11: port 1(ip6gretap4) entered disabled state [ 303.766152][T15816] ip6gretap4: entered allmulticast mode [ 303.795349][T15816] ip6gretap4: entered promiscuous mode [ 303.842363][T15819] bridge11: port 2(veth9) entered blocking state [ 303.850017][T15819] bridge11: port 2(veth9) entered disabled state [ 303.854501][T15823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2410'. [ 303.858837][T15819] veth9: entered allmulticast mode [ 303.889424][T15819] veth9: entered promiscuous mode [ 303.895423][T15819] bridge11: port 2(veth9) entered blocking state [ 303.901925][T15819] bridge11: port 2(veth9) entered forwarding state [ 304.359731][ T1087] bridge11: port 2(veth9) entered disabled state [ 304.416376][T15842] syzkaller0: entered promiscuous mode [ 304.422492][T15842] syzkaller0: entered allmulticast mode [ 304.488515][ T5843] Bluetooth: hci6: command 0x0405 tx timeout [ 304.711380][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2417'. [ 304.785149][T15849] netlink: 'syz.3.2418': attribute type 10 has an invalid length. [ 304.803859][T15849] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2418'. [ 304.825920][T15851] netlink: 'syz.3.2418': attribute type 10 has an invalid length. [ 304.840579][T15851] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2418'. [ 317.212182][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 339.770404][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 362.125032][T15872] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.2421'. [ 362.150277][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 362.159969][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 362.223972][T15878] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2426'. [ 362.256021][T15878] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 362.269780][T15878] openvswitch: netlink: Message has 75 unknown bytes. [ 362.308860][T15883] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2427'. [ 362.357816][T15882] netlink: 'syz.0.2427': attribute type 13 has an invalid length. [ 362.388643][T15884] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2427'. [ 362.486280][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.498610][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.507106][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.516689][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.525749][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.569631][T15891] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 362.615679][T15901] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2432'. [ 362.625748][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2432'. [ 362.636849][T15901] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2432'. [ 362.716392][T15902] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 363.106977][T15931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2438'. [ 363.149594][T15891] chnl_net:caif_netlink_parms(): no params data found [ 363.312955][T15935] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 363.330918][T15935] bond12 (unregistering): Released all slaves [ 363.389309][T15938] bond0: entered promiscuous mode [ 363.412264][T15938] batadv0: entered promiscuous mode [ 363.421727][T15938] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 363.443865][T15938] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 363.659638][T15957] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 363.695211][T15958] bond11 (unregistering): (slave geneve3): Releasing backup interface [ 363.715482][T15958] bond11 (unregistering): Released all slaves [ 363.732669][T15891] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.740487][T15891] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.748292][T15891] bridge_slave_0: entered allmulticast mode [ 363.755544][T15891] bridge_slave_0: entered promiscuous mode [ 363.772317][T15891] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.798418][T15891] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.805702][T15891] bridge_slave_1: entered allmulticast mode [ 363.822225][T15891] bridge_slave_1: entered promiscuous mode [ 364.000799][T15891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.021359][T15891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.095117][T15982] netlink: 'syz.1.2452': attribute type 39 has an invalid length. [ 364.115643][T15891] team0: Port device team_slave_0 added [ 364.136975][T15891] team0: Port device team_slave_1 added [ 364.245356][T15891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.256203][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.289264][T15891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.331129][T15891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.358309][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.414281][T15891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.572826][ T5843] Bluetooth: hci7: command tx timeout [ 364.679640][T15891] hsr_slave_0: entered promiscuous mode [ 364.686405][T15891] hsr_slave_1: entered promiscuous mode [ 364.713217][T15891] debugfs: 'hsr0' already exists in 'hsr' [ 364.721988][T15891] Cannot create hsr debugfs directory [ 364.865825][T16027] xt_TCPMSS: Only works on TCP SYN packets [ 365.111892][T16031] tun0: tun_chr_ioctl cmd 1074025681 [ 365.212831][T16046] netlink: 'syz.1.2468': attribute type 9 has an invalid length. [ 365.332258][T16052] netlink: 'syz.0.2469': attribute type 1 has an invalid length. [ 365.358651][T16046] netlink: 'syz.1.2468': attribute type 7 has an invalid length. [ 365.413059][T16052] 8021q: adding VLAN 0 to HW filter on device bond11 [ 365.432985][T16057] bond11: (slave dummy0): making interface the new active one [ 365.442050][T16057] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 365.464196][T16046] netlink: 'syz.1.2468': attribute type 7 has an invalid length. [ 365.479856][T16043] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 365.591792][T16048] bond11 (unregistering): (slave dummy0): Releasing active interface [ 365.603477][T16048] bond11 (unregistering): Released all slaves [ 365.626589][ T1168] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.636180][ T1168] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.659126][T16055] syzkaller0: entered promiscuous mode [ 365.677175][T16055] syzkaller0: entered allmulticast mode [ 365.760973][ T1168] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.773278][ T1168] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.022445][T16070] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 366.071967][T16070] team1: entered promiscuous mode [ 366.077051][T16070] team1: entered allmulticast mode [ 366.224325][T15891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 366.267416][T15891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 366.293411][T15891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 366.385782][T15891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 366.648122][ T5843] Bluetooth: hci7: command tx timeout [ 366.660816][T15891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.701195][T16118] syzkaller1: entered promiscuous mode [ 366.706696][T16118] syzkaller1: entered allmulticast mode [ 366.762870][T16115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.782249][T15891] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.825309][T11869] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.832517][T11869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.873349][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.880503][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.910293][T16131] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 366.967281][T16133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.283371][T16155] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 367.349583][T16155] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 367.397427][T16162] __nla_validate_parse: 12 callbacks suppressed [ 367.397444][T16162] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2493'. [ 367.441964][T16155] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 367.485689][T15891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.505392][T16155] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 367.548564][T16169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2497'. [ 367.623375][ T3951] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 367.666096][ T3951] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 367.715780][ T1150] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 367.763559][T11869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 368.141897][T15891] veth0_vlan: entered promiscuous mode [ 368.176960][T16192] netlink: 'syz.3.2503': attribute type 1 has an invalid length. [ 368.184956][T15891] veth1_vlan: entered promiscuous mode [ 368.265097][T16192] bond12: entered promiscuous mode [ 368.272519][T16200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2505'. [ 368.278150][T16192] 8021q: adding VLAN 0 to HW filter on device bond12 [ 368.386505][T16192] bond12: (slave bridge13): making interface the new active one [ 368.394833][T16192] bridge13: entered promiscuous mode [ 368.405366][T16192] bond12: (slave bridge13): Enslaving as an active interface with an up link [ 368.430099][T16205] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2507'. [ 368.445682][T15891] veth0_macvtap: entered promiscuous mode [ 368.465821][T16206] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2507'. [ 368.499612][T15891] veth1_macvtap: entered promiscuous mode [ 368.557137][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2509'. [ 368.573041][T15891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.612925][T15891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.650608][ T1168] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.679666][ T1168] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.690429][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 368.713832][ T1168] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.729364][ T5843] Bluetooth: hci7: command tx timeout [ 368.739847][T16232] netlink: 'syz.3.2513': attribute type 8 has an invalid length. [ 368.783689][T16228] team0: entered promiscuous mode [ 368.828246][T16228] team0: entered allmulticast mode [ 368.847811][T16228] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.855102][ T1168] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.093739][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.112200][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'. [ 369.118165][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.166709][T16258] openvswitch: netlink: Flow actions attr not present in new flow. [ 369.206568][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.238691][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.300971][T16265] netlink: 'syz.3.2521': attribute type 1 has an invalid length. [ 369.313350][T16265] netlink: 'syz.3.2521': attribute type 2 has an invalid length. [ 369.402238][T16273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2523'. [ 369.456175][T16278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2523'. [ 369.516018][T16283] tipc: Disabling bearer [ 369.537480][T16276] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 369.908165][T16310] netlink: 'syz.0.2531': attribute type 14 has an invalid length. [ 369.950042][T16311] netlink: 'syz.0.2531': attribute type 14 has an invalid length. [ 370.177286][T16325] netlink: 'syz.0.2536': attribute type 1 has an invalid length. [ 370.271443][T16330] ip6gre1: entered promiscuous mode [ 370.276997][T16330] ip6gre1: entered allmulticast mode [ 370.468237][T16349] netlink: zone id is out of range [ 370.480988][T16349] netlink: get zone limit has 8 unknown bytes [ 370.520613][T16343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.808094][ T5843] Bluetooth: hci7: command tx timeout [ 370.920605][T16372] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 371.781702][T16426] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 371.902981][T16435] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20003 [ 371.980096][T16421] netlink: 'syz.5.2564': attribute type 32 has an invalid length. [ 372.106664][T16421] bond4: option coupled_control: invalid value (12) [ 372.115240][T16421] bond4 (unregistering): Released all slaves [ 372.358781][T16456] netlink: 'syz.7.2573': attribute type 1 has an invalid length. [ 372.601710][T16470] netlink: 'syz.5.2578': attribute type 12 has an invalid length. [ 372.641484][T16475] __nla_validate_parse: 12 callbacks suppressed [ 372.641502][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2579'. [ 372.845576][T16483] bond1: entered allmulticast mode [ 372.878994][T16483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.000781][T16488] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 373.020251][T16491] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 373.183555][T16505] validate_nla: 19 callbacks suppressed [ 373.183573][T16505] netlink: 'syz.1.2585': attribute type 10 has an invalid length. [ 373.242983][T16505] team0: Device veth1_macvtap failed to register rx_handler [ 373.554019][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2588'. [ 373.565053][T16519] netlink: 'syz.0.2588': attribute type 3 has an invalid length. [ 373.582676][T16513] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 373.595753][T16519] netlink: 211792 bytes leftover after parsing attributes in process `syz.0.2588'. [ 373.742446][T16524] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 373.814540][T16525] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 374.155333][T16558] xt_hashlimit: size too large, truncated to 1048576 [ 374.314951][T16572] SET target dimension over the limit! [ 374.370957][T16571] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.392870][T16571] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 1536 - 0 [ 374.406922][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2601'. [ 374.416293][T16577] netlink: 'syz.1.2601': attribute type 5 has an invalid length. [ 374.462917][T16577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2601'. [ 374.566798][T16577] geneve5: entered promiscuous mode [ 374.587951][T16577] geneve5: entered allmulticast mode [ 374.606980][T16571] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.625412][T16571] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 1536 - 0 [ 374.649079][T16577] syzkaller0: entered promiscuous mode [ 374.654884][T16577] syzkaller0: entered allmulticast mode [ 374.662287][T11868] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 374.676823][T16582] tipc: Enabled bearer , priority 0 [ 374.702761][T11868] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 374.720027][T16584] netlink: 'syz.0.2604': attribute type 1 has an invalid length. [ 374.727073][T16577] tipc: Resetting bearer [ 374.870638][T16587] batman_adv: batadv0: Adding interface: macsec1 [ 374.876986][T16587] batman_adv: batadv0: The MTU of interface macsec1 is too small (1504) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 374.918284][T16587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.929462][T16587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.940220][T16587] batman_adv: batadv0: Interface activated: macsec1 [ 374.976753][T16590] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 375.142516][T16570] tipc: Resetting bearer [ 375.169360][T16570] tipc: Disabling bearer [ 375.379139][T16597] netlink: 'syz.5.2607': attribute type 1 has an invalid length. [ 375.429280][T16597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 375.465064][T16603] bond4: (slave ip6gretap3): making interface the new active one [ 375.474661][T16603] bond4: (slave ip6gretap3): Enslaving as an active interface with an up link [ 375.494852][T16597] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2607'. [ 375.505866][T16597] erspan0: entered allmulticast mode [ 375.525303][T16597] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 375.577833][T16597] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 375.747429][T16607] bond0: option resend_igmp: invalid value (4096) [ 375.754187][T16607] bond0: option resend_igmp: allowed values 0 - 255 [ 375.824296][T16611] netlink: 'syz.5.2611': attribute type 12 has an invalid length. [ 375.834317][T16610] netlink: 'syz.5.2611': attribute type 12 has an invalid length. [ 375.848523][T16608] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2609'. [ 375.870553][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2609'. [ 376.443340][T16571] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.454115][T16571] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 1536 - 0 [ 376.464498][T16571] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 376.525219][T16571] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.539337][T16571] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 1536 - 0 [ 376.549708][T16571] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 376.570838][T16628] netlink: 'syz.3.2616': attribute type 1 has an invalid length. [ 376.589107][T16628] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 376.629650][ T1334] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.646395][ T1334] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 376.656404][ T1334] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 1536 - 0 [ 376.696800][ T3951] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.706043][ T3951] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 376.714422][ T3951] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 1536 - 0 [ 376.750691][ T3951] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.766213][ T3951] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 376.778886][ T3951] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 1536 - 0 [ 376.802293][ T1087] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.813649][ T1087] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 376.822281][ T1087] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 1536 - 0 [ 377.055606][T16650] netlink: 'syz.1.2621': attribute type 1 has an invalid length. [ 377.096742][T16657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.125336][T16650] 8021q: adding VLAN 0 to HW filter on device bond7 [ 377.209642][T16658] bond7: (slave veth9): Enslaving as an active interface with a down link [ 377.231281][T16657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.248474][T16667] SET target dimension over the limit! [ 377.285439][T16650] vlan0: entered allmulticast mode [ 377.291761][T16650] veth1: entered allmulticast mode [ 377.298527][T16650] bond7: (slave vlan0): Opening slave failed [ 377.353613][T16674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2628'. [ 377.412220][T16676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2629'. [ 377.425236][T16674] bond5: entered promiscuous mode [ 377.431920][T16674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.458736][T16679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.465773][T16679] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 377.490390][T16679] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 377.525766][T16674] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 377.566426][T16684] syzkaller0: entered promiscuous mode [ 377.598770][T16684] syzkaller0: entered allmulticast mode [ 377.706520][T16688] bond8: option arp_validate: invalid value (18446744073491447809) [ 377.752647][T16688] bond8 (unregistering): Released all slaves [ 377.770092][T16696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2632'. [ 378.243744][T16718] xt_TCPMSS: Only works on TCP SYN packets [ 378.607187][T16714] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 378.654214][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 379.266805][T16733] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 379.431272][T16736] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2643'. [ 380.692089][T16753] syzkaller0: entered promiscuous mode [ 380.721333][T16753] syzkaller0: entered allmulticast mode [ 380.742829][T16760] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2651'. [ 380.765538][T16761] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2651'. [ 380.780140][T16758] netlink: 'syz.7.2650': attribute type 13 has an invalid length. [ 380.802121][T16758] netlink: 'syz.7.2650': attribute type 17 has an invalid length. [ 380.830673][T16753] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 380.964187][T16758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.080802][T16771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2653'. [ 381.180442][T16787] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2657'. [ 381.198220][T16789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2658'. [ 381.286061][T16793] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 381.345716][T16805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.435650][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2660'. [ 381.465397][T16806] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 381.520401][T16812] netlink: 'syz.5.2663': attribute type 1 has an invalid length. [ 381.563029][T16810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.708736][T16812] 8021q: adding VLAN 0 to HW filter on device bond6 [ 381.743415][T16819] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2665'. [ 381.756294][T16814] bond6: (slave gretap1): making interface the new active one [ 381.767103][T16814] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 381.840935][T16817] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2665'. [ 382.039897][T16828] netlink: 'syz.7.2668': attribute type 13 has an invalid length. [ 382.077656][T16828] netlink: 'syz.7.2668': attribute type 18 has an invalid length. [ 382.334560][T16843] netlink: 'syz.1.2672': attribute type 18 has an invalid length. [ 382.348186][T16835] netlink: 'syz.5.2670': attribute type 178 has an invalid length. [ 382.364631][T16833] bond14: option arp_validate: invalid value (18446744073491447809) [ 382.389222][T16833] bond14 (unregistering): Released all slaves [ 382.413546][T16849] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 382.435737][T16840] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 382.514976][T16850] bond11: entered allmulticast mode [ 382.528370][T16850] 8021q: adding VLAN 0 to HW filter on device bond11 [ 382.685003][T16855] netlink: 'syz.5.2674': attribute type 5 has an invalid length. [ 382.796909][T16867] __nla_validate_parse: 10 callbacks suppressed [ 382.796927][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2674'. [ 382.821317][T16861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2675'. [ 382.963607][T16867] hsr_slave_1 (unregistering): left promiscuous mode [ 383.082489][T16869] xt_hashlimit: max too large, truncated to 1048576 [ 383.103619][T16873] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 383.112229][T16873] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 383.183933][T16874] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 383.226821][T16881] xt_l2tp: missing protocol rule (udp|l2tpip) [ 383.283263][T16881] veth1: entered allmulticast mode [ 383.352410][T16874] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 383.430397][T16874] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 383.514751][T16896] netlink: 'syz.1.2687': attribute type 1 has an invalid length. [ 383.525685][T16874] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 383.641977][T16896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2687'. [ 383.666732][T16907] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 383.690364][T16911] sctp: [Deprecated]: syz.3.2690 (pid 16911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.690364][T16911] Use struct sctp_sack_info instead [ 383.691042][T16907] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 383.791951][T16896] bond8: (slave bridge13): Enslaving as an active interface with a down link [ 383.845729][T16918] netlink: 'syz.7.2692': attribute type 3 has an invalid length. [ 383.855880][T16914] bond8: (slave bridge14): Enslaving as an active interface with a down link [ 383.931704][ T6502] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 383.989183][T16929] 8021q: VLANs not supported on wg2 [ 384.007076][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2693'. [ 384.007375][T11868] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 384.067871][ T6656] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 384.086371][ T6656] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 384.251314][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2699'. [ 384.260581][T16936] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 384.424123][T16950] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2701'. [ 384.639191][T16962] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 384.821994][T16971] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 384.854739][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2709'. [ 384.867031][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2709'. [ 384.955010][T16982] pimreg: entered allmulticast mode [ 384.979489][T16986] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2712'. [ 385.300365][T16998] sctp: [Deprecated]: syz.5.2716 (pid 16998) Use of int in max_burst socket option. [ 385.300365][T16998] Use struct sctp_assoc_value instead [ 385.335738][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2715'. [ 385.662576][T17006] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 385.789906][ T30] audit: type=1800 audit(1765746929.959:8): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2723" name=CB dev="tmpfs" ino=202 res=0 errno=0 [ 387.243488][T17094] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 387.464310][T17059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.751961][T17122] syzkaller0: entered promiscuous mode [ 387.760393][T17122] syzkaller0: entered allmulticast mode [ 388.053889][T17126] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 388.171500][T17116] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 388.646480][T17156] tipc: Failed to remove unknown binding: 66,1,1/0:3786574400/3786574402 [ 388.659019][T17156] tipc: Failed to remove unknown binding: 66,1,1/0:3786574400/3786574402 [ 388.672105][T17156] tipc: Failed to remove unknown binding: 66,1,1/0:3786574400/3786574402 [ 388.726493][T17162] bpq0: entered allmulticast mode [ 388.908576][T17169] validate_nla: 1 callbacks suppressed [ 388.908594][T17169] netlink: 'syz.1.2754': attribute type 3 has an invalid length. [ 388.963027][T17169] syz_tun: entered allmulticast mode [ 388.971206][T17168] syz_tun: left allmulticast mode [ 389.609711][T17194] netlink: 'syz.5.2761': attribute type 1 has an invalid length. [ 389.768047][T17194] 8021q: adding VLAN 0 to HW filter on device bond7 [ 389.798278][ T5847] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 389.809510][ T5847] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 389.818594][ T5847] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 389.835677][ T5847] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 389.844094][ T5847] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 389.927671][T17199] 8021q: adding VLAN 0 to HW filter on device bond7 [ 389.956346][T17199] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 389.968550][T17199] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 390.038841][T17210] syz.3.2763 (17210) used obsolete PPPIOCDETACH ioctl [ 390.039686][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.093532][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.121630][T17203] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 390.275453][T17218] __nla_validate_parse: 9 callbacks suppressed [ 390.275470][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2765'. [ 390.335538][T17218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2765'. [ 390.439239][T17228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2769'. [ 390.540683][T17231] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 390.556273][T17203] chnl_net:caif_netlink_parms(): no params data found [ 390.651690][T17237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2771'. [ 390.865562][T17250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2772'. [ 391.058496][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'. [ 391.135931][T17268] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2777'. [ 391.198745][T17203] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.223083][T17203] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.258973][T17203] bridge_slave_0: entered allmulticast mode [ 391.276797][T17203] bridge_slave_0: entered promiscuous mode [ 391.309786][T17203] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.332182][T17203] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.364625][T17203] bridge_slave_1: entered allmulticast mode [ 391.385975][T17203] bridge_slave_1: entered promiscuous mode [ 391.393093][T17278] netlink: 'syz.7.2778': attribute type 2 has an invalid length. [ 391.405787][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2778'. [ 391.448054][T17277] bond14: ARP target 9.0.0.0 is already present [ 391.454499][T17277] bond14: option arp_ip_target: invalid value (9) [ 391.465808][T17277] bond14 (unregistering): Released all slaves [ 391.583979][T17284] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2781'. [ 391.640019][T17289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.645910][T17203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.664871][T17203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.739131][T17297] netlink: 'syz.5.2784': attribute type 11 has an invalid length. [ 391.837041][T17303] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2787'. [ 391.848270][T17203] team0: Port device team_slave_0 added [ 391.902944][T17203] team0: Port device team_slave_1 added [ 391.929965][ T5847] Bluetooth: hci8: command tx timeout [ 391.965746][T17203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.972978][T17203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.999000][T17203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.013639][T17203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.022832][T17203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.049985][T17203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.192594][T17203] hsr_slave_0: entered promiscuous mode [ 392.209026][T17203] hsr_slave_1: entered promiscuous mode [ 392.220421][T17203] debugfs: 'hsr0' already exists in 'hsr' [ 392.226268][T17203] Cannot create hsr debugfs directory [ 392.314576][T17323] IPVS: persistence engine module ip_vs_pe_ not found [ 392.673530][T17203] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 392.820304][T17203] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 392.896714][T17203] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 392.980092][T17203] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 393.285977][T17203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.311761][T17203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.369745][T17376] bridge0: entered promiscuous mode [ 393.377285][T17376] bridge0: port 3(macvtap1) entered blocking state [ 393.388816][T17376] bridge0: port 3(macvtap1) entered disabled state [ 393.402068][T17376] macvtap1: entered allmulticast mode [ 393.407848][T17376] bridge0: entered allmulticast mode [ 393.415576][T17376] macvtap1: left allmulticast mode [ 393.421398][T17376] bridge0: left allmulticast mode [ 393.432017][T17376] bridge0: left promiscuous mode [ 393.471849][T17203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.484483][T17203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.766620][T17203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.827311][T17203] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.837888][T17409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.906465][T11868] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.913666][T11868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.954263][T17413] netlink: 'syz.3.2818': attribute type 1 has an invalid length. [ 393.954396][T11868] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.969197][T11868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.021546][ T5847] Bluetooth: hci8: command tx timeout [ 394.315486][T17433] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 394.527694][T17451] bond9: option arp_validate: invalid value (18446744073491447809) [ 394.588329][T17451] bond9 (unregistering): Released all slaves [ 394.713928][T17203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.828848][T17203] veth0_vlan: entered promiscuous mode [ 394.846990][T17470] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 394.889945][T17203] veth1_vlan: entered promiscuous mode [ 395.121470][T17203] veth0_macvtap: entered promiscuous mode [ 395.146829][T17203] veth1_macvtap: entered promiscuous mode [ 395.174349][T17203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.210525][T17203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.255857][ T3508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.285238][ T3508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.318400][ T3508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.325770][T17491] x_tables: duplicate underflow at hook 1 [ 395.354785][T17490] __nla_validate_parse: 7 callbacks suppressed [ 395.354802][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 395.377730][ T3508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.581072][T17507] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2838'. [ 395.646855][T17507] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2838'. [ 395.667353][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.684752][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.826546][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.865920][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.974353][T17524] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 396.088198][ T5847] Bluetooth: hci8: command tx timeout [ 396.455549][ T5852] IPVS: starting estimator thread 0... [ 396.569121][T17549] IPVS: using max 30 ests per chain, 72000 per kthread [ 397.268800][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 397.280104][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 397.288593][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 397.296553][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 397.304333][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 397.336517][T17583] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2859'. [ 397.391839][T17585] xt_policy: output policy not valid in PREROUTING and INPUT [ 397.429552][T17579] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 397.871509][T17603] netlink: 'syz.7.2863': attribute type 11 has an invalid length. [ 397.885432][T17604] netlink: 'syz.7.2863': attribute type 11 has an invalid length. [ 397.921598][T17603] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2863'. [ 398.032681][T17579] chnl_net:caif_netlink_parms(): no params data found [ 398.129575][T17609] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 398.130751][T17588] syzkaller1: entered allmulticast mode [ 398.170506][ T5847] Bluetooth: hci8: command tx timeout [ 398.421682][T17624] netlink: 'syz.0.2869': attribute type 1 has an invalid length. [ 398.471301][T17579] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.488033][T17579] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.500280][T17579] bridge_slave_0: entered allmulticast mode [ 398.518559][T17579] bridge_slave_0: entered promiscuous mode [ 398.619505][T17579] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.645536][T17579] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.670542][T17579] bridge_slave_1: entered allmulticast mode [ 398.678505][T17579] bridge_slave_1: entered promiscuous mode [ 398.851254][T17579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.866010][T17579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.052761][T17579] team0: Port device team_slave_0 added [ 399.061984][T17579] team0: Port device team_slave_1 added [ 399.178370][T17579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.193548][T17579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.224970][T17579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.231345][T17669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2878'. [ 399.263135][T17579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.277033][T17579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.332044][T17579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.344451][T17665] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 399.358238][T17671] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2880'. [ 399.368842][ T5847] Bluetooth: hci1: command tx timeout [ 399.386377][T17673] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2881'. [ 399.814804][T17579] hsr_slave_0: entered promiscuous mode [ 399.828953][T17579] hsr_slave_1: entered promiscuous mode [ 399.845703][T17579] debugfs: 'hsr0' already exists in 'hsr' [ 399.854897][T17579] Cannot create hsr debugfs directory [ 399.871208][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 400.045143][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 400.176693][T17675] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 400.674434][T17733] netlink: 'syz.5.2891': attribute type 3 has an invalid length. [ 400.724602][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2892'. [ 400.917258][T17744] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 400.926562][T17745] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 401.032903][T17752] netlink: 'syz.0.2898': attribute type 10 has an invalid length. [ 401.115055][T17579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.149602][T17757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'. [ 401.161574][T17579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.182673][T17579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.248212][T17579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 401.330229][T17760] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 401.410519][T17761] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 401.448895][ T5847] Bluetooth: hci1: command tx timeout [ 401.805449][T17793] bpq0: left allmulticast mode [ 401.830814][T17800] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2907'. [ 401.863947][T17579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.897857][T17800] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2907'. [ 401.909431][T17579] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.923587][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.930788][ T6487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.938929][T17800] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2907'. [ 402.004612][T17810] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2910'. [ 402.122164][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.129363][ T4178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.141057][ T5911] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 402.161381][ T5911] syz2: Port: 1 Link ACTIVE [ 402.315317][T17826] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2912'. [ 402.381331][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2915'. [ 402.434681][T17830] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 402.811018][T17850] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2919'. [ 402.860393][T17579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.910063][T17852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2919'. [ 402.953741][T17579] veth0_vlan: entered promiscuous mode [ 402.981086][T17579] veth1_vlan: entered promiscuous mode [ 403.051682][T17579] veth0_macvtap: entered promiscuous mode [ 403.072674][T17579] veth1_macvtap: entered promiscuous mode [ 403.094416][T17856] tipc: Enabling of bearer rejected, failed to enable media [ 403.105829][T17579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.126070][T17579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.296856][ T6487] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.312474][ T6487] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.357893][ T6487] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.395192][ T6487] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.422274][T17854] syzkaller1: entered promiscuous mode [ 403.429943][T17854] syzkaller1: entered allmulticast mode [ 403.527758][ T5847] Bluetooth: hci1: command tx timeout [ 403.599308][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.649681][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.725464][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.744411][T17876] netlink: 'syz.5.2926': attribute type 2 has an invalid length. [ 403.759035][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.767081][T17876] netlink: 'syz.5.2926': attribute type 1 has an invalid length. [ 403.790814][T17876] netlink: 'syz.5.2926': attribute type 2 has an invalid length. [ 403.808533][T17876] netlink: 'syz.5.2926': attribute type 2 has an invalid length. [ 403.829566][T17882] IPVS: length: 4096 != 8 [ 403.837288][T17876] netlink: 'syz.5.2926': attribute type 2 has an invalid length. [ 403.845478][T17876] netlink: 'syz.5.2926': attribute type 1 has an invalid length. [ 403.853565][T17876] netlink: 'syz.5.2926': attribute type 2 has an invalid length. [ 403.935708][T17888] netlink: 'syz.7.2929': attribute type 322 has an invalid length. [ 404.859064][T17926] tipc: Started in network mode [ 404.880010][T17926] tipc: Node identity 12573fffb815, cluster identity 4711 [ 404.894039][T17926] tipc: Enabled bearer , priority 0 [ 404.929199][T17929] syzkaller0: entered promiscuous mode [ 404.943152][T17929] syzkaller0: entered allmulticast mode [ 405.043748][T17926] tipc: Resetting bearer [ 405.148930][T17925] tipc: Resetting bearer [ 405.182720][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.193000][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.202032][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.210144][T17925] tipc: Disabling bearer [ 405.226606][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.237861][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.384648][T17936] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 405.607924][ T5843] Bluetooth: hci1: command tx timeout [ 405.873613][T17936] chnl_net:caif_netlink_parms(): no params data found [ 406.006769][T17974] sch_fq: defrate 4 ignored. [ 406.140893][T17936] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.157766][T17936] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.160910][T17989] __nla_validate_parse: 2 callbacks suppressed [ 406.160925][T17989] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2958'. [ 406.165060][T17936] bridge_slave_0: entered allmulticast mode [ 406.192023][T17936] bridge_slave_0: entered promiscuous mode [ 406.199647][T17990] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2958'. [ 406.200860][T17936] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.215821][T17936] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.231360][T17936] bridge_slave_1: entered allmulticast mode [ 406.238755][T17993] netlink: 'syz.5.2959': attribute type 1 has an invalid length. [ 406.249106][T17936] bridge_slave_1: entered promiscuous mode [ 406.325597][T17998] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2959'. [ 406.392218][T17993] 8021q: adding VLAN 0 to HW filter on device bond8 [ 406.475774][T18013] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2964'. [ 406.516118][T17936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.544686][T17936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.589413][T18013] tipc: Started in network mode [ 406.594308][T18013] tipc: Node identity 1ac59f4fd779, cluster identity 4711 [ 406.609805][T18013] tipc: Enabled bearer , priority 0 [ 406.651215][T17936] team0: Port device team_slave_0 added [ 406.668649][T17936] team0: Port device team_slave_1 added [ 406.708238][T18013] syzkaller0: entered promiscuous mode [ 406.713735][T18013] syzkaller0: entered allmulticast mode [ 406.803853][T18030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2968'. [ 406.809844][T18013] tipc: Resetting bearer [ 406.821218][T17936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.831195][T17936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.857484][T17936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.877425][T18012] tipc: Resetting bearer [ 406.897418][T18012] tipc: Disabling bearer [ 406.929842][T17936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.938596][T17936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.965360][T17936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.996572][T18023] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 407.287848][ T5843] Bluetooth: hci0: command tx timeout [ 407.404295][T17936] hsr_slave_0: entered promiscuous mode [ 407.443056][T17936] hsr_slave_1: entered promiscuous mode [ 407.469033][T17936] debugfs: 'hsr0' already exists in 'hsr' [ 407.486192][T17936] Cannot create hsr debugfs directory [ 407.572594][T18035] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 407.650757][T18066] netlink: 'syz.5.2976': attribute type 6 has an invalid length. [ 407.737073][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2978'. [ 407.819842][T18069] netlink: 'syz.3.2977': attribute type 1 has an invalid length. [ 408.245684][T17936] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.263735][T17936] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.281225][T17936] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 1536 - 0 [ 408.351334][T18082] pim6reg1: entered promiscuous mode [ 408.357226][T18082] pim6reg1: entered allmulticast mode [ 408.397375][T17936] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.408076][T17936] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.419697][T17936] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 1536 - 0 [ 408.521841][T17936] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.540495][T17936] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.550280][T17936] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 1536 - 0 [ 408.604470][T17936] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.629588][T17936] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.643187][T17936] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 1536 - 0 [ 408.931750][T18105] pim6reg1: entered promiscuous mode [ 408.937425][T18105] pim6reg1: entered allmulticast mode [ 408.949052][T17936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 409.021329][T17936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 409.036743][T17936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 409.093578][T18106] 8021q: VLANs not supported on ip_vti0 [ 409.119577][T18113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2988'. [ 409.145430][T17936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 409.377295][ T5847] Bluetooth: hci0: command tx timeout [ 409.506064][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2994'. [ 409.521003][T18131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2994'. [ 409.690213][T18133] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2995'. [ 409.702465][T18111] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 409.956769][T18141] netlink: 'syz.7.2997': attribute type 83 has an invalid length. [ 410.105940][T18143] syzkaller1: entered promiscuous mode [ 410.113014][T18143] syzkaller1: entered allmulticast mode [ 410.347387][T17936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.411992][T17936] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.451726][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.458931][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.528226][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.535423][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.595194][T18167] vxcan3: entered allmulticast mode [ 411.180582][T18197] netlink: 'syz.5.3013': attribute type 1 has an invalid length. [ 411.191520][T17936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.212875][T18191] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 411.280725][T18197] 8021q: adding VLAN 0 to HW filter on device bond9 [ 411.324558][T18194] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 411.458151][ T5847] Bluetooth: hci0: command tx timeout [ 411.488100][T18199] veth7: entered promiscuous mode [ 411.501242][T18199] bond9: (slave veth7): Enslaving as an active interface with an up link [ 411.587829][T18207] __nla_validate_parse: 2 callbacks suppressed [ 411.587846][T18207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3016'. [ 411.624048][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3016'. [ 411.633340][T18207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3016'. [ 411.672954][T18207] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 411.684614][T18207] erspan1: entered allmulticast mode [ 411.846485][T17936] veth0_vlan: entered promiscuous mode [ 412.064190][T18233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3021'. [ 412.230036][T17936] veth1_vlan: entered promiscuous mode [ 412.284625][T18223] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 412.434621][T18242] netlink: 'syz.0.3025': attribute type 1 has an invalid length. [ 412.503539][T18242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 412.523829][T17936] veth0_macvtap: entered promiscuous mode [ 412.549733][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3027'. [ 412.561555][T18242] netlink: 'syz.0.3025': attribute type 20 has an invalid length. [ 412.593197][T18252] openvswitch: netlink: Unknown nsh attribute 0 [ 412.617411][T17936] veth1_macvtap: entered promiscuous mode [ 412.624116][T18252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.670641][T18252] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3026'. [ 412.693666][T18242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 412.706980][ T1334] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.723231][T18242] netlink: 'syz.0.3025': attribute type 20 has an invalid length. [ 412.733177][ T1334] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.833057][ T1334] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.844199][ T1334] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.857476][T18266] xt_TPROXY: Can be used only with -p tcp or -p udp [ 412.870775][T17936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.056939][T17936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.093352][ T7223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.114659][ T7223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.202755][ T7223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.233212][ T7223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.276932][T18268] vetè0_virt_wif speed is unknown, defaulting to 1000 [ 413.531929][ T5843] Bluetooth: hci0: command tx timeout [ 413.672619][T18284] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3036'. [ 413.706565][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.734492][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.798553][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3037'. [ 413.857885][ T31] INFO: task syz.4.1869:13621 blocked for more than 143 seconds. [ 413.884520][ T31] Not tainted syzkaller #0 [ 413.904959][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.926052][ T31] task:syz.4.1869 state:D stack:26928 pid:13621 tgid:13618 ppid:5839 task_flags:0x400040 flags:0x00080002 [ 413.970494][ T31] Call Trace: [ 413.977328][ T31] [ 413.980995][ T5840] IPVS: starting estimator thread 0... [ 413.986789][ T31] __schedule+0x14bc/0x5000 [ 413.991537][ T31] ? __pfx___schedule+0x10/0x10 [ 413.996415][ T31] ? schedule+0x91/0x360 [ 414.000970][ T31] schedule+0x165/0x360 [ 414.005160][ T31] schedule_preempt_disabled+0x13/0x30 [ 414.011258][ T31] __mutex_lock+0x7e6/0x1350 [ 414.015877][ T31] ? __mutex_lock+0x5bb/0x1350 [ 414.023623][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 414.030343][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 414.046316][ T31] ? __nlmsg_put+0xef/0x1b0 [ 414.051337][ T31] ? genlmsg_put+0x137/0x2e0 [ 414.057317][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 414.063330][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 414.068726][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 414.075266][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 414.077644][T18297] IPVS: using max 30 ests per chain, 72000 per kthread [ 414.082018][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 414.096697][ T31] genl_rcv_msg+0x60e/0x790 [ 414.101572][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.106744][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 414.113953][ T31] netlink_rcv_skb+0x208/0x470 [ 414.119292][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.124823][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.130683][ T31] ? down_read+0x274/0x2e0 [ 414.135135][ T31] ? genl_rcv+0xd/0x40 [ 414.139548][ T31] genl_rcv+0x28/0x40 [ 414.143614][ T31] netlink_unicast+0x82f/0x9e0 [ 414.148469][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 414.153804][ T31] ? netlink_sendmsg+0x642/0xb30 [ 414.160776][ T31] ? skb_put+0x11b/0x210 [ 414.165040][ T31] netlink_sendmsg+0x805/0xb30 [ 414.171003][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.176318][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 414.181442][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.186730][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.192056][ T31] __sock_sendmsg+0x21c/0x270 [ 414.196731][ T31] ____sys_sendmsg+0x505/0x820 [ 414.201991][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.207292][ T31] ? import_iovec+0x74/0xa0 [ 414.211860][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 414.216548][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.221957][ T31] ? futex_wait+0x285/0x360 [ 414.226487][ T31] ? __fget_files+0x2a/0x420 [ 414.231151][ T31] ? __fget_files+0x3a0/0x420 [ 414.235843][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 414.241006][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.246511][ T31] ? do_syscall_64+0xbe/0xf80 [ 414.252835][ T31] do_syscall_64+0xfa/0xf80 [ 414.257374][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.264519][ T31] ? clear_bhb_loop+0x60/0xb0 [ 414.269343][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.275238][ T31] RIP: 0033:0x7f12a5f8f749 [ 414.279890][ T31] RSP: 002b:00007f12a6f05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.288594][ T31] RAX: ffffffffffffffda RBX: 00007f12a61e5fa0 RCX: 00007f12a5f8f749 [ 414.296585][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000004 [ 414.304733][ T31] RBP: 00007f12a6013f91 R08: 0000000000000000 R09: 0000000000000000 [ 414.313017][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.321143][ T31] R13: 00007f12a61e6038 R14: 00007f12a61e5fa0 R15: 00007ffdd306fc78 [ 414.329594][ T31] [ 414.332855][ T31] [ 414.332855][ T31] Showing all locks held in the system: [ 414.344331][ T31] 1 lock held by khungtaskd/31: [ 414.346433][T11869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.378652][T11869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.421905][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 414.432053][ T31] 3 locks held by kworker/u8:8/1150: [ 414.437426][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 414.448491][ T31] #1: ffffc900040efb80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 414.459059][ T31] #2: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 414.471143][ T31] 3 locks held by kworker/u8:12/3563: [ 414.476537][ T31] #0: ffff88814c95d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 414.493149][ T31] #1: ffffc9000cb37b80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 414.506035][ T31] #2: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 414.516099][ T31] 2 locks held by getty/5598: [ 414.520885][ T31] #0: ffff888033ce70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 414.531111][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 414.541352][ T31] 3 locks held by kworker/u9:3/5843: [ 414.546622][ T31] #0: ffff888076528948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 414.557695][ T31] #1: ffffc9000418fb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 414.571487][ T31] #2: ffff88803174cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 414.581542][ T31] 4 locks held by kworker/u8:19/6656: [ 414.586916][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 414.600424][ T31] #1: ffffc9000d3bfb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 414.612413][ T31] #2: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 414.622251][ T31] #3: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 414.633365][ T31] 2 locks held by syz.2.1278/11230: [ 414.638911][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.647085][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 414.657772][ T31] 2 locks held by kworker/u8:23/11869: [ 414.663237][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 414.676007][ T31] #1: ffffc9000c85fb80 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 414.688452][ T31] 2 locks held by syz.4.1869/13621: [ 414.693646][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.701848][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 414.712173][ T31] 2 locks held by syz.6.2384/15719: [ 414.717376][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.725818][ T31] #1: ffffffff8e233a08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc2/0x770 [ 414.740477][ T31] 1 lock held by syz-executor/17936: [ 414.745780][ T31] #0: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 414.755543][ T31] 2 locks held by syz.5.3036/18283: [ 414.760783][ T31] #0: ffff88807fb4a488 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 414.771104][ T31] #1: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 414.782849][ T31] 1 lock held by syz.0.3038/18296: [ 414.788134][ T31] #0: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 414.797162][ T31] [ 414.806624][ T31] ============================================= [ 414.806624][ T31] [ 414.815879][ T31] NMI backtrace for cpu 0 [ 414.815905][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 414.815942][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.815963][ T31] Call Trace: [ 414.815974][ T31] [ 414.815988][ T31] dump_stack_lvl+0x189/0x250 [ 414.816028][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.816062][ T31] ? __pfx__printk+0x10/0x10 [ 414.816093][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 414.816111][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 414.816129][ T31] ? __pfx__printk+0x10/0x10 [ 414.816153][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 414.816177][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 414.816194][ T31] watchdog+0xf3c/0xf80 [ 414.816218][ T31] ? watchdog+0x1e2/0xf80 [ 414.816242][ T31] kthread+0x711/0x8a0 [ 414.816263][ T31] ? __pfx_watchdog+0x10/0x10 [ 414.816280][ T31] ? __pfx_kthread+0x10/0x10 [ 414.816300][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.816317][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 414.816335][ T31] ? __pfx_kthread+0x10/0x10 [ 414.816355][ T31] ret_from_fork+0x599/0xb30 [ 414.816388][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 414.816418][ T31] ? __switch_to_asm+0x39/0x70 [ 414.816434][ T31] ? __switch_to_asm+0x33/0x70 [ 414.816450][ T31] ? __pfx_kthread+0x10/0x10 [ 414.816470][ T31] ret_from_fork_asm+0x1a/0x30 [ 414.816503][ T31] [ 414.816511][ T31] Sending NMI from CPU 0 to CPUs 1: [ 414.963037][ C1] NMI backtrace for cpu 1 [ 414.963054][ C1] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 414.963073][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.963083][ C1] RIP: 0010:check_preemption_disabled+0x40/0x120 [ 414.963116][ C1] Code: 08 65 8b 05 26 92 2d 07 65 8b 0d 1b 92 2d 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d fb 91 2d 07 48 3b 4c 24 08 0f 85 cc 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 04 24 00 00 [ 414.963130][ C1] RSP: 0018:ffffc9000405fc78 EFLAGS: 00000246 [ 414.963145][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 73bb5092790f8f00 [ 414.963156][ C1] RDX: ffff888031da1e80 RSI: ffffffff8bbfc640 RDI: ffffffff8bbfc600 [ 414.963168][ C1] RBP: 0000000000000000 R08: ffffffff8f805a77 R09: 1ffffffff1f00b4e [ 414.963180][ C1] R10: dffffc0000000000 R11: fffffbfff1f00b4f R12: 00000000000f4240 [ 414.963191][ C1] R13: ffffc9000405fd40 R14: 0000000000000001 R15: 0000000000000001 [ 414.963201][ C1] FS: 000055558dae4500(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 414.963215][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.963226][ C1] CR2: 00007f343b7b6ad8 CR3: 000000007574e000 CR4: 00000000003526f0 [ 414.963240][ C1] Call Trace: [ 414.963247][ C1] [ 414.963258][ C1] rcu_is_watching+0x15/0xb0 [ 414.963278][ C1] trace_hrtimer_setup+0x77/0x1e0 [ 414.963300][ C1] hrtimer_nanosleep+0xb9/0x360 [ 414.963320][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 414.963342][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 414.963357][ C1] ? irqentry_exit+0x5dd/0x660 [ 414.963376][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 414.963399][ C1] __se_sys_clock_nanosleep+0x339/0x390 [ 414.963419][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 414.963440][ C1] ? do_syscall_64+0xbe/0xf80 [ 414.963460][ C1] do_syscall_64+0xfa/0xf80 [ 414.963480][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.963503][ C1] ? clear_bhb_loop+0x60/0xb0 [ 414.963520][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.963536][ C1] RIP: 0033:0x7f31ad3c1fc3 [ 414.963549][ C1] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 414.963563][ C1] RSP: 002b:00007fffece463f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 414.963578][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f31ad3c1fc3 [ 414.963589][ C1] RDX: 00007fffece46410 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.963599][ C1] RBP: 0000000000000000 R08: 7fffffffffffffff R09: 3fffffffffffffff [ 414.963610][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffece46860 [ 414.963621][ C1] R13: 0000000000000004 R14: 00007fffece4644c R15: 00007fffece464e0 [ 414.963641][ C1] [ 416.572281][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 416.572959][ T5847] Bluetooth: hci5: command 0x0406 tx timeout