last executing test programs: 2m25.347156609s ago: executing program 32 (id=4091): sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/110, 0x6e}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f00000015c0)=""/147, 0x93}], 0x9}}], 0x1, 0x40010122, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @uid}, @typed={0x8, 0x88, 0x0, 0x0, @uid=0xee00}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40815}, 0x2000c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x46, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) sendmsg$unix(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x18, 0x4000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, 0x0, 0x280002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x8080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f00000029c0)={r3, r4+10000000}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001ac0)={&(0x7f0000000140), 0xc, &(0x7f0000001a80)={&(0x7f0000001b00)={0x1ac, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x9, 0x6c, 0x2, 0x5, 0x1, 0x1d, 0x6, 0x18, 0x60, 0x1b, 0x36, 0x9, 0x4, 0x2, 0x5, 0x0, 0x12, 0x26]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x9, 0x6, 0x1b, 0x6, 0x36, 0x6, 0xc1487e894cfdba2d]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xf, 0x36, 0x12, 0x13, 0x60, 0x12, 0x2, 0x30, 0x6, 0x2, 0x0, 0x60, 0x48, 0x6c, 0x5, 0x4, 0x1b, 0x6, 0x60, 0x60, 0x6, 0x1, 0x14, 0x30, 0x2, 0xb, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xad1f, 0x2, 0x0, 0x10, 0xfff9, 0x3, 0x21]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2e8d, 0x7, 0x4, 0x5, 0x4, 0x8001, 0x7, 0xfff7]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x6}, {0x2, 0x3}, {0x7, 0x6}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0xa}, {0x7, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x6}, {0x1, 0x8}, {0x4, 0x2}, {0x5, 0x8}, {0x5, 0x7}, {0x6, 0x3}, {0x5}, {0x6, 0x7}, {0x7, 0x8}, {}, {0x3, 0x8}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0x6}, {0x7, 0x5}, {0x5, 0xa}, {0x6, 0xa}, {0x3}, {0x7, 0x7}, {0x6, 0x2}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x8}, {0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0x6}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x3}, {0x4, 0x5}, {0x5}, {0x6, 0x1}, {0x4, 0x5}, {0x2, 0x3}, {0x0, 0xa}, {0x4, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x3, 0x5}, {0x4, 0x4}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x1}, {0x7}, {0x4, 0x5}, {0x1, 0x6}, {0x3, 0x4}, {0x7, 0x1}, {0x4}, {0x2}, {0x5}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x6, 0x2}, {0x0, 0x9}, {}, {0x5, 0x3}, {0x1, 0x3}, {0x5, 0x1}, {0x4, 0x6}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x7, 0x5, 0x4, 0x4, 0xff15, 0xddf5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x47}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x3e}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x941}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x810}, 0x24000004) 2m20.186511981s ago: executing program 33 (id=4130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @lsm=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, 0x0, 0x25, 0x4, @void}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0xb, &(0x7f0000001000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76, 0x0, 0x0, 0x2b000000}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x78, '\x00', 0x0, @sock_ops}, 0x94) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0xee3e0ec5e1c42de9, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r11, &(0x7f0000002fc0), 0x0, 0x24000045) 2m15.777453153s ago: executing program 34 (id=4171): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r2, 0x800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0803, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x8) 2m14.634895572s ago: executing program 35 (id=4179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x4, @void}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r8, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x41, 0x1, 0x70bd25, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0x9, 0xb, 0x0, 0x0, @str='}&:}\x00'}]}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@local}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76, 0x0, 0x0, 0x2b000000}, [@generic={0x7, 0x7, 0x0, 0xc, 0xb78b}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x78, '\x00', 0x0, @sock_ops}, 0x94) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0xee3e0ec5e1c42de9, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) socket$netlink(0x10, 0x3, 0x4) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r11, &(0x7f0000002fc0)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r11, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1m57.990947495s ago: executing program 8 (id=4327): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001600)={0xb0, r2, 0x1da7b7b02c8526a0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21af}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6e}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24008004}, 0x402c880) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f14010828bd7000fddbdf2509004500"], 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r3) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0x74, r6, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x537436c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="1c0000000206030000000000000000000000000005000100070000008f13389fb96f218869eaa1c052cc2f2c197773717a353281957320ffc5fe1e4a4fbac97887c11ea76b1c14f2e8b1438ba95c8db1ab0c002f7a5a118826890d650c99ee0652f3440263626c11601660c97502c22406d817df981cdc6d6380ce2f674deb7996cc608a8d1248f06253da269fa69185890d9920ea05c28c8654ba232ed1073abe85f3f17a88421317886846cfac9d0fcfb150daac991190aa03aaff88e8978a3ce453d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x800) 1m57.250640394s ago: executing program 8 (id=4331): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x9c28, 0x800000000000}, 0x0, &(0x7f0000000200)={0x3ff, 0x1, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) pipe(&(0x7f0000000040)) 1m56.173008226s ago: executing program 8 (id=4338): sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x20}}], 0x1, 0x800) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r1, &(0x7f0000000500), 0x0}, 0x20) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000180)={@broadcast}, &(0x7f0000000240)=0x8) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0) getgid() socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$802154_dgram(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800) unshare(0x24020400) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x19681}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0xffffffffffffffcf, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m54.779790011s ago: executing program 8 (id=4342): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r4], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x6, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0xfffffffe) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x40) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) 1m54.409624062s ago: executing program 8 (id=4344): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @loopback, 0x4e22, 0x3, 'lc\x00', 0x34, 0x80001, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7}, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000a00)={0x8, 0x9, 0x6, 0x1000, 0xa, 0x7e, 0x72, 0x7f1c}, 0x0, 0x0, &(0x7f0000000ac0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000cbb60000000000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100b00000009500000000000000b7020000000080007b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004604f0ff7600000018010000696c6c2500000000002020207b1af8b000000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000bf9800000000000056080000000000408500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="00f9c22ea7", 0x5}], 0x1}, 0x49cf75490397e68f) ioctl$SIOCSIFHWADDR(r3, 0x8905, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 1m54.174984584s ago: executing program 8 (id=4346): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000e92dd9f501000000", @ANYRES32=0x1, @ANYBLOB='@\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f00000001c0), &(0x7f0000000180)=""/10, 0x2}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f00000007c0)="6e660f76", 0x4, 0x20000000, &(0x7f0000000880)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000001100), &(0x7f0000001180)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) bind$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) write(r5, &(0x7f0000000000)="01", 0x1) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r3, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m51.521222441s ago: executing program 36 (id=4272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @multicast1}, {0x2, 0x20, @empty}, 0x363, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r2 = socket(0x1e, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x8}, &(0x7f0000000580)=0x8) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r2, 0x0) r8 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r8, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendto$inet(r9, 0x0, 0x0, 0x20000040, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 1m46.903702379s ago: executing program 6 (id=4382): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) r3 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x40, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}]}, 0x40}}, 0x84) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000000000000000000000000000000008000300687372302800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r8, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, r10, 0x0, 0xa002a0}, 0x38) read(r10, 0x0, 0x0) getsockopt$bt_hci(r9, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000001c0)={'bond0\x00', 0x41}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'dummy0\x00', 0x41}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'hsr0\x00', 0x41}) sendto$packet(r5, &(0x7f0000000280)="01154e0001000011221e4455892fca01000188fb", 0x14, 0x0, &(0x7f0000000040)={0x11, 0x0, r6}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m46.590901188s ago: executing program 6 (id=4385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f48", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m46.3882313s ago: executing program 6 (id=4386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20001, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 1m44.783107167s ago: executing program 6 (id=4389): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) epoll_create1(0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0x4}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed7375970525d7b079986a72530b1244ac7bff4ea6e092cfac6d8f55339db56379dd861b80aa3b800"/154, 0x9a}, {&(0x7f0000000600)="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", 0xea7}], 0x2, 0x0, 0x0, 0x4040000}], 0x1, 0x800) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0xc, "092441c20949e0afc65b"}]}}}], 0x40}, 0x20002800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x20004044}, 0x10) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf7, r9, 0x1, 0xfd, 0x6, @broadcast}, 0x14) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r10, 0x0, 0x0, 0x60, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x44) sendmsg$nl_route(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r11, @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 1m44.347525921s ago: executing program 6 (id=4391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00020009"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042bbd7000fddbdf250900000600000100706369001100029e7cdfac654894603a31302e300000000008000300000000000800090005000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c00cf203b3e6ca0246d8900005400010027bd7000fcdbdf2500000000478ddeb5a882fbfc97a007faa4f52e989c9332c30dea86845029fb372934e66c9dcd8d0afcc74233dc12b1a4", @ANYRES32=r9, @ANYBLOB="04000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000804}, 0x20000050) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r9}, 0x14) listen(r6, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000008c0)={{r10}, 0x3, &(0x7f0000000340)=[0xfffffffffffffffa, 0x81, 0x2], 0xfffffffffffffffa, 0x2}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r11, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r6}, 0x20) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x3fa, 0xdfd2bc031e6e94ac, 0x70bd29, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4008854) ioctl(0xffffffffffffffff, 0x1, &(0x7f00000006c0)="58dc98f0") sendmmsg$inet6(r6, &(0x7f0000002440), 0x400, 0x41) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000370400000000000000", @ANYRES32=0x0, @ANYBLOB="00c47e0d887d1c00000000000000440012800e00010069703665727370616e000000300002801400060020010000000000000000000000000002140007002001000000000000000000000000000204001200fe689f1426109b076f8500727749d74ac1dc43512123c731e049f7e0dc46e05173b07e2517286123c13928233d66e98d6a970f9682fea007dba6c7d781a45f28fef7c44ee312b4a75e"], 0x64}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004881}, 0x20040021) 1m43.936218533s ago: executing program 6 (id=4393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r3, 0x800, 0x70bd30, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48884) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0xac, r4, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x85, 0x5b, "00dbaab63c1d728d6a8e15672506000000000000008f4a9f498ca8573c3e9716a176b548949838d8277bcd8e5dc69ef82a2c5242fa39590861c4684ab3b25ab6363762033bb43bc9d41522bf313450011c5d16bd96cc790662756b7c214c270d943ba93c44000b34210dbdf1474bc3159dc6bb75e719797b0840bc55faba394b9c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0xac}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'sit0\x00', 0x0}) r10 = socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001a00)={@local, 0x20}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="340000001400b59527bd7000fddbdf250a3f00fe", @ANYBLOB="080008000806000014000200fe8000000000000000000000000000aafb"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1a0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x810}, 0xd407acd77e336d7c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xf44}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) 1m41.366742158s ago: executing program 5 (id=4402): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r2], 0x38}}, 0x880) 1m40.985471156s ago: executing program 5 (id=4403): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000002700)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000600)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xfffffffffffffe36, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$key(r8, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020afc000700000028bdc16bafccdf2505001a0000000000000000000000000000000000ac14bf194c2f815114890000000000000a0049"], 0x38}}, 0x40408c0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 1m40.388128442s ago: executing program 5 (id=4407): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008010) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000080)="838e770ceeeb2f8d8c280c91c8546166431baeb6ce1aa53179476da5b45f8accc682e13a92559b31c10c858526db2ac58255cd6e431c459b6a83b84e7446975365c5241d731a510a77b58c4ec0cf293c2dccf1e319eee67fb71faae9153c01f6e5d4d5eebce7412a2c046f7515951dd2b73043615a0c6f3bb2a01c22c87a4eeeedb8cbaf4d1f89c8e4900345c16240fc860d70ef03e60e20a8954e825ced628d3e1c3367331b34646a295255c106605cb5548ad67854fa2d02ef6a61c55861f2564c5e40a961719d3c526d10b8a949bc12fab57dd4", 0xd5}, {&(0x7f0000000180)="97827f83445f51b2e4239f5ae4b874cef30770de9e2d136cbcea70bfde1950448e59e044ab3ac27fb272f987bcfb5c0cbc7bf8d682784cd673168fafd13291e98b619049acb9b891997e4f581c05ed44a923ee40610e36d084819e7429", 0x5d}, {&(0x7f0000000340)="058a2fd56987917f521c7852ac47d7fc13b4f6a14b820ec8d8e5f8878f962f9dbad0a02269e45c516312cc4d125c9bdf70ac0c8e798b720e85ac24c42299ef91501e3be7be109864d53e0a81c8b5999723865a0744ea16f0cc39af4a61558adda5459e8ea6909055b2238f8653912a2e2ce7df9add6ad0f07b5d7a9604cba37700cf06b11654e616c0adc3af7aaea795c69a46a9dde192ec52d6d482b55e95aed4da7ea8d9811e16d905aa4475969609b6f5b23463b46abd4d535da73f7013c66ebdce0af0fe6041711b21e42ed0f177ce78", 0xd2}, {&(0x7f00000004c0)="74bb6c7b89358087e01674da826334cad6d6ed55758929f3fa7a7042704064eb04419e4ebb3f0bbee2f79aeb77b63a78fec0704bbc022aecfa08261603b3a1a902ee1a4d62408acd23e2494057f81e803e5792564ff1e773be23bbc5c6626977ca4ba06d11c99a68b88d1527dd52c0ed0358399067e7b71abdcab19ed5a461c2e8d61bb9a2ad", 0x86}, {&(0x7f0000000580)="50041bdcd4cf4ddb3d7bb5f057", 0xd}, {&(0x7f00000005c0)="5f019332935e5ecfcdbd22a406a8753a11e14ed7d0f4d6de60b5c4514c377d46f5d07c6f441c4734279e47040e1dbceaea5a35e2bc0f242cd07fa51e8522a13e277a3ed81f3f0b1a7da4234af4ad2a84b73e9e04770e21c642a9da81bb91c374d47eefc0139011515a1696fbf1993928fef46638d9c5dde86612b9dac9dee2f87d53c647931bdd1393e8e70af25e8ceb5711f2c2f484c33db726c2ee1624c333b1eba25b5555688b6b7d5bbc7ce0443d3e97", 0xb2}], 0x6, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x30}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'ip_vti0\x00', 0x112}) getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x100, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0c00990002000000210000000800c4004fb1db6f0800c300741300"], 0x38}}, 0x880) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400991d", @ANYRES16=r6, @ANYBLOB="0100000000000000000004000000080002000500000008000700ac1e0001"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000040000000000f2ff060000008763f4ff000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba3c}, 0x94) close(r3) 1m39.889360487s ago: executing program 5 (id=4409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='x\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r0}, 0x38) socket$kcm(0x29, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x7f, @private0, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x81, 0xa, 0x0, 0x0, 0xfffffffd, 0x7ff, 0x4]}}, 0x5c) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, 0xa8, 0x3, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000e00), 0x0) recvfrom(r1, 0x0, 0x0, 0x17, 0x0, 0x0) 1m38.970093448s ago: executing program 37 (id=4346): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000e92dd9f501000000", @ANYRES32=0x1, @ANYBLOB='@\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f00000001c0), &(0x7f0000000180)=""/10, 0x2}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f00000007c0)="6e660f76", 0x4, 0x20000000, &(0x7f0000000880)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000001100), &(0x7f0000001180)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) bind$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) write(r5, &(0x7f0000000000)="01", 0x1) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r3, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m38.28378041s ago: executing program 5 (id=4419): bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0700000004000000000900000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a216798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271fefc583eec8912c37562d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de7368ca69f6f8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a113c38159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b2059ba4b923a1188dd61dc7de058a4dfa7e85a8bdf1d41a2d8bd044d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4ae52066bb5d4045c958549b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9530243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e1dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd040000000000000034137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c5d904408996ec5db6a4d15b71ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd000000000072716bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff42961f8f3b555d9e8aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e8173d3d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000000000000000000000000000005519fe545110a9c01d6f0da7b0731b19ae17b64d6eb1a47675aea60371f629ed3446beb20bf2bab80e451b4139dc6c87e6b395edc142e24b596f636f8c248beeb268dbbf120b26693f73a6362e7c6bff6b08514763f6fbe6c914baf7e25ac7e8d36babeb6c58d012cf7b1ffbe996204af87412b9b21da1dfb01aa5a4ff142deb3bd70d11cf71752bdb33f1dfb6ef107ef3cb0016b2b6dcffb0be5a95d56172098ebf6075cc048f94350e2adb108eabccfae942bbca66ea83139ab4062963be6d549907b17d95b248601322cd8cc6540b6e369c7ebd9b98ec00000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES64=r1, @ANYBLOB="010000000281d21e782ee58980ec2d16c96b10ab62008b2c7167a3dca409b2da37d54413715745fd83500429e1cf"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0xdc, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x18, r6, 0x301, 0xf0bd29, 0x25dfdafc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000035000000080003"], 0x44}}, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200"}) recvmsg$unix(r0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf25020000000800090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x20008080) close(0x4) 1m37.182273856s ago: executing program 5 (id=4424): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) sendto$packet(r1, &(0x7f0000000180)="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", 0x1000, 0x40000, &(0x7f0000001180)={0x11, 0xd, r5, 0x1, 0x1, 0x6, @multicast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f00000000c0)={0x1d, r13}, 0x18) connect$can_j1939(r12, &(0x7f0000000140)={0x1d, r13}, 0x18) sendmmsg(r12, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002840)="f55099b901313b89c6", 0x9}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001480)=""/169, 0xa9}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1}}]}}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r8, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r17, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x5, 0xf, 0xa, 0x10, 0x11, 0x3}}]}}]}, 0x148}}, 0x4000010) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800910}, 0xc, &(0x7f0000001480)={&(0x7f00000011c0)={0x290, r7, 0x5, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1b5167d6ba05c5da7b1f74da6f9ea848"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fee55a75ba6f02929e5727e8092ad53b"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1735fc7d571be3fe0c0a02a707f556b8ed83404bf8227318fb10a68b2777aadc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2afc063fada11276ab7fe755e774128778f0f4b803ecfd08410e2cd0d049c601"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5ce98b6f2a2cb3fb38034db04e61cfd8ce6f134f0cde775ca4baec7b2b0e2e2e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7b8000727a0fddae830ea2a4126d3070"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e70eb89f7cd204604984db84a36d725a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ab344ce7af78242b77f9695dce3e615f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5cd7c9cffbdb15a94e9587534c0a359d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fd48cdbadb6a9ab1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "13e55ee5b6f848fe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "940a4de39468fc0a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3de04755618f7240a9efb0b41512fa13"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9b2232f7e65b9cbe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2e1509af92e24ca9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "14e03fbf9d696b8f"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b3cf2c0f090510e0"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1b3d5db7b01c8d1a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5e722e8aaeda369cec939bf407cdaf7d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="34469dc46c5d2cfc64c69d0f3152b7c2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="43e9a1cfb5eb3fba7601a94e551d0f1b"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "aeb918fd5238709c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ab8fdd246ed2a9fcd479911fdca93235d0d9de8f1c7bed5f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="42eb7855d7e2d20188c46f61c65104e719216207046a416bb8ffbc2fd12e1b88"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "100294b2db459de5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "943f2ccfff906eca"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x18e5}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xea}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="41c538f0ee7bb9dbe47149fabee46b4bf56865fb942d516fb3088b23f1cab192"}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000810) 1m28.680341756s ago: executing program 38 (id=4393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r3, 0x800, 0x70bd30, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48884) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0xac, r4, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x85, 0x5b, "00dbaab63c1d728d6a8e15672506000000000000008f4a9f498ca8573c3e9716a176b548949838d8277bcd8e5dc69ef82a2c5242fa39590861c4684ab3b25ab6363762033bb43bc9d41522bf313450011c5d16bd96cc790662756b7c214c270d943ba93c44000b34210dbdf1474bc3159dc6bb75e719797b0840bc55faba394b9c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0xac}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'sit0\x00', 0x0}) r10 = socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001a00)={@local, 0x20}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="340000001400b59527bd7000fddbdf250a3f00fe", @ANYBLOB="080008000806000014000200fe8000000000000000000000000000aafb"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1a0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x810}, 0xd407acd77e336d7c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="8801000041000701feffffff00000000017c0000040042806c01018010000400cab1893a20b8d2a93521800a58011c80530101006ac2da53a678c41355f8188e0813b0eb27a6c1a87d1c3dfc5d8438201f6377875dce685fcc7ed7ccd74a03d64a776d4cfe25324c31c8d4b6fff0f5915ed9cef37cfe63240a01c260dcef0d710621b0507500f7ca4fb8ec7393a5e665401529a30bdc6cd989c62840f8968874bad3867cead8d32063f98459fd95688665c893b8b25b58f8d7d3c9ee01a787c3838ca31b63328d7d0941b38175636e85e589896aadea306c85bafbffd02a2ef8984e8c69cab545c38477eb0fc850d43bd512deccd888e1f53889f9f382f87160ea2653086b5067a18057d3da533302d383735dc7573d12a1de647805ed76f1bd8725f749c6f11de6c446f8e6ff6a20b1b3210a6f2e8dcb48e8290b08feef9b7c003110082f0ac6a74ca6951e810a7fc67349b70463f8272dc7d43ccc535569c53c1b9759a54a72773b685ce1710a7db96e1ef7819c4495275c02395306614c5971c1aa0004000280"], 0x188}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xf44}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) 1m26.627468984s ago: executing program 3 (id=4455): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc020000000000000000000000000001000107144e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000002700)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000600)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xfffffffffffffe36, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$key(r8, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020afc000700000028bdc16bafccdf2505001a0000000000000000000000000000000000ac14bf194c2f815114890000000000000a0049"], 0x38}}, 0x40408c0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 1m26.315860521s ago: executing program 3 (id=4457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8045}, 0x4000000) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000180)={{}, 0x8000000000000000, 0x1ff, 0x261}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80800) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r5, 0x59, 0x4a, &(0x7f0000000200)="8b7db05177d591b32d68a71f07bc52926e979e6bce9f3dbe37bd13c8a4a25074570aeab3d54e6c2dc78f1f89d06d11221cb3d1c9f23f95a76a63938742345272f2578ae18c675f920d6f", 0xf, 0x3, 0x9, 0x9, 0x0, 0x3, 0x8, 'syz1\x00'}) ppoll(&(0x7f0000000340)=[{r2, 0x120}, {r3, 0x2084}, {r2, 0x60c0}, {r2, 0x4}, {r4, 0x1000}], 0x5, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f00000003c0)={[0x8]}, 0x8) r6 = accept4(r4, &(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f0000000480)=0x80, 0x180000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r7, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x20}}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) bind$rds(r6, &(0x7f0000000600)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) connect$pppl2tp(r6, &(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x4, 0x4, 0x1}}, 0x26) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680), r0) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xb0, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040}, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000880)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x0, @private0, 0xfffffffd}}}, 0x32) listen(r8, 0x47) r11 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xa, 0x8, 0x7, 0x1, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, r11, 0x2, 0x0, 0x4}, 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, 0x1410, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008044}, 0x20000080) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r6) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x70, r12, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x13}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x3, 0x3, 0x0, {0x2c, 0x6, 0x0, 0x3, 0x0, 0x1}, 0x1, 0x1, 0x73}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x70}, 0x1, 0x0, 0x0, 0x976093fd17facdf6}, 0x4010) 1m25.939194287s ago: executing program 3 (id=4460): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001300000010010000010000000000000800000000180000000000008b67ac29c99f3ec200aa00000000000000"], 0x30}, 0xfc40) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000004c0)=r7, 0x4) sendmsg$inet(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40400) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000180)=0x100) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) close(0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000102400000008000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000002f00090027bd0c000000000044000000080018000aac0f00"], 0x1c}, 0x1, 0x0, 0x0, 0x4046800}, 0x4000014) 1m25.313750185s ago: executing program 3 (id=4461): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0xfe}, 0x18) 1m25.00354683s ago: executing program 3 (id=4462): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000f21000/0x4000)=nil, 0x4000, 0x300000b, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') socketpair(0x1, 0x20000000000001, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x30000082}, 0x80) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r6, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) connect$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x0, 0x1, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x64040055) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x40000080) 1m24.297348002s ago: executing program 3 (id=4466): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000004000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket(0x1, 0x1, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x7886, 0x7800, 0x8, 0x2, {{0xf, 0x4, 0x2, 0x31, 0x3c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0x6, [{@private=0xa010102, 0x4}]}, @end, @rr={0x7, 0x17, 0x16, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010100, @broadcast]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000006d02dc8477f547aa00000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="8000000014000300020000000000000000000000000000001400010000000000000000000002"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1, 0xffffffff}, 0x28) writev(r4, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="4be6f2ea9dfa48a484c700825ef11448a50952ad318acb278c187f22b6f14ef26df957ae21daa8", 0x27}], 0x2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x7ff, 0x8, 0x0, 0x3ff}, 0x42) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000180010002bbd7000fbdbdf2580a01402fe02fe0b00200000240016802000010000000000000002000000000000050c0000000300000000000000000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x24004040}, 0x8804) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010d42fae3c1"], 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffd35, &(0x7f00000003c0)}, 0xfffffffffffffd25) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1m22.018313911s ago: executing program 39 (id=4424): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) sendto$packet(r1, &(0x7f0000000180)="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", 0x1000, 0x40000, &(0x7f0000001180)={0x11, 0xd, r5, 0x1, 0x1, 0x6, @multicast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f00000000c0)={0x1d, r13}, 0x18) connect$can_j1939(r12, &(0x7f0000000140)={0x1d, r13}, 0x18) sendmmsg(r12, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002840)="f55099b901313b89c6", 0x9}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001480)=""/169, 0xa9}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1}}]}}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r8, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r17, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x5, 0xf, 0xa, 0x10, 0x11, 0x3}}]}}]}, 0x148}}, 0x4000010) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800910}, 0xc, &(0x7f0000001480)={&(0x7f00000011c0)={0x290, r7, 0x5, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1b5167d6ba05c5da7b1f74da6f9ea848"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fee55a75ba6f02929e5727e8092ad53b"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1735fc7d571be3fe0c0a02a707f556b8ed83404bf8227318fb10a68b2777aadc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2afc063fada11276ab7fe755e774128778f0f4b803ecfd08410e2cd0d049c601"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5ce98b6f2a2cb3fb38034db04e61cfd8ce6f134f0cde775ca4baec7b2b0e2e2e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7b8000727a0fddae830ea2a4126d3070"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e70eb89f7cd204604984db84a36d725a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ab344ce7af78242b77f9695dce3e615f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5cd7c9cffbdb15a94e9587534c0a359d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fd48cdbadb6a9ab1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "13e55ee5b6f848fe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "940a4de39468fc0a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3de04755618f7240a9efb0b41512fa13"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9b2232f7e65b9cbe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2e1509af92e24ca9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "14e03fbf9d696b8f"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b3cf2c0f090510e0"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1b3d5db7b01c8d1a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5e722e8aaeda369cec939bf407cdaf7d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="34469dc46c5d2cfc64c69d0f3152b7c2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="43e9a1cfb5eb3fba7601a94e551d0f1b"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "aeb918fd5238709c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ab8fdd246ed2a9fcd479911fdca93235d0d9de8f1c7bed5f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="42eb7855d7e2d20188c46f61c65104e719216207046a416bb8ffbc2fd12e1b88"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "100294b2db459de5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "943f2ccfff906eca"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x18e5}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xea}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="41c538f0ee7bb9dbe47149fabee46b4bf56865fb942d516fb3088b23f1cab192"}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000810) 1m9.167250382s ago: executing program 40 (id=4466): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000004000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket(0x1, 0x1, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x7886, 0x7800, 0x8, 0x2, {{0xf, 0x4, 0x2, 0x31, 0x3c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0x6, [{@private=0xa010102, 0x4}]}, @end, @rr={0x7, 0x17, 0x16, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010100, @broadcast]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000006d02dc8477f547aa00000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="8000000014000300020000000000000000000000000000001400010000000000000000000002"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1, 0xffffffff}, 0x28) writev(r4, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="4be6f2ea9dfa48a484c700825ef11448a50952ad318acb278c187f22b6f14ef26df957ae21daa8", 0x27}], 0x2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x7ff, 0x8, 0x0, 0x3ff}, 0x42) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000180010002bbd7000fbdbdf2580a01402fe02fe0b00200000240016802000010000000000000002000000000000050c0000000300000000000000000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x24004040}, 0x8804) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010d42fae3c1"], 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffd35, &(0x7f00000003c0)}, 0xfffffffffffffd25) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 59.97420587s ago: executing program 2 (id=4555): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x4) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000070000823b3b670200090008000000010000000000000003000600000000000200000000000000000000000000000002000100000000000000050000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044004}, 0x4000004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x800000, 0x6, {{0x5, 0x4, 0x0, 0x19, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x182b}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000000f96a002600010008000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) close(0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x50080}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) 59.324327859s ago: executing program 2 (id=4557): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000f21000/0x4000)=nil, 0x4000, 0x300000b, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') socketpair(0x1, 0x20000000000001, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x30000082}, 0x80) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r6, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x64040055) r8 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r8, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x40000080) 57.806443899s ago: executing program 2 (id=4562): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000640)=0x10) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) unshare(0x8040480) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xf4}}, 0x40814) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 56.852951802s ago: executing program 2 (id=4565): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x201, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x36}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="080077aa", @ANYRES32=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x4c000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r4, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140)="8ce2ad4d4f95e087a7846d3f81304bd1958570440101080a0c6614c63c282429", 0x20, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) 54.268142554s ago: executing program 2 (id=4577): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000670000000800", @ANYRES32=r2, @ANYBLOB="0c00990002000000210000000800c4004fb1db6f0800c3007413"], 0x38}}, 0x880) 53.708632885s ago: executing program 2 (id=4581): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0x2040) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000004100050101eaffffffffffff02010000000000001c0001000600060086dd0000100007007f0000017f0000013adb"], 0x48}, 0x1, 0x0, 0x0, 0x4048841}, 0xc810) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r3, 0x1) r4 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2684c3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x10}}, 0x44090) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f0000000800010001000000e25578e32fa9381b73ddfa471714a86098a6837b25612717d7646d4a150d8afbbee72e4a53c178a3c50e16b7980adc8f8a02adfdee9de1d5a7fe20bc4f22f2ed3b1ab711a42248fb29de4516"], 0x1c}}, 0x4000080) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x100}}}, 0x88) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="14010000200001030000000000000000010100800c0001000700000000000000f400a489160a1150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d08000000", @ANYRES32=0x0, @ANYBLOB="000000c26cab557da55638dab4a31d4bcef68a4e5567dbd91fbc45e1910addbc93d55b0b12f22fc09b65dfa4597cad141a939f02105e3b872d45852a84ac8417cd704c14b17a6a8e20d4ff74ddae7449f29902002d718e489d525cde52cb7aab7b1b2238267d232d07209059c06dbd93ccfee961f7f2d7e87033870951c7b6a565d4149c73a2aa6adc24a6b3db140aa312e6f40e14e0dcee8ca05e56f5e2fd05dd3c0178248b6c2b2152fdbbcb1a48457b1aeec33fbc7ae2e81bcf8c6083023d2888b8c6c9d1e724341278b8a4062a947163cd939adfe7237e1ee7be3ecefaa5148e7085c26e5e85de8fce88be33de"], 0x114}], 0x1}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="00008000", @ANYRES16=0x0, @ANYBLOB="090325bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) 38.574047709s ago: executing program 41 (id=4581): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0x2040) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000004100050101eaffffffffffff02010000000000001c0001000600060086dd0000100007007f0000017f0000013adb"], 0x48}, 0x1, 0x0, 0x0, 0x4048841}, 0xc810) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r3, 0x1) r4 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2684c3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x10}}, 0x44090) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f0000000800010001000000e25578e32fa9381b73ddfa471714a86098a6837b25612717d7646d4a150d8afbbee72e4a53c178a3c50e16b7980adc8f8a02adfdee9de1d5a7fe20bc4f22f2ed3b1ab711a42248fb29de4516"], 0x1c}}, 0x4000080) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x100}}}, 0x88) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000c26cab557da55638dab4a31d4bcef68a4e5567dbd91fbc45e1910addbc93d55b0b12f22fc09b65dfa4597cad141a939f02105e3b872d45852a84ac8417cd704c14b17a6a8e20d4ff74ddae7449f29902002d718e489d525cde52cb7aab7b1b2238267d232d07209059c06dbd93ccfee961f7f2d7e87033870951c7b6a565d4149c73a2aa6adc24a6b3db140aa312e6f40e14e0dcee8ca05e56f5e2fd05dd3c0178248b6c2b2152fdbbcb1a48457b1aeec33fbc7ae2e81bcf8c6083023d2888b8c6c9d1e724341278b8a4062a947163cd939adfe7237e1ee7be3ecefaa5148e7085c26e5e85de8fce88be33de"], 0x114}], 0x1}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="00008000", @ANYRES16=0x0, @ANYBLOB="090325bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) 21.604302027s ago: executing program 0 (id=4734): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f5af24bd7000000000", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x80010, r7, 0x1000) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000040)={0x80, 0xde}, 0x2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r9, &(0x7f00000002c0), 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2b, 0x0, {0x35}}, 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYRES8=r9, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="ff02000000000e0000000000000000030000000000000000ac1414bb00000000200000000000000000000000000000000900000000132d0be6b2d6b2029fd0bae2b460c4000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff020000000000007cf80000000000000000000000e8d2fff88d0e0385b46bca000000001f00000000000000ff0100000000000002000000fcffffff400002002abd70df033500000a0001fd2000", @ANYRESDEC=r4, @ANYRES16=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRESHEX=r5, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff000000000b000000ffffffffffffffff00000000000000000900000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c61746500"/225], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB], 0x4c}}, 0x4845) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000608c7f9c978c66c2697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200000000000000000000000000002e6d320a5231aa8d7492eb9c2f0e8249c6577f012dcc961e5d30a57a47c80dbfa154422f1572ef0077afd160f8e2f7937d293c4dc2fa1f961dfc190fc5a8d9c0002103d10e91602d3556a4ff590450ab91887e301adbd195528b32e5e7906a7278a57861f074ad9343a0bd86f8fd036267b918d6b50cfc1fb867d7f58fce78efc34a53125761cf3a2023ff5e14c297d5c334482cd84dc53f5b673e21c27a568dcd063331bf85b000000000"], 0x5c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r12) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c00018008000100060000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010200000000000000001c8e003d43177dc69c0000fc0700"], 0x24}}, 0x0) 21.140237493s ago: executing program 0 (id=4746): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 20.445635708s ago: executing program 0 (id=4739): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008010) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000080)="838e770ceeeb2f8d8c280c91c8546166431baeb6ce1aa53179476da5b45f8accc682e13a92559b31c10c858526db2ac58255cd6e431c459b6a83b84e7446975365c5241d731a510a77b58c4ec0cf293c2dccf1e319eee67fb71faae9153c01f6e5d4d5eebce7412a2c046f7515951dd2b73043615a0c6f3bb2a01c22c87a4eeeedb8cbaf4d1f89c8e4900345c16240fc860d70ef03e60e20a8954e825ced628d3e1c3367331b34646a295255c106605cb5548ad67854fa2d02ef6a61c55861f2564c5e40a961719d3c526d10b8a949bc12fab57dd4", 0xd5}, {&(0x7f0000000180)="97827f83445f51b2e4239f5ae4b874cef30770de9e2d136cbcea70bfde1950448e59e044ab3ac27fb272f987bcfb5c0cbc7bf8d682784cd673168fafd13291e98b619049acb9b891997e4f581c05ed44a923ee40610e36d084819e7429", 0x5d}, {&(0x7f0000000340)="058a2fd56987917f521c7852ac47d7fc13b4f6a14b820ec8d8e5f8878f962f9dbad0a02269e45c516312cc4d125c9bdf70ac0c8e798b720e85ac24c42299ef91501e3be7be109864d53e0a81c8b5999723865a0744ea16f0cc39af4a61558adda5459e8ea6909055b2238f8653912a2e2ce7df9add6ad0f07b5d7a9604cba37700cf06b11654e616c0adc3af7aaea795c69a46a9dde192ec52d6d482b55e95aed4da7ea8d9811e16d905aa4475969609b6f5b23463b46abd4d535da73f7013c66ebdce0af0fe6041711b21e42ed0f177ce78", 0xd2}, {&(0x7f00000004c0)="74bb6c7b89358087e01674da826334cad6d6ed55758929f3fa7a7042704064eb04419e4ebb3f0bbee2f79aeb77b63a78fec0704bbc022aecfa08261603b3a1a902ee1a4d62408acd23e2494057f81e803e5792564ff1e773be23bbc5c6626977ca4ba06d11c99a68b88d1527dd52c0ed0358399067e7b71abdcab19ed5a461c2e8d61bb9a2ad", 0x86}, {&(0x7f0000000580)="50041bdcd4cf4ddb3d7bb5f057", 0xd}, {&(0x7f00000005c0)="5f019332935e5ecfcdbd22a406a8753a11e14ed7d0f4d6de60b5c4514c377d46f5d07c6f441c4734279e47040e1dbceaea5a35e2bc0f242cd07fa51e8522a13e277a3ed81f3f0b1a7da4234af4ad2a84b73e9e04770e21c642a9da81bb91c374d47eefc0139011515a1696fbf1993928fef46638d9c5dde86612b9dac9dee2f87d53c647931bdd1393e8e70af25e8ceb5711f2c2f484c33db726c2ee1624c333b1eba25b5555688b6b7d5bbc7ce0443d3e97", 0xb2}], 0x6, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x30}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'ip_vti0\x00', 0x112}) getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x100, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0c00990002000000210000000800c4004fb1db6f0800c300741300"], 0x38}}, 0x880) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400991d", @ANYRES16=r6, @ANYBLOB="0100000000000000000004000000080002000500000008000700ac1e0001"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000040000000000f2ff060000008763f4ff000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba3c}, 0x94) close(r3) 19.664531876s ago: executing program 0 (id=4744): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="6797f04cdb6f2b8ff1c912acb0da67dc3bf442976fc916f5fe40c3a4bb8423c058dd95ffbb65d4a51d4b99564d9d6466da7ab0bd17e9281956c6ba7e10b7932de5be24106e3afc007cdf7620e0c61175af571e506a21f16330", 0x59}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @mcast2, 0xb}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x17}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x1b, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="080100001900010000000000612afd6f00000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x20000040) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000390400000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="11980400419804001c001280da0c01007866726d000000000c0002800800020004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9b, 0x9b, 0x2, [@datasec={0x5, 0x5, 0x0, 0xf, 0x2, [{0x2, 0xfff, 0x7}, {0x5, 0x3, 0xa}, {0x4, 0xe1c, 0x1}, {0x4, 0x0, 0x8000}, {0x5, 0x20000000, 0x10000}], "b9b6"}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x3}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x1a}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @datasec={0xf, 0x2, 0x0, 0xf, 0x1, [{0x1, 0xd593, 0xfef}, {0x3, 0x2, 0x10}], '9'}]}}, &(0x7f0000000540)=""/51, 0xb6, 0x33, 0x7f, 0x6, 0x10000, @value=r6}, 0x28) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x20017}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="82", 0x1}], 0x1}, 0x4) 18.463320666s ago: executing program 0 (id=4760): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000070400000000fedbdf25000736e8", @ANYRES32=0x0, @ANYBLOB="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"], 0x58}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94) socket$packet(0x11, 0x2, 0x300) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x88d0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) connect$vsock_stream(r6, &(0x7f0000000f80)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc0e6965b97eb3ae856ae46970af212e96975a6c7600773de3f1e44fc39682e8f12308770d116898742fbeb010102a3629d83bf41a8b24", @ANYRES16=r7, @ANYBLOB="000427bd7000fcdbdf251900000008000300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40805}, 0x84) connect$inet6(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x2}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3b000000200000000022a723bfb70bb2addaaaacaea4891a01fe1624930e9a6a0dfda2f3e70d", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r8, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 17.596738537s ago: executing program 0 (id=4754): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0x2040) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000004100050101eaffffffffffff02010000000000001c0001000600060086dd0000100007007f0000017f0000013adb"], 0x48}, 0x1, 0x0, 0x0, 0x4048841}, 0xc810) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r3, 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x44090) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f0000000800010001000000e25578e32fa9381b73ddfa471714a86098a6837b25612717d7646d4a150d8afbbee72e4a53c178a3c50e16b7980adc8f8a02adfdee9de1d5a7fe20bc4f22f2ed3b1ab711a42248fb29de4516"], 0x1c}}, 0x4000080) r9 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x100}}}, 0x88) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000c26cab557da55638dab4a31d4bcef68a4e5567dbd91fbc45e1910addbc93d55b0b12f22fc09b65dfa4597cad141a939f02105e3b872d45852a84ac8417cd704c14b17a6a8e20d4ff74ddae7449f29902002d718e489d525cde52cb7aab7b1b2238267d232d07209059c06dbd93ccfee961f7f2d7e87033870951c7b6a565d4149c73a2aa6adc24a6b3db140aa312e6f40e14e0dcee8ca05e56f5e2fd05dd3c0178248b6c2b2152fdbbcb1a48457b1aeec33fbc7ae2e81bcf8c6083023d2888b8c6c9d1e724341278b8a4062a947163cd939adfe7237e1ee7be3ecefaa5148e7085c26e5e85de8fce88be33de66e5a2bf5938b0"], 0x114}], 0x1}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x14, 0x0, 0x309, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x278, 0x2c, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r11, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x248, 0x2, [@TCA_BASIC_ACT={0x244, 0x3, [@m_nat={0x240, 0xe, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x1, 0x5, 0x66c}, @broadcast, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x100, 0xd, 0x8}, @private=0xa010100, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x10c8, 0x5, 0x3, 0x7fffffff}, @broadcast, @private=0xa010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x79fb, 0x2, 0x4, 0x7972, 0x800}, @empty, @dev={0xac, 0x14, 0x14, 0x1f}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x8, 0xffffffffefffffff, 0x2, 0x80}, @broadcast, @private=0xa010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0xffffffffffffffff, 0x3, 0xfffffff8}, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xecf, 0x0, 0x0, 0xda0}, @multicast1, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x60, 0x7, 0x10000000, 0xffffffc0, 0x101}, @loopback, @rand_addr=0x64010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x10000000, 0x5, 0x9}, @broadcast, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x3, 0x0, 0x0, 0x8}, @remote, @remote, 0xffffff00}}]}, {0x85, 0x6, "126a7bbda4d87fab6dc634a0212fdc78330ead0cd2bab2d1f7430cc9d86ac36808429b9f5bfaf851b11de089cfb8f45216ce7a7c258424f7e316cb80f12e9563551c12223bd943cdfbb82f29d6dc04ef35c1981e773f489d00f96782e144afc8b77a0893244e1618994b0936583c86719f86b273748d3c85c7ef910d435d3bf53a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x278}}, 0x0) write$tun(r5, &(0x7f0000000400)=ANY=[], 0xdf41) 5.526283624s ago: executing program 9 (id=4817): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r2, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000240)={0x80}) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r6, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf21, 0x2d}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7f}, @NL80211_ATTR_IE={0x42, 0x2a, [@preq={0x82, 0x25, {{0x1, 0x0, 0x1}, 0x9, 0x7a, 0xfac5, @device_a, 0x7, @void, 0xfff, 0x8001, 0x1, [{{0x1}, @broadcast, 0xfffffffe}]}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x1, 0x3, @device_b, 0x2, 0x8, 0x10001}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x73}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) bind(r3, &(0x7f0000000300)=@generic={0xb, "0000000000000100000000000000000000000000000000000000000000000000000000000000ed0000000200000000000000000700000000000004000000000000000000000000000000000000000000000000002a0000000000000000000000000000000000000000000000000000001000"}, 0x80) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000080)) listen(r3, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300), &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x28, &(0x7f0000000640), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000640), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8001}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x30}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000280)="12000000110000001400800000ff7f0000000000000100", 0x17) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x38, 0x26, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x8, 0x3}, {0xfff3, 0xb368d1d130ca9442}, {0x4, 0x4}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) 5.385151453s ago: executing program 4 (id=4818): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008010) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 5.299343884s ago: executing program 4 (id=4819): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x7fff}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24008000}, 0x48000) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r7, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0xdc, r7, 0x1, 0x72bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x0, 0x3, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4409b}, 0x110) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4200000021200000300012800c0001006d6163766c616e0020000280080001001000000008000300010000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r13, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x51, 0x3, 0x7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}]}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x18c, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r13}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x7, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1df}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x14) getsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f00000044c0)) 5.295868638s ago: executing program 1 (id=4820): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x20000010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x23, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYRES16], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x24}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r3) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1b, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800ffff8500001a0f000000181100"/28, @ANYRES32, @ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r10, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 5.259231258s ago: executing program 7 (id=4821): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a", 0x5}], 0x1}}], 0x1, 0x4000041) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0xfe}, 0x18) 5.064475928s ago: executing program 7 (id=4822): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x1020) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) sendfile(r2, r3, 0x0, 0xffffffff000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.122494016s ago: executing program 9 (id=4823): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x6a040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(0x0, r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB="eb4d9d5ff594e2687f4c1ca901eb72e286916bb898fe86217b528e51dca2aa6c4947e5beeff7b31fb7a767366cf68c73cbbf25e4195743d6f41bdca840d835599a1fd8031076d97fbbf3675cf385ba886bce"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000001000000000000000000000085100000f8ffffff9535ead33b90cb11ec4477b1a2b2d2000000ff0f0000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x3}, 0x1c) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x8000}}}, 0x108) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r5) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x7f8fd8ce9467eae8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) accept4(r4, 0x0, 0x0, 0x80000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00'}) 3.963356167s ago: executing program 1 (id=4824): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0xc0}, 0x40000002) socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 3.953504482s ago: executing program 4 (id=4826): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000240007012effffffffdbdf25057c00000c0001800800020008000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="b705428008001d00", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="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"], 0x96c}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x1, 0x81, {{0xb, 0x4, 0x0, 0xf, 0x2c, 0x64, 0x0, 0x3, 0x29, 0x0, @private=0xa010102, @broadcast, {[@end, @noop, @end, @timestamp_prespec={0x44, 0x14, 0xf7, 0x3, 0x3, [{@rand_addr=0x64010101, 0xc75}, {@local, 0xd5f3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r6, 0x29, 0xc, 0x7, 0xbd, 0x22, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1, 0x47, 0x0, 0x5}}) epoll_create(0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x40, 0x5, 0x51, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x700, 0x8, 0x1}}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, 0x0, 0x0) write(r8, &(0x7f0000000000)="2e0000000100", 0x6) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900)=r9, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.878012833s ago: executing program 7 (id=4827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0xc004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x1d8, 0x43, 0xa0, 0x1d8, 0x98, 0x2d8, 0x178, 0x178, 0x2d8, 0x178, 0x49, 0x0, {[{{@ip={@empty, @local, 0x0, 0xff000000, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffc, 0x0, 0x5, 'snmp\x00', {0x7}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@mac={{0x20}, {@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x1}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x0, 0x2, 0x1, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3d0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r6, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000829a07125e5e211e571bd7000fedbdf2504001f0008000300040000006cfa6f7967bc5238080004000600000008000400d000000005000500f8000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r8, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$netlink(0x10, 0x3, 0xc) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400195a8563e43c12f461560a8447600000000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed5e0000000000000059", 0x49}], 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 3.300609517s ago: executing program 4 (id=4828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x13c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) unshare(0xa020480) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a30020000060a010400000000000000000200000118000480140001800e000100627974656f726465720000000900010073797a30000000000900020073797a32000000000800074082593c65240104803c0001800a0001007265646972"], 0x258}}, 0x0) r3 = gettid() r4 = syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) close(r4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socketpair$tipc(0x1e, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000006e0002000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000006a00000428bd7000fadbdf250a00000000000000080005", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getqdisc={0x40, 0x26, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xb}, {0xffff}, {0x0, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, 0x0, &(0x7f0000000280)=r1}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r9, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 3.043698115s ago: executing program 9 (id=4829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000040000001000000000000000", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000700)="00112233445566778899aabb0800", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x467}, &(0x7f0000000100)=0x8) r6 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r6, 0x0, 0x101f1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={r5}, &(0x7f0000000200)=0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000005010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff000000007ba100000000000007010000f8ffffffb702000005000000b703000009000080850000007100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r11}) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000080)={r11}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r12, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="730000f99db466b1d506a23fbbd6942fb501", @ANYRES16=r9, @ANYBLOB="3f9d00000000fedbdf251800000008000300", @ANYRES32=r14, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001800800"], 0x64}}, 0x0) 2.863933344s ago: executing program 1 (id=4830): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff00000003", 0x47}], 0x1) 2.837015436s ago: executing program 4 (id=4831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000079000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x31}, 0x94) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r6, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="00032abd7000fcdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x8004}, 0x144) r7 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x12, "6b132c40435fa71d88fa70efa856c48a7658"}, &(0x7f0000000100)=0x1a) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xc, r10, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000600)={r5, &(0x7f0000000440)='syzkaller\x00', 0x410000, &(0x7f0000000480)={@align=0xc0, {0x3, 0xffff, 0x80, 0x4}}, 0x7fffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0x1, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x14}], &(0x7f00000003c0)='GPL\x00', 0xc510, 0x0, 0x0, 0x1e00, 0x44, '\x00', r10, @fallback=0x1d, r11, 0x8, &(0x7f0000000840)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x3, 0xbc, 0x1}, 0x10, 0xffffffffffffffff, r2}, 0x94) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x5c, 0x2, 0x18, 0x4}, {0x6}]}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000001c0)={r8, 0x9, 0x400, 0x4}, 0x10) r13 = socket$rds(0x15, 0x5, 0x0) bind$rds(r13, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r13, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)=""/188, 0x1001}], 0x1}, 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r14, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r14, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000000340)={r15}, &(0x7f0000000380)=0x8) 2.808006085s ago: executing program 1 (id=4832): r0 = socket(0x2b, 0x1804, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{0x0}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x24}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff038}, {0x20, 0x81, 0x0, 0x6e0f}, {0x6, 0x0, 0xff, 0x2000000}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x10, 0x8000, 0xffffffff, 0xc, {{0xc, 0x4, 0x0, 0x10, 0x30, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}, @timestamp={0x44, 0x14, 0x9e, 0x0, 0x7, [0x1, 0x1, 0x3, 0x401]}]}}}}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.593915882s ago: executing program 7 (id=4833): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00010001"], 0x20}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r2, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d7fb7c27a1059ae31c6", 0xd8}, {0x0}], 0x2, 0x0, 0x0, 0x7400}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r6 = socket(0x14, 0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r7) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r10, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030029bd70000e0000", @ANYRES32=r10, @ANYBLOB="08000200c3"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xb, 0x0, 0x4}, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x511}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa68}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe87}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x44}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4004040) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x14112}, [@IFLA_NET_NS_FD={0x8, 0x1c, r12}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.422482509s ago: executing program 42 (id=4754): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000004100010029bd700004000000010000b1000047800c00018008001080040004800800020068baa70e2f80be52dd68ef01b0422aebb60e7d7b59a0d0eccdbc71791fdc212278151d627f0beda23fd3d7429b2988db8ce22b6287891f9cf3e72f818fc53a6c4eea6e4685c1fa47d3c7b9670ada5d6a24d03640083411f8e873ee505e4b31cf72df31cc41573a63a8e92e3a9dfa4ad61f063a334da970033eded178f8ed3968f65af8cd2a449c3e42ac36cfdaa81a37c8c12e4d564d9e95dea3bd75ef44267e1847b7bf1cfd0b1799d8869edcfaf6c0788ac7fafffffffffffffff964ca466a466a235722c3c939d551f202885cfb7dab3fde4ab81f04df0795", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0x2040) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000004100050101eaffffffffffff02010000000000001c0001000600060086dd0000100007007f0000017f0000013adb"], 0x48}, 0x1, 0x0, 0x0, 0x4048841}, 0xc810) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r3, 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x44090) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f0000000800010001000000e25578e32fa9381b73ddfa471714a86098a6837b25612717d7646d4a150d8afbbee72e4a53c178a3c50e16b7980adc8f8a02adfdee9de1d5a7fe20bc4f22f2ed3b1ab711a42248fb29de4516"], 0x1c}}, 0x4000080) r9 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x100}}}, 0x88) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="14010000200001030000000000000000010100800c0001000700000000000000f400a489160a1150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d08000000", @ANYRES32=0x0, @ANYBLOB="000000c26cab557da55638dab4a31d4bcef68a4e5567dbd91fbc45e1910addbc93d55b0b12f22fc09b65dfa4597cad141a939f02105e3b872d45852a84ac8417cd704c14b17a6a8e20d4ff74ddae7449f29902002d718e489d525cde52cb7aab7b1b2238267d232d07209059c06dbd93ccfee961f7f2d7e87033870951c7b6a565d4149c73a2aa6adc24a6b3db140aa312e6f40e14e0dcee8ca05e56f5e2fd05dd3c0178248b6c2b2152fdbbcb1a48457b1aeec33fbc7ae2e81bcf8c6083023d2888b8c6c9d1e724341278b8a4062a947163cd939adfe7237e1ee7be3ecefaa5148e7085c26e5e85de8fce88be33de66e5a2bf5938b0"], 0x114}], 0x1}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x14, 0x0, 0x309, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x278, 0x2c, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r11, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x248, 0x2, [@TCA_BASIC_ACT={0x244, 0x3, [@m_nat={0x240, 0xe, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x1, 0x5, 0x66c}, @broadcast, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x100, 0xd, 0x8}, @private=0xa010100, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x10c8, 0x5, 0x3, 0x7fffffff}, @broadcast, @private=0xa010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x79fb, 0x2, 0x4, 0x7972, 0x800}, @empty, @dev={0xac, 0x14, 0x14, 0x1f}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x8, 0xffffffffefffffff, 0x2, 0x80}, @broadcast, @private=0xa010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0xffffffffffffffff, 0x3, 0xfffffff8}, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xecf, 0x0, 0x0, 0xda0}, @multicast1, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x60, 0x7, 0x10000000, 0xffffffc0, 0x101}, @loopback, @rand_addr=0x64010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x10000000, 0x5, 0x9}, @broadcast, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x3, 0x0, 0x0, 0x8}, @remote, @remote, 0xffffff00}}]}, {0x85, 0x6, "126a7bbda4d87fab6dc634a0212fdc78330ead0cd2bab2d1f7430cc9d86ac36808429b9f5bfaf851b11de089cfb8f45216ce7a7c258424f7e316cb80f12e9563551c12223bd943cdfbb82f29d6dc04ef35c1981e773f489d00f96782e144afc8b77a0893244e1618994b0936583c86719f86b273748d3c85c7ef910d435d3bf53a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x278}}, 0x0) write$tun(r5, &(0x7f0000000400)=ANY=[], 0xdf41) 2.385106098s ago: executing program 4 (id=4835): unshare(0x68040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x18, 0x107, 0x70bd25, 0x0, {0xf, 0x7c, 0x3f}, [@typed={0xc, 0xb8, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40811}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @multicast1}, {0x2, 0x20, @empty}, 0x363, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="6797f04cdb6f2b8ff1c912acb0da67dc3bf442976fc916f5fe40c3a4bb8423c058dd95ffbb65d4a51d4b99564d9d6466da7ab0bd17e9281956c6ba7e10b7932de5be24106e3afc007cdf7620e0c61175af571e506a21f16330", 0x59}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @mcast2, 0xb}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004054}, 0x44886) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="080100001900010000000000612afd6f00000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=r3, @ANYRES32=r3], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x20000040) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) 2.272321103s ago: executing program 9 (id=4836): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x7fff}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24008000}, 0x48000) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r7, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0xdc, r7, 0x1, 0x72bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x0, 0x3, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4409b}, 0x110) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="842bf08610005edeb5f77000fbdbdf250000000067a8a2ebcc002e5d06e858fd63e481f52b05f1a498768477b960d06933044ff61615a25d573e17bc53c647cb0ead9e9fa2dd3db79999be03930d2c9849d4f69de88e9e5151e7debb1c1e2cd07323ac0c84bc0e82ec4e05e964515044b22419f1cb5fea46977bb06f621f7a3f111badfd36374c19664c6da3977d48b0675ed0f933f513d0a49c0c7050ec3b835d5495d026c2baad5e2f704d3cefe665b9cc91f6beb64d7be4ec48ca6168452b942c7e51fe1e41f044876204cf0a3886fe22491c569131ea4bce401f50190204fea60b255ee7043c16f98178c93119131363d1baedbd9ffde51f4f5f1bcd11ff2d37fb7f6588c73c7d40b22e", @ANYRES32=0x0, @ANYBLOB="4200000021200000300012800c0001006d6163766c616e0020000280080001001000000008000300010000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r13, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x51, 0x3, 0x7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}]}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x18c, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r13}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x7, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1df}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x14) getsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f00000044c0)) 2.271813214s ago: executing program 1 (id=4837): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x1020) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$kcm(0x29, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.412654711s ago: executing program 9 (id=4838): socket$xdp(0x2c, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) listen(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg(r5, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="0e5a255dfa124aa73cdf18df1e", 0xd}], 0x1}}], 0x1, 0x40015) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, 0x0, 0x0) pipe(&(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x1, 0x0, 0x8000000000, 0x7fffffff}, 0x0, 0x0) 1.316151099s ago: executing program 7 (id=4839): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0xc0}, 0x40000002) socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 8.667468ms ago: executing program 9 (id=4840): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="6797f04cdb6f2b8ff1c912acb0da67dc3bf442976fc916f5fe40c3a4bb8423c058dd95ffbb65d4a51d4b99564d9d6466da7ab0bd17e9281956c6ba7e10b7932de5be24106e3afc007cdf7620e0c61175af571e506a21f16330", 0x59}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @mcast2, 0xb}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x17}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x1b, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="080100001900010000000000612afd6f00000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x20000040) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000390400000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="11980400419804001c001280da0c01007866726d000000000c0002800800020004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9b, 0x9b, 0x2, [@datasec={0x5, 0x5, 0x0, 0xf, 0x2, [{0x2, 0xfff, 0x7}, {0x5, 0x3, 0xa}, {0x4, 0xe1c, 0x1}, {0x4, 0x0, 0x8000}, {0x5, 0x20000000, 0x10000}], "b9b6"}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x3}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x1a}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @datasec={0xf, 0x2, 0x0, 0xf, 0x1, [{0x1, 0xd593, 0xfef}, {0x3, 0x2, 0x10}], '9'}]}}, &(0x7f0000000540)=""/51, 0xb6, 0x33, 0x7f, 0x6, 0x10000, @value=r6}, 0x28) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x20017}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="82", 0x1}], 0x1}, 0x4) 8.224627ms ago: executing program 1 (id=4841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x13c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) unshare(0xa020480) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a30020000060a010400000000000000000200000118000480140001800e000100627974656f726465720000000900010073797a30000000000900020073797a32000000000800074082593c65240104803c0001800a0001007265646972"], 0x258}}, 0x0) r3 = gettid() r4 = syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) close(r4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socketpair$tipc(0x1e, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000006e0002000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000006a00000428bd7000fadbdf250a00000000000000080005", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getqdisc={0x40, 0x26, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xb}, {0xffff}, {0x0, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, 0x0, &(0x7f0000000280)=r1}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r9, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 0s ago: executing program 7 (id=4849): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, r4, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @remote}, {0x20000010304, @local}, 0x2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x1}]}, {0x0, [0x2e, 0x5f, 0x0, 0x61, 0x5f, 0x5f, 0x5f, 0x0, 0x5f]}}, &(0x7f00000002c0)=""/126, 0x2f, 0x7e, 0x0, 0x1, 0x10000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe81) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) sendmmsg$inet(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e932057", 0x17e}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r6, &(0x7f0000000940)=[{&(0x7f0000000180)="228b0a3652", 0x5}, {&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b3835e48fad535", 0x5c}], 0x2) kernel console output (not intermixed with test programs): de [ 534.833662][T20056] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.833837][T20056] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.833985][T20056] bridge_slave_1: entered allmulticast mode [ 534.835924][T20056] bridge_slave_1: entered promiscuous mode [ 534.901997][T20056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.905184][T20056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.954959][T20056] team0: Port device team_slave_0 added [ 534.957827][T20056] team0: Port device team_slave_1 added [ 534.998946][T20056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.998964][T20056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.998987][T20056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.047613][T20056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.047630][T20056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.047655][T20056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.134143][T20056] hsr_slave_0: entered promiscuous mode [ 535.135121][T20056] hsr_slave_1: entered promiscuous mode [ 535.135825][T20056] debugfs: 'hsr0' already exists in 'hsr' [ 535.135845][T20056] Cannot create hsr debugfs directory [ 535.384505][T20056] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 535.389714][T20056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.404813][T20056] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 535.408238][T20056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.425553][T20056] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 535.429089][T20056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 535.430000][T20056] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 535.455220][T20056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.480904][T20056] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.481020][T20056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.481184][T20056] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.481246][T20056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.558804][T20056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.578237][T16689] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.578741][T16689] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.602338][T20056] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.607191][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.607278][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.635681][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.635770][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.660627][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 535.660757][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 536.007223][T20056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.072817][ T5619] Bluetooth: hci5: command tx timeout [ 536.154546][T20125] 8021q: adding VLAN 0 to HW filter on device bond13 [ 536.188959][ T5722] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 536.269361][T20056] veth0_vlan: entered promiscuous mode [ 536.284401][T20056] veth1_vlan: entered promiscuous mode [ 536.319059][T20056] veth0_macvtap: entered promiscuous mode [ 536.328009][T20056] veth1_macvtap: entered promiscuous mode [ 536.347515][T20056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.361807][T20056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.421311][T16689] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.422874][T13938] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.422909][T13938] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.422936][T13938] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.476126][ T5743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 536.527529][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.527550][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.568464][T16689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.568486][T16689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.661521][T20131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4196'. [ 536.700717][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 536.700842][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 536.734245][T20133] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4202'. [ 536.737198][T20133] netlink: 296 bytes leftover after parsing attributes in process `syz.3.4202'. [ 536.826652][T20135] IPVS: Error connecting to the multicast addr [ 536.923528][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4203'. [ 537.225623][T20149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4206'. [ 537.528753][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069ea6c00: rx timeout, send abort [ 537.741032][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 537.741123][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 537.768054][T20154] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4208'. [ 537.806017][T20154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4208'. [ 537.901296][ T5615] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 538.028942][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069ea6800: rx timeout, send abort [ 538.031590][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069ea6c00: abort rx timeout. Force session deactivation [ 538.151526][ T5615] Bluetooth: hci5: command tx timeout [ 538.418424][T20167] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4212'. [ 538.466511][T20169] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4213'. [ 538.470184][T20169] netlink: 296 bytes leftover after parsing attributes in process `syz.5.4213'. [ 538.528990][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069ea6800: abort rx timeout. Force session deactivation [ 538.568062][T20171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.619856][T20171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.674932][T20171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.780638][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 538.780724][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 538.962759][T20179] netlink: 'syz.3.4216': attribute type 16 has an invalid length. [ 538.962774][T20179] netlink: 'syz.3.4216': attribute type 17 has an invalid length. [ 538.994791][ T5715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 539.247918][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 539.262597][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 539.270379][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 539.281696][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 539.282263][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 539.456710][T20196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4220'. [ 539.456742][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4220'. [ 539.488810][T20196] smc: removing ib device syz0 [ 539.574424][T20196] smbdirect: ib_dev[syz0] removed [ 539.820760][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 539.820839][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 539.921469][ T5722] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 540.223751][ T5619] Bluetooth: hci5: command tx timeout [ 540.860875][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 540.860961][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 540.896742][T20185] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.896914][T20185] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.897082][T20185] bridge_slave_0: entered allmulticast mode [ 540.903669][T20185] bridge_slave_0: entered promiscuous mode [ 540.908873][T20185] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.908976][T20185] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.909100][T20185] bridge_slave_1: entered allmulticast mode [ 540.914945][T20185] bridge_slave_1: entered promiscuous mode [ 540.991560][T20185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.994471][T20185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.224929][T20217] tc_dump_action: action bad kind [ 541.234887][T20185] team0: Port device team_slave_0 added [ 541.252423][T20185] team0: Port device team_slave_1 added [ 541.343852][ T5619] Bluetooth: hci6: command tx timeout [ 541.421531][T20185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.421550][T20185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.421578][T20185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.425987][T20185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.426003][T20185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.426029][T20185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.539165][T20185] hsr_slave_0: entered promiscuous mode [ 541.539806][T20185] hsr_slave_1: entered promiscuous mode [ 541.540209][T20185] debugfs: 'hsr0' already exists in 'hsr' [ 541.540227][T20185] Cannot create hsr debugfs directory [ 541.582070][T20223] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4224'. [ 541.594033][T20223] netlink: 296 bytes leftover after parsing attributes in process `syz.5.4224'. [ 541.688862][T20226] netlink: 'syz.5.4225': attribute type 32 has an invalid length. [ 541.688887][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4225'. [ 541.844228][T20224] tipc: Resetting bearer [ 541.844731][T20224] tipc: Resetting bearer [ 541.877194][T20224] v: left promiscuous mode [ 542.252194][T20226] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 542.312053][ T5619] Bluetooth: hci5: command tx timeout [ 542.455550][T13929] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 542.455582][T13929] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.455603][T13929] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.456014][T13929] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 542.456044][T13929] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.456068][T13929] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.456147][T13929] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 542.456171][T13929] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.456194][T13929] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.456227][T13929] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 542.456251][T13929] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.456275][T13929] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.601684][T20185] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 542.616152][T20185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.620673][T20185] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 542.654812][T20185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.659195][T20185] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 542.670837][T20185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.673545][T20185] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 542.700829][T20185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.745394][T20238] block nbd0: not configured, cannot reconfigure [ 542.746183][T20238] netlink: 'syz.3.4227': attribute type 9 has an invalid length. [ 542.957476][T20185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.983832][T20185] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.005879][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.005982][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.035897][T13938] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.035988][T13938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.107997][T20185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.436631][ T5619] Bluetooth: hci6: command tx timeout [ 543.817672][ T5615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 543.836679][ T5615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 543.839358][ T5615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 543.870219][ T5615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 543.878099][ T5615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 544.265496][T20185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.480431][T20299] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4234'. [ 544.514844][T20299] netlink: 296 bytes leftover after parsing attributes in process `syz.5.4234'. [ 545.185142][ T5615] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 545.203327][ T5615] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 545.207044][ T5615] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 545.210235][ T5615] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 545.241795][ T5615] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 545.305335][T20185] veth0_vlan: entered promiscuous mode [ 545.341913][T20185] veth1_vlan: entered promiscuous mode [ 545.502511][ T5619] Bluetooth: hci6: command tx timeout [ 545.669969][T20185] veth0_macvtap: entered promiscuous mode [ 545.709198][T20185] veth1_macvtap: entered promiscuous mode [ 545.772177][T20185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.797514][T20185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.914495][T13929] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.915567][T13929] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.915605][T13929] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.915635][T13929] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.980964][ T5619] Bluetooth: hci7: command tx timeout [ 546.258454][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.258491][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.379144][T20277] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.379635][T20277] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.379769][T20277] bridge_slave_0: entered allmulticast mode [ 546.405112][T20277] bridge_slave_0: entered promiscuous mode [ 546.414386][T20277] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.414490][T20277] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.414623][T20277] bridge_slave_1: entered allmulticast mode [ 546.416427][T20277] bridge_slave_1: entered promiscuous mode [ 546.543331][T20277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.548915][T13929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.548936][T13929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.562116][T20277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.683401][T20277] team0: Port device team_slave_0 added [ 546.705658][T20277] team0: Port device team_slave_1 added [ 546.767809][T20277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.767827][T20277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.767851][T20277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.816959][T20277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.816975][T20277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.817001][T20277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.886749][T20362] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4241'. [ 546.886776][T20362] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4241'. [ 546.886793][T20362] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4241'. [ 546.978572][T20362] vlan2: entered allmulticast mode [ 546.978941][T20362] bridge0: port 3(vlan2) entered blocking state [ 546.979170][T20362] bridge0: port 3(vlan2) entered disabled state [ 546.983212][T20362] vlan2: entered promiscuous mode [ 547.053532][T20277] hsr_slave_0: entered promiscuous mode [ 547.059364][T20277] hsr_slave_1: entered promiscuous mode [ 547.060124][T20277] debugfs: 'hsr0' already exists in 'hsr' [ 547.060144][T20277] Cannot create hsr debugfs directory [ 547.142553][ T6135] IPVS: starting estimator thread 0... [ 547.171108][T20369] tipc: Started in network mode [ 547.171129][T20369] tipc: Node identity 1, cluster identity 4711 [ 547.171140][T20369] tipc: Node number set to 1 [ 547.230718][T20377] IPVS: using max 29 ests per chain, 69600 per kthread [ 547.346886][ T5619] Bluetooth: hci8: command tx timeout [ 547.590835][ T5619] Bluetooth: hci6: command tx timeout [ 547.714945][T20319] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.716703][T20319] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.716907][T20319] bridge_slave_0: entered allmulticast mode [ 547.720287][T20319] bridge_slave_0: entered promiscuous mode [ 547.723667][T20319] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.725380][T20319] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.725751][T20319] bridge_slave_1: entered allmulticast mode [ 547.732621][T20319] bridge_slave_1: entered promiscuous mode [ 547.773622][T20319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.776861][T20319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.903644][T20319] team0: Port device team_slave_0 added [ 547.926092][T20319] team0: Port device team_slave_1 added [ 548.026841][T20277] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 548.044176][T20277] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 548.046715][T20277] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 548.053456][T20277] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 548.058246][T20277] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 548.071393][ T5619] Bluetooth: hci7: command tx timeout [ 548.105989][T20277] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 548.108433][T20319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.108448][T20319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.108475][T20319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.116384][T20277] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 548.124792][T20277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.127272][T20319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.127286][T20319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.127311][T20319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.203431][T20406] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4248'. [ 548.269928][T20319] hsr_slave_0: entered promiscuous mode [ 548.274523][T20406] netlink: 'syz.6.4248': attribute type 1 has an invalid length. [ 548.274614][T20406] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4248'. [ 548.277762][T20319] hsr_slave_1: entered promiscuous mode [ 548.278551][T20319] debugfs: 'hsr0' already exists in 'hsr' [ 548.278570][T20319] Cannot create hsr debugfs directory [ 548.399748][T20406] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication [ 548.565859][T20415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.607229][T11136] wlan1: No legacy rates in association response [ 548.629459][T20419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.696988][T20415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.729121][T20277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.746253][T20426] sctp: [Deprecated]: syz.3.4251 (pid 20426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.746253][T20426] Use struct sctp_sack_info instead [ 548.892789][T20277] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.000877][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.000993][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.024417][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.024521][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.147856][T20319] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 549.155812][T20319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.158301][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4253'. [ 549.159346][T20319] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 549.201504][T20319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.202502][T20319] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 549.221622][T20319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 549.226390][T20319] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 549.246341][T20319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 549.422171][ T5619] Bluetooth: hci8: command tx timeout [ 549.520075][T20319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.573567][T20319] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.654636][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.654704][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.694620][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.694732][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.037476][T20453] trusted_key: syz.6.4255 sent an empty control message without MSG_MORE. [ 550.141507][ T5619] Bluetooth: hci7: command tx timeout [ 550.329476][T20277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.652989][T20319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.931785][T20277] veth0_vlan: entered promiscuous mode [ 550.978062][T20277] veth1_vlan: entered promiscuous mode [ 551.126382][T20277] veth0_macvtap: entered promiscuous mode [ 551.143478][T20277] veth1_macvtap: entered promiscuous mode [ 551.199753][T20277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.251099][T20277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.400593][ T1158] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.400734][ T1158] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.400783][ T1158] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.400818][ T1158] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.500871][ T5619] Bluetooth: hci8: command tx timeout [ 551.561809][T13929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.561832][T13929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.563196][T20319] veth0_vlan: entered promiscuous mode [ 551.632932][T20319] veth1_vlan: entered promiscuous mode [ 551.710129][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.710152][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.800231][T20319] veth0_macvtap: entered promiscuous mode [ 551.836106][T20319] veth1_macvtap: entered promiscuous mode [ 551.910201][T20319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.947040][T20319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.987399][T16689] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.987760][T16689] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.990997][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.081642][T16689] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.236556][ T5619] Bluetooth: hci7: command tx timeout [ 552.265923][T20527] netlink: 'syz.5.4267': attribute type 1 has an invalid length. [ 552.359887][T20526] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4269'. [ 552.365285][T20527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.403480][T20532] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 552.416162][T20525] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4268'. [ 552.441487][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.441510][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.620416][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.626070][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.044114][T20552] netlink: 'syz.5.4273': attribute type 1 has an invalid length. [ 553.044134][T20552] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4273'. [ 553.092092][T20557] ip_tables: iptables: counters copy to user failed while replacing table [ 553.435624][T20565] netlink: 'syz.5.4277': attribute type 1 has an invalid length. [ 553.499370][T20565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.554034][T20565] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 553.581335][ T5619] Bluetooth: hci8: command tx timeout [ 554.019561][T20578] syzkaller0: entered promiscuous mode [ 554.019584][T20578] syzkaller0: entered allmulticast mode [ 554.460162][T20593] tipc: Started in network mode [ 554.460193][T20593] tipc: Node identity 8ee7e7fa06d5, cluster identity 4711 [ 554.462215][T20593] tipc: Enabled bearer , priority 0 [ 554.577647][T20593] syzkaller0: entered promiscuous mode [ 554.577672][T20593] syzkaller0: entered allmulticast mode [ 554.579997][T20593] tipc: Resetting bearer [ 554.685407][ T12] tipc: Resetting bearer [ 554.686575][T20590] tipc: Resetting bearer [ 557.249648][T20590] tipc: Disabling bearer [ 557.262139][ T5715] tipc: Node number set to 2285037562 [ 557.430348][T20614] netlink: 'syz.6.4290': attribute type 2 has an invalid length. [ 557.430372][T20614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4290'. [ 557.641723][T20622] netlink: 'syz.8.4293': attribute type 4 has an invalid length. [ 557.690075][T20622] netlink: 'syz.8.4293': attribute type 4 has an invalid length. [ 557.976263][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4299'. [ 558.107500][T20639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4299'. [ 558.107733][T20639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4299'. [ 558.493247][T20652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4303'. [ 558.700788][ T13] IPVS: starting estimator thread 0... [ 558.820682][T20658] IPVS: using max 32 ests per chain, 76800 per kthread [ 559.077322][T20662] geneve0: entered promiscuous mode [ 559.088565][T20662] batman_adv: batadv0: Adding interface: macvlan2 [ 559.088585][T20662] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.088618][T20662] batman_adv: batadv0: Interface activated: macvlan2 [ 559.291903][T20677] netlink: 'syz.3.4308': attribute type 10 has an invalid length. [ 559.293956][T20677] netlink: 'syz.3.4308': attribute type 10 has an invalid length. [ 559.674684][T20687] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4314'. [ 559.681918][ T4944] block nbd6: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 60 seconds [ 559.681959][ T4944] block nbd6: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 60 seconds [ 559.681984][ T4944] block nbd6: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 60 seconds [ 559.682009][ T4944] block nbd6: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 60 seconds [ 559.967528][T20687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4314'. [ 560.491306][T20699] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 560.493201][T20699] tipc: Enabled bearer , priority 26 [ 560.496294][T20699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4317'. [ 560.626639][T20704] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 560.880270][T20711] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4320'. [ 560.880330][T20711] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4320'. [ 561.220576][ T12] IPVS: starting estimator thread 0... [ 561.321207][T20724] IPVS: using max 34 ests per chain, 81600 per kthread [ 561.541965][T20729] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 561.542005][T20729] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 561.542045][T20729] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 561.732247][T20736] hsr_slave_0 (unregistering): left promiscuous mode [ 561.794339][T20733] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 562.006483][T20743] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 562.366974][T20743] netlink: 'syz.5.4329': attribute type 1 has an invalid length. [ 562.370138][T20743] : renamed from dummy0 (while UP) [ 562.577145][T20760] netlink: 'syz.3.4334': attribute type 1 has an invalid length. [ 562.736373][T20766] veth19: entered allmulticast mode [ 562.751736][T20766] bond14: (slave veth19): Enslaving as an active interface with a down link [ 562.776673][T20760] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 562.801980][T20760] macvlan2: entered promiscuous mode [ 562.802037][T20760] macvlan2: entered allmulticast mode [ 562.803417][T20760] bond14: entered promiscuous mode [ 562.808494][T20760] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 562.832420][T20760] bond14: left promiscuous mode [ 562.907225][T20770] sctp: [Deprecated]: syz.6.4335 (pid 20770) Use of int in max_burst socket option deprecated. [ 562.907225][T20770] Use struct sctp_assoc_value instead [ 562.928572][T20769] block nbd0: not configured, cannot reconfigure [ 563.314489][T20779] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input5 [ 563.553228][T20775] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.555470][T20775] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.905401][T20775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.918582][T20775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.391025][T16689] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.391115][T16689] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.391370][T16689] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.391579][T16689] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.404473][T20798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.621476][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 564.993409][T20810] IPVS: lc: FWM 3 0x00000003 - no destination available [ 565.373193][T20822] __nla_validate_parse: 6 callbacks suppressed [ 565.373214][T20822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4347'. [ 566.336311][T20843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4355'. [ 566.392676][T20846] IPVS: lc: FWM 3 0x00000003 - no destination available [ 566.546920][T20849] netlink: 'syz.5.4357': attribute type 2 has an invalid length. [ 566.546979][T20849] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4357'. [ 566.558119][T20851] netlink: 'syz.3.4358': attribute type 10 has an invalid length. [ 566.599242][T20849] lo: Caught tx_queue_len zero misconfig [ 567.526984][T20869] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 567.565755][T20869] bond3 (unregistering): Released all slaves [ 568.059605][T20882] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4367'. [ 568.092760][ T5615] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 568.095311][ T5615] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 568.099432][ T5615] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 568.109275][ T5615] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 568.110724][ T5615] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 568.444867][T20889] xt_hashlimit: size too large, truncated to 1048576 [ 568.514861][T20882] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.515877][T20882] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.819149][T20882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.841846][T20882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.224729][T20882] batman_adv: batadv0: Interface deactivated: macvlan2 [ 569.246465][T20892] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.262593][T20892] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.282039][T20892] vlan2 (unregistering): left promiscuous mode [ 569.282061][T20892] bridge_slave_0 (unregistering): left promiscuous mode [ 569.282139][T20892] bridge0: port 3(vlan2) entered disabled state [ 569.430781][T16689] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.431686][T16689] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.431725][T16689] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.431765][T16689] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.461327][T20894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.195467][T20925] netlink: 'syz.5.4374': attribute type 9 has an invalid length. [ 570.222527][ T5615] Bluetooth: hci9: command tx timeout [ 570.272268][T20925] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4374'. [ 570.578229][T20935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4375'. [ 570.845208][T20883] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.845328][T20883] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.845467][T20883] bridge_slave_0: entered allmulticast mode [ 570.847285][T20883] bridge_slave_0: entered promiscuous mode [ 570.850412][T20883] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.855662][T20883] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.857272][T20883] bridge_slave_1: entered allmulticast mode [ 570.863892][T20883] bridge_slave_1: entered promiscuous mode [ 570.978430][T20883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.996883][T20883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.155826][T20883] team0: Port device team_slave_0 added [ 571.177409][T20883] team0: Port device team_slave_1 added [ 571.253920][T20883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.253956][T20883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.254011][T20883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.257846][T20883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.257879][T20883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.257922][T20883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.424841][T20883] hsr_slave_0: entered promiscuous mode [ 571.427045][T20883] hsr_slave_1: entered promiscuous mode [ 571.428439][T20883] debugfs: 'hsr0' already exists in 'hsr' [ 571.428461][T20883] Cannot create hsr debugfs directory [ 571.831869][T20883] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 571.837732][T20883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 571.838761][T20883] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 571.843243][T20883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.844089][T20883] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 571.852611][T20883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.853604][T20883] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 571.864964][T20883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 572.127932][T20883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.192335][T20883] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.212725][T16689] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.212829][T16689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.245318][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.245440][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.301026][ T5615] Bluetooth: hci9: command tx timeout [ 572.462756][T20967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.500310][T20967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 572.500338][T20967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 572.533598][T20967] hsr_slave_0: left promiscuous mode [ 572.536157][T20967] hsr_slave_1: left promiscuous mode [ 572.697709][T20975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4383'. [ 572.825652][T20980] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4385'. [ 572.911084][ T5743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 572.912127][T20976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.950856][ T5743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.175604][T20976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 573.175632][T20976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 573.176552][T20976] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 573.179217][T20976] tipc: Resetting bearer [ 573.183913][T20976] tipc: Resetting bearer [ 573.210205][T20976] virt_wifi0: left promiscuous mode [ 573.232991][T20976] v: entered promiscuous mode [ 573.275857][T20976] veth1_macvtap: left promiscuous mode [ 573.279069][T20976] veth0_macvtap: left promiscuous mode [ 573.298005][T20976] veth0_macvtap: entered promiscuous mode [ 573.312397][T20988] netlink: 165 bytes leftover after parsing attributes in process `syz.5.4388'. [ 573.314207][T20976] veth1_macvtap: entered promiscuous mode [ 573.383540][T20976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.399068][T20976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.411524][T20976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 573.434567][T20976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.451566][T20976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.560297][T20976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.603660][T20976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.688512][T20976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 573.697161][T20976] 8021q: adding VLAN 0 to HW filter on device bond5 [ 573.725023][T20976] 8021q: adding VLAN 0 to HW filter on device bond6 [ 573.876120][T20976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 573.897846][T20976] 8021q: adding VLAN 0 to HW filter on device bond8 [ 573.948312][T20976] 8021q: adding VLAN 0 to HW filter on device bond9 [ 573.976666][T20976] 8021q: adding VLAN 0 to HW filter on device bond10 [ 574.022213][T20976] 8021q: adding VLAN 0 to HW filter on device bond11 [ 574.026959][T20976] virt_wifi0: entered promiscuous mode [ 574.046028][T20976] 8021q: adding VLAN 0 to HW filter on device bond12 [ 574.065622][T20976] 8021q: adding VLAN 0 to HW filter on device bond13 [ 574.103580][T20976] 8021q: adding VLAN 0 to HW filter on device bond14 [ 574.113633][T11136] s`z1: Port: 1 Link ACTIVE [ 574.293466][ T6135] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.294594][ T6135] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.310856][T13929] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 574.310890][T13929] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.310914][T13929] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 574.312118][T13929] bond14: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 574.312309][T13929] bond14: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 574.338087][T13929] bond14: (slave veth19): making interface the new active one [ 574.359537][T13929] bond14: active interface up! [ 574.370781][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 574.370815][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.370839][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 574.370897][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 574.370929][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.370952][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 574.370985][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 574.371009][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.371032][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 574.381676][ T5615] Bluetooth: hci9: command tx timeout [ 574.826458][ T4983] udevd[4983]: worker [18562] /devices/virtual/block/nbd6 is taking a long time [ 574.988750][T21014] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 575.133168][T21020] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 575.169815][T20883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.180839][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 575.180919][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 575.184949][ T30] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.257534][T21020] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4391'. [ 575.716365][T21033] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4393'. [ 575.747916][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4393'. [ 575.748877][T21033] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8 [ 575.757316][T21033] bond_slave_0: entered promiscuous mode [ 575.757340][T21033] bond_slave_0: entered allmulticast mode [ 575.992243][T21042] nft_compat: unsupported protocol 0 [ 576.174147][T20883] veth0_vlan: entered promiscuous mode [ 576.199485][T20883] veth1_vlan: entered promiscuous mode [ 576.220776][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 576.220870][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 576.269277][T20883] veth0_macvtap: entered promiscuous mode [ 576.280049][T20883] veth1_macvtap: entered promiscuous mode [ 576.313000][T20883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.323909][T20883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.373737][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.374299][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.401089][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.440646][T16689] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.461705][ T5615] Bluetooth: hci9: command tx timeout [ 576.594496][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.594519][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.764164][T16689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.764187][T16689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.260845][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 577.260933][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 577.321774][T21052] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4396'. [ 577.887330][T21069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4401'. [ 578.061200][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 578.070263][T21078] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4402'. [ 578.156876][T21070] netlink: 'syz.9.4400': attribute type 39 has an invalid length. [ 578.300776][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 578.300903][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 578.388456][T21082] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4403'. [ 578.471938][T21085] lo: entered allmulticast mode [ 578.763013][T21084] lo: left allmulticast mode [ 579.732709][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4412'. [ 580.031162][T21120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4413'. [ 580.380728][ C1] net_ratelimit: 2 callbacks suppressed [ 580.380750][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 580.380842][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 580.508880][T21127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4416'. [ 580.647978][ T5619] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 580.660551][ T5619] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 580.670222][ T5619] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 580.680400][ T5619] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 580.688660][ T5619] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 580.791886][T21133] syzkaller1: entered promiscuous mode [ 580.791927][T21133] syzkaller1: entered allmulticast mode [ 581.420793][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 581.420882][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 581.709176][T21158] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 581.714389][T21158] bond1 (unregistering): Released all slaves [ 582.138744][T21169] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4423'. [ 582.328160][T21173] veth0: Caught tx_queue_len zero misconfig [ 582.344711][T21173] netlink: 'syz.5.4424': attribute type 11 has an invalid length. [ 582.460715][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 582.460805][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 582.660808][T21134] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.661125][T21134] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.661849][T21134] bridge_slave_0: entered allmulticast mode [ 582.665660][T21134] bridge_slave_0: entered promiscuous mode [ 582.702260][T21134] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.702493][T21134] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.703442][T21134] bridge_slave_1: entered allmulticast mode [ 582.709106][T21134] bridge_slave_1: entered promiscuous mode [ 582.780155][T21134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.780806][ T5619] Bluetooth: hci10: command tx timeout [ 582.804300][T21134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.848630][T21134] team0: Port device team_slave_0 added [ 582.858787][T21134] team0: Port device team_slave_1 added [ 582.898414][T21134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.898433][T21134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.898459][T21134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.900366][T21134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.900380][T21134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.900407][T21134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.041606][T21134] hsr_slave_0: entered promiscuous mode [ 583.042687][T21134] hsr_slave_1: entered promiscuous mode [ 583.043366][T21134] debugfs: 'hsr0' already exists in 'hsr' [ 583.043386][T21134] Cannot create hsr debugfs directory [ 583.501138][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 583.501264][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 583.668611][ C1] vcan0: j1939_tp_rxtimer: 0xffff888040df0000: rx timeout, send abort [ 584.021113][T21134] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 584.025129][T21134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 584.026048][T21134] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 584.029436][T21134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.030333][T21134] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 584.048990][T21134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.049931][T21134] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.056645][T21134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.168678][ C1] vcan0: j1939_tp_rxtimer: 0xffff888040df0000: abort rx timeout. Force session deactivation [ 584.168867][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805342d800: rx timeout, send abort [ 584.340021][T21134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.360270][T21134] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.367959][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.368085][ T6137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.378283][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.378389][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.540562][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 584.540665][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 584.668909][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805342d800: abort rx timeout. Force session deactivation [ 584.861694][ T5619] Bluetooth: hci10: command tx timeout [ 585.580852][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 585.580958][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 585.819184][T21237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4437'. [ 585.833373][T21134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.862381][T21238] block nbd0: server does not support multiple connections per device. [ 585.863753][T21238] block nbd0: shutting down sockets [ 585.914394][T21239] netlink: zone id is out of range [ 585.914411][T21239] netlink: zone id is out of range [ 585.914420][T21239] netlink: zone id is out of range [ 585.914428][T21239] netlink: zone id is out of range [ 585.914436][T21239] netlink: zone id is out of range [ 585.914444][T21239] netlink: zone id is out of range [ 585.914456][T21239] netlink: zone id is out of range [ 585.914464][T21239] netlink: zone id is out of range [ 586.086314][T21237] tipc: Resetting bearer [ 586.087622][T21237] tipc: Resetting bearer [ 586.112576][T21237] v: left promiscuous mode [ 586.747875][T21237] veth19: left allmulticast mode [ 586.786562][ T5622] s`z1: Port: 1 Link DOWN [ 586.821133][ T6137] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 586.821168][ T6137] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.821194][ T6137] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 586.822111][ T6137] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 586.822138][ T6137] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.822163][ T6137] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 586.822201][ T6137] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 586.822226][ T6137] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.822251][ T6137] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 586.822286][ T6137] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 586.822311][ T6137] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.822336][ T6137] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 586.941795][ T5619] Bluetooth: hci10: command tx timeout [ 586.999357][T21134] veth0_vlan: entered promiscuous mode [ 587.038521][T21134] veth1_vlan: entered promiscuous mode [ 587.196994][T21134] veth0_macvtap: entered promiscuous mode [ 587.232651][T21134] veth1_macvtap: entered promiscuous mode [ 587.324324][T21134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.374000][T21134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.436004][ T6137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.475673][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.475739][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.475767][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.774964][ T6137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.774983][ T6137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.935710][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.935732][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.208346][T21276] netlink: 'syz.0.4414': attribute type 16 has an invalid length. [ 588.208372][T21276] netlink: 'syz.0.4414': attribute type 17 has an invalid length. [ 588.408961][T21276] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.409737][T21276] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.633960][T21276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.645370][T21276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.022723][ T5619] Bluetooth: hci10: command tx timeout [ 589.163461][T13929] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.163512][T13929] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.163548][T13929] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.163584][T13929] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.393868][ T6135] IPVS: starting estimator thread 0... [ 589.480598][T21308] IPVS: using max 27 ests per chain, 64800 per kthread [ 589.619936][ T6135] IPVS: starting estimator thread 0... [ 589.627001][T21318] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4444'. [ 589.704004][T21322] IPVS: using max 34 ests per chain, 81600 per kthread [ 589.741453][ T4944] block nbd6: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 90 seconds [ 589.741515][ T4944] block nbd6: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 90 seconds [ 589.741548][ T4944] block nbd6: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 90 seconds [ 589.741581][ T4944] block nbd6: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 90 seconds [ 589.755031][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4447'. [ 589.759110][T21327] netlink: 'syz.3.4447': attribute type 62 has an invalid length. [ 589.936555][T21332] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4448'. [ 591.131484][ T5615] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 591.137055][ T5615] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 591.139708][ T5615] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 591.169039][ T5615] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 591.185100][ T5615] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 591.613382][T21342] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4449'. [ 593.027476][T21401] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 593.169857][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4458'. [ 593.260821][ T5619] Bluetooth: hci11: command tx timeout [ 593.617987][T21362] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.622664][T21362] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.623750][T21362] bridge_slave_0: entered allmulticast mode [ 593.634164][T21362] bridge_slave_0: entered promiscuous mode [ 593.644755][T21362] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.648409][T21362] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.648560][T21362] bridge_slave_1: entered allmulticast mode [ 593.655565][T21362] bridge_slave_1: entered promiscuous mode [ 593.838637][T21362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.846919][T21362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.938749][T21362] team0: Port device team_slave_0 added [ 593.962603][T21362] team0: Port device team_slave_1 added [ 594.017077][T21416] smbdirect: ib_dev[syz1] removed [ 594.082386][T21362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.082404][T21362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.082431][T21362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.086774][T21362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.086789][T21362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.086816][T21362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.283368][T21362] hsr_slave_0: entered promiscuous mode [ 594.289368][T21362] hsr_slave_1: entered promiscuous mode [ 594.291331][T21362] debugfs: 'hsr0' already exists in 'hsr' [ 594.291353][T21362] Cannot create hsr debugfs directory [ 594.438529][T21439] xt_TCPMSS: Only works on TCP SYN packets [ 594.456839][T21437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4462'. [ 594.663909][T21439] bridge_slave_1: left allmulticast mode [ 594.663937][T21439] bridge_slave_1: left promiscuous mode [ 594.664423][T21439] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.675527][T21439] bridge_slave_0: left allmulticast mode [ 594.675552][T21439] bridge_slave_0: left promiscuous mode [ 594.675768][T21439] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.137040][T21444] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4464'. [ 595.141834][T21453] netlink: 'syz.3.4466': attribute type 3 has an invalid length. [ 595.229661][T21452] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci11/hci11:200/input6 [ 595.300053][T21453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4466'. [ 595.341335][ T5619] Bluetooth: hci11: command tx timeout [ 596.316421][T21362] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 596.347121][T21362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 596.348958][T21362] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 596.390015][T21362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.402086][T21362] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 596.409302][T21362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 596.416133][T21362] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 596.470547][T21474] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4468'. [ 596.487268][T21362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 596.609972][T21481] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4468'. [ 596.609995][T21481] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4468'. [ 596.615605][T21481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4468'. [ 596.795294][T21362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.826311][T21362] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.843041][T13929] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.843153][T13929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.877018][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.877105][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.053505][ T31] audit: type=1800 audit(1791016466.200:16): pid=21483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4468" name="memory.events" dev="tmpfs" ino=172 res=0 errno=0 [ 597.422987][ T5619] Bluetooth: hci11: command tx timeout [ 597.527736][ T5615] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 597.545513][ T5615] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 597.547802][ T5615] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 597.548781][ T5615] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 597.550179][ T5615] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 597.573019][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4471'. [ 597.608711][T21493] tipc: Started in network mode [ 597.608762][T21493] tipc: Node identity , cluster identity 4711 [ 597.608777][T21493] tipc: Failed to obtain node identity [ 597.608825][T21493] tipc: Enabling of bearer rejected, failed to enable media [ 597.903590][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068a04000: rx timeout, send abort [ 598.403676][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068a04000: abort rx timeout. Force session deactivation [ 598.403938][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068a06000: rx timeout, send abort [ 598.666614][T21362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.775900][T21516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4472'. [ 598.888078][T21516] net_ratelimit: 498 callbacks suppressed [ 598.888098][T21516] netlink: zone id is out of range [ 598.888106][T21516] netlink: zone id is out of range [ 598.888112][T21516] netlink: zone id is out of range [ 598.888118][T21516] netlink: zone id is out of range [ 598.888124][T21516] netlink: zone id is out of range [ 598.888130][T21516] netlink: zone id is out of range [ 598.888139][T21516] netlink: zone id is out of range [ 598.888146][T21516] netlink: zone id is out of range [ 598.888151][T21516] netlink: zone id is out of range [ 598.888158][T21516] netlink: zone id is out of range [ 598.904416][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068a06000: abort rx timeout. Force session deactivation [ 599.368322][T21530] netlink: 'syz.9.4474': attribute type 2 has an invalid length. [ 599.396086][T21530] : entered promiscuous mode [ 599.407949][T21530] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4474'. [ 599.503867][ T5615] Bluetooth: hci11: command tx timeout [ 599.574458][T21495] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.574629][T21495] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.574755][T21495] bridge_slave_0: entered allmulticast mode [ 599.576620][T21495] bridge_slave_0: entered promiscuous mode [ 599.612671][T21495] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.612814][T21495] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.612974][T21495] bridge_slave_1: entered allmulticast mode [ 599.614691][T21495] bridge_slave_1: entered promiscuous mode [ 599.661463][ T5615] Bluetooth: hci12: command tx timeout [ 599.694359][T21495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.697964][T21495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.740142][T21362] veth0_vlan: entered promiscuous mode [ 599.771907][T21495] team0: Port device team_slave_0 added [ 599.789847][T21495] team0: Port device team_slave_1 added [ 599.856418][T21362] veth1_vlan: entered promiscuous mode [ 599.874865][T21543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4477'. [ 599.876083][T21495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.876112][T21495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.876154][T21495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.923896][T21495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.923913][T21495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.923940][T21495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.041865][T21495] hsr_slave_0: entered promiscuous mode [ 600.043963][T21495] hsr_slave_1: entered promiscuous mode [ 600.045431][T21495] debugfs: 'hsr0' already exists in 'hsr' [ 600.045468][T21495] Cannot create hsr debugfs directory [ 600.157544][T21362] veth0_macvtap: entered promiscuous mode [ 600.270335][T21362] veth1_macvtap: entered promiscuous mode [ 600.417499][T21362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.453174][T21362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.546153][T21495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.677656][ T6135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.679756][ T6137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.679800][ T6137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.679829][ T6137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.796568][T21495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.882916][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.882939][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.010115][T21495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.055273][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.055296][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.196837][T21495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.297908][T21559] macsec1: entered promiscuous mode [ 601.741384][ T5615] Bluetooth: hci12: command tx timeout [ 601.827250][T21571] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4484'. [ 601.905570][T21580] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4486'. [ 601.910294][T21580] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4486'. [ 602.368853][T21495] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 602.392782][T21495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 602.394807][T21495] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 602.419473][T21495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.440366][T21495] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 602.485615][T21495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.491865][T21495] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 602.520198][T21495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 602.641444][T21599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4488'. [ 602.833154][T21495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.869494][T21599] netlink: 'syz.4.4488': attribute type 1 has an invalid length. [ 602.869519][T21599] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4488'. [ 602.953495][T21495] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.984816][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.984919][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.998577][T21606] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 603.035755][T13938] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.035861][T13938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.556185][T21615] tc_dump_action: action bad kind [ 603.822668][ T5615] Bluetooth: hci12: command tx timeout [ 603.992901][T21634] pim6reg: entered allmulticast mode [ 604.556307][T21495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.877643][T21659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4495'. [ 604.883735][T21650] macsec1: left promiscuous mode [ 604.888724][T21650] veth0_to_bond: entered promiscuous mode [ 604.986165][T21495] veth0_vlan: entered promiscuous mode [ 604.995014][T21661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4496'. [ 605.016652][T21495] veth1_vlan: entered promiscuous mode [ 605.193907][T21495] veth0_macvtap: entered promiscuous mode [ 605.264527][T21495] veth1_macvtap: entered promiscuous mode [ 605.379654][T21495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.396003][T21495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.452421][T21669] IPVS: Scheduler module ip_vs_mh not found [ 605.464458][T21674] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4498'. [ 605.489107][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.489155][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.489190][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.489223][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.816550][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.816574][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.825656][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079da9000: rx timeout, send abort [ 605.924011][ T5619] Bluetooth: hci12: command tx timeout [ 605.997430][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.997468][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.062033][ T5615] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 606.325678][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079da8c00: rx timeout, send abort [ 606.325734][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079da9000: abort rx timeout. Force session deactivation [ 606.833402][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079da8c00: abort rx timeout. Force session deactivation [ 607.338298][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.338321][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.655645][T21705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4501'. [ 608.094319][T21724] netlink: 'syz.4.4506': attribute type 2 has an invalid length. [ 608.094342][T21724] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4506'. [ 608.225469][T21730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4507'. [ 608.225529][T21730] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4507'. [ 608.225751][T21730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4507'. [ 608.536310][T21740] pim6reg: entered allmulticast mode [ 608.592390][T21743] netlink: 'syz.4.4511': attribute type 1 has an invalid length. [ 608.592413][T21743] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4511'. [ 608.593179][T21743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4511'. [ 608.692065][T21748] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 609.498893][T21739] pim6reg: left allmulticast mode [ 610.566005][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4520'. [ 610.617889][ T5619] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 610.624127][ T5619] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 610.629403][ T5619] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 610.646111][ T5619] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 610.648369][ T5619] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 610.775557][T21782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.578917][T13938] IPVS: starting estimator thread 0... [ 611.591485][T21806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.660772][T21807] IPVS: using max 31 ests per chain, 74400 per kthread [ 611.792700][T21813] netlink: 'syz.0.4527': attribute type 10 has an invalid length. [ 611.802159][T21813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 611.805795][T21813] team0: Port device netdevsim1 added [ 612.190099][T21824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4530'. [ 612.320675][T21827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4531'. [ 612.538031][T21786] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.538357][T21786] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.538687][T21786] bridge_slave_0: entered allmulticast mode [ 612.550503][T21786] bridge_slave_0: entered promiscuous mode [ 612.568046][T21786] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.568332][T21786] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.568635][T21786] bridge_slave_1: entered allmulticast mode [ 612.581842][T21786] bridge_slave_1: entered promiscuous mode [ 612.783735][ T5619] Bluetooth: hci13: command tx timeout [ 613.226280][T21786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.252331][T21786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.414860][T21786] team0: Port device team_slave_0 added [ 613.437511][T21786] team0: Port device team_slave_1 added [ 613.511285][T21786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.511303][T21786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.511329][T21786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.514835][T21786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.514852][T21786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.514877][T21786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.778161][T21852] __nla_validate_parse: 2 callbacks suppressed [ 613.778183][T21852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4537'. [ 613.786318][T21786] hsr_slave_0: entered promiscuous mode [ 613.794330][T21786] hsr_slave_1: entered promiscuous mode [ 613.800096][T21786] debugfs: 'hsr0' already exists in 'hsr' [ 613.800149][T21786] Cannot create hsr debugfs directory [ 613.858853][T21851] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4537'. [ 614.665677][T21786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 614.740898][T21861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4540'. [ 614.861605][ T5615] Bluetooth: hci13: command tx timeout [ 614.922070][T21786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 614.942307][T21863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4541'. [ 615.159513][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807be2dc00: rx timeout, send abort [ 615.179920][T21786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 615.646119][T21870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4542'. [ 615.759974][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807be2d400: rx timeout, send abort [ 615.760066][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807be2dc00: abort rx timeout. Force session deactivation [ 616.260066][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807be2d400: abort rx timeout. Force session deactivation [ 616.308192][T21876] xt_l2tp: invalid flags combination: 8 [ 616.350570][T21786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 616.375134][T21786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.375992][T21786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 616.399851][T21786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.408227][T21786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 616.436699][T21786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 616.437623][T21786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 616.456608][T21786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.698861][T21786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.732606][T21786] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.852318][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.852524][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.880116][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.880285][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.952113][ T5615] Bluetooth: hci13: command tx timeout [ 617.064890][T13419] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3 [ 617.093728][T13419] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22 [ 618.085131][T21903] netlink: 'syz.9.4546': attribute type 10 has an invalid length. [ 618.133807][T21905] netlink: 'syz.9.4546': attribute type 10 has an invalid length. [ 618.164991][T21903] team0: Port device dummy0 added [ 618.207166][T21905] team0: Port device dummy0 removed [ 618.485430][T21911] macsec1: entered promiscuous mode [ 619.030576][ T5615] Bluetooth: hci13: command tx timeout [ 619.099625][T21786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.218416][T21933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4553'. [ 619.443366][T21939] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 619.636272][T21938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4555'. [ 619.636310][T21938] netlink: 'syz.2.4555': attribute type 7 has an invalid length. [ 619.636324][T21938] netlink: 'syz.2.4555': attribute type 8 has an invalid length. [ 619.636363][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4555'. [ 619.704439][T21938] dummy0: entered promiscuous mode [ 619.733168][T21938] team0: entered promiscuous mode [ 619.733192][T21938] team_slave_0: entered promiscuous mode [ 619.733396][T21938] team_slave_1: entered promiscuous mode [ 619.739842][T21938] erspan0: entered promiscuous mode [ 619.803927][T21939] syzkaller1: entered promiscuous mode [ 619.803983][T21939] syzkaller1: entered allmulticast mode [ 619.835773][ T4944] block nbd6: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 120 seconds [ 619.835850][ T4944] block nbd6: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 120 seconds [ 619.835911][ T4944] block nbd6: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 120 seconds [ 619.835969][ T4944] block nbd6: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 120 seconds [ 619.949719][T21949] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4556'. [ 620.053258][T21786] veth0_vlan: entered promiscuous mode [ 620.108144][T21951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4557'. [ 620.168943][T21786] veth1_vlan: entered promiscuous mode [ 620.415482][T21786] veth0_macvtap: entered promiscuous mode [ 620.436806][T21786] veth1_macvtap: entered promiscuous mode [ 620.523598][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035b13800: rx timeout, send abort [ 620.594343][T21786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.639619][T21959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4558'. [ 620.667944][T21786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.801615][ T6135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.012511][T21968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 621.023682][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035b13800: abort rx timeout. Force session deactivation [ 621.023976][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035b12800: rx timeout, send abort [ 621.028503][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.029165][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.192245][T13938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.209750][T21968] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4560'. [ 621.209805][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4560'. [ 621.378220][T21968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.398637][T21968] bond1: (slave bond0): making interface the new active one [ 621.417017][T21968] bond1: (slave bond0): Enslaving as an active interface with an up link [ 621.524223][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035b12800: abort rx timeout. Force session deactivation [ 621.602986][T21977] netlink: 'syz.9.4560': attribute type 2 has an invalid length. [ 621.603036][T21977] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4560'. [ 621.696391][T21973] bond1 (unregistering): (slave bond0): Releasing active interface [ 621.719671][T21973] bond1 (unregistering): Released all slaves [ 622.006721][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.006747][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.203404][T16689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.203458][T16689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.497389][T21985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4564'. [ 623.221207][T21971] infiniband syz2: set active [ 623.221247][T21971] infiniband syz2: added team_slave_0 [ 623.231620][T21971] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 623.272173][T21971] infiniband syz2: Couldn't open port 1 [ 623.273336][T21971] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 623.273403][T21971] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 623.273467][T21971] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 623.448018][T21971] RDS/IB: syz2: added [ 623.448073][T21971] smc: adding ib device syz2 with port count 1 [ 623.448093][T21971] smc: ib device syz2 port 1 has no pnetid [ 624.635020][T22025] netlink: 'syz.0.4573': attribute type 1 has an invalid length. [ 624.635046][T22025] __nla_validate_parse: 7 callbacks suppressed [ 624.635058][T22025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4573'. [ 624.679822][T22033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4574'. [ 624.715668][ T13] IPVS: starting estimator thread 0... [ 624.814265][T22041] IPVS: using max 34 ests per chain, 81600 per kthread [ 625.288198][T22053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4577'. [ 625.730309][T22066] net_ratelimit: 1001 callbacks suppressed [ 625.730331][T22066] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 625.754449][T22066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4581'. [ 625.754483][T22066] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 625.754938][T22064] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4583'. [ 626.006309][T22070] netlink: 'syz.2.4581': attribute type 1 has an invalid length. [ 626.342389][T22085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'. [ 626.372427][T22085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'. [ 626.398135][T22085] netlink: 'syz.1.4587': attribute type 1 has an invalid length. [ 626.827073][T22090] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 626.868372][T22090] bond1: (slave macvlan2): making interface the new active one [ 626.879072][T22090] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 626.885622][ T9] bond_slave_0: entered promiscuous mode [ 626.885723][ T9] bond_slave_1: entered promiscuous mode [ 627.199265][T22099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4591'. [ 627.286702][T22101] netlink: 'syz.1.4593': attribute type 21 has an invalid length. [ 627.286741][T22101] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4593'. [ 627.308746][T22101] netlink: 'syz.1.4593': attribute type 4 has an invalid length. [ 627.308766][T22101] netlink: 'syz.1.4593': attribute type 3 has an invalid length. [ 627.308780][T22101] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4593'. [ 627.831774][ T5619] Bluetooth: hci13: command 0x0405 tx timeout [ 628.012197][T22119] xt_TCPMSS: Only works on TCP SYN packets [ 628.164394][T22119] bridge_slave_1: left allmulticast mode [ 628.164422][T22119] bridge_slave_1: left promiscuous mode [ 628.166631][T22119] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.191381][T22119] bridge_slave_0: left allmulticast mode [ 628.191408][T22119] bridge_slave_0: left promiscuous mode [ 628.192998][T22119] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.396868][T22122] netlink: 'syz.0.4599': attribute type 4 has an invalid length. [ 628.692908][T22131] bond0: (slave bond_slave_1): Releasing backup interface [ 631.955153][T22138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 632.187736][T22167] siw: device registration error -23 [ 632.202944][T22166] __nla_validate_parse: 5 callbacks suppressed [ 632.202964][T22166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4609'. [ 632.233663][T22168] netlink: 'syz.0.4611': attribute type 1 has an invalid length. [ 632.295857][T22170] netlink: 'syz.1.4612': attribute type 1 has an invalid length. [ 632.315614][T22170] netlink: 'syz.1.4612': attribute type 2 has an invalid length. [ 632.326072][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4612'. [ 632.606011][T22176] macsec1: entered promiscuous mode [ 632.835088][T22186] syzkaller0: entered promiscuous mode [ 632.835112][T22186] syzkaller0: entered allmulticast mode [ 633.241083][T22199] syzkaller0: entered promiscuous mode [ 633.241108][T22199] syzkaller0: entered allmulticast mode [ 633.369327][T22201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4623'. [ 633.379302][T22191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.690054][T22204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4624'. [ 633.726108][T22204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4624'. [ 633.727825][T22204] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 633.750114][T22204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4624'. [ 633.824450][T22204] hsr_slave_1 (unregistering): left promiscuous mode [ 634.016176][T22209] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4626'. [ 635.536429][T22241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.539775][T22241] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.552499][T22241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.951705][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 638.355646][T22241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.364709][T22241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.374339][T22241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 638.394520][T22241] veth1_vlan: left promiscuous mode [ 638.397358][T22241] veth0_vlan: left promiscuous mode [ 638.409332][T22241] veth0_vlan: entered promiscuous mode [ 638.416488][T22241] veth1_vlan: entered promiscuous mode [ 638.441388][T22241] veth0_macvtap: left promiscuous mode [ 638.443779][T22241] veth0_macvtap: entered promiscuous mode [ 638.462198][T22241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.465079][T22241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 638.467133][T22241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 638.512858][T22241] macsec1: left promiscuous mode [ 638.525409][T13929] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.525502][T13929] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.548920][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.549016][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.567178][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.567281][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.725955][T22247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 638.783961][T22250] bond1 (unregistering): Released all slaves [ 638.844448][T22259] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4639'. [ 638.885475][T22259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4639'. [ 638.899923][ T6135] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.901043][ T6135] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.902667][ T6135] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.902738][ T6135] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.902805][ T6135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.902870][ T6135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.523057][T22267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.919160][T22257] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4640'. [ 639.946270][T22257] netlink: 'syz.0.4640': attribute type 16 has an invalid length. [ 639.946295][T22257] netlink: 'syz.0.4640': attribute type 17 has an invalid length. [ 640.089845][T22276] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4645'. [ 640.089871][T22276] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4645'. [ 640.089924][T22276] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4645'. [ 640.248167][T22279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.189035][ T5615] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 641.205788][ T5615] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 641.221512][ T5615] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 641.222908][ T5615] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 641.224794][ T5615] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 642.189444][T22313] SET target dimension over the limit! [ 642.287922][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4652'. [ 642.317451][T22309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4652'. [ 642.317485][T22309] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 642.601375][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4656'. [ 642.644533][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4657'. [ 642.789757][T22323] IPv6: NLM_F_CREATE should be specified when creating new route [ 642.789952][T22323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 642.789963][T22323] IPv6: NLM_F_CREATE should be set when creating new route [ 642.792489][T22323] IPv6: NLM_F_CREATE should be set when creating new route [ 642.792544][T22323] IPv6: NLM_F_CREATE should be set when creating new route [ 643.268711][ T5619] Bluetooth: hci14: command tx timeout [ 643.757440][T22294] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.757546][T22294] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.757703][T22294] bridge_slave_0: entered allmulticast mode [ 643.785880][T22294] bridge_slave_0: entered promiscuous mode [ 643.814943][T22294] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.815166][T22294] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.815498][T22294] bridge_slave_1: entered allmulticast mode [ 643.827786][T22294] bridge_slave_1: entered promiscuous mode [ 643.973870][T22350] tipc: Started in network mode [ 643.973927][T22350] tipc: Node identity d61692b53264, cluster identity 4711 [ 643.978790][T22350] tipc: Enabled bearer , priority 0 [ 644.025610][T22294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.026569][T22350] syzkaller0: entered promiscuous mode [ 644.026621][T22350] syzkaller0: entered allmulticast mode [ 644.064900][T22294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.201948][T22359] __nla_validate_parse: 2 callbacks suppressed [ 644.201968][T22359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4665'. [ 644.289037][T22350] tipc: Resetting bearer [ 644.320707][T22294] team0: Port device team_slave_0 added [ 644.337030][T22294] team0: Port device team_slave_1 added [ 644.425685][T22348] tipc: Resetting bearer [ 644.489194][T22348] tipc: Disabling bearer [ 644.527405][T22361] IPv6: addrconf: prefix option has invalid lifetime [ 644.558634][T22294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.558669][T22294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.558725][T22294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.696234][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4666'. [ 644.837839][T22294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.837859][T22294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.837886][T22294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.838444][T22363] macsec0: entered promiscuous mode [ 644.907194][T22364] macsec0 (unregistering): left promiscuous mode [ 645.096764][T22372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4667'. [ 645.144638][T22294] hsr_slave_0: entered promiscuous mode [ 645.145692][T22294] hsr_slave_1: entered promiscuous mode [ 645.146286][T22294] debugfs: 'hsr0' already exists in 'hsr' [ 645.146304][T22294] Cannot create hsr debugfs directory [ 645.288079][T22374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4669'. [ 645.289737][T22374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.289779][T22374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.301184][T22374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.322876][T22374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.344010][ T5619] Bluetooth: hci14: command tx timeout [ 645.532167][T22379] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4680'. [ 645.532204][T22379] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 645.636666][T22381] bond1: option mode: unable to set because the bond device has slaves [ 645.658357][T22381] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 645.692936][T22381] bond1 (unregistering): Released all slaves [ 645.885542][ T943] bond_slave_0: left promiscuous mode [ 645.996264][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4673'. [ 646.178551][T22389] openvswitch: netlink: Message has 8 unknown bytes. [ 646.345119][T22395] tipc: Can't bind to reserved service type 1 [ 646.870319][T22409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4674'. [ 646.899508][T22294] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.946438][T22395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'. [ 647.430251][ T5619] Bluetooth: hci14: command tx timeout [ 647.567161][T22412] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4677'. [ 647.571416][T22412] netlink: 'syz.0.4677': attribute type 11 has an invalid length. [ 647.713991][T22415] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4678'. [ 647.779916][T22395] bond0: (slave bond_slave_1): Releasing backup interface [ 648.078848][T22411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.179023][T22294] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.281910][ T1158] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.282831][ T1158] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.282869][ T1158] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.282903][ T1158] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.310489][T22423] nbd: must specify a size in bytes for the device [ 648.396954][T22294] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.563500][T22294] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.725113][ T1158] IPVS: starting estimator thread 0... [ 648.817712][T22434] IPVS: using max 36 ests per chain, 86400 per kthread [ 649.189737][T22446] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 649.214216][T22449] netlink: 'syz.4.4686': attribute type 1 has an invalid length. [ 649.214238][T22449] __nla_validate_parse: 2 callbacks suppressed [ 649.214251][T22449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4686'. [ 649.502246][ T5619] Bluetooth: hci14: command tx timeout [ 649.903885][ T4944] block nbd6: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 150 seconds [ 649.903950][ T4944] block nbd6: Possible stuck request ffff8880279801c0: control (read@1024,1024B). Runtime 150 seconds [ 649.904009][ T4944] block nbd6: Possible stuck request ffff888027980380: control (read@2048,1024B). Runtime 150 seconds [ 649.904046][ T4944] block nbd6: Possible stuck request ffff888027980540: control (read@3072,1024B). Runtime 150 seconds [ 650.379682][T22456] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4688'. [ 650.389237][T22294] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 650.419116][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.425860][T22294] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 650.454289][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.458693][T22294] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 650.481063][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.483273][T22294] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 650.497724][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.558615][T22473] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.4691'. [ 650.576465][T22473] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.4691'. [ 651.114364][T22294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.143798][T22294] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.239755][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.239869][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.339077][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.339199][ T6142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.658071][T22494] tipc: Failed to remove unknown binding: 66,0,0/0:411065477/411065479 [ 651.674587][T22494] tipc: Failed to remove unknown binding: 66,0,0/0:411065477/411065478 [ 651.739587][T22499] tipc: Failed to remove unknown binding: 66,0,0/0:411065477/411065479 [ 651.739619][T22499] tipc: Failed to remove unknown binding: 66,0,0/0:411065477/411065478 [ 651.916818][T22504] netlink: 'syz.1.4697': attribute type 16 has an invalid length. [ 651.916873][T22504] netlink: 'syz.1.4697': attribute type 17 has an invalid length. [ 651.979949][T22509] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4698'. [ 652.006116][T22510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4697'. [ 652.100248][T22504] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 652.124997][ T9] bond_slave_0: entered promiscuous mode [ 652.219268][T22506] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 652.220028][T22506] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 652.269299][T22509] netlink: 'syz.9.4698': attribute type 1 has an invalid length. [ 652.269341][T22509] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4698'. [ 652.612161][T22524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4700'. [ 652.612185][T22524] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4700'. [ 652.612235][T22524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4700'. [ 652.997862][T22294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.241174][T22540] block nbd0: not configured, cannot reconfigure [ 653.372706][T22545] netlink: 'syz.9.4706': attribute type 1 has an invalid length. [ 653.649574][T22545] bond2: entered promiscuous mode [ 653.653281][T22545] bond2: entered allmulticast mode [ 653.656618][T22545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 653.705977][T22549] erspan1: entered allmulticast mode [ 653.754823][T22545] syz.9.4706 (22545) used obsolete PPPIOCDETACH ioctl [ 654.094773][T22294] veth0_vlan: entered promiscuous mode [ 654.208352][T22294] veth1_vlan: entered promiscuous mode [ 654.427432][ T31] audit: type=1804 audit(1791016523.570:17): pid=22567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4710" name="/newroot/100/cgroup.controllers" dev="tmpfs" ino=539 res=1 errno=0 [ 654.427640][ T31] audit: type=1800 audit(1791016523.570:18): pid=22567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4710" name="cgroup.controllers" dev="tmpfs" ino=539 res=0 errno=0 [ 654.440112][T22294] veth0_macvtap: entered promiscuous mode [ 654.466762][T22294] veth1_macvtap: entered promiscuous mode [ 654.574932][T22569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 654.609232][T22294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.655325][T22294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.655872][T22567] __nla_validate_parse: 4 callbacks suppressed [ 654.655906][T22567] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4710'. [ 654.732077][ T1158] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.755757][ T1158] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.797866][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.852383][ T6135] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.158845][ T6142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.158902][ T6142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.440361][T13929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.440382][T13929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.563540][T22590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4715'. [ 655.563580][T22590] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4715'. [ 655.563679][T22590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4715'. [ 655.933016][T22599] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4717'. [ 655.933040][T22599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4717'. [ 656.034796][T22599] tipc: Enabling of bearer rejected, failed to enable media [ 656.128580][ T13] IPVS: starting estimator thread 0... [ 656.211195][T22603] IPVS: using max 30 ests per chain, 72000 per kthread [ 657.112555][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 657.607767][T22636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4729'. [ 657.687274][T22637] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4731'. [ 657.748055][T22645] x_tables: duplicate entry at hook 1 [ 657.775704][T22645] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4734'. [ 657.776240][T22645] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4734'. [ 658.226165][T22656] netlink: 'syz.0.4746': attribute type 1 has an invalid length. [ 658.349397][T22656] bond1: entered promiscuous mode [ 658.349502][T22656] bond1: entered allmulticast mode [ 658.350316][T22656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 658.437219][T22660] erspan1: entered allmulticast mode [ 659.784631][T22690] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.797212][T22690] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.969415][T22703] netlink: 'syz.0.4744': attribute type 16 has an invalid length. [ 659.969439][T22703] netlink: 'syz.0.4744': attribute type 17 has an invalid length. [ 660.080760][T22706] __nla_validate_parse: 4 callbacks suppressed [ 660.080782][T22706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4744'. [ 660.389678][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4749'. [ 660.434501][T22703] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 660.568749][T22716] netlink: zone id is out of range [ 660.568769][T22716] netlink: zone id is out of range [ 660.568779][T22716] netlink: zone id is out of range [ 660.568788][T22716] netlink: zone id is out of range [ 660.568797][T22716] netlink: zone id is out of range [ 660.568806][T22716] netlink: zone id is out of range [ 660.568819][T22716] netlink: zone id is out of range [ 660.568828][T22716] netlink: zone id is out of range [ 660.568836][T22716] netlink: zone id is out of range [ 660.857075][T22721] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.865985][T22721] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.006786][T22725] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4760'. [ 661.024629][T22730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4750'. [ 661.092352][T22721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.098148][T22721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.441282][T16689] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.441331][T16689] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.441367][T16689] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.441401][T16689] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.694433][T22745] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4752'. [ 661.694484][T22745] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4752'. [ 661.694581][T22745] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4752'. [ 661.857156][T22749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4754'. [ 662.043105][T22756] netlink: 'syz.0.4754': attribute type 1 has an invalid length. [ 662.070029][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4755'. [ 662.093108][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4755'. [ 662.115946][T22753] netlink: 'syz.9.4755': attribute type 1 has an invalid length. [ 662.222101][ T5615] Bluetooth: hci6: command 0x0406 tx timeout [ 662.795958][T22770] block nbd0: server does not support multiple connections per device. [ 662.796664][T22770] block nbd0: shutting down sockets [ 663.574734][T22774] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 663.574760][T22774] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 663.769802][T22774] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 663.769825][T22774] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 664.046219][T22785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.092754][T22785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.417483][T22785] bond2: left promiscuous mode [ 664.417509][T22785] bond2: left allmulticast mode [ 664.418162][T22785] erspan1: left allmulticast mode [ 664.420989][ T6137] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.421020][ T6137] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.421060][ T6137] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.421085][ T6137] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.421121][ T6137] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.421146][ T6137] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.421180][ T6137] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.421203][ T6137] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.422172][T22774] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 664.422193][T22774] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 664.588566][T22774] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 664.588593][T22774] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 664.745058][T22774] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 664.745083][T22774] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 664.884417][T22774] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 664.884457][T22774] Bluetooth: hci10: Error when powering off device on rfkill (-4) [ 665.048822][T22774] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 665.048848][T22774] Bluetooth: hci11: Error when powering off device on rfkill (-4) [ 665.121208][T22774] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 665.121262][T22774] Bluetooth: hci12: Error when powering off device on rfkill (-4) [ 665.378340][T22774] Bluetooth: hci13: Opcode 0x0c1a failed: -4 [ 665.378368][T22774] Bluetooth: hci13: Error when powering off device on rfkill (-4) [ 665.574336][T22810] netlink: 'syz.7.4770': attribute type 16 has an invalid length. [ 665.574361][T22810] netlink: 'syz.7.4770': attribute type 17 has an invalid length. [ 665.685593][T22815] __nla_validate_parse: 4 callbacks suppressed [ 665.685613][T22815] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4770'. [ 665.748418][T22774] Bluetooth: hci14: Opcode 0x0c1a failed: -4 [ 665.748442][T22774] Bluetooth: hci14: Error when powering off device on rfkill (-4) [ 665.832650][T22810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.834508][T22810] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.857413][T22810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.936915][T22810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.939679][T22810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.960787][T22810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 665.960811][T22810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.964435][T22810] net_ratelimit: 1006 callbacks suppressed [ 665.964453][T22810] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 666.015437][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.015596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.052825][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.052995][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.634090][T22824] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4775'. [ 666.687530][T22824] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4775'. [ 667.252211][T22834] tipc: Enabled bearer , priority 2 [ 667.879171][T22838] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4788'. [ 667.879194][T22838] netlink: 192 bytes leftover after parsing attributes in process `syz.7.4788'. [ 667.879241][T22838] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4788'. [ 667.886456][T22837] netlink: 'syz.9.4778': attribute type 2 has an invalid length. [ 667.886480][T22837] netlink: 'syz.9.4778': attribute type 2 has an invalid length. [ 667.925564][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4777'. [ 668.017556][T22844] netlink: zone id is out of range [ 668.017572][T22844] netlink: zone id is out of range [ 668.017582][T22844] netlink: zone id is out of range [ 668.017591][T22844] netlink: zone id is out of range [ 668.017599][T22844] netlink: zone id is out of range [ 668.017608][T22844] netlink: zone id is out of range [ 668.017620][T22844] netlink: zone id is out of range [ 668.017628][T22844] netlink: zone id is out of range [ 668.017637][T22844] netlink: zone id is out of range [ 668.316869][T22840] bond_slave_0: left promiscuous mode [ 668.832680][T22840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.854280][T22840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.225730][T10998] tipc: Node number set to 3832713909 [ 669.257619][T22859] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.259564][T22859] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.365347][T16689] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.365384][T16689] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.365422][T16689] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.365447][T16689] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.365481][T16689] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.365507][T16689] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.365539][T16689] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.365564][T16689] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.850207][T22890] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4787'. [ 669.850259][T22890] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4787'. [ 669.850358][T22890] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4787'. [ 670.003462][T22892] netlink: 'syz.4.4784': attribute type 4 has an invalid length. [ 670.050961][T22894] bond0: (slave bond_slave_0): Releasing backup interface [ 670.077848][T22894] team0: Port device team_slave_0 removed [ 670.089079][T22894] team0: Port device team_slave_1 removed [ 670.105097][T22894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.107668][T22894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.174245][T22894] team0: Mode changed to "broadcast" [ 670.775258][T22918] block nbd0: server does not support multiple connections per device. [ 670.775855][T22918] block nbd0: shutting down sockets [ 670.888933][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807aeafc00: rx timeout, send abort [ 670.982996][T22919] __nla_validate_parse: 2 callbacks suppressed [ 670.983016][T22919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4795'. [ 671.233173][T22920] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 671.237588][T22920] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 671.310740][T22919] netlink: 'syz.1.4795': attribute type 1 has an invalid length. [ 671.310781][T22919] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4795'. [ 671.388986][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807aeafc00: abort rx timeout. Force session deactivation [ 671.389159][ C1] vcan0: j1939_tp_rxtimer: 0xffff888082983c00: rx timeout, send abort [ 671.760491][T22938] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4798'. [ 671.768403][T22938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4798'. [ 671.813846][T22938] netlink: 'syz.1.4798': attribute type 1 has an invalid length. [ 671.813871][T22938] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4798'. [ 671.889202][ C1] vcan0: j1939_tp_rxtimer: 0xffff888082983c00: abort rx timeout. Force session deactivation [ 671.952459][T22939] xt_CT: No such helper "snmp" [ 672.240924][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4804'. [ 673.379243][T22981] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4810'. [ 673.379268][T22981] netlink: 192 bytes leftover after parsing attributes in process `syz.9.4810'. [ 673.379323][T22981] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4810'. [ 673.551804][T22986] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4812'. [ 673.551840][T22986] net_ratelimit: 549 callbacks suppressed [ 673.551853][T22986] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 673.831829][T22997] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 674.031135][T23006] tipc: Resetting bearer [ 674.054939][T23006] bridge_slave_0: left allmulticast mode [ 674.054966][T23006] bridge_slave_0: left promiscuous mode [ 674.055181][T23006] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.117368][T23012] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 674.315949][T23006] bridge_slave_1: left allmulticast mode [ 674.315978][T23006] bridge_slave_1: left promiscuous mode [ 674.316258][T23006] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.486287][T23006] bond0: (slave bond_slave_0): Releasing backup interface [ 674.688315][T23006] team0: Port device team_slave_0 removed [ 674.746414][T23006] team0: Port device team_slave_1 removed [ 674.776063][T23006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 674.776588][T23011] team0: Mode changed to "broadcast" [ 674.943538][T23019] vlan2: entered allmulticast mode [ 674.943579][T23019] bridge_slave_0: entered allmulticast mode [ 675.082911][T11148] syz2: Port: 1 Link DOWN [ 675.405349][T23035] netlink: 'syz.4.4826': attribute type 21 has an invalid length. [ 675.423296][T23035] netlink: 'syz.4.4826': attribute type 4 has an invalid length. [ 675.423319][T23035] netlink: 'syz.4.4826': attribute type 3 has an invalid length. [ 675.604669][T23039] tipc: Resetting bearer [ 675.604999][T23039] tipc: Resetting bearer [ 676.089118][T23048] __nla_validate_parse: 8 callbacks suppressed [ 676.089155][T23048] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4828'. [ 676.089186][T23048] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4828'. [ 676.089308][T23048] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4828'. [ 676.644137][T23051] syzkaller1: entered promiscuous mode [ 676.644163][T23051] syzkaller1: entered allmulticast mode [ 676.829569][T23057] xt_CT: No such helper "snmp" [ 677.038297][T23064] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4833'. [ 677.201779][T23070] bond0: (slave bond_slave_0): Releasing backup interface [ 677.225215][T23070] bond0: (slave bond_slave_1): Releasing backup interface [ 677.261333][T23070] team0: Port device team_slave_0 removed [ 677.291684][T23070] team0: Port device team_slave_1 removed [ 677.304394][T23070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.354877][T23070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.390301][T23070] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 677.408205][T23075] team0: Mode changed to "broadcast" [ 677.554144][T23070] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4836'. [ 677.692041][ T5615] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 677.708450][ T5615] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 677.716790][ T5615] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 677.728725][ T5615] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 677.737634][ T5615] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 677.999312][T23065] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4835'. [ 678.007981][T23065] netlink: 'syz.4.4835': attribute type 16 has an invalid length. [ 678.008030][T23065] netlink: 'syz.4.4835': attribute type 17 has an invalid length. [ 678.169098][T23065] tipc: Resetting bearer [ 678.247747][T23065] macsec1: left promiscuous mode [ 678.290271][T11134] syz2: Port: 1 Link ACTIVE [ 679.343857][ T32] INFO: task syz.4.4130:19814 blocked for more than 143 seconds. [ 679.343899][ T32] Not tainted syzkaller #0 [ 679.343928][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.343954][ T32] task:syz.4.4130 state:D stack:26640 pid:19814 tgid:19811 ppid:5611 task_flags:0x400140 flags:0x00080002 [ 679.344062][ T32] Call Trace: [ 679.344087][ T32] [ 679.344101][ T32] __schedule+0x17db/0x58f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 679.344346][ T32] ? __pfx___schedule+0x10/0x10 [ 679.344416][ T32] ? schedule+0x90/0x2b0 [ 679.344480][ T32] schedule+0x164/0x2b0 [ 679.344526][ T32] schedule_preempt_disabled+0x13/0x30 [ 679.344581][ T32] __mutex_lock+0x7c1/0x1550 [ 679.344649][ T32] ? __mutex_lock+0x5d4/0x1550 [ 679.344714][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 679.344811][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 679.344883][ T32] ? net_generic+0x1e/0x240 [ 679.344937][ T32] ? net_generic+0x1e/0x240 [ 679.344984][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 679.345038][ T32] ? __kmalloc_noprof+0x36b ** replaying previous printk message ** [ 679.345038][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 679.345080][ T32] ? __asan_memset+0x22/0x50 [ 679.345134][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 679.345232][ T32] ? do_syscall_64+0x166/0x520 [ 679.345367][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.345408][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 679.345493][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 679.349371][T23102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4841'. [ 679.349393][T23102] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4841'. [ 679.349449][T23102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4841'. [ 679.349556][ T32] ? rcu_is_watching+0x16/0xb0 [ 679.349606][ T32] ? trace_kmalloc+0x2a/0xf0 [ 679.349660][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 679.349699][ T32] ? __nla_parse+0x40/0x60 [ 679.349764][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 679.349924][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 679.349992][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 679.350058][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 679.350129][ T32] ? bpf_lsm_capable+0x9/0x20 [ 679.350180][ T32] ? security_capable+0x7e/0x2c0 [ 679.350284][ T32] genl_rcv_msg+0x614/0x7a0 [ 679.350355][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.350641][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 679.350717][ T32] netlink_rcv_skb+0x226/0x4a0 [ 679.350772][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.350814][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 679.350880][ T32] ? down_read+0x2be/0x330 [ 679.350935][ T32] genl_rcv+0x28/0x40 [ 679.350974][ T32] netlink_unicast+0x7bd/0x940 [ 679.351106][ T32] netlink_sendmsg+0x813/0xb40 [ 679.351167][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.351211][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 679.351361][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.351396][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 679.351473][ T32] ____sys_sendmsg+0x54e/0x850 [ 679.351566][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.351633][ T32] ? import_iovec+0x73/0xa0 [ 679.358212][ T32] ___sys_sendmsg+0x2a5/0x360 [ 679.358280][ T32] ? __lock_acquire+0x747/0x2de0 [ 679.358341][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.358387][ T32] ? futex_wait+0x2a2/0x390 [ 679.358486][ T32] ? __fget_files+0x2a/0x420 [ 679.358539][ T32] ? __fget_files+0x3a2/0x420 [ 679.358607][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 679.358668][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 679.358748][ T32] do_syscall_64+0x166/0x520 [ 679.358802][ T32] ? trace_irq_disable+0x3b/0x140 [ 679.358837][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.358873][ T32] ? clear_bhb_loop+0x70/0xc0 [ 679.358927][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.358973][ T32] RIP: 0033:0x7f6729b9e159 [ 679.359026][ T32] RSP: 002b:00007f672aa94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.359064][ T32] RAX: ffffffffffffffda RBX: 00007f6729e25fa0 RCX: 00007f6729b9e159 [ 679.359095][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 679.359109][ T32] RBP: 00007f6729c3506b R08: 0000000000000000 R09: 0000000000000000 [ 679.359138][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.359166][ T32] R13: 00007f6729e26038 R14: 00007f6729e25fa0 R15: 00007fffb1545a88 [ 679.359230][ T32] [ 679.359255][ T32] INFO: task syz.2.4171:19949 blocked for more than 143 seconds. [ 679.359271][ T32] Not tainted syzkaller #0 [ 679.359297][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.359328][ T32] task:syz.2.4171 state:D stack:27208 pid:19949 tgid:19948 ppid:5613 task_flags:0x400040 flags:0x00080002 [ 679.359425][ T32] Call Trace: [ 679.359432][ T32] [ 679.359460][ T32] __schedule+0x17db/0x58f0 [ 679.362908][ T32] ? kasan_save_track+0x3e/0x80 [ 679.362963][ T32] ? __alloc_skb+0x2c1/0x7a0 [ 679.363090][ T32] ? genl_family_rcv_msg_doit+0x233/0x340 [ 679.363133][ T32] ? genl_rcv_msg+0x614/0x7a0 [ 679.363192][ T32] ? __pfx___schedule+0x10/0x10 [ 679.363257][ T32] ? schedule+0x90/0x2b0 [ 679.363303][ T32] schedule+0x164/0x2b0 [ 679.363355][ T32] schedule_preempt_disabled+0x13/0x30 [ 679.363394][ T32] __mutex_lock+0x7c1/0x1550 [ 679.367591][ T32] ? __mutex_lock+0x5d4/0x1550 [ 679.367650][ T32] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 679.367760][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 679.367821][ T32] ? __nlmsg_put+0xef/0x1b0 [ 679.367882][ T32] ? genlmsg_put+0x137/0x2e0 [ 679.367941][ T32] nfsd_nl_version_get_doit+0x17c/0xd20 [ 679.368006][ T32] ? __nla_parse+0x40/0x60 [ 679.368049][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 679.368105][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 679.368147][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 679.368211][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 679.368275][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 679.368346][ T32] ? __lock_acquire+0x747/0x2de0 [ 679.368408][ T32] genl_rcv_msg+0x614/0x7a0 [ 679.368470][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.368510][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 679.368594][ T32] netlink_rcv_skb+0x226/0x4a0 [ 679.368632][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.368674][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 679.368739][ T32] ? down_read+0x2be/0x330 [ 679.368794][ T32] genl_rcv+0x28/0x40 [ 679.368834][ T32] netlink_unicast+0x7bd/0x940 [ 679.368904][ T32] netlink_sendmsg+0x813/0xb40 [ 679.368963][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.369023][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 679.369064][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.369100][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 679.369154][ T32] ____sys_sendmsg+0x54e/0x850 [ 679.369202][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.369264][ T32] ? import_iovec+0x73/0xa0 [ 679.369329][ T32] ___sys_sendmsg+0x2a5/0x360 [ 679.369385][ T32] ? __lock_acquire+0x747/0x2de0 [ 679.369426][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.369485][ T32] ? futex_wait+0x2a2/0x390 [ 679.369590][ T32] ? __fget_files+0x2a/0x420 [ 679.377119][ T32] ? __fget_files+0x3a2/0x420 [ 679.377194][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 679.377254][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 679.377353][ T32] do_syscall_64+0x166/0x520 [ 679.377411][ T32] ? trace_irq_disable+0x3b/0x140 [ 679.377447][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.377483][ T32] ? clear_bhb_loop+0x70/0xc0 [ 679.377523][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.377573][ T32] RIP: 0033:0x7fd2fd99e159 [ 679.377606][ T32] RSP: 002b:00007fd2fe8ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.377644][ T32] RAX: ffffffffffffffda RBX: 00007fd2fdc25fa0 RCX: 00007fd2fd99e159 [ 679.377675][ T32] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 679.377688][ T32] RBP: 00007fd2fda3506b R08: 0000000000000000 R09: 0000000000000000 [ 679.377716][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.377744][ T32] R13: 00007fd2fdc26038 R14: 00007fd2fdc25fa0 R15: 00007ffd135e1918 [ 679.377806][ T32] [ 679.377817][ T32] INFO: task syz.1.4179:19983 blocked for more than 143 seconds. [ 679.377847][ T32] Not tainted syzkaller #0 [ 679.377873][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.377883][ T32] task:syz.1.4179 state:D stack:27128 pid:19983 tgid:19982 ppid:5610 task_flags:0x400140 flags:0x00080002 [ 679.377981][ T32] Call Trace: [ 679.378003][ T32] [ 679.378016][ T32] __schedule+0x17db/0x58f0 [ 679.378112][ T32] ? __pfx___schedule+0x10/0x10 [ 679.378178][ T32] ? schedule+0x90/0x2b0 [ 679.378239][ T32] schedule+0x164/0x2b0 [ 679.378297][ T32] schedule_preempt_disabled+0x13/0x30 [ 679.378343][ T32] __mutex_lock+0x7c1/0x1550 [ 679.378402][ T32] ? __mutex_lock+0x5d4/0x1550 [ 679.378465][ T32] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 679.378525][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 679.378591][ T32] ? net_generic+0x1e/0x240 [ 679.378628][ T32] ? net_generic+0x1e/0x240 [ 679.378672][ T32] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 679.378724][ T32] ? __kmalloc_noprof+0x36b/0x720 [ 679.378765][ T32] ? __asan_memset+0x22/0x50 [ 679.378800][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 679.378853][ T32] ? do_syscall_64+0x166/0x520 [ 679.378895][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.378932][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 679.378999][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 679.379082][ T32] ? rcu_is_watching+0x16/0xb0 [ 679.386464][ T32] ? trace_kmalloc+0x2a/0xf0 [ 679.386524][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 679.386563][ T32] ? __nla_parse+0x40/0x60 [ 679.386625][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 679.386667][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 679.386728][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 679.386792][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 679.386861][ T32] ? bpf_lsm_capable+0x9/0x20 [ 679.386895][ T32] ? security_capable+0x7e/0x2c0 [ 679.386956][ T32] genl_rcv_msg+0x614/0x7a0 [ 679.387018][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.387059][ T32] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 679.387143][ T32] netlink_rcv_skb+0x226/0x4a0 [ 679.387180][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.387223][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 679.387289][ T32] ? down_read+0x2be/0x330 [ 679.387348][ T32] genl_rcv+0x28/0x40 [ 679.387387][ T32] netlink_unicast+0x7bd/0x940 [ 679.387453][ T32] netlink_sendmsg+0x813/0xb40 [ 679.387514][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.387574][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 679.387615][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.387650][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 679.387704][ T32] ____sys_sendmsg+0x54e/0x850 [ 679.387767][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.387833][ T32] ? import_iovec+0x73/0xa0 [ 679.387879][ T32] ___sys_sendmsg+0x2a5/0x360 [ 679.387931][ T32] ? __lock_acquire+0x747/0x2de0 [ 679.387973][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.388033][ T32] ? futex_wait+0x2a2/0x390 [ 679.388137][ T32] ? __fget_files+0x2a/0x420 [ 679.388193][ T32] ? __fget_files+0x3a2/0x420 [ 679.388260][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 679.388305][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 679.388393][ T32] do_syscall_64+0x166/0x520 [ 679.388436][ T32] ? trace_irq_disable+0x3b/0x140 [ 679.393386][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.393440][ T32] ? clear_bhb_loop+0x70/0xc0 [ 679.393482][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.393532][ T32] RIP: 0033:0x7f7d3079e159 [ 679.393570][ T32] RSP: 002b:00007f7d315ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.393607][ T32] RAX: ffffffffffffffda RBX: 00007f7d30a25fa0 RCX: 00007f7d3079e159 [ 679.393638][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 679.393667][ T32] RBP: 00007f7d3083506b R08: 0000000000000000 R09: 0000000000000000 [ 679.393681][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.393707][ T32] R13: 00007f7d30a26038 R14: 00007f7d30a25fa0 R15: 00007ffdf175c218 [ 679.393770][ T32] [ 679.394191][ T32] [ 679.394191][ T32] Showing all locks held in the system: [ 679.394204][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 679.394235][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 679.394353][ T32] #1: ffffffff9ad312d8 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 679.394554][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 679.394584][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 679.394721][ T32] locks held by klogd/4972: 1, last CPU#0: [ 679.394750][ T32] #0: ffff88803591ccc0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 679.394848][ T32] locks held by getty/5368: 2, on CPU#1: [ 679.394876][ T32] #0: ffff8880359bc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 679.395042][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 679.395175][ T32] locks held by udevd/18562: 1, on CPU#0: [ 679.395205][ T32] #0: ffff88802787e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 679.395338][ T32] locks held by syz.0.4091/19624: 2, on CPU#0: [ 679.395369][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 679.395449][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 679.401671][ T32] locks held by syz.4.4130/19814: 2, on CPU#1: [ 679.401701][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 679.401799][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 679.401898][ T32] locks held by syz.2.4171/19949: 2, on CPU#0: [ 679.401927][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 679.402022][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 679.402102][ T32] locks held by syz.1.4179/19983: 2, on CPU#1: [ 679.402132][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 679.402224][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 679.402350][ T32] locks held by syz.7.4272/20548: 3, on CPU#1: [ 679.402364][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 679.402460][ T32] #1: ffff88805287a6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 679.402555][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 679.402653][ T32] locks held by syz.8.4346/20821: 2, on CPU#1: [ 679.402683][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 679.415762][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 679.415881][ T32] locks held by syz-executor/20883: 4, last CPU#0: [ 679.415896][ T32] #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 679.415994][ T32] #1: ffff88807cd95900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 679.416093][ T32] #2: ffff88804d51b440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 679.416212][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 679.416317][ T32] locks held by syz.6.4393/21033: 2, on CPU#1: [ 679.416347][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 679.423124][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 679.423233][ T32] locks held by syz.5.4424/21171: 2, on CPU#1: [ 679.423264][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 679.423365][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 679.423467][ T32] locks held by syz.3.4466/21459: 3, on CPU#1: [ 679.423496][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 679.423590][ T32] #1: ffff88804f70a6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 679.423681][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 679.423781][ T32] locks held by syz.2.4581/22076: 2, on CPU#1: [ 679.423795][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 679.423890][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 679.423989][ T32] locks held by syz.0.4754/22751: 2, on CPU#1: [ 679.424018][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 679.424111][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 679.424209][ T32] locks held by syz.4.4835/23063: 1, last CPU#0: [ 679.424239][ T32] #0: ffffffff90246248 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 679.424418][ T32] locks held by syz-executor/23079: 5, last CPU#1: [ 679.424449][ T32] #0: ffffffff90246248 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 679.424541][ T32] #1: ffffffff8ffa1768 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 679.424677][ T32] #2: ffffffff8ffa1928 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 679.424770][ T32] #3: ffff88808d129020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 679.424863][ T32] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 679.424958][ T32] locks held by syz.1.4841/23101: 1, last CPU#0: [ 679.424972][ T32] #0: ffffffff8ed9cb10 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x28ff/0x4400 [ 679.425068][ T32] locks held by syz.1.4841/23102: 2, last CPU#1: [ 679.425097][ T32] #0: ffff888079d718e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 679.443160][ T32] #1: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 679.443322][ T32] [ 679.443343][ T32] ============================================= [ 679.443343][ T32] [ 679.443375][ T32] NMI backtrace for cpu 0 [ 679.443400][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 679.443421][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.443433][ T32] Call Trace: [ 679.443441][ T32] [ 679.443450][ T32] dump_stack_lvl+0xe8/0x150 [ 679.443479][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 679.443539][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 679.443571][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 679.443598][ T32] sys_info+0x135/0x170 [ 679.443619][ T32] watchdog+0xfd7/0x1030 [ 679.443645][ T32] ? watchdog+0x1c7/0x1030 [ 679.443672][ T32] kthread+0x38b/0x480 [ 679.443691][ T32] ? __pfx_watchdog+0x10/0x10 [ 679.443708][ T32] ? __pfx_kthread+0x10/0x10 [ 679.443727][ T32] ret_from_fork+0x514/0xb70 [ 679.443757][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 679.443785][ T32] ? __switch_to+0xc89/0x1420 [ 679.443814][ T32] ? __pfx_kthread+0x10/0x10 [ 679.443833][ T32] ret_from_fork_asm+0x1a/0x30 [ 679.443875][ T32] [ 679.443948][ T32] Sending NMI from CPU 0 to CPUs 1: [ 679.444055][ C1] NMI backtrace for cpu 1 [ 679.444071][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 679.444093][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.444104][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 679.444130][ C1] Code: e8 fe 82 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 7e 75 06 cc 44 89 f9 80 e1 07 [ 679.444147][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 679.444165][ C1] RAX: 1ffffffff35a6200 RBX: 00000000000003fd RCX: 0000000000000000 [ 679.444179][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 679.444192][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 679.444205][ C1] R10: dffffc0000000000 R11: ffffffff85736ac0 R12: dffffc0000000000 [ 679.444221][ C1] R13: 0000000000000000 R14: ffffffff9ad31300 R15: 0000000000000000 [ 679.444234][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 679.444250][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.444264][ C1] CR2: 000000110c28161e CR3: 0000000081a18000 CR4: 00000000003526f0 [ 679.444282][ C1] Call Trace: [ 679.444289][ C1] [ 679.444299][ C1] wait_for_lsr+0x184/0x2f0 [ 679.444321][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 679.444354][ C1] serial8250_console_write+0xaa1/0x1200 [ 679.444381][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 679.444402][ C1] ? __schedule+0x17f1/0x58f0 [ 679.444436][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 679.444467][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 679.444492][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 679.444522][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 679.444581][ C1] nbcon_kthread_func+0x679/0x880 [ 679.444605][ C1] ? nbcon_kthread_func+0x163/0x880 [ 679.444625][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 679.444649][ C1] ? __kthread_parkme+0x71/0x1f0 [ 679.444676][ C1] ? __kthread_parkme+0x199/0x1f0 [ 679.444704][ C1] kthread+0x38b/0x480 [ 679.444723][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 679.444741][ C1] ? __pfx_kthread+0x10/0x10 [ 679.444759][ C1] ret_from_fork+0x514/0xb70 [ 679.444789][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 679.444822][ C1] ? __switch_to+0xc89/0x1420 [ 679.444848][ C1] ? __pfx_kthread+0x10/0x10 [ 679.444866][ C1] ret_from_fork_asm+0x1a/0x30 [ 679.444901][ C1] [ 679.462364][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 681.461811][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 681.470914][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 681.480959][ T32] Call Trace: [ 681.484229][ T32] [ 681.487161][ T32] vpanic+0x56d/0xa60 [ 681.491164][ T32] ? __pfx___schedule+0x10/0x10 [ 681.496025][ T32] ? __pfx_vpanic+0x10/0x10 [ 681.500537][ T32] panic+0xc5/0xd0 [ 681.504257][ T32] ? __pfx_panic+0x10/0x10 [ 681.508668][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 681.514121][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 681.519571][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 681.525717][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 681.531864][ T32] watchdog+0x1030/0x1030 [ 681.536188][ T32] ? watchdog+0x1c7/0x1030 [ 681.540600][ T32] kthread+0x38b/0x480 [ 681.544658][ T32] ? __pfx_watchdog+0x10/0x10 [ 681.549322][ T32] ? __pfx_kthread+0x10/0x10 [ 681.553901][ T32] ret_from_fork+0x514/0xb70 [ 681.558490][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 681.563594][ T32] ? __switch_to+0xc89/0x1420 [ 681.568268][ T32] ? __pfx_kthread+0x10/0x10 [ 681.572850][ T32] ret_from_fork_asm+0x1a/0x30 [ 681.577623][ T32] [ 681.580897][ T32] Kernel Offset: disabled [ 681.585216][ T32] Rebooting in 86400 seconds..