last executing test programs: 31.775496352s ago: executing program 0 (id=1299): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0xa) (async) r2 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140d, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c5}, 0x14004) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) (async) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 31.709703031s ago: executing program 1 (id=1300): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x23}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@multicast2, @empty}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040)=""/42, 0x2a, 0x36, 0x9}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 31.561399453s ago: executing program 2 (id=1303): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000400)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}], 0x18, 0x8000}, 0x2800c051) r1 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 31.498502646s ago: executing program 1 (id=1304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) (async) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) (async) poll(&(0x7f0000000140)=[{r1, 0x1}], 0x1, 0x800) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 31.328187404s ago: executing program 2 (id=1306): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)}}, {{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r5, 0x3}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e1a90e26", @ANYRES16=r8, @ANYBLOB="010000000000fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20048041}, 0x110) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4e, 0x0, 0x0, 0x1}, 0x20) (async) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async) connect$rose(r9, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'pim6reg1\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x1, [{0x100, 0x4}]}}) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'veth0_to_hsr\x00', &(0x7f0000000240)=@ethtool_ringparam={0x10, 0x9, 0x3, 0x400, 0xc516, 0x10001, 0xff, 0x5, 0x8}}) (async) ioctl(r1, 0x3, &(0x7f00000009c0)="79fc18ae750baef0c74660b305a417f960d079552484b5afd8a9b72349b3705fb8b195307e3518bd8e8d5f718be6ce66663aee471f93e49b284c1c48dc42f50ba11b0889cf2558b64560d14e51d4fea2f4c5fca5757149c90eec07ea561f2d3c3132ec4b0d63f0eea40de0d76895b4bc18d58150863949ddeab5bee10aee5df7e37c6135982f508a9869fa7cd553b3ae7d48881d91d655dac7b2ee1ba71ed78e82e054393051b68bb6e6c496a72aeee47e2e290706e73bff6ec4b9aa5240c4cef79889728f414be653b5d14f3c29c9b4771cd8a42e81d1067da62b716530488393963164c22256ffa850df03995dddd5edb0b719eb3fb0d2533aa17d907a174dd6f409bbc58c7b9e1da5d54cff5f4f68caf71439d28d81fd5ce1422d48e3030c74a0ebca9280a5e689c1bd7650d3396d99939dc851d2717c2f1ac4f6f50f777c2c51006ed8fffb09755465d81b53190b44e959afe95d0c76c6453571282c7c600e87b8007d65dc518aa781b406b3d1d004e5649be1e20c78a5ba084e5e1d372c88a07d997e1c6dbc652d7cd0b427852d76fc50e4ab36f733e93407647a762dfe61cefd4a6ed290c2623f83b0843f3bb422e485cf50e86f054870c91bedd2d713eed8536a5360d7cc2395b85b7f832eec01fb1861c2ef1444f7a35b91cb22c175df8e8b697ad140fbcd47dfe90509be1cb973694cca6682d1653950450effdc20005292dd610576f658e4d2a0c4bbc7628681e58482f3b3529cc811fc6f64bcf9370dc4b379167e78ea2ee8be28e0e563d3b11246d5e5bfd3b4dd6dfe3c7a4a34807eb745045f362de0bfab2e4fd5ee61bdeabf5f2daaadf2c9ed136b64f9ea92085c98cfba984dd4bc26f83a164025dd3188dddc853214b5fb42caca6777138a829915e3d0f99f9a05052c93342d849d6676e79c2c62b7950882755812a93327487f861f0903ec3d94bb835838781822c35d7372bbb79c9fae6a29d9d0b17b6de60f2f933241d71312294732b0a28ff0e97029d9a49d3dc181e177c349dc7a12696230b190137aacadf11f30e57ed13fbe68ac1d40cfac08adbb628708dc9741fd0ead9a9d80f138b729cff86ffce45b4e295a98c49c05e5ba118e24e18989bffa0ff475c6cdda06086e174e263818331610b1f2354a1cfb1f16a04eef716379f90415d4682ce4672494e0075b194f37e53798a385b4328a68823c3ba96723c556c7a585eba948ca979e3912cbb361b48a1c966a5c3c95aab6ff53411e1a4d997d1d53705c2b189e76b8b81b9da1e5ad1e1f6166b64276ceb5cafc21a2aca9b1ee67e5c09c286c2ce96e5a90ac2cb47810a22e707d167ab282c92cab84b5d927a97b5df0d798092646301e308da28180524bab10763fb97dce1b77a64fe7ce17906609a7f51159a3effdb22bebce09f10eb947dce7874763e1b5559aa7137c320dbbb21aefd0920f47316ce6c64391ba2583ddfd820d853aa98144bdcb4710d333a194adf99b68287a726c0da70f758aba1370b664da12d1aa6400e271e7aef8c2a1792bc47645e943feffa657ad8d1dec6350df3aebfd49a075daee063839508a7714f9a8fcaa8a6e3a2201f770c9a9463c4c28789ffce593a99ba97687ad98c24ed00f80dab480d89ebe7c22047d204a8f6328551bffcd7be4b6f495e7d5652cd66566c6ec6f568e60f84bf7900e679baec6126a491a3519fddabe8996bfbdd4a872e909caea37d97b0442ecaa920ab08657e323ec4d046811fa86a7a02c041a672f7b0a15d9bf82faaeacd3d485358d78033609aca661256455c5d41ff5527195d951dfd4c4db1e640d8e13c0353f8f812d6dd28c6f4179710a3c9742b178ca54170f3e5a209864f0b3f4605a37fa435c7a384b365dea09f236b5ea2221dfedebc401cadf86c0c2ca95e56142276c606ebeb9fb707ef3a5a5850783eeef8b2b99fdee602c24b573706d4aebeb948879e410d995ade1649cfd5e048a8030c4b93ab112f652a60453aaf8c1e28fbbc3a9734006599dd6d49679ecaded867d77246064cc543a8223625ceb120ee51fba9cc479ea1af877d7d8cb9ca1b21a56642f4133b2bbb214b2d4530fa572eb4b49da6a12cf269e75a0362dbd235c3a430f2703f6b30e3b8bc4bc212c98278c4e4b237bcee5bd80e48e897e1c51597d85749c73399f5e75d890d07ff501f1899706f59f0656675a8747a44b109243ede8dfbaed720505dbb2b67198a197de19c203c375658d4ff8d7efb3dc9603dc2e72c8604c04704aa4d94ce7bc1d2184f314309834c7ac881142687518653cf8dd7434281288ae8a8d7fc524118b4c4b14a8140e099780fbe666cd36b82e3991fbbec72a0e920974fed55cd7080b0613000bead72af116ec08245069538d69a990877d64229e057c9f8619d2961f445b7ba36ada74409eb7528423983c4bf24a4835a932b1bd22e6c583e511fbcc93127bc49ca07b69ab51b797a75b6ffd862d1f840d97aa7a93aadb1e4e3ff5a9df27da5a8e9f8b2c4ccf0d0907a87215c280fdf17a2189e294d22dd773ef82ca13e268e520226385a3e878abf28daa3e7f98b0466baf67890f21529160c3a98efd3cd5f7986512d095f252df1bc86c1f49380b1ddc6bf2f070a228b75aea62896ad76264004163820d1cf106ffb13d81f2407a4685c67285a7804dec61cc83a678fc2e1c04b656805a3afacef9372f4e238efc8c72692519d6da1c7ecbbdeaad8e93c9f60124a546dd40d2e9df4e0dbef52935dff9d69c2bbbf573c8e61afe38eeabd1fde8eb23dc9a76fb932cbf589ea2324a06cf04d863a0cadb07f894068636ddded1af8e428a53cfc82a1fe270ff571442407dd7528d5ffef7bceb515331df15e9e32d80d8b1d43080afb5c72ca29665a4527eee0357808751306b63938424a79fb88e3e9a74fd8d4905b03e8b237c2e38cc156255154056fc2a7f469d4fb16be3fa20d6c136afae96f3c88d80cceb3780e51f9c5cc5ded17d179c3df40446d58656415839d8aef087b741d906b3e2e75cd601737a03e083f581d67fa73f727cd7803b25ccc8ed01089591addc15ea65e40dd7f1295b8535edb04092d8c62c3c510050e7ceb268ceb10b32a754ed89bd0692574e281590811a1ed09c6b2f43e93d66782d9d48b4cd38db3dfe7f3a31cc200525fa74d26628f5c1b83e4aa4e9b7db5e15d99b585e8631a93eb0c23f18329ba6fbbd204bff51a5240228ee7713571f2d17a8c8687a682248253edfbcdb709d6647501fde2d74b79a814ce770fe12090f2cf32fa20ed20b75c9a8ae86cf6cdd49ea40fbbc5ac2112e17ab0b1e36f8f2d46d90cc0167f8eda386ef43237dd0eff092cb5155e18acce433bd3660f3c5910e85aac8a995ecda84bf0f52b78444c70078ca3aceaadbc8faa6c3a31a954acd7df964f81eeb592ee80f81bd27d823c3432fa3aedbe9409368583b3bd952bf5d7d73e9c2be4ed8150979acb121ff38592e6b43d83f5591860bf69431bec5eb2106d4bbd03631818819d00e1d5e6fbd30c22ceab344c902ba9aa8c1a5f8375fe924bc7b7bce0c60f6eff8e78c6d33e6434ec73af272327b05fc67285d51d3e2289dcba004fe8bd13b857210e6e3a049371803b3d4845eed3109622377ce68ac6e85526b2cb9542807e359daea8aa34918d9130556cf6ceada0309cf2ee563ae3d8cd72ccb4e8c23ed301188ab6332783870acbf1e2c005fb4d9f5d920233966b31c716a7c2585613982ac5f5fcdc5981710fd89014930e71c46e85394775f24fc553f133e385bf4e1783932e72048ce17e2e04f7a3974e884ae2eadd16e92bb1ee319f1da5e8980345bf6d9072611d2a57c19cfafa190ccefb1466db1f8f7858e9a87a41b8730dd48c8e4fc4813a622c2237a4ebeb1ba26035e98784e90da473e6ce7f9b3a145d1974c4885d68f5e1b6cc016e5d70004f9113781d0aeb9aa85e6943696ed5b40e48637a4bb16e70ed97480ebf4b59580a5f00c21de3f2acddeafb046a0fc895297c96f07e25ea89a88b29480c63d93e149e9bf22a47fd4417ea72db2ae5db5569e9418b4cc0e4718ff54394af878caa03247ef5900ffbfba52a650187428989422a7d917d596fb94d6cdfb6d9048aa993dfcbbce93d05edfcfa744032c2b101c3c5ce5ee97d963e43c6de6963acf99fa6c23f82444501d183aa38472ac51e231628c0a9d72d14e3f81acb0af6b47bbe8566467182d39fbeca2e12a26e279448d6b50afc19925363cbe860765c272c663f8d8ef8b8817de5e73a0bb88726ca90be90f13df569f26b49d8a6e0f96d59de1d839f087835f294fbb99e0aad8a426d919038ae332f2aef103b351d70fd643ecc7f07cccd57adcd330e0493bbc2be71608bfc11a3f3cafe7fda0db9bfae5c58b0c317230addb950883ad6e0ffb954af3d839e1a7ae12b2ba85cd6f68a52090305b9afb41111de129419c20d94ef7039cdbb8baff40e3a008f26ba904edf98686c52c0afd8ea3ffa8025c1f67994a9cd3a1205696b91e73a7f8a8bb495afc98faf64066b51d7c3d1121c9451361895cbce89d3480d0a7839551aa4f4491d85141e63b81e4be950ab4f39e1d1a2c90cc1d22d910c778fbff9404b2dfb4272baa2baab138025510845a3814c51aa3faceba4470112172a85fac7656800b02ace1928f973dc0b0c431e2d281a460eaf45f1d153430ca8faa70fcf438b2b05a7934f2c9cb49f8952ae934809e3af6f39606203490d57914e921fe95535a97f96ee50e1a67573969cf17f6266a88d54e9b2b96235879f7063c39b07544c354e7fc9944050fbab25568bd37a01a030655006175b7923fb757f82cbb9ec188148fe377a98de7da993f6ab17eb8a2b24a00764b1d503433ec5b373e885a96dce6a52c2ce6bd6043fb158d5ff24f265b69a71052368e0ef432c365943c665b133e8b2b298f04d7f734808f62d63ca1c3c46c296c74e8bf52577bba29e181ef0bad63d72a091adea8a497d6dacf3c49b60cdf3747e68890a0cfdcb9f4c0c81faa00ea3df53bdd3c95567290c19a50fbc92d5ce5de431e9a35b091ff04b38e82310fa7a6ddb5827d4c5d048b9712dd1f5e95299e079f42798ce21dcb67a8ba8703fc69baf9fef8241c5d91f348959f51dbcd04a379ce1d2d47add98f83b48195791eaaec7d04d014e0fd56308bf54955ee9cf80dd6b2478ff3eda50359c0ebf2f213dc99ec2965345f143233cc5c9be7fc453f76fa80694f0219d5ee52af1f943dac2fc501584fc264e1c8f040c135c9a6d87bef20041f9f08f20ec748e5bfbf8e008a3841add18a500650a58ed6d9863461358fc80547bed7371820985541e5a5b0bef2b032a0f2bce1fa7a622c3ea156a5f800aacb2a707461c20a7ed377f793110877323e26ee45bd4c19cb168a0e330c8946f9ddd912bd65fef52613459f3f5a05ad26c47e9f7ef3469cb4f852ab9c5da074c3008f9344c458041f9cc5bdd386c0d3cab1507b7be1f2a2269fbd80a2a7f638753d6f0a468f06f1a0beeb205cde79e53509665beef8720a72553526f564130909933800df70a8c72c802dfc0548162c009f7e908888178e38d95f25e9e5a9e2b921ba3bae73fe533261aff57ff5b3258414e7c0886be9ece57819a8698c485b5c25b1c9b96b1d02a1b606f91d8dd414332614da525d5acbffe9ffc3c5e400ecadf9401042a7ff7c612d97619bc444ad3956ed225716a1ca9f50f8f330a62609100067d4df18193902bdc21a87fbd224e6682c6e6c89ef22fccdf9d3603a225badc14d1b210923e15531719d4cbf") (async) syz_genetlink_get_family_id$nl80211(0x0, r10) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r10, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) read(r0, &(0x7f0000000300)=""/102, 0x66) 31.120580918s ago: executing program 1 (id=1308): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xbbb, 0x0, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000001d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-010d \x00'}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x101, 0x10}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r10) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r12}, &(0x7f00000003c0), &(0x7f0000000080)=r10}, 0x20) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x7, 0x8}, 0xc) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x4, 0x6, 0x1ff, 0x4000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x7}, 0x50) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xfffffffd, 0x3, 0x7, 0x15a179108c1cabde, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x3, 0x0, 0xb, 0xb, 0x18, 0xfffffffffffffff0}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x4, 0x9, 0x2, 0xfffffffffffffff0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7fffffff, 0xa8, &(0x7f0000000340)=""/168, 0x41100, 0x1, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xd, 0x9, 0x9a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r5, r6, r7, r9, r12, r13, r14, r15], 0x0, 0x10, 0x1}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1402, 0x1, 0x70bd2c, 0x25dfdc04, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 31.119442741s ago: executing program 0 (id=1310): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x270, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f0000009500000000000000cd8b73c696ba1b436e0e58f1667feb26f7e87c9a62e9b1641029151fb77b34066fc1c54728a7bdafea6f6e44648e2266b89614354ddb801fa86d7b07685f59bf177c0d7f07d5f9fd703d4cc49098e5045fa6329b7e58730661aa171439d6ad4ac3daa168489d448826366429c891d362d3aa0b0cbb13ce09126134e8fa899b9da850c7f2b4fc22bd2924be58687d2ff97645848744a556f1ab1e4051c32a3e94509aba84aeba2424dd8c88cce6a0da772ac27b705a10c959b556927bdcd718c6f4790f8bb1835421521a7ba6b2ebf4c66d0b305acb1bcedca9d5a93c63b09b3671ceaa80f943e08846347e568a8f374528e710fc68012535b31985973a76ddc403922027169a4d0e8c333639a5a06c86dd3bb1e0e62bc7cf1d5b81de2b82039b098e6c706b3fed76c1bf3d17f446906a"], &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) 31.11163888s ago: executing program 2 (id=1311): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000200)="a0d5bbd09bf7", 0x6, 0x8084, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @local}, 0x14) (async) sendto$packet(r2, &(0x7f0000000200)="a0d5bbd09bf7", 0x6, 0x8084, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000080)={0x3, 0x67}) (async) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000080)={0x3, 0x67}) 30.967800231s ago: executing program 1 (id=1312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, &(0x7f00000003c0)=0x3d49) read$alg(r2, &(0x7f0000000140)=""/116, 0x74) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0x39, [0x2, 0xfffffffffb4ca7bb, 0x7fffffffffffffff, 0x4, 0x1, 0x3], 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/57}, &(0x7f0000000280)=0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000440)="c67f0d7df9", 0x5}], 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600", @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 30.900625296s ago: executing program 0 (id=1313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x184}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg1\x00'}) socket$netlink(0x10, 0x3, 0x13) 30.809566067s ago: executing program 2 (id=1315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020057cece192e1e3b3d0cf5da000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x100, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000801}, 0x40804) (async) close(r4) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) (async) listen(r7, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="061808810142ea6048f9001500070000000c00168008000100", @ANYRES8=r2], 0x38}}, 0x0) (async) shutdown(r0, 0x1) 30.612481024s ago: executing program 0 (id=1317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) r2 = socket(0x1d, 0x4, 0x1) (async) r3 = accept$alg(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/223, 0xdf}], 0x1}}], 0x2, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r4, 0x1, 0x27, 0x0, &(0x7f0000000080)) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="82240249300d00"], 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x24, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffbff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x9, '\x00', r7, 0x25, r8, 0x8, &(0x7f00000004c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x5, 0x401, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 30.611341419s ago: executing program 1 (id=1318): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000580)=0x8) r1 = socket$caif_stream(0x25, 0x1, 0x0) connect$caif(r1, &(0x7f0000001780)=@util={0x25, "8c3778e2a2253b827d46e5f207b62408"}, 0xa) r2 = socket(0x25, 0x1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000040000000000000000000007110ad000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000580)=0x8) (async) socket$caif_stream(0x25, 0x1, 0x0) (async) connect$caif(r1, &(0x7f0000001780)=@util={0x25, "8c3778e2a2253b827d46e5f207b62408"}, 0xa) (async) socket(0x25, 0x1, 0x0) (async) close(r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000040000000000000000000007110ad000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 30.488326555s ago: executing program 2 (id=1319): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r6, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {}, {0x1, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x1) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@mpls_delroute={0x3c, 0x19, 0x400, 0x70bd25, 0x25dfdbff, {0x1c, 0x20, 0x10, 0xbc, 0xff, 0x3, 0x0, 0xb, 0x100}, [@RTA_VIA={0x14, 0x12, {0x5, "21867635b36ba3bffe6bea0e975b"}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x0, 0x8, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc810) 30.461881848s ago: executing program 0 (id=1320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x2}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x4a, 0x0, 0x1, 0x2}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x54, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES8=r2, @ANYRESOCT=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x45044) 30.19231086s ago: executing program 1 (id=1322): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000005, 0x80010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r2, &(0x7f00000000c0)="1900", 0xfffffffffffffff2, 0xd63a66976f7dfbe0, 0x0, 0x0) 29.621763341s ago: executing program 32 (id=1322): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000005, 0x80010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r2, &(0x7f00000000c0)="1900", 0xfffffffffffffff2, 0xd63a66976f7dfbe0, 0x0, 0x0) 29.611944982s ago: executing program 0 (id=1324): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x15c, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x14c, 0x117, 0x0, 0x1, [@typed={0x65, 0x19, 0x0, 0x0, @binary="0d91052373462ceaca63e9944a190cae3f4836f2da4a4e15eda6a6edaaeb3d0478c6d0c5e86c1f9c5614d8c1893d970a637173c8614cfcaae6fd0bfbf412f066b54acf7219aded4c71e6e3bcd8ff2d2be7f9919af67ab341f32230df5a80fc70dd"}, @generic, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x15c}], 0x1, 0x0, 0x0, 0x1}, 0x40000) 29.609921679s ago: executing program 33 (id=1324): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x15c, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x14c, 0x117, 0x0, 0x1, [@typed={0x65, 0x19, 0x0, 0x0, @binary="0d91052373462ceaca63e9944a190cae3f4836f2da4a4e15eda6a6edaaeb3d0478c6d0c5e86c1f9c5614d8c1893d970a637173c8614cfcaae6fd0bfbf412f066b54acf7219aded4c71e6e3bcd8ff2d2be7f9919af67ab341f32230df5a80fc70dd"}, @generic, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x15c}], 0x1, 0x0, 0x0, 0x1}, 0x40000) 29.56097212s ago: executing program 2 (id=1325): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000007f140000006000000003088700fe88a43de1a404000000000000007d01ff020000000000000000000000000001"], 0xfdef) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) 29.50836545s ago: executing program 34 (id=1325): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000007f140000006000000003088700fe88a43de1a404000000000000007d01ff020000000000000000000000000001"], 0xfdef) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) 2.996827465s ago: executing program 7 (id=1585): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='p', 0x1}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f0009"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0xfffffffb, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x98fb}]}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xb6ab}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.736839958s ago: executing program 7 (id=1588): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00'}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x20000000000003d, 0x2, 0x7, 0xf, 0xa], 0x1, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}]}, 0x88) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10}, &(0x7f00000000c0)=0xc) 2.680233302s ago: executing program 7 (id=1590): r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r1, &(0x7f0000000180)={0x27}, 0x14) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x5e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0xb}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONE(r11, 0x40049409, r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f0000000340), 0x4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x20, r13, 0x3, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x24}, 0x1, 0x0, 0x0, 0x808}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) 2.098983848s ago: executing program 7 (id=1600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r1, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [@hopopts={0x11}], "fafb17c133d11e59bb99c35bdfcf89f5"}}}}}}}, 0x0) 1.840797912s ago: executing program 4 (id=1602): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000040)="84", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000440)="3da9", 0x2, 0x7b00, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) 1.776515176s ago: executing program 4 (id=1605): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x240008c0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r4, 0x10c, 0x8, 0x0, &(0x7f0000001380)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x29, 0x7, 0x5, {0x10, @sctp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x14}, @multicast2, 0x4e23, 0x4e23, 0xb}, {0x0, @random="11e508bee0e3", 0x9, 0x8, [0x4, 0xffffff90]}, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x100, 0x14, 0x1, 0x9}, {0x0, @random="204a59a02eaa", 0x6, 0x8, [0x4, 0x7ff]}, 0xfffffffffffffffc, 0x2}}}) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYRESOCT=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.504459613s ago: executing program 6 (id=1609): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x3000000, @mcast2}, 0x1c) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1.384683255s ago: executing program 6 (id=1610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x7c}}, 0x24000051) socket(0x2, 0x4, 0xb80) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read(r4, &(0x7f0000000100)=""/41, 0x29) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000002"], 0x1c}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000956b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x10e) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000001380)={0x1260, 0x16, 0x1, 0x70bd2a, 0x25dfdbfb, {0x8}, [@nested={0x1159, 0x75, 0x0, 0x1, [@nested={0x4, 0x27}, @nested={0x4, 0xd1}, @typed={0xe, 0x2a, 0x0, 0x0, @str='}#:!$\xe2)!\x06\x00'}, @generic="bd1018925ef8a71b56e19c64502cf64df16e5c0ffc95416c72faeb9fd59242ac99b523611015285f4dc07d772af8c47ca1f16f4aa94fda6abd2c22b894c99e1dfc1ac5051a87338f8f80d76cdcc1f3a675eafc77bf5f770d64d6897eaabf9f8645051d0a24fdf16f0c2e1f41579b3152dd84ae7fe5433a5593ab87db0f579cbf55f8d5fc8c28a740542261e8abf7c831f2a986414036aec3cc038aa69322aea2e899f1b027cbce5f", @generic="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", @typed={0x4, 0x40}, @typed={0x4, 0xe6}, @generic, @nested={0x4, 0x83}, @generic="2babb514906e750a79f0d892b2a399f436453b6a3ac7e6d86601aeaead49c62d754719f39f6abb3bb1b117a45aff52523571f0ec0dfece19a6586b1908bc1d2124169daed081c5fcfcbc072ea041c4b4ff8b6d14aad85ba325f2070c41381838d368a9501aa7ee65204e90947951620cab58dd656d95d5c5952c27f8ea7d4a3e8d49838317197fbcd5"]}, @generic="49a45e8b6ff42af765b9ce9c2ad418ff06bfdbffa966f5016ecbef9f7534b416d20bac0c070252d8ed0d7d7ee69bbe63c745c77cbadae97ae9c213a9dd8b5d22ffd7c966b51826feaebcab56009c6e9f458e07047becf86a14e055f2ca3b61bcffad9727da6fcb23ca29098aa5138e71e55b63b92bd8086a92ec31e0b11b2a2bc83b22ec13c2017e55e3b5220cd8824db9d120813cd10bf34a997c82e5b813eacea5b19c9d4ac2bc068b2e304b08c33f277793f167b2e7cba9b5c96737ac5ef118e6adab64b5fe069c9990d8442009", @generic="f64b2b5daf3a802f598ee5b4ce22eaa2c7e3a573c43ca2c98bf8768f833a68"]}, 0x1260}}, 0x10) 1.236318257s ago: executing program 6 (id=1613): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x12c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x356}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4318}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ea16552}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35d1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000071000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00018000"], 0x24}}, 0x20008000) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 1.188259029s ago: executing program 5 (id=1614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xfffd, 0x2, 0x3, 0xfff, 0x6, 0x401, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}}, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1ab00000000000000003200000008001701"], 0x24}}, 0x0) (async) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r6, @ANYBLOB="20002cbd7000fcdbdf25100000001800050005000000080005003df0000008000400080000000c000380050008000645da0008000500040000003c000180060004004e23000008000500010000000800050001000000060001000a000000060002002900000008000800530c0000080009001a00000024000280080008000400000008000700050000000800040022e0000005000d00010000003c00038014000600fe8000000000000000000000000000aa080005007f000001060004000600000014000200626f6e645f736c6176655f3100000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40090}, 0x881) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x400, 0x1000, 0x1cc0014}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3c67, 0x75}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x800) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001100)={0x66c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x4f}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x64c, 0x111, 0x0, 0x1, {0x648, 0x5, 0x0, 0x1, [{0x210, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2488}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x97}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xac}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xcd}]}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x70}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) 1.07029387s ago: executing program 3 (id=1616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001200130628b57000fdd3df2506ff01fc00004e2200239e8927000600000009000000090000007d00014afb909eac16394b7e7100e61e70783e85d29f65c6c92e1f"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x4000000) 1.059673572s ago: executing program 5 (id=1617): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) (async) r3 = socket$inet6(0xa, 0x80002, 0x88) r4 = epoll_create1(0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r6, 0x0, 0x0, 0x40000060, 0x0, 0x0) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="108e5cd236db0d54141ba0d6eb000000"], 0x10}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0xd8, 0x6, 0x27, @rand_addr=' \x01\x00', @empty, 0x40, 0x700, 0x80000001, 0x1000}}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r8, &(0x7f0000000940), 0x10) close(0x3) (async) listen(r8, 0x0) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000540)="030ea7b846c1746f0e3d5312a00274f132f3391e11a80e63180f122656d533e96dbbd48f6094a7e5b4695b99038f3d723d3159405fae15b72effd0eb4bd7fb2b3ec824fbddbd008b230de580a08ce6734c0055baeb6c5a36e5b59dc99d9f5b75c643f09c4e8576482698a07dd47d500321a1be0b8e956dcb752165d6aef6f3629c23c9c9e638796a78acaeab464ad25d7b51306a6edb700049fd0000000000000000b9d2b861", 0xa6}], 0x1) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r10, &(0x7f0000002200), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r11, &(0x7f0000000000), 0x0}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0xa0000004}) (async) sendmmsg$alg(r2, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="53ac98280c9b512051c5fcfac80ada3747ac8595fb8c99123d766717ab092f80e71664ec6398e89a450daa7a998a1d2fca1b703eb6a8a9dd58124c6c440d2a51968a74104f6d856c797b2b16190c085ff1624714d019156e0334c062a37e00280d4f546cb89aad31f109a890a1de8dac68c0758575864d757e0f5d1f9eb273e8647d98045e0ad948ae9c1c30a4487e47ea63ee6dcd2a8092ca32aa219e63c412671450b7573a6f661860f9638bc3072c5f", 0xb1}], 0x1, 0x0, 0x0, 0x4000081}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000b00)="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", 0x113}, {&(0x7f0000000600)="a0f5e5192bfa5f4b5d97b6d48af864d0c6684508f57bc6a61e20c315748ffee1baa75c016f1019811ce4c38779d15441a5ab0cc052348da815c3ffc4fa77baaaa836d420b564c88188f460296908e57e988e1da833320804aeeb1569da50a8644632a653836f6b02578160d88990de0cf772eca9796ac15a6409639da465af57ccc04f3c0983a691d91d5e8778f1baba52bdc2455863d34602d530566917b8fd9326d96c19025257fb5d01e82505e9c9d7a2da0c62f6ed0be846c88e7a120f77088444523def69e19d3db66215822214f0ffa2c64975406d7be33f1cdd140822abf5c4983da26b72f00968a29eefb20934", 0xf1}, {&(0x7f0000000340)="a69832b7ee5f8732fe5216d9a63584", 0xf}, {&(0x7f0000000700)="e3cd9dafa8e3976a02b19daa246601415e4baef67f511998a2df69508674d311eb045dc7c9a06d87dc6b25c8d2ae98f9842ad08a6a2f00f5fd6a5bb1b36cb2b57ca2792fd96ec82e371c4e2737fc2d04b8353a22a2911a73b1761f771cc910f3a88d7a35398ae7eaaec703f9a68fb701076f60615aa88725ad0eb13ff03494dc582e278f8af667d710d1f62f8561a31dd45de8148cc59fd8eb1e4516c4eea48464daec669261ea1ff589959da3127bbfa721db3e3ba0c3f1a5cb76e822d6b6ea4b8c841e568a499f1439d17831dd", 0xce}, {&(0x7f0000000480)="0322d1d38be6dff966438d6ed1603336d4521c4bb16fb6e7ad53888cac91053c0a59c577b01df51b48a351cd5da65cbb2e30987128fcf10d757a700f23", 0x3d}, {&(0x7f0000000800)="e6eff0640e2c78cc8229b4bbfabefdba583cb921b38ddb86a99d7d76634ba8ba8c24937d9507c86b9595831bbd4726db485fe336f649dfd32714b2c2d5caea57a0b14a89cc096220d712344062f78d4f16ccf1f62c8a7e4377de647f1144d79ac7ad3d4aad1ae5cb696f5ffa159fd082245424e9d479dc6752babeff426822856ef22753856d2181b907ca503ac66c9f5c52493df6cd855783ad63bef821ad8913c501cf6db192843cbc3cf02781e6c2ffa23b17c430a2fe9c3d6392", 0xbc}], 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000998a000000000000180000000000000017010000030000000100000000000000180000000000000017010000040000000800000000000000600000000000000017010000020000004b0000007da19a4c7938aa8373b4c827b37bd32cf5a6afe45c37675aae9db606bff2eb7d5d30549467a474f827ec3a0b6816f9bec34d12fc555a23a6537a914f8dbc82cb7a0570ff6b00180000000000000017010000040000000500000005000000180000000000000017010200040000000008000000000000180000000000000017010000040000000d00"/240], 0xf0, 0x10}], 0x2, 0x84) 1.008679081s ago: executing program 7 (id=1618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) splice(r3, 0x0, r5, 0x0, 0x10500, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x9, 0x6, {{0x1b, 0x4, 0x0, 0x3e, 0x6c, 0x64, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0x66, 0x1, 0x1, [{@local, 0xfffffeff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x2}]}, @generic={0x89, 0x11, "462d5776b3031f50f6ae91b695146c"}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x7, 0x9, "f742728b63df14"}, {0x5, 0xc, "93cabfc4ae6466b8d089"}, {0x7, 0xd, "251ad32a8d75adc6f9a5da"}]}]}}}}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x5, 0x7, 0x106d, 0x0, r4, 0x9, '\x00', r6, r7, 0x8000004, 0x3, 0x5, 0xfffffffffffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendto$inet(r3, &(0x7f00000007c0)="4173a53a97e468f803d172a2ff8137ea4626f5a647c02fa48b5d6774738ec9cf514ec2b650e3f7c638c1708c4790f7cadd2df0bc3d6c69d3f2332ebc03de4d33e3158398d9bc453cda55eecd5da7f3208c0d0141420b7e19560d7c2794f878f17f210631ee842f28658bf04a676631d31873f78390c6dfdda00f15d467cf27e270c7789d5bd5fdde3a002856c9d805ff69227374c11cf479f80941244486208ee02e4fe5c9b672e78f0ee711f942dc1ed34ab8153714fb214a73d1906b7f491a0a16835e4b8a1514e89a113b9a0395487a3ef0e5961775008a05dbec45646030cc89c61ed931349b689bea1972", 0xed, 0x5, &(0x7f0000000580)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xcac, 0x0, 0x0, 0x9, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x11, 0x8, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001000010000002000000000000100000a20000000180a0101050000000000000000000003090001007379703000000000140000001100010000000000000000000000000a"], 0x48}}, 0x0) 1.008377567s ago: executing program 4 (id=1619): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d00000000140002080001000300000008000200250000000a00"], 0x50}}, 0xc080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800e000100696d6d65646961746500000024000280180002801400028008000340ebffffff07000180fffffffd08000140000000000900010073797a30000000000900020073797a32000000"], 0x90}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140"], 0x110}}, 0x40040) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e20, @loopback}}) socketpair(0x9, 0x804, 0xd, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) 925.253933ms ago: executing program 3 (id=1620): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a8", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000380)={'dummy0\x00', 0x400}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1f, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ldst={0x3, 0x3, 0x6, 0x9, 0x9, 0x1, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000000280)='syzkaller\x00', 0x2, 0x86, &(0x7f00000002c0)=""/134, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x11, 0x7, 0xb3a}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0xc568, 0x2, 0x8, 0x1}], 0x10, 0x7fff}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x4, 0xfa, 0x8, 0xfffffffb, 0x0, @mcast2, @mcast2, 0x8000, 0x8, 0x8, 0xe}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000740)={0x0, @private}, &(0x7f0000000780)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)={0xa0, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc040}, 0x10) ioctl$int_in(r6, 0x5421, &(0x7f0000000140)=0x9) accept(r6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000000), &(0x7f0000000580)=r5}, 0x20) 911.423255ms ago: executing program 5 (id=1621): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) listen(r0, 0x0) socket(0x1d, 0x2, 0x6) socket$igmp6(0xa, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x6, 0x1, @broadcast, @rand_addr, {[@timestamp={0x44, 0x18, 0x9d, 0x0, 0xd, [0x800, 0x1000, 0x8000, 0x3, 0xb]}, @timestamp_prespec={0x44, 0x14, 0x4, 0x3, 0x0, [{@multicast1=0xe000002f}, {@private=0xa010101}]}]}}}}}}}, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000009002000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet6(0xa, 0x5, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r3], 0x38}}, 0x0) 796.633485ms ago: executing program 4 (id=1622): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x13, &(0x7f0000000140)={0x0}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000015cbc15686c243f0a27000fedbdf2502084300"/33, @ANYRES32=0x0], 0x18}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = accept$unix(r4, &(0x7f0000000c40), &(0x7f0000000cc0)=0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000640)=[{&(0x7f0000000100)="afa63660", 0x4}], 0x1) recvmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(r9) listen(r5, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x18, 0x11, 0x0, @remote, @local, {[@dstopts={0x2c}], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100}}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000180)={r5, r10}) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0xfa4f75bbacff275d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r12, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 748.265568ms ago: executing program 5 (id=1623): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10001}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x34}}, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x2, 0x5, 0x40, @mcast1, @remote, 0x8, 0x8010, 0x5, 0x1}}) r6 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0xfff, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) (async) r9 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "00000000ce072d4530bfda82621b0500"}}}]}, 0x48}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x40, 0x8, 0xb, 0x5, {{0x18, 0x4, 0x1, 0x5, 0x60, 0x68, 0x0, 0x9, 0x2, 0x0, @private=0xa010100, @remote, {[@rr={0x7, 0x1f, 0x31, [@dev={0xac, 0x14, 0x14, 0xe}, @local, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, @loopback, @private=0xa010100]}, @timestamp_addr={0x44, 0x1c, 0xd7, 0x1, 0x7, [{@local, 0x2}, {@rand_addr=0x64010101, 0xd7}, {@local, 0x4}]}, @generic={0x83, 0xe, "3d40c0064e12fac2a08fe222"}, @end]}}}}}) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x118, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000c4) (async) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000200)=""/69, &(0x7f0000000280)=0x45) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000007c0)={0x5, 0x6, 0x4, 0xff7f}, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 669.469712ms ago: executing program 3 (id=1624): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000f7000063112100"/24], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x10, r2, 0x80000000}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r3, &(0x7f0000000300)="9552f8964b", 0x5, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400040000000007040000f0ffffffb702000003c2df0000000000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001900000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 588.921033ms ago: executing program 4 (id=1625): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25GETUID(r1, 0x891e, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket(0x10, 0x80002, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) (async) ioctl$SIOCAX25GETUID(r1, 0x891e, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) 448.034653ms ago: executing program 3 (id=1626): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c0}, 0x800) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x169b, {{0xa, 0x4e24, 0x0, @loopback, 0x80}}, {{0xa, 0x4e22, 0xa3a00000, @private0, 0x1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000002c0)={0x1000, {{0xa, 0x4e22, 0x1, @remote, 0x1}}, 0x3, 0x4, [{{0xa, 0x4e24, 0xe572, @remote, 0x8}}, {{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe90}}, {{0xa, 0x4e21, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, {{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x5}}]}, 0x290) close(r0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000580)={0x7, {{0xa, 0x4e24, 0x1000, @mcast2, 0x1}}, {{0xa, 0x4e21, 0x1, @private2, 0x48}}}, 0x108) sendmsg$802154_raw(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000006c0)="4012160bb46965e6cdd2f076ad77e0cfe2a7dc3aa5cc818445734c373951d51249f5840a33ab4a26637508aebaa180141e85738035dd72d3976e3ceb38cc9c33dfa09503d28fc4699ec3d8ba7d7302c48bd92f87f5f92bc82a76a29efff4fa7d46ed009c952845bd9a6a9a40b68da7647a1a2815eea85ca93c6c598ca93d97d217c05b67095da4b8c864426f78e487dab49bbc19ccfa312a88c273473cef14129a08e13fddd71898868a80cc08811d9c303d635c753ab3b9f7e7160253b827d9e00c4946d04712d12cc23e8e262945af12bbcc2c47f5126ff542d873a6c49d0a5020fd2d1be161dd46ff49ecdf07d675309db7f3fe4963ad7b7ff09ade96b1df8035169cdc25e667c43a9bda5e80bb4da3feeb2e55d3d7966e176fc0f8a3ebe6bf65c8878e27cbf32f4377083c8381d7d578de4d463e18ea5fa30733d972f58b91cd84f3cb68ae1bb2470c5567b50168414e2f458dd06e561ba9c458b926f25630358beb59490ce2bfea2a63d7fbe2f0788ee10f940a703e6d0ff1fa634dc1c326ae5b4169a5cffa9e17e838d429715eccd60d3af5bfb7aa434c0acddf2bed5b56a9b069cd34199edaff822f027496bc50208b2047ed66c6020e795eee4c322eb8753d50d60a9db712276a4a9f2d3b84423b5b68fb9ae9e202f77c54c37768cae31dd645ab9f6ef8e9b5edcc7b617fe7d23fab790fc89d1ff361fd2eaebda51cbc0913fcb28f69f30692b577871df3aa70a16e0dca239db8de059db0c290b0c5dd8d145768ebde31e3669572b9eeaca5008c67a1e9ba9b6ccf5387c8f73fc0b72eec7804f87141b23be8d468f3a8890b0d3a9181e155d575be3e402dd1ce03417b5859e3aef2b73b280c1f71cf9af6d5fe0d6f30b7dace51550b2263b4ad0e2be6fd9915bbde31d3b376bdab9ce462e0499a2e901edb796769db032104715c51fe62d9e0c9ba29566e1c068840e2f079348630a663f9fd43157d9e8123fdf2ddaa51bd21498daa01319d4f30eb96b1ac48e18a2bf832b3d9246bb41388370052449ea265c5a053b1464467f4394a521d659f37a240ddc9f6ba5cfd2abb8f741aefb47f8851276024a9732e06b0cc5ad55a20668836654860db1c94082faff6d4b6b9e73e55dcf5c97a1d93c3da073fc380aab95c4d7b5ad474bcd93b3657f8fdc5feb983824b98e16c193f66d0ceb4f155e5e0764d5b1fbc312c82b2fea488094124d76da6c8bc9ab059189fae8c1ca7406786afb78689265397cd1815bb80b53ac695fe5783cefe95cc145fe73684e4a4c44be053d4c99176bba9961d916ff3adcd8dfaf8cdf72caf76316ad606da9d9f2ea767b1371044ff3274bfae333820aec07189f06fdbbc2e3fe0767d06ed6a6c8b60522cb9cb18102298b27ead59d75aa322f4d1c82d52f10da4883cf996cc2952d898247d4b96fd5011462027a5a8c6160905d7597ca4f63c8b009e524bc53b7bd4c776b7ee633223d11d52e2fa124b97713c93d31d5a88456734366b33390f1222e3d93ebef7c1f771563b43d222e157ef65fbbb73448a6288549db63fcb3c7077c94b1f6a8b426947ee2475eb71fa69e29206b74e254fe6a30ad0f24ff8abaf31a19143809b9f4d0adb305f52fa3455beee9a96b86d8ce80a8607c1608141a2687fb8f3f09d511c950c9ea8eeb3d01dc843529586057a4b239d3fa79d7c2e3f4e6f50ce42b56af0a30238da4855f6f8115659697339511fa44459a408372e1ef02964bec030c850a395238c32d46805a01c315e8c7f8ecdce3497e08da271893440d04b30972df42ea8fa994a952e0332a2524dd4bab203d9522810a0da2ef7bd6cfed59c912194beaffd902ff517f89c1e5420b81f018254bdb3038f42f3d5c36a6f47ad41c63c58ef6b36be77d8b177e7842cef043c29ecaaa18d6038c219fa3042c5b12da0888c44e312d02f7fbcf9c9f0ac4314ff7170f8ba7f4b459160f118f74f172a42e3efd2b9c7c605b293ee867d860dfbb83311e4e36f22d3a4eeb10b6af56a2d29652440deffbe267ffb25ebca51d45cb6918365db52994499b194169e7152b731fdfe2242c7b1dfa005adf4370c68f30e8390528f558188bd7ca7c9dde38fc6d11e38ba00da5943fdc31c48ad32bc56fddcaf8acca870d698b3e5f3f0faef033a3864ecc606d33b6fff832c0dc777df0d5e5e04afd537e9c3d66ae3d96392d4ed26c3878661304e9aa081addbd992cad1010b3bb5ebfb9b81784ac9d71f38c8419935d26b0ddbe9e615c994329c999e4e6ac595e90203e7c9b0499c65d0c2ed554e700cd24636274fcb1ed18abf69a86a2c882b962fd70baa54836f80df107638d18ec2dbb49296dd039c85ec14aaa06faa18253eec01d518d477c8c43b7dcef32a8a4d27b691042a9453adc7dd39f58fb2bac1f61dcafb96f7c4710b35dc17c5fe7fa8dbc6c493ad7b439bceed97a19ed407ce1491c05d8fd2a63e38b7a80741185ec0b1e14fb6dd7c6b425f95501cafdba53f7b615b9be66642d53c9dcf0e7292e94d32bb5c41f461f6378976ff6a4e5dd5a4936483017abe6ed3fb507de2cfb16097dff72b2de1d52dc44d4d9ce3f4926b1c2c8f995e6c8bc9e56c9c0a5a1b74972fc7e7bf63a021947c27649fc7960fceccb2f8af4c721a569adf6234c6937c13bf2e339732eafb529ce9398a75f02fa1981c7220651f0c371da726508b3d28db86bcc525ee044772d88f39fe11f98c8e41c66af7856ca06d0bcc9a5670dcc79a845cfc63d98790bcfcf5b440b9f7dfd52bdb88ee541d25c59673790bda7d1cf69dd3c74d4ab88fc0b51e4f49db8935f63a28260c55f39f933beae617d9858ea7c096da9772f07d5823c445b3613b53fd412fd3b4f4a48f88d538cac27a82d41b843f3a87da960b510d2611f9869ff6f8c4a0cbfff5f2887895a9db2e31674c80186b4543240627b2a5e063448b655f03f0ed6080e8a9899e0aa7dc146d022c4c6bf686d2962289d4761829f20737cbff64d738be5817861584761768d9fffafb94d385331f4bf647646157424225f181c295651d5a0955df2cff7b0d779cb4b627fa4dc1bb05a0b913f739f1228c48649171b761a6674f114af8c80140ab2e5efa4ea154de9b3634a0a86538a4daa15d838660e32d8ad02c21ccb8a1960767eba77111af3d1f3cf64f55dd21750606478ccdabd2f89f3cff40942ec582ac17f8d1eebabde9599024804f948687839db3e5ad97b0af4668461d5f4214a68cc5a024f7c0d8df88f83d4fb271bf522c3c9512a20a361ed25b7d5c420229be841e9fd48a645fad7036234683407dcc056f1b94a92ca2d2f6ac65eb5d886b85a4c41fb4d13c165e6414cbfd9ff8f8c448a86cc7cd5221b9fc655e1013e837659a2019321f3379b2ba0ebe9efa7681b637d49e8ff85687adddb9ca42b4de3a11f3868960bac092ff3036192c7a9b5f010907d0e3b694ac2e46cf8625af01930c9624772c79301b02c7fbcb38ae978f974f79fb11f2feeec7f9f2d01403dc2ccb21ed618bb61d92ce29dc6d155b572d92c5a800081a9276cf4a575a9e75a6685f9ee28c0352f39ad63f12148e79933fbf0e3b58bf3be63f2989c69bf11aa604624f1d2110e11171373f03643cd19ffc0b8661f07cade615f6044d8eb0c8bd4c3d6e22da69d9ef55eeae92109bab8cdeb2f47b59c7fb96ba524c04710d2c9b19025aad30b16f409e93504fd02a3111eaa6d8a1064e888530bbedece903c762727a98642cac02542db7c54e7384210d6ed65c92e4b9fd1f286c3b32a4677a29a8e903b7ec0ad43c7a8dd5905faaa6f96aa070f77676c13aa83c88ce40c1098e09612e5573c769892aceb71a469f4fa108cbd796884f6437893388dd80424f16708e924b0ece97261d3abd4056316c451e52bda3b0f6f1d3789b2309096c9169cfc9467cd0fb55db4d7c6f036a51d767c8f5a70273fdbbb3990125505c0c577bd3ebee6d35a7618fc4db5fbe664457534adf04aca1a870c53efb086b2531f4723604727209628d5d243532fb9de38dea335243b6afa715ace7f42aadd2a5ca710e8bc9ed4c4781b88013e27184c1a2b2229d9f0e93dd491ff0e5fb966c2f6c45b7766b79c6fe0f6065b9b32a3b9c7587b49eb72e76ceb63872ff1242aab6874acbf3f5fb676e1e5dcc99a25e7927a7f7f6ad591e4c9636760e713a3a7cbc33117e0f648fab47b3d8980c5054cce0b9025352099b1d411a8a432734162b5a878607a3ebf1c8a783deea4341467b7bb8d1cda86330db07241ed4fbf487830b10a65612d847046ab783d2a8d13c368308f06bd8d1175f878f0109944bf6291a536a745f191f2eec2ed7b561fdf0890ba3e6132364e97f28a64f57bdcd30d36a21831e6ccd663757c5029367d8758180882205fbac737a23f4032c6e8c8c99128af549d135cfba019aaf8227063f3c4c3809301dc622ac882ec1e20ada7e629e67a71571bbc11e74eeba5730e85fd23ecf68503ed85cf573e42456690741db045ac1c423c1919750bd0c27209123de554266fdc06e4ec36205d9af189d136ca6c2c1fa505b89d0bbd7d5095ec00a65adce1db757b06ade33cde49386f93a5894422c7debb63647209547420876a79b4c67f55d6336cfaac6c6ac4a2576e5aef6a460bbd060503baf439faca98b53322a047b46c7094fbec5a55fc05b7612fd3f121252992e45dec811bad0c1af919579bc5b364cf5a16e9324b70a3d3e7d32d9211475a56e73b8164ec38a14fe24623faf40d5dc0f7d5d282b3d9eb770e1e213e957eb4b777d6ed0ff42809c72f7de707a52eaf0d4a9cd76b434b1a877634b93c80cf51e8afcca0d18f29d41c841c2b9f1b2861a1d5c698f3a2db55f9c0e90c7b1056cc3b0e1be83d009598965a42568ee8d1408d97039adfca40052ce64c9a8c751f1c6adba96441a85ed928a22d50f59e45f995fee6719dac7bb05f52d3ad1f2859423d17769ed94339e46b134d6ce1bf7cb34192d04fe580847554a205d239733e8525e9d3ec9239345ed84ef0c56ee9a0e14eface672265210e7e40710653b838aab56b597729d3e6c11af43f3b74165645c354c86f85254e204d7daeb1cffc3ff213dbe49f1710efb4c84baf8ebaaefbdd9d64a7add3523bf7e9c812f72e60652ae2414e814acfee670f3a665eb035430bd62d604fed209d7cb929c1131dbeeb204100296fc4d6995af99016eef7adb2f59080925705d6faf6a729cabe33d101f538055b42f92ce948ed51d8e19e9b60019372b05b387fd77e616feb7af5e375f4ad89371d45d7fcb07910ab102b2f76fb8e95a43c406fc8fc711ecc13cb66e561a5b7e6356d431f8a465c86b093a43c46c7fc6eb4d12eb9ca5888c38308fe01a8cc5b17ec10a8029d9782876a08995f357a121ff44a2d3abe301f195cf17e8eb6a9ebf67be472fb0d1f249b5de83f3da3b1635e8655631c4654b08d736e3bf511b937c6c1c40955c58ac732752125c2635f1e884109ebc34713133b19c4c66c01d2a11f9be7ce2cc4bd1ceab33ed2dcd5bfee2d98e736c5a5c82f1e678fd56ee5f02419f16b8a2ca875c2715cd8d113aa7a57e96bab458a7d42cccda9003f0809ecdc1207434e784ad8ed4dc5b2313ed2fd1dd7de06d3085056fb7307870d5027897a5fb04f60799eaddf46f3102492833f3a50926080f27436bdd9d790ea716fab5b3675cb7a33e5809d4a6b3ef3c887377c50d9d838a9194b2f68f1d0fa706744e3e49bb566b74014aaef526bea4e8f4fdff5e7a660bd2f73d42d03df17b5ba112386619ca8f6536", 0x1000}, 0x1, 0x0, 0x0, 0x44000}, 0x20000800) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000001740)={'erspan0\x00', 0x4}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000001780)={0x2, {{0xa, 0x4e20, 0x101, @mcast1, 0x5}}, {{0xa, 0x9, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}}}, 0x108) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfb59}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x38}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x45) recvmmsg$unix(r1, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b80)=""/27, 0x1b}, {&(0x7f0000001bc0)=""/62, 0x3e}], 0x2, &(0x7f0000001c40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000001cc0)=""/102, 0x66}, {&(0x7f0000001d40)=""/176, 0xb0}, {&(0x7f0000001e00)=""/146, 0x92}, {&(0x7f0000001ec0)=""/139, 0x8b}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x5, &(0x7f0000003000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f00000030c0)=@abs, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000003140)=""/68, 0x44}], 0x1, &(0x7f0000003200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000003300)=@abs, 0x6e, &(0x7f0000004480)=[{&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/220, 0xdc}], 0x2}}], 0x4, 0x40000000, &(0x7f00000045c0)) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004640), r10) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f00000047c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004780)={&(0x7f0000004680)={0xd8, r11, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0xf522efdc9cb34b4d}}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8f25}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x84}, 0x20040000) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000004840)=0x0, &(0x7f0000004880)=0x4) sendmsg$nl_route(r8, &(0x7f0000004980)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004940)={&(0x7f00000048c0)=@ipv6_getaddrlabel={0x44, 0x4a, 0x400, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x18, 0x0, r12, 0xa}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x2e3775424b19bfa5}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004010}, 0x40000) setsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f00000049c0)={r12, @multicast2, @multicast2}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000004b40)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004b00)={&(0x7f0000004a40)={0xb4, 0x5, 0xb, 0x201, 0x70bd2d, 0x25dfdbfd, {0x3, 0x0, 0x4}, [@generic="2579b59d643f06246494d35cab62a4442076e2c7a6e3d93f0bd9d1dcda5616ae70de7554b05f985cee7571d8c3dec1956ef94b831173d5cd2fba8a7a25dfa4ee4fe5d68d42f847b614d78aa75420c531dd1714d980ae6465ab21e5a7196de8dd80dde3553d67035e6625bde7f73e4dad57b8ed796b388a564d9ca2710f9753284bb38b0d34582dede4cdb0d44f63688dec295d6a5d6151bcfe1ecf01aa5159"]}, 0xb4}, 0x1, 0x0, 0x0, 0x40040}, 0x1) socket(0x3, 0xa, 0x2) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004b80), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000004c00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000004c40)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r13, &(0x7f0000004d00)={&(0x7f0000004bc0), 0xc, &(0x7f0000004cc0)={&(0x7f0000004c80)={0x1c, r14, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c810}, 0x40080c0) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f0000004d40)) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000004e80)={0x0, 0x7fff}, &(0x7f0000004ec0)=0x8) 437.148367ms ago: executing program 4 (id=1627): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0005003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8000, 0x0, 0x0) recvfrom$netrom(r5, &(0x7f0000000180)=""/86, 0x56, 0x140, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r6, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 356.954994ms ago: executing program 6 (id=1628): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x4) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$sock(r1, &(0x7f0000000180)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010100}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="bda5cd6d502ba1195aed6ffe9eb0c0d7f7ce36e273b46501e5f303d5453babc9e792337308c05a3ca00d2e434e907aa78f9cd2cba540c893acc024981b795787aa128946c2f94b0e7309c37963f864e0aeaa98ffcad74026eb1097fd0332dd09daec613bd90494f6d4e73c57390fe4be2da82bf00035facd5b7b6d77d4d8", 0x7e}], 0x1, &(0x7f0000000140)}, 0x8004) accept(r0, 0x0, 0x0) shutdown(r0, 0x0) 355.162009ms ago: executing program 5 (id=1629): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911001000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0xfff6, 0x10, 0x100, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}, @IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x5}, @IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28715f2d28"], 0xe0}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400000000000900020073797a31000000000c0007800800114000000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x58}}, 0x40041) 293.100747ms ago: executing program 3 (id=1630): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xf0e5}]}, 0x2c}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0x3, 0x2) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x40000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, ')\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_int(r6, 0x1, 0xc, 0x0, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 237.155029ms ago: executing program 6 (id=1631): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}}, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001, 0x100000}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x54}}, 0x0) (async) openat$cgroup_type(r0, 0x0, 0x2, 0x0) (async) r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) (async) write$cgroup_pid(r7, &(0x7f00000005c0), 0x12) 44.657418ms ago: executing program 5 (id=1632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f00000001c0)={'virt_wifi0\x00', @random="0100"}) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000040)={0x524, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x4a8, 0x8, 0x0, 0x1, [{0x4}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @mcast2, 0x7}}]}, {0x2f4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x80}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7ac4cfa9e6efdb5801729df59645f57da50221a68e260dff09bfe2d3becd3748"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x15c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e12d81a103e33211f73378791e5ab3ba115282437b66dd298df7d521c061725b"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1b70, @mcast1, 0x1}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x66}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x524}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r4, 0x89e2) 44.254082ms ago: executing program 7 (id=1633): r0 = socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x6a, 0x2, 0x0, 0x0) socketpair(0x5, 0x4, 0xb6, &(0x7f0000000040)) 43.854968ms ago: executing program 6 (id=1634): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000300), &(0x7f0000000240)=r1}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f00)={r7, r9, 0x25, 0x0, @val=@tracing={0x0, 0xfffffffffffffbf9}}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) listen(r5, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES64=r10, @ANYRESHEX=r11, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r11, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r5, &(0x7f0000000000)="18f9", 0xc3ff, 0x4, 0x0, 0x0) close(0x3) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)="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", 0x2fb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52fb", 0xf9}], 0x1}}], 0x2, 0x480e0) 0s ago: executing program 3 (id=1635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x688, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r2, r2, 0xd, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000280)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000040)='GPL\x00', 0xb, 0xbd, &(0x7f0000000180)=""/189, 0x41100, 0x1a, '\x00', r6, 0x1b, r7, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xf, 0xffffffff, 0x8}, 0x10, r8, 0x0, 0x8, 0x0, &(0x7f0000000540)=[{0x1, 0x4, 0xe, 0x6}, {0x1, 0x2, 0x0, 0x4}, {0x2, 0x1, 0xb, 0x8}, {0x2, 0x4, 0x9, 0x4}, {0x2, 0x3, 0x2, 0xa}, {0x3, 0x2, 0x10, 0xb}, {0x2, 0x4, 0x4, 0xa}, {0x2, 0x4, 0x3, 0x9}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts. [ 80.055920][ T5815] cgroup: Unknown subsys name 'net' [ 80.226424][ T5815] cgroup: Unknown subsys name 'cpuset' [ 80.235579][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.926665][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.559222][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.567965][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.580796][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.589132][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.594914][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.597501][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.604787][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.618596][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.626951][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.627802][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.635072][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.644243][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.652692][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.663271][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.692618][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.733853][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.742351][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.749986][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.773835][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.781527][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.790452][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.797825][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.806037][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.815876][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.830589][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.402228][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 85.453106][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 85.645497][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.716088][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.723437][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.730835][ T5829] bridge_slave_0: entered allmulticast mode [ 85.739603][ T5829] bridge_slave_0: entered promiscuous mode [ 85.757599][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 85.768996][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 85.786652][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.793951][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.801125][ T5829] bridge_slave_1: entered allmulticast mode [ 85.808762][ T5829] bridge_slave_1: entered promiscuous mode [ 85.927947][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.935200][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.942560][ T5825] bridge_slave_0: entered allmulticast mode [ 85.949744][ T5825] bridge_slave_0: entered promiscuous mode [ 86.009793][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.017073][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.024331][ T5825] bridge_slave_1: entered allmulticast mode [ 86.031831][ T5825] bridge_slave_1: entered promiscuous mode [ 86.041928][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.060939][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.076627][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.083884][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.091040][ T5832] bridge_slave_0: entered allmulticast mode [ 86.099611][ T5832] bridge_slave_0: entered promiscuous mode [ 86.145579][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.153164][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.160449][ T5832] bridge_slave_1: entered allmulticast mode [ 86.167979][ T5832] bridge_slave_1: entered promiscuous mode [ 86.226550][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.251151][ T5829] team0: Port device team_slave_0 added [ 86.288089][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.328067][ T5829] team0: Port device team_slave_1 added [ 86.354197][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.376608][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.384533][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.391727][ T5840] bridge_slave_0: entered allmulticast mode [ 86.399990][ T5840] bridge_slave_0: entered promiscuous mode [ 86.420748][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.427997][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.435797][ T5843] bridge_slave_0: entered allmulticast mode [ 86.443447][ T5843] bridge_slave_0: entered promiscuous mode [ 86.453848][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.464553][ T5825] team0: Port device team_slave_0 added [ 86.499695][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.507096][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.514429][ T5840] bridge_slave_1: entered allmulticast mode [ 86.521726][ T5840] bridge_slave_1: entered promiscuous mode [ 86.541719][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.549176][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.556487][ T5843] bridge_slave_1: entered allmulticast mode [ 86.563904][ T5843] bridge_slave_1: entered promiscuous mode [ 86.572708][ T5825] team0: Port device team_slave_1 added [ 86.593075][ T5832] team0: Port device team_slave_0 added [ 86.626590][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.633851][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.659866][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.685546][ T5832] team0: Port device team_slave_1 added [ 86.706376][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.713433][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.739615][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.753143][ T5833] Bluetooth: hci0: command tx timeout [ 86.758800][ T5833] Bluetooth: hci2: command tx timeout [ 86.764707][ T5149] Bluetooth: hci1: command tx timeout [ 86.772553][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.779529][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.805515][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.831081][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.841481][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.848645][ T5149] Bluetooth: hci3: command tx timeout [ 86.849062][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.880411][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.894512][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.922656][ T5149] Bluetooth: hci4: command tx timeout [ 86.945909][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.953052][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.979509][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.995174][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.035598][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.046831][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.054746][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.081486][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.167842][ T5825] hsr_slave_0: entered promiscuous mode [ 87.175493][ T5825] hsr_slave_1: entered promiscuous mode [ 87.241297][ T5843] team0: Port device team_slave_0 added [ 87.314770][ T5843] team0: Port device team_slave_1 added [ 87.326966][ T5832] hsr_slave_0: entered promiscuous mode [ 87.333705][ T5832] hsr_slave_1: entered promiscuous mode [ 87.339977][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 87.346282][ T5832] Cannot create hsr debugfs directory [ 87.360666][ T5840] team0: Port device team_slave_0 added [ 87.372711][ T5829] hsr_slave_0: entered promiscuous mode [ 87.379201][ T5829] hsr_slave_1: entered promiscuous mode [ 87.385555][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 87.391306][ T5829] Cannot create hsr debugfs directory [ 87.439945][ T5840] team0: Port device team_slave_1 added [ 87.456545][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.464577][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.490644][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.509638][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.516778][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.542938][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.619719][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.626800][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.653504][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.690067][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.697358][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.724338][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.898148][ T5843] hsr_slave_0: entered promiscuous mode [ 87.904768][ T5843] hsr_slave_1: entered promiscuous mode [ 87.910917][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 87.916738][ T5843] Cannot create hsr debugfs directory [ 87.999918][ T5840] hsr_slave_0: entered promiscuous mode [ 88.008520][ T5840] hsr_slave_1: entered promiscuous mode [ 88.014964][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 88.020712][ T5840] Cannot create hsr debugfs directory [ 88.347646][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.377621][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.403650][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.415610][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.482385][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.512912][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.547698][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.559408][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.589814][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.606703][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.618314][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.636414][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.768608][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.795360][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.824178][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.832724][ T5149] Bluetooth: hci2: command tx timeout [ 88.838428][ T5149] Bluetooth: hci0: command tx timeout [ 88.839825][ T5833] Bluetooth: hci1: command tx timeout [ 88.851189][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.913118][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.923125][ T5833] Bluetooth: hci3: command tx timeout [ 88.941222][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.967322][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.978626][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.991063][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.002146][ T5833] Bluetooth: hci4: command tx timeout [ 89.024816][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.063880][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.071112][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.088534][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.095785][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.122694][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.200113][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.213286][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.244242][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.251553][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.271628][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.278824][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.349582][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.367707][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.430151][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.437359][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.450144][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.457382][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.516225][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.550470][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.557736][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.586730][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.593951][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.779982][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.805119][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.814802][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.897881][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.974136][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.981340][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.006732][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.055021][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.062350][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.104387][ T5825] veth0_vlan: entered promiscuous mode [ 90.175488][ T5825] veth1_vlan: entered promiscuous mode [ 90.308018][ T5829] veth0_vlan: entered promiscuous mode [ 90.330288][ T5825] veth0_macvtap: entered promiscuous mode [ 90.349673][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.363255][ T5825] veth1_macvtap: entered promiscuous mode [ 90.380917][ T5829] veth1_vlan: entered promiscuous mode [ 90.398000][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.455572][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.506135][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.552721][ T5829] veth0_macvtap: entered promiscuous mode [ 90.570291][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.603497][ T5829] veth1_macvtap: entered promiscuous mode [ 90.613720][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.627188][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.652464][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.670451][ T5843] veth0_vlan: entered promiscuous mode [ 90.729471][ T5843] veth1_vlan: entered promiscuous mode [ 90.745317][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.784078][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.801084][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.838968][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.857481][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.908192][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.914267][ T5833] Bluetooth: hci1: command tx timeout [ 90.918769][ T5149] Bluetooth: hci2: command tx timeout [ 90.923791][ T5835] Bluetooth: hci0: command tx timeout [ 90.936254][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.994313][ T5833] Bluetooth: hci3: command tx timeout [ 91.006819][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.016212][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.057433][ T5843] veth0_macvtap: entered promiscuous mode [ 91.072916][ T5833] Bluetooth: hci4: command tx timeout [ 91.116144][ T5843] veth1_macvtap: entered promiscuous mode [ 91.122169][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.130249][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.165232][ T5840] veth0_vlan: entered promiscuous mode [ 91.173490][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.181364][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.208877][ T5832] veth0_vlan: entered promiscuous mode [ 91.238146][ T5840] veth1_vlan: entered promiscuous mode [ 91.250441][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.271737][ T5832] veth1_vlan: entered promiscuous mode [ 91.281546][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.367679][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.374284][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.383017][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.390506][ T5896] IPVS: starting estimator thread 0... [ 91.430231][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.457172][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.472748][ T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.493204][ T5945] IPVS: using max 28 ests per chain, 67200 per kthread [ 91.521532][ T150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.595721][ T5840] veth0_macvtap: entered promiscuous mode [ 91.603504][ T5947] netlink: 'syz.0.6': attribute type 29 has an invalid length. [ 91.615368][ T5840] veth1_macvtap: entered promiscuous mode [ 91.665316][ T5950] netlink: 'syz.0.6': attribute type 29 has an invalid length. [ 91.676570][ T5947] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6'. [ 91.693612][ T5947] unsupported nla_type 58 [ 91.703572][ T5947] netlink: 'syz.0.6': attribute type 2 has an invalid length. [ 91.715700][ T5832] veth0_macvtap: entered promiscuous mode [ 91.731655][ T5832] veth1_macvtap: entered promiscuous mode [ 91.773132][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.793432][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.801313][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.859269][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.921681][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.941226][ T3475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.953190][ T3475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.017878][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.027908][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.032916][ T3475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.043532][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.046078][ T1218] cfg80211: failed to load regulatory.db [ 92.095818][ T80] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.148466][ T80] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.173448][ T80] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.194709][ T80] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.239677][ T80] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.436368][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.472632][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.606473][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.619559][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.811672][ T5987] Zero length message leads to an empty skb [ 92.821543][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.876391][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.993427][ T5833] Bluetooth: hci2: command tx timeout [ 92.998888][ T5833] Bluetooth: hci1: command tx timeout [ 93.008159][ T5835] Bluetooth: hci0: command tx timeout [ 93.045586][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.073334][ T5833] Bluetooth: hci3: command tx timeout [ 93.093000][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.152765][ T5833] Bluetooth: hci4: command tx timeout [ 93.224154][ T5994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18'. [ 93.619486][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 93.853664][ T6019] Bluetooth: MGMT ver 1.23 [ 94.159811][ T6028] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 94.473266][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30'. [ 94.489317][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 94.518639][ T6042] bond0: entered promiscuous mode [ 94.542892][ T6042] bond_slave_0: entered promiscuous mode [ 94.549596][ T6042] bond_slave_1: entered promiscuous mode [ 94.549637][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 94.565667][ T6042] bond0: left promiscuous mode [ 94.570483][ T6042] bond_slave_0: left promiscuous mode [ 94.576604][ T6042] bond_slave_1: left promiscuous mode [ 94.834027][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'. [ 95.188392][ T6071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42'. [ 95.219948][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.42'. [ 95.397977][ T6076] netlink: 'syz.4.44': attribute type 10 has an invalid length. [ 95.478931][ T6080] netlink: 'syz.4.44': attribute type 10 has an invalid length. [ 95.479159][ T6076] team0: Port device dummy0 added [ 95.635307][ T6080] team0: Port device dummy0 removed [ 95.682782][ T6080] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 95.708468][ T6089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.911418][ T6094] veth3: entered allmulticast mode [ 95.996163][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 96.036151][ T6096] veth0_macvtap: left promiscuous mode [ 96.062566][ T6103] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.093175][ T6103] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 96.174308][ T6106] Bluetooth: MGMT ver 1.23 [ 96.716405][ T6123] netlink: 'syz.4.63': attribute type 75 has an invalid length. [ 96.730117][ T6123] tipc: Enabling of bearer rejected, failed to enable media [ 96.743528][ T6125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.258892][ T6147] __nla_validate_parse: 5 callbacks suppressed [ 97.258913][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 97.354863][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.391616][ T6145] syzkaller0: entered promiscuous mode [ 97.400064][ T6145] syzkaller0: entered allmulticast mode [ 97.611242][ T6163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.665584][ T6166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.706428][ T6163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.709978][ T6157] netlink: 'syz.0.75': attribute type 13 has an invalid length. [ 97.730705][ T6163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.759686][ T6163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.788098][ T6170] x_tables: duplicate underflow at hook 1 [ 97.830024][ T6163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.892080][ T6157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.939210][ T6163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 98.003558][ T6163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 98.026507][ T6163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 98.069079][ T6163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 98.143244][ T6163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 98.558643][ T6199] netlink: ct family unspecified [ 98.582455][ T6199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.685480][ T6201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.85'. [ 98.920772][ T6205] v: renamed from vlan0 [ 98.956000][ T6211] netlink: 144 bytes leftover after parsing attributes in process `syz.3.88'. [ 99.129699][ T6217] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 99.225861][ T6217] team0: Port device dummy0 added [ 99.504481][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 99.567979][ T6238] netlink: 56 bytes leftover after parsing attributes in process `syz.2.94'. [ 99.685535][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.693939][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.435888][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.456792][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.597359][ T6237] lo: Caught tx_queue_len zero misconfig [ 100.604012][ T6237] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.634172][ T6238] geneve2: entered promiscuous mode [ 100.651442][ T6238] geneve2: entered allmulticast mode [ 100.860076][ T6271] x_tables: duplicate underflow at hook 1 [ 100.910782][ T6271] sctp: [Deprecated]: syz.4.102 (pid 6271) Use of int in max_burst socket option. [ 100.910782][ T6271] Use struct sctp_assoc_value instead [ 101.082781][ T6274] netlink: 64 bytes leftover after parsing attributes in process `syz.3.103'. [ 101.233092][ T6265] netlink: 48 bytes leftover after parsing attributes in process `syz.1.99'. [ 101.251122][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 101.289299][ T6283] bridge_slave_1: left allmulticast mode [ 101.297500][ T6283] bridge_slave_1: left promiscuous mode [ 101.305640][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.320442][ T6283] bridge_slave_0: left allmulticast mode [ 101.332185][ T6283] bridge_slave_0: left promiscuous mode [ 101.340835][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.824091][ T6312] tipc: Started in network mode [ 101.829879][ T6312] tipc: Node identity 080211, cluster identity 4711 [ 101.842350][ T6312] tipc: Enabled bearer , priority 0 [ 101.860432][ T6313] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 101.873555][ T6313] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 102.266130][ T6333] Cannot find add_set index 0 as target [ 102.307346][ T6333] netlink: 44 bytes leftover after parsing attributes in process `syz.0.117'. [ 102.341566][ T6336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.406175][ T6339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.119'. [ 102.436685][ T6339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.119'. [ 102.495649][ T6339] syz.3.119 uses obsolete (PF_INET,SOCK_PACKET) [ 102.601253][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 102.610749][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 102.846454][ T5952] tipc: Node number set to 134353152 [ 102.985107][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 103.012329][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 103.296151][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 103.418269][ T6371] sit1: entered allmulticast mode [ 103.654265][ T6348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.675707][ T6348] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 103.756847][ T6389] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.788324][ T6348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.832160][ T6348] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 103.976253][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 103.984073][ T6348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.004560][ T6348] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 104.064621][ T6404] warning: `syz.4.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.079958][ T6348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.102601][ T6348] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 104.135275][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.137'. [ 104.188839][ T6348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.201756][ T6348] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 104.323820][ T6414] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.533034][ T6422] xt_socket: unknown flags 0x50 [ 105.412886][ T6459] tipc: Started in network mode [ 105.418138][ T6459] tipc: Node identity 06269293a58b, cluster identity 4711 [ 105.442157][ T6459] tipc: Enabled bearer , priority 0 [ 105.492698][ T6469] syzkaller0: entered promiscuous mode [ 105.523564][ T6477] trusted_key: syz.2.158 sent an empty control message without MSG_MORE. [ 105.558676][ T6469] syzkaller0: entered allmulticast mode [ 105.659122][ T6480] 8021q: VLANs not supported on ip_vti0 [ 105.694803][ T6469] tipc: Resetting bearer [ 105.714641][ T6458] tipc: Resetting bearer [ 105.783585][ T6458] tipc: Disabling bearer [ 105.970889][ T6498] ip6t_rpfilter: unknown options [ 106.068437][ T6506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.080323][ T6495] tipc: Started in network mode [ 106.102262][ T6495] tipc: Node identity 6a912cb1eff4, cluster identity 4711 [ 106.109588][ T6495] tipc: Enabled bearer , priority 0 [ 106.152367][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.161311][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.193166][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.202552][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.285136][ T6495] tipc: Disabling bearer [ 106.705415][ T6520] netlink: 'syz.0.167': attribute type 30 has an invalid length. [ 107.140102][ T6547] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.159076][ T6547] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 107.238832][ T6549] macvlan2: entered promiscuous mode [ 107.248978][ T6549] macvlan2: entered allmulticast mode [ 107.255016][ T6549] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 107.316114][ T6567] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 107.317838][ T6563] __nla_validate_parse: 8 callbacks suppressed [ 107.317858][ T6563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.171'. [ 107.373853][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 107.572608][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.179'. [ 107.644995][ T6578] syzkaller0: entered promiscuous mode [ 107.664307][ T6578] syzkaller0: entered allmulticast mode [ 108.536849][ T6630] netlink: 248 bytes leftover after parsing attributes in process `syz.0.193'. [ 108.539682][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 109.121922][ T6664] tipc: Enabling of bearer rejected, already enabled [ 110.054924][ T6709] team0: Port device dummy0 removed [ 110.541260][ T6739] netlink: 156 bytes leftover after parsing attributes in process `syz.1.215'. [ 110.801175][ T6759] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 110.929558][ T6759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.219'. [ 111.443490][ T6793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.325281][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 112.364073][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.708199][ T6832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.318858][ T6874] netlink: 96 bytes leftover after parsing attributes in process `syz.1.245'. [ 113.357052][ T6879] netlink: 'syz.2.246': attribute type 4 has an invalid length. [ 113.656335][ T6889] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 113.683765][ T6889] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.739737][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 113.771695][ T6893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.251'. [ 113.944679][ T6905] netlink: 508 bytes leftover after parsing attributes in process `syz.0.252'. [ 114.323715][ T6922] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 114.448017][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 114.810657][ T6944] netlink: 84 bytes leftover after parsing attributes in process `syz.2.263'. [ 114.981598][ T6951] netlink: 'syz.0.264': attribute type 21 has an invalid length. [ 115.038560][ T6953] tipc: Enabling of bearer rejected, already enabled [ 115.076209][ T6958] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 115.464876][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 115.601214][ T6978] ip6gre1: entered allmulticast mode [ 115.652524][ T6984] veth0_macvtap: left promiscuous mode [ 116.079194][ T7004] bridge0: port 3(macsec0) entered blocking state [ 116.102350][ T7004] bridge0: port 3(macsec0) entered disabled state [ 116.109165][ T7004] macsec0: entered allmulticast mode [ 116.148358][ T7004] veth1_macvtap: entered allmulticast mode [ 116.165763][ T7010] xt_TCPMSS: Only works on TCP SYN packets [ 116.166867][ T7004] macsec0: entered promiscuous mode [ 116.198353][ T7004] bridge0: port 3(macsec0) entered blocking state [ 116.205231][ T7004] bridge0: port 3(macsec0) entered forwarding state [ 116.393328][ T7022] xt_cgroup: xt_cgroup: no path or classid specified [ 116.581718][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 116.696493][ T7035] netlink: 108 bytes leftover after parsing attributes in process `syz.2.284'. [ 117.075685][ T7038] veth1_to_bond: entered allmulticast mode [ 117.088354][ T7038] veth1_to_bond: left allmulticast mode [ 117.164309][ T5833] Bluetooth: hci0: command tx timeout [ 117.263982][ T7040] bond0: (slave bond_slave_1): Releasing backup interface [ 117.728222][ T7053] __nla_validate_parse: 2 callbacks suppressed [ 117.728241][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 117.766639][ T7055] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 117.817489][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 117.831839][ T7055] bridge_slave_1: left allmulticast mode [ 117.844154][ T7055] bridge_slave_1: left promiscuous mode [ 117.895774][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.936513][ T7061] openvswitch: netlink: Message has 592 unknown bytes. [ 117.944835][ T7061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.966833][ T7055] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 118.056200][ T7065] netlink: 'syz.0.296': attribute type 2 has an invalid length. [ 118.081079][ T7065] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 118.150003][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.291'. [ 118.199236][ T7065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.259464][ T7072] bond1: (slave gretap1): making interface the new active one [ 118.271134][ T7072] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 118.695469][ T7106] xt_l2tp: missing protocol rule (udp|l2tpip) [ 119.024018][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 119.041366][ T7123] bridge_slave_1: left allmulticast mode [ 119.051803][ T7123] bridge_slave_1: left promiscuous mode [ 119.058937][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.194785][ T7123] bridge_slave_0: left allmulticast mode [ 119.201767][ T7123] bridge_slave_0: left promiscuous mode [ 119.216929][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.312726][ T37] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 119.654883][ T7140] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 119.670469][ T7150] TCP: TCP_TX_DELAY enabled [ 119.680400][ T7140] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 119.720995][ T7140] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 119.729239][ T7140] netlink: 'syz.1.311': attribute type 2 has an invalid length. [ 119.738805][ T7140] netlink: 76 bytes leftover after parsing attributes in process `syz.1.311'. [ 119.753280][ T7140] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 119.761133][ T7140] netlink: 'syz.1.311': attribute type 3 has an invalid length. [ 119.771668][ T7140] netlink: 172 bytes leftover after parsing attributes in process `syz.1.311'. [ 119.825332][ T7140] NCSI netlink: No device for ifindex 813332851 [ 119.956452][ T7140] netlink: 248 bytes leftover after parsing attributes in process `syz.1.311'. [ 120.387173][ T7179] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 121.097756][ T7212] nft_compat: unsupported protocol 0 [ 121.097957][ T7213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'. [ 121.401209][ T7224] tipc: Started in network mode [ 121.410534][ T7224] tipc: Node identity f2596b7fcc62, cluster identity 4711 [ 121.430951][ T7224] tipc: Enabled bearer , priority 0 [ 121.447767][ T7224] syzkaller0: entered promiscuous mode [ 121.463816][ T7224] syzkaller0: entered allmulticast mode [ 121.500050][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 121.507332][ T7224] tipc: Resetting bearer [ 121.525362][ T7223] tipc: Resetting bearer [ 121.539756][ T7223] tipc: Disabling bearer [ 121.618825][ T7236] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 121.763706][ T7243] xt_hashlimit: size too large, truncated to 1048576 [ 121.955021][ T7249] lo: entered promiscuous mode [ 121.991262][ T7249] tunl0: entered promiscuous mode [ 122.055112][ T7249] gre0: entered promiscuous mode [ 122.258080][ T7249] gretap0: entered promiscuous mode [ 122.271168][ T7249] erspan0: entered promiscuous mode [ 122.314337][ T7249] ip_vti0: entered promiscuous mode [ 122.354637][ T7255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.339'. [ 122.624111][ T7274] syz.2.346 uses old SIOCAX25GETINFO [ 122.680042][ T7278] bond1: entered promiscuous mode [ 122.685370][ T7278] bond1: entered allmulticast mode [ 122.693753][ T7278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.790109][ T7282] geneve2: entered promiscuous mode [ 122.814588][ T7282] geneve2: entered allmulticast mode [ 122.841821][ T37] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 122.865000][ T37] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 122.948085][ T7294] __nla_validate_parse: 1 callbacks suppressed [ 122.948103][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 123.013265][ T7270] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.055080][ T37] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 123.178349][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.417651][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 123.449519][ T7313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.353'. [ 123.520764][ T7313] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 123.770365][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 123.910428][ T7336] netlink: 168 bytes leftover after parsing attributes in process `syz.2.359'. [ 124.177605][ T7350] x_tables: duplicate underflow at hook 1 [ 124.202563][ T7352] tipc: Enabled bearer , priority 0 [ 124.274324][ T7352] syzkaller0: entered promiscuous mode [ 124.288669][ T7352] syzkaller0: entered allmulticast mode [ 124.339790][ T7359] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 124.348531][ T7352] tipc: Resetting bearer [ 124.417387][ T7362] l2tp_ppp: sess 2/0: no socket in recv [ 124.423002][ T7352] tipc: Disabling bearer [ 124.555312][ T7359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.629071][ T7360] bond2: (slave veth3): Enslaving as an active interface with a down link [ 124.684027][ T7364] vlan0: entered allmulticast mode [ 124.689683][ T7364] bond2: entered allmulticast mode [ 124.716612][ T7364] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 124.819159][ T7270] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.831312][ T7270] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 124.925003][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 125.115255][ T7270] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.131397][ T7270] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 125.358955][ T7270] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.399318][ T7270] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 125.436599][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 125.448662][ T7414] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 125.656483][ T7426] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 125.683524][ T6267] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 125.695181][ T6267] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 125.705095][ T7431] netlink: 'syz.4.385': attribute type 3 has an invalid length. [ 125.720710][ T6267] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 125.729586][ T6267] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 125.777835][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 125.809053][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 125.856012][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 125.892327][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 126.099856][ T7447] netlink: 'syz.3.389': attribute type 12 has an invalid length. [ 126.462777][ T7447] bond2: option primary_reselect: invalid value (255) [ 126.490832][ T7447] bond2 (unregistering): Released all slaves [ 126.599357][ T7467] batadv_slave_1: entered promiscuous mode [ 126.622778][ T7466] batadv_slave_1: left promiscuous mode [ 126.676795][ T7475] netlink: 256 bytes leftover after parsing attributes in process `syz.2.398'. [ 126.692320][ T7476] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.399'. [ 126.722402][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 126.768912][ T7475] gtp1: entered promiscuous mode [ 126.818616][ T7475] gtp1: entered allmulticast mode [ 127.067808][ T7490] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.110336][ T7495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.403332][ T7507] netlink: 'syz.1.410': attribute type 10 has an invalid length. [ 127.436256][ T7507] team0: Device ipvlan1 failed to register rx_handler [ 127.764070][ T7529] tipc: Started in network mode [ 127.772178][ T7529] tipc: Node identity 1efb5b88363, cluster identity 4711 [ 127.796303][ T7529] tipc: Enabled bearer , priority 0 [ 127.833495][ T7529] syzkaller0: entered promiscuous mode [ 127.839018][ T7529] syzkaller0: entered allmulticast mode [ 127.905975][ T7529] tipc: Resetting bearer [ 127.931884][ T7525] tipc: Resetting bearer [ 127.980081][ T7540] __nla_validate_parse: 1 callbacks suppressed [ 127.980100][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 128.008457][ T7525] tipc: Disabling bearer [ 128.043308][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 128.069233][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 128.109895][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 128.242924][ T7543] : entered promiscuous mode [ 128.283330][ T7555] delete_channel: no stack [ 128.464890][ T7564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.424'. [ 129.078879][ T7599] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 129.262667][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 130.030098][ T7635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.441'. [ 130.454510][ T7657] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 130.726876][ T7664] netlink: 184 bytes leftover after parsing attributes in process `syz.4.448'. [ 130.828961][ T7676] netlink: 1 bytes leftover after parsing attributes in process `syz.3.451'. [ 131.041587][ T7681] netlink: 'syz.2.453': attribute type 14 has an invalid length. [ 131.167728][ T7690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'. [ 132.276265][ T7708] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 132.577367][ T7726] lo: entered promiscuous mode [ 132.604387][ T7726] netlink: 'syz.0.468': attribute type 2 has an invalid length. [ 132.633536][ T7726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.298580][ T7776] netlink: 'syz.1.480': attribute type 6 has an invalid length. [ 133.391874][ T7779] __nla_validate_parse: 1 callbacks suppressed [ 133.391894][ T7779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.482'. [ 133.628633][ T7795] netlink: 27 bytes leftover after parsing attributes in process `syz.3.487'. [ 133.803028][ T7804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.979784][ T7803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.364104][ T5833] Bluetooth: hci0: command tx timeout [ 134.422789][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 134.534325][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.500'. [ 134.736022][ T7854] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 134.796923][ T7854] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 134.888972][ T7859] team0: Device ip6gre1 is of different type [ 134.914986][ T7861] netlink: 52 bytes leftover after parsing attributes in process `syz.2.509'. [ 135.575255][ T7904] netlink: 'syz.1.522': attribute type 16 has an invalid length. [ 135.604442][ T7904] netlink: 'syz.1.522': attribute type 17 has an invalid length. [ 135.608471][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.624998][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.719554][ T7904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.058485][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'. [ 136.484387][ T7948] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 136.995433][ T7976] netlink: 'syz.3.546': attribute type 58 has an invalid length. [ 137.009433][ T7976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.546'. [ 137.274443][ T7989] x_tables: duplicate underflow at hook 1 [ 137.496432][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 137.611401][ T7997] lo: left promiscuous mode [ 137.628578][ T8004] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 137.871384][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 137.922137][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.559'. [ 138.123099][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.129494][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.531005][ T8057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.760600][ T8068] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 139.090818][ T8083] __nla_validate_parse: 5 callbacks suppressed [ 139.090837][ T8083] netlink: 232 bytes leftover after parsing attributes in process `syz.2.581'. [ 139.126040][ T8085] netlink: 164 bytes leftover after parsing attributes in process `syz.4.582'. [ 139.136507][ T8085] netlink: 164 bytes leftover after parsing attributes in process `syz.4.582'. [ 139.146475][ T8085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.582'. [ 139.263019][ T5827] IPVS: starting estimator thread 0... [ 139.336685][ T8093] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 139.352083][ T8094] IPVS: using max 27 ests per chain, 64800 per kthread [ 139.808973][ T8121] bond0: Caught tx_queue_len zero misconfig [ 139.943614][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.594'. [ 140.302261][ T8142] netlink: 'syz.2.599': attribute type 3 has an invalid length. [ 140.560369][ T8153] netlink: 'syz.2.603': attribute type 39 has an invalid length. [ 140.706026][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 140.740506][ T8153] syzkaller0: entered promiscuous mode [ 140.773062][ T8160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.822041][ T8153] syzkaller0: entered allmulticast mode [ 141.128048][ T8176] xt_CT: No such helper "syz1" [ 141.166111][ T8183] delete_channel: no stack [ 141.305181][ T8189] netlink: 'syz.0.610': attribute type 1 has an invalid length. [ 142.532020][ T8204] bridge_slave_0: invalid flags given to default FDB implementation [ 142.808298][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 142.822095][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 142.830930][ T8219] netlink: 'syz.3.619': attribute type 13 has an invalid length. [ 143.012767][ T8234] netlink: 104 bytes leftover after parsing attributes in process `syz.1.625'. [ 143.040334][ T8238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.627'. [ 143.302613][ T8250] tipc: Enabled bearer , priority 0 [ 143.362362][ T8247] tipc: Disabling bearer [ 144.228001][ T8301] __nla_validate_parse: 2 callbacks suppressed [ 144.228020][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 144.265783][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 144.276499][ T8301] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.648'. [ 144.287142][ T8301] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 144.336203][ T8301] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 144.495408][ T8315] netlink: 232 bytes leftover after parsing attributes in process `syz.2.651'. [ 144.547894][ T8315] netlink: 'syz.2.651': attribute type 1 has an invalid length. [ 144.658112][ T8323] nftables ruleset with unbound set [ 144.711159][ T8327] netlink: 72 bytes leftover after parsing attributes in process `syz.0.655'. [ 145.294096][ T8353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.558391][ T8362] netlink: 'syz.1.665': attribute type 2 has an invalid length. [ 145.589294][ T8362] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 145.622384][ T8362] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 145.650502][ T8362] netlink: 'syz.1.665': attribute type 2 has an invalid length. [ 145.670710][ T8362] netlink: 'syz.1.665': attribute type 2 has an invalid length. [ 145.743762][ T8375] raw_sendmsg: syz.2.667 forgot to set AF_INET. Fix it! [ 145.903069][ T8378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.937131][ T8385] tipc: Enabling of bearer rejected, already enabled [ 145.957883][ T8385] tipc: Resetting bearer [ 146.044671][ T8384] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 146.154868][ T8391] netlink: 'syz.0.672': attribute type 23 has an invalid length. [ 146.249744][ T8403] netlink: 72 bytes leftover after parsing attributes in process `syz.2.676'. [ 146.256278][ T8401] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.442650][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.678'. [ 146.716222][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.680'. [ 146.753067][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.680'. [ 146.886892][ T8431] netlink: 'syz.2.683': attribute type 21 has an invalid length. [ 146.905383][ T8431] netlink: 'syz.2.683': attribute type 1 has an invalid length. [ 147.434760][ T8464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.692'. [ 147.546139][ T8468] vlan2: entered promiscuous mode [ 147.558675][ T8468] bond0: entered promiscuous mode [ 147.576191][ T8468] bond_slave_0: entered promiscuous mode [ 147.586617][ T8468] bond_slave_1: entered promiscuous mode [ 147.613008][ T8470] nbd: must specify at least one socket [ 147.619837][ T8468] bridge_slave_1: entered promiscuous mode [ 147.650739][ T8468] bond0: (slave vlan2): Opening slave failed [ 147.976040][ T8488] netlink: 'syz.2.700': attribute type 5 has an invalid length. [ 148.099790][ T8485] syzkaller1: entered promiscuous mode [ 148.118506][ T8485] syzkaller1: entered allmulticast mode [ 148.586882][ T8514] ip6tnl0: Caught tx_queue_len zero misconfig [ 148.618124][ T8497] IPVS: set_ctl: invalid protocol: 22 172.20.20.11:19489 [ 148.635814][ T8520] Unsupported ieee802154 address type: 0 [ 148.780680][ T3475] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 148.822052][ T3475] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 148.848245][ T3475] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 148.889406][ T3475] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 149.443534][ T8554] __nla_validate_parse: 9 callbacks suppressed [ 149.443553][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 149.484998][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 149.511014][ T8554] netlink: 60 bytes leftover after parsing attributes in process `syz.4.716'. [ 149.535371][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 149.559330][ T8554] netlink: 60 bytes leftover after parsing attributes in process `syz.4.716'. [ 149.570067][ T8554] netlink: 104 bytes leftover after parsing attributes in process `syz.4.716'. [ 149.607532][ T8560] syzkaller0: entered promiscuous mode [ 149.634367][ T8560] syzkaller0: entered allmulticast mode [ 149.849474][ T8576] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 149.999575][ T8576] bond3: entered promiscuous mode [ 150.056890][ T8576] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.156753][ T8582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.164244][ T8582] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 150.175465][ T8582] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 150.188133][ T8582] bond3: (slave gre1): making interface the new active one [ 150.195634][ T8582] gre1: entered promiscuous mode [ 150.202166][ T8582] bond3: (slave gre1): Enslaving as an active interface with an up link [ 150.675952][ T8617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.735'. [ 150.753299][ T8623] netlink: 32 bytes leftover after parsing attributes in process `syz.4.735'. [ 150.793665][ T8617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.735'. [ 150.843937][ T8626] netlink: 32 bytes leftover after parsing attributes in process `syz.4.735'. [ 151.179617][ T8636] bond3: Removing last arp target with arp_interval on [ 151.193184][ T8639] netlink: 'syz.2.740': attribute type 12 has an invalid length. [ 151.213623][ T8639] netlink: 'syz.2.740': attribute type 29 has an invalid length. [ 151.221426][ T8639] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 151.741454][ T8668] netlink: 'syz.4.748': attribute type 8 has an invalid length. [ 153.514906][ T8760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.522458][ T8760] IPv6: NLM_F_CREATE should be set when creating new route [ 153.591719][ T8760] gtp1: entered promiscuous mode [ 153.604452][ T8760] gtp1: entered allmulticast mode [ 154.176624][ T8787] netlink: 'syz.3.782': attribute type 1 has an invalid length. [ 154.727335][ T8818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.815526][ T8827] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 154.931100][ T8831] __nla_validate_parse: 18 callbacks suppressed [ 154.931120][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 154.998642][ T8827] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.121464][ T8843] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 155.247735][ T8851] Cannot find add_set index 1 as target [ 155.338143][ T8843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.399497][ T8849] bond2: (slave veth3): Enslaving as an active interface with a down link [ 155.447858][ T8855] bond2: (slave veth0_to_bond): making interface the new active one [ 155.475475][ T8855] veth0_to_bond: entered promiscuous mode [ 155.504225][ T8855] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 155.514694][ T8865] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 155.618126][ T8862] bond2: (slave veth5): Enslaving as an active interface with a down link [ 155.651188][ T8863] tipc: Enabled bearer , priority 0 [ 155.672436][ T8869] netlink: 256 bytes leftover after parsing attributes in process `syz.3.805'. [ 155.695314][ T8856] tipc: Resetting bearer [ 155.746007][ T8866] syzkaller0: entered promiscuous mode [ 155.751618][ T8866] syzkaller0: entered allmulticast mode [ 155.803988][ T8854] tipc: Resetting bearer [ 155.833009][ T8854] tipc: Disabling bearer [ 156.218992][ T8900] syzkaller0: entered promiscuous mode [ 156.248596][ T8900] syzkaller0: entered allmulticast mode [ 156.459267][ T8912] openvswitch: netlink: Flow actions attr not present in new flow. [ 157.427823][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 157.480090][ T8961] tipc: Enabled bearer , priority 0 [ 157.506090][ T8961] syzkaller0: entered promiscuous mode [ 157.532606][ T8961] syzkaller0: entered allmulticast mode [ 157.560467][ T8961] tipc: Resetting bearer [ 157.601266][ T8960] tipc: Resetting bearer [ 157.618988][ T8967] can: request_module (can-proto-5) failed. [ 157.684741][ T8960] tipc: Disabling bearer [ 158.002085][ T8984] netlink: 'syz.1.837': attribute type 7 has an invalid length. [ 158.020075][ T8984] netlink: 140 bytes leftover after parsing attributes in process `syz.1.837'. [ 158.253029][ T8995] tipc: Enabled bearer , priority 0 [ 158.271053][ T8995] syzkaller0: entered promiscuous mode [ 158.280208][ T8995] syzkaller0: entered allmulticast mode [ 158.313497][ T8995] tipc: Resetting bearer [ 158.331775][ T8993] tipc: Resetting bearer [ 158.354544][ T8993] tipc: Disabling bearer [ 159.301015][ T9029] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 159.373021][ T9032] tap0: tun_chr_ioctl cmd 1074025677 [ 159.378596][ T9032] tap0: linktype set to 65534 [ 159.503521][ T9045] netlink: 'syz.3.855': attribute type 1 has an invalid length. [ 159.520939][ T9045] netlink: 'syz.3.855': attribute type 7 has an invalid length. [ 159.529127][ T9045] netlink: 'syz.3.855': attribute type 8 has an invalid length. [ 159.537011][ T9045] netlink: 132 bytes leftover after parsing attributes in process `syz.3.855'. [ 159.597792][ T9041] veth5: entered promiscuous mode [ 159.603509][ T9041] veth5: entered allmulticast mode [ 159.609716][ T9048] tipc: Enabling of bearer rejected, failed to enable media [ 159.635411][ T9051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.788148][ T9059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.860'. [ 159.848309][ T9059] netlink: 'syz.3.860': attribute type 8 has an invalid length. [ 159.900792][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 160.109606][ T9075] syzkaller0: entered promiscuous mode [ 160.133977][ T9075] syzkaller0: entered allmulticast mode [ 160.177532][ T9083] lo: entered promiscuous mode [ 160.210246][ T9083] tunl0: entered promiscuous mode [ 160.237352][ T9083] gre0: entered promiscuous mode [ 160.257683][ T9086] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 160.273174][ T9083] gretap0: entered promiscuous mode [ 160.297993][ T9083] erspan0: entered promiscuous mode [ 160.308671][ T9083] ip_vti0: entered promiscuous mode [ 160.315288][ T9088] netlink: 412 bytes leftover after parsing attributes in process `syz.0.866'. [ 160.458757][ T9098] netlink: 'syz.1.868': attribute type 10 has an invalid length. [ 160.466900][ T9097] netlink: 'syz.1.868': attribute type 10 has an invalid length. [ 162.276787][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.881'. [ 162.443435][ T9164] xt_TCPMSS: Only works on TCP SYN packets [ 162.855294][ T9186] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 163.179009][ T9202] tipc: Enabled bearer , priority 10 [ 163.391000][ T9209] sctp: [Deprecated]: syz.2.895 (pid 9209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.391000][ T9209] Use struct sctp_sack_info instead [ 163.468035][ T9213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.897'. [ 163.494732][ T9213] netlink: 40 bytes leftover after parsing attributes in process `syz.4.897'. [ 163.514343][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 163.710076][ T9226] netlink: 56 bytes leftover after parsing attributes in process `syz.2.901'. [ 163.808244][ T9226] bond2: ARP target 1.0.0.0 is already present [ 163.815220][ T9226] bond2: option arp_ip_target: invalid value (1) [ 163.823751][ T9226] bond2 (unregistering): Released all slaves [ 163.855183][ T9233] netlink: 48 bytes leftover after parsing attributes in process `syz.4.902'. [ 164.038731][ T9244] netlink: 72 bytes leftover after parsing attributes in process `syz.1.906'. [ 164.215075][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.907'. [ 164.222599][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 164.292897][ T919] tipc: Node number set to 2746061459 [ 164.518341][ T9270] tipc: Enabled bearer , priority 0 [ 164.553036][ T9270] syzkaller0: entered promiscuous mode [ 164.576992][ T9270] syzkaller0: entered allmulticast mode [ 164.667930][ T9269] tipc: Resetting bearer [ 164.702683][ T9269] tipc: Disabling bearer [ 164.879749][ T9288] hsr_slave_1 (unregistering): left promiscuous mode [ 165.309736][ T9315] netlink: 'syz.2.928': attribute type 29 has an invalid length. [ 165.318160][ T9316] netlink: 'syz.2.928': attribute type 29 has an invalid length. [ 165.329349][ T9315] netlink: 'syz.2.928': attribute type 29 has an invalid length. [ 165.338530][ T9315] netlink: 'syz.2.928': attribute type 29 has an invalid length. [ 165.499242][ T9325] __nla_validate_parse: 7 callbacks suppressed [ 165.499262][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 165.526761][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 165.699730][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 165.857560][ T9345] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 165.932930][ T9345] xt_SECMARK: invalid mode: 9 [ 166.184208][ T9364] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 166.264997][ T9365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.944'. [ 166.284953][ T9373] sctp: [Deprecated]: syz.2.947 (pid 9373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.284953][ T9373] Use struct sctp_sack_info instead [ 166.702435][ T9388] ipt_ECN: cannot use operation on non-tcp rule [ 166.783846][ T9397] netlink: 'syz.4.956': attribute type 1 has an invalid length. [ 166.784484][ T9395] netlink: 'syz.0.955': attribute type 21 has an invalid length. [ 166.880964][ T9403] gretap2: entered promiscuous mode [ 166.917809][ T9403] bond5: (slave gretap2): making interface the new active one [ 166.956443][ T9403] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 167.044340][ T9397] macvlan0: entered promiscuous mode [ 167.082869][ T9397] macvlan0: entered allmulticast mode [ 167.089489][ T9397] bond5: entered promiscuous mode [ 167.104932][ T9397] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 167.117216][ T9397] bond5: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 167.134868][ T9397] bond5: left promiscuous mode [ 167.193701][ T9422] tipc: Enabled bearer , priority 0 [ 167.200880][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.963'. [ 167.217749][ T9408] syzkaller0: entered promiscuous mode [ 167.218475][ T9423] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 167.235463][ T9408] syzkaller0: entered allmulticast mode [ 167.268117][ T9408] tipc: Resetting bearer [ 167.348037][ T9408] tipc: Resetting bearer [ 167.445929][ T9408] tipc: Disabling bearer [ 167.545059][ T150] veth0_to_bond: left promiscuous mode [ 167.601211][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 167.610095][ T9440] erspan0: entered allmulticast mode [ 167.731239][ T9448] netlink: 'syz.2.973': attribute type 1 has an invalid length. [ 167.901803][ T9448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.285568][ T9451] veth3: entered promiscuous mode [ 168.298448][ T9451] bond2: (slave veth3): Enslaving as an active interface with a down link [ 168.385566][ T9453] veth5: entered promiscuous mode [ 168.406422][ T9453] bond2: (slave veth5): Enslaving as an active interface with a down link [ 168.526909][ T9477] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 168.555366][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 169.238482][ T5833] Bluetooth: hci0: command tx timeout [ 170.008110][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 170.275499][ T9542] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 170.290918][ T9542] netlink: 'syz.3.998': attribute type 3 has an invalid length. [ 170.298970][ T9542] netlink: 172 bytes leftover after parsing attributes in process `syz.3.998'. [ 170.308154][ T9542] NCSI netlink: No device for ifindex 813332851 [ 170.383126][ T9546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.534726][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 170.589480][ T9561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.930516][ T9578] gre1: entered promiscuous mode [ 170.936179][ T9578] gre1: entered allmulticast mode [ 171.068998][ T9588] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 171.112116][ T9588] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1010'. [ 171.318295][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 171.751055][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 171.975835][ T9634] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1030'. [ 171.995130][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 172.022066][ T9634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1030'. [ 172.138112][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 172.289943][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1035'. [ 172.640967][ T9661] tipc: Enabling of bearer rejected, already enabled [ 172.677595][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 172.870123][ T9663] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 172.889199][ T9663] bond3 (unregistering): Released all slaves [ 173.136285][ T9683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.164130][ T9684] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 174.057730][ T9743] netlink: 'syz.0.1063': attribute type 4 has an invalid length. [ 174.197889][ T9743] netlink: 'syz.0.1063': attribute type 4 has an invalid length. [ 174.212450][ T9743] netlink: 'syz.0.1063': attribute type 4 has an invalid length. [ 174.275291][ T9743] netlink: 'syz.0.1063': attribute type 4 has an invalid length. [ 174.283741][ T9743] netlink: 'syz.0.1063': attribute type 4 has an invalid length. [ 174.317884][ T9743] netlink: 'syz.0.1063': attribute type 4 has an invalid length. [ 174.390577][ T9743] netlink: 'syz.0.1063': attribute type 4 has an invalid length. [ 174.398710][ T9743] netlink: 'syz.0.1063': attribute type 4 has an invalid length. [ 174.426687][ T9743] netlink: 'syz.0.1063': attribute type 4 has an invalid length. [ 174.632216][ T9763] wg2: entered promiscuous mode [ 174.652199][ T9763] wg2: entered allmulticast mode [ 174.807770][ T9766] veth0_macvtap: left promiscuous mode [ 174.816812][ T9766] macvtap0: entered allmulticast mode [ 174.850930][ T9766] macvtap0: refused to change device tx_queue_len [ 175.092727][ T9789] openvswitch: netlink: Flow key attr not present in new flow. [ 175.523388][ T9813] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 175.627715][ T9816] syzkaller0: entered promiscuous mode [ 175.659926][ T9816] syzkaller0: entered allmulticast mode [ 175.705570][ T9816] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 175.741898][ T9827] atomic_op ffff88807a120198 conn xmit_atomic 0000000000000000 [ 176.245048][ T9852] __nla_validate_parse: 12 callbacks suppressed [ 176.245068][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1100'. [ 176.279013][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 176.289998][ T9852] validate_nla: 58 callbacks suppressed [ 176.290013][ T9852] netlink: 'syz.3.1100': attribute type 15 has an invalid length. [ 176.675729][ T9870] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1105'. [ 176.944144][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1110'. [ 177.174706][ T9901] tipc: Enabling of bearer rejected, already enabled [ 177.439414][ T9917] netem: change failed [ 177.513162][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 177.850894][ T9953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.853470][ T9952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.150644][ T9967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1134'. [ 178.191230][ T9967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1134'. [ 178.224778][ T9967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1134'. [ 178.267328][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 178.368436][ T9978] sit0: Caught tx_queue_len zero misconfig [ 178.410358][ T9981] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 178.425929][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.454098][ T9981] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 178.462423][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.502246][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.539790][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.934026][T10002] syzkaller0: entered promiscuous mode [ 178.942136][T10002] syzkaller0: entered allmulticast mode [ 179.076157][T10016] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 179.288132][T10036] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 179.645976][T10044] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 180.658748][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 181.256205][T10097] x_tables: duplicate underflow at hook 3 [ 181.280919][T10090] __nla_validate_parse: 1 callbacks suppressed [ 181.280938][T10090] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.1169'. [ 181.333181][T10103] tipc: Enabled bearer , priority 0 [ 181.373572][T10104] syzkaller0: entered promiscuous mode [ 181.392925][T10104] syzkaller0: entered allmulticast mode [ 181.485253][T10104] tipc: Resetting bearer [ 181.522810][T10104] tipc: Disabling bearer [ 181.566293][T10111] team_slave_1: entered promiscuous mode [ 181.578423][T10111] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 181.603702][T10111] team0: Device macvtap0 is already an upper device of the team interface [ 181.614170][T10111] team_slave_1: left promiscuous mode [ 181.859441][T10128] xt_recent: Unsupported userspace flags (000000b1) [ 181.875627][T10130] x_tables: duplicate underflow at hook 4 [ 182.144320][T10153] xt_hashlimit: overflow, rate too high: 0 [ 182.185853][T10156] xt_hashlimit: overflow, rate too high: 0 [ 182.380381][T10162] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1188'. [ 182.695757][T10184] netlink: 'syz.1.1197': attribute type 1 has an invalid length. [ 182.819673][T10187] bond3: (slave bridge2): making interface the new active one [ 182.866611][T10187] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 182.909034][T10194] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 182.909100][T10189] netlink: 'syz.0.1198': attribute type 3 has an invalid length. [ 182.914628][T10189] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1198'. [ 182.940628][T10194] tipc: Enabling of bearer rejected, already enabled [ 182.949178][T10198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1201'. [ 182.959593][T10194] sit0: entered promiscuous mode [ 182.965748][T10194] sit0: entered allmulticast mode [ 183.287012][T10216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1206'. [ 183.873499][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 183.882660][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 183.968775][T10254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.984792][T10257] tipc: Enabling of bearer rejected, already enabled [ 184.150597][T10267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1222'. [ 184.170211][T10267] netlink: 'syz.1.1222': attribute type 7 has an invalid length. [ 184.253019][T10267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1222'. [ 184.437724][T10285] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1227'. [ 184.681874][T10298] tipc: Enabled bearer , priority 0 [ 184.811060][T10308] tipc: Disabling bearer [ 185.374572][T10352] vcan0: entered allmulticast mode [ 185.394578][T10354] syz_tun: entered allmulticast mode [ 185.422758][T10354] syz_tun: left allmulticast mode [ 185.451683][T10354] dvmrp1: entered allmulticast mode [ 185.557588][T10356] bridge_slave_1: entered allmulticast mode [ 186.437649][T10415] __nla_validate_parse: 15 callbacks suppressed [ 186.437669][T10415] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1263'. [ 186.525407][T10415] vlan2: entered allmulticast mode [ 186.541007][T10415] erspan0: entered allmulticast mode [ 186.614869][T10427] netlink: 'syz.3.1266': attribute type 12 has an invalid length. [ 186.636213][T10427] netlink: 'syz.3.1266': attribute type 29 has an invalid length. [ 186.657855][T10427] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1266'. [ 186.677449][T10427] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 186.698003][T10427] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1266'. [ 186.850669][T10443] syzkaller1: entered promiscuous mode [ 186.862125][T10443] syzkaller1: entered allmulticast mode [ 186.908614][T10445] ip6erspan0: entered promiscuous mode [ 186.923872][T10445] ip6erspan0: entered allmulticast mode [ 187.256420][T10465] : entered promiscuous mode [ 187.519457][T10486] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 187.558250][T10486] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1281'. [ 187.751369][T10501] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1289'. [ 188.130527][T10529] bridge0: mtu less than device minimum [ 188.137820][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 188.151087][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 188.356483][T10547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.363806][T10547] IPv6: NLM_F_CREATE should be set when creating new route [ 188.371343][T10547] IPv6: NLM_F_CREATE should be set when creating new route [ 188.378662][T10547] IPv6: NLM_F_CREATE should be set when creating new route [ 188.405536][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 188.434605][T10553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.543260][T10559] tipc: Enabled bearer , priority 0 [ 188.646863][T10559] tipc: Disabling bearer [ 188.690542][T10569] sctp: [Deprecated]: syz.2.1306 (pid 10569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.690542][T10569] Use struct sctp_sack_info instead [ 189.050527][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 189.169922][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1315'. [ 189.721073][T10619] netlink: 'syz.3.1321': attribute type 1 has an invalid length. [ 189.967671][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.051072][T10622] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 190.084625][T10619] veth5: entered promiscuous mode [ 190.094389][T10619] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 190.164879][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.314504][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.466245][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.756162][ T60] bridge_slave_1: left allmulticast mode [ 190.775196][ T60] bridge_slave_1: left promiscuous mode [ 190.797438][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.820198][ T60] bridge_slave_0: left allmulticast mode [ 190.833981][ T60] bridge_slave_0: left promiscuous mode [ 190.846702][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.019900][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.032438][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.043251][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.053436][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.062704][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.081499][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.095828][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.104396][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.112921][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.118512][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.135312][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.143288][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.151645][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.152889][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.161881][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.177624][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.198091][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.206079][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.216961][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.225550][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.445679][ T60] dvmrp1 (unregistering): left allmulticast mode [ 191.622253][ T60] bond3 (unregistering): (slave bridge2): Releasing active interface [ 191.737063][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.748453][ T60] bond0 (unregistering): Released all slaves [ 191.762769][ T60] bond1 (unregistering): Released all slaves [ 191.838284][ T60] bond2 (unregistering): (slave veth3): Releasing active interface [ 191.846556][ T60] veth0_to_bond: entered promiscuous mode [ 191.854997][ T60] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 191.865778][ T60] bond2 (unregistering): (slave veth5): Releasing active interface [ 191.878198][ T60] bond2 (unregistering): Released all slaves [ 191.893416][ T60] bond3 (unregistering): Released all slaves [ 191.907476][T10639] netlink: 'syz.4.1330': attribute type 29 has an invalid length. [ 191.915570][T10639] __nla_validate_parse: 1 callbacks suppressed [ 191.915587][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 192.089800][ T60] tipc: Left network mode [ 192.300082][T10667] nbd: illegal input index 2958377 [ 192.550952][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 192.679859][T10642] chnl_net:caif_netlink_parms(): no params data found [ 192.966970][T10644] chnl_net:caif_netlink_parms(): no params data found [ 192.997632][ T60] hsr_slave_0: left promiscuous mode [ 193.004143][ T60] hsr_slave_1: left promiscuous mode [ 193.010119][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.017703][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.026049][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.034004][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.056928][ T60] veth1_macvtap: left promiscuous mode [ 193.062963][ T60] veth0_macvtap: left promiscuous mode [ 193.068770][ T60] veth1_vlan: left promiscuous mode [ 193.074397][ T60] veth0_vlan: left promiscuous mode [ 193.234449][ T5828] Bluetooth: hci1: command tx timeout [ 193.315678][ T5828] Bluetooth: hci3: command tx timeout [ 193.326751][ T5828] Bluetooth: hci0: command tx timeout [ 193.489764][ T60] team0 (unregistering): Port device team_slave_1 removed [ 193.528916][ T60] team0 (unregistering): Port device team_slave_0 removed [ 193.763947][T10697] vcan0: tx address claim with dest, not broadcast [ 193.836882][T10646] chnl_net:caif_netlink_parms(): no params data found [ 193.876878][T10696] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 193.975862][T10701] xt_cgroup: path and classid specified [ 193.987531][T10642] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.995104][T10642] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.002411][T10642] bridge_slave_0: entered allmulticast mode [ 194.009734][T10642] bridge_slave_0: entered promiscuous mode [ 194.019558][T10642] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.027148][T10642] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.035894][T10642] bridge_slave_1: entered allmulticast mode [ 194.044011][T10642] bridge_slave_1: entered promiscuous mode [ 194.200846][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'. [ 194.215384][T10642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.329303][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 194.341569][T10720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1344'. [ 194.361073][T10712] bond6: entered promiscuous mode [ 194.386706][T10642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.445857][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.462066][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.475671][T10644] bridge_slave_0: entered allmulticast mode [ 194.494206][T10644] bridge_slave_0: entered promiscuous mode [ 194.723896][T10737] netlink: 'syz.3.1348': attribute type 10 has an invalid length. [ 194.734256][T10735] netlink: 'syz.4.1347': attribute type 3 has an invalid length. [ 194.736574][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.750794][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.758502][T10644] bridge_slave_1: entered allmulticast mode [ 194.766477][T10644] bridge_slave_1: entered promiscuous mode [ 194.787038][T10646] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.794259][T10646] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.801684][T10646] bridge_slave_0: entered allmulticast mode [ 194.809416][T10646] bridge_slave_0: entered promiscuous mode [ 194.817747][T10646] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.825397][T10646] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.832707][T10646] bridge_slave_1: entered allmulticast mode [ 194.840018][T10646] bridge_slave_1: entered promiscuous mode [ 194.874740][T10737] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 194.930018][T10642] team0: Port device team_slave_0 added [ 194.984769][T10646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.011679][T10646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.036679][T10644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.057905][T10642] team0: Port device team_slave_1 added [ 195.169604][T10644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.263633][T10646] team0: Port device team_slave_0 added [ 195.284101][T10642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.291236][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.319257][ T5828] Bluetooth: hci1: command tx timeout [ 195.326144][T10642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.339703][T10646] team0: Port device team_slave_1 added [ 195.362325][T10644] team0: Port device team_slave_0 added [ 195.374041][T10642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.381103][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.392911][ T5828] Bluetooth: hci0: command tx timeout [ 195.409309][ T5149] Bluetooth: hci3: command tx timeout [ 195.413069][T10642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.449701][T10644] team0: Port device team_slave_1 added [ 195.490780][T10646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.498404][T10646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.525279][T10646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.551350][T10644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.558977][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.585203][T10644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.609499][T10646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.616930][T10646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.643382][T10646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.671730][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.682617][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.698841][T10644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.706128][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.732681][T10644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.757085][T10642] hsr_slave_0: entered promiscuous mode [ 195.763637][T10642] hsr_slave_1: entered promiscuous mode [ 195.769814][T10642] debugfs: 'hsr0' already exists in 'hsr' [ 195.775866][T10642] Cannot create hsr debugfs directory [ 195.814574][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.825103][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.907188][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.918091][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.939767][T10644] hsr_slave_0: entered promiscuous mode [ 195.946669][T10644] hsr_slave_1: entered promiscuous mode [ 195.953476][T10644] debugfs: 'hsr0' already exists in 'hsr' [ 195.959225][T10644] Cannot create hsr debugfs directory [ 195.991171][T10646] hsr_slave_0: entered promiscuous mode [ 196.000301][T10646] hsr_slave_1: entered promiscuous mode [ 196.009129][T10646] debugfs: 'hsr0' already exists in 'hsr' [ 196.015230][T10646] Cannot create hsr debugfs directory [ 196.045492][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.056507][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.231816][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 196.341881][T10765] netlink: 'syz.4.1356': attribute type 1 has an invalid length. [ 196.372153][T10765] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1356'. [ 196.704921][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.718896][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 196.857156][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.868748][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 196.909860][T10785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1362'. [ 196.955234][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.962442][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1362'. [ 196.968452][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 196.996424][T10644] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 197.007175][T10644] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 197.041654][T10644] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.055471][T10644] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 197.095202][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.106350][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 197.177591][T10642] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.193980][T10642] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.218231][T10642] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.231714][T10642] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.306709][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 197.393173][ T5149] Bluetooth: hci1: command tx timeout [ 197.458486][T10646] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 197.472334][ T5149] Bluetooth: hci0: command tx timeout [ 197.483050][ T5149] Bluetooth: hci3: command tx timeout [ 197.484258][T10646] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 197.517416][T10646] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 197.531615][T10646] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 197.576466][ T60] bridge_slave_0: left allmulticast mode [ 197.582770][ T60] bridge_slave_0: left promiscuous mode [ 197.588672][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.793736][ T60] bond1 (unregistering): (slave gretap1): Releasing active interface [ 198.036555][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.047682][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.059908][ T60] bond0 (unregistering): Released all slaves [ 198.141690][ T60] bond1 (unregistering): Released all slaves [ 198.222773][ T60] bond2 (unregistering): (slave veth3): Releasing active interface [ 198.232522][ T60] bond2 (unregistering): Released all slaves [ 198.247323][ T60] bond3 (unregistering): Released all slaves [ 198.328337][ T60] bond4 (unregistering): Released all slaves [ 198.613520][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.624193][ T60] bond_slave_0: left promiscuous mode [ 198.631473][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.643904][ T60] bond_slave_1: left promiscuous mode [ 198.650687][ T60] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 198.661501][ T60] bond0 (unregistering): Released all slaves [ 198.742754][ T60] bond1 (unregistering): Released all slaves [ 198.821527][ T60] bond2 (unregistering): (slave veth3): Releasing active interface [ 198.832445][ T60] bond2 (unregistering): (slave veth5): Releasing active interface [ 198.841848][ T60] bond2 (unregistering): Released all slaves [ 198.999157][T10644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.025084][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 199.046504][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 199.104926][ T60] : left promiscuous mode [ 199.123962][T10818] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 199.134860][T10818] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 199.142986][T10818] gretap2: entered promiscuous mode [ 199.148284][T10818] gretap2: entered allmulticast mode [ 199.203442][ T60] : left promiscuous mode [ 199.266872][T10644] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.302467][ T60] tipc: Left network mode [ 199.317735][ T60] tipc: Left network mode [ 199.354849][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.362057][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.386128][T10642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.446990][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.454288][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.477632][ T5149] Bluetooth: hci1: command tx timeout [ 199.553685][ T5149] Bluetooth: hci3: command tx timeout [ 199.559317][ T5149] Bluetooth: hci0: command tx timeout [ 199.565574][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.571341][T10642] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.572098][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.620506][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.627817][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.660900][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.668157][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.689253][T10646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.729702][T10644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.787714][T10837] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1373'. [ 199.800433][T10837] netlink: 'syz.3.1373': attribute type 1 has an invalid length. [ 199.808823][T10837] netlink: 'syz.3.1373': attribute type 7 has an invalid length. [ 199.817883][T10837] netlink: 'syz.3.1373': attribute type 8 has an invalid length. [ 199.832432][T10837] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1373'. [ 199.916358][T10646] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.125488][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.132727][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.252456][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.259654][ T6267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.421776][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 200.587990][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 200.599097][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 200.608146][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1381'. [ 200.629709][T10644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.827687][T10642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.082002][ T60] hsr_slave_0: left promiscuous mode [ 201.103738][ T60] hsr_slave_1: left promiscuous mode [ 201.109975][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.143807][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.167087][ T60] hsr_slave_0: left promiscuous mode [ 201.189051][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.217238][ T60] veth1_macvtap: left promiscuous mode [ 201.226123][ T60] veth1_vlan: left promiscuous mode [ 201.718055][ T60] team0 (unregistering): Port device team_slave_1 removed [ 201.754362][ T60] team0 (unregistering): Port device team_slave_0 removed [ 202.332252][ T60] team0 (unregistering): Port device team_slave_1 removed [ 202.370190][ T60] team0 (unregistering): Port device team_slave_0 removed [ 202.675972][ T60] vcan0 (unregistering): left allmulticast mode [ 202.980177][T10917] bond3: Unable to set down delay as MII monitoring is disabled [ 202.990854][T10917] bond3 (unregistering): Released all slaves [ 203.051337][T10646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.175024][T10644] veth0_vlan: entered promiscuous mode [ 203.234711][T10644] veth1_vlan: entered promiscuous mode [ 203.334135][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 203.353916][T10933] netlink: 'syz.4.1392': attribute type 5 has an invalid length. [ 203.354852][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 203.362903][T10933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1392'. [ 203.385584][T10644] veth0_macvtap: entered promiscuous mode [ 203.396899][T10935] netlink: 'syz.4.1392': attribute type 5 has an invalid length. [ 203.405639][T10930] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 203.422928][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1392'. [ 203.481057][T10933] geneve2: entered promiscuous mode [ 203.512431][T10933] geneve2: entered allmulticast mode [ 203.528444][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 203.543629][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 203.563278][T10644] veth1_macvtap: entered promiscuous mode [ 203.577132][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 203.588225][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 203.677426][T10644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.723109][T10644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.764152][T10642] veth0_vlan: entered promiscuous mode [ 203.818775][T10642] veth1_vlan: entered promiscuous mode [ 203.865152][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.880683][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.923917][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.939996][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.079496][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1397'. [ 204.106462][ T60] IPVS: stop unused estimator thread 0... [ 204.146277][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.167411][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.177615][T10642] veth0_macvtap: entered promiscuous mode [ 204.192359][T10642] veth1_macvtap: entered promiscuous mode [ 204.201471][T10646] veth0_vlan: entered promiscuous mode [ 204.270141][T10646] veth1_vlan: entered promiscuous mode [ 204.315279][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.331420][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.350162][T10642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.403473][T10642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.429674][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.463495][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.494135][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.554294][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.598535][T10646] veth0_macvtap: entered promiscuous mode [ 204.676598][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1333'. [ 204.698284][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1333'. [ 204.727816][T10646] veth1_macvtap: entered promiscuous mode [ 204.840671][ T60] tipc: Resetting bearer [ 204.886456][T10646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.966159][T10646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.059819][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.095263][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.132220][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.140084][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.142202][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.242494][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.253970][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1406'. [ 205.264000][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1406'. [ 205.277873][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1406'. [ 205.345298][T10995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.414162][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.439937][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.571667][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.590874][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.695977][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.727412][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.393775][T11049] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 206.754456][T11066] block nbd4: not configured, cannot reconfigure [ 207.088276][T11078] tipc: Started in network mode [ 207.112119][T11078] tipc: Node identity 9e48234424e1, cluster identity 4711 [ 207.129778][T11078] tipc: Enabled bearer , priority 0 [ 207.175129][T11082] syzkaller0: entered promiscuous mode [ 207.200926][T11082] syzkaller0: entered allmulticast mode [ 207.283402][T11078] tipc: Resetting bearer [ 207.300565][T11075] tipc: Resetting bearer [ 207.412811][T11075] tipc: Disabling bearer [ 208.242919][T11140] IPv6: addrconf: prefix option has invalid lifetime [ 208.565290][T11154] xt_policy: output policy not valid in PREROUTING and INPUT [ 208.754658][T11160] __nla_validate_parse: 9 callbacks suppressed [ 208.754684][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1460'. [ 208.858272][T11160] bond1: entered promiscuous mode [ 208.986728][T11160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.018053][T11175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.046691][T11172] syzkaller0: entered promiscuous mode [ 209.052658][T11172] syzkaller0: entered allmulticast mode [ 209.182575][T11176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.213419][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 209.463318][T11189] team0: Device wireguard0 is of different type [ 209.716163][T11200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.723513][T11200] IPv6: NLM_F_CREATE should be set when creating new route [ 209.730773][T11200] IPv6: NLM_F_CREATE should be set when creating new route [ 209.738055][T11200] IPv6: NLM_F_CREATE should be set when creating new route [ 209.777154][T11200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.992436][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1474'. [ 210.025979][T11205] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.229352][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1477'. [ 210.287733][T11214] bridge0: entered promiscuous mode [ 210.296243][T11214] macsec1: entered promiscuous mode [ 210.301728][T11214] macsec1: entered allmulticast mode [ 210.307646][T11214] bridge0: entered allmulticast mode [ 210.317066][T11214] bridge0: port 3(macsec1) entered blocking state [ 210.342723][T11214] bridge0: port 3(macsec1) entered disabled state [ 210.410801][T11214] bridge0: left allmulticast mode [ 210.426574][T11214] bridge0: left promiscuous mode [ 210.607147][T11236] netlink: 'syz.5.1483': attribute type 1 has an invalid length. [ 210.685943][T11243] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1483'. [ 210.913228][T11256] netlink: 'syz.6.1488': attribute type 1 has an invalid length. [ 210.929167][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1489'. [ 210.952351][T11259] netlink: 'syz.3.1489': attribute type 20 has an invalid length. [ 211.038996][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1489'. [ 211.052865][T11259] netlink: 'syz.3.1489': attribute type 20 has an invalid length. [ 211.088417][ T3475] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.096944][ T3475] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.199239][ T3475] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.219107][ T3475] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.366335][T11281] xt_check_match: 55 callbacks suppressed [ 211.366361][T11281] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 211.420427][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 211.535664][T11299] netlink: zone id is out of range [ 211.540982][T11299] netlink: zone id is out of range [ 211.549964][T11299] netlink: zone id is out of range [ 211.555475][T11299] netlink: zone id is out of range [ 211.560995][T11299] netlink: zone id is out of range [ 211.572093][T11299] netlink: zone id is out of range [ 211.577255][T11299] netlink: zone id is out of range [ 211.643046][T11299] netlink: zone id is out of range [ 211.649695][T11299] netlink: zone id is out of range [ 211.778820][T11310] syzkaller1: entered promiscuous mode [ 211.784660][T11310] syzkaller1: entered allmulticast mode [ 212.449391][T11360] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1515'. [ 212.459796][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1515'. [ 212.851754][T11376] Bluetooth: MGMT ver 1.23 [ 212.948497][T11376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.985185][T11376] bond0: (slave bond4): Enslaving as an active interface with an up link [ 213.200747][T11396] IPVS: ip_vs_edit_dest(): server weight less than zero [ 213.207860][ T5827] IPVS: starting estimator thread 0... [ 213.313570][T11402] IPVS: using max 26 ests per chain, 62400 per kthread [ 213.363618][T11412] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 213.375005][T11412] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 213.412647][T11412] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 213.445867][T11412] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 213.469906][T11412] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 213.503963][T11412] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 213.523846][T11420] tipc: Started in network mode [ 213.531093][T11420] tipc: Node identity ac1414aa, cluster identity 4711 [ 213.554648][T11420] tipc: Enabling of bearer rejected, failed to enable media [ 213.883597][T11435] __nla_validate_parse: 5 callbacks suppressed [ 213.883617][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1534'. [ 213.992120][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1536'. [ 214.081600][T11441] hsr_slave_0 (unregistering): left promiscuous mode [ 214.367795][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1541'. [ 214.542982][T11474] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1545'. [ 214.588437][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1545'. [ 214.839093][T11480] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1548'. [ 214.885511][T11480] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1548'. [ 214.887784][T11483] ªªªªªª: renamed from lo [ 215.125484][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 215.146540][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 215.207730][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 215.251331][T11511] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 215.694930][T11537] validate_nla: 61 callbacks suppressed [ 215.694951][T11537] netlink: 'syz.7.1565': attribute type 2 has an invalid length. [ 215.728583][T11540] netlink: 'syz.7.1565': attribute type 2 has an invalid length. [ 215.801381][T11542] ip6gre1: entered promiscuous mode [ 215.865866][T11546] sctp: [Deprecated]: syz.4.1566 (pid 11546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.865866][T11546] Use struct sctp_sack_info instead [ 216.469470][T11577] sctp: [Deprecated]: syz.5.1572 (pid 11577) Use of int in maxseg socket option. [ 216.469470][T11577] Use struct sctp_assoc_value instead [ 216.943693][T11604] team_slave_1: entered promiscuous mode [ 216.961254][T11604] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 216.969114][T11604] team0: Device macvtap0 is already an upper device of the team interface [ 216.984436][T11604] team_slave_1: left promiscuous mode [ 217.419685][T11630] netlink: 'syz.6.1591': attribute type 1 has an invalid length. [ 217.440160][T11632] xt_hashlimit: invalid rate [ 217.684156][T11646] netlink: 'syz.6.1596': attribute type 12 has an invalid length. [ 218.090333][T11674] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20004 [ 218.324136][T11687] net_ratelimit: 35 callbacks suppressed [ 218.324156][T11687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.589939][T11699] x_tables: ip_tables: udp match: only valid for protocol 17 [ 218.940418][T11729] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 219.364677][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.415865][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.438162][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.454423][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.559576][T11758] erspan0: mtu less than device minimum [ 219.687379][T11767] netlink: 'syz.4.1627': attribute type 5 has an invalid length. [ 219.917677][T11778] [ 219.920056][T11778] ====================================================== [ 219.927103][T11778] WARNING: possible circular locking dependency detected [ 219.934154][T11778] syzkaller #0 Not tainted [ 219.938589][T11778] ------------------------------------------------------ [ 219.945631][T11778] syz.5.1632/11778 is trying to acquire lock: [ 219.951725][T11778] ffffffff8f4271d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 219.960918][T11778] [ 219.960918][T11778] but task is already holding lock: [ 219.968290][T11778] ffff88805901f670 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 219.977544][T11778] [ 219.977544][T11778] which lock already depends on the new lock. [ 219.977544][T11778] [ 219.987958][T11778] [ 219.987958][T11778] the existing dependency chain (in reverse order) is: [ 219.996978][T11778] [ 219.996978][T11778] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 220.004987][T11778] lock_acquire+0x120/0x360 [ 220.010021][T11778] _raw_spin_lock_bh+0x36/0x50 [ 220.015327][T11778] nr_rt_device_down+0x12a/0x720 [ 220.020793][T11778] nr_device_event+0x137/0x150 [ 220.026080][T11778] notifier_call_chain+0x1b6/0x3e0 [ 220.031720][T11778] __dev_notify_flags+0x18d/0x2e0 [ 220.037281][T11778] netif_change_flags+0xe8/0x1a0 [ 220.042851][T11778] dev_change_flags+0x130/0x260 [ 220.048250][T11778] dev_ioctl+0x7b4/0x1150 [ 220.053119][T11778] sock_do_ioctl+0x22c/0x300 [ 220.058245][T11778] sock_ioctl+0x576/0x790 [ 220.063114][T11778] __se_sys_ioctl+0xfc/0x170 [ 220.068233][T11778] do_syscall_64+0xfa/0xfa0 [ 220.073267][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.079683][T11778] [ 220.079683][T11778] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 220.087510][T11778] lock_acquire+0x120/0x360 [ 220.092541][T11778] _raw_spin_lock_bh+0x36/0x50 [ 220.097830][T11778] nr_rt_device_down+0xa9/0x720 [ 220.103205][T11778] nr_device_event+0x137/0x150 [ 220.108493][T11778] notifier_call_chain+0x1b6/0x3e0 [ 220.114128][T11778] __dev_notify_flags+0x18d/0x2e0 [ 220.119702][T11778] netif_change_flags+0xe8/0x1a0 [ 220.125173][T11778] dev_change_flags+0x130/0x260 [ 220.130582][T11778] dev_ioctl+0x7b4/0x1150 [ 220.135445][T11778] sock_do_ioctl+0x22c/0x300 [ 220.140716][T11778] sock_ioctl+0x576/0x790 [ 220.145600][T11778] __se_sys_ioctl+0xfc/0x170 [ 220.150732][T11778] do_syscall_64+0xfa/0xfa0 [ 220.155775][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.162213][T11778] [ 220.162213][T11778] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 220.170158][T11778] validate_chain+0xb9b/0x2140 [ 220.175454][T11778] __lock_acquire+0xab9/0xd20 [ 220.180661][T11778] lock_acquire+0x120/0x360 [ 220.185687][T11778] _raw_spin_lock_bh+0x36/0x50 [ 220.190985][T11778] nr_rt_ioctl+0x390/0xd50 [ 220.195940][T11778] sock_do_ioctl+0xdc/0x300 [ 220.200993][T11778] sock_ioctl+0x576/0x790 [ 220.205862][T11778] __se_sys_ioctl+0xfc/0x170 [ 220.210985][T11778] do_syscall_64+0xfa/0xfa0 [ 220.216022][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.222442][T11778] [ 220.222442][T11778] other info that might help us debug this: [ 220.222442][T11778] [ 220.232757][T11778] Chain exists of: [ 220.232757][T11778] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 220.232757][T11778] [ 220.246583][T11778] Possible unsafe locking scenario: [ 220.246583][T11778] [ 220.254033][T11778] CPU0 CPU1 [ 220.259399][T11778] ---- ---- [ 220.264762][T11778] lock(&nr_node->node_lock); [ 220.269533][T11778] lock(nr_node_list_lock); [ 220.276657][T11778] lock(&nr_node->node_lock); [ 220.284212][T11778] lock(nr_neigh_list_lock); [ 220.288896][T11778] [ 220.288896][T11778] *** DEADLOCK *** [ 220.288896][T11778] [ 220.297042][T11778] 2 locks held by syz.5.1632/11778: [ 220.302269][T11778] #0: ffffffff8f427238 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 220.311771][T11778] #1: ffff88805901f670 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 220.321451][T11778] [ 220.321451][T11778] stack backtrace: [ 220.327362][T11778] CPU: 0 UID: 0 PID: 11778 Comm: syz.5.1632 Not tainted syzkaller #0 PREEMPT(full) [ 220.327384][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.327402][T11778] Call Trace: [ 220.327412][T11778] [ 220.327420][T11778] dump_stack_lvl+0x189/0x250 [ 220.327448][T11778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.327472][T11778] ? __pfx__printk+0x10/0x10 [ 220.327488][T11778] ? stack_trace_save+0x9c/0xe0 [ 220.327517][T11778] print_circular_bug+0x2ee/0x310 [ 220.327540][T11778] check_noncircular+0x134/0x160 [ 220.327565][T11778] validate_chain+0xb9b/0x2140 [ 220.327595][T11778] __lock_acquire+0xab9/0xd20 [ 220.327614][T11778] ? nr_rt_ioctl+0x390/0xd50 [ 220.327631][T11778] lock_acquire+0x120/0x360 [ 220.327647][T11778] ? nr_rt_ioctl+0x390/0xd50 [ 220.327672][T11778] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 220.327697][T11778] ? nr_rt_ioctl+0x390/0xd50 [ 220.327714][T11778] _raw_spin_lock_bh+0x36/0x50 [ 220.327733][T11778] ? nr_rt_ioctl+0x390/0xd50 [ 220.327750][T11778] nr_rt_ioctl+0x390/0xd50 [ 220.327772][T11778] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 220.327789][T11778] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.327814][T11778] ? apparmor_capable+0x137/0x1b0 [ 220.327836][T11778] ? capable+0x89/0xe0 [ 220.327853][T11778] ? nr_ioctl+0x1b1/0x3b0 [ 220.327880][T11778] sock_do_ioctl+0xdc/0x300 [ 220.327903][T11778] ? __pfx_sock_do_ioctl+0x10/0x10 [ 220.327930][T11778] sock_ioctl+0x576/0x790 [ 220.327950][T11778] ? __pfx_sock_ioctl+0x10/0x10 [ 220.327970][T11778] ? __fget_files+0x3a0/0x420 [ 220.327985][T11778] ? __fget_files+0x2a/0x420 [ 220.328002][T11778] ? bpf_lsm_file_ioctl+0x9/0x20 [ 220.328021][T11778] ? __pfx_sock_ioctl+0x10/0x10 [ 220.328039][T11778] __se_sys_ioctl+0xfc/0x170 [ 220.328062][T11778] do_syscall_64+0xfa/0xfa0 [ 220.328083][T11778] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.328103][T11778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.328119][T11778] ? clear_bhb_loop+0x60/0xb0 [ 220.328139][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.328156][T11778] RIP: 0033:0x7fd03fd8efc9 [ 220.328172][T11778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.328188][T11778] RSP: 002b:00007fd040d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.328205][T11778] RAX: ffffffffffffffda RBX: 00007fd03ffe5fa0 RCX: 00007fd03fd8efc9 [ 220.328218][T11778] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000007 [ 220.328229][T11778] RBP: 00007fd03fe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 220.328240][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.328250][T11778] R13: 00007fd03ffe6038 R14: 00007fd03ffe5fa0 R15: 00007ffe4aae2998 [ 220.328270][T11778] [ 220.613282][ T5149] Bluetooth: hci3: command 0x0405 tx timeout