last executing test programs: 4m6.684171762s ago: executing program 1 (id=3396): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'wlan1\x00'}) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x3}}}, 0x24}}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$tipc(0x1e, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r0, 0x0, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) connect$qrtr(r1, &(0x7f0000000040), 0xc) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) (async) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'wlan1\x00'}) (async) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x3}}}, 0x24}}, 0x40004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$tipc(0x1e, 0x2, 0x0) (async) 4m6.364649314s ago: executing program 1 (id=3401): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8aa}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 4m5.436623533s ago: executing program 1 (id=3414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x1, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x8940}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000009c0)="f6c90cdedc37cdb39eae133fb46bb0b986be85321a17fc6e8ea85f018f6e81d55fa08f68960887cd420ea0c8ec111c66ec2c3baa2e4800207807a82a4559bad7736a5423c2d786f76c4aea14258d0bef41454167a1d439b5d9cfb6c508cd6b2fbbc751c26b5d345d2afa25b68d5d26612cc4af16ff3084f83682ac9b1e4dec81ac3bec3d01ca9c55e546bb09bdbc0534b04938b7a47cc4aa9f754b42d9012c35374c5576d7a1e7d5e64ced4d846135f8173ba207da142ad73646af1fcf1ec66859f0d2cf9fa2e6dbf733425eeb9b05ff7b1a3bfff2130084f8d175354899c362361d83c3025aa3df6db80e6187ca5ddc3a288a5405", 0xf5}, {&(0x7f0000000180)="1b0ad65e03f9915bfddf26c24e848a70b9d041082765acf5bbcc6657aea857184012783975c51c2f", 0x28}, {&(0x7f00000010c0)="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", 0x2bc}], 0x4}}], 0x2, 0x4048884) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup, r3, 0x2f, 0x2034, r3, @void, @void, @value=r4}, 0x20) 4m5.186816259s ago: executing program 2 (id=3419): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x6a040080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtaction={0xfc, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0xe8, 0x1, [@m_skbedit={0xe4, 0x0, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x1, 0x3, 0x80000000, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000000}]}, {0x6f, 0x6, "0dd857da3b8a5c0649ab6e00fb2efc2ae8c83d20cd24b4f8d76b69d1cbded50a231677646ff0fd34ac149bcf4dcc40da1c89c407fd2962c41336cbc8cd2f93f76c229819c467bda009f1a2a6cbd72e5983a9d16ac558417de691e69eb37b252951c10c23e4e767b93dc573"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xfc}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e25, 0x0, 0x7, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) unshare(0x38020280) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f0000000140), 0xfdef, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r5, &(0x7f0000000380)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x0) recvfrom(r6, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfffffffffffffe87) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) 4m4.509683527s ago: executing program 1 (id=3423): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000044) r1 = socket$kcm(0x10, 0x0, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000081afff108"], 0x48) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) recvfrom$ax25(r5, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) sendto$inet6(r9, &(0x7f0000000ec0)="0a9f94", 0x3, 0x204c850, &(0x7f0000000300)={0xa, 0x100, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) shutdown(r9, 0x1) getsockopt$bt_hci(r9, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r8, @ANYBLOB="04001300060012000400000006001005000000000a000600ffffffffffff00000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) socket$unix(0x1, 0x2, 0x0) 4m4.229966142s ago: executing program 4 (id=3424): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000016000295003d3700000000000000"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x1000003, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}, 0x64}], 0x1, 0x40010001, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}, 0x64}], 0x1, 0x40010001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xbf70}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x1000400121bf, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x1000400121bf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) writev(r3, &(0x7f0000000240)=[{&(0x7f0000002740)}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d3862950f91ace0319f430925fda88089e3fe65327bef7730896f40535d8cc3c9e2357f8ac13729dd5377c9c47936647690105b100149bfde44adf0e4fae811ad40bb7d9385a4ba07521d9382b1183789c743d76db805ea62c6116d31e6ba78ad33b098cae1289b4b8f007241dff6f9fad1a5f0d161c275d54cbe561ae3842222b780bf1d11"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d3862950f91ace0319f430925fda88089e3fe65327bef7730896f40535d8cc3c9e2357f8ac13729dd5377c9c47936647690105b100149bfde44adf0e4fae811ad40bb7d9385a4ba07521d9382b1183789c743d76db805ea62c6116d31e6ba78ad33b098cae1289b4b8f007241dff6f9fad1a5f0d161c275d54cbe561ae3842222b780bf1d11"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) recvmmsg(r5, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0x80010000}, {{&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000100)=""/35, 0x12}], 0x3, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{&(0x7f00000009c0)=""/176, 0xb0}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/193, 0xc1}, {&(0x7f0000000e00)=""/142, 0x8e}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000ec0)=""/158, 0x9e}, {&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f00000010c0)=""/223, 0xdf}, {&(0x7f0000000a80)=""/21, 0x15}], 0x9}, 0x100}], 0x3, 0x40001023, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x40000083) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 4m4.215974007s ago: executing program 2 (id=3425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000001c0)={0x0, 'netpci0\x00', {0x1}, 0x8}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01010700000000000000010000000900030073797a31000000000900010073797a300000000050000000060a010400ffffffff0000000100000028000480240001800b0001007470726f78790000140002800800024000000002080001400000001208000b40000000000900010073797a30"], 0xc4}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xfcf) 4m4.036489768s ago: executing program 2 (id=3426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="891090000000000095d74af9e6ec8d1e452116d03a22a0586033f910dbd7d358d577b34bd953e70bdded51753772db7b019538a30a4b28b842cd8e34052deda7a67bd86b13f1ee557802acbb4fce673e9d1a90dea9201b089d6f2ef1f3712f852c2d105d6397d05161e9cc2d2e010799bbd136b63f951d7128e511fd45b33a9bfdec6800d680093f0455b007f2f396b8004bae1f8822e6b9eeda4eab84d1f39f697109a8d4cc3e4735edc6df"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x100, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) 4m4.031479025s ago: executing program 4 (id=3427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000020000000b704000002000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m3.904477888s ago: executing program 2 (id=3429): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@multicast, @multicast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x5, 0x43, 0x66, 0x0, 0xff, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x43}}, @payload_named={{{{{0x2f, 0x0, 0x0, 0x1, 0x0, 0xa, 0x2, 0x2, 0x1c30, 0x0, 0x3, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x4e24, 0x4e23}, 0x1, 0x3}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x55) 4m3.840694141s ago: executing program 4 (id=3430): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x4000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r2) 4m3.54403827s ago: executing program 4 (id=3434): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x8, 0x6a, 0x0, 0x1, 0x40000000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000004cbcc71bdff13147143b05fa0d79594da2d229aff0c7e9205582179da803b63ce7975f151415a8838d306984f59a026b4080bdb85620f7e25e32aad09745470b389e47e2bd980f1b8fae7b2f28d0995b5df67d064c5f96a1fb7964104b3172d157b60789bcf3a7b6ed3c0de1b69c438ab9b64280944b6231d161a703ee1b9262e6480f177c08cbf60000000000000000040000000000d654021a6957f59f3d02a8e6b87717df51b8867aef459775fff6a8dc4510a97ef6c0124f195f90429040f699cabfa3500b845a4f028e4bdc4ef913bd284fafcf890a379f2618bb183a", @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf252a000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 4m3.484593029s ago: executing program 1 (id=3435): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40815) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'gre0\x00', r2, 0x7800, 0x20, 0x3, 0x685, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x68, 0x0, 0x3a, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, {[@lsrr={0x83, 0x13, 0x38, [@empty, @rand_addr=0x64010101, @remote, @empty]}]}}}}}) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000300)={'b', ' *:* ', 'r\x00'}, 0x8) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x46012820}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = accept(r5, &(0x7f00000004c0)=@rc, &(0x7f0000000540)=0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r7, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000007c0)={r3, 0x7, 0xc, 0x80000001}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x9, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x5}, @func={0xe, 0x0, 0x0, 0xc, 0x5}, @const={0x5, 0x0, 0x0, 0xa, 0x3}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1}, @enum64={0x5, 0x1, 0x0, 0x13, 0x1, 0xc, [{0x4, 0x5, 0xa}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @restrict={0xd, 0x0, 0x0, 0xb, 0x2}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x5f, 0x61, 0x0, 0x30, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000b80)=""/138, 0x95, 0x8a, 0x0, 0xb4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x20, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc5e6, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7f}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x8c, &(0x7f0000000a00)=""/140, 0x40e00, 0x32, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000000c80)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x7, 0x7f, 0x10000}, 0x10}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r13, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r7, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x13, 0xbe, "42f0ddf1029fecfad1bf16e5113c9b"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000801) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r13, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x40, r7, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) ioctl$EXT4_IOC_SETFSUUID(r11, 0x4008662c, &(0x7f0000001000)={0x0, 0x0, "747170c502709f001130f8baec8afb97"}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r15, 0x40305828, &(0x7f0000001040)={0x0, 0x0, 0x7, 0x10}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001180)={@fallback=r13, 0xf, 0x1, 0xfffffff0, &(0x7f0000001080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000010c0)=[0x0], &(0x7f0000001100), &(0x7f0000001140)=[0x0, 0x0, 0x0]}, 0x40) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r16, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wpan3\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) 4m3.478283748s ago: executing program 4 (id=3436): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000280)='syzkaller\x00', 0x4255, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="1f000000190081054e81f782db4cb9040263cb848a0ef30b1bffff070a000a", 0x1f}], 0x1}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r3}, &(0x7f0000002480), &(0x7f00000024c0)=r2}, 0x20) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000773ec8f3969729e91faef0fbfdee720754a2b859140df3b5994a9a912c7c8b3874f44609007b9b9f08000000994e7fbc2779e8c461dc2a72c60a34cebcfb9eb3716f6093644ca31ff4e742d7db1da5b106eb2a8a976731e14a48d23c19b000b2351f51d88f88c3b01adc89a07e4dd8efd7b1cb948302c6e45a7ce9093b6582ce8e5121ef58cc01c25ed825742e366fc8e9fd7facdeedc22800f73e9f032c67b54561ec18f2bff9bf7764be437f4bd181f9b92bf068c7bfde", @ANYRES32, @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x1b, &(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYRES16=r9, @ANYBLOB="0000000000820000b702000014000000b7030000000000008500001083000000bf090000000000fb550900"/59, @ANYRES32=r9, @ANYRES64=r8, @ANYRES32=r9, @ANYRESHEX=0x0, @ANYBLOB="294402765547e4a216c63654a06bf6ba93417acb5416204e087cacd0f3856c440000", @ANYRES8=r9], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x240400c1) unshare(0x22020600) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) vmsplice(r12, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000680)='svcrdma_small_wrch_err\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) 4m3.46469215s ago: executing program 2 (id=3437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) getpeername(r6, &(0x7f0000000180)=@nl=@unspec, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x110, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa678bcaf3052f6bc}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000844}, 0x40000) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000000800a0018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000080085000000c800000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x7f, &(0x7f0000000140)=""/127, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 4m3.340131794s ago: executing program 1 (id=3438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1e0, 0x1d, 0x100, 0x70bd2d, 0x25dfdbfd, {0x3}, [@typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@loopback}, @typed={0x4, 0xf9}, @nested={0x12f, 0x85, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@empty}, @generic="60005d019fcaead2f07f52fb46add93a9b8506f43d5cea2d8f4a79fa510c57d370836cbecdbebbd3a9a253cb4c8e20f03afb79526335ce7f0906f607ec0b40d693d36d09c41a03d22082595256ca9fec52b96e58b83ff94fb978", @nested={0x4, 0xa0}, @generic="5f4dca8f6f2be6314f31eaa56800a6ab91eaec61fd4d5158a80e7d3a0a6d0d3d67468a354d5efa31266ed39e517ee622756901cb080bf6d0383b4f3d5c77b72477d5ace6a5f1f6b491399af42684a884514402941d12bd4f18fa3f767a51fdc42477991456fa286cf447f5b2ea9e5e942df45980396031e3a3a377e18f06de80d098db4294f9857013c369ddf7fde4adea50f3cc89046cb503918edb3c505cd0121e4fa84b18ccec5d", @typed={0x8, 0xea, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0xd7}]}, @generic="2870e5288a9ce8b255465a91e3a808ad8b3d290c6fd382290a3ff6f35605d1d63f807a0104ba1b3c7830fefc9629a7faa40c66a3515c225dced48c8752d6b0c6179fe767ce45715d895f66a8dd39d76b478d29368b53df36a56a0a28a4fb71f26ca1480f0e83337db6882fa10878ce05313d5b5938293383efde58ff4ebf2d1b69402d4a"]}, 0x1e0}, 0x1, 0x0, 0x0, 0x240080c0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$NFT_BATCH(r3, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x1b8, 0x0, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_USERDATA={0xc2, 0x6, "92db9e0b9025531cacbcc59045eb30b2efff658afa74521111efadfc9cbcca55e57aa3475f32f0e07c1398ca4ddfea87a530cf1d95ee53d98647f15ccd6f6df83ca98bcae77c8c56f3cb895ed963e0e3f5c0abe59b4c5ddf28917f507581e5f3212d53fbcccb841e5a83b4d983c0fff46bbf0555a12a9810f7bac0adf9ce100f60626e4815eec4e37f8c530b3b3859850fc8ddb0a16357da0c217c02d74f1911c8e378d65634ef318ae501fec56abb53437054145351c21897c0addd8cd1"}, @NFTA_TABLE_USERDATA={0xb1, 0x6, "86401eff5f852c17df5a95e48eb063839ba83f8dc16940fd1133b59aff14f1317e9c44bf1b542cf5b7157fc1ccacb50746f0c4d6f1e150192b9ccb4d458c3d780c10730f1e2e199a6b41abff451d7de33ecb490529e38c62c4965046f4eaf165627f9d6c3d1342118d19722ef67fc01e73530fa306def37b1314d00ccea1b545208b3b8cdb8d4ceeb01876a5c8e6b5d6564f0e7ffd0b7f512f68b2ba344125e7a006781ba1c17e4d0cab8cedc6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x124, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xb4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x699}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}]}]}, @NFT_MSG_DELFLOWTABLE={0x64, 0x18, 0xa, 0xb00, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x40c}, 0x1, 0x0, 0x0, 0x1}, 0x20008005) tee(r3, r0, 0x6, 0x1) r4 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000007c0)={0x0, 0xff, "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"}, &(0x7f0000000900)=0x107) r6 = socket$key(0xf, 0x3, 0x2) gettid() ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000980)={0x100, 0x30, '\x00', 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl(r6, 0x80000000, &(0x7f00000009c0)="f0992c8c463e34833c80a82075968f1bbeeb01a3bc35545b0b9c1136b2de3a79e976a798e77db587bb860f3a1199ecd18d9c588d336738ee85a89f9081456b148a29f4c79d842f71a54850a0064cab4f645c8d505980b8c3fda3a180fe06ee674859497e5b65a9e4edd357b2cc77031054edf7598cb8e1ee9872a05fe5bcc0cc8d57e2817a9e1d0ae383578ffe724f3d90798d681d52bee910230a6b173ed6a4cc007aee904eb7fb3ed10e1453ef489247911e8c071f6f583fd7d1e42a7ffcfb758cdc02b8d7bae77d234366b073ba7cd672e85bf9eb6b92448102f0aabcacdf8420cdc0afd768a9133e140d8ccf624fd460bf5329cf495bfaf6c16c9de81b1047dd8baa53577a99922577d6b0acfd3c7fec02a90f17dafa5b1c1e87f584b9401ddcdfbb48a11d348d3316368fd72fcd83528d9d97f60ad4ca7f14af16480d86d4bc02f9bd4bd40409f2d8173bf953ad8b76176e8d7dd244c4d5b0c2448aa8f6dad489f019d426f2469bde0cb33fbc4c5f2510270c269dc054ac33aa1c7a30cead3eb95549fb7998a53fe51785948eb1e28e290bce16b041a9fc5a75e57b7cff29e4041defa4a3ebf64fc2ac15b047455e011de5f8128f9e0fa51ee4e7329b142bf5cc939a7edcb886a2f14816a5a1d1fb9e545b618620038ef5b9ed188ec91ba8ae88a90b490fff9f0bdd2cd2aa6760fc36cf91d7b639286d313fa57736802e9e1cd6d850abfa1635aab19ee5c79d93292009400234637f4ee9b8137d0d55e650f1d08320b4bda74f921f71e08deddb0548e342219f076326b1305b23676cffef82eac998ba84ead3e2e9a687efeb89d6a399722e526ef239fbf189d042cd4447b7035dadc2000ec56cf52558d3a566e2dc7845266e2f328e58d191eaedb9a5c307bdf7a5c2ad594763e74544094bbe6a05cbecbd81e9ff4144cf665df0a918dad756c790fd87558afa9d61c290cae15bb7355d9ea867a18f98d0c0b204178f9fa87f794aa2f77c716758ea5bea43ef01234f584c7c6c742a2602d704d7722e28de20cef97e910386e584b85f68cc59953517a6fcc9322023a976f56ba84e336177255fe08fb177fa7b459295bfc9c8c0bca9def7bf043aed068edb1de2c313200522c217bd1ce1a291506886388a2b58394cca6e8b4701285282ca2d8d6c72fcd20993198a491ba13bbebd2b86b6415fafd51399e2157fe1954f868fa3003266624eecc9a8ec0117b1d2a136cd7e4c314a60127588bc5b2be3f4eaaa1213c243c297c1e643a3bc66a58f606819bb3df750a455eeb09778d85c13fd8d528f207a6dfe89379186f2f21a5c0a60b09e348ff146e34462424c2b3abce1eb6a87a5b5e4a74e31c59aae3c6da483006f5077b4afcf8c9fe8624b29a51275648cb9f02eba789853c51512b30f3d876b928855bd51eaeee5a9c03a00e15b6a33dc67f53e9952074b9fb5286fe6568ca6b2eead357e5c1e716f2ec11c18602cc530d4f4bd8c50435cd3788adcdf4ea581bfb3beb27560844838c0aad65c7e69f74f5432dae1e257137e8be70d057e557495ee69a8cb64e14952b3b64ce1e135f4acb5555e368725bf93f84a299233354e2d37295270a251212d273bebd0c44faf8bb4cf3d02ce80c7322f0cee4b55d57898ed180b2704b860eea6ca6e9601b3c8d519abbfe21a3d0f729a6a5ac2029aed78db66c414e02cdca684bfeee3a32c4d2ef5e6ec924ef3a6447107b8216015b591d069812e2acebd60f728060dff8f70b914137f72a7754e4d41a9ae10ea567eb04a24f6faa7351a3dc5565782769a7815ab632d13187aec6cff4b349e421dfafebdc3ac73f6f1afb34044c13fa70990be418d55b5f7a7c069eca0287403bc170920d6170ce49cc0c947a2b0deb6537cf4eedc9dd2445a03d93c46905b15ded1c3a9e968f288df21459eaf9183fae9fdc3c94fe0cd2b4471facaad32917476f5bd74751207147fe5c3cee651b76e51171140582e7532ba0e3d0ecacd3b394a883ab70d088acc3c0c0f34575e70158362e40ae9eb15ba1d42a90948052c542c397f16785a94f5b32025f17cffa949923eedaa42c81300aad4c9a89c70c085dafacc7a26304da5c37c63a09cebad0c0a27c854132b18ef1111601d5dcd966e67a92cf60c6324c79525e5c51a05c10e78a80ed1c592f584dfc7a030b771b38dd74b174a3a5473f75ddc2eb92b85f1802e8782a373a854c227b64a617cb266c2a778e036f63d2441979022b415463ae96848d1fa4f9090a53862d5dbfbb2ee6622e50549ab2e87c02904c4143d28ebc548ba39b9e882bbfad37ed76e0e95e70fa19cec70fece3dec9db49fbce7c693be39a7c9b13201624b71525d4eaac5a05df010cbd0f2cd8ff97bf2cfe8e4274ca5319adc6c92eeebe2e0bb98f6415dddc58a18504eb2b54ff60370f6605529e76148d9eed474afe2bab54718701a0e33de98bf7516fdb36b6422d7fc04936c35103565ae9bb828fece6df5ab6f8ee8408284a215e0603a30d14f00b82a8bf4ce49363cc2d7b5ee7e62d707c05020dd085cfbf0847495d9722160864c601e9b14dfdb0540fd36cda3679da14d35714ce50735c057ec25a1d2227f88ae72688ab1f533608df3b568e49a90e4d1cc63263091681993f6f04938c6bf76272b327e2989de37906877bf4601ad96030f49db6a08c04777fc665b78acaa86bf1b304d3cf09f5fdd7ac6b4c6e4ac06a03fe45cc94fd643c79fc93fe6fe0b3a9affff897cf3dae4ffa76ec412e9fc542e1578403c2a76f444c5d58477ca0425594787c558c7c34ee1a02e80e09467fe3ba392e79d5d57054d63e67cc4619f7915fec1d27c84f6a900cd4573e5257360e6c7d2cfa57f986f1dbba343f53bda7d2a03cefffec3e569acffcc75f54e14f8090030b748fb82b5533b324ae43182fdf93c50ca269a9ae99bc73da9da1cf6292ee8d1df20efd9a780672e837267e30042ea201f58ef2ffd146b183e90e434dfa60b40fef8199e60579a57d93079bf76aaecd12434a93976ea5988e6cd178e60a6df9ce50c00d5f682cbbdebb6a4dedb4f2e943b5c998f42ebeba4ba1da062f4e83bcd9610e3698095d4b7eaf55d75cebab6851f463298a73d17305ae41e60e01596b2edf09ed8df2eaad5f5853bedc1696b3d630585e4b0ae2c48907f4a49db9467dc6fd5f963afbfe06e6b6c7d4907ba226925a6d70420b7806548c835b4fcc7c0c3612f6c95c17af29bd56c60174248cbee1e74d61a75dcafaa8f25d5f673736b60abc488dc35b75fb51b6bf8bf0a595f2a171991d47189c8ea14049a789a6d134b83a9be5a0fff997aa80dfcf4f22ec25506ef5655874238902c52e05d8f70d0d261a1dd9245de74a6480fe0e4ec0a31000f482e5561370d89d53b088180c6cbc9d981309abeeb8033fa072e9ddac0c57bb1c5e70616f3b898605254452c11c17a7a42925ae72f108d77dd9d29106751c57f8b4444f6744a3c9b848542469a1dddb6b1ae4c2c9e2e616820a394880c4814db77ced66948a5691cf733d2f1d0b247a86bc5cc5cad1487c13c29d108f6c4b5185f75584029859435501983e9469f7e33757c1bccc081bf4b47d46f4ffcc649405409519468e8b7adbf69b54658c00b2a48ebcb5e3bb134215929fb50bafb30b87288d7bed6e6e095b0d3f7faadeb46c874719722d47044ae76a4138e982ee6c8089f685add450c5fcd815cdaba0091fb8688c57243e67b85682d5d87923ed0d02486463e45aaea9b9724d9eeed3ae9490acae4a99c6a576e07be057abd1696ef741b19358528290d17fe58ccc392a49ca09e8e867d213c0bc73654871632e1d36a72906f52474f1e5b127dcf1ca74fbe982aa49c90cb246d1444fced336c421260ea25368526142f80af043b68a92d20dc4cc45835069020c0d60e221f65eda442fa08b84851cfa5619f1db944c45ac5fbc8f5ed15e1708a93c5e73ea0ccbfc4660d2458e3f1dba369a8b485e5afb439df2de97f3f3dde3de9ac2a1eb2962410b02d9c7a8b8342b36ca2058fb8966b05b2d538969e44514d13f9dab11c1711eda079914ea23ab90de42aa0db4e5c9015359e61e34d781a79c0e4c4a5a5a81f06d1a0fda122ee75a15a5fa0d1f2f3ea955901bcfe9efac65594562e324d185203dadf3b6d71877f5c088058728e089a3faecf2b19ceffd0370a0bf1878e189894f2f526d0be0d4e8eeb24c6c458e99382b0fcb76ee4f9905ffe40fe87011db798ecee8bdba91aa1607596c5c2b9fc46c342faa810b7b8211c5d1e89c500e35bf207e262b811ce66e374050220e49adf30369de137c8d5c9ad438bb0840a0943e60a40bf6938517cf510d60c825b7d837073b23ac287455afb47fe31c1cdf98a2b08b6973125a959d670bb9efbd1f93f8fd67c8a498f12447edd3eaafb546eaecb7b0a16621b337aa26697e321509b4b8669bb4552cf628500e153799da1989ce41f8633c9cb0425dae2762b1c65b1d368f29dff38535710cecb55af5acc23ab5d1d30bf92e47e9076288b50dc1d94e1c674710210deb636f5001c0ef1a174d0a3df162a085fdb5f9db867e6ab8820131e1cb7686ab73a93b6bb48ac580328bab809f73bfc19ce952783d72eecc2ea66c162d19728460188a91e7a1082d94fecbbdf5c302e38e0c6381ab6ea4d57a480fb919568e0d94dd92e1ac98d1952c56e4aa2c60c347f18f325bfc05acd2c5ac8db10aedc50355cbe91390cc33fef9e90e45a98e8bfe99c74daab4c39996afb1a6778cd0fcc38b5ca19ac7fdebe60bf9d818adf35d39a5fb8a61efaf8eec0ae33aa9370f82b438bbd0d684ed583ee1060b1948e142943aa05efa896d85e4c56d27c1208067207aa410e870d94ddb289c283968e188abc950a7d71d0e568f137295d3355c75ed736cba370023d6df42f81814006c0a44a97c31a20a1f75c4e318a054140f977807a5420827d0c8c53a726e5bf1a598a582cdced155b199e4ceebd13b9c6f5d9f7df24297db20a7c0414ee41a19e3e09afc55e912976ed9f8b738e9b8a0a76ff2d0818d1440b3d7865f03872f1b76627ee27dbc553e08ee603e5481f475934f02e0f77f265be485beae3f2b5ca9b8a856ad7bc3427ffce7c3c3561d2de03a9a0780ab8d1f93411397dc5ee224adb85209a9e993e1fae9fc2593fefd31e6c17fea8640cfc31cf7f02f804943eeb53da317dbf81cde374d031017280d363ce519c6e9ea64dedd957a658d782da32a93a2b1c6180b2ca250866d7f119990020d7a79d0014e8bb1ccc39d6a003a4684ab7e29151d9313b53248e083fb5eb3d86588f06cf97a56e9a3f99f5eb16a98c740ac57ca5543696ad99723d260f1883bf53ade168fba743c5b5e6c2f74bdb447958da5887564cb5ce8e2811e6db62b3a3ae1dbfe6bb5fad38688e135b166eb2b512d5da8da6d1382bb7c599790f552a5a211d6281de970eff39920fbd9e511682564ebec337faca94aa0a4651a5558661c4d087f280dbae3881a7cc29f0402f0f31e1813f42d388e38269defdc17fb8b2bb5f6d74cdb308adc8f187c78a92992ba196169c89ccbc8c9cac5dc1e0a5ecc7a30f8d3c51bad9a7b4bfcf9156db6c4c8e3a38e27851992773c2a1733efaa8417672e1e67b2d31a8e369257473a37835f3720656a733e2b30b8ce80a4a96156176fb6e4e5f418010d7129e69f04a7952af9c3a0cbf403b47f98cefc76728b192e71170beb4db442b8b4cfc00aaa5a79b490f43ece56d77292ea61eeb557f310bd73010232bc64ff23b825792671b687348f9b48301") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a00), r3) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000001b80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xf0, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x111}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x17}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000001d00)={&(0x7f0000001bc0), 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x30, r9, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xd, 0x18}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x200488c0}, 0x800) recvmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001d40)=""/226, 0xe2}, {&(0x7f0000001e40)=""/38, 0x26}, {&(0x7f0000001e80)=""/96, 0x60}, {&(0x7f0000001f00)=""/101, 0x65}, {&(0x7f0000001f80)=""/19, 0x13}, {&(0x7f0000001fc0)=""/34, 0x22}, {&(0x7f0000002000)=""/141, 0x8d}, {&(0x7f00000020c0)=""/48, 0x30}, {&(0x7f0000002100)=""/246, 0xf6}, {&(0x7f0000002200)=""/16, 0x10}], 0xa, &(0x7f0000002300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x2000) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002440)={0xec, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TESTDATA={0xce, 0x45, "e267ed7faa6f6234b4f5dc22807cd7d375b3c8b35ddbe74f2d4cd24cd921a8a0f7d8014b7f94bfbe54b5fd15ffb9329c97ae5c2e45d57770e989ca8977235df1ca179ab9b98e69a1f8b5c037db1ff2d3877b9959d36fbf53a9705acd380ab0904abc7f93352d95e52d626b7d99c17679ddba831077bb88496b4be061bc395270e107560da402b2f06d565ffc476c163a1519bfffc2c4db7098c1eb0493b1d880cdd7c74f6a134d269f633b1b63ab4b9be46aa184649f0e5c0541ce0fd9bf8dae4919b525b99e357edc20"}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x80) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r13, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x2894004}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r9, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xc93, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4010) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000002700)={0x108, 0x1ff, 0x9, 0x1, 0x7fff, 0x299, 0xd82, 0x5, r5}, &(0x7f0000002740)=0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002800)={{r12, 0xffffffffffffffff}, &(0x7f0000002780), &(0x7f00000027c0)='%pS \x00'}, 0x20) ioctl$AUTOFS_IOC_PROTOVER(r15, 0x80049363, &(0x7f0000002840)) gettid() syz_emit_ethernet(0x1e, &(0x7f0000002880)={@empty, @empty, @void, {@can={0xc, {{0x3, 0x1, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "50a909334d3487d2"}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f00000028c0)=[@mss={0x2, 0x40}], 0x1) 4m3.214652699s ago: executing program 32 (id=3438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1e0, 0x1d, 0x100, 0x70bd2d, 0x25dfdbfd, {0x3}, [@typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@loopback}, @typed={0x4, 0xf9}, @nested={0x12f, 0x85, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@empty}, @generic="60005d019fcaead2f07f52fb46add93a9b8506f43d5cea2d8f4a79fa510c57d370836cbecdbebbd3a9a253cb4c8e20f03afb79526335ce7f0906f607ec0b40d693d36d09c41a03d22082595256ca9fec52b96e58b83ff94fb978", @nested={0x4, 0xa0}, @generic="5f4dca8f6f2be6314f31eaa56800a6ab91eaec61fd4d5158a80e7d3a0a6d0d3d67468a354d5efa31266ed39e517ee622756901cb080bf6d0383b4f3d5c77b72477d5ace6a5f1f6b491399af42684a884514402941d12bd4f18fa3f767a51fdc42477991456fa286cf447f5b2ea9e5e942df45980396031e3a3a377e18f06de80d098db4294f9857013c369ddf7fde4adea50f3cc89046cb503918edb3c505cd0121e4fa84b18ccec5d", @typed={0x8, 0xea, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0xd7}]}, @generic="2870e5288a9ce8b255465a91e3a808ad8b3d290c6fd382290a3ff6f35605d1d63f807a0104ba1b3c7830fefc9629a7faa40c66a3515c225dced48c8752d6b0c6179fe767ce45715d895f66a8dd39d76b478d29368b53df36a56a0a28a4fb71f26ca1480f0e83337db6882fa10878ce05313d5b5938293383efde58ff4ebf2d1b69402d4a"]}, 0x1e0}, 0x1, 0x0, 0x0, 0x240080c0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$NFT_BATCH(r3, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x1b8, 0x0, 0xa, 0x201, 0x0, 0x0, {0xc}, [@NFTA_TABLE_USERDATA={0xc2, 0x6, "92db9e0b9025531cacbcc59045eb30b2efff658afa74521111efadfc9cbcca55e57aa3475f32f0e07c1398ca4ddfea87a530cf1d95ee53d98647f15ccd6f6df83ca98bcae77c8c56f3cb895ed963e0e3f5c0abe59b4c5ddf28917f507581e5f3212d53fbcccb841e5a83b4d983c0fff46bbf0555a12a9810f7bac0adf9ce100f60626e4815eec4e37f8c530b3b3859850fc8ddb0a16357da0c217c02d74f1911c8e378d65634ef318ae501fec56abb53437054145351c21897c0addd8cd1"}, @NFTA_TABLE_USERDATA={0xb1, 0x6, "86401eff5f852c17df5a95e48eb063839ba83f8dc16940fd1133b59aff14f1317e9c44bf1b542cf5b7157fc1ccacb50746f0c4d6f1e150192b9ccb4d458c3d780c10730f1e2e199a6b41abff451d7de33ecb490529e38c62c4965046f4eaf165627f9d6c3d1342118d19722ef67fc01e73530fa306def37b1314d00ccea1b545208b3b8cdb8d4ceeb01876a5c8e6b5d6564f0e7ffd0b7f512f68b2ba344125e7a006781ba1c17e4d0cab8cedc6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x124, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xb4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x699}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}]}]}, @NFT_MSG_DELFLOWTABLE={0x64, 0x18, 0xa, 0xb00, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x40c}, 0x1, 0x0, 0x0, 0x1}, 0x20008005) tee(r3, r0, 0x6, 0x1) r4 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000007c0)={0x0, 0xff, "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"}, &(0x7f0000000900)=0x107) r6 = socket$key(0xf, 0x3, 0x2) gettid() ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000980)={0x100, 0x30, '\x00', 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl(r6, 0x80000000, &(0x7f00000009c0)="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") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a00), r3) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000001b80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xf0, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x111}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x17}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000001d00)={&(0x7f0000001bc0), 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x30, r9, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xd, 0x18}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x200488c0}, 0x800) recvmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001d40)=""/226, 0xe2}, {&(0x7f0000001e40)=""/38, 0x26}, {&(0x7f0000001e80)=""/96, 0x60}, {&(0x7f0000001f00)=""/101, 0x65}, {&(0x7f0000001f80)=""/19, 0x13}, {&(0x7f0000001fc0)=""/34, 0x22}, {&(0x7f0000002000)=""/141, 0x8d}, {&(0x7f00000020c0)=""/48, 0x30}, {&(0x7f0000002100)=""/246, 0xf6}, {&(0x7f0000002200)=""/16, 0x10}], 0xa, &(0x7f0000002300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x2000) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002440)={0xec, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TESTDATA={0xce, 0x45, "e267ed7faa6f6234b4f5dc22807cd7d375b3c8b35ddbe74f2d4cd24cd921a8a0f7d8014b7f94bfbe54b5fd15ffb9329c97ae5c2e45d57770e989ca8977235df1ca179ab9b98e69a1f8b5c037db1ff2d3877b9959d36fbf53a9705acd380ab0904abc7f93352d95e52d626b7d99c17679ddba831077bb88496b4be061bc395270e107560da402b2f06d565ffc476c163a1519bfffc2c4db7098c1eb0493b1d880cdd7c74f6a134d269f633b1b63ab4b9be46aa184649f0e5c0541ce0fd9bf8dae4919b525b99e357edc20"}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x80) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r13, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x2894004}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r9, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xc93, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4010) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000002700)={0x108, 0x1ff, 0x9, 0x1, 0x7fff, 0x299, 0xd82, 0x5, r5}, &(0x7f0000002740)=0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002800)={{r12, 0xffffffffffffffff}, &(0x7f0000002780), &(0x7f00000027c0)='%pS \x00'}, 0x20) ioctl$AUTOFS_IOC_PROTOVER(r15, 0x80049363, &(0x7f0000002840)) gettid() syz_emit_ethernet(0x1e, &(0x7f0000002880)={@empty, @empty, @void, {@can={0xc, {{0x3, 0x1, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "50a909334d3487d2"}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f00000028c0)=[@mss={0x2, 0x40}], 0x1) 4m3.052569956s ago: executing program 2 (id=3444): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushpolicy={0x10, 0x12, 0x105, 0x4, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) 4m2.664326231s ago: executing program 33 (id=3444): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushpolicy={0x10, 0x12, 0x105, 0x4, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) 4m2.645191523s ago: executing program 4 (id=3448): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r1, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) listen(r0, 0x0) (async) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r1, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) (async) 4m2.633951215s ago: executing program 34 (id=3448): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r1, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) listen(r0, 0x0) (async) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r1, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) (async) 2.809429939s ago: executing program 3 (id=7066): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x2, 0x3, 0x83c, r4, 0x2, '\x00', 0x0, r3, 0x4, 0x3, 0x1, 0x5}, 0x50) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000840}, 0x20048000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000100)='%+9llu \x00'}, 0x20) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000440)={'macvlan0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r7}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.607890153s ago: executing program 3 (id=7069): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x210) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES8=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) setsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000440)="4283a946fbdf208eb90c2fcadec49da0b5c7c98ae2a7ec5b0750725b20f7209c0c578e73f6ba6fe72e8f7e74b70a123794f53576bb397e83dc75b1aaef7bc4ddc5f15c7ed036cb7e9ca641404c2d94123a5dbde5fcacac150b1d803e91428954452875a30306874e14b582b13dd3d2da53736e770bd1aa6157333f848ecf590752bd3be7b56bd8ee62a534e5f90e9e782753ef618af0dbdea580d4b3ff0e50f7e776777144609ec618309ee2d30809e05b", 0xb1) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYRES8=r5, @ANYBLOB="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"], 0x48) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) pselect6(0x40, &(0x7f00000001c0)={0x200000002, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004441) shutdown(r2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000003c0)={'filter\x00', 0x0, 0x3, 0x38, [0x4, 0x2, 0x4, 0x8, 0x5, 0x5], 0xa, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/56}, &(0x7f0000000280)=0x78) recvmmsg(r2, &(0x7f00000055c0), 0x4000217, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) socket(0xa, 0x80000, 0x1cd3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 2.400447012s ago: executing program 6 (id=7072): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x385a00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r1, &(0x7f00000002c0), 0x0}, 0x20) syz_init_net_socket$ax25(0x3, 0x2, 0xc9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xe, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x1000) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0x215, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000022c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0xf01, 0x0, 0x0, {0x7}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.874651489s ago: executing program 7 (id=7076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000080)=@raw=[@generic={0xd, 0xc, 0xa, 0x5, 0xfff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x800}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0xd}, 0x94) 1.861877994s ago: executing program 0 (id=7077): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@can_newroute={0x13c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0xfe, 0xff, 0x23, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x3, "5c8d58521088d800"}}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x13c}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x1010, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/236, 0xec}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000380)=""/12, 0xc}], 0x4) 1.808154959s ago: executing program 6 (id=7078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'caif0\x00', 0x0}) (async) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) (async) writev(r1, &(0x7f0000000180), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000000)) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) (rerun: 64) 1.790596296s ago: executing program 7 (id=7080): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffd}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x155, 0x8001}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xd}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}}, 0xc000) 1.734135992s ago: executing program 0 (id=7081): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x100}]}}}]}, 0x4c}}, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3}, 0x50) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1828000003000000000000000200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd0000000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r9, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) splice(r0, 0x0, r1, 0x0, 0x10d02, 0x1) 1.664408307s ago: executing program 6 (id=7082): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cc0000002b000b002abd700000000000050000000800030000000000b0000180aa005b802000258008002300", @ANYRES32=r3, @ANYBLOB="37eb207a", @ANYRES32=r4, @ANYBLOB="0800d900030000000400c1800800a100ac1414360800be00", @ANYRES32=r1, @ANYBLOB="f8d782c9e6b4cd31afeffc12e9e930958a1d269dc298bb5de3a1469bfa6743de8f1cf4ad1b76080083007f0000000357cfd72fd8fe8fbb54853394c57caa4f1492da8cea51dfc91c31b364dd2fe85cd1dfdd5d1ceac710532a903bc9d6f3bcd656bd2a2c535eb97914da4faa56b40f6888ac0ad6de500000"], 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/ipc\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0xa8, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x8c, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_b, @initial, {0x2}, @value=@ver_80211n={0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @tdls_teardown={0xc, 0x3, {0x30, {0x37, 0x52, {0xe, 0x0, "f6ceeb793f39166ea234caa48754ae31", "fd67506e7a0070638655ad406988e2a30be547caacdf6395f157b4ac243c2ff1", "65af9432bfb7c479e8024717f8bf5867a6cfdcf700"}}, {0x65, 0x12, {@initial, @device_a, @broadcast}}}}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x44050) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x45, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x8, 0x5, 0x823, &(0x7f0000000200)) 1.663818603s ago: executing program 3 (id=7083): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmmsg(r3, &(0x7f00000067c0)=[{{0x0, 0xfffffffffffffef1, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}], 0x4000000000001b7, 0x120, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f0000000400)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0xffffffffffffff7f) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x4e24, 0x0, @local, 0x8}}}, 0x108) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r4, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0xf}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x100000003) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in=@empty, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f00000001c0)=0xe8) 1.54082188s ago: executing program 7 (id=7084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x83}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0xcc, 0x24, 0x200, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0xe, 0x1, 0x6, 0x2, 0x5, 0xd}}, {0x4}}, {{0x1c, 0x1, {0xfc, 0x8, 0x6, 0x0, 0x0, 0x7ff, 0x5, 0x6}}, {0x10, 0x2, [0x1, 0x5, 0x3ff, 0x0, 0x6, 0xa]}}, {{0x1c, 0x1, {0xd, 0x1, 0x5, 0xfffffff0, 0x1, 0x1f4, 0x2, 0x5}}, {0xe, 0x2, [0xc, 0x7, 0x23, 0xfd, 0xffff]}}, {{0x1c, 0x1, {0x7, 0x39, 0x0, 0x0, 0x1, 0x2, 0xdb4, 0x6}}, {0x10, 0x2, [0x4, 0x3, 0x3, 0x5d7, 0x5, 0x6]}}]}]}, 0xcc}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8948, &(0x7f0000000580)={'vlan0\x00', 0x10001}) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r10, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r10, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r10, 0x0, 0x6, &(0x7f0000000040)=0x40, 0x4) (async) recvmmsg(r10, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0xe70}], 0x1, 0x45833af92e4b39ff, 0x0) (async, rerun: 64) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) (rerun: 64) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r12}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 1.5109787s ago: executing program 5 (id=7085): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000100)=0x404, 0x4) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="82f805d7649496db7295", 0xa}], 0x2}, 0x4001) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 1.43226289s ago: executing program 6 (id=7086): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x10001, @local, 0x6}], 0x1c) read$alg(r0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r2, 0x89e0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = socket(0xa, 0x5, 0x0) listen(r5, 0x100) sendmsg$inet_sctp(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@authinfo={0x18, 0x84, 0x6, {0x6}}], 0x18, 0x48d1}, 0x41) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="20002cbd7000fedbdf253700000008000300", @ANYRES32=r4, @ANYBLOB="4800a0000008000008009f00060000000800a0000500000008009f00060000000800a100000000000800a000000000000800a100001000000800a10001000000080057000400000008005700ff000000050018012100000008009f00050000100800a0000300000008005700f9ffffff"], 0x8c}, 0x1, 0x0, 0x0, 0x48845}, 0x4000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x14) setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f00000009c0)="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", 0xfe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000003140100000000000000000009002200"], 0x60}}, 0x20000000) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="01010800", @ANYRES16=r3, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000c80}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x38, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x3c, r3, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x70}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004051}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1f00000006000000070000000001000020000000", @ANYRES32=r0, @ANYBLOB="0600"/20, @ANYRES32=r11, @ANYRES32=r0, @ANYBLOB="030000080000a778f8475707d9450a958d4710000005000000000c0000000000007ea1ad374993b2649400000000000000002a4e11d992c0730a97f0461c700f9a325240f67985b13c3cc6f0ad1ef44fabfea4e62a3b77bea1c0828ae9ba743dc4036b25fc10c7d5467663260356f9a32691fec0dc823459290d117f17959aa425"], 0x50) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000001240)={0x888, r3, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x74}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x83c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x834, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x2c4, 0x84, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="27fbbbeed133"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x7, 0x1, @random="e6ed8e"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xe76a}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="dee8963995f0d8dfc150"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7fff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff8001}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xbe6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffff8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xb}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7d}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7f}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="fcf2bd299962d0a7d34e7d9a10d5ec644ea73b8cf6a6"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfb7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xb, 0x1, @random="97c9c5b215fd1e"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xd24f}, @NL80211_BAND_LC={0x8, 0x5, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e4f2ecefd2f8"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x24, 0x1, @random="8013db03c69e93116659ae418c48e717d0e41aeb2fa8fa985d98da2de6d06e02"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x7, 0x1, @random="83d7fd"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="3191b7023722"}]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0xfe}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2f0, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x16, 0x2, "29b0d0caaaaa801c1cca15d3be7d85d4626a"}, @NL80211_BAND_6GHZ={0x45, 0x3, "72923b49e7e23f46f38eb16cf06f80fcab71d3cf86bd33be61b5a20718e48b081eefd976732f108b1c8a1bd1cda4a4f66574ec7a9717f40b5d83b35bc64af70ed5"}, @NL80211_BAND_6GHZ={0x13, 0x3, "01040616d0f7a6fceed66e3109858b"}, @NL80211_BAND_60GHZ={0x73, 0x2, "9f8cce8cc1ddd7f5411eade468799b50a81fd603acfd60ca3aeeb6c99083add6a9d2722d21f3629f28c8b480083217fea8c00bed2b32c3f9ee155085433117114475cedb8312733cbad62194ff661680c5ccc6b178ca488495c59cf8292f0232deddf718b2d1653106bd57267b9434"}, @NL80211_BAND_5GHZ={0x95, 0x1, "bd875e28b00406a23055b784a439eafe70f18a1148962b91987f8eb1b717a86630a51fe8c72512b5acbe0ee34f1749d12408fdfb7be6ac6ef9339e7f16d169a93aa0cf4f774034cd366469a9444aeb022f5ce4a3607d4740da3196bda991507deae73740a698703e2479c4068e1a6e5f453a0f16d6fe3373644d5f1569d8bcb46bcf280cd27a3f0d3fa79b2212fe35ebc2"}, @NL80211_BAND_60GHZ={0x8d, 0x2, "66c8ce89e0619a74ca43903f8ce0162c59d96f342893a586b0c115c31aaeef78fe687dccb507fd749f870510bb9f4827fee82cf5cbeeed2a36111512e1a99b2dd6f6bc16407a85daeb59787b7bd950be8172a18a70a4eae5633eeec44df6f3f73ad2ace228c31226b297bf5d9821a14a126a672d7de10a3c092d4a1bc1e2970e87b50c587d22374b51"}, @NL80211_BAND_6GHZ={0x34, 0x3, "aefb75b26bbe59b2af05ff0ad205b83627b7690edd080944c015a05a1e80d378e0d05142e450c06d02fb603cd8f1f9be"}, @NL80211_BAND_2GHZ={0xa7, 0x0, "693bc09fb241e35ebafbcc0f30af67ae08c61dfd89f07386e1b9c2210eef246e87aa36397418f88c9caa609d4c314e325faa4a4fefb5b60a4c196ecdbeab970ba20fa9a6be9134e576e1c93f09d0e76e6c69b963a4ba036f9c6c33b675ab3cd9cd890bfb9d3badda0fb94cfbb1c44316ac15d292d92e05b8caa04c2d14b8239bc7dcc498681b9a9dd088caff25655ca20e0646b7c24fb99a28bdb8371dc24aa946a796"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x268, 0x84, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xf5f6}, @NL80211_BAND_LC={0x8, 0x5, 0xa}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x61}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x567}, @NL80211_BAND_LC={0x8, 0x5, 0x49}, @NL80211_BAND_LC={0x8, 0x5, 0x400}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="aa583039b2caf33ce85135ad5284d9432d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="905ebd055aee"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8000}, @NL80211_BAND_LC={0x8, 0x5, 0x443}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000000}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x23, 0x1, @random="61b76e28a59150c454ac5ca4e20216fb7ebad275b72c5876af9171d2abd87d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xd027}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8bdc}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x18, 0x1, @random="755d692d3aee2f39e17ae3974439573ab8b9f418"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xd8}, @NL80211_BAND_LC={0x8, 0x5, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="3cca0a7385a16aea24ddbd27ba"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="4b6d621e7cd96a973f633859"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffff634}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x30, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @rand_addr=0x64010100}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xa}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xff}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x888}, 0x1, 0x0, 0x0, 0x4}, 0x20044811) 1.354499517s ago: executing program 0 (id=7087): r0 = socket(0x10, 0x803, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r7, 0x1c}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', r7, 0x7, 0x700, 0x5, 0x400, {{0xa, 0x4, 0x1, 0x1, 0x28, 0x66, 0x0, 0x9, 0x4, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x13, 0xd7, [@multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010000305000000200000000000000000", @ANYRES32=0x0, @ANYBLOB="000000008008000020001280080001007674690014000280080006000004010008000500e0000001"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.2831005s ago: executing program 5 (id=7088): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x14, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x8db}, {}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x2000000}, 0x10}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x14, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x8db}, {}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x2000000}, 0x10}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@dev, @remote, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@private0, 0xe, r3}) 1.208547073s ago: executing program 6 (id=7089): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'veth1_to_batadv\x00', {0x2, 0x0, @initdev}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000300)={0xa, 0x4, 0x6, @loopback, 0x8}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0c2d0e0", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf251100000004009a3fb48a9a245cebc201800c00878008000100", @ANYRESDEC=r1, @ANYRESOCT, @ANYRESOCT=r2, @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x2}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86edabf0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509debbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) unshare(0x22020400) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="25664389600c111cb24dd64d7aa984a29f66741a961cad5bfaeb617d65d64865194b5f3e1c080a65e2b9ed3f0619044202a1d5f3448fce98f5549c82ebddf518b8645ee6f555d5330d540132fc933a0b345144d464c4976bd380a9a4"], 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r9, &(0x7f0000000700)="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", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r10, &(0x7f0000000400), &(0x7f00000004c0)=""/78}, 0x20) r11 = socket(0x2, 0x2, 0x1) bind$unix(r11, &(0x7f0000000000)=@file={0x0, './bus\x00'}, 0x6e) r12 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004a00003c00000000000690780a010101ac1414aa07070441b6cc8f440c0b01e0000001000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7da5df59737f8d9d00a5ad0000000000ffffff000e01000014b50300626f6e643000"/49], 0x50}}, 0x40) socket$kcm(0x23, 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r13) 897.006656ms ago: executing program 5 (id=7090): socketpair(0x18, 0x0, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000100)) r2 = accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80800) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x25, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xda7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x17}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @jmp={0x5, 0x0, 0x6, 0x1, 0x0, 0x0, 0x10}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7f}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x4, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x5, 0x2, 0x0, 0xa}], 0x10, 0xb87}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x0, 0xcf, 0x4f, &(0x7f0000000540)="172bbffb3b00e121dfac87e6769e973daeccdfda38531202910ce357346973a5345cf2779c77fc554326e3dacd51336d946e9f4e25309261997ece30a221542f96c57310454445d5e6c1705431a4df9bd71233321cd827f8a76572aeb1851d99c95aac0bfca2b51fcb4e9c01536c4763dcd5bbeabe95478c51c47bcc05b39911b43cde21643e7eee7d80a99b8f844e5bd20c5f348ea6cd0777457762a8b0834a8fc5fbdfd70b23b4b29a959f1fd4512104b9115ddc0be217961eeb6f2c536d584572bb3acdc3b5999de0082b2efe8c", &(0x7f0000000640)=""/79, 0x4af6, 0x0, 0x34, 0x55, &(0x7f00000006c0)="08790509728883fb98441fc0f7a7bf66088e6cfd696881d37b02c956a3f19e15af743aebf5b395773ef3def286db3e241e5e9837", &(0x7f0000000700)="7fdf502dcad8dcc6b5afb6800515dce9f4b40b9747bd41b084df8ff8ec8cd0ef92c98f6c8b8db1473bc583c124be6b3a1bf869b14cc2e9a0aed0d53675a18317fff3c21e324231d58097bd9ae5ddc679454b4bad4e", 0x5, 0x0, 0x7fff}, 0x50) r4 = socket$inet(0x2, 0x2, 0x1) close(r4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000800), &(0x7f0000000840)=0x4) r6 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000880)={0x40000000}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}]}, &(0x7f00000009c0)='syzkaller\x00', 0x4, 0x70, &(0x7f0000000a00)=""/112, 0x41000, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[0x1, 0x1], &(0x7f0000000b00)=[{0x2, 0x3, 0xb, 0x3}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f00000008c0)='spmi_read_end\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d80)={r8, &(0x7f0000000c80)="e1f8c33c165dfc51b87542257b40bdcf48979f87288428ac87f7d87d8c296863b1b58b085c09146456ed08e7df2a3de68584abd133ca3b3ffaceac689373860e13935916d1672becb5ec4fca4d706c96373a9c0d83b2730d98c0863ca389b39ba5b7c619b740dc6be7f06352c9ed2686f10efab13d75e74c553926577587eb77d2f0df1d2291e25fd23adde03594c21f6d1ae40cecf456726158f42232aae608db4d32a4af26ed32ece759688bd7f3600344eb7b", &(0x7f0000000d40)=@tcp6=r1, 0x2}, 0x20) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000dc0)={'security\x00', 0xae, "acb3d8ef959afbe18c99ca72bc34e538d7fcea18c02035bcc0877540e999aa9ea15242eb2865ac04e8755c05c0754dc0231c152200f4163d58a1c8ea99bebe3d8262a8aaa068fb142ba6b47526162e833707d4863e31ec7ac9e4703927e8e932afd51259fb5fef6e62fa68411c9868ba902c955f387da612d9ac7c6c9e1d8ddfeb2a793bbc2cb60a6a83eeaa89b4657e81106f1d4a14f9435da25e926bc35539e6904504f802cadaf69fbe6f54a1"}, &(0x7f0000000ec0)=0xd2) epoll_pwait(r6, &(0x7f0000000f00)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xba, &(0x7f0000000f80)={[0x9b1e]}, 0x8) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000fc0)={0x0, 0x1}) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x70, r9, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5b0f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000000}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xcd}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan1\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9f}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4080) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f00000011c0)={0x0, @in6={{0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd4}}, 0x4, 0x60}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001300)={'syztnl0\x00', &(0x7f0000001280)={'syztnl0\x00', 0x0, 0x700, 0xf010, 0x2, 0xa, {{0x11, 0x4, 0x0, 0x1b, 0x44, 0x64, 0x0, 0xf, 0x4, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0xc, 0x29, 0x1, 0x5, [{@rand_addr=0x64010102, 0x1}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x67, 0x1, 0x5, [{@multicast1, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x1ff}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001340), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x14, 0x4, 0x7, 0x10000, 0x4141, r8, 0x0, '\x00', r11, r12, 0x2, 0x0, 0x1}, 0x50) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000014c0)={&(0x7f0000001400), 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x18, 0x3f9, 0x8, 0x70bd25, 0x25dfdbfe, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) 863.050041ms ago: executing program 7 (id=7091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x40000000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xadb9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x20040054) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x40000000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xadb9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x20040054) (async) 756.661878ms ago: executing program 5 (id=7092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$inet6(0xa, 0x6, 0x20005) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, 0x0, 0x8008090) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r12, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 658.372609ms ago: executing program 0 (id=7093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000000001010400000000141a00000200e6ac240001801400018008000100e0000001a58f0200e00000010c00028005000100003fd5157766e5d14f97c84cc1333c000000240002e650e20380080087808dec01000000000008000200ac1e00010c0002800500010000000000080007402c906f531041e5ece2f9d57be0c449fc904090686363d71c83d3612fa406c038139c5bce03df53c057229e8ebca52ef3071c324efbacee3b811c42c01a90dbb2380de7a9ea201a96603709f96a869cddaca8576d5a8dd1705b27f016866324"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 640.703988ms ago: executing program 7 (id=7094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x0, 0x8, 0xa, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0x0, 0x2}, 0x70bd28, 0x0, 0xa, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001c001280090001006970697027d6fc6015b652eea28f3b"], 0x3c}}, 0x20000000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 580.619395ms ago: executing program 3 (id=7095): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="73e0a01e28ad594daa31632edcb1c0d1e3d847e257d2e233db31f896", 0x1c}, {&(0x7f0000000380)="a5c930d5a5636015aef4beb68f7af32d188f86812ecac8d3b912a66c9c036452fe9f2bd78b5ee8fe8d499777a52530fe688f35c829f4439d4e8bd3bee729de597178e0b664435e748673b46ee808e6a484fd32bacc2cf7256409d71307a8b4eb333da4ea713747c9e3e21b29a0c356", 0x6f}, {&(0x7f00000004c0)="c1d5e1172b0eb4973392171508f4e651548f988e829c9bef5ab39c418fc10f3616a9ae032258f5885d93c7467e7c23ce9764dff6d266063125e3108b5d81bab2604991952097b14590715b51d94a5d010ab825f38c33ce1687e2fa45f1bea945c6ad3f8fdc93daa2eca2ccd4a17e", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="604a898ae59fa212e8d63a63a6303d0102b3478f91dd7a802fe9e6d7cc0a7a72c0d9dc4311332f43d095af29b9e06c92471d7d43955a49041ecd1b96931d4afc80aa92c55514da4ecd960595e9f1c75fab0239e8", 0x54}, {&(0x7f00000007c0)="baa066016db9e67a3c69907322f95c6e9ed379e658ed82dc637fdcadb95d9a2e1ffa156eda30b96cdc64a60f49530cc6c7f9daeadb099ca81a2d715b3d099158fefced9bf7c09e9c98fea5dcfd4d6ded7cb4bdd0e04f2af19120f5cf234dbe4471385f107e56634444a28859a7d7b050c9256390cc78a38a0eb902a38a50d32ff3d8b96ef942a10a9325222c998903cf9a128ebae54ab42e754e089121962cc15b11c88552ae631e5f12", 0xaa}, {&(0x7f0000000880)="ece417fc7f96212e550d4ad27388f8e2d890d00641c588fa34890984e35a8629c26c0e7217e7ea557d953a5017243af2f106f1e6d24b88dd424966eec111e551fca801b6a122326e9533492287de9391539fab52f3f3c703fd78269088a045d737f8a268a1ca445bdf32c631a1adeee7a86c11dd86dc5f8bdcebb5962fabd3d21e67724127a3ca590e6d5d574e9cedd82d3628f068bd315a2d835e7dfb459c6af1a1c5eb1512f590de11f22b318d2879993cc7a018f54c", 0xb7}], 0x3}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000b40)="043ebef0c4e9be0c1f44ae8902e00272f6e514f467f73aee0b0020878b9a08ddfbbbe73189ac63cff3f05820d019badf4ceb8aba782de8199b9d2516b5c30b6560a7920768d7cef6b62244b5b6eacfae9e281ff493618123129a02ced96eed241b223847ca27996331ba84f7358013560cb877ba9f28b6", 0x77}, {&(0x7f0000000bc0)="1aa72178108b40eed3c68e652ab46035761788f009584bf6c42107ddc3b62bd23ad77874c11bbf452ebf4c08669698de3b34f9c8d2ed50efb429a044a4d9ab4a6370d9ba204c253db47ca3d71a45afdb88532b440135a978497105000000", 0x5e}, {&(0x7f0000000cc0)="1297ae593585c53da2d9ab7f016d73799ac8b458de9ab9362e13bbd0f646dd543f73dc932715477d024e63cfc37429a14b3b3f6a7fccb39d21c495977315e7c968b37bfb98b38d2c5d77cd65762ce82c1964d1ab07e811f680c1cb79e192492c23ab72063a111966fdfe17ea76ff5434c21a1d0f3b0dcd963ef367e43f1cd4399936ea72a8df30ff3533b9e6583a1cc020efea4d90e21d8b20482489dfe726d2b1f2e8d920219cf4a35d4a47b816db404ac3aa0863e1da9135a217e3059472a09bb0e71ed72641c6447d8d0a416b772090e1ba5f00674f9513720a61732e23", 0xdf}, {&(0x7f0000000c40)="a03a95a2c4774e048b320683232d0e74ade1aa9d9b05db336d35ad686a044c61450c0e67bd", 0x25}, {&(0x7f0000000080)="bf23010b2d05d776df835a83cb637f092ceba712fd33c6ecdc1a7fb5c20f55832ff636f4a805", 0x26}, {&(0x7f0000000e00)="e5b5862970a93ac36cb456670c3f6deea03ae5cb4733480c5ffa9f0b02743e7d0589d4ec6a86aa53547467fb59d77e0a19fd91a6b1a5af82befc5ad6096c8d63314ab2155725edc200a8831e99e34b1cfd12ae03b2aa335a5f1f2d27d45a20c2857b85dbebe666bc6649282e0c1941c00307702e0816dbc15171f882c3f8c7a7ace486824386abc62116aecdfe85ff7995d8127f02b02936786529a70ca2698a550cfb4163ff8b48b5a3a49d32a488173b725773080dcd11321881b582311f8fbae1b71ad5028ef35ff895", 0xcb}, {&(0x7f0000000f00)="8cfd977831e58d46155d2196e2de818ca76b9d57052bdfc7ceea754fd445047e4b38fa43a0b28bb0886fc283864d322d8ebe", 0x32}], 0x7}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="b99032700e9441b44d8ab573e390bfd6f1632a18f5a5217c53d98413d6ba747ba8bdde06ffded0a5c66673cddd7fbeace48b8d7bb2b9dd3177abc28c03b225eb03acb39f0f9aa015b013d856a5edd9b4bbd5ee8178f038654454", 0x5a}, {&(0x7f0000000280)="be4d5932d539120bbfa6b6983920286a65e1c023e670e662c54febd3cf6e6e11541ce6e19c9646697c8f78a65ec7f0577be865d79c042e3a9cc505eaa9820f80fed1", 0x42}, {&(0x7f0000000580)="a173d3ffa297c7829e00348fb4fb55434c569806a4103b0d8b", 0x19}], 0x3}}], 0x5, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 524.211675ms ago: executing program 3 (id=7096): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002dbd7000000000004400000008000300006f78e5dca94974b5f53378ff754e49db7736c2f87a8f7840cbc00cea4d4554c4a92861970dd81af1d60dbf5f29826ee34f14e83c74fad6d74049710f695d46e6614d9e1611dba7e2ac2037baacf033bdf36126b9368facc4b9619beb2ecfe5ec521c8c9ca4526bf7f9c0996afaf794720c2856c33a5510de4f6e", @ANYRES32=r5, @ANYBLOB="0a0018000303030303030000100070000b00030073d84474b3f43200"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)=0x10, 0x80000) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000480)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000008000000d1040000020000000020943d", @ANYRES32=r7, @ANYBLOB="0000008000"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="05000000030000000300"/28], 0x50) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x45, 0x0, 0x1}, 0x28) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x8, 0x5, 0x823, &(0x7f0000000200)) 294.498206ms ago: executing program 0 (id=7097): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffe64) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57) syz_emit_ethernet(0x56, &(0x7f0000004180)=ANY=[], 0x0) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="0451b03c89d228200280"], 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) r6 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8) (async) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000000b010300000000000000000200000000000240000000000d000100727066696c746572000000009179b1e459ae51f342fa219df37cf10bdfb958abb910d8980ef2cc37dc708d5d05fa710355ca47ccd9cd63c5738f55088206bfce0710dcbb1cd46abcf28e4124cc0b4afa9aad0dfadda353458b1886a06fa75b6b23bf33a7e776c76ff0f8fbe2eff4d485df980000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) (async) close(0x3) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc) (async) listen(r0, 0x8) 236.431489ms ago: executing program 5 (id=7098): r0 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, &(0x7f0000000500)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newtfilter={0x15fc, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x15cc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x19}, @TCA_ROUTE4_TO={0x8, 0x2, 0x3b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x10}, @TCA_ROUTE4_ACT={0x15a0, 0x6, [@m_mpls={0x110, 0xf, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffb, 0x3, 0x6, 0x81, 0x2}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xf80, 0x7, 0xfffffff3, 0x8}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x800}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9000}]}, {0x84, 0x6, "89f6eba29ccfa57069009eef39d76a7075bb9721977779651348c16ba058e3caf534937f27df2863f7405d4ca9cdab9ad67213d4f2964fa14f14a7b1650df3e69e2f118ea31f54d2a220bd23bf3f45fe2c6cac58d381e83cf7cec9b84b11657f7eb197baf7b403a61e075188ee200650969d0e140e0d11428ab18f5b1655517a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0xdc, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x400}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x9b, 0x6, "f75d8e313ee4e4837d47a5f802ae150503bb3e61bbc15dec86b08bf85799335f6c350c29907976d857f150c4fdbaf5191416d9c150791cf1cdbddcbfa337af8140ed171d62377b0717bd6c12ae140662177d7ded7b9b1b594458225bca958656c8c4b04f83167286c24e47e284e88d87d3d75d5e825edc90f28b4c5cac53ca24f130b62f895558375582054b6c29e307300703a74a14db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x1078, 0x11, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x10}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6007}, @TCA_MPLS_TTL={0x5, 0x7, 0x48}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x92}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1a}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0xe8, 0x20, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x9a, 0x6, "06aaf817ec517e65f24cd03f89351ab10c34205835e4ab7f294ccd59b0eecbb1f31c463a91f760ed87bdda72fef4145961d5c031e98174b7b50cfda0634e394d3448041e59e1495ac3f49d44dc5cebf9c5ee6eb82ae45b0edd7a309dcd1acf2b62a92a61a17ab4690da8b91fcc4020e5969f722764811cdada9840ed676fa2b147fc4746e859dd203247b9b8abdfef1586908c642979"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x1ac, 0xe, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x0, 0x1, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x2, 0x8, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0x2, 0x800, 0x4}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0xffffffffffffffff, 0x7, 0x9}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0xf, 0x4, 0x1ff}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xfffffff4, 0x6, 0x6, 0x7}, 0x2, r7}}]}, {0xbe, 0x6, "d66803d28958e12d0ce2583cc758701dcb0b8e78a0dec48a98dc54abd20b80c90eab9d24eef3d7429cf4062868516cd7be514a2275bc15448c49507508597952eb4f7e3adbdf494c6508e06f781387f243dee4c012f3148250f07537e7ac367fb257d0f1bf218802932d4d3d9bbe47506ef23650039c0b35a3fa0ba208c4306a00309b54279264de83badcf5d40324d6dcfc0492477bb697cbd76f40a33ae61ebe58b4ffbbeae63faa89efc501ecbd1ec4286eab4360d78691a6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0xa4, 0xc, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0x1}}]}, {0x50, 0x6, "3ef4035c6ec20629b50ce15b4ccb0625c27ef9e5008e579008f67bf1554b823199b9a97bc4cc0011e543d307e6b16e42c5bb6d690195229e1dca533ba834d74a98326f6e5b0cb6fbe2682d7d"}, {0xc}, {0xc, 0x8, {0x232c6ad26e7b939a, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_TO={0x8}]}}]}, 0x15fc}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@void, @void, @x25={0x2, 0x7, 0x17, "69a0694d9eb17ffd70c7aee8f8b304af1e84fb424086cb9af9d19d52046d00d907f0e8b2d2d7f944675dacea2fb3de6c5a6e3a5d1a730ae30b14840f5361912d4fa9875042252e3e636573412eb503fc1f20f0e70016c1d96cade7aced5dc7d2c2c6ec5278765506147f7d2b0b7765fb764461a437c4173a11d26b4fd51113f353ec24c28fa6b65a4a59c17b42a6ec"}}, 0x92) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r0, r10, 0x0, 0x400000013) 235.694335ms ago: executing program 6 (id=7099): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000340)=0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb83943667020d3df6845464707ccd7104dc6a994cd42dbeedd2f8cfa86ebba9b00b8aeb8021638931ac11b11721147fe993f32534b3dd", 0x46}, {&(0x7f0000000200)="ca8a42ca0c7565f05d5a7908d131dca97c57014d6e19176bea715b6ec66271c45cd540238c3c127a3666c0939aff745a4cc444292ced2d4ca775981e558cd320b6511ac7a42a1671e545225263ffc3c5c0dc0ec073e713fa2c", 0x59}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000080)="3b2f42080c8d49d7238ba3cf091b433f28cd60c2c3e3917151156fbf2711", 0xfffffc43}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000280)="6b48097632ab2cafe08f68909786d76d1be8d7363ac13a68e892c85470c382d6c2be0da17364752643883792b50b95ff3461cadb5ff282471e30d4fab85909d7c1b04a28c26e6256ff6c75ca8d5200d239f187830c755a267aaf7af49921be2f882f26d9f74c850b65d6ef250bca001e70a2cd8d523c0b71a7377d598b494cccd68e3d4bf378bfd9df0d8ea28923b63184449c78031d6c736e638fda62ad7971b583", 0xa2}, {&(0x7f0000000340)="ef648434b9034870d043039407c3b1b07a75ee0c550bd64654c7ada40f6f6ef6a5c5fb8345f32b0f549a8fbf85264caff0b839dd748fec4b052c4f0d152c80c700f4b86de88dbd046b838f2b659c890e0ab56fc3a92f74e42caf85cd7267fabeef72599a6b73c56939d9c5c1116d39ce0df9ee4b355f89b9fc2b651d28e2c961aa12e584ee3b", 0x86}, {&(0x7f0000000400)="03802e32b59b4735cde66da12d219704f9cef1779ad81d7e8d8c6ac93f0f9b1a42c0feb9fa792769f390914ff6423a6c2fbca23a925d3529297d8ef23611cd1abaeb17ad9edbec0a8e62da3d21578d2f0197bfdd390f53eba02169162b4c0224b679c5e15f9ccbdc15ca8f05d54d6c73cf7d40a11e3156b3feeea4a98c7a199b2b14ca13920d7b0109372c18ffaf4d894cea0cdec047fa82f801acc706a02a57fc7c468a2cd9847cdee0875e59446f1fe4", 0xb1}], 0x8, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000002580), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000002740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x78, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x40040) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 190.434018ms ago: executing program 0 (id=7100): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e23, 0x0, @loopback, 0x9}, {0xa, 0x4e20, 0x101, @mcast2}, 0x1, {[0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettaction={0x14, 0x32, 0x400, 0x70bd29, 0x25dfdbfb}, 0x56}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 151.296984ms ago: executing program 5 (id=7101): unshare(0x6a040000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x2a49, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x0, 0x4, 0xff}, 0x48) sendmsg(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e1400", 0x26}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 372.536µs ago: executing program 7 (id=7102): socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f00000010c0)=[{{&(0x7f0000000380)=@ethernet={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x80, 0x0}}], 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100000000000007) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000ff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000020b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 0s ago: executing program 3 (id=7103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private}}}}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x800}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r4 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x141b00, 0x0) write$tun(r5, &(0x7f0000000040)={@val={0x0, 0x200}, @void, @eth={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x48, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x1}}}}}}}, 0x26) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): 85][T23335] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.543531][T23335] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.552039][T23335] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.597676][T26397] siw: device registration error -23 [ 515.697366][ T30] audit: type=1800 audit(1756312426.648:11): pid=26405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5617" name="memory.events" dev="tmpfs" ino=2078 res=0 errno=0 [ 515.771070][T26401] team0: Caught tx_queue_len zero misconfig [ 515.779097][T26401] netlink: 'syz.6.5615': attribute type 1 has an invalid length. [ 515.803450][T26409] syzkaller1: entered promiscuous mode [ 515.809302][T26409] syzkaller1: entered allmulticast mode [ 516.319832][T26419] __nla_validate_parse: 18 callbacks suppressed [ 516.319857][T26419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5621'. [ 516.765311][T26434] siw: device registration error -23 [ 516.853783][T26443] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5630'. [ 517.281019][T26467] netlink: 'syz.7.5636': attribute type 10 has an invalid length. [ 517.444863][T26479] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5638'. [ 517.455382][T26480] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5638'. [ 517.507035][T26482] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5640'. [ 517.629822][T26486] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5642'. [ 517.657450][ T30] audit: type=1800 audit(1756312428.608:12): pid=26483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5639" name="memory.events" dev="tmpfs" ino=2672 res=0 errno=0 [ 517.921905][T26502] wg1 speed is unknown, defaulting to 1000 [ 517.939814][T26502] lo speed is unknown, defaulting to 1000 [ 517.955718][T26509] ip6tnl3: entered promiscuous mode [ 517.964482][T26509] netlink: 'syz.7.5647': attribute type 11 has an invalid length. [ 518.019615][T26512] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.031277][T26512] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.116856][T26512] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.132917][T26512] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.211566][T26512] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.222511][T26512] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.240475][T26527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.284483][T26527] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5653'. [ 518.295080][T26512] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.308797][T26512] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.420743][ T7821] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.565715][T26543] netlink: 'syz.6.5659': attribute type 10 has an invalid length. [ 518.601647][ T7821] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.634334][T26543] veth0_vlan: left promiscuous mode [ 518.640948][T26543] veth0_vlan: entered promiscuous mode [ 518.652741][T26543] team0: Device veth0_vlan failed to register rx_handler [ 518.735620][ T7821] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.762352][ T7821] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.792241][ T7821] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.833058][ T30] audit: type=1800 audit(1756312429.778:13): pid=26547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5656" name="memory.events" dev="tmpfs" ino=2148 res=0 errno=0 [ 518.865806][ T7821] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.899338][ T7821] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.909241][ T7821] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.931246][T26562] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 518.944541][T26562] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 518.971160][T26560] sctp: [Deprecated]: syz.7.5662 (pid 26560) Use of int in maxseg socket option. [ 518.971160][T26560] Use struct sctp_assoc_value instead [ 519.009785][T26560] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5662'. [ 519.272216][T26581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5672'. [ 519.293413][T26583] delete_channel: no stack [ 519.449501][T26590] wg1 speed is unknown, defaulting to 1000 [ 519.457548][T26590] lo speed is unknown, defaulting to 1000 [ 519.739781][T26600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5675'. [ 519.752029][T26602] netlink: 'syz.3.5678': attribute type 11 has an invalid length. [ 519.884514][ T30] audit: type=1800 audit(1756312430.828:14): pid=26618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5682" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2140 res=0 errno=0 [ 519.928423][ T30] audit: type=1804 audit(1756312430.828:15): pid=26618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.5682" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2140 res=1 errno=0 [ 520.002364][T26631] tipc: Enabling of bearer rejected, already enabled [ 520.347457][T26647] wg1 speed is unknown, defaulting to 1000 [ 520.380975][T26647] lo speed is unknown, defaulting to 1000 [ 521.330179][T26711] wg1 speed is unknown, defaulting to 1000 [ 521.338687][T26711] lo speed is unknown, defaulting to 1000 [ 521.390615][T26714] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 521.398504][T26714] team0: Device macvtap3 is already an upper device of the team interface [ 521.424657][T26716] __nla_validate_parse: 5 callbacks suppressed [ 521.424679][T26716] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5715'. [ 521.507548][T26720] tipc: Enabling of bearer rejected, failed to enable media [ 521.524888][T26720] syzkaller1: entered promiscuous mode [ 521.531200][T26720] syzkaller1: entered allmulticast mode [ 521.609009][T26723] netlink: 'syz.6.5717': attribute type 3 has an invalid length. [ 521.619367][T26723] netlink: 'syz.6.5717': attribute type 3 has an invalid length. [ 521.631515][T26722] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5717'. [ 521.655826][T26722] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5717'. [ 521.679799][T26722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5717'. [ 521.716969][T26727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.970336][T26743] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5724'. [ 522.124557][T26754] wg1 speed is unknown, defaulting to 1000 [ 522.175979][T26754] lo speed is unknown, defaulting to 1000 [ 522.404052][T26771] : renamed from bond_slave_0 [ 522.507343][T26778] netlink: 'syz.3.5736': attribute type 13 has an invalid length. [ 522.517441][T26778] netlink: 'syz.3.5736': attribute type 17 has an invalid length. [ 522.580844][T26778] ip6gretap0: left promiscuous mode [ 522.591544][T26778] ip6gretap0: left allmulticast mode [ 522.617391][T26778] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.629221][T26778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.721707][T26784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.793923][T26788] netlink: 'syz.5.5739': attribute type 1 has an invalid length. [ 522.946450][T26794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5741'. [ 523.249501][T26801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.318133][T26801] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.329625][T26801] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.378735][T26801] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.389575][T26801] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.421106][T26801] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.431084][T26801] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.471497][T26801] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.482016][T26801] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.530303][ T7826] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.539218][ T7826] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.552257][ T7826] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.561145][ T7826] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.574578][ T7826] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.583170][ T7826] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.597843][T23344] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.609209][T23344] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.690448][T26808] wg1 speed is unknown, defaulting to 1000 [ 523.699506][T26808] lo speed is unknown, defaulting to 1000 [ 524.071382][T26829] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5753'. [ 524.123813][T26841] tipc: Enabling of bearer rejected, already enabled [ 524.137874][T26841] netlink: 'syz.3.5755': attribute type 13 has an invalid length. [ 524.147434][T26833] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5752'. [ 524.189261][T26843] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5756'. [ 524.290408][T26841] tipc: Resetting bearer [ 524.400315][T26843] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5756'. [ 524.454044][T23343] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.480728][T23343] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.489673][T23343] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.510322][T26853] tipc: Enabling of bearer rejected, already enabled [ 524.531757][T26846] wg1 speed is unknown, defaulting to 1000 [ 524.535863][T23343] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.553395][T26846] lo speed is unknown, defaulting to 1000 [ 524.597783][ T30] audit: type=1107 audit(1756312435.538:16): pid=26854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 525.095339][T26884] Unsupported xt match [ 525.095360][T26884] unable to load match [ 525.468311][T26904] tipc: Enabling of bearer rejected, already enabled [ 525.660435][T26913] pimreg3: entered allmulticast mode [ 525.794800][T26921] netlink: 'syz.0.5774': attribute type 10 has an invalid length. [ 525.828058][T26929] ip6tnl0: Caught tx_queue_len zero misconfig [ 525.999759][T26940] wg1 speed is unknown, defaulting to 1000 [ 526.006971][T26940] lo speed is unknown, defaulting to 1000 [ 526.212120][T26956] tipc: Enabling of bearer rejected, already enabled [ 526.242343][T26956] tipc: Enabling of bearer rejected, already enabled [ 526.293412][T26963] lo: entered promiscuous mode [ 526.312853][T26962] lo: left promiscuous mode [ 526.494482][T26971] __nla_validate_parse: 12 callbacks suppressed [ 526.494506][T26971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5792'. [ 526.524368][T26973] wg1 speed is unknown, defaulting to 1000 [ 526.563398][T26973] lo speed is unknown, defaulting to 1000 [ 526.570785][T26980] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 526.824048][T27002] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5799'. [ 526.844060][T27002] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 526.854077][T27002] tipc: Enabling of bearer rejected, failed to enable media [ 526.905093][T27010] wg2: entered promiscuous mode [ 526.962453][T27013] netlink: 'syz.3.5804': attribute type 8 has an invalid length. [ 526.968218][T27017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5805'. [ 527.003130][T27021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5806'. [ 527.380612][T27088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5817'. [ 527.389831][T27088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5817'. [ 527.401789][T27088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5817'. [ 527.412053][T27088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5817'. [ 527.421582][T27088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5817'. [ 527.431043][T27088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5817'. [ 527.449186][T27088] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 527.670456][T27107] netlink: 'syz.3.5821': attribute type 1 has an invalid length. [ 527.710862][T27107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 528.224966][T27153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.408334][T27159] dvmrp0: left allmulticast mode [ 528.413523][T27159] pimreg: left allmulticast mode [ 528.647852][T27181] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 528.764814][T27189] netlink: 'syz.5.5846': attribute type 1 has an invalid length. [ 528.788289][T27189] ip6gretap0: entered promiscuous mode [ 528.794556][T27189] ip6gretap0: entered allmulticast mode [ 529.078098][T27206] netlink: 'syz.0.5851': attribute type 9 has an invalid length. [ 529.095581][ T5180] Bluetooth: hci3: command 0x0406 tx timeout [ 529.101953][T27206] netlink: 'syz.0.5851': attribute type 6 has an invalid length. [ 529.480706][T27234] netlink: 'syz.3.5860': attribute type 12 has an invalid length. [ 529.824127][T27257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.184521][ T30] audit: type=1800 audit(1756312441.128:17): pid=27294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5881" name="memory.stat" dev="tmpfs" ino=2823 res=0 errno=0 [ 530.369810][T27300] IPVS: persistence engine module ip_vs_pe_ not found [ 530.418687][T27309] TC_ACT_REPEAT abuse ? [ 530.550147][T27319] vlan2: entered promiscuous mode [ 530.559093][T27319] bond0: entered promiscuous mode [ 531.139215][T27373] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 531.513253][T27409] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 531.578303][T27413] __nla_validate_parse: 98 callbacks suppressed [ 531.578323][T27413] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5921'. [ 531.815998][ C0] TC_ACT_REPEAT abuse ? [ 531.936161][T27447] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5930'. [ 531.950385][T27444] wg1 speed is unknown, defaulting to 1000 [ 532.019347][T27444] lo speed is unknown, defaulting to 1000 [ 532.107715][T27461] netlink: 'syz.0.5936': attribute type 1 has an invalid length. [ 532.222112][T27467] !: renamed from dummy0 (while UP) [ 532.369512][T27483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5940'. [ 532.448723][T27486] netlink: 51 bytes leftover after parsing attributes in process `syz.6.5942'. [ 532.475036][T27486] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5942'. [ 532.489355][T27490] syz_tun: entered allmulticast mode [ 532.497145][T27490] siw: device registration error -23 [ 532.503189][T27490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5944'. [ 532.516459][T27489] syz_tun: left allmulticast mode [ 532.639608][T27497] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5946'. [ 532.744143][T27504] tc_dump_action: action bad kind [ 532.858470][T27510] syzkaller0: left promiscuous mode [ 532.863809][T27510] syzkaller0: left allmulticast mode [ 532.873079][T27510] tipc: Resetting bearer [ 533.011871][T27516] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5953'. [ 533.455730][ C1] TC_ACT_REPEAT abuse ? [ 533.510009][T27537] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5959'. [ 533.613133][T27543] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5961'. [ 533.701237][ T5180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 533.709025][ T5180] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 533.717561][ T5180] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 533.720075][T27550] bond0: (slave ip6gretap1): Releasing active interface [ 533.725196][T27539] rdma_op ffff888024b039f0 conn xmit_rdma 0000000000000000 [ 533.748408][ T5180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 533.757834][ T5180] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 533.780519][T27548] wg1 speed is unknown, defaulting to 1000 [ 533.787523][T27548] lo speed is unknown, defaulting to 1000 [ 533.886049][ C1] TC_ACT_REPEAT abuse ? [ 533.942827][T27551] wg1 speed is unknown, defaulting to 1000 [ 533.954890][T27551] lo speed is unknown, defaulting to 1000 [ 534.031647][T27563] pim6reg99999999: entered allmulticast mode [ 534.167904][T27575] netlink: 'syz.5.5968': attribute type 1 has an invalid length. [ 534.286740][T27551] chnl_net:caif_netlink_parms(): no params data found [ 534.290120][T27586] netlink: 'syz.6.5973': attribute type 11 has an invalid length. [ 534.435591][T27592] pim6reg1: entered promiscuous mode [ 534.441360][T27592] pim6reg1: entered allmulticast mode [ 534.526666][T27551] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.534787][T27551] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.555298][T27551] bridge_slave_0: entered allmulticast mode [ 534.566529][T27551] bridge_slave_0: entered promiscuous mode [ 534.629808][T27551] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.662862][T27551] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.686712][T27551] bridge_slave_1: entered allmulticast mode [ 534.693753][T27551] bridge_slave_1: entered promiscuous mode [ 534.714054][T27604] syzkaller1: entered promiscuous mode [ 534.720116][T27604] syzkaller1: entered allmulticast mode [ 534.727845][T27605] wg1 speed is unknown, defaulting to 1000 [ 534.736742][T27614] syzkaller0: entered promiscuous mode [ 534.742611][T27614] syzkaller0: entered allmulticast mode [ 534.760701][T27605] lo speed is unknown, defaulting to 1000 [ 534.765109][T27551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.816297][T27551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.940940][T27551] team0: Port device team_slave_0 added [ 534.958257][T27551] team0: Port device team_slave_1 added [ 534.996850][T27621] syzkaller1: entered promiscuous mode [ 535.002591][T27621] syzkaller1: entered allmulticast mode [ 535.032242][T27551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.040080][T27551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.072444][T27626] netlink: 'syz.7.5984': attribute type 4 has an invalid length. [ 535.081384][T27551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.094411][T27551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.101979][T27551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.134297][T27551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.301645][T27551] hsr_slave_0: entered promiscuous mode [ 535.309156][T27551] hsr_slave_1: entered promiscuous mode [ 535.318459][T27551] debugfs: 'hsr0' already exists in 'hsr' [ 535.324269][T27551] Cannot create hsr debugfs directory [ 535.438093][T27647] bond7: entered promiscuous mode [ 535.579598][T27653] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 535.703025][T27551] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 535.723415][T27551] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 535.734166][T27551] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 535.746223][T27551] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 535.818460][ T5861] Bluetooth: hci0: command tx timeout [ 535.864033][T27679] TC_ACT_REPEAT abuse ? [ 535.957156][T27686] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 535.980024][T27551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.057758][T27551] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.072694][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.079907][ T7825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.104725][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.111955][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.489366][T27721] netlink: 'syz.5.6008': attribute type 19 has an invalid length. [ 536.581215][T27551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.644899][T27729] __nla_validate_parse: 15 callbacks suppressed [ 536.644921][T27729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6009'. [ 536.690820][T27551] veth0_vlan: entered promiscuous mode [ 536.728801][T27551] veth1_vlan: entered promiscuous mode [ 536.743550][T27726] wg1 speed is unknown, defaulting to 1000 [ 536.761807][T27726] lo speed is unknown, defaulting to 1000 [ 536.841937][T27551] veth0_macvtap: entered promiscuous mode [ 536.894768][T27551] veth1_macvtap: entered promiscuous mode [ 536.982503][T27551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.994202][T27551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.018398][T27739] TC_ACT_REPEAT abuse ? [ 537.040588][T23343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.056596][T27739] TC_ACT_REPEAT abuse ? [ 537.082152][T27739] TC_ACT_REPEAT abuse ? [ 537.092745][T23343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.109623][T27739] TC_ACT_REPEAT abuse ? [ 537.114558][T27739] TC_ACT_REPEAT abuse ? [ 537.123889][T27739] TC_ACT_REPEAT abuse ? [ 537.129137][T23343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.150374][T23343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.167969][T27739] TC_ACT_REPEAT abuse ? [ 537.172545][T27739] TC_ACT_REPEAT abuse ? [ 537.377379][T23339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.395778][T23339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.459408][T27074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.476352][T27074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.752225][T27753] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6013'. [ 537.835319][T27769] netlink: 'syz.3.6016': attribute type 1 has an invalid length. [ 537.844542][T27764] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6013'. [ 537.850784][T27769] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6016'. [ 537.868365][T27769] NCSI netlink: No device for ifindex 0 [ 537.879843][T27769] tipc: Started in network mode [ 537.884903][T27769] tipc: Node identity b6b17e450ff, cluster identity 4711 [ 537.896657][ T5861] Bluetooth: hci0: command 0x041b tx timeout [ 537.904814][T27769] tipc: Enabled bearer , priority 0 [ 537.970226][T27769] syzkaller1: entered promiscuous mode [ 537.978805][T27769] syzkaller1: entered allmulticast mode [ 537.988661][T27772] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6018'. [ 537.999015][T27769] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 538.047967][T27774] netlink: 'syz.6.6020': attribute type 9 has an invalid length. [ 538.171474][T27778] netlink: 'syz.6.6022': attribute type 32 has an invalid length. [ 538.572394][T27791] tipc: Enabled bearer , priority 0 [ 538.585256][T27792] tipc: Enabling of bearer rejected, already enabled [ 538.593938][T27793] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6026'. [ 538.596094][T27790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6027'. [ 538.619633][T27791] tipc: Resetting bearer [ 538.629785][T27786] tipc: Disabling bearer [ 538.643241][T27790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6027'. [ 538.655002][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6025'. [ 538.693300][T27787] wg1 speed is unknown, defaulting to 1000 [ 538.701973][T27787] lo speed is unknown, defaulting to 1000 [ 538.895760][ T9599] tipc: Node number set to 3108077125 [ 538.928998][T27769] tipc: Disabling bearer [ 538.989653][T27816] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6032'. [ 539.041850][T27819] net_ratelimit: 1018 callbacks suppressed [ 539.041864][T27819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.084140][T27820] syzkaller1: entered promiscuous mode [ 539.097828][T27820] syzkaller1: entered allmulticast mode [ 539.133546][T27824] wg2: left promiscuous mode [ 539.142813][T27824] mac80211_hwsim hwsim61 wlan0: left promiscuous mode [ 539.161935][T27824] mac80211_hwsim hwsim61 syzkaller0: left promiscuous mode [ 539.171163][T27824] mac80211_hwsim hwsim61 syzkaller0: left allmulticast mode [ 539.200511][T27826] netlink: 'syz.3.6036': attribute type 2 has an invalid length. [ 539.221204][T27826] : entered promiscuous mode [ 539.269682][T27828] syzkaller1: entered promiscuous mode [ 539.275430][T27828] syzkaller1: entered allmulticast mode [ 539.314978][T27830] netlink: 'syz.3.6038': attribute type 29 has an invalid length. [ 539.350554][T27830] netlink: 'syz.3.6038': attribute type 29 has an invalid length. [ 539.384790][T27830] netlink: 'syz.3.6038': attribute type 13 has an invalid length. [ 539.393865][T27830] netlink: 'syz.3.6038': attribute type 17 has an invalid length. [ 539.439561][T27833] netlink: 'syz.7.6039': attribute type 10 has an invalid length. [ 539.625258][T27830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.703402][T27833] tipc: Enabling of bearer rejected, failed to enable media [ 539.724220][T27848] netlink: 'syz.5.6043': attribute type 12 has an invalid length. [ 539.736881][T27851] wg1 speed is unknown, defaulting to 1000 [ 539.743976][T27851] lo speed is unknown, defaulting to 1000 [ 539.976072][ T5180] Bluetooth: hci0: command 0x041b tx timeout [ 540.094326][T27871] : entered promiscuous mode [ 540.265889][T27875] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 540.319945][T27884] syzkaller1: entered promiscuous mode [ 540.327098][T27884] syzkaller1: entered allmulticast mode [ 540.371948][T27887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.433887][T27888] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 540.462537][T27887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.553499][T27887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.664665][T27887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.814511][T27074] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.843367][T27074] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.866206][T27077] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.891184][T27077] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.329464][T27909] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.343141][T27909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.488880][T27920] wg1 speed is unknown, defaulting to 1000 [ 541.510836][T27920] lo speed is unknown, defaulting to 1000 [ 541.709763][T27931] wg1 speed is unknown, defaulting to 1000 [ 541.739317][T27931] lo speed is unknown, defaulting to 1000 [ 541.865270][T27946] wg1 speed is unknown, defaulting to 1000 [ 541.885216][T27946] lo speed is unknown, defaulting to 1000 [ 541.898012][T27949] __nla_validate_parse: 11 callbacks suppressed [ 541.898036][T27949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6075'. [ 542.012351][T27938] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6069'. [ 542.058323][T27955] Bluetooth: MGMT ver 1.23 [ 542.201719][T27966] netlink: 7636 bytes leftover after parsing attributes in process `syz.7.6080'. [ 542.420238][T27973] wg1 speed is unknown, defaulting to 1000 [ 542.444497][T27973] lo speed is unknown, defaulting to 1000 [ 542.809508][T27069] tipc: Resetting bearer [ 542.823839][T28002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6087'. [ 542.866002][T28002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6087'. [ 542.993505][T28007] tipc: Enabled bearer , priority 0 [ 543.023439][T28010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6090'. [ 543.036258][T28007] syzkaller0: entered promiscuous mode [ 543.041812][T28007] syzkaller0: entered allmulticast mode [ 543.114874][T28007] tipc: Resetting bearer [ 543.163505][T28006] tipc: Resetting bearer [ 543.195627][T28006] tipc: Disabling bearer [ 543.254816][T28022] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6096'. [ 543.453236][T28036] netlink: 'syz.6.6095': attribute type 11 has an invalid length. [ 543.539143][T28041] validate_nla: 8 callbacks suppressed [ 543.539163][T28041] netlink: 'syz.5.6099': attribute type 1 has an invalid length. [ 543.657820][T28041] 8021q: adding VLAN 0 to HW filter on device bond8 [ 543.711457][T28045] bond8: (slave veth3): Enslaving as an active interface with a down link [ 543.774857][T28048] netlink: 'syz.7.6100': attribute type 10 has an invalid length. [ 544.136181][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 544.141729][ T5180] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 544.351391][T28052] Set syz0 is full, maxelem 0 reached [ 544.424413][T28054] netlink: 'syz.3.6102': attribute type 10 has an invalid length. [ 544.439257][T28054] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.448934][T28054] bond0: (slave team0): Enslaving as an active interface with an up link [ 544.468478][T28057] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.6103'. [ 544.752850][T28081] netlink: 'syz.7.6109': attribute type 5 has an invalid length. [ 544.770837][T28081] netlink: 'syz.7.6109': attribute type 5 has an invalid length. [ 544.950867][T28085] netlink: 'syz.3.6112': attribute type 4 has an invalid length. [ 545.139470][T28092] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6115'. [ 545.150584][T28092] netlink: 'syz.3.6115': attribute type 29 has an invalid length. [ 545.468887][T28099] netlink: 'syz.3.6117': attribute type 1 has an invalid length. [ 545.572338][T28101] bond1: (slave veth3): Enslaving as an active interface with a down link [ 545.620652][T28099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6117'. [ 545.646836][T28099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.420582][T28150] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 546.421987][T28149] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 546.454571][T28155] wg1 speed is unknown, defaulting to 1000 [ 546.502165][T28155] lo speed is unknown, defaulting to 1000 [ 546.504223][T28156] wg1 speed is unknown, defaulting to 1000 [ 546.541573][T28156] lo speed is unknown, defaulting to 1000 [ 546.625855][ T30] audit: type=1800 audit(1756312457.558:18): pid=28163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6134" name="x000000000000000e00000000000000000000016" dev="tmpfs" ino=2731 res=0 errno=0 [ 546.656312][T28166] nbd: nbd0 already in use [ 546.669236][ T30] audit: type=1804 audit(1756312457.558:19): pid=28163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6134" name="x000000000000000e00000000000000000000016" dev="tmpfs" ino=2731 res=1 errno=0 [ 546.997968][T28185] __nla_validate_parse: 3 callbacks suppressed [ 546.997989][T28185] netlink: 248 bytes leftover after parsing attributes in process `syz.5.6142'. [ 547.032354][T28183] wg1 speed is unknown, defaulting to 1000 [ 547.092586][T28183] lo speed is unknown, defaulting to 1000 [ 547.384481][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 547.394080][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 547.413807][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 547.430997][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 547.440438][T28192] wg1 speed is unknown, defaulting to 1000 [ 547.449115][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 547.469122][T28192] lo speed is unknown, defaulting to 1000 [ 547.594208][T28194] wg1 speed is unknown, defaulting to 1000 [ 547.605290][T28194] lo speed is unknown, defaulting to 1000 [ 547.910880][T28221] netlink: 'syz.3.6151': attribute type 11 has an invalid length. [ 548.076924][T28233] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6156'. [ 548.181095][T28236] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 548.207771][T28194] chnl_net:caif_netlink_parms(): no params data found [ 548.236168][T28242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6158'. [ 548.413047][T28253] gretap0: entered promiscuous mode [ 548.420528][T28253] vlan0: entered promiscuous mode [ 548.444356][T28247] wg1 speed is unknown, defaulting to 1000 [ 548.484818][T28247] lo speed is unknown, defaulting to 1000 [ 548.500207][T28194] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.526811][T28194] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.537577][T28194] bridge_slave_0: entered allmulticast mode [ 548.557558][T28194] bridge_slave_0: entered promiscuous mode [ 548.574910][T28254] wg1 speed is unknown, defaulting to 1000 [ 548.577094][T28194] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.606514][T28194] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.621644][T28194] bridge_slave_1: entered allmulticast mode [ 548.632457][T28194] bridge_slave_1: entered promiscuous mode [ 548.729085][T28254] lo speed is unknown, defaulting to 1000 [ 548.788143][T28194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.820108][T28194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.840845][T28268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6166'. [ 548.854020][T28268] macsec1: entered promiscuous mode [ 548.864885][T28268] batadv0: entered promiscuous mode [ 548.873950][T28254] netlink: 292 bytes leftover after parsing attributes in process `syz.5.6160'. [ 548.883932][T28268] batadv0: left promiscuous mode [ 549.031262][T28194] team0: Port device team_slave_0 added [ 549.044953][T28281] nft_compat: unsupported protocol 0 [ 549.056571][T28194] team0: Port device team_slave_1 added [ 549.122575][T28194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.155951][T28194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.210445][T28194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.245396][T28194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.259146][T28194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.290404][T28194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.322362][T28295] dvmrp0: entered allmulticast mode [ 549.360034][T28300] netlink: 'syz.6.6172': attribute type 11 has an invalid length. [ 549.395583][T28300] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6172'. [ 549.449004][T28194] hsr_slave_0: entered promiscuous mode [ 549.456152][T28194] hsr_slave_1: entered promiscuous mode [ 549.462510][T28194] debugfs: 'hsr0' already exists in 'hsr' [ 549.469095][T28194] Cannot create hsr debugfs directory [ 549.496134][ T5180] Bluetooth: hci4: command tx timeout [ 549.516562][T28301] wg1 speed is unknown, defaulting to 1000 [ 549.536247][T28303] FAULT_INJECTION: forcing a failure. [ 549.536247][T28303] name failslab, interval 1, probability 0, space 0, times 0 [ 549.549001][T28303] CPU: 1 UID: 0 PID: 28303 Comm: syz.7.6177 Not tainted syzkaller #0 PREEMPT(full) [ 549.549029][T28303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.549044][T28303] Call Trace: [ 549.549052][T28303] [ 549.549061][T28303] dump_stack_lvl+0x189/0x250 [ 549.549092][T28303] ? __pfx____ratelimit+0x10/0x10 [ 549.549123][T28303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.549149][T28303] ? __pfx__printk+0x10/0x10 [ 549.549180][T28303] ? __pfx_fib_rules_lookup+0x10/0x10 [ 549.549202][T28303] ? l3mdev_update_flow+0x29/0x640 [ 549.549225][T28303] ? l3mdev_update_flow+0x4d1/0x640 [ 549.549248][T28303] should_fail_ex+0x414/0x560 [ 549.549278][T28303] should_failslab+0xa8/0x100 [ 549.549310][T28303] kmem_cache_alloc_noprof+0x73/0x3c0 [ 549.549338][T28303] ? dst_alloc+0x105/0x170 [ 549.549360][T28303] ? __pfx_make_kuid+0x10/0x10 [ 549.549389][T28303] dst_alloc+0x105/0x170 [ 549.549416][T28303] ip_route_input_rcu+0x1ec2/0x30d0 [ 549.549458][T28303] ? unwind_next_frame+0xa5/0x2390 [ 549.549483][T28303] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 549.549516][T28303] ? unwind_next_frame+0xa5/0x2390 [ 549.549544][T28303] ? lock_acquire+0x5f/0x360 [ 549.549575][T28303] ? do_xdp_generic+0x11a/0x11a0 [ 549.549600][T28303] ? rcu_is_watching+0x15/0xb0 [ 549.549624][T28303] ? ip_route_input_noref+0x98/0x250 [ 549.549650][T28303] ip_route_input_noref+0x167/0x250 [ 549.549678][T28303] ? __pfx_ip_route_input_noref+0x10/0x10 [ 549.549707][T28303] ? tcp_v4_early_demux+0xd7/0x9a0 [ 549.549737][T28303] ? nf_hook_slow_list+0x2af/0x390 [ 549.549760][T28303] ip_rcv_finish_core+0x5af/0x1c00 [ 549.549799][T28303] ip_sublist_rcv+0x398/0xa10 [ 549.549839][T28303] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 549.549870][T28303] ? skb_orphan+0xaf/0xd0 [ 549.549903][T28303] ? __pfx_ip_rcv_finish+0x10/0x10 [ 549.549942][T28303] ip_list_rcv+0x3e2/0x430 [ 549.549980][T28303] ? __pfx_ip_list_rcv+0x10/0x10 [ 549.550015][T28303] ? __pfx_ip_list_rcv+0x10/0x10 [ 549.550048][T28303] __netif_receive_skb_list_core+0x7d2/0x800 [ 549.550078][T28303] ? do_dentry_open+0xa18/0x13f0 [ 549.550099][T28303] ? do_syscall_64+0xfa/0x3b0 [ 549.550125][T28303] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 549.550160][T28303] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 549.550189][T28303] netif_receive_skb_list_internal+0x975/0xcc0 [ 549.550218][T28303] ? inet_gro_receive+0x904/0xcc0 [ 549.550248][T28303] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 549.550277][T28303] ? lock_release+0x4b/0x3e0 [ 549.550308][T28303] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 549.550336][T28303] ? _copy_from_iter+0x24c/0x16f0 [ 549.550356][T28303] ? dev_gro_receive+0x10a0/0x23b0 [ 549.550389][T28303] ? eth_type_trans+0x3a8/0x760 [ 549.550417][T28303] napi_complete_done+0x2f2/0x7c0 [ 549.550458][T28303] ? __pfx_napi_complete_done+0x10/0x10 [ 549.550486][T28303] ? rcu_is_watching+0x15/0xb0 [ 549.550506][T28303] ? napi_gro_frags+0x975/0x1030 [ 549.550544][T28303] ? tun_get_user+0x266c/0x3e20 [ 549.550563][T28303] tun_get_user+0x28d5/0x3e20 [ 549.550588][T28303] ? rcu_is_watching+0x15/0xb0 [ 549.550610][T28303] ? tun_get_user+0x266c/0x3e20 [ 549.550634][T28303] ? aa_file_perm+0x44d/0x1550 [ 549.550655][T28303] ? __pfx_tun_get_user+0x10/0x10 [ 549.550681][T28303] ? kstrtoull+0x12f/0x1d0 [ 549.550717][T28303] ? ref_tracker_alloc+0x318/0x460 [ 549.550746][T28303] ? get_pid_task+0x20/0x1f0 [ 549.550772][T28303] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 549.550804][T28303] ? tun_get+0x1c/0x2f0 [ 549.550824][T28303] ? tun_get+0x1c/0x2f0 [ 549.550844][T28303] ? rcu_is_watching+0x15/0xb0 [ 549.550863][T28303] ? tun_get+0x1c/0x2f0 [ 549.550882][T28303] ? lock_release+0x4b/0x3e0 [ 549.550911][T28303] ? common_file_perm+0x1b5/0x230 [ 549.550946][T28303] ? tun_get+0x1c/0x2f0 [ 549.550969][T28303] tun_chr_write_iter+0x113/0x200 [ 549.550993][T28303] vfs_write+0x5c9/0xb30 [ 549.551025][T28303] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 549.551046][T28303] ? __pfx_vfs_write+0x10/0x10 [ 549.551082][T28303] ? __fget_files+0x2a/0x420 [ 549.551107][T28303] ksys_write+0x145/0x250 [ 549.551138][T28303] ? __pfx_ksys_write+0x10/0x10 [ 549.551164][T28303] ? rcu_is_watching+0x15/0xb0 [ 549.551189][T28303] ? rcu_is_watching+0x15/0xb0 [ 549.551212][T28303] do_syscall_64+0xfa/0x3b0 [ 549.551232][T28303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.551254][T28303] ? clear_bhb_loop+0x60/0xb0 [ 549.551279][T28303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.551300][T28303] RIP: 0033:0x7f67f0f8ebe9 [ 549.551320][T28303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.551340][T28303] RSP: 002b:00007f67f1e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.551365][T28303] RAX: ffffffffffffffda RBX: 00007f67f11b5fa0 RCX: 00007f67f0f8ebe9 [ 549.551381][T28303] RDX: 000000000000004e RSI: 0000200000000040 RDI: 0000000000000003 [ 549.551395][T28303] RBP: 00007f67f1e0c090 R08: 0000000000000000 R09: 0000000000000000 [ 549.551410][T28303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.551423][T28303] R13: 00007f67f11b6038 R14: 00007f67f11b5fa0 R15: 00007ffc4a7d5228 [ 549.551460][T28303] [ 550.072965][T28301] lo speed is unknown, defaulting to 1000 [ 550.226615][T28321] netlink: 'syz.3.6180': attribute type 4 has an invalid length. [ 550.494615][T28194] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.507355][T28194] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.618730][T28337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6182'. [ 550.686647][T28194] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.697257][T28194] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.710920][T28337] bridge_slave_1: left allmulticast mode [ 550.717290][T28337] bridge_slave_1: left promiscuous mode [ 550.723242][T28336] netlink: 'syz.6.6185': attribute type 10 has an invalid length. [ 550.723439][T28337] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.741447][T28337] bridge_slave_0: left allmulticast mode [ 550.747895][T28337] bridge_slave_0: left promiscuous mode [ 550.753741][T28337] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.874352][T28336] team0: Failed to send options change via netlink (err -105) [ 550.882107][T28336] team0: Port device 0! added [ 550.898975][T28194] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.910230][T28194] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.970266][T28194] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.987311][T28194] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.019484][T28349] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6188'. [ 551.046076][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6188'. [ 551.061264][T28351] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6189'. [ 551.216859][T28364] netlink: 'syz.6.6191': attribute type 4 has an invalid length. [ 551.577707][ T5180] Bluetooth: hci4: command tx timeout [ 551.592892][T28194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 551.732641][T28194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 551.923476][T28194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 551.943398][T28194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 552.014914][T28385] pim6reg: entered allmulticast mode [ 552.026534][T28385] pim6reg: left allmulticast mode [ 552.056222][T28397] __nla_validate_parse: 3 callbacks suppressed [ 552.056243][T28397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6197'. [ 552.075139][T28401] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6195'. [ 552.085037][T28397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6197'. [ 552.319018][T28396] tap0: tun_chr_ioctl cmd 1074025677 [ 552.333478][T28396] tap0: linktype set to 823 [ 552.344552][T28397] macvlan2: entered promiscuous mode [ 552.423800][T28412] delete_channel: no stack [ 552.474334][T28194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.524418][T28412] wg1 speed is unknown, defaulting to 1000 [ 552.535925][T28194] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.554099][T28412] lo speed is unknown, defaulting to 1000 [ 552.586859][T23335] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.594077][T23335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.612214][T23335] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.619424][T23335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.677932][T28194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.688511][T28194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.268117][T28433] netlink: 'syz.7.6206': attribute type 16 has an invalid length. [ 553.288702][T28433] netlink: 'syz.7.6206': attribute type 17 has an invalid length. [ 553.461349][T28438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6208'. [ 553.482374][T23343] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.594864][T23343] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.628788][T28438] veth1: entered promiscuous mode [ 553.634111][T28438] netlink: 'syz.6.6208': attribute type 8 has an invalid length. [ 553.645222][T28438] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 553.657507][ T5180] Bluetooth: hci4: command tx timeout [ 553.663574][T28449] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6210'. [ 553.676769][T28449] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6210'. [ 553.688829][T28449] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6210'. [ 553.712060][T28449] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6210'. [ 553.715288][T23343] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.723463][T28449] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6210'. [ 553.741966][T28449] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6210'. [ 553.760022][T23343] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.813739][T28194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.845817][T28456] netlink: 'syz.3.6211': attribute type 4 has an invalid length. [ 553.896396][T28194] veth0_vlan: entered promiscuous mode [ 553.908225][T28194] veth1_vlan: entered promiscuous mode [ 553.960240][T28194] veth0_macvtap: entered promiscuous mode [ 553.968138][T28458] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 553.985319][T28194] veth1_macvtap: entered promiscuous mode [ 554.107539][T28194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.118299][T28194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.241831][ T7825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.310100][ T7825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.372412][ T7825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.393192][ T7825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.416543][T28493] wg1 speed is unknown, defaulting to 1000 [ 554.425033][ T7825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.435732][ T7825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.440732][T28496] wg1 speed is unknown, defaulting to 1000 [ 554.481102][T28493] lo speed is unknown, defaulting to 1000 [ 554.504948][T28496] lo speed is unknown, defaulting to 1000 [ 554.521767][T23343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.531982][T23343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.702462][T28550] netlink: 'syz.5.6229': attribute type 12 has an invalid length. [ 555.735537][ T5180] Bluetooth: hci4: command tx timeout [ 556.213834][T28585] netlink: 'syz.3.6243': attribute type 10 has an invalid length. [ 556.250531][T28585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.500796][ T30] audit: type=1800 audit(1756312467.438:20): pid=28587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6243" name="memory.events" dev="tmpfs" ino=318 res=0 errno=0 [ 556.812831][T28604] netlink: 'syz.0.6249': attribute type 12 has an invalid length. [ 556.910675][T28609] netlink: 'syz.7.6250': attribute type 1 has an invalid length. [ 556.933417][T28609] tipc: Enabling of bearer rejected, failed to enable media [ 557.123442][T28636] __nla_validate_parse: 68 callbacks suppressed [ 557.123463][T28636] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6256'. [ 557.140062][T28638] netlink: 'syz.0.6257': attribute type 10 has an invalid length. [ 557.149931][T28632] tipc: Resetting bearer [ 557.167892][T28634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6259'. [ 557.183443][T28636] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6256'. [ 557.235028][T28638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.261833][T28638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.289771][T28638] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 557.328093][T28634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.345128][T28647] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 557.390510][T28649] siw: device registration error -23 [ 557.390587][T28634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.447498][T28649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6262'. [ 557.456955][T28650] wg1: entered promiscuous mode [ 557.462013][T28650] wg1: entered allmulticast mode [ 557.522441][T28649] netlink: 'syz.0.6262': attribute type 4 has an invalid length. [ 557.606547][T28656] Bluetooth: MGMT ver 1.23 [ 557.666951][T28661] tipc: Started in network mode [ 557.671983][T28661] tipc: Node identity 36f6cb907fef, cluster identity 4711 [ 557.685309][T28661] tipc: Enabled bearer , priority 0 [ 557.694744][T28661] syzkaller0: entered promiscuous mode [ 557.704644][T28661] syzkaller0: entered allmulticast mode [ 557.731616][T28661] tipc: Resetting bearer [ 557.745245][T28661] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 557.756577][T28663] wg1 speed is unknown, defaulting to 1000 [ 557.762733][T28660] tipc: Resetting bearer [ 557.788107][T28660] tipc: Disabling bearer [ 557.812747][T28663] lo speed is unknown, defaulting to 1000 [ 557.942601][T28663] netlink: 'syz.6.6266': attribute type 6 has an invalid length. [ 558.080139][ T7825] tipc: Resetting bearer [ 558.284120][ T7825] erspan0 (unregistering): left promiscuous mode [ 558.322002][ T7825] gretap0 (unregistering): left promiscuous mode [ 558.494131][ T7825] tipc: Disabling bearer [ 558.729319][ T7825] bond1 (unregistering): Released all slaves [ 558.739859][ T7825] bond2 (unregistering): Released all slaves [ 558.751686][ T7825] bond3 (unregistering): Released all slaves [ 558.761845][ T7825] bond4 (unregistering): Released all slaves [ 558.774164][ T7825] bond5 (unregistering): Released all slaves [ 558.790346][ T7825] bond0 (unregistering): Released all slaves [ 558.801649][ T7825] bond6 (unregistering): Released all slaves [ 558.814881][ T7825] bond7 (unregistering): Released all slaves [ 558.932732][T28712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.944288][T28712] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6276'. [ 558.959548][ T7825] þ: left promiscuous mode [ 559.041341][ T7825] tipc: Left network mode [ 559.057850][T28723] netlink: 'syz.5.6281': attribute type 21 has an invalid length. [ 559.105266][T23335] syzkaller0: tun_net_xmit 76 [ 559.115099][T23335] syzkaller0: tun_net_xmit 48 [ 559.211520][T28731] netlink: 'syz.0.6282': attribute type 29 has an invalid length. [ 559.227963][T28730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6283'. [ 559.259620][T28730] netlink: 'syz.3.6283': attribute type 4 has an invalid length. [ 559.303965][ T7825] hsr_slave_0: left promiscuous mode [ 559.316043][ T7825] hsr_slave_1: left promiscuous mode [ 559.389313][T28745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6286'. [ 559.804203][T28746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 560.010927][ T7825] IPVS: stop unused estimator thread 0... [ 560.271666][T28773] batadv1: entered promiscuous mode [ 560.356331][T28781] tipc: Enabling of bearer rejected, already enabled [ 560.438152][T28784] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6297'. [ 560.713571][T28802] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6301'. [ 560.886235][T28816] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6308'. [ 560.962259][T28822] validate_nla: 4 callbacks suppressed [ 560.962280][T28822] netlink: 'syz.0.6311': attribute type 4 has an invalid length. [ 561.854584][T28835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.868943][T28835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.896336][T28835] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 561.921550][T28835] bond0 (unregistering): Released all slaves [ 562.049147][T28840] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 562.100741][T28840] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 562.146898][T28840] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 562.173970][T28862] netlink: 'syz.0.6321': attribute type 1 has an invalid length. [ 562.184056][T28862] __nla_validate_parse: 3 callbacks suppressed [ 562.184081][T28862] netlink: 566 bytes leftover after parsing attributes in process `syz.0.6321'. [ 562.254531][T28868] netlink: 'syz.0.6321': attribute type 8 has an invalid length. [ 562.403416][T28882] netlink: 'syz.6.6327': attribute type 4 has an invalid length. [ 562.422670][T28884] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6328'. [ 562.461956][T28886] netlink: 'syz.3.6329': attribute type 15 has an invalid length. [ 562.501482][T28886] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6329'. [ 562.682099][T28899] ip6tnl2: entered promiscuous mode [ 562.699923][T28899] ip6tnl2: entered allmulticast mode [ 562.707799][T28899] team0: Device ip6tnl2 is of different type [ 563.041311][T28938] netlink: 'syz.3.6344': attribute type 20 has an invalid length. [ 563.261487][T28962] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6351'. [ 563.334747][T28970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6352'. [ 563.335332][T28962] bridge4: port 1(veth9) entered blocking state [ 563.354403][T28962] bridge4: port 1(veth9) entered disabled state [ 563.362750][T28963] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6351'. [ 563.366762][T28962] veth9: entered allmulticast mode [ 563.379209][T28962] veth9: entered promiscuous mode [ 563.406025][T28970] team0: entered promiscuous mode [ 563.411161][T28970] team0: entered allmulticast mode [ 563.471305][T28963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6351'. [ 563.497243][T28963] vlan0: entered allmulticast mode [ 563.512520][T28963] veth1: entered allmulticast mode [ 563.692853][T28986] bridge0: port 3(batadv1) entered blocking state [ 563.702628][T28986] bridge0: port 3(batadv1) entered disabled state [ 563.710568][T28986] batadv1: entered allmulticast mode [ 563.717957][T28986] batadv1: entered promiscuous mode [ 563.723992][T28988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6357'. [ 563.951962][T29003] netlink: 'syz.7.6364': attribute type 4 has an invalid length. [ 564.057314][T29012] netlink: 'syz.0.6366': attribute type 39 has an invalid length. [ 564.139242][T29014] bridge0: port 1(syz_tun) entered blocking state [ 564.149831][T29014] bridge0: port 1(syz_tun) entered disabled state [ 564.158988][T29014] syz_tun: entered allmulticast mode [ 564.168646][T29014] syz_tun: entered promiscuous mode [ 564.175417][T29014] bridge0: port 1(syz_tun) entered blocking state [ 564.182032][T29014] bridge0: port 1(syz_tun) entered listening state [ 564.193771][ T7825] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 564.203310][ T7825] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 564.337518][T29028] !: entered allmulticast mode [ 564.354846][T29026] veth2: entered allmulticast mode [ 564.370882][T29027] !: left allmulticast mode [ 564.455795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.506108][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.509390][T29041] netlink: 'syz.5.6377': attribute type 2 has an invalid length. [ 564.551692][T29041] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6377'. [ 564.581087][T29045] syzkaller0: entered promiscuous mode [ 564.586726][T29045] syzkaller0: entered allmulticast mode [ 564.646662][T29051] netlink: 'syz.6.6380': attribute type 4 has an invalid length. [ 564.676830][T29050] wg1 speed is unknown, defaulting to 1000 [ 564.684726][T29050] lo speed is unknown, defaulting to 1000 [ 565.016979][T29069] wg1 speed is unknown, defaulting to 1000 [ 565.023859][T29069] lo speed is unknown, defaulting to 1000 [ 565.034296][T29050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6379'. [ 565.096925][T29050] IPVS: Unknown mcast interface: vcan0 [ 565.495791][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.349120][T29139] wg1 speed is unknown, defaulting to 1000 [ 566.435578][T29139] lo speed is unknown, defaulting to 1000 [ 567.062289][T29156] validate_nla: 1 callbacks suppressed [ 567.062314][T29156] netlink: 'syz.3.6408': attribute type 10 has an invalid length. [ 567.210545][T29156] team0: Device veth0_macvtap failed to register rx_handler [ 567.240994][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 567.249869][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 567.257689][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 567.273117][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 567.283644][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 567.341570][T18629] bridge0: port 1(syz_tun) entered disabled state [ 567.421007][T18629] syz_tun (unregistering): left allmulticast mode [ 567.430068][T18629] syz_tun (unregistering): left promiscuous mode [ 567.440945][T18629] bridge0: port 1(syz_tun) entered disabled state [ 567.470819][T29167] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 567.485735][T29167] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 567.641252][T29162] wg1 speed is unknown, defaulting to 1000 [ 567.666851][T29162] lo speed is unknown, defaulting to 1000 [ 567.745087][T29177] tipc: Enabled bearer , priority 0 [ 567.760949][T29177] syzkaller0: entered promiscuous mode [ 567.776563][T29177] syzkaller0: entered allmulticast mode [ 567.950271][T29188] netlink: 'syz.7.6417': attribute type 4 has an invalid length. [ 567.969050][T29175] tipc: Resetting bearer [ 568.000263][T29175] tipc: Disabling bearer [ 568.030650][T29196] sctp: [Deprecated]: syz.0.6418 (pid 29196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.030650][T29196] Use struct sctp_sack_info instead [ 568.071505][T29197] netlink: 'syz.5.6419': attribute type 1 has an invalid length. [ 568.121049][T29197] bond9: entered promiscuous mode [ 568.127180][T29197] 8021q: adding VLAN 0 to HW filter on device bond9 [ 568.158896][T29193] bond9: (slave bridge0): making interface the new active one [ 568.170238][T29193] bridge0: entered promiscuous mode [ 568.182667][T29193] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 568.268449][T29162] chnl_net:caif_netlink_parms(): no params data found [ 568.397170][T29203] wg1 speed is unknown, defaulting to 1000 [ 568.459263][T29162] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.470722][T29162] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.478832][T29162] bridge_slave_0: entered allmulticast mode [ 568.486215][T29162] bridge_slave_0: entered promiscuous mode [ 568.494715][T29162] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.502076][T29162] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.510581][T29162] bridge_slave_1: entered allmulticast mode [ 568.518499][T29162] bridge_slave_1: entered promiscuous mode [ 568.529955][T29203] lo speed is unknown, defaulting to 1000 [ 568.612853][T29228] __nla_validate_parse: 7 callbacks suppressed [ 568.612875][T29228] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6427'. [ 568.613045][T29162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.657224][T29162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.754474][T29162] team0: Port device team_slave_0 added [ 568.795611][T29162] team0: Port device team_slave_1 added [ 568.816563][T29238] Bluetooth: MGMT ver 1.23 [ 568.928539][T29162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.944074][T29162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.998281][T29162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.042734][T29162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.075590][T29162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.173932][T29162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.204348][T29245] macsec1: entered promiscuous mode [ 569.214088][T29245] mac80211_hwsim hwsim60 wlan1: entered promiscuous mode [ 569.224452][T29245] mac80211_hwsim hwsim60 wlan1: left promiscuous mode [ 569.249289][T29258] netlink: 'syz.0.6436': attribute type 7 has an invalid length. [ 569.259329][T29258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6436'. [ 569.305100][T29162] hsr_slave_0: entered promiscuous mode [ 569.321391][T29162] hsr_slave_1: entered promiscuous mode [ 569.329350][T29162] debugfs: 'hsr0' already exists in 'hsr' [ 569.335179][T29162] Cannot create hsr debugfs directory [ 569.341006][ T5180] Bluetooth: hci3: command tx timeout [ 569.364957][T29263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.374025][T29267] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6438'. [ 569.383224][T29265] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6438'. [ 569.404319][T29263] bond0 (unregistering): Released all slaves [ 569.733953][T29290] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 569.765169][T29290] netlink: 'syz.0.6444': attribute type 4 has an invalid length. [ 569.773991][T29290] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6444'. [ 569.906757][T29162] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 569.929835][T29162] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 569.943606][T29162] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 569.952428][T29304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6448'. [ 569.964877][T29304] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6448'. [ 569.980544][T29162] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 570.068355][T29318] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6451'. [ 570.146284][T29320] netlink: 'syz.0.6453': attribute type 10 has an invalid length. [ 570.168027][T29320] team0: Device veth0_macvtap failed to register rx_handler [ 570.203827][T29162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.230027][T29162] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.311842][T23335] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.319059][T23335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.358470][T29332] team0: Device sit1 is of different type [ 570.383367][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.390590][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.597335][T29343] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.6458'. [ 570.677300][T29345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6459'. [ 570.709353][T29162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 571.161671][T29162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.408136][T29373] tipc: Resetting bearer [ 571.425963][ T5861] Bluetooth: hci3: command tx timeout [ 571.432378][T29373] ip6gretap0: left allmulticast mode [ 571.636996][T29388] wg1 speed is unknown, defaulting to 1000 [ 571.644362][T29388] lo speed is unknown, defaulting to 1000 [ 571.741895][ T9597] IPVS: starting estimator thread 0... [ 571.789594][T29408] netlink: 'syz.3.6472': attribute type 1 has an invalid length. [ 571.831389][T29408] netlink: 'syz.3.6472': attribute type 2 has an invalid length. [ 571.839405][T29404] IPVS: using max 36 ests per chain, 86400 per kthread [ 572.027689][T29162] veth0_vlan: entered promiscuous mode [ 572.081788][T29162] veth1_vlan: entered promiscuous mode [ 572.158009][T29162] veth0_macvtap: entered promiscuous mode [ 572.185231][T29162] veth1_macvtap: entered promiscuous mode [ 572.228162][T29162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.272172][T29162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.302321][T29432] netlink: 'syz.5.6480': attribute type 1 has an invalid length. [ 572.331027][T29433] netlink: 'syz.0.6481': attribute type 4 has an invalid length. [ 572.346905][T27069] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.430569][T27069] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.454879][T27069] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.470525][T27069] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.500408][T29432] ip6gretap0: entered allmulticast mode [ 572.507250][T29432] macsec0: left promiscuous mode [ 572.516070][T29432] macsec0: left allmulticast mode [ 572.535713][T29432] ip6gretap0: left allmulticast mode [ 572.598374][T29432] syzkaller0: left promiscuous mode [ 572.628598][T27069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.646017][T27069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.682941][T29441] wg1 speed is unknown, defaulting to 1000 [ 572.692104][T29441] lo speed is unknown, defaulting to 1000 [ 572.770014][T23335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.794599][T23335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.162929][T29472] wg1 speed is unknown, defaulting to 1000 [ 573.170349][T29472] lo speed is unknown, defaulting to 1000 [ 573.330990][T29479] wg1: entered promiscuous mode [ 573.338475][T29479] wg1: entered allmulticast mode [ 573.495709][ T5861] Bluetooth: hci3: command 0x040f tx timeout [ 573.649800][T29486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.685989][T27069] bond0: (slave geneve2): link status definitely down, disabling slave [ 573.706951][T27069] bond0: now running without any active interface! [ 573.836915][T29492] __nla_validate_parse: 12 callbacks suppressed [ 573.836943][T29492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6499'. [ 573.863382][T29493] sctp: [Deprecated]: syz.3.6500 (pid 29493) Use of int in max_burst socket option. [ 573.863382][T29493] Use struct sctp_assoc_value instead [ 573.889026][T29492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6499'. [ 573.906094][T29493] netlink: 'syz.3.6500': attribute type 1 has an invalid length. [ 573.924123][T29492] netlink: 'syz.7.6499': attribute type 18 has an invalid length. [ 573.932163][T29493] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6500'. [ 573.956225][T29492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6499'. [ 573.982993][T29492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6499'. [ 574.003954][T29492] netlink: 'syz.7.6499': attribute type 18 has an invalid length. [ 574.054365][T29496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6501'. [ 574.072167][ T5180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 574.095638][ T5180] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 574.111671][ T5180] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 574.120653][ T5180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 574.135246][ T5180] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.159521][T29500] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6502'. [ 574.170480][T29500] ipvlan1: entered promiscuous mode [ 574.176461][T29500] ipvlan1: entered allmulticast mode [ 574.181974][T29500] veth0_vlan: entered allmulticast mode [ 574.213769][T29497] wg1 speed is unknown, defaulting to 1000 [ 574.221519][T29497] lo speed is unknown, defaulting to 1000 [ 574.291716][T29505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6504'. [ 574.402469][T29505] bridge1: port 1(veth5) entered blocking state [ 574.424108][T29505] bridge1: port 1(veth5) entered disabled state [ 574.440683][T29505] veth5: entered allmulticast mode [ 574.452567][T29517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6506'. [ 574.454769][T29505] veth5: entered promiscuous mode [ 574.491339][T29497] chnl_net:caif_netlink_parms(): no params data found [ 574.526305][T29518] bridge1: port 2(veth0_to_bond) entered blocking state [ 574.533482][T29518] bridge1: port 2(veth0_to_bond) entered disabled state [ 574.566314][T29518] veth0_to_bond: entered allmulticast mode [ 574.573860][T29518] veth0_to_bond: entered promiscuous mode [ 574.638365][T29514] wg1 speed is unknown, defaulting to 1000 [ 574.659900][T29518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6504'. [ 574.675785][T29514] lo speed is unknown, defaulting to 1000 [ 574.851766][T29497] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.866656][T29497] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.874467][T29497] bridge_slave_0: entered allmulticast mode [ 574.882884][T29497] bridge_slave_0: entered promiscuous mode [ 574.910632][T29497] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.932393][T29497] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.954614][T29497] bridge_slave_1: entered allmulticast mode [ 574.973534][T29497] bridge_slave_1: entered promiscuous mode [ 575.052449][T29534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.092565][T29534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.124056][T29534] bond0 (unregistering): (slave team0): Releasing backup interface [ 575.148501][T29534] bond0 (unregistering): Released all slaves [ 575.193690][T29497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.274587][T29497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.334762][T29543] netlink: 'syz.0.6513': attribute type 4 has an invalid length. [ 575.365268][T29543] netlink: 'syz.0.6513': attribute type 4 has an invalid length. [ 575.371155][T29497] team0: Port device team_slave_0 added [ 575.391011][T29497] team0: Port device team_slave_1 added [ 575.433708][T29497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.442171][T29497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.469223][T29497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.486447][T29497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.493723][T29497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.520923][T29497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.558159][T29543] wg1 speed is unknown, defaulting to 1000 [ 575.576864][ T5180] Bluetooth: hci3: command 0x040f tx timeout [ 575.601917][T29543] lo speed is unknown, defaulting to 1000 [ 575.634423][T29497] hsr_slave_0: entered promiscuous mode [ 575.641760][T29497] hsr_slave_1: entered promiscuous mode [ 575.648645][T29497] debugfs: 'hsr0' already exists in 'hsr' [ 575.654687][T29497] Cannot create hsr debugfs directory [ 575.859665][T29549] wg1 speed is unknown, defaulting to 1000 [ 575.945005][T29549] lo speed is unknown, defaulting to 1000 [ 576.225267][ T5180] Bluetooth: hci1: command tx timeout [ 576.442350][T29592] tipc: Enabled bearer , priority 0 [ 576.453247][T29592] syzkaller0: entered promiscuous mode [ 576.462196][T29592] syzkaller0: entered allmulticast mode [ 576.505290][T29592] tipc: Resetting bearer [ 576.518561][T29592] tipc: Disabling bearer [ 576.534291][T29598] wg1 speed is unknown, defaulting to 1000 [ 576.541788][T29598] lo speed is unknown, defaulting to 1000 [ 576.775281][T29617] vti0: entered promiscuous mode [ 576.781340][T29617] vti0: entered allmulticast mode [ 576.813793][T29619] netlink: 'syz.7.6530': attribute type 12 has an invalid length. [ 576.926808][T29497] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 576.957898][T29497] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 576.991210][T29497] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 577.026899][T29497] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 577.270733][T29497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.305312][T29497] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.344941][T27069] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.352156][T27069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.521893][T23343] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.529128][T23343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.562165][T29655] netlink: 'syz.7.6537': attribute type 23 has an invalid length. [ 577.656701][ T5180] Bluetooth: hci3: command 0x040f tx timeout [ 578.010585][T29679] wg1 speed is unknown, defaulting to 1000 [ 578.040326][T29679] lo speed is unknown, defaulting to 1000 [ 578.218503][T29686] tipc: Started in network mode [ 578.223601][T29686] tipc: Node identity 7291e0a4b7d, cluster identity 4711 [ 578.233518][T29686] tipc: Enabled bearer , priority 0 [ 578.251163][T29686] tipc: Resetting bearer [ 578.285235][T29497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.295572][ T5180] Bluetooth: hci1: command tx timeout [ 578.307753][T29685] tipc: Disabling bearer [ 578.958714][T29497] veth0_vlan: entered promiscuous mode [ 578.995948][T29497] veth1_vlan: entered promiscuous mode [ 579.042061][T29497] veth0_macvtap: entered promiscuous mode [ 579.076686][T29497] veth1_macvtap: entered promiscuous mode [ 579.107881][T29497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.129412][T29497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.217295][ T7825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.338131][T29724] __nla_validate_parse: 8 callbacks suppressed [ 579.338155][T29724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6553'. [ 579.409380][ T7825] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.434714][ T7825] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.474890][T29727] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6554'. [ 579.534524][ T7825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.672371][T29730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6555'. [ 579.723224][T29731] netlink: 'syz.6.6555': attribute type 10 has an invalid length. [ 579.759481][T29730] hsr0: entered promiscuous mode [ 579.800342][T29730] hsr0: entered allmulticast mode [ 579.825760][T29730] hsr_slave_0: entered allmulticast mode [ 579.871825][T29730] hsr_slave_1: entered allmulticast mode [ 580.236636][T27077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.244519][T27077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.346655][T23343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.375961][T23343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.377540][ T5180] Bluetooth: hci1: command tx timeout [ 580.584089][T29740] vlan0: entered promiscuous mode [ 580.842460][T29760] siw: device registration error -23 [ 580.891666][T29760] tipc: Started in network mode [ 580.900596][T29760] tipc: Node identity 76387ab9a9b2, cluster identity 4711 [ 580.912978][T29760] tipc: Enabled bearer , priority 0 [ 580.954215][T29760] syzkaller0: entered promiscuous mode [ 580.960309][T29760] syzkaller0: entered allmulticast mode [ 581.040607][T29760] tipc: Resetting bearer [ 581.061590][T29760] tipc: Disabling bearer [ 581.201780][T29787] wg1 speed is unknown, defaulting to 1000 [ 581.209330][T29789] tipc: Enabled bearer , priority 0 [ 581.242282][T29791] syzkaller0: entered promiscuous mode [ 581.261536][T29791] syzkaller0: entered allmulticast mode [ 581.290775][T29787] lo speed is unknown, defaulting to 1000 [ 581.351671][T29791] tipc: Resetting bearer [ 581.378842][T29791] tipc: Disabling bearer [ 581.603036][T29815] netlink: 'syz.6.6582': attribute type 8 has an invalid length. [ 581.680962][T29812] tipc: Enabling of bearer rejected, failed to enable media [ 581.986954][T29828] netlink: 'syz.6.6584': attribute type 1 has an invalid length. [ 582.025852][T29828] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6584'. [ 582.038727][T29825] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6584'. [ 582.424293][T29840] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6589'. [ 582.456637][ T5180] Bluetooth: hci1: command tx timeout [ 582.563653][T29843] wg1 speed is unknown, defaulting to 1000 [ 582.590209][T29843] lo speed is unknown, defaulting to 1000 [ 582.998528][T29843] netlink: 248 bytes leftover after parsing attributes in process `syz.6.6591'. [ 583.108756][T29869] Bluetooth: MGMT ver 1.23 [ 583.148565][T29878] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6601'. [ 583.161487][T29878] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6601'. [ 583.199932][T29878] geneve2: entered promiscuous mode [ 583.314490][T29878] TC_ACT_REPEAT abuse ? [ 583.352643][T29886] macvlan2: entered allmulticast mode [ 583.367646][T29878] TC_ACT_REPEAT abuse ? [ 583.387390][T29878] TC_ACT_REPEAT abuse ? [ 583.630929][T29888] wg1 speed is unknown, defaulting to 1000 [ 583.682497][T29888] lo speed is unknown, defaulting to 1000 [ 583.966189][T29877] TC_ACT_REPEAT abuse ? [ 583.970624][T29877] TC_ACT_REPEAT abuse ? [ 584.056543][ T5987] TC_ACT_REPEAT abuse ? [ 584.058022][T29902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6607'. [ 584.151318][ T43] TC_ACT_REPEAT abuse ? [ 584.953858][T23339] TC_ACT_REPEAT abuse ? [ 584.958911][ T9600] TC_ACT_REPEAT abuse ? [ 584.964079][ T5987] TC_ACT_REPEAT abuse ? [ 585.079513][T29945] tipc: New replicast peer: 255.255.255.255 [ 585.110741][T29945] tipc: Enabled bearer , priority 6 [ 585.171383][T29947] __nla_validate_parse: 1 callbacks suppressed [ 585.171404][T29947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6619'. [ 585.196773][T29955] netlink: 'syz.7.6620': attribute type 10 has an invalid length. [ 585.463682][T29972] tipc: Enabled bearer , priority 0 [ 585.477491][T29976] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6626'. [ 585.496301][T29977] syzkaller0: entered promiscuous mode [ 585.504408][T29977] syzkaller0: entered allmulticast mode [ 585.533133][T29972] tipc: Enabling of bearer rejected, already enabled [ 585.711657][T29987] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6628'. [ 585.735084][T29977] tipc: Resetting bearer [ 585.754017][T29977] tipc: Disabling bearer [ 586.004475][T30003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6631'. [ 586.013952][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6631'. [ 586.023300][T30003] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6631'. [ 586.044155][T30003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6631'. [ 586.053304][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6631'. [ 586.062833][T30003] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6631'. [ 586.072907][T23339] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.089392][T23339] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.112549][T23339] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.139505][T23339] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.310755][T30021] netlink: 'syz.6.6637': attribute type 1 has an invalid length. [ 586.414230][T30021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.433492][T30030] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 586.479901][T30028] gretap1: entered promiscuous mode [ 586.492840][T30028] bond1: (slave gretap1): making interface the new active one [ 586.502777][T30028] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 586.524065][ T9597] tipc: Node number set to 3750394553 [ 586.590365][T30021] macvlan2: entered promiscuous mode [ 586.598132][T30021] macvlan2: entered allmulticast mode [ 586.618454][T30021] bond1: entered promiscuous mode [ 586.639833][T30021] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 586.674945][T30021] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 586.693642][T30021] bond1: left promiscuous mode [ 586.752251][T30049] wg1 speed is unknown, defaulting to 1000 [ 586.761196][T30049] lo speed is unknown, defaulting to 1000 [ 586.869225][T30057] netlink: 'syz.6.6648': attribute type 4 has an invalid length. [ 586.881425][T30058] netlink: 'syz.6.6648': attribute type 4 has an invalid length. [ 586.889770][T30057] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6648'. [ 587.442162][T30079] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004 [ 587.574954][T30091] netlink: 'syz.7.6656': attribute type 5 has an invalid length. [ 587.619712][T30084] netlink: 'syz.0.6654': attribute type 3 has an invalid length. [ 587.783379][T30079] wg1 speed is unknown, defaulting to 1000 [ 587.796897][T30079] lo speed is unknown, defaulting to 1000 [ 587.862729][T30098] siw: device registration error -23 [ 587.878927][ T9620] IPVS: starting estimator thread 0... [ 587.925306][T30104] tipc: Enabled bearer , priority 0 [ 587.948616][T30098] netlink: 'syz.3.6659': attribute type 4 has an invalid length. [ 588.005602][T30101] IPVS: using max 34 ests per chain, 81600 per kthread [ 588.022265][T30107] netlink: 'syz.0.6660': attribute type 4 has an invalid length. [ 588.104999][T30095] tipc: Disabling bearer [ 588.150701][T30112] netlink: 'syz.0.6662': attribute type 13 has an invalid length. [ 588.159945][T30112] netlink: 'syz.0.6662': attribute type 17 has an invalid length. [ 588.383006][T30113] wg1 speed is unknown, defaulting to 1000 [ 588.383119][T30121] veth0_to_bond: left allmulticast mode [ 588.402892][T30121] veth0_to_bond: left promiscuous mode [ 588.420253][T30121] bridge1: port 2(veth0_to_bond) entered disabled state [ 588.444893][T30113] lo speed is unknown, defaulting to 1000 [ 588.461732][T30125] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 588.625675][T30128] wg1 speed is unknown, defaulting to 1000 [ 588.632771][T30128] lo speed is unknown, defaulting to 1000 [ 589.293072][T30154] veth0_to_bridge: entered promiscuous mode [ 589.456411][T30153] veth0_to_bridge: left promiscuous mode [ 589.693724][T30189] veth1_macvtap: left promiscuous mode [ 590.001640][T30207] tipc: Enabling of bearer rejected, already enabled [ 590.135092][T30213] pimreg: tun_chr_ioctl cmd 2147767506 [ 590.178115][T30220] __nla_validate_parse: 13 callbacks suppressed [ 590.178140][T30220] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6689'. [ 590.258383][T30224] syz.7.6693 (30224) used obsolete PPPIOCDETACH ioctl [ 590.412418][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6697'. [ 590.463002][T30236] net_ratelimit: 6 callbacks suppressed [ 590.463026][T30236] TC_ACT_REPEAT abuse ? [ 590.473759][ C0] TC_ACT_REPEAT abuse ? [ 590.738389][T30246] tipc: Enabled bearer , priority 0 [ 590.755805][T30246] syzkaller0: entered promiscuous mode [ 590.761506][T30246] syzkaller0: entered allmulticast mode [ 590.784527][T30246] tipc: Resetting bearer [ 590.803708][T30246] netlink: 248 bytes leftover after parsing attributes in process `syz.7.6702'. [ 590.884439][T30245] tipc: Resetting bearer [ 590.899547][T30245] tipc: Disabling bearer [ 591.020931][T30258] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6705'. [ 591.039101][T30258] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6705'. [ 591.055571][T30258] bridge_slave_1: left allmulticast mode [ 591.062053][T30258] bridge_slave_1: left promiscuous mode [ 591.071589][T30258] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.087960][T30258] bridge_slave_0: left allmulticast mode [ 591.093996][T30258] bridge_slave_0: left promiscuous mode [ 591.108796][T30258] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.259292][T30271] IPVS: stopping backup sync thread 30277 ... [ 591.265706][T30277] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 591.416810][T30286] validate_nla: 1 callbacks suppressed [ 591.416833][T30286] netlink: 'syz.7.6712': attribute type 4 has an invalid length. [ 591.441065][T30281] wg1 speed is unknown, defaulting to 1000 [ 591.453557][T30281] lo speed is unknown, defaulting to 1000 [ 591.570914][T30291] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6713'. [ 591.683171][T30297] sctp: [Deprecated]: syz.5.6715 (pid 30297) Use of int in maxseg socket option. [ 591.683171][T30297] Use struct sctp_assoc_value instead [ 591.685066][T30296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 591.745151][T30289] wg1 speed is unknown, defaulting to 1000 [ 591.891068][T30289] lo speed is unknown, defaulting to 1000 [ 592.003044][T30313] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 592.089448][T30319] netlink: 'syz.7.6723': attribute type 4 has an invalid length. [ 592.244898][T30327] atomic_op ffff88807c8c5998 conn xmit_atomic 0000000000000000 [ 592.271913][T30330] nbd: must specify a size in bytes for the device [ 592.279058][T30330] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6726'. [ 592.338686][T30341] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6726'. [ 592.362797][T30340] nbd: must specify a size in bytes for the device [ 592.381654][T30323] tipc: Enabled bearer , priority 0 [ 592.448061][T30339] gtp0: entered promiscuous mode [ 592.453093][T30339] gtp0: entered allmulticast mode [ 592.584275][T30335] tipc: Resetting bearer [ 592.627356][ T9620] TC_ACT_REPEAT abuse ? [ 592.653596][T30322] tipc: Resetting bearer [ 592.739252][T30363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6735'. [ 592.752146][T30322] tipc: Disabling bearer [ 592.754128][T30363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6735'. [ 593.027970][T30382] netlink: 'syz.3.6739': attribute type 4 has an invalid length. [ 593.036660][T30361] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 593.144445][T30387] netlink: 'syz.3.6741': attribute type 10 has an invalid length. [ 593.255825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.266168][ T5987] TC_ACT_REPEAT abuse ? [ 593.379876][T30399] tipc: New replicast peer: 255.255.255.255 [ 593.403075][T30399] tipc: Enabled bearer , priority 6 [ 593.459301][T30404] netlink: 'syz.6.6747': attribute type 2 has an invalid length. [ 593.590309][T30404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.752009][T30421] netlink: 'syz.3.6751': attribute type 4 has an invalid length. [ 594.146689][T30447] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 594.257384][T30466] netlink: 'syz.0.6763': attribute type 4 has an invalid length. [ 594.402118][T30475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.114128][T30506] netlink: 'syz.6.6776': attribute type 4 has an invalid length. [ 595.198720][T30508] vcan0: tx drop: invalid da for name 0xfffffffffffffffb [ 595.469788][T30514] __nla_validate_parse: 7 callbacks suppressed [ 595.469804][T30514] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6780'. [ 595.490958][T30515] netlink: 'syz.3.6779': attribute type 9 has an invalid length. [ 595.499513][T30514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6780'. [ 595.512236][T30515] macsec1: entered promiscuous mode [ 595.517806][T30515] mac80211_hwsim hwsim83 wlan1: entered promiscuous mode [ 595.526300][T30515] mac80211_hwsim hwsim83 wlan1: left promiscuous mode [ 595.554384][T30514] hsr_slave_1 (unregistering): left promiscuous mode [ 595.970588][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 595.978822][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 595.991048][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 596.000799][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 596.008919][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 596.033713][T30527] wg1 speed is unknown, defaulting to 1000 [ 596.041064][T30527] lo speed is unknown, defaulting to 1000 [ 596.159896][ T7826] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.173418][T30527] chnl_net:caif_netlink_parms(): no params data found [ 596.193468][T27069] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.228082][ T7826] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.243909][ T7826] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.258465][T27077] veth9: left allmulticast mode [ 596.263491][T27077] veth9: left promiscuous mode [ 596.268694][T27077] bridge4: port 1(veth9) entered disabled state [ 596.361733][T27077] bond0 (unregistering): (slave geneve2): Releasing active interface [ 596.447584][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880284e2000: rx timeout, send abort [ 596.628485][T27077] bond1 (unregistering): Released all slaves [ 596.641526][T27077] bond2 (unregistering): Released all slaves [ 596.652783][T27077] bond0 (unregistering): Released all slaves [ 596.665175][T27077] bond3 (unregistering): Released all slaves [ 596.681107][T27077] bond4 (unregistering): Released all slaves [ 596.775024][T30527] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.783992][T30527] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.792378][T30527] bridge_slave_0: entered allmulticast mode [ 596.804008][T30527] bridge_slave_0: entered promiscuous mode [ 596.813341][T27077] þ: left promiscuous mode [ 596.832954][T30527] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.843245][T30527] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.854153][T30527] bridge_slave_1: entered allmulticast mode [ 596.865038][T30527] bridge_slave_1: entered promiscuous mode [ 596.872501][T27077] : left promiscuous mode [ 596.921391][T30527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.938251][T30541] netlink: 'syz.0.6784': attribute type 2 has an invalid length. [ 596.948213][T27077] tipc: Disabling bearer [ 596.953830][T27077] tipc: Left network mode [ 596.955923][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880284e2000: abort rx timeout. Force session deactivation [ 596.961875][T30527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.053600][T30527] team0: Port device team_slave_0 added [ 597.080696][T30527] team0: Port device team_slave_1 added [ 597.214205][T30527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.238379][T30527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.266883][T30527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.295315][T30527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.295473][T30563] FAULT_INJECTION: forcing a failure. [ 597.295473][T30563] name failslab, interval 1, probability 0, space 0, times 0 [ 597.310141][T30527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.325683][T30563] CPU: 0 UID: 0 PID: 30563 Comm: syz.3.6792 Not tainted syzkaller #0 PREEMPT(full) [ 597.325721][T30563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.325738][T30563] Call Trace: [ 597.325748][T30563] [ 597.325759][T30563] dump_stack_lvl+0x189/0x250 [ 597.325802][T30563] ? __pfx____ratelimit+0x10/0x10 [ 597.325839][T30563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.325868][T30563] ? __pfx__printk+0x10/0x10 [ 597.325904][T30563] ? fs_reclaim_acquire+0x7d/0x100 [ 597.325951][T30563] ? rcu_is_watching+0x15/0xb0 [ 597.325975][T30563] ? __pfx___might_resched+0x10/0x10 [ 597.325998][T30563] ? lock_acquire+0x5f/0x360 [ 597.326035][T30563] should_fail_ex+0x414/0x560 [ 597.326072][T30563] should_failslab+0xa8/0x100 [ 597.326109][T30563] kmem_cache_alloc_noprof+0x73/0x3c0 [ 597.326140][T30563] ? security_inode_alloc+0x39/0x330 [ 597.326167][T30563] security_inode_alloc+0x39/0x330 [ 597.326193][T30563] inode_init_always_gfp+0x9ed/0xdc0 [ 597.326235][T30563] ? __pfx_sock_alloc_inode+0x10/0x10 [ 597.326267][T30563] alloc_inode+0x82/0x1b0 [ 597.326304][T30563] __sock_create+0x12d/0x9f0 [ 597.326338][T30563] ? lock_release+0x4b/0x3e0 [ 597.326375][T30563] ? __might_fault+0xb0/0x130 [ 597.326408][T30563] ? __might_fault+0xcc/0x130 [ 597.326442][T30563] __sys_socketpair+0x1c5/0x560 [ 597.326483][T30563] __x64_sys_socketpair+0x9b/0xb0 [ 597.326520][T30563] do_syscall_64+0xfa/0x3b0 [ 597.326543][T30563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.326569][T30563] ? clear_bhb_loop+0x60/0xb0 [ 597.326597][T30563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.326620][T30563] RIP: 0033:0x7f8800f8ebe9 [ 597.326645][T30563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.326667][T30563] RSP: 002b:00007f8801d85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 597.326694][T30563] RAX: ffffffffffffffda RBX: 00007f88011b5fa0 RCX: 00007f8800f8ebe9 [ 597.326713][T30563] RDX: 0000000000000823 RSI: 0000000000000005 RDI: 0000000000000008 [ 597.326727][T30563] RBP: 00007f8801d85090 R08: 0000000000000000 R09: 0000000000000000 [ 597.326744][T30563] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 597.326760][T30563] R13: 00007f88011b6038 R14: 00007f88011b5fa0 R15: 00007ffea71f5f58 [ 597.326791][T30563] [ 597.326892][T30563] socket: no more sockets [ 597.346339][T30527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.694737][T30527] hsr_slave_0: entered promiscuous mode [ 597.714686][T30527] hsr_slave_1: entered promiscuous mode [ 597.743433][T30527] debugfs: 'hsr0' already exists in 'hsr' [ 597.758363][T30527] Cannot create hsr debugfs directory [ 597.927971][T30581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6797'. [ 597.973255][T27077] batadv_slave_0: left promiscuous mode [ 598.010439][T27077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.032626][T27077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.056677][ T5861] Bluetooth: hci2: command tx timeout [ 598.083823][T27077] pimreg (unregistering): left allmulticast mode [ 598.091673][T30593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6800'. [ 598.107566][T30593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6800'. [ 598.390147][T30590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6800'. [ 598.592368][T30609] FAULT_INJECTION: forcing a failure. [ 598.592368][T30609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.614879][T30601] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6803'. [ 598.650743][T30609] CPU: 1 UID: 0 PID: 30609 Comm: syz.3.6804 Not tainted syzkaller #0 PREEMPT(full) [ 598.650783][T30609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 598.650797][T30609] Call Trace: [ 598.650806][T30609] [ 598.650815][T30609] dump_stack_lvl+0x189/0x250 [ 598.650847][T30609] ? __pfx____ratelimit+0x10/0x10 [ 598.650879][T30609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.650905][T30609] ? __pfx__printk+0x10/0x10 [ 598.650935][T30609] ? rcu_is_watching+0x15/0xb0 [ 598.650955][T30609] should_fail_ex+0x414/0x560 [ 598.650985][T30609] _copy_to_user+0x31/0xb0 [ 598.651010][T30609] simple_read_from_buffer+0xe1/0x170 [ 598.651042][T30609] proc_fail_nth_read+0x1b3/0x220 [ 598.651067][T30609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.651092][T30609] ? rw_verify_area+0x2a6/0x4d0 [ 598.651117][T30609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.651141][T30609] vfs_read+0x1fd/0xa30 [ 598.651165][T30609] ? fdget_pos+0x247/0x320 [ 598.651184][T30609] ? __pfx___mutex_lock+0x10/0x10 [ 598.651215][T30609] ? __pfx_vfs_read+0x10/0x10 [ 598.651246][T30609] ? __fget_files+0x3a0/0x420 [ 598.651262][T30609] ? __fget_files+0x2a/0x420 [ 598.651285][T30609] ksys_read+0x145/0x250 [ 598.651312][T30609] ? __pfx_ksys_read+0x10/0x10 [ 598.651341][T30609] ? rcu_is_watching+0x15/0xb0 [ 598.651362][T30609] do_syscall_64+0xfa/0x3b0 [ 598.651380][T30609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.651399][T30609] ? clear_bhb_loop+0x60/0xb0 [ 598.651422][T30609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.651443][T30609] RIP: 0033:0x7f8800f8d5fc [ 598.651461][T30609] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 598.651480][T30609] RSP: 002b:00007f8801d64030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.651502][T30609] RAX: ffffffffffffffda RBX: 00007f88011b6090 RCX: 00007f8800f8d5fc [ 598.651517][T30609] RDX: 000000000000000f RSI: 00007f8801d640a0 RDI: 0000000000000008 [ 598.651531][T30609] RBP: 00007f8801d64090 R08: 0000000000000000 R09: 0000000000000000 [ 598.651544][T30609] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 598.651558][T30609] R13: 00007f88011b6128 R14: 00007f88011b6090 R15: 00007ffea71f5f58 [ 598.651584][T30609] [ 598.671251][T30606] wg1 speed is unknown, defaulting to 1000 [ 598.888991][T30527] netdevsim netdevsim7 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.917871][T30606] lo speed is unknown, defaulting to 1000 [ 599.025906][T30527] netdevsim netdevsim7 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.139221][T30620] 8021q: VLANs not supported on gre0 [ 599.169102][T30527] netdevsim netdevsim7 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.273920][T30527] netdevsim netdevsim7 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.306215][T30632] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6810'. [ 599.370143][T27077] IPVS: stop unused estimator thread 0... [ 599.399404][T30636] netlink: 'syz.3.6813': attribute type 4 has an invalid length. [ 599.422021][T30640] openvswitch: netlink: Message has 16 unknown bytes. [ 599.549547][T30527] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 599.602788][T30527] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 599.694555][T30527] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 599.708039][T30527] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 599.860247][T30527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.893327][T30527] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.921567][T27073] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.928966][T27073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.964715][T27073] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.971929][T27073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.146982][ T5861] Bluetooth: hci2: command tx timeout [ 600.293196][T30527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.438510][T30707] netlink: 34 bytes leftover after parsing attributes in process `syz.5.6832'. [ 600.468077][T30707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6832'. [ 600.593288][T30716] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6836'. [ 600.594010][T30717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6836'. [ 600.697147][T30723] netlink: 'syz.6.6835': attribute type 10 has an invalid length. [ 600.720927][T30723] team0: Port device dummy0 added [ 600.747736][T30723] netlink: 'syz.6.6835': attribute type 10 has an invalid length. [ 600.811065][T30723] team0: Port device dummy0 removed [ 600.848364][T30723] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 600.917263][T30527] veth0_vlan: entered promiscuous mode [ 600.958955][T30527] veth1_vlan: entered promiscuous mode [ 601.017891][T30737] wg1 speed is unknown, defaulting to 1000 [ 601.043762][T30527] veth0_macvtap: entered promiscuous mode [ 601.054996][T30745] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 601.110721][T30737] lo speed is unknown, defaulting to 1000 [ 601.184043][T30527] veth1_macvtap: entered promiscuous mode [ 601.341394][T30527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.367690][T30759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6846'. [ 601.399003][T30527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.460050][T30759] netlink: 'syz.5.6846': attribute type 3 has an invalid length. [ 601.516654][T30764] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6846'. [ 601.586577][ T7826] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.643218][ T7826] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.683355][ T7826] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.747223][ T7826] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.815144][ T7826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.833989][ T7826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.935163][T27073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.958479][T27073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.023163][T30787] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6854'. [ 602.099803][T30790] netlink: 'syz.7.6782': attribute type 1 has an invalid length. [ 602.121646][T30791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6782'. [ 602.132769][T30790] netlink: 'syz.7.6782': attribute type 1 has an invalid length. [ 602.157305][T30790] netlink: 'syz.7.6782': attribute type 1 has an invalid length. [ 602.157305][T30791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6782'. [ 602.160806][T30791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6782'. [ 602.226287][ T5861] Bluetooth: hci2: command tx timeout [ 602.321181][T30807] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6859'. [ 602.442639][T30808] wg1 speed is unknown, defaulting to 1000 [ 602.465309][T30808] lo speed is unknown, defaulting to 1000 [ 602.582038][T30828] netlink: 'syz.3.6864': attribute type 2 has an invalid length. [ 602.591039][T30828] netlink: 'syz.3.6864': attribute type 1 has an invalid length. [ 602.599564][T30828] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6864'. [ 603.292535][T30857] netlink: 'syz.5.6873': attribute type 7 has an invalid length. [ 603.489095][T30873] netlink: 'syz.6.6879': attribute type 4 has an invalid length. [ 603.559380][T30877] netlink: 'syz.0.6881': attribute type 1 has an invalid length. [ 603.861816][T30902] wg1 speed is unknown, defaulting to 1000 [ 603.899983][T30902] lo speed is unknown, defaulting to 1000 [ 603.910793][ T43] IPVS: starting estimator thread 0... [ 603.930664][T30911] syzkaller1: entered promiscuous mode [ 603.947904][T30915] netlink: 'syz.5.6891': attribute type 13 has an invalid length. [ 603.958007][T30911] syzkaller1: entered allmulticast mode [ 603.969027][T30915] netlink: 'syz.5.6891': attribute type 17 has an invalid length. [ 604.026146][T30914] IPVS: using max 35 ests per chain, 84000 per kthread [ 604.274490][T30915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 604.304062][ T5861] Bluetooth: hci2: command tx timeout [ 604.374416][T30918] wg1 speed is unknown, defaulting to 1000 [ 604.428857][T30934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 604.437281][T30923] openvswitch: netlink: Flow key attr not present in new flow. [ 604.470144][T30918] lo speed is unknown, defaulting to 1000 [ 604.509826][T30938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 604.538264][T30938] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 604.551607][T30938] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 605.213809][T30974] wg1 speed is unknown, defaulting to 1000 [ 605.229276][T30976] ip6gre2: entered allmulticast mode [ 605.250108][T30974] lo speed is unknown, defaulting to 1000 [ 605.440271][T30984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.869894][T31004] tipc: Enabling of bearer rejected, failed to enable media [ 606.176065][T31033] __nla_validate_parse: 10 callbacks suppressed [ 606.176088][T31033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6921'. [ 606.221823][T31037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6924'. [ 606.343222][T31050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6929'. [ 606.368009][T31050] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 606.376010][T31050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.992311][T31047] tipc: Started in network mode [ 606.999141][T31047] tipc: Node identity ac14140f, cluster identity 4711 [ 607.026330][T31047] tipc: New replicast peer: 255.255.255.255 [ 607.046216][T31047] tipc: Enabled bearer , priority 6 [ 607.110101][T31060] pim6reg: entered allmulticast mode [ 607.133518][T31053] wg1 speed is unknown, defaulting to 1000 [ 607.148888][T31053] lo speed is unknown, defaulting to 1000 [ 607.163852][T31066] tipc: Enabled bearer , priority 0 [ 607.190554][T31066] syzkaller0: entered promiscuous mode [ 607.200059][T31066] syzkaller0: entered allmulticast mode [ 607.236133][T31066] tipc: Resetting bearer [ 607.245332][T31065] tipc: Resetting bearer [ 607.248415][T31070] validate_nla: 1 callbacks suppressed [ 607.248439][T31070] netlink: 'syz.5.6935': attribute type 12 has an invalid length. [ 607.268225][T31070] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.6935'. [ 607.282865][T31065] tipc: Disabling bearer [ 607.468000][T31086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6939'. [ 607.538475][T31092] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6942'. [ 607.599239][T31094] tipc: Enabling of bearer rejected, failed to enable media [ 608.056568][ T9600] tipc: Node number set to 2886997007 [ 608.144494][T31118] netlink: 'syz.0.6953': attribute type 1 has an invalid length. [ 608.153446][T31125] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6957'. [ 608.165271][T31127] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6954'. [ 608.200969][T31118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.224150][T31127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6954'. [ 608.261244][T31134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6958'. [ 608.350095][T31131] netlink: 'syz.7.6957': attribute type 1 has an invalid length. [ 608.401857][T31139] tipc: Enabled bearer , priority 0 [ 608.428827][T31139] syzkaller0: entered promiscuous mode [ 608.438833][T31139] syzkaller0: entered allmulticast mode [ 608.453434][T31139] tipc: Resetting bearer [ 608.499142][T31138] tipc: Resetting bearer [ 608.513198][T31138] tipc: Disabling bearer [ 608.636823][T31157] netlink: 'syz.7.6966': attribute type 1 has an invalid length. [ 608.714271][T31150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 609.982084][ T5987] hid-generic 0005:046D:8002.0002: collection stack underflow [ 610.014202][ T5987] hid-generic 0005:046D:8002.0002: item 0 0 0 12 parsing failed [ 610.036642][ T5987] hid-generic 0005:046D:8002.0002: probe with driver hid-generic failed with error -22 [ 610.075046][T31251] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.082680][T31251] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.279247][T31251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.422920][T31251] vti0: left promiscuous mode [ 610.432934][T31251] vti0: left allmulticast mode [ 610.442966][T23346] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.464992][T23346] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.491248][T23346] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.532824][T23346] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.829370][T31289] wg1 speed is unknown, defaulting to 1000 [ 610.850205][T27069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.878014][T27069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.893929][T31289] lo speed is unknown, defaulting to 1000 [ 611.373250][T31318] __nla_validate_parse: 14 callbacks suppressed [ 611.373275][T31318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7012'. [ 611.402628][T31318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7012'. [ 611.446825][T31318] ip6tnl1: entered promiscuous mode [ 611.465984][T31318] ip6tnl1: entered allmulticast mode [ 611.495315][T31318] netlink: 'syz.7.7012': attribute type 1 has an invalid length. [ 611.512189][T31318] netlink: 15 bytes leftover after parsing attributes in process `syz.7.7012'. [ 611.546829][T31333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7016'. [ 611.621807][T31335] mac80211_hwsim hwsim94 wlan1: entered promiscuous mode [ 611.637237][T31335] macsec0: entered promiscuous mode [ 611.663284][T31342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.686087][T31335] mac80211_hwsim hwsim94 wlan1: left promiscuous mode [ 611.705283][T31346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7021'. [ 611.729907][T31347] sctp: [Deprecated]: syz.0.7020 (pid 31347) Use of int in maxseg socket option. [ 611.729907][T31347] Use struct sctp_assoc_value instead [ 611.760174][T31351] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 611.805057][T31349] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7022'. [ 611.829973][T31349] batadv1: entered promiscuous mode [ 611.835252][T31349] batadv1: entered allmulticast mode [ 611.888326][T31361] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.966620][T31365] netlink: 'syz.7.7026': attribute type 9 has an invalid length. [ 611.974524][T31365] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7026'. [ 611.993727][T31361] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.010585][T31368] netlink: 'syz.0.7027': attribute type 10 has an invalid length. [ 612.023010][T31368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7027'. [ 612.086566][T31371] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7028'. [ 612.126242][T31361] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.129894][T31373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7029'. [ 612.149152][T31371] 0·: renamed from hsr0 [ 612.155180][T31371] 0·: left promiscuous mode [ 612.161998][T31371] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 612.178876][T31368] dummy0: entered promiscuous mode [ 612.184076][T31368] dummy0: entered allmulticast mode [ 612.191133][T31368] bridge0: port 4(dummy0) entered blocking state [ 612.197860][T31368] bridge0: port 4(dummy0) entered disabled state [ 612.223959][T31373] team1: entered promiscuous mode [ 612.236747][T31373] team1: entered allmulticast mode [ 612.271380][T31361] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.415020][ T7825] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.450917][ T7825] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.479564][ T7825] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.500433][ T7825] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.611335][T31397] : entered promiscuous mode [ 612.667439][T31403] netlink: 'syz.5.7038': attribute type 13 has an invalid length. [ 612.694956][T31403] netlink: 'syz.5.7038': attribute type 17 has an invalid length. [ 612.785042][T31403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 612.866704][T31409] veth11: entered promiscuous mode [ 612.881134][T31406] wg1 speed is unknown, defaulting to 1000 [ 612.891156][T31403] netlink: 'syz.5.7038': attribute type 1 has an invalid length. [ 612.901028][T31403] netlink: 'syz.5.7038': attribute type 2 has an invalid length. [ 612.984194][T31406] lo speed is unknown, defaulting to 1000 [ 613.084862][T31419] IPv6: sit1: Disabled Multicast RS [ 613.456855][T31442] wg1 speed is unknown, defaulting to 1000 [ 613.487112][T31442] lo speed is unknown, defaulting to 1000 [ 613.501773][T31449] netlink: 'syz.7.7051': attribute type 10 has an invalid length. [ 613.547834][T31449] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 614.140297][T31497] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 614.347171][T31511] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 614.502571][T31522] netlink: 'syz.3.7069': attribute type 1 has an invalid length. [ 614.627676][T23343] ip6_vti0 (unregistering): left allmulticast mode [ 614.850765][T23343] bond1 (unregistering): Released all slaves [ 614.871631][T23343] bond2 (unregistering): Released all slaves [ 614.889383][T23343] bond3 (unregistering): Released all slaves [ 614.903908][T23343] bond4 (unregistering): Released all slaves [ 614.922889][T23343] bond0 (unregistering): Released all slaves [ 614.934565][T23343] bond5 (unregistering): Released all slaves [ 614.946100][T23343] bond6 (unregistering): Released all slaves [ 614.957106][T23343] bond7 (unregistering): Released all slaves [ 614.991442][T31535] bond_slave_0: entered promiscuous mode [ 614.997251][T31535] bond_slave_1: entered promiscuous mode [ 615.005322][T31535] macvlan2: entered promiscuous mode [ 615.034098][T31535] bond0: entered promiscuous mode [ 615.061671][T31535] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 615.117105][T23343] : left promiscuous mode [ 615.202639][T23343] tipc: Left network mode [ 615.403349][T31565] netlink: 'syz.3.7083': attribute type 29 has an invalid length. [ 615.443134][T31565] netlink: 'syz.3.7083': attribute type 29 has an invalid length. [ 615.471430][T31565] netlink: 'syz.3.7083': attribute type 29 has an invalid length. [ 615.584602][T23343] hsr_slave_0: left promiscuous mode [ 615.649857][T23343] hsr_slave_1: left promiscuous mode [ 615.772924][T23343] pimreg (unregistering): left allmulticast mode [ 616.042736][T31565] netlink: 'syz.3.7083': attribute type 29 has an invalid length. [ 616.300556][T31608] smc: net device bond0 erased user defined pnetid SYZ2 [ 616.368451][T31608] bond0 (unregistering): left promiscuous mode [ 616.385666][T31608] bond_slave_0: left promiscuous mode [ 616.400225][T31608] bond_slave_1: left promiscuous mode [ 616.466256][T31608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.521672][T31608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.548751][T31608] bond0 (unregistering): Released all slaves [ 616.628797][T23343] IPVS: stop unused estimator thread 0... [ 616.644855][T31615] syzkaller1: entered promiscuous mode [ 616.650990][T31615] syzkaller1: entered allmulticast mode [ 616.660418][T31629] __nla_validate_parse: 16 callbacks suppressed [ 616.660442][T31629] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7096'. [ 616.682279][T31629] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7096'. [ 616.753134][T31625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7096'. [ 616.955904][T31646] wg1 speed is unknown, defaulting to 1000 [ 616.981652][T31646] lo speed is unknown, defaulting to 1000 [ 617.113479][T31652] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 617.126097][T31652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.342187][T31665] syzkaller0: entered promiscuous mode [ 617.380600][T31665] syzkaller0: entered allmulticast mode [ 617.388650][T31664] tipc: Enabled bearer , priority 0 [ 617.415306][T31664] tipc: Resetting bearer [ 617.461848][T31663] tipc: Resetting bearer [ 617.476687][T31663] tipc: Disabling bearer [ 617.500935][T31671] wg1 speed is unknown, defaulting to 1000 [ 617.513320][T31646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.530920][T31671] lo speed is unknown, defaulting to 1000 [ 617.542816][T31672] wg1 speed is unknown, defaulting to 1000 [ 617.580237][T31675] dvmrp0: left allmulticast mode [ 617.647126][T31672] lo speed is unknown, defaulting to 1000 [ 617.805293][T31680] validate_nla: 34 callbacks suppressed [ 617.805317][T31680] netlink: 'syz.3.7111': attribute type 10 has an invalid length. [ 619.095726][ T5180] Bluetooth: hci2: command 0x0405 tx timeout [ 634.862637][ T7822] veth0_to_bond: left allmulticast mode [ 634.868624][ T7822] veth0_to_bond: left promiscuous mode [ 634.874341][ T7822] bridge3: port 2(veth0_to_bond) entered disabled state [ 634.882742][ T7822] veth5: left allmulticast mode [ 634.888511][ T7822] veth5: left promiscuous mode [ 634.893435][ T7822] bridge3: port 1(veth5) entered disabled state [ 635.240218][ T7822] bond0 (unregistering): Released all slaves [ 635.252277][ T7822] bond1 (unregistering): Released all slaves [ 635.263736][ T7822] bond2 (unregistering): Released all slaves [ 635.275159][ T7822] bond3 (unregistering): Released all slaves [ 635.285246][ T7822] bond4 (unregistering): Released all slaves [ 635.297206][ T7822] bond5 (unregistering): Released all slaves [ 635.311244][ T7822] bond6 (unregistering): (slave wireguard1): Releasing backup interface [ 635.319803][ T7822] wireguard1: left promiscuous mode [ 635.333564][ T7822] bond6 (unregistering): Released all slaves [ 635.346403][ T7822] bond7 (unregistering): Released all slaves [ 635.357346][ T7822] bond8 (unregistering): Released all slaves [ 635.369285][ T43] wg1 speed is unknown, defaulting to 1000 [ 635.375204][ T43] syz0: Port: 1 Link DOWN [ 635.424831][ T7822] tipc: Disabling bearer [ 635.431011][ T7822] tipc: Left network mode [ 635.467266][ T7822] IPVS: stopping master sync thread 14936 ... [ 635.737213][ T7822] hsr_slave_0: left promiscuous mode [ 635.743036][ T7822] hsr_slave_1: left promiscuous mode [ 635.752504][ T7822] veth1_macvtap: left promiscuous mode [ 635.759101][ T7822] veth0_macvtap: left promiscuous mode [ 635.764778][ T7822] veth1_vlan: left promiscuous mode [ 635.770551][ T7822] veth0_vlan: left promiscuous mode [ 635.856113][ C1] ------------[ cut here ]------------ [ 635.861656][ C1] kernel BUG at arch/x86/mm/physaddr.c:28! [ 635.867543][ C1] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 635.873935][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 635.883135][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.893288][ C1] RIP: 0010:__phys_addr+0x16b/0x180 [ 635.898508][ C1] Code: 8f ae 00 e9 45 ff ff ff e8 62 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 50 c4 8a 03 e9 4d ff ff ff e8 46 24 4b 00 90 <0f> 0b e8 3e 24 4b 00 90 0f 0b e8 36 24 4b 00 90 0f 0b 0f 1f 00 90 [ 635.918284][ C1] RSP: 0018:ffffc900001d7878 EFLAGS: 00010246 [ 635.924376][ C1] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801d2dda00 [ 635.932456][ C1] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 635.940446][ C1] RBP: ffffc900001d7b50 R08: 0000000000000000 R09: 0000000000000000 [ 635.948522][ C1] R10: dffffc0000000000 R11: ffffffff8a024f70 R12: ffffffff8a024f70 [ 635.956547][ C1] R13: ffffffff81a7f7c7 R14: 000000017fff0000 R15: dffffc0000000000 [ 635.964537][ C1] FS: 0000000000000000(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 635.973748][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.980346][ C1] CR2: 00007fbaae4ffc57 CR3: 000000000df36000 CR4: 00000000003526f0 [ 635.988376][ C1] Call Trace: [ 635.991700][ C1] [ 635.994646][ C1] ? in_dev_free_rcu+0x49/0x60 [ 635.999424][ C1] kfree+0x77/0x440 [ 636.003255][ C1] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 636.008548][ C1] ? rcu_core+0xc37/0x1770 [ 636.013092][ C1] in_dev_free_rcu+0x49/0x60 [ 636.017690][ C1] rcu_core+0xca8/0x1770 [ 636.021956][ C1] ? __pfx_rcu_core+0x10/0x10 [ 636.026653][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 636.032067][ C1] ? sched_clock_cpu+0x74/0x430 [ 636.036944][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 636.042241][ C1] ? __local_bh_disable_ip+0xf1/0x190 [ 636.047629][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 636.053603][ C1] ? try_to_wake_up+0x7f5/0x12b0 [ 636.058648][ C1] handle_softirqs+0x283/0x870 [ 636.063446][ C1] ? run_ksoftirqd+0x9b/0x100 [ 636.068150][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 636.073482][ C1] ? schedule+0x91/0x360 [ 636.077779][ C1] ? rcu_is_watching+0x15/0xb0 [ 636.082647][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 636.087700][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 636.092768][ C1] run_ksoftirqd+0x9b/0x100 [ 636.097351][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 636.102487][ C1] smpboot_thread_fn+0x53f/0xa60 [ 636.107443][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 636.112509][ C1] kthread+0x70e/0x8a0 [ 636.116596][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 636.122062][ C1] ? __pfx_kthread+0x10/0x10 [ 636.126674][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.131928][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 636.137242][ C1] ? __pfx_kthread+0x10/0x10 [ 636.141871][ C1] ret_from_fork+0x3f9/0x770 [ 636.146482][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 636.151626][ C1] ? __switch_to_asm+0x39/0x70 [ 636.156409][ C1] ? __switch_to_asm+0x33/0x70 [ 636.161213][ C1] ? __pfx_kthread+0x10/0x10 [ 636.165836][ C1] ret_from_fork_asm+0x1a/0x30 [ 636.170643][ C1] [ 636.173675][ C1] Modules linked in: [ 636.177635][ C1] ---[ end trace 0000000000000000 ]--- [ 636.183095][ C1] RIP: 0010:__phys_addr+0x16b/0x180 [ 636.188369][ C1] Code: 8f ae 00 e9 45 ff ff ff e8 62 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 50 c4 8a 03 e9 4d ff ff ff e8 46 24 4b 00 90 <0f> 0b e8 3e 24 4b 00 90 0f 0b e8 36 24 4b 00 90 0f 0b 0f 1f 00 90 [ 636.208067][ C1] RSP: 0018:ffffc900001d7878 EFLAGS: 00010246 [ 636.214272][ C1] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801d2dda00 [ 636.222299][ C1] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 636.230430][ C1] RBP: ffffc900001d7b50 R08: 0000000000000000 R09: 0000000000000000 [ 636.238446][ C1] R10: dffffc0000000000 R11: ffffffff8a024f70 R12: ffffffff8a024f70 [ 636.246472][ C1] R13: ffffffff81a7f7c7 R14: 000000017fff0000 R15: dffffc0000000000 [ 636.254487][ C1] FS: 0000000000000000(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 636.263893][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.270620][ C1] CR2: 00007fbaae4ffc57 CR3: 000000000df36000 CR4: 00000000003526f0 [ 636.278823][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 636.286458][ C1] Kernel Offset: disabled [ 636.290811][ C1] Rebooting in 86400 seconds..