last executing test programs: 15m36.400530294s ago: executing program 4 (id=492): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x10, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1f}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) socket$isdn(0x22, 0x2, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64], 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000080), 0x24) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r3 = socket(0x1e, 0x805, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) unshare(0x6a040000) shutdown(0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r4, 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYRES64=0x0], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) sendmsg$IPSET_CMD_PROTOCOL(r3, 0x0, 0x8081) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 15m35.931274642s ago: executing program 4 (id=496): syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x1, 0x4, 0x30, 0x68, 0x0, 0xff, 0x6, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x54, 0x0, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m35.602987682s ago: executing program 4 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x8, 0x1e8bc621e1aa0844}, 0x50) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 15m35.352311041s ago: executing program 4 (id=501): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) epoll_create1(0x80000) (async) r1 = epoll_create1(0x80000) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000001c}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000001c}) r2 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r4}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15m34.869821758s ago: executing program 4 (id=506): r0 = socket(0x8, 0x2, 0xfffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2, 0x1}}, 0x2e) close(r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@prinfo={0x18, 0x84, 0x5, {0x10}}, @authinfo={0x18, 0x84, 0x6, {0x4}}], 0x30, 0x901}], 0x1, 0x8010) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xe, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x8044) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000010000004feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000003500000280012800b00010067656e65766500001800028014000700ff0100000000000000000000000000011400030067656e65766539000000000000000000"], 0x5c}}, 0x2000000) close(0x4) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) setsockopt$inet6_buf(r10, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003", 0x2d) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x2, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe8}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 15m34.276983573s ago: executing program 4 (id=511): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000240)=0xaa00e6f, 0x4) (async) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000240)=0xaa00e6f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=r4], 0x30}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x8}, 0x28) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000040)=0x1) (async) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000040)=0x1) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0xd, 0x0, &(0x7f0000000040)) 15m32.460922888s ago: executing program 2 (id=527): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x9, 0x3, 0x9}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e20, 0x2, @private1, 0x197d}}}, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000300)={r3, 0x0, 0xd917}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800b0001006d610100000000000400cab4604f0280", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 15m32.137122904s ago: executing program 2 (id=531): r0 = socket(0x25, 0x1, 0x4) connect$can_j1939(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0xfffffffffffffe00, 0x0, 0x200, 0x0, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_WIPHY_DYN_ACK]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x200448c4) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000bc0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0xa0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}], 0x58) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x28, 0xd, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x20, 0x4) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00`\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) (async) socket(0x10, 0x2, 0x0) 15m31.754798848s ago: executing program 2 (id=536): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000006c0)='cachefiles_mark_inactive\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$kcm(0x2, 0xa, 0x2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) recvmmsg(r4, &(0x7f000000b640)=[{{0x0, 0x0, 0x0}, 0xffff6108}], 0x1, 0x2100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="340000000301010100090000000000000300000308000340001000020954e86d2a27e3cf0ab03b4995ff25a570d2c144da3e8f0251e6667085033c9dc83ca5258b43056754ece9525b19cac38c48797eef3d158afd311b44fd3b4d143402f952cd4286f17c74b84b3ad3f3a83d1ce66dbe1aedd9a580537cd2daac6950a0f03aba90c687c3670f0ddfd67603682dc7e614d4396da62b75c4dd606288f0cb5b3cb6c72b5555ea1cf837e9c7e44491b3eb7998f0d55a3069165e7eae7cb8531f12a01a288701d43ed5982c5274846dd972b751fc80f64fe8ae561320b6edb15ba012f8db885a74f2ed9cd7251614b489"], 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x4050) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dvmrp0\x00'}) r10 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8024}, 0x20000010) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}]}}]}, 0x60}}, 0x24004000) 15m30.731227767s ago: executing program 2 (id=541): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r1, 0x11, 0xd, 0x0, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, 0x0}, 0x4004) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000003880)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x27) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r10], 0x20}}, 0x0) 15m30.254425437s ago: executing program 2 (id=544): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=@newtaction={0x13c, 0x30, 0x1, 0x0, 0x0, {}, [{0x128, 0x1, [@m_skbmod={0x124, 0x3, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x8, 0x3, 0xed, 0xb2e}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0xb7, 0x6, "18ca845dcc439e7672a05481a24580b12e486f08a053d15dd8b3dc5faa191ddb1d4528fd26c7830694a00d3a03cef4947fabc937b43154b50334c4121abce1c1aadeb36219c89f9744fde79c82b66bc93a0dae5a3f8f435070a81d41d2edac5912861701e3316fbad9340e9c992688eb375e9455ca1c3163079051e50331c76b2af4e977f64983d8cafabb7b889f04e0eaff65d12d844440950b3444cf76a18760fd49b26ca76803488ca8fe827373ace9b804"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) unshare(0x400) (async) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) connect$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0xffffffff}}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000080)={r0}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000080)={r0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) socket(0x0, 0x80000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket(0x25, 0x4, 0xffffffff) (async) r5 = socket(0x25, 0x4, 0xffffffff) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x21, 0x2, 0x2) (async) socket$kcm(0x21, 0x2, 0x2) 15m29.548407283s ago: executing program 0 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400704b72127672", @ANYRES32=0xffffffffffffffff, @ANYBLOB='/\b\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x2, "39a4"}, 0x3) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bind$packet(r5, &(0x7f00000003c0)={0x11, 0xf7, 0x0, 0x1, 0x3, 0x6, @random="38bb015489e4"}, 0x14) bind$packet(r3, &(0x7f0000000140)={0x11, 0x1c, r2, 0x1, 0x9}, 0x14) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000380)={'raw\x00', 0xcd, "9612ddb214f573728d10957c514d98384a1d6490caf1cdf826f9bd5b7ceeee3e59c5a4dd2dd93ff3710056974f4a42c4bec30faab1dd2eb5dbaf32e22a8569871b4663abb6859dd33c365b0029deabd438eb7dc05be6414bb496b1d7d25f05f9ca538157b68cc913df6efccbc321546754effa2a48fc16cd2f6e6d8459cd3d736738967aff2c2a8f17d723f4df72ecf745efed37c8dd77c459c9f58ec18a6d43eca3d77b31b28e2e63a5daec9baf0c0ce200df75da0436871a2689ab3dd750495d91ee4f0602c38386968ab731"}, &(0x7f00000000c0)=0xf1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x400}], 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r6, @ANYRES32, @ANYBLOB="400000b29e29d1582b61c6002652703400"/33, @ANYRES32=r2, @ANYRES16=r4], 0x50) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x6, 0x9}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 15m29.080662549s ago: executing program 0 (id=551): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001e00010026bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000002a00020034001880180001801400040035b09c8913d4e54116b80106a24c09861800018013fd0500a86aa2ba3d5b61023bf6361a435c368c"], 0x54}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f00000001c0)=0x2) syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000d5", 0x28, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x43, "d4c466b340e29305c93a072528230718"}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x4, r7, 0x12}, 0x10) listen(r4, 0xfffffffd) r8 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000500)={0x3, 0x1, 0x2, 0x2, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x7, 0x0, 0x1, 0x2, 0x20}, 0xe) sendmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a2e6afc425f6f32a82f720a6e95b8f001b2156a001bcba8e6077d139770ff868541", 0xf6}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) 15m27.456828139s ago: executing program 1 (id=560): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) close(0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r3, &(0x7f0000001440), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x188, 0x43, 0xa0, 0x0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00', {}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) r4 = socket(0x23, 0xa, 0xfffffffa) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'wg0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000080)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c000380060001000000000008000200020000a5df148d5a0f4db500080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4805}, 0x0) 15m27.242801092s ago: executing program 0 (id=561): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="05000000000000001f110000000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2df1fa7c3205bfedbe9116eb423cdacfa7e32fe02313615b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35d9560ebe8efbc6f342a3e3173d466a0f06c54c3a4903ef31c4d4a01010000009f2f0517ccca0e1823a2971a50f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b07789d99b3d0124f39dc092440010000000000000f7049db5cb19d7962fed44e00f39ed8c15a11fa798de504e2865cd81f2b77fdd76c67700000000000000db3947c8dc7b1b4c4554ffdca8b75d82706ba9cbeeffbc83fb05000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419e0500000005b2d5a2008a600484511b6efaad206335a3ebf6b9e01446a6285f4665a7fe37da0049f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf7270f420edc858176070bfff7b09413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ecbe5cb0417d33d35faee6b2d905d30dfe64d05ac37ed015494d9d10e36e603129e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d173663570d884b0cb462e0b45853673df72dc813f7454ae62d79ac48034282f03040350f886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf90da9200df6bb669d5a57dd74df817eaa92000000000001b08b3ac52db204399eae4a2f105d4544d9a3000000000000001ff2e8afd7913007fe44950233feb5303b2617668a0e45846436ad643fb999180644298458d40002a06f4853d99af16764b8e59e04d02835f803f66307fbeef5b7e97b6d0ef2c62215c259c7796a158d662b1adfae1d24e109e52378b3f1f8ee8965dedd20abc5b7a73d9501bf3f5a2ae19d7ddf8daf3691d1879e225395c0925ec1fe4ca8fd6fc11c8db3cd0d7206531366a5f6150d9d1a6eab622821378f2827fac5c7f82dad8f4ed4367c3a4f20304432f0a154147c7af7569ff2ed248dafc1aa13afe3d17c8f2f720e1a12c4cd230f3f29a390b44a3bf66b5c8fc4a026fe6ea8edf871da290c4d9457fccdc6a8f5944e47f742cfd7b0c5f5b00fc0921c6951541f2dda75be07cb0097e25e4a30000346c782264139540c5f260495abee91019e816aabc7c9b1e3862de6c6cf6d5cdead6a42b519619ff9c2f5600d95d34d50667901373f32a1fc0b7299aadbcc96958dff4a229c8a78864ea0ae3289a04249d2f790745374fea0687a32b8c9731226a085c71f6b35f8db44f30ed778ca2cd4ebb7929ff7845e9bdfba5caf2cae0fbc83999790441bc991f5c8acb6ba3deb94f52f7a74c33ab7106054a8eb839ab2ff7acbcc8f875acc552ba92df8f649598f9eba605729db380c130e00"/1247], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0xffff9000) (async) r3 = socket(0x10, 0x2, 0x0) (async) close(0x3) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, r3) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000001c0)=0x8) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) recvmmsg(r3, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000", @ANYRES32=0x0, @ANYBLOB="040002b8f70e287de0bdf35dc46c562180"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 15m27.235782258s ago: executing program 3 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x1}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0xb, 0x1, 0x8000, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x0, 0x0, 0x7e4, 0x1, 0x8, 0x45, [0x2, 0x10000001]}}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mkdirat$cgroup(r5, &(0x7f00000004c0)='syz1\x00', 0x1ff) 15m27.140773808s ago: executing program 1 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000000000000002e0000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r5, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000280)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0x26, 0x10}, 0x20) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000000000000c00000007"], 0x31) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee) bind$can_j1939(r10, &(0x7f0000000140)={0x1d, r9, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x5}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xc29600}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0xd08, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xcdc, 0x3, 0x0, 0x1, [{0x9e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x76c, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x75c, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x1a4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "b531b3b2b29af01498bca728bd401e57bc0de08598003c1c3d91e1b42021ec5a71776e9d23c99070b3531eb19b4efd974581a88e93c792994c62ba8ae1bbc6153aed5600f13c005c00d5c5f78869d29a6a4ce38ee7c89248acb8ff7bc965f74a212c0b1405975db1508b0056838a75aefd948f7df96099d7cb2c0cac8b45a40f5edf1f81addaeb189b7fdf8f39251e77fdb4521415ecfd333c005210bc6164c3398770b8dfe1dfa4fa27"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x93, 0x1, "2d6bc7b9a3eaf93e66e44096ef02e1bf3eabddf3cb83cdd7a2a44d1ab366b0af38f25224e5bc3ca254a9bd152e24bac00ddfdedfc51b44124957e9fb14f20a0d7ee20abdb6345aa5aac38ed50ce7fe8e8245fb37f5ff896baf4721492a724252bf400d9c034ae091f60dfe1505219efa740e1e47cc11f03adde140ce8439242ba275fc09707bc8f8be83c3914a5cbe"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x200, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "e62622d412029ac6866da8e71837c1ef6dc823ba1a67bace8ec7a654e8c158bbf90e882b1ff3e943540cd7584200b3aad5269b8785549d2ae9f0874dbd5007ea7e9b86d815b811704ace3e5340d39088b0d20414b6cd1b2debe0dd421882f7d566d137ebf31ed6696cd4f91c08ca93a3e1cbf9a3fe1da65e285135776a6fa3f39798f3488af2f557fb5206b00ca12494af85d3b2b4a3ccedc9d4064507a89613cc175b38f7b42a7361fd8f7b1318db"}, @NFTA_DATA_VALUE={0xe0, 0x1, "85a459e09d959f71fa70e0981929ec6519f9d59baea9c75b9f005c2a3be12cd6bd44aee21181148ceb92dbd790acdcd838bb9fda0913578674438907b03a35deb567c7efee5ad4f8ec3da84e892d19612cb5a76d85e1432aebb6f564383b38c11035d6c6d97e65487dfbfa76de80039cf90bb5f629ed2477273d28d9644e3ed321546be841ed78cf44867b4ac8124b5a34cff2a865fef5f32bbe229339ce08e7311f4319f364da6f95abe54c00944bd22a553d4c28edb8a6ad71153e0b7f2514590b75b6451ec963843614fdefce810bf99e0bfdee76bfd711dcc3f2"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_TO_DATA={0x3a4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "4cd87d89eef5223c19ca1dbff1314c6de5e7430c43f4"}, @NFTA_DATA_VALUE={0xab, 0x1, "980d34e14877f18a99ea91a1b2e54514e7674c158a9f7f2f1afa36175fb00c8e4c0373d34da978f24929d61c2278711d585d268d5d40deff113e2af794c78a221d8623ac61fd8ca10f1f4bc21f3597d5247406ed20e4c3027b55d0b17e9d0e90fc26f694b6eae13fdd84eecef14158be7f2e2724fa0d2afbf72e7356a7be42ef0ef317f4fdb62741cf72050ac06d6a85a16e066da5519179d44de5d288a59accecfa7a2e60ce02"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "f5043921988d730d2ed28b6d5669783d2bce420c44e85b4285c42b93982135211c707b1ad075ab7c5b5c8b10c765f666ae28e7e5c5ebf4a15d2325043bb855c01dc63007078e4e22373870b4a117af73244f9a76bc9d7b77ebd00ec090da6107dbebb5bf451f97ffa4d54b8bae527f6983c804358cb7e4944c2e9c86e8713c683c74d49fb17ff929e924"}, @NFTA_DATA_VALUE={0x38, 0x1, "d07fa1d526228dbc49168a7f41efd3b4ba34dfd0f897140c57b3ddd3d9a5a483b796a3ad875943b93023a0cd39aa1bdf7e56c5ae"}, @NFTA_DATA_VALUE={0xa6, 0x1, "0e8c08b87bb8f863963994681606582ad049b28317d5201071d955f397f220ab6376785bc13b8eeac8a30a927cca2a7620db27dee32d07040d26c8b9265f0f5ff5caef5bfd5ed6ea538b9333fc0158813268ff37d326e5dbacfdc56051a179ea2a81d9e22a7e30ad50b5946383a901ce1d4a374c4058bcc0d3d62168e3e2b6d5b743c7b70b4c7a5d4cfec0ce80779f2fdb5b5e13d6b97b714e805d00a9cf6c108894"}]}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4d53785689b16c36}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xee, 0x6, 0x1, 0x0, "24ab3807284d54ae1721bccfab85654e2f81ca5f6521283bbea84144134b5e58b304183127cfb6c1e2c8cb633669156943607a97dcd68beed2c9b1e75890082ba7b5d035d8caa64504622651e2cb178ea513cac12f5c80490b2409c6aa74737c29e9983702385c8964c4df7cc3efffd3761ef385d16f2d37cc27bb292e4a790e6107eb5c76ef4a26a539523f58a3842af23560f72072f92c656e5c51b8502d4df8e9ec6e2fcb8d382a7017557df49b89ef05f09280b1eb52d15ddfec32bdcef55c4377398ed97fb39c34bc433b66140d3a4b0eb00eac14873c87af813136b16e272259780508708865f7"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc9, 0x1, "65c9b259365184a55e22b38baa3bf7014933d9f7ecb7c5055acdd39c2d90a0f8c1203aa2b2df36a426647afd6d0483b3babce1669a9029b5adab5f7407872989973190199dbebc317c3552ce8058f948cfe21da3746b26110cf5dac1ff598adbe9af9f3157f86c2a283a02c2e3166e48abad8478b7096abc05d48a6c2ca6436d1361cd3a924925d670a6e1c19a461adb3cd979d51f621dcb098804dee931d51bf830407d49dbd93812c77161882bc0f6ca1a4fd4e3d72211a97a163a9d4540cb9f72da2848"}]}]}, {0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6, 0x6, 0x1, 0x0, "74a5"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x29, 0x1, "1e08e6e2c7303ea9cefa0fb443a3b47c5eab802f5e38aa1ee20c4a410e2c17f4a10ece3665"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x32, 0x1, "69a5407982cc352f688ce88698c6a742107a88a834aca74ff3de87ac845a6081923b52869392582e0fdfff9f284f"}, @NFTA_DATA_VALUE={0x45, 0x1, "b391ac9c5fa6aa72d9099bd31eb1b15633d4bc22e12893ecda4480768684fccc9480f60c6295dbf662509621915bc1c8847317f80a555b718a456f592dae1e4e13"}]}]}, {0x1f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_USERDATA={0x99, 0x6, 0x1, 0x0, "e0f5caef2d2cdbc46c9fa1d298b9a1ebcca9ffcc54c1773d4d7f5893408fc1cabf8baf8acb3e1ca2e0e87549ff2d58b78667db1ee9145073c5ff3ff58043b62bfd9ee4a0110e7e5a1d6d827a35eb3d141f56daedc0bb2dcf8d16c0ee831b9a5d829ad17a56e85f18829fcf05a89901f0823e4fdd1d068b446dcf0ae3cecfd8c9e6a5aaa66ce640723d5d5e9ce8230fb528af2d8d54"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_EXPRESSIONS={0x100, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x20}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_NUM={0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xdb0}}, 0x4050) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="670000008c400000760000000000000027000000000000009500000000000000dbfd0b9b7cea8f79e657849ff83588bc3ea414a717977e57"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r9, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r13, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60) close(0x4) 15m26.989155597s ago: executing program 0 (id=564): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000180)={0x8000, 0x1, 0x80, 0x3, r12}, &(0x7f0000000380)=0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002800)={0x12dc, 0x30, 0x8, 0x70bd28, 0x25dfdbfe, {0x10}, [@generic="2b2501436c2b6313a94d438a35", @generic="6646962bb72f4570c81aa384efd53b45fe73e235df45f1a1e70806fd01cea467afd3967a369a9f9cde691ce6a5721e329f5a567e2c6ce239eef4336aa1695c29bd6ec855e0d7e8ee70df7b63579c3f4f0d", @typed={0xc, 0x104, 0x0, 0x0, @u64=0x9}, @nested={0x198, 0x6c, 0x0, 0x1, [@generic="95ad7ff645138031fc3940f893f9971f98f5027e3a5f05eeea2e97716848c4bda126b53d0360018778ae41b4d21f6837d91ee1beb884a5da58146176ada1964e38784ce07fb9106cf22f2ed052ebb93e070e6385e4ec123e8e317394cfcead65444153db38054524935bf8b7db8cd9525c86573e397ecc8f3a271c42cac0578075c3ef429feb1ec697bc768ebfc98ee79bc4e3721769c334134ca85b2d5283cd785af7054be730f57e2cf22ddc219d2363b8b55e830062a8c4b76854c5fd95c74caad8854ef886bd75ea39", @generic="5807a219e5af77fc34138a3a4bfea0152b9929a2633d41e4b1218f76a51fc0c6140544a069a5292117956e80093ccbfa29fbe9ec28ee518f4c55cd421a4cbb963630a490ca8b5e1e5dcb0f48713b9a491a76e8f5a0c23568bd5a2be567c446ae4406e30d2badfd3097fedf3986eee977acbb49ff254f4d13d573164a90a1aa67632e1adc23e2b724e21512c63c44d4f892730a9998779cd3177299900e9d96d3ddf0e8e220d6581f3995ff42c44f01da11539099876968b3fbb84a45a6f5d261ba2ce2a8080c5e6bfe"]}, @nested={0x10c2, 0xc3, 0x0, 0x1, [@generic="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", @generic="f304409d658e317c6e7523aac165ed01a6a187d8a91e2463b2b6d53557c06d81dc5192ed520b3c67a039c111b605895aa2753b499a8807fbaac9105f0faf5fc54aab123c5a83e084d369a24aeb11fdd0ff77ff5e45852fc7ef3de9cae917958d033eb3613677fdb116cdb82eb110087782d787f5e38e91f1f00444db27094a5df54a0fc6852fab540361726055efb61f4a2c64ea6294024c71eb81b795e8bdf382b7601e5e8ed0cb17935a5c22f1d288f9f7e821b7652e1cdc8396bb0edd"]}]}, 0x12dc}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r13) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r14 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 15m26.830487638s ago: executing program 3 (id=565): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x20004810) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r2, &(0x7f00000003c0)='(', 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x9}, &(0x7f0000000380)=0x8) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x6d, 0xfe}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x68b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c990) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x60002, 0x0) 15m26.7884353s ago: executing program 1 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='wlan1\x00', 0x44564fd7, 0x1, 0xe}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000000000", @ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x4048884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0x3, 0xffff}, {0x4, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4c, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x80000001}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7fff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x7c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socketpair(0x10, 0x4, 0xfffffff2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', r4, 0x29, 0x6, 0xf9, 0x3, 0x8, @mcast2, @remote, 0x8, 0x1, 0xf4c6, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r1, &(0x7f0000000040), 0x10) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='wlan1\x00', 0x44564fd7, 0x1, 0xe}) (async) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000000000", @ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) (async) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x4048884) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0x3, 0xffff}, {0x4, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4c, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x80000001}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7fff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x7c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) socketpair(0x10, 0x4, 0xfffffff2, &(0x7f0000000280)) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', r4, 0x29, 0x6, 0xf9, 0x3, 0x8, @mcast2, @remote, 0x8, 0x1, 0xf4c6, 0x2}}) (async) 15m26.704619136s ago: executing program 0 (id=567): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0xdf151b5f3b7133e1, &(0x7f0000000100)=0x7, 0x4) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x400807c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r9, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 15m26.57445133s ago: executing program 1 (id=568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getuid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, r2}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x1, 0x6, 0xffff, 0x8251c, 0x100000001, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4000000000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x6}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x3, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket(0x28, 0x80801, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600894f0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x11e, 0xd2, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r9], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x1c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000500)={@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000}, {&(0x7f0000000340)=""/90, 0x5a}, &(0x7f0000000040)}, 0xa0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 15m26.566969138s ago: executing program 3 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x7a1a, 0xb, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x3f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r4, 0x0, 0xa0028000}, 0x86) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@newqdisc={0xc84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc58, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x400, 0x7, 0x8}, {0xf8, 0x1, 0x7ff, 0x0, 0x3}, 0x6045, 0xbc84, 0x11c0}}, @TCA_TBF_PTAB={0x404, 0x3, [0x1ff, 0x8001, 0x7, 0x1, 0x6, 0x8, 0x0, 0x3, 0x7, 0x0, 0x4, 0x6, 0x5, 0x5, 0x3, 0x4, 0x40, 0x7, 0x3, 0x3, 0xfffffffe, 0x3, 0x8, 0x7fffffff, 0x64f9, 0x7fffffff, 0x4e, 0x4, 0x9, 0xe87, 0xe71, 0x9, 0x3, 0x9, 0xfb, 0x2, 0x10000, 0xa, 0x8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x4, 0x8, 0x1, 0x8, 0xfffffaeb, 0x4, 0x74780, 0x2, 0x7f, 0x3, 0xff, 0x946, 0x3, 0x7, 0x2, 0x0, 0x10000, 0x1, 0x9, 0x2, 0x2, 0xfffff800, 0x7f, 0x7, 0x81, 0x2ee, 0x9, 0xfff, 0x9, 0x4, 0x3, 0x73, 0x7, 0x9, 0x644d, 0x5, 0x1, 0x6, 0x7, 0x8, 0x2, 0x28, 0xffffffff, 0x8, 0x5, 0x10001, 0x5, 0x1, 0x5, 0x6, 0x8, 0x10001, 0x9, 0x8000, 0x3, 0x5, 0x0, 0xfff, 0x0, 0x0, 0x9, 0x3, 0x4, 0x4, 0xfffff000, 0x8, 0x6, 0x6, 0x7, 0xfffffffa, 0x2ff, 0x80000001, 0x3, 0x3, 0x5843, 0x0, 0x4, 0x7fffffff, 0xf5c, 0x1, 0x6, 0x9, 0x0, 0x0, 0x7, 0x8, 0x5, 0x2, 0x37e5, 0x5, 0x7ff, 0x2, 0x1, 0x7, 0x2, 0x6, 0x7, 0x200, 0xffff, 0x3, 0x34, 0xf41, 0x7, 0x5, 0x8, 0x9bf4, 0xfff, 0x1, 0x2, 0x8, 0x47, 0x7, 0x1ff, 0x10, 0x8001, 0x5, 0x3, 0x80000000, 0xc, 0x4, 0x8, 0xf73, 0x1, 0x100, 0xd40c, 0x1, 0x7, 0x8, 0x8, 0xd, 0x1, 0x6, 0x7f, 0x6, 0x10001, 0xfff, 0x7, 0xd498, 0x5, 0x8, 0x4cad6186, 0x9, 0x5, 0x5, 0x9, 0xa42, 0x5, 0x28, 0xf405, 0x2ff, 0x6, 0x8, 0x9, 0x800, 0x7, 0x6, 0x7fff, 0x800, 0x80, 0xf1d, 0x1, 0x800, 0x7, 0x0, 0x80000000, 0x5, 0x1, 0x1, 0x7fffffff, 0x800, 0x5f0, 0x5, 0x6, 0xb53b, 0x5589, 0x3, 0x1, 0x1, 0x4, 0x0, 0x4, 0x5, 0x3, 0x7, 0x3, 0x9, 0xb3, 0x2, 0x5, 0x9a, 0xb, 0x3, 0x1, 0x4, 0x7fff, 0x2, 0x1, 0x3, 0x93d, 0x7, 0x5, 0x8001, 0x400, 0x5, 0x8000, 0xfffffffd, 0x4, 0x5, 0x90, 0x7, 0x7, 0xce8]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x7fff, 0xb, 0x3, 0x101, 0xfffffff7, 0x6, 0x2, 0xa, 0x4, 0x10000, 0x8000, 0x5, 0xd9, 0x4a45, 0x80, 0x2, 0xe59, 0xffff, 0xb69, 0x10000, 0x0, 0x8, 0xda11, 0x55, 0x7, 0xca, 0x3, 0xfff00000, 0x6, 0xe, 0x0, 0x0, 0xffff, 0x9, 0x800, 0x9, 0xb, 0x1, 0x9, 0x6, 0x9, 0x4, 0xfffff494, 0x3, 0x5, 0x8, 0x6, 0x10001, 0x2, 0x8, 0x5, 0xd7, 0x800, 0x5b4d, 0x7, 0x5, 0x5, 0x40, 0x6, 0x0, 0x2, 0x9, 0xfffffffe, 0xd, 0xc, 0x9, 0x9, 0x3, 0xd65, 0x40, 0x8, 0xf, 0x1f, 0x7, 0x8, 0xffffff72, 0x9, 0x80000000, 0x30000, 0x9, 0x2, 0x2, 0x7e6c6242, 0x1f8, 0x8, 0x10000, 0x4, 0x9, 0x5, 0x7ff, 0x43, 0x7f, 0xa14, 0x2, 0x200, 0x4, 0x9, 0x200, 0x40, 0xeb, 0x0, 0x5, 0x7, 0x10000, 0x6, 0x7, 0x8, 0x6b0, 0x800, 0x2298, 0xfffffffd, 0x4, 0xdcf, 0x8, 0x2, 0x0, 0x1000, 0x40, 0x8cfa, 0x51793207, 0x5, 0x5a, 0x6, 0x7ea4, 0x4, 0x0, 0x3, 0x12000, 0x4992, 0xea7, 0x9, 0x5, 0xd, 0x46, 0x2, 0x5, 0x3, 0xffff2150, 0x9, 0x65, 0x800, 0x4, 0x3, 0x8, 0x9, 0x5, 0x1, 0x8ba, 0x6, 0x8, 0xe, 0x2, 0xbe0, 0xff, 0x223, 0x101, 0x7f, 0x4c95eb97, 0xe, 0x0, 0x341, 0x7, 0x1, 0x5, 0x0, 0xcea1, 0x1, 0x9, 0x7, 0xffffffff, 0x200, 0xff, 0x3, 0x6, 0x7fffffff, 0x1, 0x0, 0x4, 0x80000000, 0xc6c7, 0x7fffffff, 0xa9, 0x2, 0xef9, 0x3, 0x1000, 0x4c5, 0x0, 0x6, 0x1, 0x401, 0x7, 0x1ff, 0x170b5e71, 0x2, 0x40, 0x8000, 0x200, 0x4, 0x400, 0x47, 0x3, 0x5, 0x7, 0x0, 0x7, 0x9, 0x6, 0x400, 0x4, 0xb, 0x0, 0x9, 0x5, 0x40, 0x1, 0x2, 0x4, 0x1, 0x100, 0x4f3000, 0xa, 0xd5da996, 0x1, 0xd, 0x5, 0x40, 0x2, 0x9, 0x8, 0x2, 0x743, 0x1, 0x7fff, 0x3, 0xfffffffc, 0x5, 0xa, 0x6, 0x8, 0x7fffffff, 0x4, 0x40, 0x1, 0x1, 0x5, 0xc9ac, 0x0, 0x1fe0000, 0x1, 0x3, 0x7, 0x95f, 0x40]}, @TCA_TBF_PBURST={0x8, 0x7, 0x109e}, @TCA_TBF_RATE64={0xc, 0x4, 0xc9bce17fae9afdc2}, @TCA_TBF_PRATE64={0xc, 0x5, 0x43c1383efcd1c8d}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x10000, 0x4, 0x101, 0x1, 0x6, 0x5, 0x7, 0x4, 0x6, 0x164, 0xfffff23d, 0x5, 0x2, 0x3, 0x5, 0xd, 0x93, 0x80, 0x5, 0x7, 0x3000, 0x3, 0x4, 0x9, 0xe, 0x8, 0x2c1a, 0x2, 0x5, 0x4, 0x82, 0x7ff, 0x3, 0x8, 0x0, 0x6, 0x9, 0x7, 0x5f6, 0x3, 0x9, 0x9, 0x8, 0x5, 0x6, 0x3, 0x6, 0xb, 0x7, 0x1, 0xc9, 0x2, 0x37915081, 0xff, 0xffff, 0x1, 0x1, 0x7c1, 0xffffffff, 0x800, 0x2e3, 0xfc000000, 0x3, 0x2, 0x7ff, 0x3d, 0xcb7, 0x2, 0x7, 0x3, 0x4, 0x1, 0x4, 0x1, 0x0, 0x4, 0x1, 0x1f, 0x7, 0x3, 0x2f, 0x2, 0x6126c9d1, 0x4, 0x7, 0xb8b7, 0x5, 0x63, 0x0, 0x7fffffff, 0x1c, 0x7, 0xbb, 0x0, 0x6, 0xb, 0xfffffff7, 0x5, 0x8, 0xff, 0x200, 0x1, 0x4, 0xe38b, 0x5, 0x0, 0x3, 0x3, 0x1, 0x0, 0x101, 0x8, 0x3, 0x3, 0x7, 0xd, 0x7, 0x6, 0x2, 0x5, 0x40, 0x3, 0x0, 0x9, 0x3, 0x5, 0x6, 0x5, 0x7, 0x7, 0x4, 0x9, 0xff, 0x6, 0x7, 0x2, 0x200, 0x6, 0x4, 0x4, 0x2, 0xdd06, 0x0, 0x40, 0x2, 0x20, 0x7, 0x674, 0x8, 0x24, 0x6, 0x8000, 0x95, 0xa1e, 0xc7df, 0x40, 0x9, 0x8, 0x7, 0x4, 0x0, 0x2b, 0xfffffffb, 0x200, 0x0, 0x4b, 0x2, 0x3, 0x400, 0xfc, 0x9, 0x5, 0x4, 0x8a, 0x4, 0x80000000, 0x100, 0x1000, 0x6, 0x1, 0x1, 0x4, 0x200, 0x3ff, 0x7, 0x0, 0x10, 0x6, 0x5, 0x5, 0x800, 0x400, 0x9, 0x0, 0x5, 0x8, 0x7, 0xffffffb1, 0x2, 0x9, 0x1, 0xff, 0x4, 0x5, 0x7, 0x101, 0x1, 0x1, 0x0, 0x7, 0x9, 0x10000, 0x1, 0x9, 0x1000, 0x5, 0x8, 0x8, 0xd, 0x401, 0x1, 0x0, 0x8, 0x2, 0x950, 0x9, 0x200, 0xfffffffe, 0x5, 0x6, 0x4, 0x7, 0x2, 0x929, 0xd, 0xa25, 0x3, 0xb, 0x9, 0xfffffff2, 0x6, 0x9, 0x5, 0x200, 0xfffffffc, 0x6, 0x2, 0x0, 0x8, 0x3, 0x6740, 0x4, 0x2, 0x9, 0xe942]}]}}]}, 0xc84}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = socket$inet(0x2, 0x803, 0x1) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)='\b', 0x1}, {0x0}], 0x2}, 0x8c0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r12, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c0}, 0x8000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15m26.14218603s ago: executing program 3 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) pipe(&(0x7f0000000500)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r0, 0x5, 0x4, 0x3}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x401, 0x21, @loopback, @mcast1, 0x1, 0x80, 0x6, 0x8}}) getsockname$packet(r1, &(0x7f00000042c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004300)=0x14) sendmmsg$inet6(r2, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000680)=[@dstopts={{0xa8, 0x29, 0x37, {0x0, 0x11, '\x00', [@ra={0x5, 0x2, 0x800}, @jumbo, @jumbo={0xc2, 0x4, 0x331}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x5, 0x57, "2f3fae5d359a5bed97f6d1a42d36148f1597e2f714c848cee816be5b6498273cf0d3e1705eaff4d54071fa5906ccc0082bac457e4df9198467a89b2f233b39991b6d9dc217fbfd4cfc477caf724acd47eed6f37585f8c3"}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xe000}, @hao={0xc9, 0x10, @mcast2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x0, 0x10, 0x0, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private1, @remote]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x87, 0xa, '\x00', [@generic={0xf5, 0x51, "cd2bffffe0b62fc629ac45f46dd662d6706c1af810df59205ae80205eecdfc4de2e1ae9a79fb628f6382eccbb3f421385e6808aa2d99b684cafd177ca5f96b5973153d07cd24eb10b1cb6ba5bb28f19374"}, @enc_lim={0x4, 0x1, 0x2}]}}}], 0x1d8}}, {{&(0x7f00000004c0)={0xa, 0x4e24, 0x2, @empty, 0x8b3}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000540)="4a68064668753ba189c62fed2211dca389ee28c85c9aa6d51a179b1658a6da00066f56bff6b290152b42a0bf20bbd551f7d7880f15b172c35956ca31cf99512e7e96cb58099f9c0b73", 0x49}, {&(0x7f00000005c0)="37c9", 0x2}], 0x2, &(0x7f0000000880)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @mcast1}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x10, 0x0, [@mcast1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffa}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x100}}, @hopopts={{0x30, 0x29, 0x36, {0x88, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0xe}]}}}, @tclass={{0x14, 0x29, 0x43, 0x800}}, @dstopts={{0x1068, 0x29, 0x37, {0x2c, 0x209, '\x00', [@pad1, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x8}, @generic={0x8, 0x1000, "a7a3ae0c0915b4e0db69b1f79adfbdfddd1001d78b53dc347081dbe125516fdb717b1a505f29a13f16158989454b82a7a0865f816c458a482797d257e65a8ea1cd7e1b99ab761825c6f74fa30fb473d9095293b38be6c335ba0d2dd889513518dd230996651fb1a2d36613e392081824ce4d5d2cb36b3888d87b82fde719bf01bb6d4df0eacffd601e7f0a9bffd9bb954d2d8210a00ad1bed2ef48266d668934f18304dfa7f6fc7aee66dee2e37d04185929b0374959e87a418eb46846af52fa93050c46a448bb2d9024f98942da6e508d4c8dfe57be3a3c289594e3f71bfa4a3b4cf658f76025d94d20be3a466074c9c71f0f3487392593f697798c75736fea62072baec8a28d3dea9e707e1d1c3f95327e919a44d471e8b404a717129156ed68e480b4118975b9d9c24e06e12532260a38a4c795549677a2ed85f5a33d5b6200c1e0488472335745757ab40680d389045de29d86762a0d46ff55b7acbae20c8f8d1d91cb088cbca014814215901f5904eed4d5010adad99466dabb3804940f6fb9d8aba2344b017219a38127f1bf022c813753ab5fa11f6e4f9566080d2205fd5373eb86dcab5a8402dc6b384a0a13231a4c60794ecb16928a7c3788be7e0a88b0e8a6e9da6e14bde24dd4231c0049d11b1422f7160b15845b55c9239409ede758a5979ef4caad71e197cbadda585ae52bef319b3cebfcc842c179b054fea8357c00bf857eb2248fd9fca04747656ac3fc988385b25a297832dfc23df855163c3254d8073fb62fb9f53cb851826462058ae707d4855c64997947f6c3d17a0a5e077add616c4124d459e27fe1a60fb667ad22fcccedc5ba4833799cd55d377b2cb369ebb33b560576f8f7f09769b7bf1d9165a8e4a73cfd3e7bf6a694856c91d51f3e33fea24af0ef1df01f07baab3595cf3a45f02c7d739945718adbb5928d81481be2cac4846817bdf3a41b7be62c589106fed249116668b1da65bd6d62e7362cb0b17f2bf19e7ca56d0f3fa1e34d58e6dc9c122163468f3fdf35eee31dbbb71f0cfff1f47629948ef755a2de29561a6a6946a16fb29d9cba080532360f4adee90a962798b7da63a624a4f6b56d57d1e5b349186ef8f3b24442434f9942f86fd0423ccb41e0eb4d71bb229cab48e263c930ac97417cdfc44dd833d34bcd9faffce3df68f95fa98458b38d56379b42296e3c011786ff38bc4de557f2519172bd935ceb9f592bb058b8b296b914f26af9be4eadbf24230a0a1e0f0982ed571fa49e457732596015bf8d82d7cbc7ac77c97ae6d488951aedde7513945d621cacf67617bfb72483c2e813f9770baf3e97ea63e6a158f4d1cb676c759f5efd8876ba7522d1075e06b27ae9f4eff6dcc667d50a02b2bc590586055761a613d4b0520630917ed05e23d66033c00626aee64a3cef73b75e9314e57929f4ff62c5e327aa8d55ef224dc9369f7925404f3c4a32642b4984e5f3ae4964dfdead6375bff607ba8c9d248682b5d6ff19665f4fe3141384f23952d7566546a33bdfb6a6982f3b0861cfa062efeec15c18860d2ca6b2cb9e2d7f1c54f627eb46d164e254e0d0be292dc27fc9ab8e12b8ed2c9f57bb546e5516e19ef982a3e2377bef8e0e2b2e9c4e9756ed7654ddff46d6608ce6505daa8ca51afd8fbdfa8e068345a946d10a7f44574740cab9ee46c0f4f53b6d19845a1973e4ac7cdecbf661b0cfd5422a6b4a544e9addaffa47c35e5d0c0915bda6081f1e0679435b442e708f8975626e9c86143e0155074af4a3f5776860bf094621417582ab4dd1bc1bd1bd9cbbb83c679357d13d7ce3fb2ba36cce0f7b49f23cb8b08c273833b331e879dee2adb224805f14dcc9b0d7922beed2ef1e4e46c217dce4569fbf87cd12f5b534074a7d0a9a332083e32ec901ebf33df9debde0fdb399a44f023e52ff8ca8ca614bbc1c76859bd5355517d32e59ce10ebc8194facb1b67273463078bc5dd355fb3dc6e1502b24b192e2237fe4d0159e5a189bd7f18ff8cdfa2f976a56182ad87aaaac5a85ff598e6b0e135c3842524294da7d4588fa78bb456ece3f03763c2c18e647ccdfd717b705123dd82c3784a8f869e4c7ac242999020ebf01b90466d368dffa603561444e965160d9591bd2b0485b5021da38166ce8c6966ff52869b789d4cb7d6c00bd39002ca72f10b9d01549c84bfa5026ca79f92a324dae6298180b2c0d04c0acb1db8293863ee62e1bdd69d5bf7419fa8b61c79922b55d9883507802f2ff98c8486e6327fde25d2d45b6bc5ab630c74789a6d8e27742af7a15e83d5ba3a108a740ef93714f08899f05cd0ab187064fdab0e55a1a49c61c9239acbd4e3dd846b46c430f97cdb32e925decbb5a8ca9f564af16ebe5b979e42b74507d10be34062c98599d9a9187591874435e88d7520c519e870d88630a84248823a6762f5d164624a57dc5377ace152e2a58b73e02214e2d2e99a40cc07b0e6fff9887780ff54973c1efef8513deb94b3d34f4c64abde0edea6894e01dd3e82156f6f2a1222b597c6eb42890505e3be95dadc442e402c719311dada885fa061b81e51e0b76669a7b1914d6d92c9572c1f5251442caabc8ccd0e1fbd6e183149eab67de382e11a00ec9621ca06daa018dfab8d9c2fc46ba0abdf10f74cf9f79ff03527713f2975b9e5be454c5726d52e7e3f8b9a596ddc058cd16cca5033a7218e4b0b863ac87aeef8cae0af2dcf20b6428cb0b94fff02299c2e3ce1e9ac5244892f405d79744298432fa1aaeba65d8696d2e3bf1bbe7a0d0e75cdbed911401e2d68e1ba54dd7a827d3dd255c9164533473ebc0c6dc0fccb897ecae3df4d7a16a2a671e998e2d4500bf10bc23f09191adc917345e699eee176df0875adc2c0892c5e7e04e4c4a176e59f97bf11860262ab53074372a1da414c2dc836893c69a670144f49121bb197e1e435b85d5bd7faf14ebc9e6b89b90337d28d3d79331fb4529d51f75782bef16622142d530fc55c4e606b8001266270cf790f98c959614b917cf83572efc03f30ae9983e8488708f48cc9e72631962d5988516a274d5056bf21005be65428f9cda609c0b8b31555081ba702d7da61210b726d1c04f74755bdd2bbe0a2dc83890fceae0b17cc80bda04edaa369fdecdd05d14715d5e357ac1a6c8d2ddf963288f6458ace377301acfed871622f428888e81ee26ec79249d00f1c128990c907b10c82eb9616c86358e2684f4c78ff3dd5ceba4ca36081b05e12adad66865963648b408820eb3f4a04cf14ebe325b9de89e7be25c86753de84ad12c5fd24d70414a928714fd36a9f5c5c0b983f7b270e94718c24f1b01e42c7f479b63d9dc020e51226dade6b64d7d38791d9b6a335819da7ef7015fa8181eacbbd9a8da2b6be295c1202149ead17f7266dc116859f5153411b8921e398ba4f17467d714d9fe947be96f5f4238e796fb910753cf692d0e5f7ed5377e8e9fd000b760f29e3f1db5dc72d3c73f6a50027014b6edba51e7d2f6810b5fb051f6c70f2d7b019dcdfb7d29b4b1dae4cbb01c5eb9606e68bbbabbf5a630fdaf1dea49fe80a6eac2a9a317143c8be002de8489c6cbfd5628892f2a3ef3974d532790cfc7832b5c8b0bb8770f560653849be185721066cb925005671ea490f61323b5d777db0cf30c0a04c4bc7ba13eeeeac9725c3591f33ce11a29d83641c509d5d8141f2cdf521125f870a858d4e640ac9291f5977cfacd77ca197b41aac88a12bfe04320596ce8b44ac673d3fae81ac0cf42d4dc2f10d2f7d080a4724588b510853981b65b6e3324737434786c3e68dbb83ab8dc3d4d8fb0693212a3bc47f374342cbfd1b07dcbfb59447180c0aa677be464b7066f600404662aad6c6c605dd57e0a1a40970d1cb755dbdddf194ae439c18510dbcbee65b62fd016afcb544fb9d11c0f6ebe1ed3ab4b569555433b88e1723bcbb8f0d46869bcb3ce3b0e4c307653e067f2890883f1c2bf2729d449c91c336bd3b52d62fc69d989d424c863b1ba15a22b3be344c5f57894cb7650736d443d84c5fef12fe834929245aaa18db71388c9641e5e2a00cc5d2af207efa231900a673aa321a7e10402545c4d220bee5cb174bccf6de55f63ae12ce84c3b87b7fb30bd191df8cc8859de8425630815e57a81914003c015e43381a122c8742bf5e054bfa3a395220a40dbb8cf7c7873f4c0738825440162991beba557f51a3fd40f16da6dd6d1ab0231533c3688220538099901f90ae4a8c70e7fcebcd8eb54b2e55f170f651006711cc89ec967238836fddb3f977b2e0c7634babb9850f0e8c364fccad16c28e8701baaad56b8dc2ca27b172f32bab8e13851f9826a2024db68178c4f51ddf44596ac4b8413388849abfe342984fb6cb2ff7e7033e86ffac2e62d6735b8ba94cff80b06d3bfb730091588e3c056be9b4d98b4ca7cfd18ba46b3c9d4e95617487b42ff69c1e895443cac25fd2ea6600acb39a7c12ab62a1a7a6d0e12485229bff3564caccb65f7ad7db31562ae7de84eb97cc495964e3941e6b27c9054fa5f478e3786d115054f1901897732478d98c4b771815b61361dd0834d1ddfdcfff4e0d8ef4ab3afcff47dcb6bc21348d004955cffaea8807be509ce023c36e6d4fa081425cf08b6e315543c6d168d6a7cb658524da86010258d4da133caa958f36c5429030965d4f75cc0282c0630e9e5e948d89e0452b2b9516f53dae8b6879628caf937aafcc0592035f22358b92048d2bfbfbae45a1985a7d6cbd5b45f31e633d1b815fc7fdb209da4e65ff7fe5e21aaa7cf74bd746c37e37fce2039359f5f53f511e953f1be2de1dbb1bbf1d04411f6af77877ee1dc5f2d21e5ffe2d328718c8fc168c23513674c65362bc720c5f686761f4adf9954307d2e81c19b61b29d80d6d1f2a5f8f0406714c31f3f12e23add0f44540a35f1840f7232022ffadc899806d507a6d7203366ccc64e64699cd3de4ad703d067abec0b8c35b69c8f2c56d8d11da6ce32cdf373faef4893cd76fa950fec47a7703b8f57314a1cb1c6211e11e8529319512f8cae013271b742de9d04defd44eebebdda019ca43742d09eb0b7844b19f140894aeb56975d73fabf828ad18207a769b9993484e8e7826fc89568d930dc83832380b9300db9b0e3e6ad043057fcc0b8083c1176684b5cc2cfca4a9317db2f6acb15040012393768685a08453d73d2e65bde52bd43d948312222163c3623c2f2f504d776dde4340c5813ee3f8f4fd9061d73620f4b63830ce9808b467e1a51a3491b6086440ab55bb87138de6f86cd12f618faadd89cf42868f983485233cddc2e96d84c1e67ff5e914c8453407cd8c18d4a5de129c450acbbc683c19113b0abdd9399894f4b294afd04a5824de24c547107355aad6be8e8b7d63223477318cc857a9858bac15f0943c9d2d969e3fe7a974d5d214e50418442c38dddbe37f89e8eb257ccf8764a8bb0a3560483f9b271bc6e54a958c3845acfa99a9ef751006e4cceed70f1ff64ecec8efdbb16d94c93a8a0ce6a63c86319e753013d336152a5af650c49927e7c46a8a90323312c3de2141c7457eb0affcf0e9115017cd870a34f8c1444e0ac827889f4d1d5f72a8dec88aceb935c923365e29bf596458bbfb436ab28486f3351e12e94385acb2b9ebdeb3c9b3eb68d4054ab0c765ab7c3887b40d7f4bc59da6d383a6f98fadfc125aa2b5bc8be4c013b17d01ddc55bc02b1ec38c9af840ce0e52693323ca31c60bd04dc5ac21b5adaacebe88deb7784e3db3c94d82c0879ec7ecb2394d5867751b91a5"}, @generic={0x9, 0x2d, "bd0b7d110cb1ebdfe0a236fb2b9ee58110e54e19eafa48a9a3e8d83950566e2897473ab422c8075206943f1ec9"}, @enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0x62}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0x60, 0x29, 0x36, {0x3c, 0x8, '\x00', [@ra={0x5, 0x2, 0x400}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7, 0x4, [0x6, 0x8, 0x6, 0x8000000000000000, 0x77392e3f, 0x0]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x200}}, @rthdrdstopts={{0x108, 0x29, 0x37, {0x6, 0x1d, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @generic={0xf, 0xde, "5b8aea351a3ce9ab9e459a3953885a20b9f5a509bdf2e92b42aaf02c296a2700d933bbe4d5b959518cf6f9ad8fae79feddeb72e88aacd7e13f6204ce106260026655d116c5b0e5206d1559f75f4956e14e7c4a6ed37ba352dd7a128d10b325a494d78173f1134b9d248591bef33e7c05f65a4ebe2af68923a7d3814237dd8aceff27b981bc255e7a69d97aa8b06afead548d18797f0fa0f6b46b6860ccaf8ecbd096fddd7d1344cbac1b98d77f0512d9f4e0534c9e0267ab0bec2c77dfa26cb610fbe5d54c1480fa4293581b8cbef39b9d568ec286a0819828ef929f502f"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x12b8}}, {{&(0x7f0000001b40)={0xa, 0x4e21, 0xb, @local, 0x6}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000001b80)="33cfc91b40f1ff2aedabeac587c63dcaa66474727b867bcf459c3a4ce8c3f3e09606df875d5181a95943c268309ac7f3cd78aa61f28d5e5f02f215492e755594f6a87e3382e49711c62ef7953d65c2c0f22bb7b97837654c171d36c241e86cd57a94a5bdfcf02a65f475d91bcf8efdf492369d71d0c6d72196b447cfb23e6961b12089fec24dce6f2a7e18f0f0015a716d7fa2f8e488588d880570fa0b631244b75c3b304e32ea5f8edb70e0f42a319bbdba35067b5a5084fe54095a8e", 0xbd}, {&(0x7f0000001c40)="8cfc3a0e7b30b0be76f1389ab7ec61f4b48f155019f2c22438932c10013648019499ec5aab870350f3a12631f18c9557033095182b6b2475ae7415c0c25266b3ebd042c785bcd01ce599f12a631def63b843ead02995e2af9ff180ce98ae92b09a9d952fc86ce270e8ddc7aade2ce697a8d816b24e8e1632878624ed90db74dec7eb474032caef008f6fb7ee7b91b2d49978c2876f4246b2c959a3faf5e5ca5feee6f68e385793f0364c3873abed86b16fb3e82e181da91f0afe33cb05fbd1a8e5bf5f0799d1a00add7a89012903cb605a5fb03877c12bb9e21309c4c7d241bc753c900558e6eeae5f9eca21df2bd0289eafbb8487308066a9fcaeec844608abae4acbe82b1fef280572451ca62c447b484aef788a81270b0c341b2f24da943575f7c6f3dae8f2eaddba4f526e7ba0227c3d4a575858dc90686d2035d1e84101bf63fd44a6f63cba738bf129058eff814bc25047d95fb1b06f3237f3910f28db9030238c3cdfa5de95743d944e92f02608b52a5323630938feab63672b7754d6294828457c648da4d2426573ac81c1da0080af525c3341c6d2d2b0b2ddd74fe5a4629402786f6c345db31f2ac032b071c363597215b326d88d719820379fcd1db74e3b467f99c60263cc676366cdef9f218f215295f831a3fdf2c4b8777f98c208d893331c0fd2f1e8d9a9472a8a9234e82df6083cbe3305cb96610c0a4b014bbd436db874b19575dc82177d7a823b9ae14bbc9baf034185dc4d41f85b0f8df69cd249b1c659f0528a25240c317e4c01b517efab7b33757af04eb45ab681c0577eb76d998943b76a6bd84d15600283febbf46a789ff77a3b0f7ce67f48fb458b7d85d1cb77891e27a2a7cdefe0f203dd6aa6813c7eff04de71c2843ecb979384bff510d5db26b3fdd924dc54f3c1cf5706be6053b1a1da3c18e80228c61235acaa4347350e2c50265fc3fc13d0cc3a08288e33bd985b1e0c25de82b7d853e24a0f589221def7240eb5541c774c1d3776f5cd018ad596cc4e8988b9f73edbabb68a69cf531c85f8c012b4e03f492954313aca60027563c19c4b8bd39e2cf4e9811bdfbb2e5fcfaf6a5204090dfa90fd70ffa57185d61ed19f73104e1c784c2b20594153566d4f0d1e00664e6bfc2670e7554c0ac173f113d26594eaecde723bc13e451c48926ae2d419ba70948687aa5e073a3cf4c90aaa606619c4d25c68ae324987dd95988f1f80ad55998cab8d768dd66dfe5b4c9f952b5bbdd6f1ca742778d431995c2470eae298c015f3ba6cba0fc2094d682db7b61c6afa59ad3c34c28ebb0403074aed5b4dc8091107b6c593806ffa8a2195bfddbf5897b78d22f8a8cb394c1b6f9d3d39b4806373d049c97aebff39acb584e83022b919bb48efa1f460be1d137eee623b9f91eefb657900b5ac373abc2c875d4bca93c267be16990ef894cfcdd871e2981e4f6ab694d1dc66ade57452d1e286a83cdbea2440acc7aeb4bf3becf11e9d20346bdb74b5e967eb4db07a93e94e9ef20a10c41ec5ea94e978c0e87f27d046e3fbac0fdb147671a723ee344e5906c570ae6a7ac77adf87d267a174f3b0a55e7f87e37e973f549703907d06228c99d914fbcdef4df49c3984135f201fc4b43df11f5080c9076f1676dc90c3dc158f9aebda314d1acb757ac438c62fa2d7abe42122f4b80fbab0c0337e83257ca3fec4296bc9ae895a02fb51110640c602abb3e77f672686978025d61371ba88996fa11caa7605a13e68dd4e39e10f0e87dc38e50946966eaf09bef9fb1f1f71c41fc99f53879317c178aeac60ef7f70ca59d784ab8e8fd6378a51a13787c78c653390eebdfcd2228fe8b4277606779530c906955e90f862715ee43ea382c0c5c188ebebaabc25d2b290951e75b680ceb06e475f05bff10368ee3ec6244320ebf58b91e22e8780ae070960f3c303aa63ae28b630c2b27387c10bdcf8d20c13f9c9ce77fdf397329b108b80b85cd2d15c90dba6f715621c5b4a1b0c20da606ae192b6c70f57b33b6da87aabd7b422ad0b6f7f726e0494a1e1a1521fd9cb7302246be15644883cb98a6b225ff27d0560bb15321d45d6c0623b35e77989277f049b12a140de433d3e17500ba89daa440a16ad0a5984b46b8bf85cab22ec10432e783c3e93545004a044abe4cb4db4ff2326bbb27a16675d989bcd860c2e1b5b79a0058a3797dd43451df830331cdb83a23729a36d446f2170a26c58629f27b0b22d1a19f9294e784c4052125244fcc1963eb423c38a7c99b88b4cb2454155b072ac550dba12f2c727af1a01fd375af311f95cd823b032993d157fe4700dd837557b4534d1f20badd7b43489b991b70df8041766efab68ce0be7857877cd69d765bbab2fceb108d980e245de0485e1c3e091b2d899c3bc678f4fe31a22cfc6e970061234f020d87f5c1cc02825867b3f66b3caca61dd2806d4f8df0325ef708328ed54ef471913c60d57d86e6c8de9489ec9505093602fc30646876682852e6e2120a647f533b50186576ed76f5bb33fe605242060b54808145af46c1749d1da7cc62480dbe5e016e6f29dc9d81e355b217c4bb871b6fe03cadc9e1d07468e950b3ca6cbbf18bb75c3af0a49a69c8037bf3a0a52fe036fe4e6fb4a110c4d631b335a5d7dc2161110b07903fa5fa630d4203d052c9266a0829d5f3a6ba334bf217f772dedc7e1ad04bccdfd330ce61450cd86454cc92f830410481218c75c1478d3ba8c02529a688ea1be771a96ed84e9a61629f28fd371fadde8d184a528c902aed61c44bac84a3c159758440de5d2714c1e2fc864b2d34c061d279d20f7938e38308241c755745aa1e4845fbc82c142e0b8c8fbe75d7c2f215772e58f46ed532a317f185feb146a31aec1323e37a7db7a90a019b5fac857e227a98eb03aceb56352e77a65e8f20292807c535f954f329591f942c5b2a643511cda1752009d39f7341e8c97b5f43c1a1ae846bbb28b99acb94700507483476e1f5a2d35b6e0afb0fb799da64e070f2892df155ec04c8741ee0dd8942a73aaab7d000f297a01aa7525c83cc36fa9e6a096906d887eb76259a91a9a3137021da7282560d23396c67ee79f3e7518a8cf44625b655dc41eaab787de508dcf332019ed71bd5beb9df795fb24e405819b98aaf8eacebcff1bdafb0bae40f4ed628851947bc852e61d27ec925300bb7060aa013aa7e02fd8048c93509672ec30238041265cfb2d255a27fd8be896acef36fc126736776a710acde4dc0919db1c52a3ba14c8e301042017e18dc590398e792473a34fce142b7a35692d1c49588eefc6fb7283a243d018771fea80405cd978b39a2a8b46a43b483b034784b1ecc779fa83a1816bcbea21adb953003d3406750a9edcf6c988e8f6c7b5d41cd952ef571c691dfff75f2f9ac84d666fe8be74405a9c4947d82d5ed62226c0de3af3c27273c33eb497b41713c39eff75dab3edacc5ccb171ccfd536b5501883a9e42e5fd8eca8e7367b2c1e051041505a0679edfe39a1ce8d0638cc0be349b28b64aa50438f8e4648d037b219b5128f87621a1f11e554fc888af6637eaae32de1c303e7570f214536e3d4351d8461f53e90c54bec43eb941f3e9b10e003d277e776a1eea14e5e4ecdc9f3473b8a40120c4e12658673a1259d6c9d4756c3610562a420ddb80429a4170c6a8b9b265eb6fe49ecce890aa7fd240240412f930e8e5689dd8089a0b0d0f1b8d928e726d8260e49c0132aaa844d4bfa273c59b3d596cb637fd5e5831476aa604579e5a199c4f82c245f2e99ce6715e8cae62305a46a8359b64b89277776199d9ca98cd57444d75efe7ff8d8eac85704a3fb0c07ce600c64e37341ae426dfa783de031b517a25e0ed4af52621a9a4d227ff48224012ed9acbda498b619a2c124b643635e3fcd7ec25f38ca4cf8852ed0bbbdd7a456cc32aad23bf98467bb09bbc452cb6d24d705435d80db9d24d79b0335bed08602470e0b83f74d7b2af769cdf86a9a4fc610b83f805b7940dd0b3a8dcba0f6ec4524215b143aea9fcb6dbabbde6fb62fe8911119ba3b7dcbbea7b7049cb354c03fc5e5b14c14c2ab7077bff657f2c1085187f9257d4d51b0142847a8c9760734f779c3c00eea4ecbf7127d6c4c38aa72903e9a645b122d1fc81167fd27e8c078836e6a710b10bed5b2088b42fa526811adb87050e131853bc02be05d521069b14dcf6393d68e1822e0f17505a6bec69137d2335ccc341d2f7dbf0679079a5b8ef6d5378d044665e4320a00402c2c89588affaac0f0b35e6d5a873597121875df6c136caae98674fe3832006041f7e7c7aba4676175ae98b4ab847aeee279b2e3e0cebb23a3267d74846b52b7113acf21d65c5d77f98230ef49b80d9299f44dd3f25185529fd3eaf78715db624fd566197bcc963b7a36104f9c43e8a11f4d1a994dda6424f1013a9f10e58b8b39aa37b6c56e66ab0d2868be3f8fa64b1747f6937038fe9b042e9bbffed1e23aeff500475703b7d625956dfff1848f0aa3a2fc1b87f2e2cb32031646c3df2dc288c31f2f3f71a8474f942b66d2d60adb9429e5669004325dd17ad2460cb1d4b976494741e75c0933b6f128ac603cfbac41f062ac37f345b322a1c731a6182f5be2fd4bf553fef15bdc22d0245b57f2db364f322dc31e59511c79dad5d36424c2409eedea2433726b2ad25f5fb68f36a46b4dffb627b8094ad4b74ceb22960ca8cf242eca864edd8fc2f588881ed18dd2bb935ed040b0090b2c82484a920adcb3e60d528da17113e49b5a20d38cb5f697102789bcd5ae67687763ca87fa95ffbd03eaaa4f70532db1a5dcae6f76abe8c14a0a203a0dd369eaa25aa393b5a95d9eb5a197ccb428788ee67d6f78bb296fadebd6e1457b785edc111025295dac305d7a69d2e4ac990c9cf6afdec4fe7ad3ba85dd934ef51532e46c123f9bde82dc62ce552236ee9929bfab233af67e446aae3f8d7e4ebbab1c182df5bd1fcedd9947d4ec62f2ead26790c54fc18f531e154744b375cf63ce6ffc7c9b08923cd6aaed2d9e60efe6436f4a92a1a5ab01b3c176e2ba503ba987d748e942f540512b94ed6321ef37986b04d58ef1d6ba9a390f04432ab325afcddbe1c638e9ca922f11b9ff34fbe9dfeb80f9ce8aef92d1d7a1eedc5bdccea11e2bfd6b005859159d16388f07ff35514d1fdd170018660c6584e226c6ce9b0e2b86c0d8235122cac9630a0c092c06966b4b637cd339fd4bb33be79303858a1e498b1852c164e69e969bbf8351e05d0201b3d912315fc16d465d5faa84f320cf00be0d9e314eefaa7a060d54bd9468ad5bc0301cd4c07f2b84dde3aac4f8a27fed243dde46e329d8508f4a933fc4d552738131ad8be5ae944de83cfad107eaf5cdad99a3db96855e70e09e0a53e2a5410c05bf9097f1db7837b24f070304f0f4189130b574e7b26ce67d47b029fc3787b2cb8e4a01ff557d4cd7d6ddd5de173ade1e377746238cd2b994f1f19f2017149129a814a66d351294fa47f93152bef8294cad739950c2f6f6a9e27dba45f0f2237946dfba600ee85c4171768ebe16ed6a87e49453eb4b0c091e5406459154d9ebbb59c660bb6004589c1e9d5ae96cc69f6667f5b52ddbf8187711e4e59126fb222e167283a4f19c852dbbd71d0ec60b797a2b3cdcb94a576cf3613a44c47383fcb263da3c90b59b934b401784e7923c1746628ac0788618791393954281bcdae86c0aab3dbf9e53380e7b218475305db15f9241d2b5435ad4ab52a6cdb5a483f25a944982a08500222b667b9da", 0x1000}, {&(0x7f0000002c40)="3f071c1c023d05e54aa70a43949e39a1dd84c63f07b5606c784bcc53e78a7e293dae983f711be331694acc340d8b8f9926ee38738d5769ae800d9a5676e83d5849d96431d489a1bcd7227e65a2138f26763ef4f29345286b87d8cacddf5ff88d97c5289d4fab13a7d39a4a365b64671f23016e67b1e85741b1d617ec97b3112a5dd8182a02b4d9f16029b438944b958578924e2e5480fa3a9f7437dc1a43245172f8916cadcba8", 0xa7}, {&(0x7f0000002d00)="cb3c64260031b56812b5542c5bfec4f1a2808dfd2af0abd9a873b6f5b8efead4759339b7dfd778ab335c4bdb4495460b6a71accaff655f0bedc10245e24eef791cd11d18732018a61c3a1942289b82445e799ee84a5420ff8c588625b0f063f8014000650338aa41d46924f5f553c4855459cdbb9c0be4ba693571a43b6861227fc8a03cb1b63d5787579a5b60c2b538f7dcb3bce76973c12cf2dce23f77b861b3d881caf9feb342e2e34f8c0d1ce0c892aeb5b155193a8295436dba13903f02db699157da24467b664892a780e0254177a718ce1249039b75d0", 0xda}, {&(0x7f0000002e00)="f190d1ef0aed09fd23c5df227efd54dd2896e0bd", 0x14}, {&(0x7f0000002e40)="cd2a4f50cce33a84f064d8c750db3c2a665ce6e0f3376d9b506c024343b71ed3fda9b0fead516904edede30556fb95db9ce5a5483fb429b73b42b0d3aa232a0621d63df70686390b5dcc076559c3841c7d2146c73327101c0d3529aceaedbe7dcf0ac2cb73e8cebfb8f8d196e8abc1d727167a5da35664dfdfe5a5647150ba2327779ed3", 0x84}, {&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000003f00)="3af6d5a8222b8a66ba579a92250793c3c9a989b34dcfeb737af6a86552668d2706a72c6bdc781ff5d9f06180c8b61c7d843b87ae735b9b2064cec9db03d8bc575f1a126f06a3c368e8", 0x49}], 0x8}}, {{&(0x7f0000004000)={0xa, 0x4e21, 0x0, @remote, 0x3f}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000004040)="6fbf9178db46f46ac16761e8c1e4f6ebffb41ae6fc216142c2", 0x19}, {&(0x7f0000004080)="8815d2115c30cca54c0234234e5e0283f12b1fabe08f43922f1652420b3496ed5ec7777c3b81c7d216cea1dc92fc914c4f1ed6c9d4d90a6a4d4dc181976fd5f085093d0347250de523adeeab98c20ea99f148d5b144e5f4c554911a57c16f06e8719948effe7a5ea1dd6d3c32839c9eafa9f519019c34666fae03ecefb661e2365504f29fd09a6", 0x87}, {&(0x7f0000004140)}], 0x3}}, {{&(0x7f00000041c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, 0x1c, &(0x7f0000004280)=[{&(0x7f0000004200)="d1bcaba323eaf90ec1e7036e36b5c2", 0xf}, {&(0x7f0000004240)="1d13cbb613a7a53fe7b80f85db6268728c", 0x11}], 0x2, &(0x7f0000004340)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x6c}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r4}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @hopopts_2292={{0x278, 0x29, 0x36, {0x33, 0x4b, '\x00', [@generic={0x3, 0xf5, "a97e9ab20c3812dc036053c7a6ff78e7e4b2cc46220b322d9b092a901911f8d5dfb4999ff134ca5be7397902a3f784bf50cacaf155a7bda268fc9375f35fefb85c9ba408a6bf181a14d8ee5c11b53b1159a0d2ef960956f22e60802857ada6525406c0073f4e9e3185befe649ca1e55fa6d37c15b6c12561522ebb8101ace7d54d031fbd967639385cd6a1372d258ca1c261f5b0cfb84a2d81df867c5f6280f76089b75905f777cfb69a5ea97d3489a36033490aa24d3d7e6bcbe3145076a7a080cb1990be27fcc29f46c6211449dfd387150d88215f7259e16597750c4f3b53204bf447e7c4be8d09f6396c5b9cdacda939117217"}, @generic={0x1, 0xf3, "ed14e03823ef1cb7564b54799148e423fa21d37d4d0999ad2113dcd645eb4acee382847cca5ce1124678785233e6b43328b01388710e4651b961f35cd4c37f6d6c655fe6a812aec1dd545bd789651ef4b8b651bf40e5b1761902f0e4bf60da227f60143e954bcbf29b769899845e77d26a62e23d3fb3cd38837acf66049b8ca0402f9d77acf6f252df8b9b2fcba07b7d02981bbdc5d30d5dc1de9c471d7f8390e3c6e89b4a6175820be306aa79d6299722dc787166e7a34ce804df1dbad470316ca66e538d5ad29b9bbc1083e466ab21e24bddc5c4e61c68babc30a3f97e4b9e1b2c2470c768be8c038b07a7b564dec5044c12"}, @jumbo={0xc2, 0x4, 0x16002c35}, @generic={0x2, 0x40, "fdb8a247d2591ac600a2e61c66050b27abee3797c1f73d0363fe6cab4c95865eae950082d7f4f08e871620657402a3df06c788905801e80ff395f7dcfea76832"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x50f, [0xfffffffffffffffb, 0x3]}}, @ra={0x5, 0x2, 0xf}, @enc_lim={0x4, 0x1, 0x2b}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x87, 0x4, 0x0, 0x5, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @empty}]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x2e, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x28, {0x2, 0x8, 0x7, 0x8, [0x4, 0xffffffffffffffff, 0xffffffffffffffc0, 0x6]}}, @padn={0x1, 0x1, [0x0]}, @generic={0x0, 0x26, "eee29a863664dbb8390cd3520614270970895dc01d63b1a0e7adceca212ac9e4a4b3dff4f48c"}]}}}, @hopopts_2292={{0x120, 0x29, 0x36, {0x84, 0x20, '\x00', [@hao={0xc9, 0x10, @private1}, @generic={0x4, 0xed, "6e0b6ce836b6fe646796833fb2aaa13002ade920979832cb86fa6ddcacaca87708c856e8f300a3a9c58ec096755ae5c4a389a337674970ecad9671c43df7ff52bbcf781dbf7619eace64389b8135db7e042ad21a6d74b4ed7b591fdf78c030bae39011d10d345788d2067e5dc3f7f904d888b9d18b0324df8fe10b03a6751155d274d7667620d71a57e31641f7eca9d1372a0b2060abab7a1feb0995f7ab9700f138c59d5675b7694a53ce252eb1905e0ae0f5b60dbdb811fb2e5cf55a5d6d8c0610ec8325fb5b9281cd69e328056e80455e725d69ec3a0067597a3b71cab20a195c4f14f8efe8032d1ee945e9"}]}}}], 0x4b8}}], 0x5, 0x42080) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r6, 0x0, 0x21, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 15m25.796597665s ago: executing program 3 (id=571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r3, 0x10e, 0xb, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xcb, 0xcc, &(0x7f00000003c0)="b59b10b593a2d257ed338e6d97c050c04361531b7044a78b4410141e53a67fa095e8dbce5815c4dbf7a167a450420485c5057a65574ad7c65f559c8bc1447604eff0c5783ce91edb90c2e15f824be2a1d62a5fea7b1de988b97dc34bc09d1c6f07010d7b805432293fd0f1fee12ca3c793cdd0f365721bbdef24e03f976c9181987530cc3d223950731a36e891f84ba94d5d0714134007a92c5ebc7a480933ab8c20e15600b6b2ea910af8d30e5be316ad7722fc10b1cb2f68304daa12e6587820d2f0719f015bdbd7e2ae", &(0x7f00000004c0)=""/204, 0x1000, 0x0, 0x25, 0x3e, &(0x7f0000000340)="2ba52fdc3d39efc7f0e6b42fd3b9e9a3d50b5635cb01898f9202d73ad99dd31d66381f8ed1", &(0x7f00000005c0)="9ce4c82f09828dd14d26d9263bf988e2755acc0aa60c27a21e4d4461c4aa962aceea63411837f2cbeb0407336175eff6d47c0747ce09ae5599cdb0063666", 0x4, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r9], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe4, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24040001}, 0x4015) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, r1, 0x100, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0) 15m25.665149583s ago: executing program 0 (id=572): socket(0x10, 0x803, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400400002100000426bd7000fedbdf2502142000050000081400000008000200ffffffff08000d400400000008000200e00000020c000c3fffffffffe0"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xd}, {0xe, 0xf}, {0x8, 0xc}}, [{0x8, 0xb, 0xc0e}, {0x8, 0xb, 0x89}, {0x8, 0xb, 0x5}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x67, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0x37, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000007c0)={r4, 0x1, 0x6, @remote}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0) 15m25.397051974s ago: executing program 1 (id=573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) close(0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r3, &(0x7f0000001440), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x188, 0x43, 0xa0, 0x0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00', {}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) r4 = socket(0x23, 0xa, 0xfffffffa) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'wg0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000080)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c000380060001000000000008000200020000a5df148d5a0f4db500080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4805}, 0x0) 15m25.249411372s ago: executing program 3 (id=574): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) close(0x3) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(sm4)\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r2, 0x7}, 0x80, 0x0}}], 0x1, 0x80) 15m25.240797907s ago: executing program 2 (id=575): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x0, 0x680000000000000, 0x1e}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1, 0x4}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000f40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000540)={0x34, r6, 0x28, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044001}, 0x8800) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0xe, 0x0, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000e004600070128bd7000fcdbdf25047c0000"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockname$packet(r12, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) 15m25.052397934s ago: executing program 1 (id=576): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe0d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f00000003c0)={[0x1]}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket(0x23, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 15m9.895713958s ago: executing program 32 (id=572): socket(0x10, 0x803, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400400002100000426bd7000fedbdf2502142000050000081400000008000200ffffffff08000d400400000008000200e00000020c000c3fffffffffe0"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xd}, {0xe, 0xf}, {0x8, 0xc}}, [{0x8, 0xb, 0xc0e}, {0x8, 0xb, 0x89}, {0x8, 0xb, 0x5}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x67, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0x37, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000007c0)={r4, 0x1, 0x6, @remote}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0) 15m9.845283875s ago: executing program 33 (id=576): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe0d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f00000003c0)={[0x1]}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket(0x23, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 15m9.767750102s ago: executing program 34 (id=575): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x0, 0x680000000000000, 0x1e}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1, 0x4}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000f40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000540)={0x34, r6, 0x28, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044001}, 0x8800) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0xe, 0x0, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000e004600070128bd7000fcdbdf25047c0000"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockname$packet(r12, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) 15m9.661834311s ago: executing program 35 (id=574): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) close(0x3) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(sm4)\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r2, 0x7}, 0x80, 0x0}}], 0x1, 0x80) 15m9.539811505s ago: executing program 36 (id=511): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000240)=0xaa00e6f, 0x4) (async) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000240)=0xaa00e6f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=r4], 0x30}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x8}, 0x28) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000040)=0x1) (async) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000040)=0x1) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0xd, 0x0, &(0x7f0000000040)) 6.173217481s ago: executing program 7 (id=6392): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) write(r0, &(0x7f0000000000)="0c000000010001", 0x7) 5.980677023s ago: executing program 7 (id=6394): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x1}, &(0x7f0000000080)=0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01020000000000000000010080030900010073797a300000000034000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000008000b400000000394000000060a010400000000000000000100000008000b40000000036c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c0001006269747769736500240002800800034000000002080001400000001408000240b100001204000480040005800900010073797a30"], 0x110}}, 0x20008000) 5.875433024s ago: executing program 7 (id=6395): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xfffb, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x19465, 0x1a704}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r5 = socket(0x23, 0x80805, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r7}, 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x92}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000400)={0x1, 0x8008, 0xff, 0x6156, r9}, &(0x7f0000000480)=0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f0000000000)=0x80420203, 0x4) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x1d, 0x0, &(0x7f0000000200)=0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r8, 0x87, &(0x7f0000000800)}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000000)="5a000300010003", 0x7) ioctl$sock_ifreq(r5, 0x891e, &(0x7f00000002c0)={'dummy0\x00', @ifru_settings={0x7, 0x1, @cisco=0x0}}) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req={0xf9d, 0x8, 0x4, 0x23}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x912}, &(0x7f0000000100)=0x8) 5.574135633s ago: executing program 7 (id=6399): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4020}], 0x1, 0x8) 5.48050587s ago: executing program 6 (id=6401): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0xc940}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 5.166902556s ago: executing program 6 (id=6403): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)={r3}, &(0x7f0000000080)=0x8) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000002c0)={0x0, 0x0, "956e8bfeeaabda1ab9d42197803f16a9"}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280"], 0x40}}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@deltfilter={0x54, 0x2d, 0x322, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf, 0xc}, {0x4, 0xfff1}, {0xa, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x6c, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4008804) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x10c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x941}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) pwritev(r8, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x1}], 0x1, 0x1c000000, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0103800000000000000018000180140002009265616d5f736c6176655f300000000000000000"], 0x2c}}, 0x8044) 4.996580568s ago: executing program 6 (id=6405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0x3c}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2084040000000000240012800b0001006d6163736563000014000280050003000800000005000a"], 0x44}}, 0x800) 4.556257239s ago: executing program 7 (id=6407): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@deltaction={0x30, 0x31, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x75, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x30}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r5}, @CGW_DST_IF={0x8, 0xa, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x64, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x20}}, [@sec_ctx={0xc, 0x8, {0x8}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x64}}, 0x4004040) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x57285}}, 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 4.53860356s ago: executing program 6 (id=6408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x1f00}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa1e2fd22ecd4da32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.350666378s ago: executing program 6 (id=6409): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvmsg(r2, &(0x7f0000009180)={0x0, 0x0, &(0x7f0000009080)=[{0x0}, {0x0}, {&(0x7f0000008f00)=""/241, 0xf1}], 0x3}, 0x40002122) sendmmsg$alg(r2, &(0x7f0000006b00)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="73db6b6d115aeb07bab9c0698e6075110000bb8ca158c77e7246dcfa770d67effca05368f80e82ea909be4de40f7c47183a83144daa96689f2ffe797983c1970f0516ac9010032f258f56434df5fba547f262eaf6f261e1024661ec70ae134522673c0cb778a20c1a312a8e5f9e3ed2ab88410385f9faa3ec041c316005552877c265cd1b6d03fd841dc4dd15bcf5f861dd3518ef698585a91821b5861019f22c4dd680190b805a888bd98ea811d9fd7839a17b689c075", 0xb7}, {&(0x7f0000000180)="5697c7c3c21a3a8dd835c3f386f7e53ff3b85e2d8f80060e889ba4144e8b7f2084e648dcbc64bf3092891a9b20b3fbb05defe2725d5e61", 0x37}], 0x2, 0x0, 0x0, 0x8000}], 0x1, 0x404c8d4) 4.348010654s ago: executing program 7 (id=6410): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r1, @ANYBLOB="d00000000a000100000000000000001008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r6, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000c09807850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x18) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r9, 0x10c, 0x4, &(0x7f0000001b00), &(0x7f0000000000)=0x4) syz_extract_tcp_res(&(0x7f00000000c0), 0x21ce, 0x8) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.319875085s ago: executing program 6 (id=6418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xfffd, 0x0, @empty, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x10001}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.793796159s ago: executing program 9 (id=6423): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x41100, 0x5, '\x00', 0x0, @sk_reuseport}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="1c9a23f3dd59049620a0e5573a004fab75a6597b5f34970a55c49bc0cd3a8b75fa88b820f143dd94c03bf56a26100ca4ec8440f1c1f5e8c325f88187666dbbeca464d899293a1d79bd57fcfcf652becf907f3b046ec793b1861bd9fdcd00c8068eed6ec366970e4075da1ce39fba0607a725b1aabb", 0x75}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.792356295s ago: executing program 8 (id=6425): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0508665f7c8377d09adf4b06173d31011a9112f1b78bdc92e8cf952a4300ee3a3de6a526f7fc583c86b1aef33335725089b9a50f7b1a93e79d8", 0x67}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(xcbc(camellia-generic))\x00'}, 0x58) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x168, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc}, @NL80211_ATTR_REG_RULES={0x13c, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x36f0}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4400000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x95f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4c4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x657}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x43ea}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc5ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) shutdown(r0, 0x1) 1.791874293s ago: executing program 9 (id=6426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x480402, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd31, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x240410c0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000fc8d9fe300090000000100005e4fc35f00", @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYBLOB="6e216a7bedcd7506268afb6227e4e32bcc412985fb552ff9e8f3203ecf04b15b25074360c1853a4ac695970b103b741287488eaade3b99feb52d8eb3016c86f93cc9c2ff0be72f4c162dab44e90e4dd123ea9cc85180255983e9640f6653b63ba63bb95e4ba6992fdcfbf4853e98ce0941e19194e406fe52c24c91ad6f505755bad817e3e61e9608801a7309f423938136339bcc9afe6ce7c3662f3e2adf0a451f2369a260c73a0056749798ed60d1b665c798f1a39ca497aea5e90455b5aaf3ed6a567efd56c34bc6c1e81d43b2accda98484ff480ec39e91a2d49ffdbffcdd966bcf6beb8005ed5827a972699df1fc936c20813fe92fe468aac520a33520b07b8c8ff873ce50509d274ee6fa78", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="5c0000f8a57542745d5b312a50a96d00", @ANYRES16=r3, @ANYBLOB="08002abd7000fedbdf251000000008000700480e000008000600673b0000080007000400000008000700010001000800060001000000080007007f00000008000700ff000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[], 0x68}}, 0x4000050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000200000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000023010000"], 0x48) socket$kcm(0xa, 0x3, 0x87) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf2504000000080002000200000008000100010000000800020002000000080002000200000008000100010000000800020002000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40895) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r6}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x4004140}, 0x4000054) 1.790998344s ago: executing program 8 (id=6427): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000000ac0)=""/224, 0xe0}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000980)=""/225, 0xe1}, {&(0x7f0000000a80)=""/16, 0x10}, {&(0x7f0000004880)=""/141, 0x8d}], 0x4}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000c80)=""/166, 0xa6}, {&(0x7f0000000d40)=""/81, 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000002f40)=""/115, 0x73}, {&(0x7f0000002fc0)=""/241, 0xf1}, {&(0x7f00000030c0)=""/94, 0x5e}, {&(0x7f0000003140)=""/207, 0xcf}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/181, 0xb5}], 0x7}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003600)=""/72, 0x48}, {&(0x7f0000003680)=""/235, 0xeb}, {&(0x7f0000003780)=""/28, 0x1c}, {&(0x7f00000037c0)=""/222, 0xde}], 0x4}}], 0x5, 0x41, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="bc346735c18490743bf910d2703f742783484716cb3feaed62456f3ca238f4d2c170dfdb951bdec6010b6a49b29abea2b6297f401074022f1f2d7f076aba9f37c195c30833fbffaae7e1ebabc78a58d1088d4af266", 0x55) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0xa0, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="82966a31a3c13369d871d7a8d0845aac4d47a020ca3e50808cd293bc7671e6f7"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="671f9a80501e646d6fb3bde2e1577108"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "39c9fb88a5050a12"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="156150680c88b3707f022635987a67fe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a72dbc560717c561"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7794f48bea82cf6b389bcb8114cc3e5e57a3a60b5159eb31"}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x801}, 0x4814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES64=r6], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x15) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.597817607s ago: executing program 8 (id=6429): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000000)=[{r0, 0x400}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffff801, 0x3}}]}]}]}, 0x58}}, 0x0) 1.266081615s ago: executing program 9 (id=6430): r0 = socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) close(r2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x606100, 0x0) close(r6) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r5, 0x9}, &(0x7f00000000c0)=0x8) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r9, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={r8, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x2, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 1.265462544s ago: executing program 5 (id=6431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfefffffe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000700850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800002c0000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0xfffffdd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x1a) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0xffffffffffffffff, "70ea021087d34025122fd9d05b2677de5586ecc359a9c4c39bbebd56cb539508", 0x2, 0x0, 0xe}, 0x3c) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES32=0x0, @ANYBLOB="0404"], 0x20}], 0x1}, 0x0) 1.176859005s ago: executing program 8 (id=6432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x3ffff, 0x0, 0x90, [0x200000000100, 0x200000000130, 0x200000000160, 0x200000000100, 0x200000000100, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x94}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$can_bcm(r2, &(0x7f00000002c0), 0x10) readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4087, 0xff7}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000020000002400048020000180080001006f73660014000280050002000800000008000104e29a2d7629ba0c0073797a300000000009d30000001400000011000100000000f3ffffffffffffff0a"], 0x80}}, 0xc0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2712, &(0x7f00000003c0)=""/102394, &(0x7f0000000040)=0xffffffffffffff69) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f00000042c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x1, @mcast2, 0xfffffffa}, 0x1c, 0x0, 0x0, &(0x7f0000004580)=[@rthdr={{0x18, 0x29, 0x39, {0x6c, 0x0, 0x1, 0xac}}}], 0x18}}], 0x1, 0x20000000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) accept(r3, 0x0, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r2], 0x80}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000e80)={0x0, 0x9, 0x1, [0x2d4, 0x80000001, 0x6, 0x1, 0xfffffffffffffff8], [0x9, 0x5, 0x9, 0x2, 0x4, 0xfffffffffffffffc, 0x4, 0xfffffffffffffffa, 0x7fff, 0x7, 0x92b, 0x80, 0x2, 0xc, 0xb, 0x20000000000, 0x3, 0x7, 0x7fffffff, 0x49a6, 0xb, 0x43f0, 0x3, 0x8, 0x7fffffff, 0x7, 0x3282e86c, 0x7, 0x8, 0x9, 0x9, 0x6, 0x3ff, 0x6, 0xe, 0x0, 0x9, 0x3, 0x8, 0x0, 0x1000, 0x8, 0x5, 0x401, 0x8, 0x12, 0x7, 0x0, 0x5, 0x5, 0xb, 0x0, 0x1be5, 0x5eef, 0x7, 0xef, 0x5, 0x5, 0x80000000, 0xf, 0x1, 0xd766a5e, 0x6, 0x4, 0x1, 0x5, 0x2, 0x8, 0x2, 0x2, 0x2, 0x80, 0x1ff, 0x4, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff, 0xeaf3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x5, 0xf, 0x0, 0x7f, 0x10001, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x6, 0x40, 0x3, 0x2, 0x4, 0x75, 0x1c, 0x5, 0x2, 0x1, 0x2, 0x6, 0x3, 0xff, 0x8, 0xb1d, 0x81, 0x2, 0x8, 0x3, 0x0, 0x8, 0x1, 0x6, 0x100000, 0x8, 0x34, 0x1, 0x8000000000000001, 0x0, 0x2, 0x0, 0x0, 0x7]}) ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f0000002b80)={r11, "1ef0fc20f70aa2868adb41dadfcaeae2"}) 1.071737831s ago: executing program 9 (id=6433): socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20004840) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 937.261297ms ago: executing program 5 (id=6434): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xd9, &(0x7f00000001c0)=""/217, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x4, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x4, 0x5, 0xa}, {0x2, 0x1, 0xf, 0xc}, {0x5, 0x4, 0x3, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree_skb\x00', r2, 0x0, 0x8}, 0x18) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x161b060f1436d4f2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xd9, &(0x7f00000001c0)=""/217, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x4, 0x8, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x4, 0x5, 0xa}, {0x2, 0x1, 0xf, 0xc}, {0x5, 0x4, 0x3, 0x5}], 0x10, 0x8}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree_skb\x00', r2, 0x0, 0x8}, 0x18) (async) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x161b060f1436d4f2}, 0x10) (async) 813.414889ms ago: executing program 5 (id=6435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x1f}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa1e2fd22ecd4da32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 611.818568ms ago: executing program 5 (id=6436): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="51000300000045f32c0957590c50aee7b9d212c3fb0829458e90547b44150d14499863933d1b1ae99c74e6149e9e1bfff589756797eb9b8ca184671ef24a289d1ea85cf7ba02abf1c648617b65b3cdc32cb7e73044866a9bd2f275a71aa4573c5c7fa037ae5d530c5dcb3b54bc630bf48e3869e33795f2875eeacaaf5f7e8467ee8bf53f2f41543ec4630a5b5bd2ea382c7cd871260f22a9c3aa6cf7f832800b1dbf96642ad03482bb74cbf18cb986c76837ce4a10ab13", 0xb7) 438.093275ms ago: executing program 9 (id=6437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1f}, @val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x6000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x7, 0x3, {{0x3d, 0x4, 0x1, 0x2, 0xf4, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@noop, @timestamp={0x44, 0x1c, 0x45, 0x0, 0x9, [0x8, 0xffffffc1, 0x31, 0x3, 0xd14, 0x30]}, @cipso={0x86, 0x45, 0x3, [{0x1, 0x3, "1a"}, {0x6, 0xb, "bdeaff64db6bff8cf8"}, {0x1, 0x10, "432841096d03e06115e1b77dc39d"}, {0x7, 0x8, "04ba4010a119"}, {0x1, 0x10, "44d68257e84a182a7910d72c55ba"}, {0x1, 0x9, "9ea432d7a6548f"}]}, @end, @rr={0x7, 0x13, 0x1f, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast2]}, @ra={0x94, 0x4}, @cipso={0x86, 0x35, 0x0, [{0x2, 0xe, "e565c2b12700d737a1704da2"}, {0x0, 0x9, "8e785e4cd9dc16"}, {0x0, 0xa, "cc771ac7f01d15ed"}, {0x7, 0xe, "2d6905364ee039af8f4e2cf5"}]}, @cipso={0x86, 0x30, 0x3, [{0x2, 0x7, "be36f4420a"}, {0x5, 0x9, "6dc3c7279f8fab"}, {0x1, 0xc, "13a43f46454eeada7682"}, {0x2, 0xe, "86235c9feb939e6fbc606851"}]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x66, 0x66, 0x5, [@enum64={0xf, 0x2, 0x0, 0x13, 0x0, 0xe, [{0x6, 0xd, 0xa2}, {0xf, 0x1, 0xf518}]}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x6}, {0x5, 0x7, 0x5}], 'Dl'}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x22, 0x1}]}, {0x0, [0x0, 0x61, 0x30]}}, &(0x7f0000000680)=""/72, 0x85, 0x48, 0x0, 0x10000, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x10000, 0x0}, 0x8) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800)={0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x14, 0x19, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff7fff}, @cb_func={0x18, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0xd7, &(0x7f0000000340)=""/215, 0x41000, 0x4, '\x00', r3, @lirc_mode2, r4, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x0, 0x1}, 0x10, r5, r6, 0x9, &(0x7f0000000840)=[0xffffffffffffffff], &(0x7f0000000880)=[{0x4, 0x3, 0x2, 0x9}, {0x5, 0x5, 0x6, 0xa}, {0x2, 0x2, 0xe, 0x6}, {0x2, 0x5, 0x4}, {0x1, 0x3, 0xf, 0x2}, {0x4, 0x2, 0xd, 0xc489a30bac2ff82c}, {0x4, 0x5, 0xc, 0x5}, {0x1, 0x2}, {0x0, 0x2, 0x7, 0x1}], 0x10, 0x8000}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=@getsadinfo={0x60, 0x23, 0x1, 0x70bd2a, 0x25dfdbfb, 0x0, [@srcaddr={0x14, 0xd, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@remote, 0x2, 0x7e, 0xf}}, @extra_flags={0x8, 0x18, 0x7fffffff}, @replay_thresh={0x8, 0xb, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x8001) r9 = accept(r0, &(0x7f0000000b40)=@x25, &(0x7f0000000bc0)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000000c00)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x4, @remote, 0x81}, @in6={0xa, 0x4e23, 0xc096, @mcast2, 0x3}], 0x48) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r10, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x800) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001100)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10200080}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e40)={0x248, r12, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "f1e1ec3a8b05ad82bc15ea42965481cc9dd9914494f5d18a5a2312e66ed5259420425a89413fa9cf8b0cfc235cb227e2a3d08868b4e517aa1b181fcd54d873c7cfa652a8b33215cbf9a757e21dd5c09d2d070bdfc3d7c2de30eff94dd28a102b8ec7ca0dc9cbd2b4c99baa1da4939e94f17d482c453a334223477abe29615e319904514d13eb34b3f7b88b8a953cbbcb3c9215b2c48ec85d0a39428bf86fce5c336d74736c11179fbab3c0a6222d924636e7de30c86653a64759f0e1ad4a7e53"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4608cf51}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',-/--#.\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff795}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd6cb}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x1a, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe5}}]}, &(0x7f0000001240)='syzkaller\x00', 0x7, 0xa, &(0x7f0000001280)=""/10, 0x41000, 0x20, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000012c0)=[r2, 0x1, r2, r2], &(0x7f0000001300)=[{0x2, 0x4, 0x2, 0x9}, {0x5, 0x2, 0xa, 0xe}, {0x0, 0x4, 0x1}], 0x10, 0xc}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001400)={r13, r3, 0x25, 0x0, @void}, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r9) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x7c, r14, 0x24, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb9c}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x43}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x30e}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r15 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r16 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, 0x1402, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r15}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r16}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000016c0)={r7, r3, 0x25, 0x1, @void}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001700)={r6, 0x40, 0x400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002940)={r17, 0x0, 0xc1, 0x1000, &(0x7f0000001740)="f04c32b667e6d0e26dac7aefcb58bf8f0050d4102900e2e0a854934f6577ee91a512e3b124091bc9fa5dcbd3d6ca50d58828e990675ad06d1aadf595dc573014c947d7289b80bde66b9a118a600be89003e113caf84bc204970fcdd80f8013a9d225389d83d19dcf0cd8cf269a1f76315b9489711213e799ab3dbeec75f11f21b238f7a906d1d57382a9ebc3acd2a3cf4f848a4c3028de5d47be46a51a4c19f6dea89ca88ff035640f82f5c2835215300559f6f2f1642093c4cf68e122e8d6054b", &(0x7f0000001840)=""/4096, 0x1, 0x0, 0x47, 0x41, &(0x7f0000002840)="9f7f4ba831faa6940432e462cb561f4390d3f63e6669c2048968d360cf935c08dbba778b1fe45c4bc766cef396535780e5e8c7b51a6a89401cbfd8d92717e31d2289214d11a1a8", &(0x7f00000028c0)="5e50f103f6d37303bd5b262d3b1558dec747645f082ada7a41ddc55ee96bd8f87357c034934fe37b5b3540f1feb10048452f3a33228f11ad6d8955a736ec2f80dc", 0x6, 0x0, 0xfffffc00}, 0x50) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000029c0), r18) 389.19523ms ago: executing program 5 (id=6438): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0x11) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x70) 292.010444ms ago: executing program 5 (id=6439): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0xffffffffffffffc4, &(0x7f0000000140)=[{0x40, 0xfd, 0x2, 0x80000100}, {0x6, 0x1, 0x6, 0x3}]}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000affffffffffffff920000070000060900010073797a300000000014000000020a010200000000000000000000000014000000110001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8810) 217.610687ms ago: executing program 9 (id=6440): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551010000008d3b", 0x4a}, {&(0x7f00000004c0)="1006000000000000ee8de7932b326f8a310f654fb0c4ae439862807a1589836c734d2341f74276871bf8465fc0583fdc0b8a34bb550ef977b001d46df69747826840d196606f75ef1cbe3bed88eb2291b63c95dbb54b10e45adfc5c5d7758e", 0x5f}, {&(0x7f0000000400)="df3b46a1330000000000000000000000000000f116878ec6681583392eb29f350235231be5495bc3b6ad35ad20bc5feceb317e800dbe16efa29cce9c1417049b9aafee7f19a91501e37b42ed50d947953bd8d66754dff6b8ef0b3457b86e542dacde831a17000000000000000051fd75ae0bd658bdf574c261f66e30a15e417e9ba9a77a3f", 0x85}, {&(0x7f00000005c0)="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", 0xdea}], 0x5}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="1c306f2500"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) 145.206687ms ago: executing program 8 (id=6441): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r1, 0x0, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x8655, 0x0, {{0xe, 0x4, 0x3, 0x2a, 0x38, 0x67, 0x0, 0xd, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @rr={0x7, 0x23, 0x36, [@remote, @multicast2, @remote, @remote, @empty, @local, @empty, @rand_addr=0x64010100]}]}}}}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@var={0xc, 0x0, 0x0, 0xe, 0x5}, @ptr={0x8, 0x0, 0x0, 0x2, 0x1}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @const={0x1}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x67, 0x5}, @enum64={0x7, 0x1, 0x0, 0x13, 0x1, 0x9, [{0x1, 0x1ff}]}]}, {0x0, [0x2e]}}, &(0x7f00000005c0)=""/30, 0x77, 0x1e, 0x0, 0x4}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0xe4f, '\x00', r7, r8, 0x4, 0x5}, 0x50) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf48}, 0x10) (async) ppoll(&(0x7f00000002c0)=[{r2, 0x6000}, {r4, 0x2000}], 0x2, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0xfd79, 0x0, 0x0, 0x0, 0xffffff5a, 0x30000}}], 0x300, 0x2000cf10) (async) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r9, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) (async) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r10, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 8 (id=6442): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) connect(r2, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x1000065, @dev={0xfe, 0x80, '\x00', 0x9}, 0x6, 0x1}, 0x80) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4044804) sendto$packet(r0, 0x0, 0x0, 0x44801, &(0x7f00000002c0)={0x11, 0x9, r1, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) kernel console output (not intermixed with test programs): 50 [ 900.533191][T24359] should_fail_ex+0x414/0x560 [ 900.533227][T24359] _copy_from_user+0x2d/0xb0 [ 900.533255][T24359] ___sys_recvmsg+0x12e/0x510 [ 900.533304][T24359] ? __pfx____sys_recvmsg+0x10/0x10 [ 900.533338][T24359] ? __fget_files+0x2a/0x420 [ 900.533384][T24359] ? __fget_files+0x3a0/0x420 [ 900.533424][T24359] do_recvmmsg+0x307/0x770 [ 900.533465][T24359] ? __pfx_do_recvmmsg+0x10/0x10 [ 900.533516][T24359] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 900.533566][T24359] __x64_sys_recvmmsg+0x190/0x240 [ 900.533600][T24359] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 900.533643][T24359] do_syscall_64+0xec/0xf80 [ 900.533671][T24359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.533692][T24359] ? trace_irq_disable+0x37/0x100 [ 900.533723][T24359] ? clear_bhb_loop+0x60/0xb0 [ 900.533750][T24359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.533771][T24359] RIP: 0033:0x7fd6ebf8f749 [ 900.533793][T24359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.533813][T24359] RSP: 002b:00007fd6ecee6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 900.533839][T24359] RAX: ffffffffffffffda RBX: 00007fd6ec1e5fa0 RCX: 00007fd6ebf8f749 [ 900.533855][T24359] RDX: 0000000000000002 RSI: 0000200000002480 RDI: 0000000000000003 [ 900.533870][T24359] RBP: 00007fd6ecee6090 R08: 0000000000000000 R09: 0000000000000000 [ 900.533884][T24359] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 900.533897][T24359] R13: 00007fd6ec1e6038 R14: 00007fd6ec1e5fa0 R15: 00007ffe81422b18 [ 900.533933][T24359] [ 900.860613][T24364] netlink: 'syz.8.4625': attribute type 10 has an invalid length. [ 901.080595][T24376] netlink: 'syz.5.4628': attribute type 2 has an invalid length. [ 901.122211][T24376] ip6_vti0 speed is unknown, defaulting to 1000 [ 901.563466][T24376] wg1 speed is unknown, defaulting to 1000 [ 902.168503][T24411] FAULT_INJECTION: forcing a failure. [ 902.168503][T24411] name failslab, interval 1, probability 0, space 0, times 0 [ 902.200434][T24411] CPU: 1 UID: 0 PID: 24411 Comm: syz.5.4637 Not tainted syzkaller #0 PREEMPT(full) [ 902.200468][T24411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 902.200482][T24411] Call Trace: [ 902.200491][T24411] [ 902.200500][T24411] dump_stack_lvl+0xe8/0x150 [ 902.200536][T24411] should_fail_ex+0x414/0x560 [ 902.200579][T24411] should_failslab+0xa8/0x100 [ 902.200610][T24411] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 902.200649][T24411] ? __alloc_skb+0x1d5/0x720 [ 902.200752][T24411] ? __local_bh_enable_ip+0xd0/0x130 [ 902.200778][T24411] ? __alloc_skb+0x190/0x720 [ 902.200804][T24411] __alloc_skb+0x1d5/0x720 [ 902.200837][T24411] netlink_dump+0x1b7/0xe90 [ 902.200909][T24411] ? __pfx_netlink_dump+0x10/0x10 [ 902.200962][T24411] ? kmem_cache_free+0x197/0x620 [ 902.200982][T24411] ? netlink_recvmsg+0x5b2/0xa30 [ 902.201021][T24411] netlink_recvmsg+0x676/0xa30 [ 902.201065][T24411] ? __pfx_netlink_recvmsg+0x10/0x10 [ 902.201111][T24411] ? __lock_acquire+0x6b6/0x2cf0 [ 902.201144][T24411] ? aa_sock_msg_perm+0xf1/0x1b0 [ 902.201177][T24411] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 902.201199][T24411] ? security_socket_recvmsg+0x7e/0x2e0 [ 902.201235][T24411] ? __pfx_netlink_recvmsg+0x10/0x10 [ 902.201269][T24411] sock_recvmsg+0x22c/0x270 [ 902.201319][T24411] ____sys_recvmsg+0x1c9/0x460 [ 902.201360][T24411] ? __pfx_____sys_recvmsg+0x10/0x10 [ 902.201409][T24411] ? import_iovec+0x74/0xa0 [ 902.201460][T24411] ___sys_recvmsg+0x1b5/0x510 [ 902.201498][T24411] ? __pfx____sys_recvmsg+0x10/0x10 [ 902.201535][T24411] ? __fget_files+0x2a/0x420 [ 902.201585][T24411] ? __fget_files+0x3a0/0x420 [ 902.201628][T24411] do_recvmmsg+0x307/0x770 [ 902.201670][T24411] ? __pfx_do_recvmmsg+0x10/0x10 [ 902.201718][T24411] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 902.201771][T24411] __x64_sys_recvmmsg+0x190/0x240 [ 902.201807][T24411] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 902.201854][T24411] do_syscall_64+0xec/0xf80 [ 902.201882][T24411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.201903][T24411] ? trace_irq_disable+0x37/0x100 [ 902.201933][T24411] ? clear_bhb_loop+0x60/0xb0 [ 902.201961][T24411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.201984][T24411] RIP: 0033:0x7f231d38f749 [ 902.202006][T24411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.202026][T24411] RSP: 002b:00007f231e298038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 902.202051][T24411] RAX: ffffffffffffffda RBX: 00007f231d5e5fa0 RCX: 00007f231d38f749 [ 902.202068][T24411] RDX: 0000000000000002 RSI: 0000200000002480 RDI: 0000000000000003 [ 902.202083][T24411] RBP: 00007f231e298090 R08: 0000000000000000 R09: 0000000000000000 [ 902.202106][T24411] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 902.202120][T24411] R13: 00007f231d5e6038 R14: 00007f231d5e5fa0 R15: 00007ffd0cc98098 [ 902.202161][T24411] [ 902.881202][T24423] netpci0: tun_chr_ioctl cmd 2147767521 [ 903.039972][T24428] netlink: 'syz.9.4642': attribute type 2 has an invalid length. [ 903.068857][T24428] netlink: 'syz.9.4642': attribute type 1 has an invalid length. [ 903.156410][T24428] netlink: 'syz.9.4642': attribute type 2 has an invalid length. [ 903.378724][T24438] __nla_validate_parse: 3 callbacks suppressed [ 903.378748][T24438] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.4645'. [ 903.417594][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4646'. [ 903.475802][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4646'. [ 903.485760][ T72] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.504288][ T72] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.535641][T24443] m1Ie5nè‹: entered promiscuous mode [ 903.549645][ T72] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.574203][ T72] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.665786][T24445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4647'. [ 903.753154][T24450] FAULT_INJECTION: forcing a failure. [ 903.753154][T24450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.784352][T24450] CPU: 1 UID: 0 PID: 24450 Comm: syz.6.4648 Not tainted syzkaller #0 PREEMPT(full) [ 903.784387][T24450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 903.784401][T24450] Call Trace: [ 903.784410][T24450] [ 903.784420][T24450] dump_stack_lvl+0xe8/0x150 [ 903.784456][T24450] should_fail_ex+0x414/0x560 [ 903.784497][T24450] _copy_from_user+0x2d/0xb0 [ 903.784528][T24450] ___sys_recvmsg+0x12e/0x510 [ 903.784564][T24450] ? __pfx____sys_recvmsg+0x10/0x10 [ 903.784599][T24450] ? __fget_files+0x2a/0x420 [ 903.784661][T24450] do_recvmmsg+0x307/0x770 [ 903.784700][T24450] ? __pfx_do_recvmmsg+0x10/0x10 [ 903.784742][T24450] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 903.784790][T24450] __x64_sys_recvmmsg+0x190/0x240 [ 903.784824][T24450] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 903.784867][T24450] do_syscall_64+0xec/0xf80 [ 903.784894][T24450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.784915][T24450] ? trace_irq_disable+0x37/0x100 [ 903.784943][T24450] ? clear_bhb_loop+0x60/0xb0 [ 903.785090][T24450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.785133][T24450] RIP: 0033:0x7f302098f749 [ 903.785155][T24450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.785173][T24450] RSP: 002b:00007f3021748038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 903.785197][T24450] RAX: ffffffffffffffda RBX: 00007f3020be5fa0 RCX: 00007f302098f749 [ 903.785213][T24450] RDX: 0000000000000002 RSI: 0000200000002480 RDI: 0000000000000003 [ 903.785226][T24450] RBP: 00007f3021748090 R08: 0000000000000000 R09: 0000000000000000 [ 903.785240][T24450] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 903.785253][T24450] R13: 00007f3020be6038 R14: 00007f3020be5fa0 R15: 00007ffefcc1ee78 [ 903.785370][T24450] [ 904.480112][T24464] ip6_vti0 speed is unknown, defaulting to 1000 [ 904.655416][T24472] netlink: 'syz.9.4654': attribute type 12 has an invalid length. [ 905.018383][T24464] wg1 speed is unknown, defaulting to 1000 [ 905.164581][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4658'. [ 905.728443][T24502] FAULT_INJECTION: forcing a failure. [ 905.728443][T24502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.774221][T24502] CPU: 1 UID: 0 PID: 24502 Comm: syz.9.4660 Not tainted syzkaller #0 PREEMPT(full) [ 905.774264][T24502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 905.774283][T24502] Call Trace: [ 905.774296][T24502] [ 905.774312][T24502] dump_stack_lvl+0xe8/0x150 [ 905.774351][T24502] should_fail_ex+0x414/0x560 [ 905.774390][T24502] _copy_from_user+0x2d/0xb0 [ 905.774419][T24502] ___sys_recvmsg+0x12e/0x510 [ 905.774455][T24502] ? __pfx____sys_recvmsg+0x10/0x10 [ 905.774487][T24502] ? __fget_files+0x2a/0x420 [ 905.774548][T24502] do_recvmmsg+0x307/0x770 [ 905.774587][T24502] ? __pfx_do_recvmmsg+0x10/0x10 [ 905.774627][T24502] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 905.774674][T24502] __x64_sys_recvmmsg+0x190/0x240 [ 905.774706][T24502] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 905.774746][T24502] do_syscall_64+0xec/0xf80 [ 905.774772][T24502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.774793][T24502] ? trace_irq_disable+0x37/0x100 [ 905.774822][T24502] ? clear_bhb_loop+0x60/0xb0 [ 905.774848][T24502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.774868][T24502] RIP: 0033:0x7fd6ebf8f749 [ 905.774889][T24502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.774908][T24502] RSP: 002b:00007fd6ecee6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 905.774930][T24502] RAX: ffffffffffffffda RBX: 00007fd6ec1e5fa0 RCX: 00007fd6ebf8f749 [ 905.774947][T24502] RDX: 0000000000000002 RSI: 0000200000002480 RDI: 0000000000000003 [ 905.774961][T24502] RBP: 00007fd6ecee6090 R08: 0000000000000000 R09: 0000000000000000 [ 905.774974][T24502] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 905.774988][T24502] R13: 00007fd6ec1e6038 R14: 00007fd6ec1e5fa0 R15: 00007ffe81422b18 [ 905.775023][T24502] [ 906.270975][T24519] xt_hashlimit: size too large, truncated to 1048576 [ 906.722333][T24535] ip6_vti0 speed is unknown, defaulting to 1000 [ 906.893369][T24542] syzkaller0: entered promiscuous mode [ 906.904154][T24542] syzkaller0: entered allmulticast mode [ 906.947490][T24546] netlink: 'syz.8.4675': attribute type 10 has an invalid length. [ 906.988664][T24546] netlink: 'syz.8.4675': attribute type 10 has an invalid length. [ 907.136867][T24555] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4677'. [ 907.231668][T24558] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4678'. [ 907.246273][T24535] wg1 speed is unknown, defaulting to 1000 [ 907.277978][T24558] lo: Caught tx_queue_len zero misconfig [ 907.591156][T24567] netlink: 'syz.8.4681': attribute type 4 has an invalid length. [ 907.599150][T24567] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4681'. [ 908.231394][T24588] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4688'. [ 908.435541][T24602] nbd8: detected capacity change from 0 to 63 [ 908.444272][T24606] block nbd8: NBD_DISCONNECT [ 908.451018][T24606] block nbd8: Disconnected due to user request. [ 908.496396][T24606] block nbd8: shutting down sockets [ 908.667832][T24619] netlink: 'syz.8.4698': attribute type 9 has an invalid length. [ 908.704448][T24619] netlink: 'syz.8.4698': attribute type 11 has an invalid length. [ 908.712353][T24619] netlink: 'syz.8.4698': attribute type 12 has an invalid length. [ 908.733664][T24619] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.4698'. [ 908.749268][T24622] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4699'. [ 908.762633][T24622] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4699'. [ 908.783204][T24622] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 908.990101][T24631] netlink: 'syz.9.4703': attribute type 1 has an invalid length. [ 909.129459][T24640] netlink: 'syz.8.4705': attribute type 1 has an invalid length. [ 909.137467][T24640] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4705'. [ 909.581747][T24671] netlink: 'syz.9.4716': attribute type 1 has an invalid length. [ 909.591913][T24671] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4716'. [ 909.601486][T24671] NCSI netlink: No device for ifindex 0 [ 909.883309][T24694] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4713'. [ 909.903336][T24669] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.963214][T24669] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.134757][T24692] bridge0: port 1(macvtap1) entered blocking state [ 910.141839][T24692] bridge0: port 1(macvtap1) entered disabled state [ 910.149258][T24692] macvtap1: entered allmulticast mode [ 910.155362][T24692] bridge0: entered allmulticast mode [ 910.163813][T24692] macvtap1: left allmulticast mode [ 910.170475][T24692] bridge0: left allmulticast mode [ 910.421623][T24677] ip6_vti0 speed is unknown, defaulting to 1000 [ 910.491909][T24669] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.504302][T24669] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.685025][T24703] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4720'. [ 910.712498][T24669] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.725794][T24669] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.915793][T24669] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.944606][T24669] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.986937][T24720] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.4725'. [ 911.005483][T24718] tipc: Started in network mode [ 911.014281][T24718] tipc: Node identity d2a9fa95f70d, cluster identity 4711 [ 911.042072][T24718] tipc: Enabled bearer , priority 0 [ 911.054813][T24721] syzkaller0: entered promiscuous mode [ 911.080886][T24721] syzkaller0: entered allmulticast mode [ 911.112224][T24677] wg1 speed is unknown, defaulting to 1000 [ 911.159827][T24717] tipc: Resetting bearer [ 911.205307][T24717] tipc: Disabling bearer [ 911.290009][T21898] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.314250][T21898] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.374881][T21898] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.383272][T21898] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.494663][T24740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4729'. [ 911.522169][ T7166] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.530909][ T7166] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.571826][ T7166] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.605223][ T7166] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.685546][T24743] ip6_vti0 speed is unknown, defaulting to 1000 [ 911.773848][T24748] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4730'. [ 912.242897][T24743] wg1 speed is unknown, defaulting to 1000 [ 913.181236][T24801] ip6_vti0 speed is unknown, defaulting to 1000 [ 913.781046][T24830] sctp: [Deprecated]: syz.6.4751 (pid 24830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 913.781046][T24830] Use struct sctp_sack_info instead [ 913.958477][T24801] wg1 speed is unknown, defaulting to 1000 [ 914.032858][T24843] __nla_validate_parse: 5 callbacks suppressed [ 914.032879][T24843] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4755'. [ 914.062046][T24841] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4754'. [ 914.077515][T24843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.109920][T24848] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 914.138246][T24841] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4754'. [ 914.158331][T24843] tipc: Enabling of bearer rejected, failed to enable media [ 915.044488][T24879] ip6_vti0 speed is unknown, defaulting to 1000 [ 915.138478][T24889] netlink: 'syz.8.4765': attribute type 5 has an invalid length. [ 915.154519][T24889] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4765'. [ 915.354806][T24896] m1Ie5n: entered promiscuous mode [ 915.388855][T24899] netlink: 'syz.8.4769': attribute type 1 has an invalid length. [ 915.592256][T24899] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 915.666192][T24899] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 915.742274][T24879] wg1 speed is unknown, defaulting to 1000 [ 915.825051][T24917] veth0_to_bridge: entered promiscuous mode [ 915.952631][T24917] veth0_to_bridge: left promiscuous mode [ 916.112850][T24917] ip6_vti0 speed is unknown, defaulting to 1000 [ 916.189180][T24928] x_tables: duplicate underflow at hook 2 [ 916.198518][T24929] x_tables: duplicate underflow at hook 2 [ 916.384924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.414916][T24932] ip6tnl0: Caught tx_queue_len zero misconfig [ 916.601539][T24917] wg1 speed is unknown, defaulting to 1000 [ 916.863855][T24948] nbd: must specify at least one socket [ 916.871080][T24950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 917.358767][T24971] netlink: 'syz.6.4788': attribute type 21 has an invalid length. [ 917.423702][T24959] bond6: option lacp_active: invalid value (8) [ 917.443140][T24959] bond6 (unregistering): Released all slaves [ 917.741137][T24978] xt_connbytes: Forcing CT accounting to be enabled [ 918.157570][T24998] netlink: 'syz.5.4796': attribute type 10 has an invalid length. [ 918.179249][T24998] veth0_vlan: left promiscuous mode [ 918.186702][T25000] IPv6: NLM_F_REPLACE set, but no existing node found! [ 918.205753][T24998] veth0_vlan: entered promiscuous mode [ 918.225293][T24998] team0: Device veth0_vlan failed to register rx_handler [ 918.374876][T25011] geneve3: entered promiscuous mode [ 918.655315][T25027] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4808'. [ 918.855553][T25040] vti0: entered promiscuous mode [ 918.860759][T25040] vti0: entered allmulticast mode [ 918.959501][T25047] netlink: 'syz.6.4813': attribute type 3 has an invalid length. [ 919.316646][T25067] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 919.324540][T25067] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4820'. [ 919.455865][T25071] netlink: 'syz.7.4821': attribute type 1 has an invalid length. [ 919.531726][T25070] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4821'. [ 919.628283][T25086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4824'. [ 919.693955][T25089] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4825'. [ 919.823766][T25098] netlink: 'syz.5.4827': attribute type 11 has an invalid length. [ 919.877611][T25098] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.4827'. [ 920.037138][T25112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4828'. [ 920.221718][T25117] netdevsim netdevsim6: Direct firmware load for /.€ failed with error -2 [ 920.244488][T25117] netdevsim netdevsim6: Falling back to sysfs fallback for: /.€ [ 920.279702][T25119] xfrm0: entered promiscuous mode [ 920.285240][T25119] xfrm0: entered allmulticast mode [ 920.493121][T25125] syzkaller1: entered promiscuous mode [ 920.498819][T25125] syzkaller1: entered allmulticast mode [ 920.721507][T25141] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4841'. [ 920.746424][T25141] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4841'. [ 920.770554][T25141] tipc: Enabling of bearer rejected, failed to enable media [ 920.841658][T25141] syzkaller0: entered promiscuous mode [ 920.847509][T25141] syzkaller0: entered allmulticast mode [ 921.408309][T25156] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4844'. [ 921.521889][T25157] netlink: 83 bytes leftover after parsing attributes in process `syz.6.4844'. [ 923.365724][T25150] bridge_slave_0: left allmulticast mode [ 923.372085][T25150] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.389376][T25150] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 923.555853][T25155] ip6_vti0 speed is unknown, defaulting to 1000 [ 923.831137][T25183] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 923.856638][T25183] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 923.891488][T25183] netlink: 'syz.8.4853': attribute type 7 has an invalid length. [ 923.956196][T25155] wg1 speed is unknown, defaulting to 1000 [ 923.982462][T25183] xt_hashlimit: size too large, truncated to 1048576 [ 924.090826][T25191] wireguard1: entered promiscuous mode [ 924.096951][T25191] wireguard1: entered allmulticast mode [ 924.110660][T25191] team0: Port device wireguard1 added [ 924.716723][T25209] netlink: 25 bytes leftover after parsing attributes in process `syz.6.4862'. [ 924.727578][T25211] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4863'. [ 924.855710][T25222] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4865'. [ 925.027066][T25230] netlink: 'syz.6.4866': attribute type 10 has an invalid length. [ 925.071327][T25236] netlink: 'syz.7.4869': attribute type 5 has an invalid length. [ 925.097123][T25236] ip6erspan0: entered promiscuous mode [ 925.113535][T25233] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4868'. [ 925.213559][T25239] bond3: option resend_igmp: invalid value (2878) [ 925.225193][T25239] bond3: option resend_igmp: allowed values 0 - 255 [ 925.235829][T25239] bond3 (unregistering): Released all slaves [ 925.269591][T25246] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4868'. [ 925.645895][T25260] netlink: 160 bytes leftover after parsing attributes in process `syz.7.4875'. [ 925.800854][T25269] netlink: 'syz.5.4877': attribute type 32 has an invalid length. [ 925.863886][T25271] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4878'. [ 926.102692][T25271] nbd: socks must be embedded in a SOCK_ITEM attr [ 926.333523][T25298] netlink: 'syz.8.4884': attribute type 1 has an invalid length. [ 926.443277][T25302] bond5: (slave bridge4): making interface the new active one [ 926.498371][T25302] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 926.800806][T25316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 926.812980][T25326] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 927.286487][T25349] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 927.305428][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4895'. [ 927.514962][T25359] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 927.622674][T25364] ip6_vti0 speed is unknown, defaulting to 1000 [ 927.713499][T25369] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4902'. [ 927.757174][T25369] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4902'. [ 927.954967][T25380] bridge0: port 1(erspan0) entered blocking state [ 927.961707][T25380] bridge0: port 1(erspan0) entered disabled state [ 927.986209][T25380] erspan0: entered allmulticast mode [ 927.993922][T25380] erspan0: entered promiscuous mode [ 928.006091][T25380] erspan0: left allmulticast mode [ 928.011428][T25380] erspan0: left promiscuous mode [ 928.016828][T25380] bridge0: port 1(erspan0) entered disabled state [ 928.242113][T25391] bond2: peer notification delay (1) is not a multiple of miimon (6), value rounded to 0 ms [ 928.260175][T25391] bond2 (unregistering): Released all slaves [ 928.291623][T25364] wg1 speed is unknown, defaulting to 1000 [ 928.468565][T25403] pim6reg: entered allmulticast mode [ 928.485510][T25403] pim6reg: left allmulticast mode [ 928.828251][T25410] vlan0: entered promiscuous mode [ 928.867073][T25410] gretap0: entered promiscuous mode [ 929.129577][T25418] netlink: 'syz.5.4914': attribute type 11 has an invalid length. [ 929.154343][T25418] netlink: 'syz.5.4914': attribute type 11 has an invalid length. [ 929.368727][T25407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 929.742040][T25456] __nla_validate_parse: 7 callbacks suppressed [ 929.742063][T25456] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4926'. [ 929.762362][T25456] netlink: 'syz.8.4926': attribute type 20 has an invalid length. [ 929.782594][ T72] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.782972][T25456] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4926'. [ 929.801660][T25456] netlink: 'syz.8.4926': attribute type 20 has an invalid length. [ 929.801930][ T72] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.819954][ T72] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.829826][ T72] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.891033][T25462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4928'. [ 929.909337][T25462] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 929.974568][T25467] netlink: 'syz.5.4928': attribute type 2 has an invalid length. [ 930.007768][T25467] !©9: entered promiscuous mode [ 930.109917][T25470] netlink: 'syz.8.4930': attribute type 1 has an invalid length. [ 930.678668][T25483] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4933'. [ 930.705014][T25483] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4933'. [ 930.887621][T25487] syzkaller0: entered promiscuous mode [ 930.893470][T25487] syzkaller0: entered allmulticast mode [ 931.260752][T25494] tipc: Enabled bearer , priority 0 [ 931.275874][ T107] IPVS: starting estimator thread 0... [ 931.282200][T25494] syzkaller0: entered promiscuous mode [ 931.290603][T25494] syzkaller0: entered allmulticast mode [ 931.333690][T25498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 931.374799][T25499] IPVS: using max 27 ests per chain, 64800 per kthread [ 931.420100][T25502] tipc: Resetting bearer [ 931.525942][T25502] tipc: Resetting bearer [ 931.610121][T25502] tipc: Disabling bearer [ 931.670683][T25518] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4944'. [ 932.079591][T25541] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4949'. [ 932.156614][T25541] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4949'. [ 932.196227][T25548] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4953'. [ 932.206374][T25541] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4949'. [ 932.320654][T25541] mac80211_hwsim hwsim44 wlan1: left promiscuous mode [ 932.414334][T25545] team0: Caught tx_queue_len zero misconfig [ 932.504216][ T1159] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.512669][ T1159] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.607217][ T1159] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.624481][ T1159] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.657889][T25552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 932.708885][T25555] vlan3: entered promiscuous mode [ 932.734236][T25555] bond0: entered promiscuous mode [ 932.739676][T25555] bond_slave_0: entered promiscuous mode [ 932.746946][T25555] bond_slave_1: entered promiscuous mode [ 932.810614][ T1159] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.827024][ T1159] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.845756][ T1159] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.857751][ T1159] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.892193][T25554] ip6_vti0 speed is unknown, defaulting to 1000 [ 932.911120][T25572] tipc: Enabled bearer , priority 0 [ 932.941837][T25572] syzkaller0: entered promiscuous mode [ 932.959256][T25572] syzkaller0: entered allmulticast mode [ 933.026487][T25576] netlink: 'syz.5.4959': attribute type 29 has an invalid length. [ 933.066395][T25572] tipc: Resetting bearer [ 933.109325][T25570] tipc: Resetting bearer [ 933.186547][T25570] tipc: Disabling bearer [ 933.219020][T25577] netlink: 'syz.5.4959': attribute type 29 has an invalid length. [ 933.264790][T19682] Bluetooth: hci0: command 0x0406 tx timeout [ 933.274222][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 933.403237][T25554] wg1 speed is unknown, defaulting to 1000 [ 933.466477][T25583] netlink: 'syz.8.4961': attribute type 28 has an invalid length. [ 933.485705][T25583] netlink: 'syz.8.4961': attribute type 3 has an invalid length. [ 933.699225][T25581] veth1_vlan (unregistering): left allmulticast mode [ 933.831982][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 934.055940][T25601] ip6gre0: Caught tx_queue_len zero misconfig [ 934.076032][T25601] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 934.135319][T25606] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 934.216745][T25611] netlink: 'syz.5.4966': attribute type 5 has an invalid length. [ 934.860353][T25646] __nla_validate_parse: 179 callbacks suppressed [ 934.860378][T25646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4978'. [ 935.078357][T25653] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4980'. [ 935.290474][T25662] bridge0: port 1(macvtap1) entered blocking state [ 935.297696][T25662] bridge0: port 1(macvtap1) entered disabled state [ 935.305642][T25662] macvtap1: entered allmulticast mode [ 935.311211][T25662] bridge0: entered allmulticast mode [ 935.320372][T25662] macvtap1: left allmulticast mode [ 935.325845][T25662] bridge0: left allmulticast mode [ 935.571986][T25677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4985'. [ 935.586944][ T6857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.755681][ T6857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.787271][T25687] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4988'. [ 935.887090][T25690] netlink: 'syz.7.4990': attribute type 40 has an invalid length. [ 936.246068][T25700] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4993'. [ 936.280492][T25700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4993'. [ 936.869552][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 937.440230][T25703] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 937.661976][T25751] pimreg3: entered allmulticast mode [ 937.671756][T25751] syzkaller1: entered promiscuous mode [ 937.685435][T25751] syzkaller1: entered allmulticast mode [ 937.696623][T25752] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 938.381892][T25779] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5010'. [ 938.527037][T25784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 938.704672][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 939.135212][T25816] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5019'. [ 939.253696][T25818] netlink: 'syz.5.5020': attribute type 1 has an invalid length. [ 939.263058][T25818] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5020'. [ 939.280886][T25818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5020'. [ 939.751550][T25835] ip6_vti0 speed is unknown, defaulting to 1000 [ 939.773516][T25838] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 939.896354][T25843] netlink: 'syz.8.5025': attribute type 8 has an invalid length. [ 940.250277][T25835] wg1 speed is unknown, defaulting to 1000 [ 940.326594][T25857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5034'. [ 940.366383][T25861] tipc: Trying to set illegal importance in message [ 940.437838][T25857] pimreg3: entered allmulticast mode [ 940.506097][T25866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 940.552167][T25868] netlink: 'syz.5.5037': attribute type 23 has an invalid length. [ 940.722728][T25875] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5041'. [ 940.947873][T25883] xt_TCPMSS: Only works on TCP SYN packets [ 941.468054][T25876] ip6_vti0 speed is unknown, defaulting to 1000 [ 941.535672][T25895] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 941.827155][T25876] wg1 speed is unknown, defaulting to 1000 [ 941.880454][T25904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5047'. [ 941.899093][T25904] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5047'. [ 941.920676][T25902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5049'. [ 941.935864][T25904] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5047'. [ 942.428074][T25916] openvswitch: netlink: IP tunnel TTL not specified. [ 943.116750][T25943] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5059'. [ 943.139879][T25945] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5061'. [ 943.396172][T25945] team0 (unregistering): Failed to send options change via netlink (err -105) [ 943.525503][T25962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5065'. [ 943.861571][T25977] netlink: 'syz.6.5070': attribute type 13 has an invalid length. [ 943.969817][T25979] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5071'. [ 944.547623][T25998] veth5: entered promiscuous mode [ 945.140203][T26019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.692203][T26038] syzkaller0: entered promiscuous mode [ 945.706406][T26038] syzkaller0: entered allmulticast mode [ 945.721989][T26038] __nla_validate_parse: 2 callbacks suppressed [ 945.722011][T26038] netlink: 128 bytes leftover after parsing attributes in process `syz.9.5089'. [ 945.745213][T26040] syzkaller1: entered promiscuous mode [ 945.754570][T26040] syzkaller1: entered allmulticast mode [ 946.031072][T26051] syzkaller0: entered promiscuous mode [ 946.038636][T26051] syzkaller0: entered allmulticast mode [ 946.127332][T26051] vlan0: entered promiscuous mode [ 946.132791][T26051] bridge0: entered promiscuous mode [ 946.750081][T26075] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 946.836778][T26075] bond6: (slave lo): speed changed to 0 on port 1 [ 946.847041][T26075] bond6: (slave lo): Enslaving as a backup interface with an up link [ 946.859775][T26075] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 947.045897][T26084] netlink: 'syz.9.5101': attribute type 12 has an invalid length. [ 947.463006][T26096] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5107'. [ 947.490867][T26096] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5107'. [ 947.689038][T26104] bridge0: port 1(erspan0) entered blocking state [ 947.713446][T26104] bridge0: port 1(erspan0) entered disabled state [ 947.746391][T26104] erspan0: entered allmulticast mode [ 947.757767][T24040] IPVS: starting estimator thread 0... [ 947.794323][T26104] erspan0: entered promiscuous mode [ 947.857923][T26106] erspan0: left allmulticast mode [ 947.864278][T26106] erspan0: left promiscuous mode [ 947.868591][T26107] IPVS: using max 24 ests per chain, 57600 per kthread [ 947.885296][T26106] bridge0: port 1(erspan0) entered disabled state [ 948.135173][T26119] netlink: 'syz.5.5114': attribute type 2 has an invalid length. [ 948.143477][T26118] netlink: 'syz.5.5114': attribute type 2 has an invalid length. [ 948.152555][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5114'. [ 948.162133][T26118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5114'. [ 948.172119][T26119] netlink: 'syz.5.5114': attribute type 2 has an invalid length. [ 948.181649][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5114'. [ 948.533075][T26144] syzkaller0: Caught tx_queue_len zero misconfig [ 948.956725][T26168] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5126'. [ 949.366957][T26190] ip6_vti0 speed is unknown, defaulting to 1000 [ 949.429445][T26193] batman_adv: batadv0: Adding interface: vlan0 [ 949.453188][T26193] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.504211][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 949.510443][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 949.659815][T26193] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 949.736984][T26201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 949.758710][T26190] wg1 speed is unknown, defaulting to 1000 [ 949.845367][T26193] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5134'. [ 949.860930][T26193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5134'. [ 949.872545][T26193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5134'. [ 949.887900][T26193] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.899334][T26193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 950.092170][T26206] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 950.501724][T26215] netlink: 'syz.5.5140': attribute type 1 has an invalid length. [ 950.730788][T26226] ip6_vti0 speed is unknown, defaulting to 1000 [ 951.240524][T26226] wg1 speed is unknown, defaulting to 1000 [ 951.842264][T26260] __nla_validate_parse: 16 callbacks suppressed [ 951.842286][T26260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5147'. [ 951.877125][T26260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5147'. [ 951.927503][T26262] pim6reg1: entered promiscuous mode [ 951.946142][T26262] pim6reg1: entered allmulticast mode [ 952.660226][T26272] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5156'. [ 952.727913][T26283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5158'. [ 953.246299][T26288] ip6_vti0 speed is unknown, defaulting to 1000 [ 953.456741][T26303] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 953.537516][T26302] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 953.818824][T26310] tipc: Enabling of bearer rejected, failed to enable media [ 954.584219][T26288] wg1 speed is unknown, defaulting to 1000 [ 954.652099][T26303] ip6_vti0 speed is unknown, defaulting to 1000 [ 954.866581][T26332] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5173'. [ 954.923499][T26335] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5173'. [ 955.302993][T26303] wg1 speed is unknown, defaulting to 1000 [ 956.263583][T26368] netlink: 'syz.8.5182': attribute type 29 has an invalid length. [ 956.295593][T26368] netlink: 'syz.8.5182': attribute type 29 has an invalid length. [ 956.420304][T26372] netlink: 'syz.6.5184': attribute type 18 has an invalid length. [ 956.443072][T26372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5184'. [ 956.466524][T26372] netlink: 'syz.6.5184': attribute type 18 has an invalid length. [ 956.480089][T26372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5184'. [ 956.613653][T26382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.657100][T26380] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5188'. [ 956.793666][T26391] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5192'. [ 956.851228][T26394] __nla_validate_parse: 3 callbacks suppressed [ 956.851251][T26394] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5193'. [ 956.962157][T26400] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 956.986753][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5191'. [ 957.152388][T26410] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5197'. [ 957.307051][T26417] netlink: zone id is out of range [ 957.331321][T26417] netlink: zone id is out of range [ 957.337332][T26417] netlink: zone id is out of range [ 957.342515][T26417] netlink: zone id is out of range [ 957.359089][T26417] netlink: zone id is out of range [ 957.365677][T26417] netlink: zone id is out of range [ 958.095925][T26453] x_tables: duplicate underflow at hook 3 [ 958.150497][T26454] bond0: (slave dummy0): Releasing backup interface [ 958.192773][T26457] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5210'. [ 959.239676][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5219'. [ 959.723091][T26524] ip6_vti0 speed is unknown, defaulting to 1000 [ 960.241250][T26551] net_ratelimit: 2 callbacks suppressed [ 960.241275][T26551] openvswitch: netlink: Tunnel attr 257 out of range max 16 [ 960.272047][T26552] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 960.459952][T26561] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5236'. [ 960.661766][T26570] netlink: 260 bytes leftover after parsing attributes in process `syz.8.5239'. [ 960.677049][T26567] netlink: 'syz.6.5238': attribute type 1 has an invalid length. [ 960.686085][T26524] wg1 speed is unknown, defaulting to 1000 [ 960.725210][T26567] netlink: 'syz.6.5238': attribute type 7 has an invalid length. [ 960.743908][T26574] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5240'. [ 960.790258][T26567] netlink: 'syz.6.5238': attribute type 8 has an invalid length. [ 960.810334][T26567] netlink: 208 bytes leftover after parsing attributes in process `syz.6.5238'. [ 961.915302][T26603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 962.207638][T26615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5251'. [ 962.448710][T26620] ip6_vti0 speed is unknown, defaulting to 1000 [ 962.521855][T26629] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5255'. [ 962.665647][T26629] mac80211_hwsim hwsim42 wlan1: Device is already in use. [ 962.740167][T26620] wg1 speed is unknown, defaulting to 1000 [ 962.859485][T26629] bond0: (slave wlan1): Releasing backup interface [ 962.887393][T26640] netlink: 'syz.7.5257': attribute type 1 has an invalid length. [ 962.920917][T26629] mac80211_hwsim hwsim42 wlan1 (unregistering): left promiscuous mode [ 963.108813][T26643] bridge: RTM_NEWNEIGH with invalid ether address [ 963.617161][T26672] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.5267'. [ 963.744377][T26672] block nbd1: server does not support multiple connections per device. [ 963.775126][T26672] block nbd1: shutting down sockets [ 963.891142][T26672] netlink: 'syz.9.5267': attribute type 10 has an invalid length. [ 963.914090][T26672] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5267'. [ 965.155206][T26757] netlink: 'syz.5.5287': attribute type 1 has an invalid length. [ 965.695068][T26778] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5292'. [ 965.773519][T26780] ip6_vti0 speed is unknown, defaulting to 1000 [ 965.809032][T26781] tipc: Started in network mode [ 965.838113][T26781] tipc: Node identity e0000001, cluster identity 4711 [ 965.849104][T26781] tipc: Enabling of bearer rejected, failed to enable media [ 966.247692][T26795] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5296'. [ 966.319868][T26780] wg1 speed is unknown, defaulting to 1000 [ 966.361071][T26797] netlink: 'syz.8.5297': attribute type 39 has an invalid length. [ 966.961339][T26808] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5300'. [ 967.000597][T26813] pim6reg: entered allmulticast mode [ 967.047747][T26812] pim6reg: left allmulticast mode [ 967.376223][T26823] netlink: 'syz.8.5304': attribute type 12 has an invalid length. [ 967.402172][T26825] netlink: 'syz.5.5306': attribute type 1 has an invalid length. [ 967.425456][T26823] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5304'. [ 967.435412][T26825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 967.881180][T26857] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5314'. [ 968.150443][T26870] pim6reg: entered allmulticast mode [ 968.171256][T26867] pim6reg: left allmulticast mode [ 968.375515][T26873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5319'. [ 968.398766][T26873] : entered promiscuous mode [ 968.472955][T26879] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5320'. [ 968.728801][T26889] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5324'. [ 968.856445][T26895] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 968.903917][T26897] netlink: 'syz.6.5327': attribute type 4 has an invalid length. [ 968.942693][T26897] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5327'. [ 969.185532][T26902] xt_hashlimit: max too large, truncated to 1048576 [ 969.437946][T26922] netlink: 'syz.8.5334': attribute type 9 has an invalid length. [ 969.437946][T26920] netlink: 'syz.8.5334': attribute type 9 has an invalid length. [ 969.437977][T26920] netlink: 'syz.8.5334': attribute type 11 has an invalid length. [ 969.447388][T26922] netlink: 'syz.8.5334': attribute type 11 has an invalid length. [ 969.447416][T26922] netlink: 'syz.8.5334': attribute type 12 has an invalid length. [ 969.447436][T26922] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.5334'. [ 969.447682][T26922] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5334'. [ 969.511919][T26923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5335'. [ 969.527275][T26920] netlink: 'syz.8.5334': attribute type 12 has an invalid length. [ 969.539581][T26920] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.5334'. [ 969.584746][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 970.349698][T26957] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 970.375506][T26950] bond7: entered promiscuous mode [ 970.380969][T26950] bridge8: entered promiscuous mode [ 970.387574][T26950] bond7: entered allmulticast mode [ 970.393602][T26950] bridge8: entered allmulticast mode [ 970.730011][T26970] ip6_vti0 speed is unknown, defaulting to 1000 [ 971.127197][T26981] ip6_vti0 speed is unknown, defaulting to 1000 [ 971.135395][T26970] wg1 speed is unknown, defaulting to 1000 [ 971.307230][T26987] netlink: 'syz.8.5354': attribute type 1 has an invalid length. [ 971.404788][T21117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.774466][T21117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.879190][T26981] wg1 speed is unknown, defaulting to 1000 [ 972.071925][T27009] tipc: Enabled bearer , priority 0 [ 972.088537][T27009] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 972.103093][T27009] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 972.302184][T27009] tipc: Resetting bearer [ 972.312407][T27009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 972.648025][T27033] xt_hashlimit: size too large, truncated to 1048576 [ 972.658651][T27033] xt_hashlimit: max too large, truncated to 1048576 [ 972.757791][T27033] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 973.097695][T27043] tipc: Resetting bearer [ 973.135395][T27043] netlink: 'syz.6.5369': attribute type 4 has an invalid length. [ 973.175188][T27044] netlink: 'syz.6.5369': attribute type 4 has an invalid length. [ 973.205617][T21117] tipc: Node number set to 3758096385 [ 973.482622][T27067] __nla_validate_parse: 15 callbacks suppressed [ 973.482649][T27067] netlink: 14345 bytes leftover after parsing attributes in process `syz.8.5376'. [ 973.508229][T27064] ip6_vti0 speed is unknown, defaulting to 1000 [ 973.558089][T27068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 974.163210][T27086] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 974.416847][T27064] wg1 speed is unknown, defaulting to 1000 [ 974.638649][T27100] validate_nla: 1 callbacks suppressed [ 974.638671][T27100] netlink: 'syz.5.5385': attribute type 12 has an invalid length. [ 974.655679][T27100] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5385'. [ 974.711810][T27109] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5388'. [ 974.735883][T27105] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5387'. [ 975.450605][T27143] netlink: 'syz.5.5395': attribute type 7 has an invalid length. [ 975.556508][T27149] netlink: 'syz.5.5395': attribute type 9 has an invalid length. [ 975.556536][T27149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5395'. [ 975.801364][T27168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5401'. [ 976.108927][T27173] ip6_vti0 speed is unknown, defaulting to 1000 [ 976.211402][T27186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5404'. [ 976.239595][T27187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5404'. [ 976.272900][T27186] syzkaller1: entered promiscuous mode [ 976.310462][T27186] syzkaller1: entered allmulticast mode [ 976.337733][T27186] netlink: 'syz.5.5404': attribute type 1 has an invalid length. [ 976.347994][T27186] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5404'. [ 976.407181][T27186] netlink: 'syz.5.5404': attribute type 3 has an invalid length. [ 976.447628][T27186] netlink: 'syz.5.5404': attribute type 1 has an invalid length. [ 976.474163][T27186] netlink: 'syz.5.5404': attribute type 6 has an invalid length. [ 976.493446][T27186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5404'. [ 976.539088][T27195] xt_bpf: check failed: parse error [ 976.812925][T27177] ip6_vti0 speed is unknown, defaulting to 1000 [ 976.822227][T27173] wg1 speed is unknown, defaulting to 1000 [ 977.036062][T27215] netlink: 'syz.8.5411': attribute type 1 has an invalid length. [ 977.508377][T27208] ip6_vti0 speed is unknown, defaulting to 1000 [ 977.626647][T27236] SET target dimension over the limit! [ 977.661203][T27236] netlink: 'syz.8.5417': attribute type 1 has an invalid length. [ 977.710920][T27236] netlink: 'syz.8.5417': attribute type 2 has an invalid length. [ 977.822924][T27241] netlink: 'syz.6.5418': attribute type 11 has an invalid length. [ 977.977924][T27177] wg1 speed is unknown, defaulting to 1000 [ 978.006439][T27208] wg1 speed is unknown, defaulting to 1000 [ 978.061285][T27238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.119979][T27280] __nla_validate_parse: 3 callbacks suppressed [ 979.120003][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5428'. [ 979.266633][T27289] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5432'. [ 979.749580][T27307] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5436'. [ 979.807405][T27307] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5436'. [ 980.188986][T27335] delete_channel: no stack [ 980.581654][T27350] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5444'. [ 980.632586][T27348] ip6_vti0 speed is unknown, defaulting to 1000 [ 981.473889][T27384] lo: Caught tx_queue_len zero misconfig [ 981.611022][T27348] wg1 speed is unknown, defaulting to 1000 [ 982.046595][T27402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 982.087992][T27404] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 982.121635][T27415] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 982.132857][T27410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5459'. [ 982.143231][T27410] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5459'. [ 982.608448][T27433] ip6_vti0 speed is unknown, defaulting to 1000 [ 982.626645][T27437] validate_nla: 3 callbacks suppressed [ 982.626668][T27437] netlink: 'syz.6.5468': attribute type 23 has an invalid length. [ 982.747349][T27442] syzkaller0: entered promiscuous mode [ 982.772836][T27442] syzkaller0: entered allmulticast mode [ 982.961631][T27453] 8021q: VLANs not supported on wg1 [ 983.094776][T27433] wg1 speed is unknown, defaulting to 1000 [ 983.229897][T27460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5474'. [ 983.375576][T27463] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5475'. [ 983.888690][T27477] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 984.228431][T27495] ip6_vti0 speed is unknown, defaulting to 1000 [ 984.630056][T27495] wg1 speed is unknown, defaulting to 1000 [ 985.169065][T27532] xt_CONNSECMARK: invalid mode: 0 [ 986.670618][T27581] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 987.283651][T27622] batman_adv: batadv0: Adding interface: dummy0 [ 987.291220][T27622] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.341453][T27622] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 987.359504][T27625] netlink: 212304 bytes leftover after parsing attributes in process `syz.6.5514'. [ 987.394916][T27625] openvswitch: netlink: Message has 6 unknown bytes. [ 987.503832][T27633] tunl0: Caught tx_queue_len zero misconfig [ 987.544110][T27633] netlink: 288 bytes leftover after parsing attributes in process `syz.9.5510'. [ 987.583340][T27635] netlink: 'syz.6.5517': attribute type 3 has an invalid length. [ 987.635994][T27637] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5516'. [ 987.666444][T27639] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5518'. [ 987.712418][T27637] vlan0: entered promiscuous mode [ 987.743710][T27637] macvtap0: entered promiscuous mode [ 987.948042][T27633] sctp: [Deprecated]: syz.9.5510 (pid 27633) Use of int in max_burst socket option deprecated. [ 987.948042][T27633] Use struct sctp_assoc_value instead [ 988.146197][T27653] mac80211_hwsim hwsim48 syzkaller0: left promiscuous mode [ 988.164237][T27653] mac80211_hwsim hwsim48 syzkaller0: left allmulticast mode [ 988.651855][T27661] netlink: 'syz.6.5522': attribute type 2 has an invalid length. [ 988.882303][T27672] tipc: Enabled bearer , priority 0 [ 988.918735][T27672] syzkaller0: entered promiscuous mode [ 988.938697][T27672] syzkaller0: entered allmulticast mode [ 989.075680][T27672] tipc: Resetting bearer [ 989.085278][T27679] netlink: 'syz.6.5526': attribute type 1 has an invalid length. [ 989.131085][T27670] tipc: Resetting bearer [ 989.176372][T27670] tipc: Disabling bearer [ 989.236073][T27679] bond3: entered promiscuous mode [ 989.242770][T27679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 989.278823][T27679] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5526'. [ 989.305488][T27679] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5526'. [ 989.329483][T27679] block nbd0: reconnected socket [ 989.401827][ T7168] team0: left allmulticast mode [ 989.418649][ T7168] team0: left promiscuous mode [ 989.443960][ T7168] bridge0: port 1(team0) entered disabled state [ 989.636931][T27700] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5533'. [ 989.637027][ T7168] ip6gretap0 (unregistering): left allmulticast mode [ 989.648838][T27700] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5533'. [ 989.758216][ T7168] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 989.842614][ T5829] block nbd0: Receive control failed (result -32) [ 989.957298][ T7166] smc: removing ib device syz2 [ 990.655733][ T7168] dvmrp6 (unregistering): left allmulticast mode [ 990.723962][ T7168] dvmrp0 (unregistering): left allmulticast mode [ 991.504758][ T7168] team0: Port device bridge5 removed [ 991.831067][ T7168] bond1 (unregistering): Released all slaves [ 992.023731][ T7168] bond2 (unregistering): (slave veth7): Releasing active interface [ 992.035756][ T7168] bond2 (unregistering): Released all slaves [ 992.217369][ T7168] bond3 (unregistering): Released all slaves [ 992.402666][ T7168] bond4 (unregistering): Released all slaves [ 992.598700][ T7168] bond5 (unregistering): Released all slaves [ 992.617307][ T7168] bond6 (unregistering): Released all slaves [ 992.834209][ T7168] bond7 (unregistering): Released all slaves [ 993.011277][ T7168] bond8 (unregistering): Released all slaves [ 993.187699][ T7168] bond0 (unregistering): Released all slaves [ 993.203815][ T107] ip6_vti0 speed is unknown, defaulting to 1000 [ 993.211788][ T107] syz2: Port: 1 Link DOWN [ 993.258858][T27710] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 993.395118][T27725] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5538'. [ 993.538194][ T7168] !: left promiscuous mode [ 993.754517][ T7168] : left promiscuous mode [ 993.883579][ T7168] tipc: Left network mode [ 994.248559][T27760] netlink: 'syz.7.5546': attribute type 1 has an invalid length. [ 994.267566][T27761] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5547'. [ 994.337705][T27760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 994.569087][T27766] bond3: (slave geneve4): making interface the new active one [ 994.613346][T27766] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 994.661958][T27769] tap0: tun_chr_ioctl cmd 2147767506 [ 994.689731][T17932] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.853557][T17932] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.902280][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5551'. [ 994.928326][T27775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 994.940673][T17932] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.989289][ T7168] hsr_slave_0: left promiscuous mode [ 995.042126][ T7168] hsr_slave_1: left promiscuous mode [ 995.075901][ T7168] veth1_macvtap: left allmulticast mode [ 995.205808][T27791] netlink: 'syz.7.5555': attribute type 1 has an invalid length. [ 995.225260][T27791] netlink: 'syz.7.5555': attribute type 2 has an invalid length. [ 995.257097][T27791] netlink: 'syz.7.5555': attribute type 1 has an invalid length. [ 995.343542][T27802] xt_bpf: check failed: parse error [ 997.462085][T17932] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.496802][T27812] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 997.855837][T27845] Bluetooth: MGMT ver 1.23 [ 997.959961][T27848] xt_TCPMSS: Only works on TCP SYN packets [ 997.980399][T27849] netlink: 'syz.8.5565': attribute type 10 has an invalid length. [ 997.994483][T27849] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5565'. [ 998.109577][T27848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.120355][T27848] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 998.165651][ T7168] IPVS: stop unused estimator thread 0... [ 998.310052][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 998.388133][T27859] wg1 speed is unknown, defaulting to 1000 [ 998.709148][T27874] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5572'. [ 998.996194][T27882] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 999.055910][T27882] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 999.068487][T27882] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 999.220317][T27889] netlink: 124 bytes leftover after parsing attributes in process `syz.7.5575'. [ 999.264173][T27889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 999.373621][T27894] sit0: entered promiscuous mode [ 999.509611][T27894] netlink: 'syz.5.5577': attribute type 1 has an invalid length. [ 999.525180][T27894] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5577'. [ 999.591610][T27901] netlink: 'syz.6.5578': attribute type 11 has an invalid length. [ 999.630766][T27901] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.5578'. [ 999.757323][T27908] IPVS: length: 240 != 8 [ 999.842081][T27915] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5579'. [ 999.923811][T27919] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5583'. [ 999.940782][T27919] netlink: 'syz.9.5583': attribute type 1 has an invalid length. [ 999.972863][T27919] netlink: 175 bytes leftover after parsing attributes in process `syz.9.5583'. [ 1000.137397][T27930] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5584'. [ 1001.075297][T27956] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5594'. [ 1001.125699][T27956] xt_connbytes: Forcing CT accounting to be enabled [ 1001.201963][T27962] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5596'. [ 1001.213276][T27962] netlink: 'syz.8.5596': attribute type 1 has an invalid length. [ 1001.259939][T27962] batadv_slave_0: left promiscuous mode [ 1001.307296][T27962] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1001.318004][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.343538][T27962] mac80211_hwsim hwsim47 wlan0: left promiscuous mode [ 1001.383950][T27962] vti0: left promiscuous mode [ 1001.499153][T27970] wg1 speed is unknown, defaulting to 1000 [ 1001.528118][T27967] netlink: 'syz.6.5598': attribute type 6 has an invalid length. [ 1001.565499][T27967] netlink: 'syz.6.5598': attribute type 6 has an invalid length. [ 1001.608960][T27972] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1001.675005][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.838791][T27978] netlink: 'syz.5.5600': attribute type 7 has an invalid length. [ 1001.849386][T27978] netlink: 'syz.5.5600': attribute type 8 has an invalid length. [ 1002.280567][T28003] netlink: 'syz.7.5606': attribute type 1 has an invalid length. [ 1002.589816][T28017] Cannot find del_set index 2 as target [ 1002.858563][T28026] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1002.879877][T28026] bond4: (slave lo): Enslaving as a backup interface with an up link [ 1002.926825][T28026] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1003.099785][T28033] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1003.107416][T28033] dvmrp1: linktype set to 804 [ 1003.206638][T28038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.240928][T28038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.252245][T28038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.264843][T28038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.275488][T28041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.286135][T28038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.319605][T28038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.364333][T28038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.454318][T28038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.505236][T28038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.626342][T28038] tunl0: Caught tx_queue_len zero misconfig [ 1003.815388][T28045] sctp: [Deprecated]: syz.6.5619 (pid 28045) Use of int in max_burst socket option deprecated. [ 1003.815388][T28045] Use struct sctp_assoc_value instead [ 1004.457785][T28071] wg1 speed is unknown, defaulting to 1000 [ 1004.508797][T28070] wg1 speed is unknown, defaulting to 1000 [ 1004.556941][T28078] __nla_validate_parse: 10 callbacks suppressed [ 1004.556967][T28078] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5626'. [ 1004.770815][T28082] netlink: 280 bytes leftover after parsing attributes in process `syz.6.5627'. [ 1004.952870][T28052] bond7: option miimon: invalid value (18446744073709551607) [ 1004.962638][T28052] bond7: option miimon: allowed values 0 - 2147483647 [ 1004.994266][T28079] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5623'. [ 1004.998469][T28052] bond7 (unregistering): Released all slaves [ 1005.042937][T28091] Bluetooth: MGMT ver 1.23 [ 1005.238760][T28042] wg1 speed is unknown, defaulting to 1000 [ 1005.452616][T28101] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5633'. [ 1005.702266][T28112] sctp: [Deprecated]: syz.5.5637 (pid 28112) Use of int in max_burst socket option deprecated. [ 1005.702266][T28112] Use struct sctp_assoc_value instead [ 1005.830291][T28117] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5638'. [ 1005.857410][T28121] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5640'. [ 1005.872095][T28115] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.967858][T28121] wg1 speed is unknown, defaulting to 1000 [ 1006.041252][T28115] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.113417][T28115] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.263321][T28115] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.666683][T17931] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.825528][ T5971] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.898237][ T5971] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.927061][ T5971] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.105336][ T5829] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1007.115079][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 1007.805737][T28183] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5654'. [ 1007.827145][T28183] netlink: 'syz.6.5654': attribute type 2 has an invalid length. [ 1007.931815][T28161] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1007.994625][T28161] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.099681][T28180] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5654'. [ 1008.128577][T28177] syzkaller0: entered promiscuous mode [ 1008.136051][T28177] syzkaller0: entered allmulticast mode [ 1008.291632][ T30] audit: type=1800 audit(1768885103.554:14): pid=28194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5655" name="memory.events" dev="tmpfs" ino=2249 res=0 errno=0 [ 1008.470542][T28161] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.493865][T28161] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.646473][T28201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5657'. [ 1008.734235][T28161] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.749357][T28206] netlink: 'syz.7.5659': attribute type 21 has an invalid length. [ 1008.766286][T28206] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5659'. [ 1008.782614][T28161] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.846154][T28201] tipc: Enabled bearer , priority 10 [ 1008.863555][T28206] netlink: 'syz.7.5659': attribute type 5 has an invalid length. [ 1008.889663][T28206] netlink: 'syz.7.5659': attribute type 6 has an invalid length. [ 1008.987298][T28161] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.034514][T28161] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.196037][T28215] mac80211_hwsim hwsim43 ªªªªª;: renamed from wlan0 [ 1009.373261][T17931] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.385148][T17931] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.424596][T17931] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.436919][T17931] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.511297][ T1142] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.533313][ T1142] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.651217][T17931] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.660687][T17931] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.887777][T28258] __nla_validate_parse: 3 callbacks suppressed [ 1009.887799][T28258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5668'. [ 1010.005030][T28248] wg1: left promiscuous mode [ 1010.010397][T28248] wg1: left allmulticast mode [ 1010.032529][T28248] veth1_macvtap: left allmulticast mode [ 1010.070379][T28248] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1010.093023][T28270] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5666'. [ 1010.103940][T28248] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1010.116541][T28248] tipc: Resetting bearer [ 1010.126825][T28248] syzkaller0: left promiscuous mode [ 1010.132425][T28248] syzkaller0: left allmulticast mode [ 1010.162044][T28248] bond2: left promiscuous mode [ 1010.170712][T28274] netlink: 'syz.9.5666': attribute type 1 has an invalid length. [ 1010.181371][T28248] gre1: left promiscuous mode [ 1010.215729][T28248] ip6tnl2: left promiscuous mode [ 1010.232037][T28248] ip6tnl2: left allmulticast mode [ 1010.355801][T28248] bond3: left promiscuous mode [ 1010.371793][T28239] wg1 speed is unknown, defaulting to 1000 [ 1010.383899][T28258] hsr_slave_0: left promiscuous mode [ 1010.413176][T28258] hsr_slave_1: left promiscuous mode [ 1010.450764][T22976] tipc: Node number set to 631569045 [ 1010.500724][T28274] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1010.512613][T17931] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.549965][T17931] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.562368][T17931] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.695299][T17931] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.846481][T28288] netlink: 288 bytes leftover after parsing attributes in process `syz.7.5672'. [ 1011.235103][T28305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5679'. [ 1011.247099][T28305] netlink: 'syz.7.5679': attribute type 7 has an invalid length. [ 1011.285661][T28305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5679'. [ 1011.325256][T28305] netlink: 'syz.7.5679': attribute type 7 has an invalid length. [ 1011.387049][T28310] netlink: 'syz.9.5681': attribute type 3 has an invalid length. [ 1011.430848][T28315] netlink: 'syz.9.5681': attribute type 3 has an invalid length. [ 1011.530688][T28317] wg1 speed is unknown, defaulting to 1000 [ 1011.583007][T28312] netlink: 'syz.5.5682': attribute type 1 has an invalid length. [ 1011.918178][T28329] ip6gre1: entered promiscuous mode [ 1011.935978][T28329] ip6gre1: entered allmulticast mode [ 1012.115710][T17932] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1012.131265][T17932] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1012.145053][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1012.306245][T28337] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5689'. [ 1012.332923][T28339] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5690'. [ 1012.415123][T28337] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1012.423806][T28339] veth0_vlan: left promiscuous mode [ 1012.432572][T28339] veth0_vlan: entered promiscuous mode [ 1012.443481][T28339] team0: Device veth0_vlan failed to register rx_handler [ 1012.662968][T28345] wg1 speed is unknown, defaulting to 1000 [ 1012.978137][T28352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5693'. [ 1013.035630][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1013.108047][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1013.127486][T28354] validate_nla: 2 callbacks suppressed [ 1013.127510][T28354] netlink: 'syz.7.5694': attribute type 1 has an invalid length. [ 1013.212843][T28354] bond4: entered promiscuous mode [ 1013.219117][T28354] bond4: entered allmulticast mode [ 1013.226390][T28354] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1013.290183][T28358] macvlan0: entered promiscuous mode [ 1013.298117][T28358] macvlan0: entered allmulticast mode [ 1013.313439][T28358] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1013.422573][T28360] 0ªî{X¹¦: left allmulticast mode [ 1013.802061][T28360] veth0_to_bond: left allmulticast mode [ 1014.859333][T28360] vlan2: left promiscuous mode [ 1014.875338][T28360] bond0: left promiscuous mode [ 1014.895885][T28360] geneve2: left promiscuous mode [ 1014.901536][T28360] geneve2: left allmulticast mode [ 1014.923861][T28360] geneve3: left promiscuous mode [ 1014.942063][T28360] geneve4: left promiscuous mode [ 1014.951722][T28360] geneve4: left allmulticast mode [ 1014.968199][T28360] bond1: left promiscuous mode [ 1014.973613][T28360] bond1: left allmulticast mode [ 1015.039319][T28375] net_ratelimit: 36 callbacks suppressed [ 1015.039346][T28375] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1015.228781][T28360] bond7: left promiscuous mode [ 1015.235265][T28360] bridge8: left promiscuous mode [ 1015.241252][T28360] bond7: left allmulticast mode [ 1015.249610][T28360] bridge8: left allmulticast mode [ 1015.385839][ T13] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.406206][ T13] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.423372][ T13] netdevsim netdevsim9 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1015.455879][ T13] netdevsim netdevsim9 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1015.486783][ T13] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.510810][ T13] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.521569][ T13] netdevsim netdevsim9 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1015.533222][ T13] netdevsim netdevsim9 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1015.562630][T28375] vlan1: entered promiscuous mode [ 1015.571572][T28375] hsr_slave_1: entered promiscuous mode [ 1015.582473][T28375] vlan1: entered allmulticast mode [ 1015.596276][T28375] hsr_slave_1: entered allmulticast mode [ 1015.605084][ T13] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.636551][ T13] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.652602][ T13] netdevsim netdevsim9 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1015.693570][ T13] netdevsim netdevsim9 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1015.728994][ T13] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1015.755432][ T13] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.779034][ T13] netdevsim netdevsim9 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1015.801299][ T13] netdevsim netdevsim9 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1015.819639][T28379] wg1 speed is unknown, defaulting to 1000 [ 1016.297469][ T30] audit: type=1800 audit(1768885111.564:15): pid=28405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5706" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2291 res=0 errno=0 [ 1016.332801][T28406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5707'. [ 1016.544649][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1017.280453][T28442] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1017.301858][T28444] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 [ 1017.309008][T28442] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1017.377165][T28442] dvmrp0: entered allmulticast mode [ 1017.704587][ T30] audit: type=1804 audit(1768885112.964:16): pid=28455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5720" name="/newroot/447/cgroup.controllers" dev="tmpfs" ino=2317 res=1 errno=0 [ 1017.764150][ T30] audit: type=1800 audit(1768885112.994:17): pid=28455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5720" name="cgroup.controllers" dev="tmpfs" ino=2317 res=0 errno=0 [ 1017.915743][T28464] sctp: [Deprecated]: syz.5.5717 (pid 28464) Use of int in max_burst socket option deprecated. [ 1017.915743][T28464] Use struct sctp_assoc_value instead [ 1018.118948][T28456] netlink: 288 bytes leftover after parsing attributes in process `syz.5.5717'. [ 1018.230226][T28469] bond0: (slave macvlan0): Opening slave failed [ 1018.484252][T28476] wg1 speed is unknown, defaulting to 1000 [ 1018.533471][T28478] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 1018.666617][T28476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5725'. [ 1018.863939][T28492] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5730'. [ 1018.908162][T28495] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5729'. [ 1018.946361][T28498] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5728'. [ 1019.063660][T28508] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5732'. [ 1019.095624][T28498] netlink: 31 bytes leftover after parsing attributes in process `syz.6.5728'. [ 1019.113513][T28508] netlink: 'syz.5.5732': attribute type 1 has an invalid length. [ 1019.133373][T28508] erspan2: entered allmulticast mode [ 1019.748161][T28533] wg1 speed is unknown, defaulting to 1000 [ 1019.964132][T28545] IPVS: set_ctl: invalid protocol: 43 172.30.1.8:20002 [ 1020.008164][T28542] wg1 speed is unknown, defaulting to 1000 [ 1020.683223][T28565] dvmrp1: entered allmulticast mode [ 1020.700133][T28568] dvmrp1: left allmulticast mode [ 1021.153267][T28589] netlink: 'syz.5.5758': attribute type 1 has an invalid length. [ 1021.205762][T28579] pim6reg1: entered promiscuous mode [ 1021.209604][T28589] nbd: error processing sock list [ 1021.242154][T28579] pim6reg1: entered allmulticast mode [ 1021.707470][T28581] delete_channel: no stack [ 1021.713031][T28581] delete_channel: no stack [ 1021.728760][T28581] delete_channel: no stack [ 1021.750533][T28581] delete_channel: no stack [ 1021.779486][T28581] delete_channel: no stack [ 1021.796433][T28581] delete_channel: no stack [ 1021.804422][T28581] delete_channel: no stack [ 1021.809555][T28581] delete_channel: no stack [ 1021.835519][T28581] delete_channel: no stack [ 1021.841868][T28581] delete_channel: no stack [ 1021.872062][T28581] delete_channel: no stack [ 1021.882515][T28581] delete_channel: no stack [ 1021.896973][T28581] delete_channel: no stack [ 1021.906307][T28581] delete_channel: no stack [ 1021.925685][T28622] netlink: 'syz.6.5766': attribute type 1 has an invalid length. [ 1021.951648][T28625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1021.955250][T28581] delete_channel: no stack [ 1021.976818][T28581] delete_channel: no stack [ 1021.982231][T28581] delete_channel: no stack [ 1022.001551][T28581] delete_channel: no stack [ 1022.016938][T28581] delete_channel: no stack [ 1022.018401][T28622] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1022.043081][T28581] delete_channel: no stack [ 1022.068562][T28581] delete_channel: no stack [ 1022.073257][T28581] delete_channel: no stack [ 1022.107347][T28581] delete_channel: no stack [ 1022.112300][T28581] delete_channel: no stack [ 1022.122572][T28581] delete_channel: no stack [ 1022.139037][T28581] delete_channel: no stack [ 1022.143852][T28581] delete_channel: no stack [ 1022.179171][T28581] delete_channel: no stack [ 1022.188064][T28581] delete_channel: no stack [ 1022.214735][T28581] delete_channel: no stack [ 1022.229907][T28581] delete_channel: no stack [ 1022.250237][T28581] delete_channel: no stack [ 1022.287758][T28581] delete_channel: no stack [ 1022.293668][T28581] delete_channel: no stack [ 1022.303502][T28581] delete_channel: no stack [ 1022.339643][T28581] delete_channel: no stack [ 1022.349791][T28581] delete_channel: no stack [ 1022.374391][T28581] delete_channel: no stack [ 1022.379092][T28581] delete_channel: no stack [ 1022.403457][T28581] delete_channel: no stack [ 1022.413775][T28581] delete_channel: no stack [ 1022.426004][T28581] delete_channel: no stack [ 1022.437956][T28581] delete_channel: no stack [ 1022.448942][T28581] delete_channel: no stack [ 1022.462068][T28581] delete_channel: no stack [ 1022.476331][T28581] delete_channel: no stack [ 1022.490595][T28581] delete_channel: no stack [ 1022.500379][T28581] delete_channel: no stack [ 1022.511959][T28581] delete_channel: no stack [ 1022.518344][T28581] delete_channel: no stack [ 1022.523509][T28581] delete_channel: no stack [ 1022.578220][T28653] __nla_validate_parse: 5 callbacks suppressed [ 1022.578310][T28653] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5776'. [ 1022.634846][T28581] delete_channel: no stack [ 1022.644869][T28581] delete_channel: no stack [ 1022.649686][T28581] delete_channel: no stack [ 1022.680073][T28581] delete_channel: no stack [ 1022.697799][T28581] delete_channel: no stack [ 1022.702587][T28581] delete_channel: no stack [ 1022.835348][T28581] delete_channel: no stack [ 1022.840685][T28581] delete_channel: no stack [ 1022.846551][T28581] delete_channel: no stack [ 1022.856542][T28581] delete_channel: no stack [ 1022.871938][T28581] delete_channel: no stack [ 1022.882726][T28581] delete_channel: no stack [ 1022.897589][T28581] delete_channel: no stack [ 1022.913505][T28581] delete_channel: no stack [ 1023.039750][T28665] Cannot find add_set index 3 as target [ 1023.057190][T28668] netlink: 5 bytes leftover after parsing attributes in process `syz.9.5782'. [ 1023.101947][T28669] bond2: (slave lo): Releasing backup interface [ 1023.127063][T28669] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1023.142037][T28669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1023.188382][T28672] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5784'. [ 1023.439231][T28685] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1024.029077][T28702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5792'. [ 1024.376231][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5799'. [ 1024.387920][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5799'. [ 1024.545573][T28726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5801'. [ 1024.823570][T28744] sctp: [Deprecated]: syz.8.5800 (pid 28744) Use of int in max_burst socket option deprecated. [ 1024.823570][T28744] Use struct sctp_assoc_value instead [ 1024.866401][T28736] netlink: 288 bytes leftover after parsing attributes in process `syz.8.5800'. [ 1024.955670][T28738] veth0: entered promiscuous mode [ 1024.974151][T28740] batadv_slave_0: entered promiscuous mode [ 1024.980906][T28745] syzkaller0: entered promiscuous mode [ 1024.986789][T28745] syzkaller0: entered allmulticast mode [ 1024.993927][T28746] tipc: Enabling of bearer rejected, already enabled [ 1025.295919][T28740] batadv_slave_0: left promiscuous mode [ 1025.302206][T28740] veth0: left promiscuous mode [ 1025.506257][T28761] tipc: New replicast peer: 255.255.255.255 [ 1025.528667][T28761] tipc: Enabled bearer , priority 10 [ 1025.543007][T28761] netlink: 'syz.8.5805': attribute type 4 has an invalid length. [ 1025.589448][T28763] veth0: entered promiscuous mode [ 1025.770371][T28772] wg1 speed is unknown, defaulting to 1000 [ 1025.791860][T28782] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5813'. [ 1025.824260][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1026.052648][T28762] veth0: left promiscuous mode [ 1026.309915][T28796] wg1 speed is unknown, defaulting to 1000 [ 1026.563705][T28821] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5821'. [ 1027.539944][T28868] netlink: 'syz.9.5834': attribute type 1 has an invalid length. [ 1028.091041][T28904] wg1 speed is unknown, defaulting to 1000 [ 1028.249651][T28912] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1028.407853][T28924] __nla_validate_parse: 3 callbacks suppressed [ 1028.407878][T28924] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5847'. [ 1028.843142][T28939] netlink: 288 bytes leftover after parsing attributes in process `syz.8.5849'. [ 1029.132997][T28939] sctp: [Deprecated]: syz.8.5849 (pid 28939) Use of int in max_burst socket option deprecated. [ 1029.132997][T28939] Use struct sctp_assoc_value instead [ 1029.315613][T28962] netlink: 'syz.9.5854': attribute type 32 has an invalid length. [ 1029.328352][T28962] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5854'. [ 1029.807897][T28979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.977558][T28984] netlink: 'syz.8.5860': attribute type 15 has an invalid length. [ 1029.991835][T28989] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5862'. [ 1030.681842][T29002] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5865'. [ 1030.701554][T29002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5865'. [ 1030.712554][T29002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5865'. [ 1030.732117][T29002] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5865'. [ 1030.913755][T29008] netlink: 'syz.6.5867': attribute type 1 has an invalid length. [ 1030.963877][T29008] netlink: 248 bytes leftover after parsing attributes in process `syz.6.5867'. [ 1031.082042][T29017] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5869'. [ 1031.677208][T29041] wg1 speed is unknown, defaulting to 1000 [ 1031.897501][T29045] netlink: 'syz.5.5875': attribute type 41 has an invalid length. [ 1032.111548][T29049] syzkaller0: entered promiscuous mode [ 1032.142835][T29049] syzkaller0: entered allmulticast mode [ 1032.558773][T29068] netlink: 'syz.5.5882': attribute type 14 has an invalid length. [ 1032.593050][T29068] netlink: 'syz.5.5882': attribute type 11 has an invalid length. [ 1032.981900][T29081] wg1 speed is unknown, defaulting to 1000 [ 1033.126907][T29093] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1033.152196][T29093] team0: Port device batadv2 added [ 1033.423574][T29103] wg1 speed is unknown, defaulting to 1000 [ 1034.089930][T29125] __nla_validate_parse: 138 callbacks suppressed [ 1034.089953][T29125] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5895'. [ 1034.144231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.288123][T29130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5896'. [ 1034.300613][T29130] netlink: 'syz.5.5896': attribute type 12 has an invalid length. [ 1034.315351][T29103] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5890'. [ 1034.339571][T29134] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1034.350637][ T12] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.350853][T29130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5896'. [ 1034.385351][ T12] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.418519][ T12] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.430698][T29130] netlink: 'syz.5.5896': attribute type 12 has an invalid length. [ 1034.452368][ T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.532676][T29144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5899'. [ 1034.596395][T29145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5899'. [ 1034.646566][T29147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5899'. [ 1035.893707][T29161] Cannot find add_set index 3 as target [ 1037.048806][T29176] netlink: set zone limit has 4 unknown bytes [ 1037.057404][T29174] wg1 speed is unknown, defaulting to 1000 [ 1037.120576][T29184] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5907'. [ 1037.143903][T29184] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5907'. [ 1037.325829][T29186] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5908'. [ 1037.755617][T29205] vlan0: entered promiscuous mode [ 1037.761367][T29205] geneve1: entered promiscuous mode [ 1037.767766][T29205] vlan0: entered allmulticast mode [ 1037.783493][T29205] geneve1: entered allmulticast mode [ 1038.014508][T29217] netlink: 'syz.8.5916': attribute type 4 has an invalid length. [ 1038.146323][T29217] netlink: 'syz.8.5916': attribute type 12 has an invalid length. [ 1038.166440][ T5829] block nbd1: Receive control failed (result -32) [ 1038.268516][T29224] macsec1: entered promiscuous mode [ 1038.273912][T29224] ip6gretap0: entered promiscuous mode [ 1038.295706][T29224] ip6gretap0: left promiscuous mode [ 1038.392742][T29231] netlink: 'syz.5.5922': attribute type 1 has an invalid length. [ 1038.429061][T29232] netlink: 'syz.9.5921': attribute type 13 has an invalid length. [ 1038.481196][T29232] netlink: 'syz.9.5921': attribute type 17 has an invalid length. [ 1038.527501][T29237] xt_connbytes: Forcing CT accounting to be enabled [ 1038.529651][T29238] netlink: 'syz.5.5922': attribute type 21 has an invalid length. [ 1038.560527][T29241] netlink: 'syz.7.5924': attribute type 1 has an invalid length. [ 1038.570513][T29241] netlink: 'syz.7.5924': attribute type 4 has an invalid length. [ 1038.616006][T29231] bond7 (unregistering): Released all slaves [ 1038.927093][T29232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.989558][T29232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1039.177882][T29265] wg1 speed is unknown, defaulting to 1000 [ 1039.694390][T29286] gretap0: entered promiscuous mode [ 1039.885821][T29290] __nla_validate_parse: 11 callbacks suppressed [ 1039.885844][T29290] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5934'. [ 1040.061693][T29292] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5934'. [ 1040.124105][T29290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1040.132202][T29290] IPv6: NLM_F_CREATE should be set when creating new route [ 1040.543911][T29295] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5935'. [ 1040.578443][T29295] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5935'. [ 1040.628979][T29296] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5935'. [ 1041.041117][T29322] openvswitch: netlink: Flow actions attr not present in new flow. [ 1041.308763][T29332] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5942'. [ 1041.417258][T29332] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5942'. [ 1041.470343][T29332] netlink: 'syz.9.5942': attribute type 5 has an invalid length. [ 1042.464219][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1042.553214][T29353] netlink: 136 bytes leftover after parsing attributes in process `syz.6.5947'. [ 1042.581601][T29353] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1042.964758][T29395] netlink: 232 bytes leftover after parsing attributes in process `syz.6.5955'. [ 1043.042809][T29401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5957'. [ 1043.069913][T29393] wg1 speed is unknown, defaulting to 1000 [ 1043.119016][T29392] wg1 speed is unknown, defaulting to 1000 [ 1043.762074][T29443] No such timeout policy "syz1" [ 1043.922079][T29433] sctp: [Deprecated]: syz.8.5960 (pid 29433) Use of int in max_burst socket option deprecated. [ 1043.922079][T29433] Use struct sctp_assoc_value instead [ 1043.963076][T29431] wg1 speed is unknown, defaulting to 1000 [ 1044.212706][T29448] netlink: 'syz.9.5965': attribute type 2 has an invalid length. [ 1044.948158][T29493] __nla_validate_parse: 3 callbacks suppressed [ 1044.948182][T29493] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.5975'. [ 1045.525242][T29470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1045.769479][T29516] netlink: 'syz.7.5983': attribute type 3 has an invalid length. [ 1045.795191][T29516] netlink: 666 bytes leftover after parsing attributes in process `syz.7.5983'. [ 1045.916382][T29520] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1045.941590][T29520] bond7: (slave lo): speed changed to 0 on port 1 [ 1045.986320][T29520] bond7: (slave lo): Enslaving as a backup interface with an up link [ 1046.014845][T29520] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1046.191966][T29531] wg1 speed is unknown, defaulting to 1000 [ 1046.348988][T29541] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1046.539059][T29548] batadv_slave_0: entered promiscuous mode [ 1046.547557][T29548] netlink: 'syz.9.5991': attribute type 3 has an invalid length. [ 1046.573270][T29551] batadv3: entered promiscuous mode [ 1046.689108][T29557] wg1 speed is unknown, defaulting to 1000 [ 1046.903092][T29562] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5994'. [ 1047.106776][T29561] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5994'. [ 1047.303636][T29566] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.5995'. [ 1047.491724][T29572] lo speed is unknown, defaulting to 1000 [ 1047.512766][T29572] lo speed is unknown, defaulting to 1000 [ 1047.519721][T29572] lo speed is unknown, defaulting to 1000 [ 1047.538245][T29576] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5999'. [ 1047.559944][T29572] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1047.603820][T29572] lo speed is unknown, defaulting to 1000 [ 1047.616324][T29572] lo speed is unknown, defaulting to 1000 [ 1047.625182][T29572] lo speed is unknown, defaulting to 1000 [ 1047.633314][T29572] lo speed is unknown, defaulting to 1000 [ 1047.641636][T29572] lo speed is unknown, defaulting to 1000 [ 1047.652883][T29572] lo speed is unknown, defaulting to 1000 [ 1047.786858][T29588] wg1 speed is unknown, defaulting to 1000 [ 1047.828922][T29590] wg1 speed is unknown, defaulting to 1000 [ 1047.839730][T29588] lo speed is unknown, defaulting to 1000 [ 1047.858422][T29590] lo speed is unknown, defaulting to 1000 [ 1048.148456][T29604] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1048.618862][T29618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6006'. [ 1048.629891][T29618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6006'. [ 1048.641505][T29618] netlink: 'syz.7.6006': attribute type 5 has an invalid length. [ 1048.651101][T29618] netlink: 'syz.7.6006': attribute type 6 has an invalid length. [ 1048.819090][T29628] xt_hashlimit: size too large, truncated to 1048576 [ 1048.908903][T29632] bond4: (slave lo): Releasing backup interface [ 1048.929302][T29632] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1048.968624][T29632] bond2: (slave gre1): Releasing backup interface [ 1048.990152][T29632] batman_adv: batadv0: Removing interface: vlan0 [ 1049.052379][T21117] lo speed is unknown, defaulting to 1000 [ 1049.188987][T29642] netlink: 'syz.9.6013': attribute type 10 has an invalid length. [ 1049.205357][T29642] netlink: 228 bytes leftover after parsing attributes in process `syz.9.6013'. [ 1049.490980][T29653] syzkaller0: entered promiscuous mode [ 1049.509004][T29653] syzkaller0: entered allmulticast mode [ 1049.752148][T29675] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 1049.773421][T29663] wg1 speed is unknown, defaulting to 1000 [ 1049.802935][T29663] lo speed is unknown, defaulting to 1000 [ 1050.685382][T29713] macvtap2: entered promiscuous mode [ 1050.693045][T29713] macvtap2: entered allmulticast mode [ 1050.699822][T29713] bridge0: entered allmulticast mode [ 1050.707006][T29713] bridge0: port 1(macvtap2) entered blocking state [ 1050.715121][T29713] bridge0: port 1(macvtap2) entered disabled state [ 1050.787792][T29713] bridge0: left allmulticast mode [ 1050.898875][T29719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1050.971183][T29717] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6034'. [ 1050.982741][T29717] bridge_slave_0: entered allmulticast mode [ 1051.120218][T29739] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6039'. [ 1051.146045][T29739] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6039'. [ 1051.232913][T29751] netlink: 'syz.5.6042': attribute type 1 has an invalid length. [ 1051.363953][T29754] sit0: left promiscuous mode [ 1051.371118][T29754] netlink: 136 bytes leftover after parsing attributes in process `syz.5.6044'. [ 1051.381081][T29754] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1051.486317][T29764] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6046'. [ 1051.773167][T29769] wg1 speed is unknown, defaulting to 1000 [ 1051.788650][T29769] lo speed is unknown, defaulting to 1000 [ 1051.852414][T29772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6047'. [ 1051.888071][T29779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6048'. [ 1051.907783][T29776] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6047'. [ 1051.927681][T29776] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6047'. [ 1052.018558][T29782] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1052.137342][T29785] netlink: 'syz.6.6050': attribute type 1 has an invalid length. [ 1052.652923][T29805] syzkaller0: entered promiscuous mode [ 1052.659033][T29805] syzkaller0: entered allmulticast mode [ 1053.072991][T29821] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1053.589646][T29840] wg1 speed is unknown, defaulting to 1000 [ 1053.617402][T29840] lo speed is unknown, defaulting to 1000 [ 1053.823513][T29854] tipc: Resetting bearer [ 1053.982326][T29862] netlink: set zone limit has 4 unknown bytes [ 1054.225291][T29871] sctp: [Deprecated]: syz.9.6072 (pid 29871) Use of int in max_burst socket option deprecated. [ 1054.225291][T29871] Use struct sctp_assoc_value instead [ 1054.267579][T29872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1054.369354][T29879] netlink: 'syz.6.6077': attribute type 1 has an invalid length. [ 1054.838369][T29888] erspan0: entered promiscuous mode [ 1055.333506][T29914] netlink: 'syz.7.6088': attribute type 10 has an invalid length. [ 1055.385515][T29916] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 1055.641812][T29927] wg1 speed is unknown, defaulting to 1000 [ 1055.651029][T29927] lo speed is unknown, defaulting to 1000 [ 1056.235532][T29949] __nla_validate_parse: 14 callbacks suppressed [ 1056.235556][T29949] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6099'. [ 1056.681999][T29978] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1056.686231][T29973] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6105'. [ 1056.712929][T29978] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6106'. [ 1056.782511][T29979] netlink: 'syz.9.6107': attribute type 10 has an invalid length. [ 1056.816385][T29979] netlink: 2 bytes leftover after parsing attributes in process `syz.9.6107'. [ 1056.863352][T29979] bond0: entered promiscuous mode [ 1056.885664][T29979] bridge0: port 1(bond0) entered blocking state [ 1056.892251][T29979] bridge0: port 1(bond0) entered disabled state [ 1056.901554][T29979] bond0: entered allmulticast mode [ 1056.993491][T29998] netlink: 'syz.5.6110': attribute type 9 has an invalid length. [ 1057.019407][T29998] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.6110'. [ 1057.117682][T30001] netlink: 'syz.9.6111': attribute type 1 has an invalid length. [ 1057.209408][T30003] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6112'. [ 1057.527080][T29996] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6106'. [ 1057.862058][T30024] syzkaller0: entered promiscuous mode [ 1057.892290][T30024] syzkaller0: entered allmulticast mode [ 1057.926528][T30024] netlink: 'syz.7.6120': attribute type 29 has an invalid length. [ 1058.366112][T30052] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6125'. [ 1058.557096][T30060] xt_policy: output policy not valid in PREROUTING and INPUT [ 1059.013450][T30076] 8021q: VLANs not supported on syzkaller1 [ 1059.032767][T30080] netlink: 'syz.8.6129': attribute type 1 has an invalid length. [ 1059.072204][T30080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.373190][T30095] wg1 speed is unknown, defaulting to 1000 [ 1059.379461][T30095] wg1 speed is unknown, defaulting to 1000 [ 1059.386502][T30095] wg1 speed is unknown, defaulting to 1000 [ 1059.411620][T30095] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1059.450316][T30095] wg1 speed is unknown, defaulting to 1000 [ 1059.458576][T30095] wg1 speed is unknown, defaulting to 1000 [ 1059.474295][T30095] wg1 speed is unknown, defaulting to 1000 [ 1059.482311][T30095] wg1 speed is unknown, defaulting to 1000 [ 1059.490723][T30095] wg1 speed is unknown, defaulting to 1000 [ 1059.749702][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1060.117032][T30118] wg1 speed is unknown, defaulting to 1000 [ 1060.126553][T30118] lo speed is unknown, defaulting to 1000 [ 1060.146657][T30118] wg1 speed is unknown, defaulting to 1000 [ 1060.612156][T30141] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 1061.006546][T30164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6150'. [ 1061.056774][T30161] wg1 speed is unknown, defaulting to 1000 [ 1061.066129][T30161] lo speed is unknown, defaulting to 1000 [ 1061.087775][T30161] wg1 speed is unknown, defaulting to 1000 [ 1061.113679][T30167] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6150'. [ 1061.442081][T30178] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6156'. [ 1061.507149][T30184] bridge8: entered allmulticast mode [ 1061.519802][T30185] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1061.563786][T30188] netlink: 288 bytes leftover after parsing attributes in process `syz.7.6155'. [ 1061.670346][T30193] sctp: [Deprecated]: syz.7.6155 (pid 30193) Use of int in max_burst socket option deprecated. [ 1061.670346][T30193] Use struct sctp_assoc_value instead [ 1062.002939][T30209] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6163'. [ 1062.043779][T30199] tipc: Enabled bearer , priority 0 [ 1062.070551][T30199] syzkaller0: entered promiscuous mode [ 1062.085212][T30199] syzkaller0: entered allmulticast mode [ 1062.217593][T30198] tipc: Resetting bearer [ 1062.319948][T30198] tipc: Disabling bearer [ 1062.359821][T30221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6167'. [ 1062.415209][T30216] netlink: 'syz.9.6166': attribute type 3 has an invalid length. [ 1062.416090][ T6858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.428406][T30216] netlink: 'syz.9.6166': attribute type 3 has an invalid length. [ 1062.515875][T30225] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6169'. [ 1062.641462][T30229] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6171'. [ 1062.774808][ T6858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.799518][T30237] erspan0: entered promiscuous mode [ 1062.894473][T30247] netlink: 288 bytes leftover after parsing attributes in process `syz.6.6173'. [ 1062.964739][T30246] wg1 speed is unknown, defaulting to 1000 [ 1062.978675][T30246] lo speed is unknown, defaulting to 1000 [ 1062.989843][T30246] wg1 speed is unknown, defaulting to 1000 [ 1063.370672][T30266] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) ! [ 1063.415847][T30266] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6180'. [ 1063.810892][T30282] tipc: Enabled bearer , priority 0 [ 1063.821113][T30282] syzkaller0: entered promiscuous mode [ 1063.838212][T30282] syzkaller0: entered allmulticast mode [ 1063.943856][T30286] netlink: 666 bytes leftover after parsing attributes in process `syz.9.6185'. [ 1064.011678][T30284] tipc: Resetting bearer [ 1064.043620][T30281] tipc: Resetting bearer [ 1064.090942][T30281] tipc: Disabling bearer [ 1064.431169][T30315] netlink: 288 bytes leftover after parsing attributes in process `syz.7.6190'. [ 1064.811000][T30322] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1064.876388][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 1065.025041][T30332] wg1 speed is unknown, defaulting to 1000 [ 1065.082605][T30333] wg1 speed is unknown, defaulting to 1000 [ 1065.097951][T30332] lo speed is unknown, defaulting to 1000 [ 1065.112712][T30333] lo speed is unknown, defaulting to 1000 [ 1065.149874][T30332] wg1 speed is unknown, defaulting to 1000 [ 1065.189523][T30333] wg1 speed is unknown, defaulting to 1000 [ 1065.599242][T30347] syzkaller0: entered promiscuous mode [ 1065.638269][T30347] syzkaller0: entered allmulticast mode [ 1066.025894][T30359] tipc: Enabled bearer , priority 0 [ 1066.045481][T30361] syzkaller0: entered promiscuous mode [ 1066.062564][T30361] syzkaller0: entered allmulticast mode [ 1066.259096][T30359] wg1 speed is unknown, defaulting to 1000 [ 1066.295130][T30359] lo speed is unknown, defaulting to 1000 [ 1066.308099][T30359] wg1 speed is unknown, defaulting to 1000 [ 1066.462656][T30373] __nla_validate_parse: 1 callbacks suppressed [ 1066.462682][T30373] netlink: 202584 bytes leftover after parsing attributes in process `syz.6.6204'. [ 1066.618408][T30376] netlink: 'syz.9.6205': attribute type 14 has an invalid length. [ 1066.696027][T30358] tipc: Resetting bearer [ 1066.723514][T30376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1066.788503][T30358] tipc: Disabling bearer [ 1066.886296][T30379] bond0: left allmulticast mode [ 1066.904435][T30379] bridge0: port 1(bond0) entered disabled state [ 1067.044589][T30379] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1067.225183][T30382] wg1 speed is unknown, defaulting to 1000 [ 1067.236510][T30382] lo speed is unknown, defaulting to 1000 [ 1067.260899][T30382] wg1 speed is unknown, defaulting to 1000 [ 1067.503786][T30406] syzkaller1: entered promiscuous mode [ 1067.523010][T30406] syzkaller1: entered allmulticast mode [ 1068.021593][T30422] netlink: 34 bytes leftover after parsing attributes in process `syz.8.6214'. [ 1068.055267][T30422] netlink: 34 bytes leftover after parsing attributes in process `syz.8.6214'. [ 1068.338960][T30444] sctp: [Deprecated]: syz.7.6215 (pid 30444) Use of int in max_burst socket option deprecated. [ 1068.338960][T30444] Use struct sctp_assoc_value instead [ 1069.084526][T30435] netlink: 288 bytes leftover after parsing attributes in process `syz.7.6215'. [ 1069.340122][T30468] syzkaller1: entered promiscuous mode [ 1069.355559][T30468] syzkaller1: entered allmulticast mode [ 1070.304514][T30486] netlink: 'syz.5.6225': attribute type 1 has an invalid length. [ 1070.352773][T30486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6225'. [ 1071.170502][T30502] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.246869][T30503] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6230'. [ 1071.336960][T30502] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.447807][T30511] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6232'. [ 1071.731831][T30516] sctp: [Deprecated]: syz.6.6233 (pid 30516) Use of int in max_burst socket option deprecated. [ 1071.731831][T30516] Use struct sctp_assoc_value instead [ 1072.112127][T30502] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.206606][T30514] netlink: 288 bytes leftover after parsing attributes in process `syz.6.6233'. [ 1072.300757][T30502] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.383058][T30521] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1072.530697][ T7168] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.592396][ T7168] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.651093][ T7168] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.703283][ T7168] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.782892][T30534] wg1 speed is unknown, defaulting to 1000 [ 1072.813323][T30540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6239'. [ 1072.860825][T30534] lo speed is unknown, defaulting to 1000 [ 1072.871182][T30540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1072.879223][T30540] IPv6: NLM_F_CREATE should be set when creating new route [ 1072.895997][T30534] wg1 speed is unknown, defaulting to 1000 [ 1072.926613][T30543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1072.934024][T30543] IPv6: NLM_F_CREATE should be set when creating new route [ 1073.008061][T30545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6242'. [ 1073.515667][T30560] netlink: 256 bytes leftover after parsing attributes in process `syz.7.6247'. [ 1073.546521][T30560] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6247'. [ 1073.648788][T30567] netlink: 'syz.7.6247': attribute type 3 has an invalid length. [ 1074.124938][T30575] sctp: [Deprecated]: syz.9.6254 (pid 30575) Use of int in max_burst socket option deprecated. [ 1074.124938][T30575] Use struct sctp_assoc_value instead [ 1074.185095][T30577] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6252'. [ 1074.335989][T30584] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6256'. [ 1074.464275][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1074.555879][T30594] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6259'. [ 1074.751756][T30601] pim6reg: entered allmulticast mode [ 1074.800524][T30600] pim6reg: left allmulticast mode [ 1074.876934][T30606] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6260'. [ 1074.896545][T30601] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6260'. [ 1075.637989][T30640] sctp: [Deprecated]: syz.5.6271 (pid 30640) Use of int in max_burst socket option deprecated. [ 1075.637989][T30640] Use struct sctp_assoc_value instead [ 1076.271935][T30648] wg1 speed is unknown, defaulting to 1000 [ 1076.333205][T30648] lo speed is unknown, defaulting to 1000 [ 1076.376070][T30648] wg1 speed is unknown, defaulting to 1000 [ 1076.561451][T30670] netlink: 'syz.6.6278': attribute type 3 has an invalid length. [ 1076.600450][T30670] netlink: 'syz.6.6278': attribute type 3 has an invalid length. [ 1076.850013][T30682] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 1076.876334][T30682] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 1077.396268][T30718] syzkaller1: entered promiscuous mode [ 1077.402129][T30718] syzkaller1: entered allmulticast mode [ 1077.433304][T30715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1077.488125][T30722] __nla_validate_parse: 5 callbacks suppressed [ 1077.488149][T30722] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6295'. [ 1077.534128][T30722] netlink: 'syz.7.6295': attribute type 5 has an invalid length. [ 1077.545970][T30722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6295'. [ 1077.568871][T30722] geneve5: entered promiscuous mode [ 1077.601783][T30722] geneve5: entered allmulticast mode [ 1077.610977][T17932] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 65535 - 0 [ 1077.634885][T17932] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 65535 - 0 [ 1077.649343][T30731] netlink: 165 bytes leftover after parsing attributes in process `syz.5.6297'. [ 1077.666780][T17932] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 65535 - 0 [ 1077.697494][T17932] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 65535 - 0 [ 1077.828939][T30738] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6299'. [ 1077.960193][T30745] bond6: option arp_validate: invalid value (18446744073491447809) [ 1077.990266][T30745] bond6 (unregistering): Released all slaves [ 1078.035106][T30754] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6304'. [ 1078.087423][T30759] netlink: 116 bytes leftover after parsing attributes in process `syz.8.6304'. [ 1078.098900][T30759] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6304'. [ 1079.131713][T30789] tipc: Enabling of bearer rejected, already enabled [ 1079.210546][T30792] bridge7: entered promiscuous mode [ 1079.241118][T30792] bridge7: entered allmulticast mode [ 1079.272605][T30792] team0: Port device bridge7 added [ 1079.303888][T30797] bridge0: port 1(team0) entered blocking state [ 1079.332593][T30797] bridge0: port 1(team0) entered disabled state [ 1079.353646][T30797] team0: entered allmulticast mode [ 1079.403730][T30800] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6316'. [ 1079.459544][T30802] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6316'. [ 1079.472922][T30803] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6317'. [ 1079.540453][T30803] openvswitch: netlink: Flow actions attr not present in new flow. [ 1079.781572][T30824] sit0: entered promiscuous mode [ 1079.813715][T30826] netlink: 'syz.6.6324': attribute type 39 has an invalid length. [ 1080.468711][T30859] netlink: 'syz.8.6333': attribute type 13 has an invalid length. [ 1080.532958][T30856] bond5: (slave bond_slave_1): Device is not bonding slave [ 1080.541551][T30856] bond5: option active_slave: invalid value (bond_slave_1) [ 1080.611981][T30856] bond5 (unregistering): Released all slaves [ 1080.655107][T30871] netlink: 'syz.7.6338': attribute type 32 has an invalid length. [ 1080.730486][T30874] netlink: 'syz.7.6338': attribute type 4 has an invalid length. [ 1080.767584][T30870] bridge_slave_1: entered promiscuous mode [ 1080.775678][T30870] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1080.808344][T30876] sctp: [Deprecated]: syz.5.6335 (pid 30876) Use of int in max_burst socket option deprecated. [ 1080.808344][T30876] Use struct sctp_assoc_value instead [ 1080.843634][T30873] m1Ie5nè‹Ò: entered promiscuous mode [ 1080.988432][T30881] tipc: Enabling of bearer rejected, already enabled [ 1081.007278][T30881] batadv_slave_1: entered allmulticast mode [ 1081.030413][T30881] pim6reg: entered allmulticast mode [ 1081.037660][T30881] pim6reg: left allmulticast mode [ 1081.191362][T30880] netlink: 'syz.6.6340': attribute type 21 has an invalid length. [ 1081.257247][T30880] netlink: 'syz.6.6340': attribute type 4 has an invalid length. [ 1081.326504][T30887] wg1 speed is unknown, defaulting to 1000 [ 1081.428976][T30887] lo speed is unknown, defaulting to 1000 [ 1081.456563][T30887] wg1 speed is unknown, defaulting to 1000 [ 1081.563291][T30900] gretap0: entered promiscuous mode [ 1081.771058][T30916] netlink: 'syz.5.6351': attribute type 1 has an invalid length. [ 1081.836577][T30916] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1082.244340][T30941] tipc: Resetting bearer [ 1082.354078][T30950] sctp: [Deprecated]: syz.7.6356 (pid 30950) Use of int in max_burst socket option deprecated. [ 1082.354078][T30950] Use struct sctp_assoc_value instead [ 1082.527556][T30941] syzkaller0: left promiscuous mode [ 1082.533047][T30941] syzkaller0: left allmulticast mode [ 1082.572878][T30941] vlan1: left promiscuous mode [ 1082.599411][T30941] hsr_slave_1: left promiscuous mode [ 1082.620765][T30941] vlan1: left allmulticast mode [ 1082.657099][T30941] hsr_slave_1: left allmulticast mode [ 1082.951151][T30941] bridge7: left promiscuous mode [ 1082.959901][T30945] __nla_validate_parse: 12 callbacks suppressed [ 1082.959924][T30945] netlink: 288 bytes leftover after parsing attributes in process `syz.7.6356'. [ 1083.091299][T30952] netlink: 288 bytes leftover after parsing attributes in process `syz.9.6357'. [ 1083.694228][T30986] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1083.727045][T30986] netlink: 400 bytes leftover after parsing attributes in process `syz.8.6364'. [ 1083.867231][T30997] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.929574][T31002] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6369'. [ 1083.945580][T31002] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6369'. [ 1083.960372][T31005] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6367'. [ 1084.030752][T30999] wg1 speed is unknown, defaulting to 1000 [ 1084.307534][T30997] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.436154][T30999] lo speed is unknown, defaulting to 1000 [ 1084.516295][T31018] netlink: 288 bytes leftover after parsing attributes in process `syz.8.6370'. [ 1084.591322][T30999] wg1 speed is unknown, defaulting to 1000 [ 1084.614129][T31015] sctp: [Deprecated]: syz.8.6370 (pid 31015) Use of int in max_burst socket option deprecated. [ 1084.614129][T31015] Use struct sctp_assoc_value instead [ 1084.702185][T30997] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.862096][T30997] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.887816][T31032] 8021q: VLANs not supported on xfrm0 [ 1084.974423][ T7168] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.018573][ T7168] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.055406][T31039] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6380'. [ 1085.075380][ T7168] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.105180][ T7168] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.198450][T31047] netlink: 'syz.7.6378': attribute type 3 has an invalid length. [ 1085.206846][T31047] netlink: 666 bytes leftover after parsing attributes in process `syz.7.6378'. [ 1085.567048][T31061] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6383'. [ 1085.623905][T31068] netlink: 'syz.9.6383': attribute type 21 has an invalid length. [ 1085.902159][T31072] sctp: [Deprecated]: syz.5.6385 (pid 31072) Use of int in max_burst socket option deprecated. [ 1085.902159][T31072] Use struct sctp_assoc_value instead [ 1085.982243][T31075] m1Ie5nè‹Ò: entered promiscuous mode [ 1086.355175][T31096] netlink: 'syz.9.6393': attribute type 2 has an invalid length. [ 1086.373637][T31096] : entered promiscuous mode [ 1086.381616][T31096] netlink: 'syz.9.6393': attribute type 2 has an invalid length. [ 1086.391022][T31096] : left promiscuous mode [ 1086.618502][T31108] syzkaller0: entered promiscuous mode [ 1086.634796][T31108] syzkaller0: entered allmulticast mode [ 1086.694044][T31108] netlink: 'syz.5.6396': attribute type 1 has an invalid length. [ 1086.900102][T31119] batadv0: mtu less than device minimum [ 1087.004480][T31122] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1087.019086][T31122] bond5 (unregistering): Released all slaves [ 1087.635355][T31141] bond0: left promiscuous mode [ 1087.649913][T31141] bridge_slave_1: left promiscuous mode [ 1087.693230][T31141] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1088.057408][T31153] netlink: 'syz.7.6410': attribute type 12 has an invalid length. [ 1088.091462][T31155] netlink: 'syz.6.6409': attribute type 1 has an invalid length. [ 1088.142951][T31155] __nla_validate_parse: 6 callbacks suppressed [ 1088.142976][T31155] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6409'. [ 1088.154236][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 1088.486893][T31165] bond9: option ad_select: invalid value (34) [ 1088.518448][T31165] bond9 (unregistering): Released all slaves [ 1088.767313][T31167] wg1 speed is unknown, defaulting to 1000 [ 1088.797316][T31167] lo speed is unknown, defaulting to 1000 [ 1088.848699][T31167] wg1 speed is unknown, defaulting to 1000 [ 1089.277887][T31187] batadv_slave_0: left promiscuous mode [ 1089.508887][T31198] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6419'. [ 1089.908250][T31207] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6422'. [ 1089.998991][T31214] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1090.030293][T31218] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1090.383618][T31223] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6426'. [ 1090.873468][T31229] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 1090.934183][T31229] mac80211_hwsim hwsim47 wlan0: left allmulticast mode [ 1090.942137][T31229] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1091.009977][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1091.022486][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1091.055056][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1091.078011][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1091.089122][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1091.238630][T31230] wg1 speed is unknown, defaulting to 1000 [ 1091.268796][T31230] lo speed is unknown, defaulting to 1000 [ 1091.309572][T31230] wg1 speed is unknown, defaulting to 1000 [ 1091.424731][T31241] netlink: 136 bytes leftover after parsing attributes in process `syz.9.6433'. [ 1091.441314][T31245] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6432'. [ 1091.505329][T31241] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1091.990331][T31230] chnl_net:caif_netlink_parms(): no params data found [ 1092.385126][T31264] ================================================================== [ 1092.394145][T31264] BUG: KASAN: slab-use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 1092.402807][T31264] Read of size 8 at addr ffff888028708108 by task syz.5.6439/31264 [ 1092.411666][T31264] [ 1092.414573][T31264] CPU: 1 UID: 0 PID: 31264 Comm: syz.5.6439 Not tainted syzkaller #0 PREEMPT(full) [ 1092.414608][T31264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1092.414625][T31264] Call Trace: [ 1092.414636][T31264] [ 1092.414648][T31264] dump_stack_lvl+0xe8/0x150 [ 1092.414684][T31264] print_report+0xca/0x240 [ 1092.414708][T31264] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1092.414729][T31264] kasan_report+0x118/0x150 [ 1092.414759][T31264] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1092.414785][T31264] nf_hook_entry_head+0x1f1/0x2c0 [ 1092.414808][T31264] __nf_unregister_net_hook+0x74/0x6f0 [ 1092.414933][T31264] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 1092.414994][T31264] nf_tables_commit+0x415e/0xa350 [ 1092.415054][T31264] ? nft_pernet+0x23/0x240 [ 1092.415105][T31264] ? __pfx_nf_tables_commit+0x10/0x10 [ 1092.415125][T31264] ? nft_pernet+0x23/0x240 [ 1092.415149][T31264] ? nft_pernet+0x23/0x240 [ 1092.415172][T31264] ? nft_pernet+0x23/0x240 [ 1092.415198][T31264] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 1092.415251][T31264] ? nft_flush_table+0xd06/0xea0 [ 1092.415283][T31264] ? nf_tables_deltable+0x674/0xe10 [ 1092.415317][T31264] ? __pfx_nf_tables_deltable+0x10/0x10 [ 1092.415354][T31264] nfnetlink_rcv+0x1ac9/0x2590 [ 1092.415404][T31264] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1092.415460][T31264] ? netlink_deliver_tap+0x2e/0x1b0 [ 1092.415494][T31264] ? netlink_deliver_tap+0x2e/0x1b0 [ 1092.415536][T31264] netlink_unicast+0x82f/0x9e0 [ 1092.415571][T31264] ? __pfx_netlink_unicast+0x10/0x10 [ 1092.415601][T31264] ? netlink_sendmsg+0x642/0xb30 [ 1092.415632][T31264] ? skb_put+0x11b/0x210 [ 1092.415662][T31264] netlink_sendmsg+0x805/0xb30 [ 1092.415700][T31264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1092.415735][T31264] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1092.415764][T31264] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1092.415785][T31264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1092.415818][T31264] __sock_sendmsg+0x21c/0x270 [ 1092.415855][T31264] ____sys_sendmsg+0x505/0x820 [ 1092.415887][T31264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1092.415922][T31264] ? import_iovec+0x74/0xa0 [ 1092.415951][T31264] ___sys_sendmsg+0x21f/0x2a0 [ 1092.415982][T31264] ? __pfx____sys_sendmsg+0x10/0x10 [ 1092.416014][T31264] ? futex_wait+0x285/0x360 [ 1092.416059][T31264] ? __fget_files+0x2a/0x420 [ 1092.416089][T31264] ? __fget_files+0x3a0/0x420 [ 1092.416124][T31264] __x64_sys_sendmsg+0x19b/0x260 [ 1092.416155][T31264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1092.416191][T31264] ? rcu_is_watching+0x15/0xb0 [ 1092.416227][T31264] do_syscall_64+0xec/0xf80 [ 1092.416254][T31264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.416277][T31264] ? trace_irq_disable+0x37/0x100 [ 1092.416317][T31264] ? clear_bhb_loop+0x60/0xb0 [ 1092.416345][T31264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.416368][T31264] RIP: 0033:0x7f231d38f749 [ 1092.416389][T31264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.416411][T31264] RSP: 002b:00007f231e298038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1092.416437][T31264] RAX: ffffffffffffffda RBX: 00007f231d5e5fa0 RCX: 00007f231d38f749 [ 1092.416456][T31264] RDX: 0000000000008810 RSI: 0000200000000700 RDI: 0000000000000004 [ 1092.416472][T31264] RBP: 00007f231d413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1092.416488][T31264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.416502][T31264] R13: 00007f231d5e6038 R14: 00007f231d5e5fa0 R15: 00007ffd0cc98098 [ 1092.416531][T31264] [ 1092.416540][T31264] [ 1092.799580][T31264] Allocated by task 31220: [ 1092.804815][T31264] kasan_save_track+0x3e/0x80 [ 1092.810766][T31264] __kasan_kmalloc+0x93/0xb0 [ 1092.815753][T31264] __kmalloc_cache_noprof+0x3e2/0x700 [ 1092.821779][T31264] __genradix_ptr_alloc+0x352/0x4a0 [ 1092.827482][T31264] __genradix_prealloc+0x44/0x90 [ 1092.832901][T31264] sctp_stream_init+0x14b/0x440 [ 1092.838782][T31264] sctp_association_new+0x10dd/0x25e0 [ 1092.845219][T31264] sctp_connect_new_asoc+0x2c5/0x690 [ 1092.851161][T31264] sctp_sendmsg+0x155c/0x2840 [ 1092.856458][T31264] __sock_sendmsg+0x19c/0x270 [ 1092.862522][T31264] ____sys_sendmsg+0x505/0x820 [ 1092.867575][T31264] ___sys_sendmsg+0x21f/0x2a0 [ 1092.872660][T31264] __x64_sys_sendmsg+0x19b/0x260 [ 1092.878609][T31264] do_syscall_64+0xec/0xf80 [ 1092.883667][T31264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.889985][T31264] [ 1092.892753][T31264] Freed by task 31221: [ 1092.896862][T31264] kasan_save_track+0x3e/0x80 [ 1092.902214][T31264] kasan_save_free_info+0x46/0x50 [ 1092.907646][T31264] __kasan_slab_free+0x5c/0x80 [ 1092.912917][T31264] kfree+0x1c0/0x660 [ 1092.918052][T31264] genradix_free_recurse+0x5d/0xa0 [ 1092.923954][T31264] genradix_free_recurse+0x5d/0xa0 [ 1092.930429][T31264] sctp_stream_free+0xd5/0x110 [ 1092.935771][T31264] sctp_association_free+0x26d/0x7f0 [ 1092.941372][T31264] sctp_do_sm+0x3efe/0x5c40 [ 1092.946017][T31264] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 1092.952141][T31264] inet_shutdown+0x271/0x390 [ 1092.957346][T31264] __x64_sys_shutdown+0x13f/0x1a0 [ 1092.962597][T31264] do_syscall_64+0xec/0xf80 [ 1092.967313][T31264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.973699][T31264] [ 1092.976105][T31264] The buggy address belongs to the object at ffff888028708000 [ 1092.976105][T31264] which belongs to the cache kmalloc-512 of size 512 [ 1092.991850][T31264] The buggy address is located 264 bytes inside of [ 1092.991850][T31264] freed 512-byte region [ffff888028708000, ffff888028708200) [ 1093.007266][T31264] [ 1093.009660][T31264] The buggy address belongs to the physical page: [ 1093.016424][T31264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28708 [ 1093.025487][T31264] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1093.034301][T31264] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1093.042081][T31264] page_type: f5(slab) [ 1093.046294][T31264] raw: 00fff00000000040 ffff88813ffa6c80 dead000000000122 0000000000000000 [ 1093.055435][T31264] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1093.064163][T31264] head: 00fff00000000040 ffff88813ffa6c80 dead000000000122 0000000000000000 [ 1093.073150][T31264] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1093.084318][T31264] head: 00fff00000000002 ffffea0000a1c201 00000000ffffffff 00000000ffffffff [ 1093.093828][T31264] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1093.103052][T31264] page dumped because: kasan: bad access detected [ 1093.109870][T31264] page_owner tracks the page as allocated [ 1093.115981][T31264] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 31220, tgid 31219 (syz.8.6425), ts 1090162806227, free_ts 1070348632883 [ 1093.138551][T31264] post_alloc_hook+0x234/0x290 [ 1093.143464][T31264] get_page_from_freelist+0x24e0/0x2580 [ 1093.149618][T31264] __alloc_frozen_pages_noprof+0x181/0x370 [ 1093.155940][T31264] alloc_pages_mpol+0x232/0x4a0 [ 1093.161005][T31264] allocate_slab+0x86/0x3b0 [ 1093.166754][T31264] ___slab_alloc+0xe53/0x1820 [ 1093.171832][T31264] __slab_alloc+0x65/0x100 [ 1093.177438][T31264] __kmalloc_cache_noprof+0x41e/0x700 [ 1093.182851][T31264] __genradix_ptr_alloc+0x352/0x4a0 [ 1093.188632][T31264] __genradix_prealloc+0x44/0x90 [ 1093.194062][T31264] sctp_stream_init+0x14b/0x440 [ 1093.199230][T31264] sctp_association_new+0x10dd/0x25e0 [ 1093.205162][T31264] sctp_connect_new_asoc+0x2c5/0x690 [ 1093.211021][T31264] sctp_sendmsg+0x155c/0x2840 [ 1093.217147][T31264] __sock_sendmsg+0x19c/0x270 [ 1093.222150][T31264] ____sys_sendmsg+0x505/0x820 [ 1093.227536][T31264] page last free pid 30488 tgid 30488 stack trace: [ 1093.234860][T31264] __free_frozen_pages+0xbc8/0xd30 [ 1093.240292][T31264] __slab_free+0x2ce/0x320 [ 1093.247345][T31264] qlist_free_all+0x97/0x100 [ 1093.252848][T31264] kasan_quarantine_reduce+0x148/0x160 [ 1093.258821][T31264] __kasan_slab_alloc+0x22/0x80 [ 1093.264153][T31264] kmem_cache_alloc_noprof+0x37d/0x710 [ 1093.270252][T31264] ptlock_alloc+0x20/0x70 [ 1093.275355][T31264] pte_alloc_one+0x7a/0x370 [ 1093.280332][T31264] __do_fault+0xd1/0x390 [ 1093.284867][T31264] do_pte_missing+0x6ad/0x3330 [ 1093.290112][T31264] handle_mm_fault+0x1b26/0x32b0 [ 1093.295530][T31264] do_user_addr_fault+0xa7c/0x1380 [ 1093.301645][T31264] exc_page_fault+0x71/0xd0 [ 1093.306720][T31264] asm_exc_page_fault+0x26/0x30 [ 1093.312619][T31264] [ 1093.315013][T31264] Memory state around the buggy address: [ 1093.321210][T31264] ffff888028708000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1093.330393][T31264] ffff888028708080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1093.339728][T31264] >ffff888028708100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1093.348266][T31264] ^ [ 1093.352636][T31264] ffff888028708180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1093.361260][T31264] ffff888028708200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1093.371877][T31264] ================================================================== [ 1093.435620][T31264] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1093.444764][T31264] CPU: 0 UID: 0 PID: 31264 Comm: syz.5.6439 Not tainted syzkaller #0 PREEMPT(full) [ 1093.454801][T31264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1093.466132][T31264] Call Trace: [ 1093.469906][T31264] [ 1093.473054][T31264] vpanic+0x1e0/0x670 [ 1093.477472][T31264] panic+0xb9/0xc0 [ 1093.481626][T31264] ? __pfx_panic+0x10/0x10 [ 1093.486759][T31264] ? preempt_schedule_thunk+0x16/0x30 [ 1093.492640][T31264] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1093.498400][T31264] check_panic_on_warn+0x89/0xb0 [ 1093.503410][T31264] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1093.509466][T31264] end_report+0x6f/0x140 [ 1093.514341][T31264] kasan_report+0x129/0x150 [ 1093.519416][T31264] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1093.525740][T31264] nf_hook_entry_head+0x1f1/0x2c0 [ 1093.531075][T31264] __nf_unregister_net_hook+0x74/0x6f0 [ 1093.537263][T31264] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 1093.544181][T31264] nf_tables_commit+0x415e/0xa350 [ 1093.549366][T31264] ? nft_pernet+0x23/0x240 [ 1093.554474][T31264] ? __pfx_nf_tables_commit+0x10/0x10 [ 1093.560888][T31264] ? nft_pernet+0x23/0x240 [ 1093.566596][T31264] ? nft_pernet+0x23/0x240 [ 1093.571249][T31264] ? nft_pernet+0x23/0x240 [ 1093.575891][T31264] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 1093.583123][T31264] ? nft_flush_table+0xd06/0xea0 [ 1093.589795][T31264] ? nf_tables_deltable+0x674/0xe10 [ 1093.595407][T31264] ? __pfx_nf_tables_deltable+0x10/0x10 [ 1093.601411][T31264] nfnetlink_rcv+0x1ac9/0x2590 [ 1093.608009][T31264] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1093.614417][T31264] ? netlink_deliver_tap+0x2e/0x1b0 [ 1093.619932][T31264] ? netlink_deliver_tap+0x2e/0x1b0 [ 1093.626745][T31264] netlink_unicast+0x82f/0x9e0 [ 1093.633437][T31264] ? __pfx_netlink_unicast+0x10/0x10 [ 1093.639406][T31264] ? netlink_sendmsg+0x642/0xb30 [ 1093.646472][T31264] ? skb_put+0x11b/0x210 [ 1093.651730][T31264] netlink_sendmsg+0x805/0xb30 [ 1093.657772][T31264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1093.664514][T31264] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1093.670691][T31264] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1093.676199][T31264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1093.683771][T31264] __sock_sendmsg+0x21c/0x270 [ 1093.689051][T31264] ____sys_sendmsg+0x505/0x820 [ 1093.694827][T31264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1093.700536][T31264] ? import_iovec+0x74/0xa0 [ 1093.705098][T31264] ___sys_sendmsg+0x21f/0x2a0 [ 1093.710282][T31264] ? __pfx____sys_sendmsg+0x10/0x10 [ 1093.715625][T31264] ? futex_wait+0x285/0x360 [ 1093.720624][T31264] ? __fget_files+0x2a/0x420 [ 1093.727986][T31264] ? __fget_files+0x3a0/0x420 [ 1093.733740][T31264] __x64_sys_sendmsg+0x19b/0x260 [ 1093.739690][T31264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1093.746787][T31264] ? rcu_is_watching+0x15/0xb0 [ 1093.752069][T31264] do_syscall_64+0xec/0xf80 [ 1093.756975][T31264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.764829][T31264] ? trace_irq_disable+0x37/0x100 [ 1093.770845][T31264] ? clear_bhb_loop+0x60/0xb0 [ 1093.776614][T31264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.782723][T31264] RIP: 0033:0x7f231d38f749 [ 1093.787166][T31264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.808677][T31264] RSP: 002b:00007f231e298038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.818361][T31264] RAX: ffffffffffffffda RBX: 00007f231d5e5fa0 RCX: 00007f231d38f749 [ 1093.827447][T31264] RDX: 0000000000008810 RSI: 0000200000000700 RDI: 0000000000000004 [ 1093.837373][T31264] RBP: 00007f231d413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1093.846438][T31264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.855679][T31264] R13: 00007f231d5e6038 R14: 00007f231d5e5fa0 R15: 00007ffd0cc98098 [ 1093.864668][T31264] [ 1093.868389][T31264] Kernel Offset: disabled [ 1093.873273][T31264] Rebooting in 86400 seconds..