last executing test programs: 2m49.111116569s ago: executing program 1 (id=1507): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x7, {0xa, 0x0, 0x0, @remote}}, 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rss_stat\x00', r2, 0x0, 0x40}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3402000010000d04fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x234}}, 0x0) 2m48.936546831s ago: executing program 1 (id=1511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x80002, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000000000000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000000000000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0x1f, @void}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r6}, 0x8) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000200)=r7) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x24, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}]}, 0x24}}, 0x20000000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x24, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}]}, 0x24}}, 0x20000000) 2m48.66538918s ago: executing program 4 (id=1516): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000e5ffffffffffffff00000000000000000000000000000096adf9679dcc7b86c6ded1529df9db7e1b4e9224f17486074873ed02902c1df785db6393492dd741050b69cde81e8657a6cd5c4239b9e9f3d98ee11855a4f9b6507c27fd37d3775adafa120c10"], 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000180)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000100000000000000000000000000c30a000000001812000083fa49330180000000000000baa7a0fe701e9b3428cd4f32c8ef675eae8ac22c465556f43d7a82c170290a0aa50ce167", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m48.549199327s ago: executing program 0 (id=1518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6f56}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000100070000000900020073797a32000000020c00078008001300000003ff0500050002000000050004000000000011000300686173683a6e65742c6e657400000000"], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0xb3}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1e96}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m48.511811659s ago: executing program 4 (id=1519): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633"], 0x6f4}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 2m48.351725027s ago: executing program 0 (id=1522): socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0xa2, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@routing={0x0, 0x0, 0x2, 0x8}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0xa2, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@routing={0x0, 0x0, 0x2, 0x8}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) (async) 2m47.732625949s ago: executing program 3 (id=1523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x4, 0x4) unshare(0x28000000) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000007c0), 0x4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x720, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x2c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xd1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000180ac000280"], 0xc4}}, 0x0) 2m47.73058236s ago: executing program 4 (id=1525): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r5 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 32) r6 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) (async) listen(r6, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) (rerun: 64) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x8054) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) socket(0x1e, 0x4, 0x0) 2m47.729198566s ago: executing program 0 (id=1526): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0}, &(0x7f0000000000)=0x8) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000040)=[{0x2, 0x1, {0x0, 0x0, 0x2}, {0x1, 0xf0}, 0x101, 0xfe}, {0x1, 0x0, {0x1, 0xf0, 0x3}, {0x2, 0xf0, 0x3}, 0xff, 0xfd}, {0x0, 0x0, {0x0, 0x0, 0x1}, {0x1, 0xf0, 0x1}, 0xfd, 0x2}], 0x60) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000200)={r1, 0x8001}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xa2}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x5c, 0x30, 0x7, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@deltfilter={0x3c, 0x2d, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0xb}, {0xffe0, 0x5}, {0x1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x22}}, @TCA_RATE={0x6, 0x5, {0xb, 0xa5}}, @TCA_RATE={0x6, 0x5, {0x7d}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x8010) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 2m47.728464422s ago: executing program 3 (id=1527): r0 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000040)) connect$can_bcm(r2, &(0x7f0000000080), 0x10) 2m47.727018347s ago: executing program 1 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000200)=@newtaction={0x2eb8, 0x30, 0x216822a75a8bdd29, 0x70bd29, 0x0, {}, [{0x2ea4, 0x1, [@m_simple={0x140, 0x1, 0x0, 0x0, {{0xb}, {0x114, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf5, 0x3, 'simple\x00mf\xb5us$\x8c\xf0?x\xf7H!\x04\xc1\xe6\xf4\xb6\xf0\x9b|\xae/uB\xc6\x00\x00\x9f\vg\xaf\xbf\xe3d\xf7\r\xf6\xf4M\xd0\xf7\xf0\xde\xd9n\xaa\xbf\xd1Z\x90v\xcbV\x92-\xaa\xfa+`3$\r\xa7\xf6\f\x7f\x1f\x1e\x18\x01Ic\xddR\x0fi\xac\xf5[/\xf8\xc5D4TA\'\xf5\xeb\xc5\xf9\xc0\x9e\x95dW\xc3L\xe2\xb5\xf0\x97\xd2\xc0\xb8\xf71\\G*u43\x9f\x8b\xe0\x86\xe9\x03Z\xe7\x91X\x8c\xcf\x9fs\xd6\xc5x\xc1\x04\r\x1d\xc6\xa4AK\x1a\xa2I\xdd\x19/\x90\xb1Y6%\xd9\x0f\xd2\xa8\xb3x\x94\xea\xd5\t.\xb2\xcd\xa6H\x7f\xf6\x13\xbb1\xa9\bL#\xcb<\x98\xbcv\x84\xe3\xdd\xa2#z\xb7\xba\xf7Xf\xe4(\x9e\x85e\x90\xd3\xaf\x11T\t\xfd\x16\x16a\xd0\xdc\f-yD\x87^m\xa2/\x8f\xb0\x9eFww7\x8c\x12\x87\xfb\x8c-\xac\xb8=lZ'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x2d60, 0x16, 0x0, 0x0, {{0xa}, {0x1d34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x1, 0x5, 0x5, 0x4, 0x101}, 0x1, 0x8, [{0x6, 0x9, 0x5, 0x6, 0x30f4fbcd, 0x100}, {0x4, 0x6, 0x0, 0x28d, 0x0, 0x5}, {0x7025, 0x9, 0xff, 0x40, 0x80000001, 0x6}, {0x4, 0xfffffffd, 0x2, 0x5, 0xb92, 0x9}, {0x7, 0x5, 0xffffffff, 0xf, 0x3, 0x8}, {0x10000, 0x6, 0x2, 0x10, 0xac, 0xfffffffe}, {0x9, 0x1, 0x6e9a, 0xfb2, 0x7, 0x3}, {0x966, 0x149e, 0x2, 0x852, 0x4, 0x2}, {0x1, 0x2, 0x2, 0x1, 0x2, 0x7}]}, [{0x9c290000, 0x1, 0x4, 0x8, 0x4, 0x81}, {0x0, 0x55, 0x731, 0x4, 0x4, 0x7}, {0x2, 0x4, 0x8, 0x7, 0xe5, 0x6}, {0x10000, 0xffffff4b, 0x80000000, 0x2, 0xf4b8, 0x9}, {0x6, 0x3, 0x2, 0x7f, 0x2, 0xb080}, {0x2, 0xc7, 0xfe, 0x2, 0x5, 0x7}, {0x1, 0x6, 0x0, 0x80, 0x1000000, 0x5}, {0x1, 0x3, 0x9, 0x48, 0x277, 0x3}, {0x75, 0x6, 0x101, 0x5, 0x2, 0x7c826e11}, {0x8, 0x7, 0x8, 0x400, 0x6, 0x1ff}, {0x5, 0x80, 0x7, 0x8, 0x81, 0x4}, {0x10, 0x5, 0xbf14, 0x4, 0x7, 0x9}, {0x40, 0x9, 0x40, 0xfffffffc, 0x6, 0x2}, {0x6556, 0x0, 0xf, 0x9, 0x39a9, 0x94e}, {0x2, 0xa, 0x6, 0xfffffff7, 0x8, 0x9}, {0x0, 0x9, 0x3ff, 0x7fffffff, 0x4, 0xfffffffc}, {0x3, 0x6, 0x10000, 0x0, 0x8f3, 0x2}, {0x3, 0x5, 0x1ff, 0x1, 0x777, 0x5}, {0x6, 0x8, 0x5, 0x8, 0x2, 0x1}, {0x5162, 0x6, 0x4, 0x200, 0x6ec1, 0xe}, {0x4, 0x1, 0xe0, 0x95, 0xb660, 0x101}, {0xfff, 0x10, 0x1, 0xa99, 0x2, 0x9}, {0xb3, 0x8, 0x68, 0x1, 0x10000, 0x5}, {0x9, 0x9, 0xf98, 0xe, 0x1, 0x9}, {0xc1f, 0xfff, 0x3, 0x90, 0xc, 0x200}, {0x4f, 0x2, 0xa, 0x6, 0x4, 0x101}, {0x2, 0x0, 0x100, 0x2, 0x7, 0xa2}, {0x8, 0x1113, 0x4, 0x8, 0xfffffff8, 0x5}, {0x7fffffff, 0x8, 0xd6a8, 0x5, 0x5, 0x4}, {0x9, 0x5, 0x3, 0x0, 0x2, 0xf3c0}, {0x9, 0x0, 0xfff, 0xf, 0xa, 0x5}, {0x80, 0x9, 0xfff, 0x6, 0x8, 0xffff}, {0x1, 0x4, 0xf93b, 0x7, 0xffffffff, 0xec}, {0x119, 0x1, 0x3, 0x3, 0xc4, 0x3ff}, {0x1, 0x7, 0x0, 0xc58, 0x19f3, 0x3}, {0x3, 0x80000000, 0x101, 0x5, 0x1, 0x9}, {0x9, 0x8f4, 0x3, 0x3, 0xad, 0x9}, {0x9, 0x6, 0x0, 0x400, 0x62}, {0x74af, 0x7, 0xf, 0x8, 0x2, 0xc0}, {0x0, 0xa00000, 0x6, 0xde, 0xfffffffb, 0x7}, {0x1, 0x29e3, 0x800, 0x3, 0x7, 0x5}, {0x4, 0x6, 0x0, 0x7, 0x4, 0x80000000}, {0x3, 0x7fff, 0x3, 0xa84d, 0x1, 0x4fa5}, {0x0, 0x7, 0x9, 0xff, 0x80, 0x8}, {0x4, 0x7, 0x100, 0xa2d86e4, 0x7, 0x1}, {0x10000, 0xff, 0x9, 0x101, 0x8000, 0xdb59}, {0x4, 0xb, 0x0, 0x2, 0x1ff, 0x9}, {0xd, 0x2, 0x870, 0xffff, 0xcf42, 0x7}, {0x7fff, 0xffffffff, 0x9, 0x3, 0xfa5, 0x1d}, {0xfffffff8, 0x1ff, 0x401, 0x80, 0x5, 0x43fd}, {0x2, 0xb, 0xeebf, 0xe, 0x6, 0x7}, {0x10000, 0x9d9, 0x8, 0x10, 0x1, 0x3}, {0x8, 0x6, 0x6b61de66, 0x7, 0x6, 0x7}, {0x8, 0xfff, 0x200, 0xfffffff9, 0x7, 0xb}, {0x2, 0xb, 0x9, 0x6, 0x1, 0x2}, {0x10, 0x5, 0xd6f9, 0x1ff, 0x586, 0x8}, {0x1378, 0xa13, 0x5, 0x3, 0x499e, 0x1}, {0x6, 0x7, 0x7fff, 0x8, 0x18c, 0xbe}, {0x4, 0x8, 0x1, 0x1, 0x200, 0x10001}, {0x3, 0x80000001, 0x5, 0xffffffff, 0xb, 0x5}, {0x7, 0x101, 0xfffffffa, 0x7, 0x8, 0x7}, {0x8, 0x8, 0x2, 0x3, 0x9, 0x8}, {0xffffaf33, 0x6, 0xa, 0x3, 0x6, 0x8}, {0x1, 0x6, 0x6, 0xfffffff8, 0x5, 0x3}, {0x3, 0xfffffff0, 0x1, 0x7, 0x8, 0xab}, {0xa, 0x81, 0x7fffffff, 0x0, 0x599, 0x80000000}, {0x81, 0x9, 0x101, 0x80000001, 0x8, 0x4}, {0x5, 0x7f, 0x8001, 0x1, 0xc, 0x5}, {0x81, 0x9, 0x3ff, 0x6, 0x20, 0x36}, {0x0, 0x0, 0x9, 0x1, 0x10000, 0x40}, {0xffffff1c, 0x0, 0x866d, 0x5, 0x9, 0x5}, {0x3, 0x1, 0x0, 0xa213, 0x93, 0x7}, {0x6d, 0x0, 0x7, 0x9, 0x2, 0x5}, {0x8, 0x7, 0xf9800000, 0x2, 0x2, 0x34}, {0x5, 0x5, 0x5, 0xb6, 0x8, 0x1ff}, {0x0, 0x4, 0x7, 0x101, 0x7, 0x6}, {0x52e, 0x0, 0x9, 0x55a, 0x3676, 0xb}, {0x7, 0xfffffff7, 0x6, 0x8, 0x7, 0xfffffffd}, {0x941e, 0x8, 0x5, 0x8881, 0x1000, 0x1000}, {0x2, 0xc18f, 0x8, 0x101, 0x8, 0x4}, {0x0, 0x0, 0xe, 0x3, 0x83, 0x1}, {0xf54, 0x3, 0x9, 0x7, 0x9, 0x6}, {0x401, 0x8, 0x204, 0x1, 0x1fc000, 0x4}, {0x6, 0x6, 0x5, 0x1, 0xfffffffa, 0x5}, {0x6, 0x5, 0x8, 0xff, 0x3, 0x6}, {0x9, 0xf, 0x8, 0x8, 0x3, 0x629b}, {0x0, 0x4, 0x1, 0x4, 0x3, 0x7}, {0x9a, 0x1, 0x100, 0x5dd25cd0, 0x8b, 0x3}, {0x7, 0x8, 0xffffff01, 0x2, 0xfffffff8, 0x6}, {0xffffffff, 0x7fffffff, 0x2, 0x1000, 0x80, 0xfffff862}, {0x49f, 0x1, 0x3, 0x9, 0xffffffff, 0xfb34}, {0x9, 0x400, 0x0, 0x1, 0x3, 0x1}, {0xf90e, 0x7, 0xb6d, 0xa6, 0xe7b9, 0x7}, {0xfffffeff, 0x7fff, 0xffffffff, 0x1ff, 0x4, 0x6}, {0xbbad, 0x80000000, 0x5, 0x200, 0x7f, 0x7}, {0x800, 0x400, 0x4, 0x0, 0x8001, 0xff}, {0x6, 0x1, 0x7, 0x5, 0x3, 0x5}, {0x2, 0xfffffcec, 0x7, 0x8, 0x19, 0x1}, {0x80000001, 0x8, 0xfff, 0x401, 0x3, 0x2}, {0x8, 0x7, 0x5, 0x7, 0xc762, 0xffffff60}, {0x6, 0x7f, 0x5, 0x0, 0xe000000, 0x6}, {0xea, 0x24d, 0x1, 0xf8d, 0xe9, 0x2}, {0x5, 0x8, 0x0, 0xf, 0x9, 0x3ff}, {0x4, 0x7fffffff, 0x7ff, 0x2, 0x2, 0x4}, {0xff, 0xd, 0x7fffffff, 0xac0, 0x6, 0xd}, {0x6, 0xc1e, 0xc00, 0x2, 0x0, 0xfffff774}, {0x7fffffff, 0x6, 0x8, 0x8, 0x61, 0x3}, {0x7, 0x9, 0x4, 0x4, 0x7f, 0x4}, {0x6, 0x9, 0x1, 0x1, 0x6d2, 0xd06c}, {0xff, 0x1, 0x100, 0xfffffff9, 0x9, 0x7}, {0xf60, 0x0, 0xe2a2, 0x0, 0x9, 0x1}, {0x1, 0x4, 0x9, 0x7fff, 0x9}, {0x0, 0x8, 0x1, 0x10, 0x6, 0x6}, {0x1, 0x2, 0x8, 0x1, 0x5, 0x2}, {0x8, 0x7, 0x8, 0x2, 0x9, 0x5}, {0xa, 0x5, 0x6ef, 0x9000, 0x0, 0x1}, {0x5, 0x7, 0xc, 0x4, 0x2, 0x4}, {0xfffffffd, 0xfc, 0x8, 0x200, 0x8, 0xa46}, {0x8, 0x7, 0x6, 0x8, 0x19, 0xb8}, {0x10000, 0x10, 0x8, 0xc, 0x9, 0x1}, {0x3, 0x716b, 0x10001, 0xb95, 0x9, 0x33f}, {0x750f2164, 0x5, 0xcb3, 0x56d7, 0x7, 0x1}, {0x8, 0x200, 0xfffffffd, 0x2, 0x8, 0x200800}, {0x8, 0x9, 0x9, 0x2, 0x5, 0xfffffff9}, {0x615, 0x7f, 0x7f, 0x80000001, 0x2, 0x6}, {0x0, 0x7, 0x4, 0x101, 0x7ff}, {0xfffff18b, 0x7, 0x8000, 0x6, 0x8, 0x597}, {0x7, 0xffffff81, 0x9, 0x8001, 0x8, 0xde0}], [{0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0xb501c662305cba70}, {0x3}, {0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x3, 0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x4, 0xe64b, 0x0, 0x5, 0x3}, 0x2, 0x2, [{0x7, 0x3, 0x0, 0x6, 0x7, 0x7fffffff}]}, [{0x5, 0x6, 0x7, 0xfffffffb, 0xbab0, 0xa9}, {0x0, 0x1, 0x5, 0x1, 0x6, 0x6}, {0x8, 0x5, 0x9, 0x8000, 0xffffffff, 0x4ca97848}, {0x0, 0x4, 0x7, 0x80, 0x7, 0x4}, {0xdce, 0x1000, 0xffff7fff, 0xdda, 0x80}, {0x5, 0x7, 0x5, 0x5f5, 0xb, 0xb}, {0x7ff, 0x6, 0xc90, 0xfdf6, 0xffffffff, 0x4}, {0x3, 0x8, 0xdcf8, 0x7f, 0xfffffff7, 0x80000000}, {0x6, 0x8d6, 0xffff0000, 0x6, 0x81, 0x4}, {0x595, 0x7, 0x6, 0xfff, 0x69, 0xd6}, {0xfffffff8, 0x4, 0x2, 0x3, 0x8, 0x3}, {0x80000001, 0x2, 0x9, 0xa00, 0xdc, 0x7}, {0x4, 0x3, 0x1, 0x1, 0xb2, 0xffffff06}, {0x1, 0x2, 0x7fff, 0xffffffff, 0x4, 0x82}, {0x0, 0x1, 0x2, 0x2, 0x8, 0x10}, {0x9, 0xfe, 0x1000, 0x9dcb, 0x0, 0xc6}, {0x4f20dd42, 0x40, 0x8, 0x40, 0x9, 0x7}, {0x9, 0x9, 0xa1e1, 0x6, 0x8}, {0x5, 0xee, 0xa, 0x8000, 0x6, 0x8}, {0x2, 0x2, 0x6, 0x0, 0x4, 0x4}, {0xffff, 0x4, 0x0, 0x6, 0x1b0b, 0x1}, {0x8, 0x80000000, 0xa9b, 0x1, 0xe000, 0x100}, {0x8, 0x9, 0x1000, 0xfb, 0x7, 0x6}, {0x8, 0x5, 0x9, 0x9, 0x1, 0x1ff}, {0x9, 0x9, 0x9, 0x692, 0x10, 0x6}, {0x6, 0x2, 0x0, 0x8, 0xf, 0x3}, {0x40, 0x6, 0x56, 0xffff, 0xabca, 0x6}, {0x4, 0x7fffffff, 0x4, 0x390, 0x7, 0x9}, {0x9, 0xfffffff7, 0x4, 0x941, 0x8, 0x10000}, {0x80000, 0x1ff, 0x5, 0x7, 0x9, 0x7ff}, {0x8000, 0x5, 0x4, 0x8, 0x80000001, 0x3}, {0xa146, 0xffffffff, 0x7, 0x7, 0x5, 0x8}, {0xbc85, 0xcf1, 0x4ec, 0x5, 0x8001, 0x2}, {0xde93, 0x1, 0x9689, 0xf, 0x2a2, 0x5}, {0x7fb0, 0x72, 0x0, 0xf, 0x9, 0x8001}, {0x4, 0x10, 0x3, 0x3ff, 0xffffff15, 0x3}, {0xd, 0x8, 0x8000000, 0x20000, 0x2, 0x5}, {0x0, 0x77ef, 0x7, 0x1000, 0x7, 0x7}, {0x1000000, 0x5, 0x4, 0x8001, 0x9, 0x10}, {0x8, 0x10000, 0x240000, 0x3a8, 0x5}, {0xe, 0x5, 0x10000, 0x4, 0x1, 0x3}, {0xa, 0x5, 0x8, 0x9, 0x7, 0xffffffff}, {0x5, 0x4, 0x3, 0x0, 0x8001, 0x8}, {0x9, 0xfb1, 0xd07, 0xff, 0xfffffffb, 0x8}, {0x6, 0xeec, 0x6, 0xfff, 0x4, 0x5b0}, {0x7f, 0xd15, 0x6, 0x1a4d171c, 0xd6, 0x68f7}, {0xc, 0xff, 0x3, 0x2cb7, 0x10000, 0x9}, {0x5, 0x9, 0x5, 0x80000000, 0x8, 0xa0}, {0x8, 0x101, 0x7, 0x0, 0x2, 0xfffffff7}, {0xfffffffc, 0x9001, 0x7, 0x80000001, 0x90f, 0x1}, {0x2bce, 0x5, 0x9, 0xfff, 0x9, 0x101}, {0x866e, 0x2, 0xfffffff7, 0xbd, 0xe, 0x2}, {0x105a, 0x151, 0x1, 0x7, 0xf, 0x4}, {0x6, 0x3b8d, 0x8, 0x2827, 0x0, 0x2}, {0x3, 0x800, 0xb36, 0x8, 0x1, 0xffffffff}, {0x0, 0x6, 0x1, 0x3, 0xe, 0xed02}, {0x7, 0x1b06, 0x9, 0x9, 0x0, 0x1}, {0x9, 0x322, 0x100, 0x3, 0x7, 0x3f}, {0x4, 0xfffffff7, 0x2, 0xffffff8a, 0x9, 0x2}, {0x5, 0xfffffff9, 0x5, 0x0, 0x800, 0x2}, {0x3, 0x9, 0x837, 0x5, 0x40, 0x17b}, {0x10000, 0x9, 0xfffffff3, 0xffff0001, 0x6, 0x92}, {0x7, 0x7, 0x0, 0xfff, 0xa, 0x4}, {0x7, 0x4, 0x5, 0x5, 0x744, 0x6}, {0x5, 0x1, 0x6, 0x80000000, 0x7, 0xd3}, {0x4, 0x6, 0x6, 0x2, 0x7, 0x401}, {0xfffeffff, 0xd758, 0x7, 0x2, 0x5, 0x8}, {0x40, 0x9, 0x7, 0x0, 0x1}, {0x7, 0x1, 0x7fff, 0x3, 0x0, 0x4}, {0x7fffffff, 0x3043052c, 0xfffffffa, 0x0, 0x3, 0x3}, {0x5, 0x3, 0xfffffffb, 0x1, 0x6, 0x9}, {0x7, 0xde04ee3, 0x7ff, 0xc, 0x1, 0x7}, {0x1ff, 0x800, 0x7, 0x6, 0x2, 0x6}, {0x5, 0x1200, 0x2, 0x2, 0xf, 0x9}, {0x9, 0xfffffff8, 0xfffffff1, 0x4, 0x1, 0x100}, {0x80000000, 0x3, 0x8, 0x8, 0x8000, 0x6}, {0x10001, 0x1, 0x1, 0x100, 0x5289, 0x67}, {0x313, 0x80000001, 0x1, 0x5, 0xfffffffd, 0x3}, {0xd, 0x8001, 0xa6, 0x101, 0x4, 0x7}, {0x2, 0x400, 0xffffffff, 0x200, 0x6, 0x3}, {0x3, 0x5, 0x2f86, 0x5, 0x1372, 0x3}, {0x9, 0x800, 0x0, 0xa985, 0x40ce83e4, 0x7fff}, {0x6, 0x7, 0xff, 0x5, 0x8000, 0x1}, {0x6, 0x2, 0x0, 0x5, 0x0, 0x5}, {0x10, 0x6, 0xafe, 0x6, 0x0, 0xfffffe01}, {0x7, 0x9, 0x6, 0x8000, 0x8000, 0x800000}, {0x8, 0x2e95, 0xfffffffc, 0x1, 0xff, 0x60a7659c}, {0xfffffff9, 0x80, 0x7, 0x6, 0xd, 0x80}, {0x2, 0x7, 0x2, 0x80000000, 0x7, 0x64400}, {0x1, 0x89, 0xec, 0x9, 0x7fffffff, 0x81}, {0x8, 0x80000001, 0x4, 0x7, 0x3, 0x5}, {0x32e, 0x4, 0x7fff, 0x6, 0x7, 0xe}, {0x6, 0xfffffff9, 0x6, 0xaf2a, 0x1a8b, 0x3}, {0x7, 0x7, 0x2203, 0x8, 0x5, 0x7}, {0x9c, 0xe0, 0xfffffffd, 0x0, 0x0, 0x101}, {0x4, 0xfde, 0x53, 0x3, 0x5, 0xe1b2}, {0xfffff83d, 0x5, 0x4, 0x3, 0x2}, {0x8, 0x8, 0x9, 0xd, 0x8, 0x2}, {0x5, 0x5, 0x5, 0x4, 0x8}, {0x9, 0x3, 0xa, 0x0, 0x0, 0x3}, {0x1, 0x5, 0xffffffdc, 0x2, 0xef, 0xec2b}, {0x4, 0x2, 0x4, 0x0, 0x8000, 0x2}, {0x4, 0x10001, 0x6, 0xfffffffb, 0x2, 0x100}, {0x6, 0xffffff5d, 0x9, 0x9f4, 0x1aa, 0x1}, {0xb38, 0xe, 0x8, 0x5, 0x6, 0x7ff}, {0x3, 0x5, 0x22d, 0x3, 0xc6, 0x8}, {0x1, 0x3, 0x500add72, 0x0, 0x64, 0x800}, {0x7, 0x8, 0xd, 0x4, 0x7, 0x4}, {0x40, 0xa2d5, 0x4, 0x9, 0x80, 0xfffffffb}, {0x80000000, 0x0, 0xfff, 0x9, 0x7, 0x5}, {0x1fb, 0x3370, 0x36b1, 0x2, 0x0, 0x2d3}, {0x6, 0x1, 0x6, 0x1, 0x8, 0x878c}, {0xfffffe00, 0x231, 0x7, 0x4, 0x4, 0x100}, {0x9, 0x6, 0xa9, 0xffff0001, 0x5, 0x1a5176b}, {0x3, 0x8, 0xb7, 0x7, 0xfffffffb, 0x401}, {0x0, 0x6, 0x4, 0x2, 0x6, 0x1}, {0x3, 0x1, 0x7fffffff, 0x1, 0x9, 0xc}, {0x7f, 0x3, 0x1000, 0x1, 0x5}, {0x5, 0x400, 0x8, 0x8, 0x6, 0x4}, {0x2, 0x2, 0x9, 0x5, 0x24, 0x81}, {0x5, 0x4, 0x8, 0xb3f, 0x9, 0xf2}, {0x6, 0x8, 0x0, 0x0, 0x6, 0x4}, {0x68d5b734, 0xa, 0xcf3, 0x8981, 0x6}, {0x8, 0x10, 0x4, 0x80000001, 0x3ff, 0x9}, {0x10000, 0xffff, 0x10000, 0xf, 0x6, 0x80000000}, {0x1, 0x5ef, 0xb7, 0x8, 0x4}, {0x7, 0x30000, 0x8c5, 0xffffffff, 0x9, 0x4}, {0x9, 0x50, 0x9, 0x0, 0x615b, 0x401}], [{0x3}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x812741ebfbd0f69a}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x2}, {0xa5b74fb7718808ad}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x5}, {0x3, 0x1}, {}, {0x0, 0x3e5a9d9293f682eb}, {0x3}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x3}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x4}, {0x4}, {0x2, 0x1}]}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x2eb8}}, 0x0) 2m47.722306043s ago: executing program 4 (id=1529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) setsockopt$inet6_group_source_req(r2, 0x29, 0x38, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001a0001000000000000000000810080000000000000000000140002000000000000000000000000000000000006ab01c1dbbc98c4f31342ed8c393e4bfde2ca67ec03b7bb2573ab300c923cde917f9a47bb19aac2cd75d5edb35e509fbad8dc7626fea5efcc750aa299c22fcf465de9f2a911120cea5c5b621751b047f96c2b4c06a520fe45ea24a2ab75a5de1266d069ded3ee58d525bdde8ea853e6946023afe20edbb9ec824806036aa8291149e6d72c61761cb438294b4b653dfb3e3e1229d132000000000000000000"], 0x30}}, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x5}, {0x7, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x28, 0x2, [@TCA_ROUTE4_POLICE={0x24, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m47.72106732s ago: executing program 3 (id=1530): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) r0 = socket(0x1e, 0x1, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'hsr0\x00', 0xe0}) mmap(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x1000000, 0x100010, r0, 0xbde5d000) 2m47.713516381s ago: executing program 1 (id=1531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x4, [0xf, 0x9, 0x0, 0x4]}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$inet6(0xa, 0x80002, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000001240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="00010000"], 0x18}, 0x20040001) close(0x3) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1f, 0x0, @mcast2, 0x6}, 0xf4) r7 = socket(0x2, 0x80805, 0x1) sendmmsg(r7, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0xfffffffffffff2d, 0x0, 0x3c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100700000000000084e5ff0001000000"], 0x10}}], 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000000c0)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$igmp(0x2, 0x3, 0x2) 2m47.712217853s ago: executing program 0 (id=1532): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000cc0)={&(0x7f00000004c0)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x4000000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0xe5, 0x8, 0x6, 0x4, 0x4, 0x0, 0xf, 0x8}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) shutdown(r0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xdc, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x50a, 0x4a}}}}, [@NL80211_ATTR_IE={0xb6, 0x2a, [@preq={0x82, 0x62, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x0, 0x2, @device_b, 0x1, @value=@device_b, 0xffff, 0xc0000000, 0x6, [{{0x1}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0xfffffff5}, {{0x1}, @broadcast, 0x6}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x0, 0x0, 0x1}, @broadcast, 0x8}]}}, @preq={0x82, 0x4c, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x885e, @broadcast, 0x0, @value=@broadcast, 0x7, 0x2e4bc648, 0x4, [{{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @device_a, 0xfffffff1}, {{0x1, 0x0, 0x1}, @device_a, 0x9}, {{}, @device_a, 0x9}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000180)=0x3, 0x4) socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002c80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={0x0, 0x3, 0x3}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001c80)={{r7, 0x1, 0x2, 0x7, 0x7626ba33, 0x2, 0x81, 0x6, 0x3, 0xe8d0, 0x6, 0x6, 0x3ff, 0x2, 0x4}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000c80)={{r0}, r5, 0x14, @inherit={0x78, &(0x7f0000000040)={0x1, 0x6, 0x7ff, 0x4, {0x1a, 0xffffffffffffffff, 0x4, 0x7, 0x40000}, [0x1, 0x8, 0x4, 0x2, 0x10, 0x7f]}}, @devid=r6}) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 2m47.710376917s ago: executing program 3 (id=1533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@random="26f1911f4f28"]}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x4, 0x9, 0x91, 0x0, 0x55, @private2, @private2, 0x7800, 0xf, 0xa, 0x9}}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000140)=0x5, 0x4) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=@newtfilter={0xd8, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x2, 0xb}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xac, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x0, 0x852e, 0x5, 0x6, 0x7, [{0xfffffffb, 0x9, 0x8, 0x4}, {0x7, 0x2cc, 0x4, 0x7}, {0x1, 0x3ff, 0x7, 0x2}, {0x7, 0x4, 0x0, 0x7}, {0x7, 0x1, 0x7fffffff, 0x400}, {0x8, 0x6, 0x6, 0x9}, {0x3, 0x1, 0x7fff, 0x9}, {0x1, 0x3, 0x5, 0x6}]}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bridge\x00'}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) 2m47.515194952s ago: executing program 4 (id=1535): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="21ab35100075ac4e1b39a19f604341fdcd795b227370a9ae390bdbd689140b26cf53762a6290cb62d74ae371ca45b90aa2c317aa7fa70b541a66f3"}, {&(0x7f0000000180)="f8d4cfe98dde3a9f470ec14c64f45eef805aeee75f0e1738eaa60df574debf8763fb73248bcf054cea0f3f61ca4ba4a560c6cd6d7c82d0b1d87e3129ad8b3c9528751e3ba30f214b382af72482"}], 0x0, 0x0, 0x4f}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0x1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@dev, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xffffffffffffff08) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="21ab35100075ac4e1b39a19f604341fdcd795b227370a9ae390bdbd689140b26cf53762a6290cb62d74ae371ca45b90aa2c317aa7fa70b541a66f3"}, {&(0x7f0000000180)="f8d4cfe98dde3a9f470ec14c64f45eef805aeee75f0e1738eaa60df574debf8763fb73248bcf054cea0f3f61ca4ba4a560c6cd6d7c82d0b1d87e3129ad8b3c9528751e3ba30f214b382af72482"}], 0x0, 0x0, 0x4f}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240)=0x1, 0x4) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@dev, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xffffffffffffff08) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) (async) 2m47.510269454s ago: executing program 0 (id=1536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a0c829fef27fdb1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 2m47.480634437s ago: executing program 3 (id=1537): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'dvmrp0\x00', {0x7}, 0x4}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) listen(r2, 0xea) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x2, 0x801) 2m47.271259166s ago: executing program 1 (id=1538): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000600)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x9, 0x2, 0x0, 0xa, 0x180, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000030000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001f100011800c000100636f756e74657200680000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003c0003803800008008000340000000022c000b80280001800a00010071756f7461000000180002800c00014000000000000000080800024000000000140000001000010000000000000000000084000a"], 0xfc}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@private}, 0x0) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)) (async) socket$netlink(0x10, 0x3, 0x10) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) 2m47.269630575s ago: executing program 4 (id=1539): syz_emit_ethernet(0xe, &(0x7f00000002c0)={@broadcast, @remote, @void, {@generic={0x86dd}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x1e0, 0x1e0, 0x340, 0x340, 0x278, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x11}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0xff, 0x4, [0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x4e24, 0x4e23, 0x4e21, 0x4a23, 0x4e20, 0x4e23, 0x4e20, 0x4e22, 0x4e21], [0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1], 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x11, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @empty, 0x0, 0xff000000, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x800, 0x903, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, 0xffffff00, 0xffffffff, 'veth1_to_bond\x00', 'nr0\x00', {}, {0xff}, 0x67, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000001300)={{r4}, "19dd655ee29a89f067e1352d0c244b0fc112e53703db554497ed30cc9933e1e50c081e963fae16a4ab652a60f2a08dc449892c2416145b05f47bfb5cee74e9edc84b1a63405ffc1db4c71352d736187dc743f64758dda50cb3b7cfaed06c8b1683e9b09322fdff9909d64497ce10d3a7cddbf9d70b7560ea10b9a2933570d949b97b377b78fe1b243523f1449e814852d7b8472367c55db2e3bb107675dbc855b78d74a2135bd93273a311ecbd39877efc35e070d1632033c447044bdb29b8cb467b7f50515ac884eb691699b3e6a1f599394e5a0cea18e4d04c28a37685bfd23db6bdc5beabf8c28a860dee1015a15e26dc3d5f3350cecde214443baed2418868075695a0d955bfd07704d0131034f8c6a562f015fd8fa958f1f1ab7c685f9c77ba2ad38324e56e41eee9a0dbc8486e215278921c7002d17f495db82ef3d44e8d35b8eff5956c0bf037cba0c6b7dabd82cd57a7303b413e86d1623d92508be356abe4b763ec019374d9d54e706491df9b3a65972a59429061bc35f5a2c0efa90409e57a28e929f8eb1e3503c0db3fd95e4b3d4566d172eb2290af017de7e4f9ef3aecb1b8184896355ccb93261dda1dc88f438fe8c16c0a13e7de086ec7f5661a2cbd67bc9adb0c545aed3d24e7c908ceb30def5d655e60c61fc0f54c19c84bcef84f88fcf0d169afd028d25ce3889397ee4d16f5df0dcff1eceb0f1f373b033fd614d2d4b96a6bba0d9dfe2f1318b43e3641ae93e4984149d60f82c488ff15fcb79ba3d7ebef95f026fb2e21890b859ea37d99ee38dffbd64788b2570bc6d684e4a34ccd8217bdca8973fab8c15246cc4e58bcad3b8ce34410bf2e4b317af39be82c3a41b92ba81fbcff6f62dd5f4cf63ce2e793b9319981a5a66f81514a9ee7bad1a54640feeef58c1c289630853832312dfc8f84ef1d73e77a2478aac9082578af7da462ee27b336e386389665ab3ce682448e5e25fb4e050b9b00b1345e067923658ce85b76e1577fad19426ec3421404c8dd1c84ebc5f7ee22aefd318283062e85ee79899484b8645e77946ba004161cb74d59a2b524bf469dae25383f200b916171cf12807303d8a849a6b638391f46e636f5ec2eb2be597828e7df5f30be8793095b6883ab5f70c268657d994f4b11a78eefd0bfe219ca71b4e15c493c5c683b45e6fa6981e33599c8f86aecb2c244d79c9c50fad10fc521cdfa49bb4e22e4f99503fb5c5a48e1d23e7f294199fed94137d163839a10677cd7c27ad6072110660c782772876b468138cac06cf05f4ced1548117e3853454a1b6b7e126eeb212391fb8fdf543f8741dc52674bd57d1fdfb8e6a175f8157376d6c37abc56219ee63190f299d524547b009290cf986b114dbfcf78bd32164d216d08ec73cc278f2db10615700afbfaaffeeed78fcec04b94576065ac2433b9e1465b8d5bdaf0c7d5cf95f0d812ef536dbb894201cf649a7923deda2568520b47703f0cd065f686038012014189a0fc7d60f2efae133dade5f967bc2fa26b55bcdb31b14b929fd30e9860597f8f0aeb27543d74f3378a725e1b52b6ec556df355d104fba9c3c794199106070a076f0ef435e5ae88f28fd177dd2d4444336acba55a3e9526f834a2b02d266653aa953f8905e348187984bafe9eeb74feb9101d9d8dfea0445094ac19702d05dc07ab4dfd0b6db14a61c6a7ce5e1edfd3ef146dd3725746033302b76199e48ec031f784d554360f70f83909319f6229743e7c93d6cd4a3078896911578ebebd6e494e3ee452f2411fa4fa241eb1a0248857841f7259c7f7fd077d3eeff7468818e208baf178ab06ca415d355633f4913fde1e8b541eefe7487af3c927617e54bc7de7ff258adf024ee56abf642004fec73978c3ab7b917573b441c39c5e83fb41e706c9cc5047d1b561ae5621683b157e3fd6a7994c8c7d95ffc8ebe32d2dd22aef2e153cfb873d35c80aadcb0e7d35bac961e737dc1445de467923dad346b1efa4a32c340ad8d8e5710adc30a0fde6486d7407f46a622d8475e1c0ffe59855f5e1efa9e695f7ea5307956b48b6c027d7eccdcd1bf75529ff6c45c03dd1597b3a1cd0e7ac539c98df010d43ef32fd6829d199745c97ce0c1691099f15a9c6d5b1df85fdcba08db620d8d657269fa03cf6c28e995a4fd005b00ac51eb51a418079c8dfc6fcc5c113cc7a275df7d598bb802e567e91b5f2685debdf4366e6258e676332998ce6afbf7fb48c4089f7d93b86d2cb096d2d7752cf767498716b367408c23427c19a53214334ffd61afdc42f2074a1e81028dda2aca6288326b75814286e934363238f8e4df999420ec208523b7cfa76867b0858a32c4f0e2edd10bfbf5ac6df4829cbc2581cf45e1d419075535af95f0866bc246a8445187591f97d7552589b5b31df56650ee740db519b84ab62d4447aeb91a0ae1a9caefc4fbdcb2f46fac10201a6dd1b8f3dbd9d6b159eaea4e87542ebe8c29014a3bd7116995112be11227a40dfe7859b4b073d011dc48ec1fd228bca41d207b584efc753a57d44a1108ca5c8001b6676b2947cd4fa156f8d36b339530cc447cf3189f7db6459ec78b32bd2c7c5626096f510e2c91099cde3f70867d7172749e9c5e4cf47b54885d511af5b5f6f96f7c99a9349128fbecc8de2a78089915028c172efce6185dd12282f9360bc2fa8e309db7eb71b4898f246fae762520ad70940c3c1a38d16c4cf227c1f00657d573d0debb32e33dbd8f9371d715ada9e3e769adf90bda03dd25d5a24c6af5038728518db6781b0a777bc4cfaf2e8e8ae74552df9cb6e0824c574d97811400128c669b8c867bd7a857794902e329d1746842494b21890e41c044252d11c801ac3ce349bf0d45d6ffce1be86c5058ddc6d645c675b4becd65613a67e6ae3b783b594d99c21cda6887a7d69116f2b84faf10087ac37ef65d64f35314075e206d5ebebc6541221bbf5448d2a85ec10c3a0d3dcf369360abaa99ec17952e1c3a9f58e38001f41ec836f84ab0a136e6bfe2c651fa1bde850ae8b920987ac53de6c429c5eca501f6ac5671c060b68a7c04852248c94c34c4265dca9affb25e086ce11128a8c95814cb87dc89d979a2ce94d77b84dcdb2a55c1f64a8e49a2d5fdf0caefbe2727670fa8d81d05d46fe4334ee8df2e418ae9c021edac4cfe64f905d157776fc6def70088d765b5f426e50fe8c485acbf2b8c6f645ce3a44d25b6f775b69d99ea118f3d059215a705f3cb1da823c3e2e537ab4656557ec7234172221376c32d27243a7369d885b01767bc2e5ce492463ae754b1e1d6353aac464d3712c2ad80c8fc569d55a7b75feda1ab5b7ceef987c00691184375446564c3ba86650a38859773f71740cd86d2c8276746c8deac795ed840f083f29ecc84c1aa01334ff47cc9653516524a8a00197bd608d317906e42dfcd917462ac0097fbf9479880db5842389d42f0b75767693f32d475ee5395c73527950946dc54e72a84a8749bc0eaf166845ef6eaf2375717dd4e0689dfe24a4e5663f5c135ee2867692a4f01d36d6eef42d531d6772b715e037f2b0204f7f3c31b01396a43a2b82be8e50640aa098d9de6cf52a21a6337cefcdca52faa8503881a9b07096f3b8ca8303612abaafc4472ee135160dcfa8be2e0a0a0ae6e088006c0e163fc14ecfdbef8c03e7f70f8d1c77dd0899a2dbe73af296718872affca142ddfab97680b850ab3636d191bdcc18f03e6ef3333604dd12413543be07e4c1d28a5e4a62ec14aaed592cef427fa1320e52b591baa756dabb45240e25ffce78cd43b73b74ded2420c9f66621d64cc38401d950c8ab8ea8f6ccf571a5ce9a8ee59948ed8a936efc974b7d63cec1d397cb43efdc01818d062e11448b3afdcaf6dffb9f47b01b8aa22c55b412205fbc974c34f2ca678196a4a2d36daf714aaca9a3b369330c7176edcf5670504c3aadb15bd7d68905f41d2c6aea8dcc81c576e4a7f3a8b5ad2054161dbcfd9794edd1ac7a97c373241f43ab60eb8f2ef1d9fc773e330ff0fdbdcb5f84f8c1f8281e24e7770759c8c9a21903e2bee194c41c30245e26e22d7d3e6ae42aa6af1da621150149512371b14e6dff50286b9730fbf1047cc56a4c6dfa56a1cff3478a176917927690927e6a664628f6dd2287514a62e177e2c6f19e4646bbaad2d724ee6328e94e1a29d33b172b8edf7c36e56fb9a65364ac454ea52e0042637d220faa2b661e85fcda06746d6b9653de144c103820abe8bbd7e27ade065ea02f54848fb7b7203bf64dd9d1c034f6882528dba28e929c64edb955666829829dfa7bfe8ac99cd546e6a4108a73eaa62093cc5eb3e1f1e2e8e0d11d556adb47a1036f299d7cc6ed68f6fa93a7d4776be35bb3776777281002ee8d84a91237bb049b2a80f25f48ebba0364e668292f19530423d40d1001e7f27840b40c7c5a34fcd7c5223ecd99ce0b1d898437d07639d1075bcec82b249d1bd4582ce0fccb163f863b17422d3063f28016cb195886398260a3e5e82fe92e5367f48e9347540521c70b92084a1c2a5f487c512f5cc9f5e511fb5e4fde2d4d072db5c14b369c264232e94ff13c8b25674b9b7882057bd17676c16de0287773372be1803535a81a6bf69d18741a5b51910414e38ce03bb213026046e47c9f3404676a0527bef455c08e8b5ab1ff52269e4e3e71f0f511104f936c21bd1558827e8fd43eb3f96071f19e079b108789bd26c8cce2aee260f968f59e9a17586396d8f84eaaaf228693b1a76dd3c7241e7454f5a8f5164fc6ea8e723a9bdbaf08ec9f23467157df06ee7fc354600eaad16dcfd90146a81998b52f8a9446f7a5a231c1b3c326b48be683e6de9ee0bc99d7af34df478c4c34a83c01bea53ce14ea47ea6f2811478d4a81b225468cbf40d076035ad20ce30bc5b46b4035bcfbe387e7a513175e99f9a30f49c943f918f64ef769e3a9f770fb935fc4eadda1a4bf240f7eac197f962d8a73bd4be00e8c707baee03d9aa4be67b6eaee79e8dfe52d6fbc3346805b329d3abe694ea375eaa0d55ed4e3e4a951c433dc3c1f763eb045842c6c2d38cd3a00137849d7193165d2333de8f5896589c1f8fc44005da27d3413362790ebb37b0b5311118cd8a1e41ce88af8d16d2106ae4291ec8da83106269b073520e5b1f5d3fc254d50a70c56578845fd34333c0e5328527824c221852008dba5ea0f656a1836149c88ea421c3be930b38bc477b0b2bf7c9efaa460657d4a9da8dc263f0ae73efacc72c4fa78c3a2a5e721be8f93da7fdfb1f562865ec05f509d876612d3a9af1481e89258a9d48067987dac5adba05c411fbe862f7cca3f1fb5ae6678073dadf758289c52c378c663378019ca141f912399c8893e908b0261e5608684d934a708065f32096386f015b1bb0c9251ff3c980f88048873cd74a6d1b040f85dbb8798ff6bb4755278f7daa025e5c1ed91be2bdfb6eef833ec4966b0a60d8cb8e3439fbcaed2e5e322e92c4769df23827ec67442389046e8ae0f29d06f71bf9cf5f39f99d4425350fc4805ec190705c147e5011f8412c2ddabe0af2dfa771f7ca55a476b599d7329fdbcdb4831b839539127cca3f5728bb8a27556c037766f6ad91cfa9714d8e1d2a76590ed036b77a30656e6e2ef1c82b569516c971b88d30d844866dce73b63710bd63b4e2d9bd1946d35010d2b2d01d303f89c82d5af17a39a099bae08ac91f81945336da9272a3b51c06d13427b6a66adbfb0d3609161585ea04448e055497f610105bcb76c698f9ee81348"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) write$tun(r4, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) 2m46.849155853s ago: executing program 32 (id=1539): syz_emit_ethernet(0xe, &(0x7f00000002c0)={@broadcast, @remote, @void, {@generic={0x86dd}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x1e0, 0x1e0, 0x340, 0x340, 0x278, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x11}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0xff, 0x4, [0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x4e24, 0x4e23, 0x4e21, 0x4a23, 0x4e20, 0x4e23, 0x4e20, 0x4e22, 0x4e21], [0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1], 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x11, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @empty, 0x0, 0xff000000, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x800, 0x903, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, 0xffffff00, 0xffffffff, 'veth1_to_bond\x00', 'nr0\x00', {}, {0xff}, 0x67, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000001300)={{r4}, "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"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) write$tun(r4, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) 2m46.836899923s ago: executing program 0 (id=1541): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x51}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(r6) r9 = socket(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000000c0)={'ip6erspan0\x00'}) 2m46.564823635s ago: executing program 33 (id=1541): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x51}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(r6) r9 = socket(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000000c0)={'ip6erspan0\x00'}) 2m46.556131635s ago: executing program 1 (id=1542): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x800) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) read(r7, &(0x7f0000000140)=""/113, 0x71) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c020000", @ANYRESDEC=r6, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a20000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x24008804) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000001340)={0x11, @multicast2, 0xffff, 0x0, 'wrr\x00'}, 0x2c) 2m46.55216946s ago: executing program 34 (id=1542): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x800) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) read(r7, &(0x7f0000000140)=""/113, 0x71) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c020000", @ANYRESDEC=r6, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a20000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x24008804) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000001340)={0x11, @multicast2, 0xffff, 0x0, 'wrr\x00'}, 0x2c) 2m46.510793293s ago: executing program 3 (id=1543): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x2, 0x0, 0x1}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1cc6}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x4c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8c, 0x7c}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xff1e, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c50b8645f4c4213db0ea2b872e90901000072e713d1b174a093", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf250f000000040016010500d500010000007c00a6800a00060008021100000000000a00060008021100000000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100002800a6800a00060008021100000000000a00060008021100000100000a00060008021100000100000800a500010000000800a500010000004000a6800a00060008021100000000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000800a500000000000800a500000000000800a500000000001000a6800a000600080211000000000008007e00010000000500d50002000000"], 0x14c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000001) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004890) (async) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r5, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="2d4fe5e124297568df18b750886e8d562d5a1a1d9cec42366aa65e57493a368dc7fba399c9603fa34f439884b91b7a4f0ed226a884d1a6d2c6"], 0x28}, 0x1, 0x6c00}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r5, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "19256d71909828da"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5bd64527218db2448d4f73ae00"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x6}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x400c054) 2m46.5091806s ago: executing program 35 (id=1543): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x2, 0x0, 0x1}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1cc6}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x4c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8c, 0x7c}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xff1e, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c50b8645f4c4213db0ea2b872e90901000072e713d1b174a093", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf250f000000040016010500d500010000007c00a6800a00060008021100000000000a00060008021100000000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100002800a6800a00060008021100000000000a00060008021100000100000a00060008021100000100000800a500010000000800a500010000004000a6800a00060008021100000000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000800a500000000000800a500000000000800a500000000001000a6800a000600080211000000000008007e00010000000500d50002000000"], 0x14c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000001) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004890) (async) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r5, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="2d4fe5e124297568df18b750886e8d562d5a1a1d9cec42366aa65e57493a368dc7fba399c9603fa34f439884b91b7a4f0ed226a884d1a6d2c6"], 0x28}, 0x1, 0x6c00}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r5, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "19256d71909828da"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5bd64527218db2448d4f73ae00"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x6}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x400c054) 1m55.463206204s ago: executing program 5 (id=2032): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x48) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYRES64=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', r1, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m55.106691831s ago: executing program 5 (id=2036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffd}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r6, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) 1m52.970743429s ago: executing program 5 (id=2048): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@x25, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x40080) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) (async) accept4(r2, 0x0, 0x0, 0x0) 1m52.792511368s ago: executing program 5 (id=2051): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x6, 0x1ff, 0x5, 0x57f}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r1, &(0x7f00000000c0)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000180)={0x0, 0x7, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x95}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x6, 0x0, [0x100, 0x9]}}, @hao={0xc9, 0x10, @empty}]}, 0x48) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000200)=0x1, 0x4) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x2, 0x2}, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="e0", 0x1}, {&(0x7f00000002c0)="522063820fd414d837cf747d9872de13a19c3b17c3d065dc7bacf713605ccf756883af42efb5a02c4480e2268071a4c4a21c2657f5e6894ce4d9b0ee41", 0x3d}], 0x2, &(0x7f0000000340)="51547bad8a14b9953ae10290ba97b8ae99a3d56589e2c91acc7aac94f703b6e19dfc3ef7f071130b03841f", 0x2b, 0x801}, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000003c0)=0x1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x210801, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000440)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000c40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000284}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x7f7}, 0x6, 0x8, 0x8, 0x0, 0x26, 'syz0\x00', "5aab0b73e1088d64403eab542a3f3e18314117d8fefbd85a6c1420466f066eec", "169eed269d655b516f168d6dc5bef8b62f153b971bc8c00022c68ed696a6508d", [{0xce0, 0x8, {0x1, 0xfffffffc}}, {0x3, 0xf, {0x1, 0x2}}, {0x100, 0x8, {0x1, 0xffff}}, {0x4f19, 0x8001, {0x2, 0x8}}, {0x7, 0x6, {0x0, 0x5}}, {0x6, 0x9, {0x3}}, {0x1, 0x2, {0x3}}, {0x7, 0x3, {0x2, 0x8}}, {0x3, 0x7, {0x3, 0x2}}, {0x7f, 0x3, {0x0, 0x3}}, {0x4, 0x9, {0x2, 0x68}}, {0x7, 0x4, {0x2, 0x8}}, {0xce3, 0x8000, {0x2, 0x9}}, {0x4, 0xc5, {0x2, 0x3}}, {0xd, 0xe84, {0x3}}, {0x800, 0xbbc2, {0x3, 0x9}}, {0xfff8, 0x7, {0x0, 0x56e9}}, {0x4, 0x0, {0x2, 0xc5}}, {0x2, 0x3, {0x0, 0xfffffe49}}, {0xfffb, 0xffff, {0x0, 0x4}}, {0xfffb, 0xa2, {0x1, 0x800}}, {0x8001, 0x3ff, {0x1, 0x1}}, {0x7234, 0x4, {0x3, 0x6}}, {0xac45, 0xffc0, {0x3, 0x2}}, {0x9, 0x580a, {0x1, 0x400}}, {0x7, 0x3, {0x1, 0x8}}, {0xf, 0x400, {0x0, 0x2}}, {0x7ff, 0x73e, {0x0, 0x8001}}, {0x6, 0x101, {0x2}}, {0x7b2e, 0x6, {0x2, 0xc26}}, {0x2, 0x4, {0x3, 0xffff}}, {0xfffe, 0x101, {0x1, 0xb}}, {0x3, 0x8000, {0xc0a37ce4f4a797d3, 0x7}}, {0x8001, 0x0, {0x2, 0x8001}}, {0xfffe, 0x8, {0x3, 0x3ff}}, {0x8000, 0x3, {0x3, 0x4}}, {0xc, 0x2, {0x1, 0xd}}, {0x8000, 0x1e87, {0x0, 0xfffffff8}}, {0x3, 0xff, {0x1, 0x1}}, {0x75, 0x49, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0xe, 0x2, 0x6, 0x1, 0x18, 'syz1\x00', "b3f32f9344161b997df9db5f3804cf8f4ec7e0a461323cea768084d548bf57c6", "7ac350564ed195da63c3f8e87bc65c4fb84baf489189ef9640e0543e9c1fdb42", [{0xf27b, 0x0, {0x0, 0xffff}}, {0x7fff, 0x5a4a, {0x3, 0x5}}, {0xb2a8, 0x10, {0x2, 0x47}}, {0x8001, 0x1, {0x2, 0x8}}, {0x1000, 0x40, {0x1, 0x7a}}, {0x4, 0x8001, {0x3, 0x100}}, {0x3, 0x0, {0x0, 0x8}}, {0x3, 0xc7, {0x1, 0x5000000}}, {0x49b, 0x1, {0x3, 0x7}}, {0x9, 0x8915, {0x2, 0x2}}, {0x400, 0x4, {0x0, 0x6}}, {0x3, 0x4, {0x0, 0x65d}}, {0x8000, 0xc, {0x0, 0xffffffff}}, {0xfffd, 0x200, {0x3, 0x18a}}, {0xf48, 0x3ff, {0x1, 0xe0f}}, {0x9, 0x6, {0x2, 0x1}}, {0xff80, 0x1ff, {0x3, 0x7}}, {0xfffc, 0x8001, {0x2, 0x9}}, {0x3, 0x8, {0x0, 0x7fff}}, {0x62, 0x81, {0x1, 0xd262}}, {0x3, 0x9, {0x0, 0x7fff}}, {0x1ff, 0x6, {0x2, 0xfffffffd}}, {0x401, 0x8, {0x2, 0xe98}}, {0xfff, 0x81, {0x1, 0xc63}}, {0x1, 0x6, {0x0, 0x4}}, {0x3, 0x401, {0x2, 0x9}}, {0x0, 0x6, {0x3, 0x1ff}}, {0x46, 0x2, {0x3, 0x80}}, {0x9, 0x400, {0x3, 0x6}}, {0xce6f, 0x2, {0x0, 0x1}}, {0x3e3d, 0x7f, {0x3, 0x8}}, {0x7, 0x1cb, {0x1, 0x6}}, {0x101, 0x9, {0x1, 0x80000000}}, {0xdeaa, 0x8, {0x2, 0x40}}, {0xb, 0x4, {0x1, 0x500df8e}}, {0x1, 0x5, {0x2, 0xb}}, {0x5, 0x80, {0x1, 0x1}}, {0x33, 0x401, {0x1, 0x9}}, {0x7ff, 0x4}, {0xfff, 0x2, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x80, 0x12, 0x2, 0xc, 0x19, 'syz1\x00', "b79b7c3dc043cc396c3454a15f00c854c363edfcfec956e92c518a03bf4b89bd", "0efbe25135a0ef673083a0e425877bc254fd0a21d98f614787eaf8db46c996e7", [{0xf52, 0x1, {0x2, 0x800}}, {0xb1, 0xfff, {0x1}}, {0x10, 0x1, {0x1, 0x9}}, {0x6, 0x3, {0x0, 0x10000}}, {0x8, 0xe6b7, {0x1, 0x1}}, {0x10, 0x1ff, {0x1, 0x8}}, {0x100, 0x1c00, {0x2, 0x8001}}, {0x0, 0x9, {0x2, 0x3}}, {0x5, 0x4f0, {0x0, 0x81}}, {0xfff8, 0x0, {0x3, 0x1}}, {0x8, 0x6, {0x3, 0x8c01}}, {0x7, 0xf9a3, {0x3, 0x6}}, {0x7fff, 0xbcf4, {0x3, 0x6}}, {0x5, 0x9, {0x3, 0x7}}, {0x4, 0x8, {0x0, 0x9}}, {0x3, 0x2, {0x0, 0x400}}, {0x3, 0x758a, {0x2, 0xff}}, {0x4334, 0x0, {0x1, 0x3ff}}, {0x6, 0x3, {0x0, 0x2}}, {0x7, 0x0, {0x0, 0xa1b8}}, {0x0, 0x0, {0x2, 0x6}}, {0x4, 0x9, {0x3, 0x8b}}, {0x7, 0x4, {0x3, 0x95}}, {0x3, 0x9, {0x0, 0x38}}, {0x0, 0x0, {0x1, 0xb}}, {0x1, 0x5, {0x3, 0x400}}, {0x8312, 0x7, {0x1, 0x8}}, {0x800, 0x5, {0x3, 0x7}}, {0x7, 0x1, {0x3, 0xea41}}, {0xb, 0x3, {0x0, 0x400}}, {0x2, 0x7ff, {0x2, 0x212}}, {0x4, 0x2, {0x0, 0x8}}, {0x8, 0x6, {0x0, 0x3}}, {0x1800, 0x100, {0x2}}, {0x0, 0x4, {0x3, 0x100}}, {0xd8c, 0x6, {0x2}}, {0x2, 0x8ef, {0x2, 0x7fffffff}}, {0x1, 0x640, {0x2, 0x2}}, {0x1, 0xc, {0x1, 0x2}}, {0x2, 0x0, {0x1, 0xf6b}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x10}, 0x4004084) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000c80)) getsockname$inet(r0, &(0x7f0000000cc0)={0x2, 0x0, @dev}, &(0x7f0000000d00)=0x10) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000dc0)={r6, r5, 0x4, 0x0, @void}, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x48c62000) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) ioctl$SIOCAX25DELFWD(r7, 0x89eb, &(0x7f0000000e00)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) pipe(&(0x7f0000000e40)={0xffffffffffffffff}) sendto$packet(r8, &(0x7f0000000e80)="18f5e9285a1196c88254242c7b80875a8c410c7a8590bc0904a20080007cce6c041faa2b7a739abbc01ac3af21fa44b202e08143b721193a9029c3fd3797e618d2f348ef3e26e83497607855f431477e2e56b8ff983f4dbd93e0ff52a448d5f2e772c8ae96b60ee11cb4f579bd1b084e2b35da380b89f0320c9a4f559c8808465f4e713fbc6089fa93582785ad15407e463101a228a655ce64a5203988ea", 0x9e, 0x4800, &(0x7f0000000f40)={0x11, 0xf6, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) recvfrom$inet(r0, &(0x7f0000000f80)=""/14, 0xe, 0x40, &(0x7f0000000fc0)={0x2, 0xb3, @private=0xa010102}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x20001, 0x0) ioctl$TUNGETSNDBUF(r9, 0x800454d3, &(0x7f0000001040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001080)={0xba, 0xc00a, 0x6, 0xff, r1}, &(0x7f00000010c0)=0x10) socket(0x10, 0x2, 0x3ff) 1m52.635841689s ago: executing program 5 (id=2054): r0 = socket$nl_route(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000002f80), &(0x7f0000003000)=0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x8}}]}, 0x30}}, 0x0) 1m52.378159464s ago: executing program 5 (id=2058): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000010000000000000005000100070000000900020073797a30000000000c00078008000b000000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x58}}, 0x0) (async) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) (async, rerun: 64) writev(r0, &(0x7f0000002ac0)=[{&(0x7f00000003c0)="964d68363f7bfb5c461ce2b0b058d3d16a2de197e2041ab64ce081ded2ff4a4c7d9c13964fa36184b73fc23e931a91666e9223ce145ca5", 0x37}, {&(0x7f0000000a40)="050153038c56f7a983d309a4bf2a0dda7d9deb46e4835ba425e2063a2d0c6071f79ac7044f6920fc6977b4807dbbbef1a81faf00840bb89eb0ee52985250e1f18a59c4bfd81a2fc1ef44309ec87b897bb0c3ef995d8f09fc847d0afb65455105899853aa54942d258bfbabd0f670498219a3d44569bb", 0x76}, {&(0x7f0000000ac0)="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", 0x64d}], 0x3) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401003b8a7000fcdbdf250900020073797a32000000000800410073707700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff}) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) splice(r6, 0x0, r7, 0x0, 0x10d00, 0xf) bind$alg(r6, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) (async) close(r0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r5}, 0x38) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c8000001000030529bd700000001d3714170000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b8000008002e0002000000"], 0x5c}}, 0x0) 1m37.294376752s ago: executing program 36 (id=2058): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000010000000000000005000100070000000900020073797a30000000000c00078008000b000000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x58}}, 0x0) (async) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) (async, rerun: 64) writev(r0, &(0x7f0000002ac0)=[{&(0x7f00000003c0)="964d68363f7bfb5c461ce2b0b058d3d16a2de197e2041ab64ce081ded2ff4a4c7d9c13964fa36184b73fc23e931a91666e9223ce145ca5", 0x37}, {&(0x7f0000000a40)="050153038c56f7a983d309a4bf2a0dda7d9deb46e4835ba425e2063a2d0c6071f79ac7044f6920fc6977b4807dbbbef1a81faf00840bb89eb0ee52985250e1f18a59c4bfd81a2fc1ef44309ec87b897bb0c3ef995d8f09fc847d0afb65455105899853aa54942d258bfbabd0f670498219a3d44569bb", 0x76}, {&(0x7f0000000ac0)="59fe29f425a9db6a3eb28321cf0fc96c932a55b038464c2322cd7cfde7a107b92a960f4a8b80e1e972dc0e952bebc188430297fee766a38cb0d5367c0f85e2ab9d7639c954b8e7903b149f53a4f61c5e55804b06e13531d9c03c6eb5254843bbffe51131680939253eeace3a31e6a22c669380c1f487534120a496531b83f6361b84bdbd1f1fe067102b51c8c046374163d140eb9eb47f58c6aa73e57e67f69f6ce7ab8bc0f606d288ed9d54af1da0aef29855917e5f2e3fc588578d0a947043fe4bb148d58f83c52e07c42ab7ff96f950d03f2fcb5c81655e96fc7880ec76d88bddb17649d534faf1e5b3ebef625c7d8cd10b456a20b5bf29f26c1710ce16eb1fda4387d9949cdc0e5f34be676f31f987b676e8a8381d81eabcb7e0378b11b32b17e661102b04c3d083b5e5a6e4a2bef961d86d66a92be39e4adf600019f5a73a264f58a6365dc53d5170aadcd91c33e6fae5cb2aaaf40ab77423f48e68394c7eb30b1652566644692c048250428a582c9622ad3775c7262653a0579dd6b712764186a92c36f1977b54a36ada59cc0f7ee0f313f339d272061ff5e96c5a54cd13d3180a18ab0ac86aca54aa7ccbcf2cdfe8e208d2dcd9b682e1c06fbfdcff3791f6b20cde5fe10d11c4d2a30aa7a70793a2ad35001552c25849992b984923640ead769767426282b86222536f2a704ae2309cdc832453d1e638ca364694873f84c6fe18a5db184f862d41d5380d388ea0a058ff46ca3cbb8c0ee44076051f204c1f08c7c999c37745a994d20ff97a56e4cae061eb8bdbc8b269e045eea2691fc8f5c61ebf6c32c336499f738d25a4f0530b1dbfa22850019982ba2be5676c763110ef0b75061432bd3a95f20457d5cd76d363445d9f798811e629eb2458fbb5ee3ce1ad2d195f390334e8cc435f5ffb140d406e0fd0c3a16cb2d1b3efbd056a86b7a947ccdaca0d87a5729ae089b9aa4d5fdaf9404984cb05d97f79f3c087cf12f0194a110b0217a0511bf256620965cb11b7a79331a002b1a818ee2701ddc38b515fcd54e17c62edaa115972d08b86364e98144ce79a282d2b48a1ba65c9dc318dbb5dd289f6dbbf848d7a54e64379d7d9587d78d41bded7debb4c6aa95137da51e82d8fca906bc350399c400cff6ff08c4ed3234bff210e422115be86d2063395402a371f86cdae6555d0a74b20f5f1d33a313e742b5bb6a261b042a411c4cb9693f6543e045e61ce40229a1761f42ca7f898439387ffee741bcd7e160b01e55c35747061624a0bc7cbd0cfc616f516c6aa475759fcfe84e295e8e5390699226366e6a56d9500f2dc5cad8d0cf0ec646c83d4f2c0e58182aa9a000319d5375d59762c4fa68dedf7095ccfbb7d18b466349e51c0d932286a41a9b9c80e7480a752bbe4dd85c91c575512f248f4105ba47f65520627548381e2937eb4c69d9e5a4e59b0bf56af05f281d6c46d8a92a9c414958e39ac3f79bc80f44c56531ed4708ae536dc59e22da3aa81c6f312b1e5d98787e942e18ce8b45c7cd1e663710d1c6623b61585ceb784319591402ed0b536cf71c34e8af16d06789c9b642f8aa4bbf0ece00c56c4b289f8789abd7a32b2642395d9c191f9906d450eb727ba37ad13346ec232060bcda883462ac7f86cefcbc6be20ff4b2a15b4ec0dba7239e6deeadde469b3891c33472356220e89295aa43f23080ef56e2e82ad084215fa8221fc5477f9db07f2a2bc189d9f58d8e74b0bc19ed3cbc92f9fd421f48027b73306f047e2cb6a1f12355d530dec182709898ee7c0cab4a02735ce280901b04d5e97134dc7312dd135db29f37c74076d71ebfe34489af94321b4de71fbc985f45aa59ade5ea7993cc3e0cad8724aae60b8e9e5283279687d5c93d5bb99a9c7d0d53c363854dbcbbf447a92c6b6eea271e9a85cb57a6f9db0aefbe3ccd250f70a0b0142f22d444d4566b1f193f2f081a8a9627d146e64b427359c904544e2430eb20c034c5125a451fcbde1a6e24ec4272a283a6208920d3128190fca9905b09aff9f840cf0f6408618d87b09bcb405932ed8b2250e23dedfe5d2d5a9d499c71f4df5f0383677461353cffdc3cfa35976eeafc9f4ecba8c6306e016d7e61bb563d9cca841350e352e133b679ff1c4473eac4acd9a8e3924671e9718f23cf3251fc12cedf4ce653849a11a122bd6960ea039c3039722b9f11253b785c4f47f8ddda5ce4574609741873118bd3b40b6479da8c0d9382f1f81cc642e2173913b5823e05f3ba00c0ffe319ab3e9e7aee19d", 0x64d}], 0x3) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401003b8a7000fcdbdf250900020073797a32000000000800410073707700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff}) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) splice(r6, 0x0, r7, 0x0, 0x10d00, 0xf) bind$alg(r6, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) (async) close(r0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r5}, 0x38) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c8000001000030529bd700000001d3714170000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b8000008002e0002000000"], 0x5c}}, 0x0) 3.161560158s ago: executing program 7 (id=3400): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x700, 0x1, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x64, 0x0, 0x6d, 0x2f, 0x0, @loopback, @loopback}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x60000044) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x800) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="1c000100fd"], 0x9) accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) 2.965420698s ago: executing program 7 (id=3404): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x23, 0x2, 0x8) r1 = epoll_create1(0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x8, 0x5, 0x0, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) sendfile(r3, r1, 0x0, 0x4) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008c0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r4, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x2e, 0x33, @ctrl_frame=@ba={{}, {0x7}, @broadcast, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x0, {0x2, 0x6}, "a3b03a55d36d770e"}], {0x0, 0x4, {0x1, 0xf4a}, "3f0ad297d9b4f769"}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xa2, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB="cd070c4a556da64b87d7dfe8c6eeccc149daecb7a770ecc76b93fa39859d725bd5cdcc1777d7af", @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004", @ANYRES64], 0x4c}}, 0x0) 2.694645798s ago: executing program 7 (id=3408): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2.524222537s ago: executing program 7 (id=3412): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = socket(0x200000000000011, 0x2, 0x4) (rerun: 64) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) (async) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000000a0603000000000000000000050000050900020073797a32000000008c0008800c00ba3c0bb947f950078008000a40000000020c000780060005404e2000000c000780060005404e2100030000000000000040000000040c0007800800084000000042b3e8797e7c1c03cf100007800c001840000000000000ed67100007800900130073797a3100000000100007800c00148008000140ac1414bb0c0007800800064000000004100007800bb7bb654b3a5d5c272c000009000200"], 0xb8}, 0x1, 0x0, 0x0, 0x50}, 0x8042) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x7f) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async, rerun: 64) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000080)=0xfffffffa, 0x4) (async, rerun: 32) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (rerun: 32) 2.347024396s ago: executing program 9 (id=3413): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=""/49, &(0x7f0000000140)=0x31) socket$kcm(0x11, 0xa, 0x300) 1.791343536s ago: executing program 7 (id=3420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8927, &(0x7f0000000000)={0xffffffffffffffff, 0xd93a}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) 1.790492064s ago: executing program 9 (id=3421): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x8, {0x7, 0x0, 0x6, 0x80, 0x2}, {0x0, 0x2, 0x1, 0xc05, 0x77}, 0x2, 0x5, 0xffffffff}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x80, 0x7, 0xecf, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xd81, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) 1.786645165s ago: executing program 2 (id=3422): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x2}, {0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0xfffffffffffffffd}]}, 0x104}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x4, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6b}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) setsockopt(r2, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x9}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x32, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x9}, 0x1, 0x0, 0x0, 0x42804}, 0x4000804) 1.549351555s ago: executing program 7 (id=3424): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, 0x0, 0x0) r12 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r12, 0x180000000) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200048e5}, 0x4c010) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r13, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/38, 0x26) 1.491217321s ago: executing program 2 (id=3425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x17, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) 1.378476926s ago: executing program 2 (id=3426): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) (async) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000d40)="b2", 0x1}], 0x1}}], 0x1, 0x4004844) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f00000000c0)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80000, @local, 0x1000006}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}, 0x4004040) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x17c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffe0, 0x5}, {0x10, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x148, 0x2, [@TCA_MATCHALL_ACT={0x134, 0x2, [@m_mpls={0x130, 0x1d, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xdc5e8}]}, {0xf9, 0x6, "209c828aa0a19fc50060b2ae384c5a816a2120e3993b71878bb6a10b5e16a154c5d29c92ea891856b6c2aadfc28c5b9277e37661a0d64bcfb0647eb0a7dd306fe4dfeb1d63923505c01c17f55e1b5f7098f7a3e2b856e686a0524f8de3acc10437c38283f660b4f19324c610a1b3e763104a993db6c5451521ad0312f64e4f171be47e43130050bcd9a35c16aef3961a49e653bd7567c021dc77a7b29cf9d5eb0a11925964275ac6ebc7dca2cf72cf1dc26f7dcbffcf89df1fcdeef72beac46261275ad02deb4ee36d56c2b9a7624eac6bea01ef7ffeb24728109951cb84df13e3edacc2fceb98259a01fcc42e132d07806844e7ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20040805}, 0x20000000) (async, rerun: 64) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (rerun: 64) 1.099118283s ago: executing program 6 (id=3429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], 0x42c}}, 0x40000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) close(r4) r5 = socket(0x2, 0x8000e, 0xa) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f0000000400)) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4048054) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000031404002abd7000fbdbdf250900020073286ee0e9864204094d26c5107b9849797a300000000008004100727825001400330074"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x20000004) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = socket$kcm(0x29, 0xd, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x1401, 0x15e7978cdcb3186a, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040854}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x4010, r10, 0xdead2000) 939.25107ms ago: executing program 2 (id=3431): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r1], 0x40}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xfff3, 0xfff1}, {0x1, 0xffff}}, [{0x4}, {0x4}]}, 0x2c}}, 0x20004084) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x7, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4020080) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x1}}, 0x2e) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32, @ANYRES32=r0, @ANYBLOB="b968afc45bdb66eceda3ff893fc381bceabd433489fe050a1bdfbd8d93b3234f08e0232915b919408056d0bc7dbbcbddaa33c513", @ANYRESDEC=r12], 0x3c}}, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) write$tun(r13, 0x0, 0x0) (async, rerun: 32) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 32) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="3cce00002b80525a24211ef8145315781715490b92c694039a6bb7ff5ddb623b100f3391500182166115ac17c5430416e3bf00", @ANYRES16=r14, @ANYBLOB="010026bd7000fedbdf25050000000800090000000000060001000500000008000c00aa0a000008000b00040000000500050000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 875.370893ms ago: executing program 6 (id=3432): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x8}, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x23}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) 874.836493ms ago: executing program 8 (id=3433): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x5, @private1, 0xa7d}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e21, 0x0, @remote, 0x40}}}, 0x90) 851.592692ms ago: executing program 9 (id=3434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) syz_emit_ethernet(0x66, &(0x7f0000001640)={@remote, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x30, 0x0, 0x0, @local, @remote, {[@dstopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x5e4, [0x9, 0x6, 0xad1000]}}, @padn, @padn]}]}}}}}, 0x0) syz_emit_ethernet(0x10a, &(0x7f0000000000)={@broadcast, @random="86ea56a893a6", @void, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x81}, {0x3, 0x0, 0x1}], @ipv4=@generic={{0x19, 0x4, 0x0, 0x8, 0xec, 0x67, 0x0, 0x5, 0x0, 0x0, @empty, @multicast2, {[@rr={0x7, 0x1b, 0xfa, [@private=0xa010102, @remote, @private=0xa010101, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1f}]}, @noop, @ssrr={0x89, 0x2b, 0xb1, [@rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010100, @empty, @broadcast, @loopback, @multicast2, @private=0xa010101, @remote, @loopback]}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}]}}, "82ddf4bddc37683d25aba8b7e188c98f465741ac3f28ab935471cc4a51b71532532c91dd2afb6f4922115cce4ec4b34219b52f2b9f3cd2aeb172e42d24755921cbf14e4414c4cb858259d059996d2e1b6385628ad308282dd1be76006de968cfb8c5014228f853fc320195227f4852f27e199272f7c6b49810537080ab655464263bc748d1c41468"}}}}}, &(0x7f0000000140)={0x0, 0x3, [0xf20, 0xba7, 0x823, 0xd42]}) 809.706855ms ago: executing program 8 (id=3435): getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000100)) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r4, 0x118, 0x3, 0x0, &(0x7f00000003c0)) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) 728.530572ms ago: executing program 6 (id=3436): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180), 0x0, 0x4014}, 0x2c0408d0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) socket(0x22, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0xb) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x20, 0x1, 0x0, 0x0, 0x4}, 0x50) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000400)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) 683.066504ms ago: executing program 8 (id=3437): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [@hopopts={0x11}], "fafb17c133d11e59bb99c35bdfcf89f5"}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0xc38, @private1, 0x6}, 0x20) (async) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0xc38, @private1, 0x6}, 0x20) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, r3, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x24000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x1, 0xb, 0x5, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x44080) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400400c}, 0x4000010) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400400c}, 0x4000010) 608.870008ms ago: executing program 6 (id=3438): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) close(0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x6b) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001200010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0088734ec54cefc4d501000089f2df1c08002e0001000000"], 0x28}}, 0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}}, 0xbc1, 0x400}, &(0x7f0000000140)=0x90) r3 = socket(0xa, 0x1, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0xe0}) listen(r1, 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f0000000180)="51b58ca7b96208509a1171ba845ab264de1c27e022465755eb6d4ac177a92f1386e5658bd093751be3433be2dffbb331e6b965f0a7eb80179f7ac83ca74003eea687f1f178b29a57e176912f63488ddb5666d33203638c8bf8178fe00ea4a8135f38f50a20f0289b", 0x68, 0x0, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) (async) close(0x4) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x6b) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001200010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0088734ec54cefc4d501000089f2df1c08002e0001000000"], 0x28}}, 0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}}, 0xbc1, 0x400}, &(0x7f0000000140)=0x90) (async) socket(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0xe0}) (async) listen(r1, 0x1ff) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendto$inet(r4, &(0x7f0000000180)="51b58ca7b96208509a1171ba845ab264de1c27e022465755eb6d4ac177a92f1386e5658bd093751be3433be2dffbb331e6b965f0a7eb80179f7ac83ca74003eea687f1f178b29a57e176912f63488ddb5666d33203638c8bf8178fe00ea4a8135f38f50a20f0289b", 0x68, 0x0, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) (async) 527.004896ms ago: executing program 9 (id=3439): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000074002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200006f64ffe008000000b7030000000000008500000039e216ed5f861f16ec302ef31af4013bdc576ae9efdf0281dae34018e603d867e38eba52bb189525ccfdc3f96b5ad0bd89d120cf0688f94d140e30da4cb05f171b9db0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe9, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000080000000000000000000009500050000002c6fa285ddbd4ce3e351f800"/43], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r1 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x6) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x2000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x3c}}, 0x0) listen(r0, 0xa) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000074002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200006f64ffe008000000b7030000000000008500000039e216ed5f861f16ec302ef31af4013bdc576ae9efdf0281dae34018e603d867e38eba52bb189525ccfdc3f96b5ad0bd89d120cf0688f94d140e30da4cb05f171b9db0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe9, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000080000000000000000000009500050000002c6fa285ddbd4ce3e351f800"/43], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) socket$inet6(0xa, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) (async) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) listen(r1, 0x6) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x2000}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x3c}}, 0x0) (async) listen(r0, 0xa) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) (async) 480.97428ms ago: executing program 2 (id=3440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1830011000000000000050000000c009900000000005d00000054000e0088000900080211000001fff7ffffffffec03f3b85ad30000a1ffffffffffffff0400000000060101010101010103ec053604060a0108000000060243832a01007206030303030303760600000000000008000c0009000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = gettid() r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x800, 0x1, 0x0, 0xd, 0x80, 0x80}, 0x20) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x5, {}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@broadcast, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10400020}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x12c, 0x3d, 0x100, 0x70bd26, 0x25dfdbfb, {0x3}, [@generic="b30ce8dfe99718386aab501ad0aa77ca8100e9236ff622d89e71", @typed={0x8, 0x42, 0x0, 0x0, @pid=r2}, @nested={0xe0, 0x5a, 0x0, 0x1, [@nested={0x4, 0xa0}, @typed={0x8, 0xc2, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x118, 0x0, 0x0, @fd=r4}, @typed={0xbd, 0xa, 0x0, 0x0, @binary="729235dfac8fa9e5a7dd67a2c4a6593499d7cf8346717dab69a4f1e4a3d5ab2b28247f4058e40c3f04983ef354fe107984199d2e3900d97baaf5b7836aae720cbb5362f1b5914aaff4ff0a65c4851594ad061d902950feb98b793a680e5486eb9169373f4cbade5cf0c8a30b281f9aa8914f56a7c84881a33be7e78f5195ceccc4faf3e14a48d8458e58ac2b6f7e4b41babce1e717c90d445f01ceea7827af6b841382b09d8202c896a3039c041daed2cf306fbc549d4225d2"}, @typed={0x8, 0x91, 0x0, 0x0, @uid=r6}]}, @nested={0xc, 0x12a, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @u32=0xd}]}, @typed={0x8, 0xee, 0x0, 0x0, @u32}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xc, 0x6, {{0x8, 0x4, 0x3, 0x3c, 0x20, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@timestamp_prespec={0x44, 0xc, 0x32, 0x3, 0x7, [{@remote}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x24}, 0x94) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25CTLCON(r9, 0x89e8, &(0x7f0000000640)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0xc, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @default]}) 378.230042ms ago: executing program 8 (id=3441): sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x3f2, 0x4, 0x70bd27, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40004000}, 0x40000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000740)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0x6, @private2, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x32, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}]}, 0x60}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_gstrings={0x1b, 0x6, 0xf8, "c183b650cb2a7e81a40b17266ad0d486705654f27f3de73f1b3cc5371c245db7ad2e6cc6da24ef2ef2518adfedec0e15bc957edbd70d522403a251ef9ff15d02cbabd0f3ae81ea8e236778b20c6647b251ef31aae410c4c59b3e3c957dfdfc62f80f45d19b8f059c9cac3523647d776594d8f26118b7eb6f699d9e44cbef134a24ce0072b118b67442a5ec17078e15b4e1eb952f297356e6d2c3bcb472f6a57ce333c48911cc1ee207ec1d121ffc0c4828d0653f825fddb873cfb5ed2509b4fe36db1613cb9d73ad55e57dd4b1e11b9259e1de597d638172988ac36dd23d4b07352f026e201b091c288841c4044ef4723b2f02d2c0df5b98"}}) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x15, 0x0, 0x1, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe8, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffffb}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x73, 0xa9, @random="60b7781ec4c47c5b819ce0e635179986d6d864868de8caaf50423db4be3b1b0eadb2132b22c60fa330e89f223fee2ed14cb8e00893ae353df1bed303e8d41a10fff7cbfce225af32eedc8444db02492d69ba3a01033adfb11f52acdbafef2fd707fb1b7c8c2cb36cd27612bf2ad855"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x28, 0xa9, @random="b333148a770c2573ff974742b796c577541f0727158f638ce20f8cf09da6784618acccf5"}]}, 0xe8}}, 0x1) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c73e4a3debbe5a12892f123369bb43bbd0558ea3be4453e02038ad28b823e11e4ad8302896ce4a8c0a07216f5c994402a6e34b1b3a6ce109b412581ee0a6db9e245668ec59f88bdca138987e7b61df3e708357833cbe299a4fbf080171278a1108acbfcd91b43d674253", 0x6a}, {&(0x7f0000000180)="e9c130ca4c59e0b344308c2c99fa69f5a2d2569b51c84ca85e0a459fddd8699d36f37b877d7d79bf65452cc4bbc90369960421a8c982c5ec3f70810481e2f951391dd37a88222599f02454ef60545556e70b4303836cfe018caed89b3d291c7430746fe7ccabbaa43f1e43d09461dcb810c62225ed65007ca8849777000149b5049cd16d56bf7f0490f6b46b331fd6c218ed0bce0bc299473dd25f4d4d75d5ab824cdfd8f82056520ef1be5457c1f7685b3868e1e0615ff0f607cb39065fec7ddc0e7e3fe0de574ddc25965ed5a54b17ad8bcd47dc87751824355f2ff393cec6de60921a0296a083a5e99fa3babc4d7042668687700d591fcd", 0xf9}], 0x2, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x369d}}], 0x60}, 0x2400c840) close(0xffffffffffffffff) 267.346141ms ago: executing program 6 (id=3442): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a01040000000800"], 0xf0}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="9ed7560718", @ANYRES32=r2, @ANYRESOCT], 0x4c}}, 0x4040810) 266.595191ms ago: executing program 9 (id=3443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x7}, {0x2}}}, 0x24}}, 0x8041) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 210.767529ms ago: executing program 2 (id=3444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 153.782186ms ago: executing program 8 (id=3445): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="620ac4ff00000000711036000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) socketpair(0x10, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000140)=r5, 0x4) 79.19917ms ago: executing program 6 (id=3446): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000940000009400000003000004020000000082332dc071146fd4000007000000000500000004000085430700000500000005000000060000000c000000000000000e0000000c00000000000000060000000f000000040000000200000006000000020000060400000010000000040000000c000000faffffff0700000000000002040000000900000003000006040000000f000000ed090000000000000005000000070000"], &(0x7f0000000180)=""/98, 0xaf, 0x62, 0x1, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000540)={0x5, &(0x7f00000003c0)=[{0x7f, 0x42, &(0x7f0000000080)="3acec5cac5793dbbdc70654077832599cca6cf1ae25ea60d760ea4f2d87e1953a3e72bf44a3f7ad226d62454690f0993f4824947346148bf7e2d316c586fa932130a", 0x0, 0x1}, {0x8, 0x5f, &(0x7f0000000100)="6e595f594fb71499dcc13ca0d25fa4ac1053c8f1de1f7d8a5260a9d0abc0b0c45d62688cbd9920c2b0aa2c9d2ea3d75cae96c0762e7d9d78cd1fa12809b3d43e909c85fe0b108f67c0f59c4100070e9ec11b9f2a93c7ac21cb29944d673644", 0x1, 0x1}, {0x40, 0x3c, &(0x7f0000000300)="793d85fa22cb80f2a5966958d255bf6d303230d06ec00ffe7a77b03bd0225e37e4efe0c4ae1d40f3836126a46807fb50ebaeb2aa5a49c8090db8ed1b"}, {0xd5, 0x6d, &(0x7f0000000340)="4a9ba95b447e1f3575e692813d6889678c05f86dd02ffdf634cfd5d6adc97f215122243077813f83440e9b9d9da2ceb7485b604a1a2809f6341d4f846ca200a70c0944617415e022aff40d3aa6d5cb77c02cf32a8b3880d62e0c74dd9ae4ec588736f73703db5b26021a160348", 0xc935dcf27e35ac, 0x1}, {0x80000000, 0xd8, &(0x7f00000006c0)="42ca3f7b88ca4fd1f58f8ca2a8c6cdc21359597c51f80d7ba10b78315f4aa2f640231089d56284eb1b8fc01287bbc20eb76f88e25172ec921073f0ec9b9267a829e855ebda412d7676e1174daef672082959f82129530b603ef220053cd3c78c2109033f000a51043495cf1d462434209a6094cf9e776b90fe8d318ade58a83755d3891ebfb2797f74c070c368013bd55754b22dbcb0182f9b902ded081705425856de933d3e97f15eea8a4336eb91cf1b68deb325d1d80ef27172c57fdd6067631c0c7325ccc68a91ac2e9001c41e9f4e00a7b58318e853"}]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) pipe(&(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0xffff18c1, 0x8, 0x4, 0xff}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xbc, 0x0, &(0x7f00000007c0)="25177ff5478a69228fbe25ce453518056329a35c4a04591625805b4a872a0cada74809f734c8af572a38a00fb440f9e54d8ff5a59ac882e30b0580cfafabcddcc0516dd5f0c28ccb3c0cde961282b435e5b54dddfaae3d9cda1b6cdf622f38a7afd4551fcd0c10af4c3d9345588c2c4788d8edeca45fb5c67c161331320dcd5fb9f0915e4a03af6cfcc863cd221011dec125f12fc75d7b3e114dc96e0296d82fa479c4d384f3316912298e5d7b8e515a39effe7a968cf0b50e98a42e", 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.830889ms ago: executing program 9 (id=3447): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80001}, {0xfbfffffa, 0xa23e}]}}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073017f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) 0s ago: executing program 8 (id=3448): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) (async) kernel console output (not intermixed with test programs): escuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 253.243975][T12438] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.260709][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.333017][T12438] bridge_slave_0: left allmulticast mode [ 253.338741][T12438] bridge_slave_0: left promiscuous mode [ 253.347144][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.365140][T12438] bridge_slave_1: left allmulticast mode [ 253.372094][T12438] bridge_slave_1: left promiscuous mode [ 253.377861][T12438] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.396505][T12438] bond0: (slave bond_slave_0): Releasing backup interface [ 253.417262][T12438] bond0: (slave bond_slave_1): Releasing backup interface [ 253.436792][T12438] team0: Port device team_slave_0 removed [ 253.452993][T12438] team0: Port device team_slave_1 removed [ 253.465208][T12438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.477216][T12438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.490769][T12438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.502804][T12438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.522250][T12438] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.540336][T12426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.261522][T12454] netlink: 'syz.8.1853': attribute type 1 has an invalid length. [ 255.273580][T12455] netlink: 'syz.8.1853': attribute type 1 has an invalid length. [ 255.294169][T12454] netlink: 'syz.8.1853': attribute type 12 has an invalid length. [ 255.306946][T12461] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1851'. [ 255.311117][T12459] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1851'. [ 255.381083][T12469] veth0_to_bridge: entered promiscuous mode [ 255.644244][T12484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1858'. [ 255.876985][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1860'. [ 255.932380][T12496] syzkaller0: entered promiscuous mode [ 255.938390][T12496] syzkaller0: entered allmulticast mode [ 255.952345][T12493] syzkaller0: entered promiscuous mode [ 255.961948][T12493] syzkaller0: entered allmulticast mode [ 256.298299][T12450] veth0_to_bridge: left promiscuous mode [ 256.482258][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1869'. [ 256.525753][T12522] dvmrp0: entered allmulticast mode [ 256.659450][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 256.834969][T12546] Cannot find set identified by id 65535 to match [ 257.178046][T12568] netlink: 'syz.6.1882': attribute type 10 has an invalid length. [ 257.213717][T12568] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 257.253807][T12568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.497729][T12583] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 257.515664][T12592] netlink: 'syz.5.1887': attribute type 8 has an invalid length. [ 257.525405][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1887'. [ 257.536477][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1887'. [ 257.553402][T12583] bond1: entered promiscuous mode [ 257.558509][T12583] bond1: entered allmulticast mode [ 257.565449][T12583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.720901][T12594] wg1 speed is unknown, defaulting to 1000 [ 258.025444][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1894'. [ 258.030308][T12619] openvswitch: netlink: IP tunnel dst address not specified [ 258.055279][T12619] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1896'. [ 258.074313][T12619] syzkaller1: entered promiscuous mode [ 258.087575][T12619] syzkaller1: entered allmulticast mode [ 258.095261][T12617] netem: unknown loss type 0 [ 258.100844][T12617] netem: change failed [ 258.205058][T12620] netlink: 'syz.7.1894': attribute type 7 has an invalid length. [ 258.220619][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1894'. [ 258.468293][T12634] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 258.507868][T12643] bridge0: entered promiscuous mode [ 258.691233][T12649] netlink: 'syz.8.1904': attribute type 1 has an invalid length. [ 258.728747][T12649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.765424][T12659] netlink: 'syz.5.1905': attribute type 13 has an invalid length. [ 258.767148][T12649] vlan2: entered promiscuous mode [ 258.779577][T12649] bond1: entered promiscuous mode [ 258.790646][T12649] vlan2: entered allmulticast mode [ 258.795829][T12649] bond1: entered allmulticast mode [ 258.807409][T12659] netlink: 'syz.5.1905': attribute type 17 has an invalid length. [ 258.810026][T12649] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 258.820956][T12661] netlink: 'syz.7.1903': attribute type 1 has an invalid length. [ 258.844166][T12661] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1903'. [ 258.867294][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1905'. [ 258.888571][T12649] bond1: (slave gretap1): making interface the new active one [ 258.897871][T12649] gretap1: entered promiscuous mode [ 258.903540][T12649] gretap1: entered allmulticast mode [ 258.914800][T12649] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 258.988209][T12659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.014693][T12668] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1907'. [ 259.054825][T12666] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 259.093726][T12622] bridge0: left promiscuous mode [ 259.129113][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1909'. [ 259.373648][T12685] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 259.441859][T12690] sctp: [Deprecated]: syz.6.1913 (pid 12690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.441859][T12690] Use struct sctp_sack_info instead [ 259.486645][T12690] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1913'. [ 259.777489][T12706] sctp: [Deprecated]: syz.7.1917 (pid 12706) Use of int in maxseg socket option. [ 259.777489][T12706] Use struct sctp_assoc_value instead [ 259.967337][T12703] bond2 (unregistering): Released all slaves [ 260.279969][T12699] infiniband syz0: set active [ 260.295166][T12699] infiniband syz0: added bond_slave_0 [ 260.434674][T12699] RDS/IB: syz0: added [ 260.463832][T12699] smc: adding ib device syz0 with port count 1 [ 260.502314][T12699] smc: ib device syz0 port 1 has no pnetid [ 260.734139][T12744] netlink: 'syz.7.1931': attribute type 20 has an invalid length. [ 260.825590][ T6840] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.839544][T12744] netlink: 'syz.7.1931': attribute type 20 has an invalid length. [ 260.866242][ T6840] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.033710][T11563] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.077579][T11563] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.150206][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.267932][T12753] netlink: 'syz.2.1935': attribute type 29 has an invalid length. [ 261.295345][T12754] netlink: 'syz.2.1935': attribute type 29 has an invalid length. [ 261.515425][T12765] netlink: 'syz.5.1938': attribute type 1 has an invalid length. [ 261.549626][T12765] netlink: 'syz.5.1938': attribute type 11 has an invalid length. [ 262.625302][T12786] __nla_validate_parse: 15 callbacks suppressed [ 262.625323][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'. [ 262.677438][T12788] tipc: Started in network mode [ 262.682826][T12788] tipc: Node identity 0ac162494367, cluster identity 4711 [ 262.694474][T12788] tipc: Enabled bearer , priority 0 [ 262.702567][T12788] syzkaller0: entered promiscuous mode [ 262.708196][T12788] syzkaller0: entered allmulticast mode [ 262.759877][T12788] tipc: Resetting bearer [ 262.793562][T12787] tipc: Resetting bearer [ 262.859109][T12787] tipc: Disabling bearer [ 263.167659][T12802] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 263.198584][T12802] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 263.205528][T12809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.207502][T12802] gretap1: entered promiscuous mode [ 263.226346][T12802] gretap1: entered allmulticast mode [ 263.274923][T12808] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1955'. [ 263.357757][T12807] tipc: Enabled bearer , priority 0 [ 263.370317][T12807] syzkaller0: entered promiscuous mode [ 263.375936][T12807] syzkaller0: entered allmulticast mode [ 263.387473][T12807] tipc: Resetting bearer [ 263.410643][T12805] tipc: Resetting bearer [ 263.480971][T12805] tipc: Disabling bearer [ 264.013464][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1965'. [ 264.178131][T12856] syzkaller0: entered promiscuous mode [ 264.198215][T12856] syzkaller0: entered allmulticast mode [ 264.276215][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1971'. [ 264.595938][T12881] netlink: 'syz.7.1974': attribute type 4 has an invalid length. [ 264.614738][T12881] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1974'. [ 264.751415][T12887] syzkaller0: entered promiscuous mode [ 264.757279][T12887] syzkaller0: entered allmulticast mode [ 264.975558][T12895] netlink: 'syz.5.1978': attribute type 29 has an invalid length. [ 264.988727][T12896] netlink: 'syz.5.1978': attribute type 29 has an invalid length. [ 265.025452][T12896] netlink: 'syz.5.1978': attribute type 29 has an invalid length. [ 265.048734][T12891] syzkaller0: entered promiscuous mode [ 265.094495][T12891] syzkaller0: entered allmulticast mode [ 265.487630][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 265.523280][T12923] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1984'. [ 265.676723][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'. [ 265.753522][T12899] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 266.135967][T12946] bond3 (unregistering): Released all slaves [ 266.302078][T12947] bond3 (unregistering): Released all slaves [ 266.348409][T12955] ip6tnl1: entered promiscuous mode [ 266.357904][T12955] ip6tnl1: entered allmulticast mode [ 266.376234][T12966] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 266.501609][T12976] sctp: [Deprecated]: syz.7.1999 (pid 12976) Use of int in max_burst socket option deprecated. [ 266.501609][T12976] Use struct sctp_assoc_value instead [ 266.603014][T12983] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 267.022458][T13002] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2008'. [ 267.146436][ T8294] IPVS: starting estimator thread 0... [ 267.280749][T13009] IPVS: using max 25 ests per chain, 60000 per kthread [ 267.363511][T13015] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2013'. [ 267.492979][T13023] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 267.663650][T13029] validate_nla: 7 callbacks suppressed [ 267.663671][T13029] netlink: 'syz.6.2016': attribute type 9 has an invalid length. [ 267.973366][T13037] syzkaller0: entered allmulticast mode [ 268.319987][T13066] xt_CT: No such helper "syz1" [ 268.372267][T13069] __nla_validate_parse: 1 callbacks suppressed [ 268.372287][T13069] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2023'. [ 269.060718][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 269.604077][T13068] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.2023'. [ 269.616735][T13069] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 269.625941][T13069] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 269.921900][T13074] vlan0 (unregistering): left allmulticast mode [ 269.928288][T13074] veth0_vlan (unregistering): left allmulticast mode [ 269.935700][T13074] vlan0 (unregistering): left promiscuous mode [ 270.071156][T13090] tipc: Started in network mode [ 270.081788][T13090] tipc: Node identity 929161dc89d9, cluster identity 4711 [ 270.089138][T13090] tipc: Enabled bearer , priority 0 [ 270.144609][T13087] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2030'. [ 270.153969][T13087] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2030'. [ 270.163629][T13085] nbd: device at index 6 is going down [ 270.243138][T13092] syzkaller0: entered promiscuous mode [ 270.248894][T13092] syzkaller0: entered allmulticast mode [ 270.296833][T13097] team0: Device ip6gre2 is of different type [ 270.392556][T13083] tipc: Resetting bearer [ 270.447324][T13083] tipc: Disabling bearer [ 270.582095][T13115] tipc: Enabled bearer , priority 0 [ 270.761733][T13115] syzkaller0: entered promiscuous mode [ 270.780058][T13115] syzkaller0: entered allmulticast mode [ 270.793855][T13115] tipc: Resetting bearer [ 270.855377][T13133] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2040'. [ 270.879362][T13133] nbd: couldn't find a device at index 0 [ 270.972394][T11561] tipc: Resetting bearer [ 271.001100][T13114] tipc: Resetting bearer [ 271.702716][ T5890] tipc: Node number set to 2387832114 [ 272.554013][T13114] tipc: Disabling bearer [ 272.648014][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 272.731850][T13158] syzkaller1: entered promiscuous mode [ 272.737402][T13158] syzkaller1: entered allmulticast mode [ 272.895169][T13177] sctp: [Deprecated]: syz.5.2051 (pid 13177) Use of int in maxseg socket option. [ 272.895169][T13177] Use struct sctp_assoc_value instead [ 272.918584][T13169] netlink: 'syz.7.2049': attribute type 3 has an invalid length. [ 272.972217][T13174] tipc: Enabled bearer , priority 0 [ 273.019581][T13179] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2052'. [ 273.094593][T13174] tipc: Disabling bearer [ 273.310709][T13192] Cannot find set identified by id 65534 to match [ 273.339551][T13193] Cannot find set identified by id 65534 to match [ 273.374640][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2059'. [ 273.438095][T13198] vlan0: entered allmulticast mode [ 273.453323][T13198] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 273.758199][T13223] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2065'. [ 273.926473][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2069'. [ 273.958537][T13238] netlink: 'syz.8.2070': attribute type 17 has an invalid length. [ 273.967363][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2070'. [ 273.976901][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2070'. [ 274.056171][T13238] gretap0: entered promiscuous mode [ 274.100594][T13238] gretap0: left promiscuous mode [ 274.595023][T13257] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2075'. [ 274.607790][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805890cc00: rx timeout, send abort [ 274.616343][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805890cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 274.637076][T13257] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2075'. [ 274.665913][T13259] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 274.673980][T13259] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 274.909068][T13268] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2081'. [ 275.162720][T13286] xt_hashlimit: overflow, try lower: 3/0 [ 275.511466][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2093'. [ 275.788783][T13318] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2095'. [ 275.884118][T13323] netlink: 'syz.7.2097': attribute type 1 has an invalid length. [ 275.897119][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805890c400: rx timeout, send abort [ 275.906678][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805890c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 276.227228][T13338] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2100'. [ 276.385601][T13345] netlink: 'syz.2.2104': attribute type 1 has an invalid length. [ 276.395666][T13345] syzkaller0: entered promiscuous mode [ 276.401649][T13345] syzkaller0: entered allmulticast mode [ 276.437283][T13346] netlink: 'syz.2.2104': attribute type 1 has an invalid length. [ 277.187489][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805890d800: rx timeout, send abort [ 277.196990][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805890d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 277.501591][T13380] debugfs: '&%Q0@æjʫ} }!' already exists in 'ieee80211' [ 277.867942][T13401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.380371][T13423] syzkaller0: entered promiscuous mode [ 278.386203][T13423] syzkaller0: entered allmulticast mode [ 278.482582][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b9ba000: rx timeout, send abort [ 278.491892][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b9ba000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 278.708877][T13440] tipc: New replicast peer: 255.255.255.255 [ 278.717530][T13440] tipc: Enabled bearer , priority 10 [ 278.725004][T13440] tipc: Enabling of bearer rejected, already enabled [ 278.764372][T13440] tipc: Enabling of bearer rejected, already enabled [ 278.791313][T13440] tipc: Enabling of bearer rejected, already enabled [ 278.821641][T13440] tipc: Enabling of bearer rejected, already enabled [ 278.831561][T13442] __nla_validate_parse: 13 callbacks suppressed [ 278.831578][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 278.854020][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 278.933395][T13440] tipc: Enabling of bearer rejected, already enabled [ 278.942323][T13440] tipc: Enabling of bearer rejected, already enabled [ 278.951787][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 278.963371][T13440] tipc: Enabling of bearer rejected, already enabled [ 278.972128][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 278.985452][T13440] tipc: Enabling of bearer rejected, already enabled [ 278.994997][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 279.018844][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.029738][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.037608][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 279.052319][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.068681][T13455] netlink: 'syz.7.2138': attribute type 32 has an invalid length. [ 279.069835][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 279.087913][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2137'. [ 279.095797][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 279.113865][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.127417][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2138'. [ 279.147472][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.226552][T13455] bond4: Setting coupled_control to off (0) [ 279.240957][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.250969][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.261348][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.274157][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.358025][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.412990][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.421693][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.433319][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.442331][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.463505][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.495971][T13440] tipc: Enabling of bearer rejected, already enabled [ 279.766644][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b9bb000: rx timeout, send abort [ 279.780727][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b9bb000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 279.829534][ T8992] tipc: Node number set to 1235640905 [ 279.992892][T13500] bond8: invalid ARP target 0.0.0.0 specified for addition [ 280.001213][T13500] bond8: option arp_ip_target: invalid value (0) [ 280.012154][T13500] bond8 (unregistering): Released all slaves [ 280.286643][T13521] tipc: Enabled bearer , priority 0 [ 280.295427][T13521] syzkaller0: entered promiscuous mode [ 280.301549][T13521] syzkaller0: entered allmulticast mode [ 280.325483][T13521] tipc: Resetting bearer [ 280.333479][T13520] tipc: Resetting bearer [ 280.356525][T13520] tipc: Disabling bearer [ 280.604663][T13532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.695246][T13540] dvmrp0: entered allmulticast mode [ 280.797890][ T8294] IPVS: starting estimator thread 0... [ 280.890203][T13546] IPVS: using max 27 ests per chain, 64800 per kthread [ 280.940746][T13555] sctp: [Deprecated]: syz.6.2168 (pid 13555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.940746][T13555] Use struct sctp_sack_info instead [ 280.958800][T13514] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 281.064350][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b9bac00: rx timeout, send abort [ 281.074095][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b9bac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 281.086878][T13557] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 282.108198][T13603] netlink: 'syz.2.2182': attribute type 2 has an invalid length. [ 282.350911][T13603] hsr_slave_1 (unregistering): left promiscuous mode [ 282.351200][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b9b8400: rx timeout, send abort [ 282.367160][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b9b8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 282.562411][T13620] openvswitch: netlink: Flow key attr not present in new flow. [ 283.123992][T13652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.195227][T13661] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.207170][T13661] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.254939][T13661] tipc: Resetting bearer [ 283.315106][T13661] tipc: Resetting bearer [ 283.365488][ T6840] tipc: Resetting bearer [ 283.381193][T13667] netlink: 'syz.6.2201': attribute type 1 has an invalid length. [ 283.457572][T13662] bond4 (unregistering): Released all slaves [ 283.518854][T13665] ip6tnl1: entered promiscuous mode [ 283.524742][T13665] ip6tnl1: entered allmulticast mode [ 283.644455][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b9b8800: rx timeout, send abort [ 283.654063][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b9b8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 283.852435][T13700] __nla_validate_parse: 41 callbacks suppressed [ 283.852456][T13700] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2209'. [ 283.875610][T13700] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2209'. [ 284.338790][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2218'. [ 284.357543][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2219'. [ 284.397404][T13734] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2218'. [ 284.423475][T13729] bond0: entered promiscuous mode [ 284.428612][T13729] bond_slave_0: entered promiscuous mode [ 284.470822][T13729] bond_slave_1: entered promiscuous mode [ 284.673660][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2222'. [ 284.791358][T13750] netlink: 'syz.7.2222': attribute type 13 has an invalid length. [ 284.934023][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a617400: rx timeout, send abort [ 284.944077][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a617400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 285.226637][T13772] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2231'. [ 285.325484][T13772] bond8 (unregistering): Released all slaves [ 285.446938][T13781] tipc: Enabled bearer , priority 0 [ 285.464681][T13781] syzkaller0: entered promiscuous mode [ 285.475383][T13781] syzkaller0: entered allmulticast mode [ 285.537807][T13779] tipc: Resetting bearer [ 285.590164][T13788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2235'. [ 285.607330][T13779] tipc: Disabling bearer [ 285.624620][T13788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2235'. [ 285.705177][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 285.742353][T13795] bond8: option xmit_hash_policy: invalid value (64) [ 285.752196][T13795] bond8 (unregistering): Released all slaves [ 286.063340][T13818] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 286.231004][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a614c00: rx timeout, send abort [ 286.241808][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a614c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 286.561279][T13844] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 286.593024][T13844] bond5: (slave lo): Enslaving as a backup interface with an up link [ 286.607155][T13844] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 286.738210][T13854] netlink: 'syz.8.2253': attribute type 1 has an invalid length. [ 286.786217][T13859] lo: Caught tx_queue_len zero misconfig [ 286.848169][T13864] ip6gre0: Master is either lo or non-ether device [ 286.861192][T13865] ip6gre0: Master is either lo or non-ether device [ 287.023763][T13870] vlan1: entered allmulticast mode [ 287.028940][T13870] team0: entered allmulticast mode [ 287.035954][T13870] team_slave_0: entered allmulticast mode [ 287.041795][T13870] team_slave_1: entered allmulticast mode [ 287.263000][T13877] netlink: 'syz.7.2263': attribute type 25 has an invalid length. [ 287.531520][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059bd6000: rx timeout, send abort [ 287.540473][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059bd6000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 287.721918][T13899] tipc: Enabling of bearer rejected, already enabled [ 287.836744][T13903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.952713][T13903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.028702][T13919] Can't find ip_set type [ 288.306531][T13933] tipc: Enabled bearer , priority 0 [ 288.401621][T13933] tipc: Disabling bearer [ 288.659868][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 288.827241][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b415c00: rx timeout, send abort [ 288.836025][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b415c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 289.066389][T13965] __nla_validate_parse: 15 callbacks suppressed [ 289.066412][T13965] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2287'. [ 289.274342][T13976] netlink: 'syz.8.2291': attribute type 1 has an invalid length. [ 289.327604][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 289.357175][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 289.388807][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 289.397450][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 289.406602][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.504053][T13976] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 289.521344][T13986] netlink: 'syz.6.2293': attribute type 1 has an invalid length. [ 289.533832][T13976] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 289.617027][T13983] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 289.638147][T13990] bond0: entered promiscuous mode [ 289.644413][T13990] bond_slave_0: entered promiscuous mode [ 289.651255][T13990] bond_slave_1: entered promiscuous mode [ 289.664446][T13986] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 289.884015][T13977] wg1 speed is unknown, defaulting to 1000 [ 290.111722][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b416000: rx timeout, send abort [ 290.121062][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b416000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 290.145478][T14018] sctp: [Deprecated]: syz.2.2303 (pid 14018) Use of int in maxseg socket option. [ 290.145478][T14018] Use struct sctp_assoc_value instead [ 290.181201][T14020] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2304'. [ 290.444393][T14031] netlink: 'syz.6.2308': attribute type 1 has an invalid length. [ 290.482750][T14033] ip6tnl0: Caught tx_queue_len zero misconfig [ 290.507350][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2309'. [ 290.541976][T14037] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2311'. [ 290.631650][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2309'. [ 290.657776][T14034] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.668477][T14034] bond4: (slave bond5): making interface the new active one [ 290.680056][T14034] bond4: (slave bond5): Enslaving as an active interface with an up link [ 291.074854][T13977] chnl_net:caif_netlink_parms(): no params data found [ 291.177725][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.185243][T13977] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.193637][T13977] bridge_slave_0: entered allmulticast mode [ 291.201891][T13977] bridge_slave_0: entered promiscuous mode [ 291.210685][T13977] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.222259][T13977] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.229793][T13977] bridge_slave_1: entered allmulticast mode [ 291.237279][T13977] bridge_slave_1: entered promiscuous mode [ 291.277406][T13977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.291364][T13977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.331390][T13977] team0: Port device team_slave_0 added [ 291.341079][T13977] team0: Port device team_slave_1 added [ 291.379054][T13977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.386579][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.403426][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802808a000: rx timeout, send abort [ 291.419267][T13977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.422264][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802808a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 291.441688][T13977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.454419][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.483008][T13977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.483412][ T5852] Bluetooth: hci5: command tx timeout [ 291.528057][T14083] netlink: 'syz.7.2318': attribute type 1 has an invalid length. [ 291.562396][T14083] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2318'. [ 291.757065][T13977] hsr_slave_0: entered promiscuous mode [ 291.765538][T13977] hsr_slave_1: entered promiscuous mode [ 291.790316][T13977] debugfs: 'hsr0' already exists in 'hsr' [ 291.797815][T13977] Cannot create hsr debugfs directory [ 292.013949][T14106] netlink: 'syz.6.2324': attribute type 1 has an invalid length. [ 292.088371][T14095] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2320'. [ 292.144213][T14109] bond6 (unregistering): Released all slaves [ 292.200893][T14101] ip6tnl1: entered promiscuous mode [ 292.208103][T14101] ip6tnl1: entered allmulticast mode [ 292.262396][T14119] Bluetooth: MGMT ver 1.23 [ 292.329839][T14115] x_tables: duplicate underflow at hook 1 [ 292.693994][T14131] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2332'. [ 292.716883][T13977] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 292.732303][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880590dd000: rx timeout, send abort [ 292.741675][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880590dd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 292.764684][T13977] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 292.772010][T14133] netlink: 'syz.2.2332': attribute type 18 has an invalid length. [ 292.795804][T13977] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 292.840002][T13977] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 292.923195][T14140] veth0: entered promiscuous mode [ 292.964782][T14140] veth0: left promiscuous mode [ 293.179070][T13977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.195811][T14162] netlink: 'syz.7.2339': attribute type 4 has an invalid length. [ 293.302213][T13977] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.339484][T11561] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.346710][T11561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.405111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.412373][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.451895][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2344'. [ 293.485007][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2344'. [ 293.540883][ T5852] Bluetooth: hci5: command tx timeout [ 293.577148][T14174] 8021q: adding VLAN 0 to HW filter on device bond5 [ 293.592243][T14178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.819440][T14191] netlink: 'syz.2.2348': attribute type 2 has an invalid length. [ 294.020750][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aa05c00: rx timeout, send abort [ 294.029145][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805aa05c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 294.032969][T13977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.091606][T14208] __nla_validate_parse: 4 callbacks suppressed [ 294.091625][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 294.256122][T14219] netlink: 'syz.8.2354': attribute type 29 has an invalid length. [ 294.311325][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2354'. [ 294.441250][T14222] veth13: entered allmulticast mode [ 294.542194][T14226] syzkaller0: entered promiscuous mode [ 294.547970][T14226] syzkaller0: entered allmulticast mode [ 294.561062][T14226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2356'. [ 294.572460][T14226] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2356'. [ 294.670494][T14229] batman_adv: batadv0: Adding interface: dummy0 [ 294.678902][T14229] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.713468][T14229] batman_adv: batadv0: Interface activated: dummy0 [ 294.750819][T14230] batadv0: mtu less than device minimum [ 294.758371][T14230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.770836][T14230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.783164][T14230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.795148][T14230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.807681][T14230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.819757][T14230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.831709][T14230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.843773][T14230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 295.027870][T13977] veth0_vlan: entered promiscuous mode [ 295.057706][T13977] veth1_vlan: entered promiscuous mode [ 295.227280][T13977] veth0_macvtap: entered promiscuous mode [ 295.264199][T13977] veth1_macvtap: entered promiscuous mode [ 295.304033][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aa04800: rx timeout, send abort [ 295.312928][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805aa04800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 295.344928][T14245] netlink: 'syz.8.2360': attribute type 4 has an invalid length. [ 295.367476][T13977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.422397][T13977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.497401][ T6840] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.514165][T14256] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2367'. [ 295.523821][ T6840] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.555044][ T6840] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.565737][ T6840] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.600288][T14261] pimreg: left allmulticast mode [ 295.631557][ T5852] Bluetooth: hci5: command tx timeout [ 295.665974][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2366'. [ 295.674949][T14265] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2368'. [ 295.838018][T14265] bond0 (unregistering): Released all slaves [ 295.863592][T14262] bridge_slave_1: left allmulticast mode [ 295.870117][T14262] bridge_slave_1: left promiscuous mode [ 295.875932][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.888274][T14262] bridge_slave_0: left allmulticast mode [ 295.896990][T14262] bridge_slave_0: left promiscuous mode [ 295.904794][T14262] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.095834][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.114300][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.222422][T14286] netlink: 'syz.7.2374': attribute type 12 has an invalid length. [ 296.237956][T11564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.252920][T11564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.284310][T14288] syzkaller0: entered promiscuous mode [ 296.293747][T14288] syzkaller0: entered allmulticast mode [ 296.594770][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a9ae000: rx timeout, send abort [ 296.603277][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a9ae000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 297.014542][T14327] syzkaller0: entered promiscuous mode [ 297.025939][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2389'. [ 297.035621][T14327] syzkaller0: entered allmulticast mode [ 297.098113][T14332] veth0: entered promiscuous mode [ 297.173918][T14340] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2388'. [ 297.331829][T14330] veth0: left promiscuous mode [ 297.700598][ T5852] Bluetooth: hci5: command tx timeout [ 297.833380][T14369] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2399'. [ 297.846063][T14369] netlink: 'syz.7.2399': attribute type 11 has an invalid length. [ 297.886977][T14367] syz.6.2400 uses old SIOCAX25GETINFO [ 297.891341][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032a02800: rx timeout, send abort [ 297.902297][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032a02800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 298.676133][T14422] netlink: 'syz.7.2415': attribute type 12 has an invalid length. [ 298.775628][T14422] bond6: option primary_reselect: invalid value (255) [ 298.835931][T14422] bond6 (unregistering): Released all slaves [ 298.958877][T14435] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 299.181954][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a8fb800: rx timeout, send abort [ 299.191383][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a8fb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 299.970748][T14435] __nla_validate_parse: 4 callbacks suppressed [ 299.971074][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2420'. [ 300.006617][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2420'. [ 300.068011][T14462] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 300.122454][T14458] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2424'. [ 300.124815][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2426'. [ 300.134458][T14458] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2424'. [ 300.233672][T14464] netlink: 'syz.8.2427': attribute type 1 has an invalid length. [ 300.373606][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 300.398252][T14473] netlink: 696 bytes leftover after parsing attributes in process `syz.6.2428'. [ 300.437817][T14470] bond6: (slave bridge3): making interface the new active one [ 300.450794][T14470] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 300.467603][T14473] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2428'. [ 300.480294][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a8fa400: rx timeout, send abort [ 300.488753][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a8fa400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 300.954915][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2433'. [ 301.004643][T14477] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.030887][T14477] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 301.108094][T14477] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.153784][T14477] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 301.188679][T14496] netlink: 'syz.9.2435': attribute type 12 has an invalid length. [ 301.255004][T14496] bond1: option primary_reselect: invalid value (255) [ 301.264339][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2435'. [ 301.276171][T14496] bond1 (unregistering): Released all slaves [ 301.310521][T14477] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.340047][T14477] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 301.398490][T14477] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.429461][T14477] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 301.594495][ T6853] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 301.603417][ T6853] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 301.623183][T14518] net_ratelimit: 12 callbacks suppressed [ 301.623201][T14518] netlink: zone id is out of range [ 301.647824][T14518] netlink: zone id is out of range [ 301.663683][T14518] netlink: zone id is out of range [ 301.693624][ T6853] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 301.703820][T14518] netlink: zone id is out of range [ 301.709008][T14518] netlink: zone id is out of range [ 301.726863][ T6853] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 301.729452][T14518] netlink: zone id is out of range [ 301.757983][T14518] netlink: zone id is out of range [ 301.765101][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059872400: rx timeout, send abort [ 301.774818][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059872400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 301.775172][ T6853] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 301.807258][T14518] netlink: zone id is out of range [ 301.814834][ T6853] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 301.828291][T14518] netlink: zone id is out of range [ 301.855750][ T6853] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 301.856270][T14518] netlink: zone id is out of range [ 301.886701][ T6853] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.027873][T14534] netlink: 'syz.6.2446': attribute type 11 has an invalid length. [ 302.275234][T14547] syzkaller0: entered promiscuous mode [ 302.281030][T14547] syzkaller0: entered allmulticast mode [ 302.314521][T14548] tipc: Enabled bearer , priority 0 [ 302.326920][T14547] tipc: Enabling of bearer rejected, already enabled [ 302.390129][T14546] tipc: Resetting bearer [ 302.508039][T14546] tipc: Disabling bearer [ 302.561781][T14562] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.565492][T14566] netlink: 'syz.6.2454': attribute type 21 has an invalid length. [ 303.063558][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059872000: rx timeout, send abort [ 303.072630][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059872000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 303.918362][T14629] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.218184][T14644] syzkaller1: entered promiscuous mode [ 304.228384][T14644] syzkaller1: entered allmulticast mode [ 304.356314][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059870c00: rx timeout, send abort [ 304.365068][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059870c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 304.383291][T14659] netlink: 'syz.9.2479': attribute type 1 has an invalid length. [ 305.132789][T14707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.646034][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059870800: rx timeout, send abort [ 305.654840][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059870800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 305.857426][T14733] x_tables: duplicate underflow at hook 1 [ 306.941456][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059870400: rx timeout, send abort [ 306.950362][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059870400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 306.969963][T14778] netlink: 'syz.8.2510': attribute type 12 has an invalid length. [ 307.072799][T14783] __nla_validate_parse: 10 callbacks suppressed [ 307.072820][T14783] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2511'. [ 307.314796][T14797] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2517'. [ 307.768543][T14824] netlink: 'syz.6.2524': attribute type 32 has an invalid length. [ 307.869029][T14832] wg1 speed is unknown, defaulting to 1000 [ 307.916049][T14833] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2526'. [ 308.241289][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059870000: rx timeout, send abort [ 308.250902][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059870000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 308.457087][T14858] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2531'. [ 308.468198][T14858] xt_hashlimit: size too large, truncated to 1048576 [ 308.516308][T14861] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2530'. [ 308.658914][T14861] gre1: entered promiscuous mode [ 308.712103][T14861] gre1: entered allmulticast mode [ 308.746147][T14869] tipc: Enabled bearer , priority 0 [ 308.905265][T14869] tipc: Disabling bearer [ 309.022871][T14894] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2538'. [ 309.534662][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059872800: rx timeout, send abort [ 309.544525][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059872800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 310.051448][T14922] netlink: 596 bytes leftover after parsing attributes in process `syz.9.2549'. [ 310.417104][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2556'. [ 310.571920][T14946] net_ratelimit: 15 callbacks suppressed [ 310.571943][T14946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.694404][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 310.830412][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059ed9c00: rx timeout, send abort [ 310.839078][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059ed9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 311.127041][T14979] netlink: 'syz.7.2566': attribute type 11 has an invalid length. [ 311.136657][T14979] netlink: 'syz.7.2566': attribute type 11 has an invalid length. [ 311.147187][T14979] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2566'. [ 311.437836][T14985] syzkaller0: entered promiscuous mode [ 311.443729][T14985] syzkaller0: entered allmulticast mode [ 311.482715][T14985] tipc: Started in network mode [ 311.488639][T14985] tipc: Node identity , cluster identity 4711 [ 311.496020][T14985] tipc: Failed to obtain node identity [ 311.504986][T14985] tipc: Enabling of bearer rejected, failed to enable media [ 311.515871][T14985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.006993][T15003] x_tables: duplicate underflow at hook 2 [ 312.130625][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059ed8800: rx timeout, send abort [ 312.139857][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059ed8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 313.236825][T14998] netlink: 'syz.6.2571': attribute type 29 has an invalid length. [ 313.428689][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059ed8c00: rx timeout, send abort [ 313.437884][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059ed8c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 313.643781][T15031] __nla_validate_parse: 2 callbacks suppressed [ 313.643802][T15031] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2580'. [ 313.787705][T15035] netlink: 'syz.7.2582': attribute type 83 has an invalid length. [ 313.797314][T15037] netlink: 'syz.2.2583': attribute type 39 has an invalid length. [ 313.934995][T15037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2583'. [ 314.029579][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2584'. [ 314.116744][T15039] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2584'. [ 314.294203][T15059] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2592'. [ 314.329330][T15059] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2592'. [ 314.491270][T15076] tipc: Enabling of bearer rejected, failed to enable media [ 314.720647][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059edbc00: rx timeout, send abort [ 314.729473][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059edbc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 314.924466][T15092] Bluetooth: MGMT ver 1.23 [ 315.027078][T15094] netlink: 'syz.8.2601': attribute type 4 has an invalid length. [ 315.065638][T15094] netlink: 'syz.8.2601': attribute type 4 has an invalid length. [ 315.202233][T15107] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 315.233405][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2605'. [ 315.244699][T15107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.275169][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2605'. [ 315.436035][T15122] syz.7.2610: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 315.513013][T15122] CPU: 0 UID: 0 PID: 15122 Comm: syz.7.2610 Not tainted syzkaller #0 PREEMPT(full) [ 315.513043][T15122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.513061][T15122] Call Trace: [ 315.513070][T15122] [ 315.513079][T15122] dump_stack_lvl+0x189/0x250 [ 315.513116][T15122] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 315.513150][T15122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.513179][T15122] ? __pfx__printk+0x10/0x10 [ 315.513201][T15122] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 315.513239][T15122] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 315.513277][T15122] warn_alloc+0x214/0x310 [ 315.513317][T15122] ? __pfx_warn_alloc+0x10/0x10 [ 315.513359][T15122] ? __get_vm_area_node+0x28f/0x300 [ 315.513390][T15122] ? hash_ipmac_create+0x358/0xfe0 [ 315.513422][T15122] __vmalloc_node_range_noprof+0x690/0x12d0 [ 315.513454][T15122] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 315.513503][T15122] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.513532][T15122] ? hash_ipmac_create+0x358/0xfe0 [ 315.513561][T15122] ? rcu_is_watching+0x15/0xb0 [ 315.513585][T15122] ? hash_ipmac_create+0x358/0xfe0 [ 315.513612][T15122] __kvmalloc_node_noprof+0x674/0x910 [ 315.513645][T15122] ? hash_ipmac_create+0x358/0xfe0 [ 315.513670][T15122] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 315.513700][T15122] ? hash_ipmac_create+0x2fe/0xfe0 [ 315.513735][T15122] hash_ipmac_create+0x358/0xfe0 [ 315.513772][T15122] ? __nla_parse+0x40/0x60 [ 315.513795][T15122] ? __pfx_hash_ipmac_create+0x10/0x10 [ 315.513824][T15122] ip_set_create+0xa97/0x1940 [ 315.513855][T15122] ? ip_set_create+0x4a2/0x1940 [ 315.513898][T15122] ? __pfx_ip_set_create+0x10/0x10 [ 315.513969][T15122] nfnetlink_rcv_msg+0xb4d/0x1130 [ 315.514006][T15122] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 315.514058][T15122] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 315.514085][T15122] ? kasan_save_track+0x4f/0x80 [ 315.514171][T15122] netlink_rcv_skb+0x208/0x470 [ 315.514190][T15122] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.514242][T15122] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 315.514275][T15122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.514322][T15122] ? bpf_lsm_capable+0x9/0x20 [ 315.514348][T15122] ? security_capable+0x7e/0x2e0 [ 315.514386][T15122] nfnetlink_rcv+0x282/0x2590 [ 315.514419][T15122] ? __dev_queue_xmit+0x27b/0x3b50 [ 315.514445][T15122] ? __dev_queue_xmit+0x1d79/0x3b50 [ 315.514468][T15122] ? kasan_save_track+0x3e/0x80 [ 315.514496][T15122] ? __kasan_slab_alloc+0x6c/0x80 [ 315.514536][T15122] ? __dev_queue_xmit+0x27b/0x3b50 [ 315.514576][T15122] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 315.514604][T15122] ? __pfx___dev_queue_xmit+0x10/0x10 [ 315.514645][T15122] ? ref_tracker_free+0x63a/0x7d0 [ 315.514666][T15122] ? __asan_memcpy+0x40/0x70 [ 315.514693][T15122] ? __pfx_ref_tracker_free+0x10/0x10 [ 315.514732][T15122] ? skb_clone+0x246/0x3a0 [ 315.514760][T15122] ? __netlink_deliver_tap+0x807/0x850 [ 315.514781][T15122] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.514808][T15122] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.514838][T15122] netlink_unicast+0x82f/0x9e0 [ 315.514879][T15122] ? __pfx_netlink_unicast+0x10/0x10 [ 315.514911][T15122] ? netlink_sendmsg+0x642/0xb30 [ 315.514929][T15122] ? skb_put+0x11b/0x210 [ 315.514954][T15122] netlink_sendmsg+0x805/0xb30 [ 315.514985][T15122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.515011][T15122] ? aa_sock_msg_perm+0xf1/0x1d0 [ 315.515043][T15122] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.515064][T15122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.515085][T15122] __sock_sendmsg+0x21c/0x270 [ 315.515118][T15122] ____sys_sendmsg+0x505/0x830 [ 315.515148][T15122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.515182][T15122] ? import_iovec+0x74/0xa0 [ 315.515220][T15122] ___sys_sendmsg+0x21f/0x2a0 [ 315.515247][T15122] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.515312][T15122] ? __fget_files+0x2a/0x420 [ 315.515331][T15122] ? __fget_files+0x3a0/0x420 [ 315.515363][T15122] __x64_sys_sendmsg+0x19b/0x260 [ 315.515389][T15122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.515432][T15122] ? do_syscall_64+0xbe/0xfa0 [ 315.515466][T15122] do_syscall_64+0xfa/0xfa0 [ 315.515494][T15122] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.515523][T15122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.515544][T15122] ? clear_bhb_loop+0x60/0xb0 [ 315.515570][T15122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.515591][T15122] RIP: 0033:0x7f127378f6c9 [ 315.515624][T15122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.515642][T15122] RSP: 002b:00007f12745a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.515665][T15122] RAX: ffffffffffffffda RBX: 00007f12739e5fa0 RCX: 00007f127378f6c9 [ 315.515680][T15122] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 315.515693][T15122] RBP: 00007f1273811f91 R08: 0000000000000000 R09: 0000000000000000 [ 315.515705][T15122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.515717][T15122] R13: 00007f12739e6038 R14: 00007f12739e5fa0 R15: 00007ffdc47d5308 [ 315.515753][T15122] [ 315.589245][T15122] Mem-Info: [ 315.815702][T15136] netlink: 412 bytes leftover after parsing attributes in process `syz.2.2613'. [ 315.864235][T15122] active_anon:7477 inactive_anon:0 isolated_anon:0 [ 315.864235][T15122] active_file:2828 inactive_file:39973 isolated_file:0 [ 315.864235][T15122] unevictable:768 dirty:43 writeback:0 [ 315.864235][T15122] slab_reclaimable:12555 slab_unreclaimable:131648 [ 315.864235][T15122] mapped:29167 shmem:3747 pagetables:1115 [ 315.864235][T15122] sec_pagetables:0 bounce:0 [ 315.864235][T15122] kernel_misc_reclaimable:0 [ 315.864235][T15122] free:1294269 free_pcp:13078 free_cma:0 [ 315.864303][T15122] Node 0 active_anon:29908kB inactive_anon:0kB active_file:11312kB inactive_file:159696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116668kB dirty:172kB writeback:0kB shmem:13452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15428kB pagetables:4360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 315.864367][T15122] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 315.864417][T15122] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.864482][T15122] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 315.864530][T15122] Node 0 DMA32 free:1269180kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29908kB inactive_anon:0kB active_file:11312kB inactive_file:159696kB unevictable:1536kB writepending:172kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:36536kB local_pcp:20900kB free_cma:0kB [ 315.864596][T15122] lowmem_reserve[]: 0 0 0 0 0 [ 315.864642][T15122] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.864700][T15122] lowmem_reserve[]: 0 0 0 0 0 [ 315.864746][T15122] Node 1 Normal free:3892536kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15776kB local_pcp:10208kB free_cma:0kB [ 315.864809][T15122] lowmem_reserve[]: 0 0 0 0 0 [ 315.864855][T15122] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 315.865000][T15122] Node 0 DMA32: 3*4kB (UE) 25*8kB (UME) 25*16kB (U) 253*32kB (UE) 15*64kB (UM) 3*128kB (UE) 2*256kB (UE) 16*512kB (ME) 7*1024kB (M) 5*2048kB (UM) 301*4096kB (M) = 1269060kB [ 315.865194][T15122] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 315.865317][T15122] Node 1 Normal: 212*4kB (UME) 51*8kB (UME) 51*16kB (UME) 153*32kB (UME) 44*64kB (UME) 10*128kB (UME) 4*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3892536kB [ 315.865528][T15122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.865546][T15122] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.865565][T15122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.865583][T15122] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.865601][T15122] 46545 total pagecache pages [ 315.865611][T15122] 0 pages in swap cache [ 315.865619][T15122] Free swap = 124996kB [ 315.865628][T15122] Total swap = 124996kB [ 315.865638][T15122] 2097051 pages RAM [ 316.008187][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059ed9400: rx timeout, send abort [ 316.021809][T15122] 0 pages HighMem/MovableOnly [ 316.024524][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059ed9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 316.033147][T15122] 424119 pages reserved [ 316.468847][T15122] 0 pages cma reserved [ 316.706368][T15144] bond6: entered promiscuous mode [ 316.713006][T15144] bond6: entered allmulticast mode [ 316.718645][T15144] 8021q: adding VLAN 0 to HW filter on device bond6 [ 316.728426][T15150] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2617'. [ 317.274892][T15178] netlink: 'syz.2.2626': attribute type 1 has an invalid length. [ 317.307363][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059edb400: rx timeout, send abort [ 317.317282][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059edb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 317.409857][T15178] bond8: entered promiscuous mode [ 317.435960][T15178] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.462825][T15185] netlink: 'syz.9.2625': attribute type 4 has an invalid length. [ 317.466787][T15189] netlink: 'syz.7.2628': attribute type 21 has an invalid length. [ 317.485450][T15189] netlink: 'syz.7.2628': attribute type 21 has an invalid length. [ 317.534862][T15185] netlink: 'syz.9.2625': attribute type 4 has an invalid length. [ 317.583481][T15178] bond8: (slave bridge10): making interface the new active one [ 317.611411][T15178] bridge10: entered promiscuous mode [ 317.633291][T15178] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 317.699550][T15195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.105628][T15216] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 318.161592][T15216] bond7 (unregistering): Released all slaves [ 318.601941][T15249] openvswitch: netlink: IP tunnel dst address not specified [ 318.609880][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ac1c000: rx timeout, send abort [ 318.618648][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ac1c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 318.655125][T15249] __nla_validate_parse: 6 callbacks suppressed [ 318.655149][T15249] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2647'. [ 318.696969][T15249] vlan2: entered allmulticast mode [ 318.703413][T15249] erspan0: entered allmulticast mode [ 318.723118][T15249] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20002 [ 319.252807][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2658'. [ 319.308252][T15275] netlink: 'syz.8.2657': attribute type 13 has an invalid length. [ 319.716271][T15304] netlink: 'syz.2.2665': attribute type 16 has an invalid length. [ 319.725956][T15304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2665'. [ 319.874250][T15309] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2666'. [ 319.898418][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ac1c400: rx timeout, send abort [ 319.907669][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ac1c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 320.130395][T15320] netlink: 'syz.2.2669': attribute type 16 has an invalid length. [ 320.138542][T15320] netlink: 'syz.2.2669': attribute type 3 has an invalid length. [ 320.195075][T15322] FAULT_INJECTION: forcing a failure. [ 320.195075][T15322] name failslab, interval 1, probability 0, space 0, times 1 [ 320.198884][T15306] Cannot find add_set index 2 as target [ 320.266975][T15322] CPU: 0 UID: 0 PID: 15322 Comm: syz.8.2671 Not tainted syzkaller #0 PREEMPT(full) [ 320.267004][T15322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.267016][T15322] Call Trace: [ 320.267024][T15322] [ 320.267033][T15322] dump_stack_lvl+0x189/0x250 [ 320.267067][T15322] ? __pfx____ratelimit+0x10/0x10 [ 320.267096][T15322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.267124][T15322] ? __pfx__printk+0x10/0x10 [ 320.267152][T15322] ? __pfx___might_resched+0x10/0x10 [ 320.267173][T15322] ? fs_reclaim_acquire+0x7d/0x100 [ 320.267211][T15322] should_fail_ex+0x414/0x560 [ 320.267249][T15322] should_failslab+0xa8/0x100 [ 320.267272][T15322] __kmalloc_noprof+0xcb/0x7f0 [ 320.267300][T15322] ? tomoyo_encode+0x28b/0x550 [ 320.267338][T15322] tomoyo_encode+0x28b/0x550 [ 320.267376][T15322] tomoyo_realpath_from_path+0x58d/0x5d0 [ 320.267410][T15322] ? tomoyo_domain+0xd9/0x130 [ 320.267435][T15322] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 320.267462][T15322] tomoyo_path_number_perm+0x1e8/0x5a0 [ 320.267493][T15322] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.267564][T15322] ? __fget_files+0x2a/0x420 [ 320.267589][T15322] ? __fget_files+0x3a0/0x420 [ 320.267607][T15322] ? __fget_files+0x2a/0x420 [ 320.267631][T15322] security_file_ioctl+0xcb/0x2d0 [ 320.267664][T15322] __se_sys_ioctl+0x47/0x170 [ 320.267694][T15322] do_syscall_64+0xfa/0xfa0 [ 320.267722][T15322] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.267751][T15322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.267771][T15322] ? clear_bhb_loop+0x60/0xb0 [ 320.267797][T15322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.267817][T15322] RIP: 0033:0x7fdd5ed8f6c9 [ 320.267835][T15322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.267852][T15322] RSP: 002b:00007fdd5fbba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.267875][T15322] RAX: ffffffffffffffda RBX: 00007fdd5efe5fa0 RCX: 00007fdd5ed8f6c9 [ 320.267889][T15322] RDX: 0000200000000340 RSI: 000000000000894b RDI: 0000000000000003 [ 320.267902][T15322] RBP: 00007fdd5fbba090 R08: 0000000000000000 R09: 0000000000000000 [ 320.267914][T15322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.267926][T15322] R13: 00007fdd5efe6038 R14: 00007fdd5efe5fa0 R15: 00007ffd801c6578 [ 320.267969][T15322] [ 320.268069][T15322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.343747][T15320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2669'. [ 320.547437][T15318] bond9 (unregistering): Released all slaves [ 321.096813][T15364] xt_time: unknown flags 0xf4 [ 321.106079][T15363] x_tables: duplicate entry at hook 3 [ 321.188966][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ac1d400: rx timeout, send abort [ 321.198554][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ac1d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 321.225924][ T6840] wlan0: Trigger new scan to find an IBSS to join [ 321.476189][T15382] GUP no longer grows the stack in syz.2.2691 (15382): 200000003000-20000000a000 (200000001000) [ 321.500487][T15382] CPU: 0 UID: 0 PID: 15382 Comm: syz.2.2691 Not tainted syzkaller #0 PREEMPT(full) [ 321.500517][T15382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.500530][T15382] Call Trace: [ 321.500539][T15382] [ 321.500549][T15382] dump_stack_lvl+0x189/0x250 [ 321.500593][T15382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.500619][T15382] ? __pfx__printk+0x10/0x10 [ 321.500637][T15382] ? find_vma+0xe7/0x160 [ 321.500677][T15382] __get_user_pages+0x2470/0x2a00 [ 321.500708][T15382] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 321.500759][T15382] ? rcu_is_watching+0x15/0xb0 [ 321.500788][T15382] __gup_longterm_locked+0xde4/0x1660 [ 321.500823][T15382] ? try_grab_folio_fast+0x1bf/0x6a0 [ 321.500861][T15382] ? gup_fast_fallback+0x1b86/0x22d0 [ 321.500890][T15382] gup_fast_fallback+0x1d65/0x22d0 [ 321.500955][T15382] ? __pfx_gup_fast_fallback+0x10/0x10 [ 321.500978][T15382] ? __mutex_lock+0x335/0x1350 [ 321.501016][T15382] ? is_valid_gup_args+0x11f/0x200 [ 321.501043][T15382] ? get_user_pages_fast+0x4d/0xb0 [ 321.501071][T15382] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 321.501105][T15382] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 321.501130][T15382] ? wait_for_space+0x248/0x2d0 [ 321.501151][T15382] iov_iter_get_pages2+0x5e/0xa0 [ 321.501180][T15382] __se_sys_vmsplice+0x548/0x10d0 [ 321.501211][T15382] ? futex_private_hash_put+0x4b/0x280 [ 321.501251][T15382] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 321.501273][T15382] ? __pfx_futex_wake+0x10/0x10 [ 321.501302][T15382] ? fput+0xa0/0xd0 [ 321.501379][T15382] ? do_syscall_64+0xbe/0xfa0 [ 321.501412][T15382] do_syscall_64+0xfa/0xfa0 [ 321.501437][T15382] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.501464][T15382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.501483][T15382] ? clear_bhb_loop+0x60/0xb0 [ 321.501508][T15382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.501526][T15382] RIP: 0033:0x7f279158f6c9 [ 321.501546][T15382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.501629][T15382] RSP: 002b:00007f2792385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 321.501652][T15382] RAX: ffffffffffffffda RBX: 00007f27917e5fa0 RCX: 00007f279158f6c9 [ 321.501668][T15382] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 321.501680][T15382] RBP: 00007f2791611f91 R08: 0000000000000000 R09: 0000000000000000 [ 321.501692][T15382] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 321.501704][T15382] R13: 00007f27917e6038 R14: 00007f27917e5fa0 R15: 00007ffd6b966148 [ 321.501740][T15382] [ 322.477078][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ac1d800: rx timeout, send abort [ 322.486088][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ac1d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 322.588148][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.704100][T15416] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2699'. [ 323.733324][T15416] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2699'. [ 323.768856][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ac1c800: rx timeout, send abort [ 323.777688][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ac1c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 323.902845][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2703'. [ 323.941910][T15425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.071813][T15425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.146002][T15440] tipc: Enabled bearer , priority 0 [ 324.213811][T15434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2705'. [ 324.231824][T15446] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2706'. [ 324.262046][T15432] syzkaller0: entered promiscuous mode [ 324.271566][T15432] syzkaller0: entered allmulticast mode [ 324.278120][T15432] tipc: Resetting bearer [ 324.290943][T15437] tipc: Enabled bearer , priority 0 [ 324.298408][T15449] syzkaller0: entered promiscuous mode [ 324.306327][T15449] syzkaller0: entered allmulticast mode [ 324.328533][T15440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.375738][T15431] tipc: Resetting bearer [ 324.521555][T15459] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2710'. [ 325.055382][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b582000: rx timeout, send abort [ 325.065297][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b582000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 325.142959][T11561] wlan0: Trigger new scan to find an IBSS to join [ 326.062573][T11565] wlan0: Creating new IBSS network, BSSID ae:93:67:9d:ad:f5 [ 326.090160][T15431] tipc: Disabling bearer [ 326.108507][T15449] syzkaller0: mtu less than device minimum [ 326.116347][T15459] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 326.117689][T15463] lo: Caught tx_queue_len zero misconfig [ 326.240250][T15449] tipc: Resetting bearer [ 326.258811][T15467] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2713'. [ 326.317873][T15449] tipc: Disabling bearer [ 326.345872][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b583400: rx timeout, send abort [ 326.355092][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b583400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 326.387446][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2715'. [ 326.405636][T15471] bridge_slave_1: left allmulticast mode [ 326.412571][T15471] bridge_slave_1: left promiscuous mode [ 326.434229][T15471] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.453841][T15471] bridge_slave_0: left allmulticast mode [ 326.462083][T15471] bridge_slave_0: left promiscuous mode [ 326.468082][T15471] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.657712][T10790] IPVS: starting estimator thread 0... [ 326.693296][T11561] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.749443][T15486] IPVS: using max 26 ests per chain, 62400 per kthread [ 326.884284][T11561] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.945873][T15501] syzkaller0: entered promiscuous mode [ 326.952456][T15501] syzkaller0: entered allmulticast mode [ 327.066530][T11561] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.084214][T15501] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2720'. [ 327.100362][T15509] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2724'. [ 327.390743][T15509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.403777][T15509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.417407][T15509] bond0 (unregistering): Released all slaves [ 327.459104][T11561] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.490561][T15524] netlink: 'syz.7.2726': attribute type 1 has an invalid length. [ 327.514478][T15522] pimreg896: entered allmulticast mode [ 327.638796][T15524] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.921606][T11561] bridge_slave_1: left allmulticast mode [ 327.933989][T11561] bridge_slave_1: left promiscuous mode [ 327.940377][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.958821][T11561] bridge_slave_0: left allmulticast mode [ 327.976428][T11561] bridge_slave_0: left promiscuous mode [ 328.005469][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.090897][T11561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.102810][T11561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.114564][T11561] bond0 (unregistering): Released all slaves [ 329.287350][T15582] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 329.297669][T15582] bond0: option packets_per_slave: allowed values 0 - 65535 [ 329.318277][T15582] bond0 (unregistering): Released all slaves [ 329.346886][T15577] syzkaller0: entered allmulticast mode [ 329.358313][T11561] tipc: Left network mode [ 329.433476][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2744'. [ 329.535503][T15600] ip6t_srh: unknown srh match flags 4000 [ 329.916385][T15621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2749'. [ 330.031602][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2744'. [ 330.061266][T15627] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 330.392676][T15643] netlink: 420 bytes leftover after parsing attributes in process `syz.6.2753'. [ 330.402995][T15643] netlink: 'syz.6.2753': attribute type 64 has an invalid length. [ 330.429315][T15643] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2753'. [ 330.700885][ T6853] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.033016][T15659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.184220][T15670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.335077][T15672] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2764'. [ 331.419296][T15672] dvmrp6: entered allmulticast mode [ 331.475754][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2766'. [ 331.527828][T15682] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2766'. [ 331.597965][T15685] netlink: 'syz.8.2767': attribute type 1 has an invalid length. [ 331.612549][T15686] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2767'. [ 331.643266][T15682] bond0 (unregistering): Released all slaves [ 331.706495][T11561] hsr_slave_0: left promiscuous mode [ 331.741828][T11561] hsr_slave_1: left promiscuous mode [ 331.748494][T11561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.779253][T11561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.807617][T11561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.832345][T11561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.908542][T11561] veth1_macvtap: left promiscuous mode [ 331.926733][T11561] veth0_macvtap: left promiscuous mode [ 331.942492][T11561] veth1_vlan: left promiscuous mode [ 331.959775][T11561] veth0_vlan: left promiscuous mode [ 332.045115][T15693] IPVS: persistence engine module ip_vs_pe_ not found [ 332.514235][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.524033][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.534111][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.553421][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.578369][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.083992][T11561] team0 (unregistering): Port device team_slave_1 removed [ 333.144192][T11561] team0 (unregistering): Port device team_slave_0 removed [ 333.570935][T15685] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 333.648020][T15703] wg1 speed is unknown, defaulting to 1000 [ 333.709759][T15710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.803955][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2774'. [ 333.821238][T15713] sctp: [Deprecated]: syz.6.2775 (pid 15713) Use of int in max_burst socket option deprecated. [ 333.821238][T15713] Use struct sctp_assoc_value instead [ 334.103976][T11561] IPVS: stop unused estimator thread 0... [ 334.659552][ T5842] Bluetooth: hci2: command tx timeout [ 334.704767][T15703] chnl_net:caif_netlink_parms(): no params data found [ 334.868895][T15755] geneve2: entered promiscuous mode [ 334.994090][T15703] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.012912][T15703] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.034542][T15703] bridge_slave_0: entered allmulticast mode [ 335.044587][T15703] bridge_slave_0: entered promiscuous mode [ 335.053941][T15703] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.065345][T15703] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.073587][T15703] bridge_slave_1: entered allmulticast mode [ 335.087569][T15703] bridge_slave_1: entered promiscuous mode [ 335.193112][T15703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.207802][T15703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.310015][T15703] team0: Port device team_slave_0 added [ 335.320868][T15703] team0: Port device team_slave_1 added [ 335.385163][T15782] __nla_validate_parse: 2 callbacks suppressed [ 335.385186][T15782] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2793'. [ 335.434560][T15780] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 335.562860][T15789] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2796'. [ 335.587159][T15703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.621220][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.706316][T15703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.722175][T15703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.731673][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.760163][T15703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.791883][T15791] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2797'. [ 336.006053][T15703] hsr_slave_0: entered promiscuous mode [ 336.032200][T15813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.046850][T15703] hsr_slave_1: entered promiscuous mode [ 336.055122][T15703] debugfs: 'hsr0' already exists in 'hsr' [ 336.062761][T15703] Cannot create hsr debugfs directory [ 336.372829][T15703] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 336.385096][T15703] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 336.456839][T15703] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 336.469956][T15703] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 336.555418][T15703] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 336.627263][T15703] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 336.714447][T15703] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 336.739653][ T5842] Bluetooth: hci2: command tx timeout [ 336.745332][T15703] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 337.059787][T15862] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2816'. [ 337.142102][T15703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 337.158245][T15703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 337.174301][T15703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.211059][T15703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.381584][T15703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.417013][T15703] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.433639][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.440980][ T6845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.465030][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.472256][ T6853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.798267][T15703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.917003][T15703] veth0_vlan: entered promiscuous mode [ 338.274748][T15891] netlink: 'syz.6.2821': attribute type 29 has an invalid length. [ 338.307045][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2821'. [ 338.307199][T15896] netlink: 'syz.7.2822': attribute type 1 has an invalid length. [ 338.332507][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2822'. [ 338.395318][T15899] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2823'. [ 338.405248][T15703] veth1_vlan: entered promiscuous mode [ 338.517144][T15703] veth0_macvtap: entered promiscuous mode [ 338.544895][T15703] veth1_macvtap: entered promiscuous mode [ 338.584573][T15901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.598044][T15703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.641909][T15703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.734757][T11561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.779395][T11561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.819538][ T5842] Bluetooth: hci2: command tx timeout [ 338.831084][T15918] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2829'. [ 338.905885][T15920] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2830'. [ 338.959423][T11561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.968228][T11561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.309930][T11563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.351133][T11563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.487874][ T6853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.517130][ T6853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.993016][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2768'. [ 340.407676][ T30] audit: type=1107 audit(1762564862.928:2): pid=15986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='xO8u0^E;hrZ-*Giah:}@%g[m IĔD0K15YVq7BsV7^Zbei!T$O-Ն|A/Jeh^%m6<^[' [ 340.602846][T16005] syzkaller0: entered promiscuous mode [ 340.608599][T16005] syzkaller0: entered allmulticast mode [ 340.727333][T16012] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.2854'. [ 340.801045][T16014] debugfs: '&%Q0@æjʫ} }!' already exists in 'ieee80211' [ 340.901333][ T5842] Bluetooth: hci2: command tx timeout [ 340.942974][T16014] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2855'. [ 341.251576][T16036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2860'. [ 341.564686][T16049] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2867'. [ 341.623803][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2869'. [ 341.656808][T16053] netlink: 176 bytes leftover after parsing attributes in process `syz.8.2869'. [ 341.697791][T16053] netlink: 'syz.8.2869': attribute type 5 has an invalid length. [ 341.722160][T16055] netlink: 512 bytes leftover after parsing attributes in process `syz.2.2870'. [ 341.837223][T16066] dvmrp8: entered allmulticast mode [ 342.041502][T16076] netlink: 'syz.2.2876': attribute type 1 has an invalid length. [ 342.147593][T16085] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2879'. [ 342.306590][T16091] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2882'. [ 342.351132][T16087] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2880'. [ 342.758163][T16087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.767901][T16087] bond_slave_0: left promiscuous mode [ 342.776893][T16087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.788893][T16087] bond_slave_1: left promiscuous mode [ 342.796297][T16087] bond0 (unregistering): Released all slaves [ 343.078705][T16129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.176601][T16136] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 343.193240][T16136] ipt_rpfilter: unknown options [ 343.523804][T16166] netlink: 'syz.2.2900': attribute type 5 has an invalid length. [ 343.695056][T16173] netlink: 'syz.2.2902': attribute type 12 has an invalid length. [ 343.826317][T16185] netlink: 'syz.2.2905': attribute type 4 has an invalid length. [ 343.936628][T16188] syzkaller1: entered promiscuous mode [ 343.950498][T16188] syzkaller1: entered allmulticast mode [ 343.994572][T16190] dvmrp1: entered allmulticast mode [ 344.013254][T16190] netlink: 'syz.9.2907': attribute type 1 has an invalid length. [ 344.159886][T16202] siw: device registration error -23 [ 344.165458][T16199] IPVS: Unknown mcast interface: vcan0 [ 345.140872][T11316] Bluetooth: hci1: command 0x0406 tx timeout [ 345.147130][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 345.302839][T16249] veth0: mtu greater than device maximum [ 346.492568][T16303] __nla_validate_parse: 9 callbacks suppressed [ 346.492587][T16303] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2939'. [ 346.588880][T16308] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2940'. [ 346.617048][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2942'. [ 346.682235][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2942'. [ 346.847523][T16324] syzkaller0: entered promiscuous mode [ 346.853516][T16324] syzkaller0: entered allmulticast mode [ 347.066460][T16339] netlink: 'syz.8.2950': attribute type 1 has an invalid length. [ 347.294641][T16345] veth7: entered promiscuous mode [ 347.568102][T16369] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2956'. [ 347.581406][T16371] IPVS: length: 239 != 24 [ 347.654340][T16374] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2955'. [ 347.666512][T16374] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2955'. [ 347.996013][T16389] nftables ruleset with unbound set [ 348.080915][T16392] netlink: 'syz.2.2964': attribute type 10 has an invalid length. [ 348.110925][T16392] team0: Port device dummy0 added [ 348.127150][T16392] netlink: 'syz.2.2964': attribute type 10 has an invalid length. [ 348.155142][T16392] netlink: 'syz.2.2964': attribute type 10 has an invalid length. [ 348.192844][T16392] netlink: 'syz.2.2964': attribute type 10 has an invalid length. [ 348.204512][T16392] netlink: 'syz.2.2964': attribute type 10 has an invalid length. [ 348.505117][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2969'. [ 348.515455][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2969'. [ 348.550828][T16409] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 348.901583][T16426] validate_nla: 29 callbacks suppressed [ 348.901603][T16426] netlink: 'syz.2.2973': attribute type 12 has an invalid length. [ 349.117235][T16426] bond1: option primary_reselect: invalid value (255) [ 349.385864][T16426] bond1 (unregistering): Released all slaves [ 349.742962][T16449] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2978'. [ 349.810388][T16456] x_tables: duplicate underflow at hook 3 [ 349.966741][T16464] netlink: 'syz.2.2983': attribute type 3 has an invalid length. [ 350.013999][T16464] netlink: 'syz.2.2983': attribute type 2 has an invalid length. [ 350.092288][T16468] geneve2: entered promiscuous mode [ 350.098060][T16468] geneve2: entered allmulticast mode [ 350.108606][T16470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.138000][T16470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.162157][T16470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.172757][T16472] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 350.177721][T16470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.295591][ T6853] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 350.316184][ T6853] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 350.347460][ T6853] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 350.382791][T11564] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 350.496992][T16482] delete_channel: no stack [ 350.561290][T16495] dvmrp0: left allmulticast mode [ 350.566673][T16495] dvmrp8: left allmulticast mode [ 350.854040][T16513] netlink: 'syz.7.2999': attribute type 10 has an invalid length. [ 350.907535][T16515] tipc: Enabled bearer , priority 0 [ 350.950613][T16515] syzkaller0: entered promiscuous mode [ 350.961433][T16515] syzkaller0: entered allmulticast mode [ 350.977668][T16515] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 351.062193][T16509] tipc: Resetting bearer [ 351.068214][T16525] Cannot find add_set index 0 as target [ 351.091574][T16507] tipc: Resetting bearer [ 351.121418][T16507] tipc: Disabling bearer [ 351.265814][T16533] 0: reclassify loop, rule prio 0, protocol 800 [ 351.324362][T16535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.346039][T16538] sctp: [Deprecated]: syz.6.3008 (pid 16538) Use of int in maxseg socket option. [ 351.346039][T16538] Use struct sctp_assoc_value instead [ 351.624825][T16554] __nla_validate_parse: 10 callbacks suppressed [ 351.624847][T16554] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3011'. [ 351.936084][T16568] syzkaller0: entered promiscuous mode [ 351.943997][T16568] syzkaller0: entered allmulticast mode [ 352.114853][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'. [ 352.207482][T16578] bond0: (slave bond_slave_1): Releasing backup interface [ 352.242358][T16583] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3018'. [ 352.259018][T16583] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3018'. [ 352.272250][T16583] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3018'. [ 352.282499][T16583] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3018'. [ 352.292840][T16583] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3018'. [ 352.304625][T16583] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3018'. [ 352.312803][T16586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3019'. [ 352.315546][T16583] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3018'. [ 352.485914][T16592] netlink: 'syz.2.3020': attribute type 1 has an invalid length. [ 352.568336][T16592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.844057][T16611] tipc: Enabled bearer , priority 0 [ 352.853241][T16611] syzkaller0: entered promiscuous mode [ 352.858759][T16611] syzkaller0: entered allmulticast mode [ 352.871090][T16611] Bluetooth: MGMT ver 1.23 [ 352.936087][T16611] tipc: Resetting bearer [ 352.957152][T16609] tipc: Resetting bearer [ 353.002360][T16609] tipc: Disabling bearer [ 353.236509][T16636] netlink: 'syz.8.3036': attribute type 33 has an invalid length. [ 353.304716][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 354.421809][T16677] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 355.008770][T16710] syzkaller1: entered promiscuous mode [ 355.015458][T16710] syzkaller1: entered allmulticast mode [ 355.478832][T16732] syzkaller0: entered promiscuous mode [ 355.486661][T16732] syzkaller0: entered allmulticast mode [ 355.914596][T16730] infiniband !yz!: set active [ 355.931209][T16730] infiniband !yz!: added team_slave_0 [ 356.105398][T16730] RDS/IB: !yz!: added [ 356.116162][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 356.180839][T16730] smc: adding ib device !yz! with port count 1 [ 356.220229][T16730] smc: ib device !yz! port 1 has no pnetid [ 356.547644][T16788] tipc: Enabling not permitted [ 356.563942][T16788] tipc: Enabling of bearer rejected, failed to enable media [ 356.754906][T16798] __nla_validate_parse: 39 callbacks suppressed [ 356.754926][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3085'. [ 356.800832][T16798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.871292][T16798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.222434][T16817] syzkaller0: entered promiscuous mode [ 357.228071][T16817] syzkaller0: entered allmulticast mode [ 358.121153][T16844] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3097'. [ 358.476038][T16857] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3101'. [ 358.476038][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3101'. [ 358.550853][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3101'. [ 358.856541][T16865] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3104'. [ 358.867073][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3104'. [ 359.071710][T16873] netlink: 'syz.9.3107': attribute type 5 has an invalid length. [ 359.553270][T16902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.582579][T16900] syzkaller0: entered promiscuous mode [ 359.590841][T16904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.606719][T16900] syzkaller0: entered allmulticast mode [ 359.634087][T16900] netlink: 'syz.9.3115': attribute type 2 has an invalid length. [ 359.655698][T16900] netlink: 'syz.9.3115': attribute type 2 has an invalid length. [ 359.688583][T16900] netlink: 'syz.9.3115': attribute type 2 has an invalid length. [ 359.702271][ T5842] Bluetooth: hci2: command 0x0405 tx timeout [ 360.130708][T16924] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3122'. [ 360.346801][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3127'. [ 360.531835][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3128'. [ 360.707678][T16954] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 360.742462][T16953] netlink: 'syz.9.3130': attribute type 1 has an invalid length. [ 360.835634][T16951] siw: device registration error -23 [ 360.989496][T16965] netlink: 'syz.8.3132': attribute type 11 has an invalid length. [ 361.206662][T16982] warn_alloc: 1 callbacks suppressed [ 361.206683][T16982] syz.2.3137: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 361.258727][T16982] CPU: 0 UID: 0 PID: 16982 Comm: syz.2.3137 Not tainted syzkaller #0 PREEMPT(full) [ 361.258757][T16982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.258770][T16982] Call Trace: [ 361.258779][T16982] [ 361.258788][T16982] dump_stack_lvl+0x189/0x250 [ 361.258827][T16982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.258857][T16982] ? __pfx__printk+0x10/0x10 [ 361.258880][T16982] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 361.258909][T16982] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 361.258940][T16982] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 361.258972][T16982] warn_alloc+0x214/0x310 [ 361.259003][T16982] ? stack_depot_save_flags+0x40/0x860 [ 361.259040][T16982] ? __pfx_warn_alloc+0x10/0x10 [ 361.259076][T16982] ? kasan_save_track+0x3e/0x80 [ 361.259104][T16982] ? __kasan_kmalloc+0x93/0xb0 [ 361.259141][T16982] ? xsk_setsockopt+0x4dc/0x8d0 [ 361.259164][T16982] ? do_sock_setsockopt+0x17c/0x1b0 [ 361.259183][T16982] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 361.259202][T16982] ? do_syscall_64+0xfa/0xfa0 [ 361.259231][T16982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.259263][T16982] __vmalloc_node_range_noprof+0x125/0x12d0 [ 361.259331][T16982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 361.259366][T16982] ? __kasan_kmalloc+0x93/0xb0 [ 361.259413][T16982] vmalloc_user_noprof+0xad/0xf0 [ 361.259444][T16982] ? xskq_create+0xbf/0x170 [ 361.259472][T16982] xskq_create+0xbf/0x170 [ 361.259505][T16982] xsk_init_queue+0xb0/0x110 [ 361.259535][T16982] xsk_setsockopt+0x4dc/0x8d0 [ 361.259564][T16982] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.259594][T16982] ? __pfx_aa_sk_perm+0x10/0x10 [ 361.259625][T16982] ? aa_sock_opt_perm+0xff/0x1b0 [ 361.259660][T16982] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 361.259680][T16982] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.259708][T16982] do_sock_setsockopt+0x17c/0x1b0 [ 361.259735][T16982] __x64_sys_setsockopt+0x13f/0x1b0 [ 361.259763][T16982] do_syscall_64+0xfa/0xfa0 [ 361.259790][T16982] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.259820][T16982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.259840][T16982] ? clear_bhb_loop+0x60/0xb0 [ 361.259865][T16982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.259886][T16982] RIP: 0033:0x7f048118f6c9 [ 361.259908][T16982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.259927][T16982] RSP: 002b:00007f0482044038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.259951][T16982] RAX: ffffffffffffffda RBX: 00007f04813e5fa0 RCX: 00007f048118f6c9 [ 361.259967][T16982] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 361.259979][T16982] RBP: 00007f0481211f91 R08: 0000000000000004 R09: 0000000000000000 [ 361.259992][T16982] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.260005][T16982] R13: 00007f04813e6038 R14: 00007f04813e5fa0 R15: 00007ffe46185348 [ 361.260042][T16982] [ 361.572859][T16982] Mem-Info: [ 361.576129][T16982] active_anon:5156 inactive_anon:0 isolated_anon:0 [ 361.576129][T16982] active_file:2956 inactive_file:39994 isolated_file:0 [ 361.576129][T16982] unevictable:768 dirty:40 writeback:0 [ 361.576129][T16982] slab_reclaimable:12759 slab_unreclaimable:127418 [ 361.576129][T16982] mapped:29221 shmem:1376 pagetables:1125 [ 361.576129][T16982] sec_pagetables:0 bounce:0 [ 361.576129][T16982] kernel_misc_reclaimable:0 [ 361.576129][T16982] free:1299107 free_pcp:14392 free_cma:0 [ 361.644151][T16982] Node 0 active_anon:20424kB inactive_anon:0kB active_file:11824kB inactive_file:159780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116884kB dirty:160kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15436kB pagetables:4500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.682445][T16982] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.715179][T16982] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.769964][T16982] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 361.793978][T16982] Node 0 DMA32 free:1288016kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20424kB inactive_anon:0kB active_file:11824kB inactive_file:159780kB unevictable:1536kB writepending:160kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:42812kB local_pcp:21328kB free_cma:0kB [ 361.828469][T16982] lowmem_reserve[]: 0 0 0 0 0 [ 361.833304][T16982] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.866709][T16982] lowmem_reserve[]: 0 0 0 0 0 [ 361.872640][T16982] Node 1 Normal free:3893308kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15040kB local_pcp:5312kB free_cma:0kB [ 361.919378][T16982] lowmem_reserve[]: 0 0 0 0 0 [ 361.925091][T16982] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 361.959088][T16982] Node 0 DMA32: 538*4kB (UME) 159*8kB (M) 130*16kB (UM) 74*32kB (UM) 4*64kB (UM) 2*128kB (ME) 1*256kB (M) 9*512kB (ME) 7*1024kB (M) 5*2048kB (UM) 307*4096kB (UM) = 1288128kB [ 361.987811][T16982] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 362.040594][T16982] Node 1 Normal: 213*4kB (UME) 51*8kB (UME) 51*16kB (UME) 167*32kB (UME) 47*64kB (UME) 11*128kB (UME) 4*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3893308kB [ 362.064468][T16995] syzkaller1: entered promiscuous mode [ 362.071537][T16995] syzkaller1: entered allmulticast mode [ 362.100201][T16982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.130739][T16982] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.170060][T16982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.185007][T16982] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.204395][T16982] 45447 total pagecache pages [ 362.210931][T16982] 0 pages in swap cache [ 362.215223][T16982] Free swap = 124996kB [ 362.241755][T16982] Total swap = 124996kB [ 362.273564][T16982] 2097051 pages RAM [ 362.277439][T16982] 0 pages HighMem/MovableOnly [ 362.282577][T16982] 424119 pages reserved [ 362.286889][T16982] 0 pages cma reserved [ 362.445363][T17009] __nla_validate_parse: 4 callbacks suppressed [ 362.445385][T17009] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3146'. [ 362.724287][T17024] sctp: [Deprecated]: syz.2.3151 (pid 17024) Use of int in maxseg socket option. [ 362.724287][T17024] Use struct sctp_assoc_value instead [ 362.870305][T17027] netlink: 'syz.7.3152': attribute type 1 has an invalid length. [ 362.933731][T17031] netlink: 'syz.6.3153': attribute type 1 has an invalid length. [ 362.956548][T17031] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3153'. [ 362.963504][T17027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.967780][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3153'. [ 363.056178][T17032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.067837][T17032] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 363.081384][T17032] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 363.125723][T17042] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3155'. [ 363.135270][T17034] tipc: Enabling of bearer rejected, media not registered [ 363.434739][T17063] nftables ruleset with unbound chain [ 363.455868][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3161'. [ 363.633621][T17066] wg1 speed is unknown, defaulting to 1000 [ 363.822380][T17080] tipc: Started in network mode [ 363.830559][T17080] tipc: Node identity 6e6564dc3a1a, cluster identity 4711 [ 363.837962][T17080] tipc: Enabled bearer , priority 0 [ 363.846420][T17081] syzkaller0: entered promiscuous mode [ 363.857312][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3167'. [ 363.879204][T17081] syzkaller0: entered allmulticast mode [ 363.961378][T17081] tipc: Resetting bearer [ 364.003340][T17081] tipc: Disabling bearer [ 365.036213][T17129] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3182'. [ 365.305029][T17131] bond8 (unregistering): Released all slaves [ 365.496149][T17135] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 365.601369][T17149] tipc: Started in network mode [ 365.631442][T17149] tipc: Node identity be899e07079a, cluster identity 4711 [ 365.642706][T17149] tipc: Enabled bearer , priority 0 [ 365.656901][T17151] syzkaller0: entered promiscuous mode [ 365.679291][T17151] syzkaller0: entered allmulticast mode [ 365.704737][T17149] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 365.747135][T17149] tipc: Resetting bearer [ 365.776999][T17146] tipc: Resetting bearer [ 365.817667][T17146] tipc: Disabling bearer [ 366.257838][T17187] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3197'. [ 366.569732][T17197] netlink: 'syz.7.3200': attribute type 8 has an invalid length. [ 366.632443][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3201'. [ 366.652047][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3201'. [ 366.805961][T17209] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 366.818783][T17209] batadv_slave_0: entered promiscuous mode [ 366.840719][T17209] batadv_slave_0: left promiscuous mode [ 366.855850][T17209] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 367.272961][T17239] netlink: 'syz.6.3217': attribute type 1 has an invalid length. [ 367.613803][T17261] set match dimension is over the limit! [ 367.684531][T17264] __nla_validate_parse: 3 callbacks suppressed [ 367.684554][T17264] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3223'. [ 367.724546][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3226'. [ 367.766501][T17266] geneve3: entered promiscuous mode [ 367.875012][T17264] xfrm1: entered promiscuous mode [ 367.894825][T17276] netlink: 'syz.8.3228': attribute type 8 has an invalid length. [ 367.903929][T17264] xfrm1: entered allmulticast mode [ 367.915992][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3228'. [ 367.928470][T17272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.052231][T17282] netlink: 'syz.2.3231': attribute type 7 has an invalid length. [ 368.112039][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3232'. [ 368.117474][T17282] syz.2.3231 (17282) used obsolete PPPIOCDETACH ioctl [ 368.132322][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3232'. [ 368.425324][T17296] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3237'. [ 368.482515][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3240'. [ 368.501994][T17305] netlink: 'syz.9.3240': attribute type 5 has an invalid length. [ 368.527218][T17305] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3240'. [ 368.604637][T17305] geneve2: entered promiscuous mode [ 368.623703][T17305] geneve2: entered allmulticast mode [ 368.640441][ T12] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 368.676202][ T12] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 368.713964][T11559] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 368.874155][T17332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3245'. [ 368.947857][T17336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.048313][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3247'. [ 369.350769][T17357] nbd: couldn't find a device at index 0 [ 369.901824][T17394] x_tables: duplicate underflow at hook 1 [ 370.072275][T17394] ip6tnl0: Caught tx_queue_len zero misconfig [ 370.084210][T17398] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 370.207725][T17403] Bluetooth: hci1: too big key_count value 32778 [ 370.421360][T17419] netlink: 'syz.9.3269': attribute type 11 has an invalid length. [ 371.226170][T17461] tipc: Enabled bearer , priority 10 [ 371.247617][T17462] tipc: Enabling of bearer rejected, already enabled [ 371.546277][T17477] netlink: 'syz.7.3290': attribute type 1 has an invalid length. [ 371.624350][T17477] bond8: entered promiscuous mode [ 371.631157][T17477] 8021q: adding VLAN 0 to HW filter on device bond8 [ 371.700684][T17484] bond8: (slave bridge6): making interface the new active one [ 371.708551][T17484] bridge6: entered promiscuous mode [ 371.715823][T17484] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 371.729260][T17486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.923894][T17493] netlink: 'syz.8.3296': attribute type 5 has an invalid length. [ 372.254835][T17513] xt_cgroup: xt_cgroup: no path or classid specified [ 372.408961][ T30] audit: type=1107 audit(1762564894.928:3): pid=17521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Z|11 /Vq3:x@:B//Ftx'c [ 372.408961][ T30] kK^EQW&lf%/Tz_ [ 372.408961][ T30] f5' [ 372.468881][T17526] netlink: 'syz.7.3307': attribute type 6 has an invalid length. [ 372.741388][T17540] __nla_validate_parse: 7 callbacks suppressed [ 372.741409][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3312'. [ 372.820520][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3312'. [ 372.898650][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3314'. [ 373.134409][T17556] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3316'. [ 373.180821][T17556] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3316'. [ 373.218515][T17556] netlink: 'syz.6.3316': attribute type 5 has an invalid length. [ 373.227648][T17556] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3316'. [ 373.577378][T17571] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3320'. [ 373.632278][T17571] bond0 (unregistering): Released all slaves [ 373.659983][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3321'. [ 373.671248][T17577] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3321'. [ 373.688982][T17577] geneve3: entered promiscuous mode [ 373.695670][T17577] geneve3: entered allmulticast mode [ 373.856766][T17582] netlink: 1044 bytes leftover after parsing attributes in process `syz.7.3322'. [ 375.981297][T17607] tipc: Enabled bearer , priority 0 [ 376.040627][T17607] syzkaller0: entered promiscuous mode [ 376.048858][T17619] netlink: 'syz.7.3333': attribute type 1 has an invalid length. [ 376.068189][T17607] syzkaller0: entered allmulticast mode [ 376.084461][T17607] tipc: Resetting bearer [ 376.136693][T17619] 8021q: adding VLAN 0 to HW filter on device bond9 [ 376.166548][T17608] IPv6: NLM_F_CREATE should be specified when creating new route [ 376.200634][T17608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.208381][T17608] IPv6: NLM_F_CREATE should be set when creating new route [ 376.228619][T17608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.236385][T17608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.244413][T17608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.311998][T17605] tipc: Resetting bearer [ 378.061013][T17605] tipc: Disabling bearer [ 378.071682][T17633] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 378.082904][T17645] : renamed from hsr0 (while UP) [ 378.300252][T17658] wg1 speed is unknown, defaulting to 1000 [ 378.311871][T17658] __nla_validate_parse: 9 callbacks suppressed [ 378.311894][T17658] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3343'. [ 378.427421][T17668] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3344'. [ 378.460783][T17668] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3344'. [ 378.493091][T17668] netlink: 'syz.2.3344': attribute type 5 has an invalid length. [ 378.496403][T17670] tipc: Enabled bearer , priority 0 [ 378.520098][T17668] netlink: 'syz.2.3344': attribute type 6 has an invalid length. [ 378.535294][T17668] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3344'. [ 378.543204][T17670] syzkaller0: entered promiscuous mode [ 378.565617][T17670] syzkaller0: entered allmulticast mode [ 378.660599][T17665] tipc: Resetting bearer [ 378.709065][T17664] tipc: Resetting bearer [ 378.747044][T17664] tipc: Disabling bearer [ 379.066464][T17690] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3351'. [ 379.295655][T17717] xt_l2tp: missing protocol rule (udp|l2tpip) [ 379.608062][T17729] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3360'. [ 379.801368][T17715] batman_adv: batadv0: Interface deactivated: dummy0 [ 379.942759][T17715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.139541][T17734] sit0: entered promiscuous mode [ 380.183955][T17734] netlink: 'syz.9.3358': attribute type 1 has an invalid length. [ 380.206116][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3362'. [ 380.228292][T17734] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3358'. [ 380.242349][T17731] syzkaller1: entered promiscuous mode [ 380.250703][T17731] syzkaller1: entered allmulticast mode [ 380.267067][ T6853] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.331936][T17744] macvtap0: entered promiscuous mode [ 380.364478][T17744] vlan0: entered promiscuous mode [ 380.428823][T17744] macvtap0: entered allmulticast mode [ 380.444899][T17744] vlan0: entered allmulticast mode [ 380.466614][T17744] veth0_vlan: entered allmulticast mode [ 380.517993][ T6853] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.534310][ T6853] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.647287][ T6853] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.687972][T17759] tipc: Can't bind to reserved service type 2 [ 380.840349][T17768] tipc: MTU too low for tipc bearer [ 381.077512][T17779] netlink: 1044 bytes leftover after parsing attributes in process `syz.9.3375'. [ 381.140220][ T5842] Bluetooth: hci2: command 0x0405 tx timeout [ 381.773659][T17828] tipc: Enabled bearer , priority 0 [ 381.780957][T17827] tipc: Enabling of bearer rejected, already enabled [ 381.866740][T17837] netlink: 'syz.8.3388': attribute type 1 has an invalid length. [ 381.893301][T17840] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3390'. [ 381.904249][T17825] tipc: Disabling bearer [ 381.974503][T17837] 8021q: adding VLAN 0 to HW filter on device bond8 [ 382.015558][T17844] vlan3: entered promiscuous mode [ 382.030396][T17844] bond8: entered promiscuous mode [ 382.049733][T17844] vlan3: entered allmulticast mode [ 382.062845][T17844] bond8: entered allmulticast mode [ 382.088250][T17842] bridge0: port 1(vlan2) entered blocking state [ 382.128575][T17842] bridge0: port 1(vlan2) entered disabled state [ 382.150402][T17842] vlan2: entered allmulticast mode [ 382.155791][T17842] bridge0: entered allmulticast mode [ 382.176416][T17852] Bluetooth: MGMT ver 1.23 [ 382.200877][T17842] vlan2: left allmulticast mode [ 382.237232][T17842] bridge0: left allmulticast mode [ 383.102478][T17904] netlink: 'syz.2.3409': attribute type 10 has an invalid length. [ 383.998941][T17954] __nla_validate_parse: 6 callbacks suppressed [ 383.998960][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3423'. [ 384.159042][T17958] netlink: 'syz.6.3423': attribute type 2 has an invalid length. [ 384.168206][T17958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3423'. [ 384.265711][T17962] tipc: Enabled bearer , priority 0 [ 384.296230][T17962] syzkaller0: entered promiscuous mode [ 384.303762][T17962] syzkaller0: entered allmulticast mode [ 384.393600][T17962] tipc: Resetting bearer [ 384.610780][T17974] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3429'. [ 384.896325][T17994] syzkaller1: entered promiscuous mode [ 384.909902][T17994] syzkaller1: entered allmulticast mode [ 385.012587][T18002] netlink: 'syz.8.3437': attribute type 1 has an invalid length. [ 385.021427][T17961] tipc: Resetting bearer [ 385.074780][T17961] tipc: Disabling bearer [ 385.122040][T17970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 385.128975][T17970] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 385.137840][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3438'. [ 385.169531][T17970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.177774][T11564] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.196589][T17970] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 385.237535][T18013] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3439'. [ 385.254419][T17970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.266235][T17970] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 385.373643][T18022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.594740][T18031] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3446'. [ 385.632687][T17970] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 385.661491][T17970] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 385.787329][T15506] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 385.799300][T15506] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 385.807850][T15506] CPU: 1 UID: 0 PID: 15506 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 385.817461][T15506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.828211][T15506] RIP: 0010:klist_del+0x49/0x110 [ 385.833192][T15506] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 99 c0 e8 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 7b c0 e8 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8 [ 385.852995][T15506] RSP: 0018:ffffc9000b547748 EFLAGS: 00010202 [ 385.859080][T15506] RAX: 000000000000000b RBX: ffff88805ac93460 RCX: ffff888031e41e40 [ 385.867175][T15506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 385.875186][T15506] RBP: ffffc9000b547870 R08: ffff88806594ef03 R09: 1ffff1100cb29de0 [ 385.883177][T15506] R10: dffffc0000000000 R11: ffffed100cb29de1 R12: dffffc0000000000 [ 385.891504][T15506] R13: 1ffff1100b59268c R14: 0000000000000000 R15: ffff88805ae6c758 [ 385.899786][T15506] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 385.908750][T15506] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.915381][T15506] CR2: 00007fdd5fb78d58 CR3: 000000005def6000 CR4: 00000000003526f0 [ 385.923716][T15506] Call Trace: [ 385.927127][T15506] [ 385.930096][T15506] device_del+0x280/0x8e0 [ 385.934530][T15506] ? _raw_spin_unlock_irq+0x2e/0x50 [ 385.939788][T15506] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 385.945901][T15506] ? __pfx_device_del+0x10/0x10 [ 385.950797][T15506] ? netdev_unregister_kobject+0x344/0x450 [ 385.956652][T15506] unregister_netdevice_many_notify+0x1df2/0x2390 [ 385.963215][T15506] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 385.970035][T15506] ? rtnl_net_dev_lock+0x257/0x2f0 [ 385.975452][T15506] unregister_netdevice_queue+0x33c/0x380 [ 385.981207][T15506] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 385.987594][T15506] ? rtnl_net_dev_lock+0x36/0x2f0 [ 385.992661][T15506] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 385.997979][T15506] unregister_netdev+0x1f/0x60 [ 386.002938][T15506] bnep_session+0x294d/0x2b40 [ 386.007643][T15506] ? rcu_is_watching+0x15/0xb0 [ 386.012468][T15506] ? trace_sched_exit_tp+0x36/0x110 [ 386.017864][T15506] ? __lock_acquire+0xab9/0xd20 [ 386.022737][T15506] ? __pfx_bnep_session+0x10/0x10 [ 386.027778][T15506] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 386.033693][T15506] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.040047][T15506] ? __pfx_woken_wake_function+0x10/0x10 [ 386.045727][T15506] ? __kthread_parkme+0x7b/0x200 [ 386.050871][T15506] ? __kthread_parkme+0x1a1/0x200 [ 386.056019][T15506] kthread+0x711/0x8a0 [ 386.060121][T15506] ? __pfx_bnep_session+0x10/0x10 [ 386.065713][T15506] ? __pfx_kthread+0x10/0x10 [ 386.070364][T15506] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.075774][T15506] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.081073][T15506] ? __pfx_kthread+0x10/0x10 [ 386.085693][T15506] ret_from_fork+0x4bc/0x870 [ 386.090395][T15506] ? __pfx_ret_from_fork+0x10/0x10 [ 386.095855][T15506] ? __switch_to_asm+0x39/0x70 [ 386.100984][T15506] ? __switch_to_asm+0x33/0x70 [ 386.105812][T15506] ? __pfx_kthread+0x10/0x10 [ 386.111057][T15506] ret_from_fork_asm+0x1a/0x30 [ 386.115952][T15506] [ 386.119044][T15506] Modules linked in: [ 386.124864][T15506] ---[ end trace 0000000000000000 ]--- [ 386.131601][T15506] RIP: 0010:klist_del+0x49/0x110 [ 386.136651][T15506] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 99 c0 e8 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 7b c0 e8 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8 [ 386.156990][T15506] RSP: 0018:ffffc9000b547748 EFLAGS: 00010202 [ 386.163707][T15506] RAX: 000000000000000b RBX: ffff88805ac93460 RCX: ffff888031e41e40 [ 386.172403][T15506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 386.180968][T15506] RBP: ffffc9000b547870 R08: ffff88806594ef03 R09: 1ffff1100cb29de0 [ 386.188987][T15506] R10: dffffc0000000000 R11: ffffed100cb29de1 R12: dffffc0000000000 [ 386.197237][T15506] R13: 1ffff1100b59268c R14: 0000000000000000 R15: ffff88805ae6c758 [ 386.205473][T15506] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 386.214679][T15506] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.222033][T15506] CR2: 00007fdd5fb78d58 CR3: 0000000077dba000 CR4: 00000000003526f0 [ 386.230156][T15506] Kernel panic - not syncing: Fatal exception [ 386.236400][T15506] Kernel Offset: disabled [ 386.240736][T15506] Rebooting in 86400 seconds..