last executing test programs: 3.567462504s ago: executing program 2 (id=680): syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x1, {[@fastopen={0x22, 0x11, "79c4fd826e79ceae3697e1c46f1327"}]}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3252}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9}, 0x90) socket$inet6(0xa, 0x80803, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r1, 0x2, 0x0, 0x1, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r1, 0x2, 0x0, 0x1, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@fallback=r1, r0, 0x18, 0x10, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x4c, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x4c, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611057eb00000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.335305463s ago: executing program 2 (id=684): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1a) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x240100c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x28, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) poll(&(0x7f0000000040), 0x55, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) setsockopt$packet_tx_ring(r13, 0x107, 0x5, &(0x7f0000000180)=@req={0xffff0adc, 0x4, 0x7fff, 0xcd1a}, 0x10) 2.573985994s ago: executing program 4 (id=692): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2b8, 0x50, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xbc, 0x1, 0x0, 0x1, [@nested={0xb7, 0x10, 0x0, 0x1, [@typed={0x6, 0x17, 0x0, 0x0, @str='.\x00'}, @typed={0x4, 0x73}, @generic="fde26fb28bb18915aad91aede4955b1a8c7108c96e7cb99045b1ea213fe3849c24a6509770ed53af7cd574126cbfbed3b835256920807b810038cb4b92e1567e19ad6c281cf229ace30ecdca8104f161c8b29e03a60c0ccfe2851da3cabf32284fbc781a0301ddbf113e82c90f4d907758d08bfe3b623c2f9f0d12cc4a36ef829dc79aca5860fb14ae2bda0c122727ba8a6c02112d3ace017947a90b27447719cdbaa7c6b803ef"]}]}, @nested={0x1e0, 0xe6, 0x0, 0x1, [@nested={0x1dc, 0x8e, 0x0, 0x1, [@nested={0xca, 0x46, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @uid=r1}, @typed={0x4, 0x64}, @generic="79acc90da997fa22e1e79fb4faec16714bc4aee1024ac02bfa432cb57797217c1458edc0a60a045ee789da8cb5a89dfb9eef5c9762b68c960bf948c73038e4e0918d9ca6a7b46048309edf146d26136a65ceebe85e3ef27da0bc448036871bc93fd7b791565f2676cc467278b0fb6ef8e30f2459fac695b7f02d7dda12cf8d45616f20b76869f6e5a1964ee4427b798da213b120b03c88d9d5b81ae09aa1f059928aaeb0c76302", @typed={0x8, 0xe, 0x0, 0x0, @uid}, @generic="e27f244b7ff0d4036611b3"]}, @nested={0x10a, 0x4b, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x8}, @generic="a65daf9930f97ba55cfe82ca74a06321de771bf70a3ed7719501ffeb9aacbc23df86db1ca94228ef6e29bc9c26c070065aaaf9bc02c12d64d2f51bce3520d14bef201d94f78baad03f1f5e830b79723020ae380277bf2210c32a6da6b8cb141b47d148f61a87abb5d50986e1250d93fa64dc1da5b04bd42cfacc9f8a380c69d9c0f2b56c07d6628d063477abffd3847f0c0a849a11f47ca25c36ab8213cb660695783c0dd1489944f8dd01da8a23b94628082424605d32d3f3d15e2e11ec82ec6c28e6e88565168a238d202c540611c278b0f85df4236d741abe996ba4f67fa49641234451414f5999f10626b78c0656de5d", @nested={0x4, 0x36}, @typed={0x8, 0x105, 0x0, 0x0, @ipv4=@remote}]}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x400c801}, 0x40408d4) socket$inet6(0xa, 0x80803, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$inet(0x2, 0x800, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000040)="8907040400", 0x5) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2.305003721s ago: executing program 1 (id=697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0xb00, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 2.176979958s ago: executing program 2 (id=698): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket(0x3, 0xa, 0x3) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0xc) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x0) (async) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x0) shutdown(r0, 0x1) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @any, 0x11}, 0xa) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000000480)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) close(r0) (async) close(r0) 2.028940177s ago: executing program 2 (id=700): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000002100)={'macsec0\x00', 0x8a0}) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='macsec0\x00', 0x20000, &(0x7f0000000040)={@align=0x10, {0x0, 0x1000, 0x6, 0x3}}, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x2}) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) (async, rerun: 64) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc093235457f25725b81019e5d061ea6f5974b145500c8a5ce3bcffc9853267f44afb8f5de862d03e3bb0dda8c68f15d40cd1edbaac9d5a05906a4786bbfb5ef8312a53d79fe6e2e7aea4b93b8d"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) listen(r5, 0x0) (async) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, 0x84) 2.008555331s ago: executing program 1 (id=701): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) (async) r7 = socket(0x22, 0x2, 0x1) recvmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x42) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async) connect$inet(r8, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={0x28, r4, 0x1, 0xffffffff, 0x25dfdbfd, {0x1e}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x28}, 0x1, 0x100000000000000}, 0x10) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4000010601"], 0x5) (async) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0x8004b707, 0x0) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) close(r11) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.842894707s ago: executing program 4 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xfffffffffffffe2c) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@empty, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x1, 0x3, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x7}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000084) 1.826388924s ago: executing program 2 (id=705): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008001) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20084}, 0x4) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) bind$nfc_llcp(r4, &(0x7f00000002c0)={0x27, r5, 0xffffffffffffffff, 0x7, 0x9, 0x0, "d5d02f2f79dda4a1399e74601c5f97331ea17e30570172d535f3a1dbc8fe522eead3c7a33a4f2c69a288a6fbdf43bda92410cd7663fc4450a76d2c8588b9a7", 0x3d}, 0x60) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getnexthop={0x20, 0x6a, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'erspan0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x80, 0x1, {{0x35, 0x4, 0x2, 0x9, 0xd4, 0x68, 0x0, 0x7, 0x4, 0x0, @local, @multicast2, {[@cipso={0x86, 0x17, 0x1, [{0x1, 0x11, "bcd668e976c65542e1a9aa8fe22b86"}]}, @timestamp_prespec={0x44, 0x14, 0x70, 0x3, 0xf, [{@loopback, 0xffffff0c}, {@multicast1, 0xea}]}, @generic={0x82, 0x12, "4297049b235ca446b60c724d3fbfa802"}, @rr={0x7, 0x27, 0x49, [@multicast2, @broadcast, @empty, @broadcast, @remote, @private=0xa010102, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x13}]}, @cipso={0x86, 0x5a, 0x3, [{0x7, 0x8, "492cd01debda"}, {0x1, 0x10, "6e783f5e5e6b41cd8e6281f1b4c2"}, {0x0, 0xf, "5a12f2b3df62a845cbeeeff1dc"}, {0x1, 0x12, "febe33f664bffeb77d060b440382b1fe"}, {0x1, 0xb, "92656b309cfa708fac"}, {0x2, 0x10, "b7734527a951d0d910c6c178cd03"}]}]}}}}}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r7, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x240080c1) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1a4, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x401, 0x73}}}}, [@NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x30}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x10}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6e}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x8, 0x7]}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x11, 0x13, [{0x6}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x36, 0x1}, {0x16}, {0x48}, {}, {0x30}, {0xb}, {0x18}, {0x30}, {0x18, 0x1}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x29, 0xbe, "7e6cf4b95c1187187dd4dbe3e1694891cd53f8e67c7af55847cf4d15ce9279f4e3ab4e14c7"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc1, 0xbe, "7368025de10eacc27e6b3a1f26dd39583cde0b8e5ee8626c77f3726b396a157bf65099281398b5b2530687e43d0f90f4d06954fee9a4ac81beddbdb0e8bca0c04400725d6b76ba4ef486a0a4a7055a12a8b277822b59fffcb5b73019304afa29c3c08cbdbe6f361f6a336e8a396b5427cc34da717937f5b315098b85d1a84105b0d49bc21c4231309c1e162550effe8ef2d7d00beb0733104c05f6e78c269486aa42efd40e4523c63152f0bea204976ba377efda8a81aa95c0db49b65d"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40080}, 0x800) (async, rerun: 64) r12 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x2, 0x8, 0x0, 0x4, 0x13, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb8, 0x6, {0x6, 0x0, 0x4, 0x1, 0x0, 0x4, 0x0, @in6=@mcast1, @in6=@local}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2b}, @sadb_ident={0x2, 0xb, 0xa, 0x0, 0x9}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@dev={0xac, 0x14, 0x14, 0x33}, 0xef1bb6b2d9f0afc6, 0x10, 0x10}]}, 0x98}}, 0x0) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r14, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4) (async, rerun: 64) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async, rerun: 64) pipe(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000d00), 0x40, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000d40)={0x3, 'vlan0\x00', {0xfffffff8}, 0x1}) connect$can_j1939(r16, &(0x7f0000000d80)={0x1d, r8, 0x0, {0x2, 0xff, 0x2}, 0xfe}, 0x18) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), r0) 1.81160399s ago: executing program 3 (id=706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x81}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x54}}, 0x0) 1.61271627s ago: executing program 1 (id=709): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0f00000004000000000000003ef2f034c3bb09e38c0c550e25b0900a8b9dcb046065af636effa229ffab9ebb0b1fe01ec5d3b27e0af079bfd5530000a9c1fbba5acf3fa7bd3aa153a4276d44c12e3fbdd68f2e423e522a1053ca4fa90723a79852c355f3fe88599151c82197c6f60baa01ededa80f503477caba98dcddae2d0eb682bb1f5c8e37dce3397af9c8d76295d922890d975a42d68acf08cc51d0c29c672dcc029327812facf34f460eacf8729194078d1c3181cdb2745d13591d99e9d7abfb21d4605616c9bee3738417c1c5fa08cf03ea286643c7416640764f7e37", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x5, &(0x7f0000000380)=""/105, 0x69}, 0x1}, {{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000001800)=[{&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/120, 0x78}, {&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/108, 0x6c}, {&(0x7f0000001780)=""/71, 0x47}, {&(0x7f0000000700)=""/36, 0x24}], 0x6, &(0x7f0000001880)=""/253, 0xfd}, 0x8}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/69, 0x45}, {&(0x7f0000001a00)=""/129, 0x81}, {&(0x7f0000003580)=""/4086, 0xff6}], 0x3, &(0x7f0000002b00)=""/251, 0xfb}, 0xb5}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002c00)=""/82, 0x52}, {&(0x7f0000002c80)=""/41, 0x29}, {&(0x7f0000002cc0)=""/174, 0xae}, {&(0x7f0000002d80)=""/56, 0x38}, {&(0x7f0000002dc0)=""/171, 0xab}, {&(0x7f0000002e80)=""/103, 0x67}, {&(0x7f0000002f00)=""/229, 0xe5}], 0x7}, 0x5}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000003080)=""/247, 0xf7}, {&(0x7f0000003180)=""/11, 0xb}, {&(0x7f00000031c0)=""/145, 0x91}, {&(0x7f0000003280)=""/137, 0x89}, {&(0x7f0000003340)=""/108, 0x6c}, {&(0x7f00000033c0)=""/237, 0xed}, {&(0x7f00000034c0)=""/149, 0x95}, {&(0x7f0000004780)=""/4107, 0x100b}], 0x8, &(0x7f0000004600)=""/20, 0x14}, 0x81}], 0x5, 0x10103, 0x0) recvmsg$unix(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/151, 0x97}, {&(0x7f00000057c0)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/189, 0xbd}], 0x4, &(0x7f0000001d00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000000) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001ac0), 0x10) 1.582391407s ago: executing program 3 (id=710): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x158, 0x24, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x1, 0xb}, {0x6, 0xffe0}, {0xfff2, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0xd, 0x7, 0x0, 0x9, 0x7, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x1, 0x75, 0x0, 0x4, 0x0, 0x405, 0x58f, 0x4}}, {0xc, 0x2, [0x6, 0x7, 0xe, 0x8b0]}}, {{0x1c, 0x1, {0xc6, 0x8, 0xfb6a, 0x5, 0x1, 0x0, 0xd4c, 0x8}}, {0x14, 0x2, [0x8, 0xf800, 0x5, 0x1, 0x2, 0xd, 0x6ddf, 0x9]}}, {{0x1c, 0x1, {0xa1, 0x5, 0x3, 0x8, 0x0, 0x54, 0xffff, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1, 0x0, 0x6, 0x8, 0x0, 0x3, 0x6, 0x6}}, {0x10, 0x2, [0x8, 0x30af, 0xb, 0x3, 0xa20b, 0x6]}}, {{0x1c, 0x1, {0x15, 0x4, 0xffff, 0x3, 0x0, 0x7fff, 0x5, 0x3}}, {0xa, 0x2, [0x2, 0x1, 0x9]}}, {{0x1c, 0x1, {0x5, 0x1, 0x78ed, 0x9, 0x0, 0x8e, 0x290, 0x2}}, {0x8, 0x2, [0x101, 0x92]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x800, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x31}}, '\x00\x00\v\x00\x00\x00\x00\x00'}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r12) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.508871135s ago: executing program 4 (id=711): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000007b860000000000000000f8fffffffffffeffffffffffffffffffff7f0000000000000000000000000000000000000000000a00000000000000000000008040000000000000000008000000000000000000000000000000004400050000000000000000000000000000000000000000003c", @ANYRES32=0x0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, 0x0}, 0x40040) 1.477214214s ago: executing program 0 (id=712): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x22052, r0, 0x0) 1.383215969s ago: executing program 1 (id=713): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) sendmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000010c0)="f3", 0x1}], 0x1}}], 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000380)={0x1ff, 0xfffffffe}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x5}]}, {0x0, [0x5f]}}, &(0x7f0000001100)=""/4096, 0x27, 0x1000, 0x1}, 0x28) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r1}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1}, &(0x7f00000004c0), &(0x7f0000000500)='%pS \x00'}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000700)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r5}, 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x900, 0x0, 0xffffffffffffffff, 0x6, '\x00', r6, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000008c0)=@bloom_filter={0x1e, 0xeae2, 0x1, 0xa590, 0x4, r7, 0x10, '\x00', r6, r4, 0x0, 0x1, 0x1, 0xe}, 0x50) openat$cgroup_ro(r3, &(0x7f0000000400)='blkio.bfq.sectors\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000000000000000000011000a58000000060a0b040000000000000000020000002c000480280001800a00010072616e67650000001800028008000140000000000800024000000000040003800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/158, 0x9e}], 0x1}, 0x10040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r9}) 1.05661484s ago: executing program 3 (id=714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="20002000070a0000000000000000010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4000850) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f00000003c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003300), r5) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000033c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x1c, r9, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000003240)={0x0, @in6={{0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x983c}}}, &(0x7f00000007c0)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000002d40)={r11, 0x6}, 0x8) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r10, &(0x7f0000000040)={0x1d, r12}, 0xffffffffffffff57) recvmmsg(r2, &(0x7f0000003040)=[{{&(0x7f0000000340)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4087, 0xff7}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000031c0)=""/85, 0x55}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/156, 0x9c}, {&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000500)=""/45, 0x2d}], 0x8, &(0x7f0000001900)=""/133, 0x85}, 0x2}, {{&(0x7f00000019c0)=@qipcrtr, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001a40)=""/4091, 0xffb}, {&(0x7f0000002a40)=""/124, 0x7c}, {&(0x7f0000002ac0)=""/18, 0x12}, {&(0x7f0000002b00)=""/125, 0x7d}], 0x4}, 0xe5a9}, {{&(0x7f0000002bc0)=@phonet, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002c40)=""/22, 0x16}, {&(0x7f0000002c80)=""/145, 0x91}, {&(0x7f0000002d40)}], 0x3}, 0x8}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002dc0)=""/66, 0x42}], 0x1, &(0x7f0000002e80)=""/90, 0x5a}, 0x5}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002f80), 0x0, &(0x7f0000002fc0)=""/109, 0x6d}, 0x2}], 0x5, 0x40001112, &(0x7f0000003180)={0x0, 0x3938700}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r12, {0x1, 0xfff2}, {0xffff, 0x2}, {0x1}}}, 0x24}}, 0x80) 1.051772793s ago: executing program 0 (id=715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 873.621237ms ago: executing program 0 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffc}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x20, 0x140d, 0x1, 0x70bd28, 0x4, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x52}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r8, &(0x7f0000000040), r7, 0x0, 0x800000000ff, 0x0) sendmsg$tipc(r2, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40011) 801.056576ms ago: executing program 1 (id=717): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003000), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13340000000000005ab9594700"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "00e200"}]}]}, 0x104}}, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x54, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0xf0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x19}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '{\x7f{\\\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20018010}, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x9}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x27d6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8d}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 723.380731ms ago: executing program 0 (id=718): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) 585.697425ms ago: executing program 3 (id=719): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100000a0000000000000000000000030006000000000002000000ffffffff000000000000000005000500001800000a00000000000000000000000000000000000000000000010000000000000000"], 0x50}, 0x1, 0x7}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x7, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x6, 0x20, 0x3d94, 0x9}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000500)={r9, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x4}}, 0x2, 0x2}, &(0x7f00000003c0)=0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r13 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xca, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendto$packet(r5, &(0x7f0000000240)="d9f29ba9d0db1507929c6a6e4557279b745667f623e6ef3c1b80a6ebd33259891ef5a43ce80e6647ae30680e818150ca3cc457a2d44a04bd07362ca230ede680b25f4f0f796f3e8fe8292eff55a9fe94ae805c6fd17ad5847a8e453f71b7ba2d7191b86b806fbd3bccb68d94337cba08711ba3d067d4cc5ec534ade2c6b180c11c8976f25c7e342970fc9ebd277f", 0x8e, 0x40050, &(0x7f0000000140)={0x11, 0x7, r12, 0x1, 0x6, 0x6, @broadcast}, 0x14) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000100)={0x3, 0x7, 0x1, 0x6, 0x0, 0x5}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000000000200000000000a000000", @ANYRES32=r7, @ANYBLOB="0000000014000100fe880000000000000000000000000001"], 0x30}}, 0x4000000) 408.716865ms ago: executing program 4 (id=720): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000400000005000500020000000500010006"], 0x6c}}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) 289.889372ms ago: executing program 0 (id=721): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1860000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000007100000083000000bf0900000000000055090100000000009500000000000000bf91000000c40a0000000000000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000001600)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1fc, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xbc, 0x5, "a82a1f83496a10c5496d7a906796b7d8c29b245f28b3c3b319d241701b734e335253dd13c05a35e9b3ab0a03872b1d9aed022509a95259bd29c3a658d39a557c2ef25a08a51dc58d2d7716db3a0a43189cfdd365a6373ae226fb7146127bde003906eadfb27137bd48d5f8cc42c680eeb65c10809c8254992660ecda436fc97721742e89bccea7c7eae995a64a8b8a559fc178b47db0eca70bd8d1f4151be5ab3a8a1a2ab6417f404acebdb5733a8b14788231b5448871b2"}, @ETHTOOL_A_BITSET_VALUE={0xd5, 0x4, "4e50f0e184f3954bc1e5dc860a1ece3d0113f279b68e05e03805cda0b56fb31c2960029454d0c69fd88c9fcb200f8bcde915ff955033d3f85dbd9c56b71a06ce903e3deb7a8a3bf92fdf691c872f85a8a4661353309f2928886323519b7a74f190fe9856cfca714dc9384b65a0a3a272ce254da0f7361c45319af64684a0937679be991ee4e3addd8556db75d0b2f7b3a67da22f67a551f763a63b152621a10b778dd39882a9e99be2133439c760b32e1ca93ef1bc8495f40457496419463037cf19bf56ca868dbb6c07e557a14ef10f36"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "46a2a81135a00d1b5c0f169d9893e5df201fe05f91c342e866b902e4d87d0e383490055ab418aa95336e82045dac9cce579379"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff01}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40}, 0x400c010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r12, @ANYBLOB="24005a8020000180140003000000000000000000010000000000000004000200040001"], 0x40}}, 0x0) (async) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002740)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000240)=""/114, 0x72}, {&(0x7f0000000500)=""/56, 0x38}, {&(0x7f0000000540)=""/41, 0x29}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f00000005c0)=""/134, 0x86}], 0x5, &(0x7f00000007c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000900)=""/30, 0x1e}, {&(0x7f0000000940)=""/95, 0x5f}, {&(0x7f00000009c0)=""/28, 0x1c}, {&(0x7f0000000a00)=""/149, 0x95}, {&(0x7f0000000ac0)=""/27, 0x1b}, {&(0x7f0000000b00)=""/93, 0x5d}, {&(0x7f0000000b80)=""/220, 0xdc}, {&(0x7f0000000c80)=""/107, 0x6b}, {&(0x7f0000000d00)=""/193, 0xc1}, {&(0x7f0000000e00)=""/16, 0x10}], 0xa, &(0x7f0000000f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000f80)=""/248, 0xf8}, {&(0x7f0000001080)}], 0x2, &(0x7f0000001100)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x190}}, {{&(0x7f00000012c0), 0x6e, &(0x7f0000002600)=[{&(0x7f0000001340)=""/28, 0x1c}, {&(0x7f0000001380)=""/116, 0x74}, {&(0x7f0000001400)=""/121, 0x79}, {&(0x7f0000001480)=""/139, 0x8b}, {&(0x7f00000028c0)=""/4098, 0x1002}, {&(0x7f0000002540)=""/101, 0x65}, {&(0x7f00000025c0)=""/63, 0x3f}], 0x7, &(0x7f0000002680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}], 0x4, 0x10000, &(0x7f0000002880)={r4, r5+10000000}) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) 232.197822ms ago: executing program 4 (id=722): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001000000000000000360e1be9320000bc000700121f80000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000040)) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 222.536296ms ago: executing program 3 (id=723): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac41789851627b61cea054cb3c17ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769a", 0xd8}], 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) (async) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) 220.510455ms ago: executing program 1 (id=724): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff7, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfcf2, 0x40c0, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) 60.953901ms ago: executing program 2 (id=725): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000180), &(0x7f00000001c0)=""/7, &(0x7f0000000200), &(0x7f0000000240)="2b0daee64181c6830c4be15cbde793ece278894075d15568ad8788b55e23ed72a221669d058ebf11116c202d5d44f07bc6df0efd2536d23dc07b3eee5d56efe98902eaf35f6eabaeeea36d4ced41cee11c156225d211ad042cc45eccf6bafe0c828a0704cb82", 0x8, r1, 0x4}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000180), &(0x7f00000001c0)=""/7, &(0x7f0000000200), &(0x7f0000000240)="2b0daee64181c6830c4be15cbde793ece278894075d15568ad8788b55e23ed72a221669d058ebf11116c202d5d44f07bc6df0efd2536d23dc07b3eee5d56efe98902eaf35f6eabaeeea36d4ced41cee11c156225d211ad042cc45eccf6bafe0c828a0704cb82", 0x8, r1, 0x4}, 0x38) (async) 60.322981ms ago: executing program 4 (id=726): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r3, 0xff, 0x30}, 0xc) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x81}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 59.169151ms ago: executing program 0 (id=727): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x75}], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffead}, 0x94) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000001200)={@mcast1}, 0x14) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bb3, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in=@dev}}]}, 0x50}}, 0x0) 0s ago: executing program 3 (id=728): syz_init_net_socket$ax25(0x3, 0x5, 0xcf) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x4, 0x1, {0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}}}, 0x3a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 64.567540][ T5803] cgroup: Unknown subsys name 'net' [ 64.636509][ T5803] cgroup: Unknown subsys name 'cpuset' [ 64.644994][ T5803] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.966630][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.019844][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.029234][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.044136][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.054245][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.061786][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.062801][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.069384][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.083808][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.091811][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.093029][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.099252][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.107105][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.113525][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.121573][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.128412][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.134932][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.142565][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.148470][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.155866][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.169364][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.173684][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.184411][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.191655][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.201733][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.203451][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.707390][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 69.752110][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 69.838915][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 69.887913][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 69.927472][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 70.047209][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.054956][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.062056][ T5816] bridge_slave_0: entered allmulticast mode [ 70.069242][ T5816] bridge_slave_0: entered promiscuous mode [ 70.085933][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.093029][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.100398][ T5824] bridge_slave_0: entered allmulticast mode [ 70.107301][ T5824] bridge_slave_0: entered promiscuous mode [ 70.124174][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.131280][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.138739][ T5816] bridge_slave_1: entered allmulticast mode [ 70.145626][ T5816] bridge_slave_1: entered promiscuous mode [ 70.166121][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.173214][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.181073][ T5824] bridge_slave_1: entered allmulticast mode [ 70.187914][ T5824] bridge_slave_1: entered promiscuous mode [ 70.250648][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.257969][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.265173][ T5815] bridge_slave_0: entered allmulticast mode [ 70.271988][ T5815] bridge_slave_0: entered promiscuous mode [ 70.297228][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.304469][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.311557][ T5818] bridge_slave_0: entered allmulticast mode [ 70.318587][ T5818] bridge_slave_0: entered promiscuous mode [ 70.328171][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.337547][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.345259][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.352469][ T5815] bridge_slave_1: entered allmulticast mode [ 70.359633][ T5815] bridge_slave_1: entered promiscuous mode [ 70.377817][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.389972][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.399402][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.406544][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.413902][ T5818] bridge_slave_1: entered allmulticast mode [ 70.420667][ T5818] bridge_slave_1: entered promiscuous mode [ 70.429233][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.447253][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.454489][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.461567][ T5823] bridge_slave_0: entered allmulticast mode [ 70.468621][ T5823] bridge_slave_0: entered promiscuous mode [ 70.512356][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.519706][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.527089][ T5823] bridge_slave_1: entered allmulticast mode [ 70.534112][ T5823] bridge_slave_1: entered promiscuous mode [ 70.568457][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.588999][ T5816] team0: Port device team_slave_0 added [ 70.597177][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.608510][ T5824] team0: Port device team_slave_0 added [ 70.616160][ T5824] team0: Port device team_slave_1 added [ 70.631553][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.650366][ T5816] team0: Port device team_slave_1 added [ 70.657678][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.687016][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.720173][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.727239][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.753315][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.776066][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.803297][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.810470][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.837006][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.849494][ T5815] team0: Port device team_slave_0 added [ 70.864949][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.871875][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.898063][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.910570][ T5818] team0: Port device team_slave_0 added [ 70.929013][ T5815] team0: Port device team_slave_1 added [ 70.943787][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.950726][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.977289][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.990121][ T5818] team0: Port device team_slave_1 added [ 71.027911][ T5823] team0: Port device team_slave_0 added [ 71.041141][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.048254][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.074422][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.086640][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.093805][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.119790][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.140985][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.147956][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.174143][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.186555][ T5823] team0: Port device team_slave_1 added [ 71.209385][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.216601][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.244269][ T51] Bluetooth: hci4: command tx timeout [ 71.248045][ T51] Bluetooth: hci1: command tx timeout [ 71.254266][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.259149][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.267081][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.314810][ T51] Bluetooth: hci2: command tx timeout [ 71.314824][ T5825] Bluetooth: hci0: command tx timeout [ 71.315005][ T5825] Bluetooth: hci3: command tx timeout [ 71.353200][ T5824] hsr_slave_0: entered promiscuous mode [ 71.359504][ T5824] hsr_slave_1: entered promiscuous mode [ 71.379565][ T5816] hsr_slave_0: entered promiscuous mode [ 71.385850][ T5816] hsr_slave_1: entered promiscuous mode [ 71.391779][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 71.398040][ T5816] Cannot create hsr debugfs directory [ 71.413090][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.420318][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.446336][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.458421][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.465421][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.491318][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.517299][ T5815] hsr_slave_0: entered promiscuous mode [ 71.524085][ T5815] hsr_slave_1: entered promiscuous mode [ 71.530099][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 71.535868][ T5815] Cannot create hsr debugfs directory [ 71.561275][ T5818] hsr_slave_0: entered promiscuous mode [ 71.567698][ T5818] hsr_slave_1: entered promiscuous mode [ 71.573877][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 71.579601][ T5818] Cannot create hsr debugfs directory [ 71.740188][ T5823] hsr_slave_0: entered promiscuous mode [ 71.746387][ T5823] hsr_slave_1: entered promiscuous mode [ 71.752327][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 71.758124][ T5823] Cannot create hsr debugfs directory [ 72.088020][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.100567][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.125746][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.144160][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.176785][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.187481][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.210049][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.219044][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.285023][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.297024][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.307173][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.333152][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.399717][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.422396][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.454447][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.482328][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.516144][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.552144][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.562377][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.571776][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.582676][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.634857][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.648420][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.662171][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.669409][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.690298][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.697392][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.748928][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.771790][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.778910][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.789456][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.796541][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.855631][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.868700][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.915257][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.952488][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.978208][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.987438][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.994654][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.039583][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.046740][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.076127][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.130782][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.137951][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.150140][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.206012][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.213108][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.228401][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.235550][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.258240][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.268712][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.275813][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.313845][ T5825] Bluetooth: hci1: command tx timeout [ 73.315411][ T5832] Bluetooth: hci4: command tx timeout [ 73.393312][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.396337][ T5832] Bluetooth: hci3: command tx timeout [ 73.396732][ T5825] Bluetooth: hci2: command tx timeout [ 73.412374][ T51] Bluetooth: hci0: command tx timeout [ 73.428203][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.486563][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.521754][ T5815] veth0_vlan: entered promiscuous mode [ 73.589169][ T5815] veth1_vlan: entered promiscuous mode [ 73.635358][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.707693][ T5815] veth0_macvtap: entered promiscuous mode [ 73.730883][ T5815] veth1_macvtap: entered promiscuous mode [ 73.739272][ T5816] veth0_vlan: entered promiscuous mode [ 73.796578][ T5816] veth1_vlan: entered promiscuous mode [ 73.814383][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.850320][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.867132][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.904171][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.913013][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.939347][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.949881][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.964309][ T5824] veth0_vlan: entered promiscuous mode [ 73.990377][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.020692][ T5816] veth0_macvtap: entered promiscuous mode [ 74.041924][ T5824] veth1_vlan: entered promiscuous mode [ 74.067283][ T5816] veth1_macvtap: entered promiscuous mode [ 74.139112][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.158319][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.167153][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.212058][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.247420][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.249102][ T5824] veth0_macvtap: entered promiscuous mode [ 74.255333][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.284716][ T1091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.294607][ T1091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.314065][ T5824] veth1_macvtap: entered promiscuous mode [ 74.330015][ T1091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.339535][ T1091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.367178][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.409598][ T5818] veth0_vlan: entered promiscuous mode [ 74.458589][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.473802][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.481627][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.496541][ T5823] veth0_vlan: entered promiscuous mode [ 74.515832][ T5823] veth1_vlan: entered promiscuous mode [ 74.537221][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.552706][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.562814][ T5818] veth1_vlan: entered promiscuous mode [ 74.574260][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.583031][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.605913][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.608640][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.622271][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.713195][ T5818] veth0_macvtap: entered promiscuous mode [ 74.746154][ T5818] veth1_macvtap: entered promiscuous mode [ 74.777862][ T5823] veth0_macvtap: entered promiscuous mode [ 74.829628][ T5823] veth1_macvtap: entered promiscuous mode [ 74.861601][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.873917][ T5941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7'. [ 74.945698][ T5941] : entered promiscuous mode [ 74.978679][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.027856][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.040709][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.053045][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.077662][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.100921][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.122076][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.143549][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.174365][ T5949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.210133][ T5949] x_tables: duplicate underflow at hook 2 [ 75.235821][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.264821][ T5957] netlink: 'syz.3.11': attribute type 11 has an invalid length. [ 75.304010][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.364338][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.382568][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.394095][ T51] Bluetooth: hci1: command tx timeout [ 75.399795][ T5832] Bluetooth: hci4: command tx timeout [ 75.404406][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.420127][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.433188][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.441475][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.452434][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.473776][ T51] Bluetooth: hci2: command tx timeout [ 75.479184][ T51] Bluetooth: hci0: command tx timeout [ 75.483537][ T5832] Bluetooth: hci3: command tx timeout [ 75.614811][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.636497][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.760438][ T5968] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.799598][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.821779][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.048970][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 76.060663][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.068688][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.077136][ T5988] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.081385][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 76.132557][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.143030][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.308754][ T1091] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.338922][ T1091] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.381284][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.392274][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.424784][ T3539] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.463508][ T3539] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.573218][ T6009] Zero length message leads to an empty skb [ 76.583078][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 76.860500][ T6020] netlink: 108 bytes leftover after parsing attributes in process `syz.1.25'. [ 77.151089][ T6042] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 77.159240][ T6037] bond1: Removing last ns target with arp_interval on [ 77.373023][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 77.440267][ T6059] netlink: 'syz.3.37': attribute type 9 has an invalid length. [ 77.473830][ T5832] Bluetooth: hci1: command tx timeout [ 77.480537][ T5832] Bluetooth: hci4: command tx timeout [ 77.554000][ T5825] Bluetooth: hci0: command tx timeout [ 77.554007][ T51] Bluetooth: hci2: command tx timeout [ 77.566594][ T5832] Bluetooth: hci3: command tx timeout [ 77.656868][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 77.739710][ T6069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.776953][ T6081] warning: `syz.2.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.818841][ T6084] xfrm1: entered allmulticast mode [ 77.861873][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.999265][ T6084] bond1 (unregistering): Released all slaves [ 78.262425][ T6105] Cannot find add_set index 0 as target [ 78.269131][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 78.350448][ T6108] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.52'. [ 78.450764][ T6119] syz.0.56 uses obsolete (PF_INET,SOCK_PACKET) [ 78.454512][ T6117] syzkaller0: entered promiscuous mode [ 78.462928][ T6117] syzkaller0: entered allmulticast mode [ 78.645566][ T6125] syzkaller0: entered promiscuous mode [ 78.663407][ T6125] syzkaller0: entered allmulticast mode [ 78.712914][ T6132] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 78.720571][ T6132] team0: Device macvlan2 is already an upper device of the team interface [ 78.741311][ T6131] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 78.933282][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.63'. [ 79.013683][ T6144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.344908][ T6166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.634586][ T6179] trusted_key: syz.3.78 sent an empty control message without MSG_MORE. [ 79.670241][ T6179] bridge1: entered promiscuous mode [ 79.675901][ T6179] bridge1: entered allmulticast mode [ 79.681680][ T6191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.717815][ T6191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.820784][ T6197] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 79.838306][ T6198] Cannot find add_set index 0 as target [ 80.036088][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.043749][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.162599][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.175942][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.314720][ T1091] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.333481][ T1091] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.396721][ T1091] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.418648][ T6225] __nla_validate_parse: 1 callbacks suppressed [ 80.418663][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.88'. [ 80.434347][ T1091] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.519478][ T6231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.91'. [ 80.531576][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 80.642819][ T6238] netlink: 84 bytes leftover after parsing attributes in process `syz.2.93'. [ 80.935294][ T6251] nbd: must specify a device to reconfigure [ 81.015924][ T6254] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 81.033701][ T6254] netlink: 184 bytes leftover after parsing attributes in process `syz.0.99'. [ 81.050400][ T6254] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 81.073275][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 81.091559][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.100'. [ 81.148423][ T6260] Cannot find add_set index 0 as target [ 81.282982][ T6271] netlink: 44 bytes leftover after parsing attributes in process `syz.3.104'. [ 81.419519][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 81.420866][ T6280] netlink: 'syz.2.105': attribute type 18 has an invalid length. [ 81.428420][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 81.476082][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.507347][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.570946][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.585371][ T6288] nbd: illegal input index 2958377 [ 81.601213][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.718055][ T6292] syzkaller0: entered promiscuous mode [ 81.750067][ T6292] syzkaller0: entered allmulticast mode [ 82.846752][ T6351] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 85.324124][ T6351] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 85.336469][ T6357] dvmrp6: entered allmulticast mode [ 85.542080][ T6369] __nla_validate_parse: 7 callbacks suppressed [ 85.542095][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 85.563894][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 85.576873][ T6372] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 85.580584][ T6369] veth1_to_team: entered promiscuous mode [ 85.630041][ T6369] veth1_to_team: left promiscuous mode [ 85.755847][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 85.764985][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 85.814494][ T6369] veth1_to_team: entered promiscuous mode [ 85.834522][ T6369] veth1_to_team: left promiscuous mode [ 85.848820][ T6333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.899409][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 85.936066][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 85.978458][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 86.010659][ T6390] netlink: 'syz.4.142': attribute type 10 has an invalid length. [ 86.019142][ T6384] team0: Port device team_slave_0 removed [ 86.031153][ T6390] veth0_vlan: left promiscuous mode [ 86.040273][ T6390] veth0_vlan: entered promiscuous mode [ 86.054278][ T6390] team0: Device veth0_vlan failed to register rx_handler [ 86.102129][ T6369] veth1_to_team: entered promiscuous mode [ 86.162768][ T6369] veth1_to_team: left promiscuous mode [ 86.233922][ T6400] xt_hashlimit: size too large, truncated to 1048576 [ 86.254293][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 86.281457][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 86.337365][ T6369] veth1_to_team: entered promiscuous mode [ 86.372594][ T6369] veth1_to_team: left promiscuous mode [ 86.507829][ T6415] tipc: Failed to obtain node identity [ 86.542623][ T6415] tipc: Enabling of bearer rejected, failed to enable media [ 86.542937][ T6416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.603439][ T47] cfg80211: failed to load regulatory.db [ 86.627185][ T6421] sctp: [Deprecated]: syz.0.152 (pid 6421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.627185][ T6421] Use struct sctp_sack_info instead [ 86.653513][ T6420] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 87.016840][ T6444] syzkaller0: entered promiscuous mode [ 87.045769][ T6444] syzkaller0: entered allmulticast mode [ 87.075326][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 87.532637][ T6469] : entered promiscuous mode [ 87.814759][ T6479] bond2 (unregistering): Released all slaves [ 87.966493][ T6499] veth0: entered promiscuous mode [ 88.098718][ T6462] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 88.244649][ T6512] netlink: 'syz.1.179': attribute type 2 has an invalid length. [ 88.308821][ T6512] 9: entered promiscuous mode [ 88.723581][ T6505] netlink: 'syz.0.176': attribute type 26 has an invalid length. [ 88.744741][ T6505] netlink: 'syz.0.176': attribute type 26 has an invalid length. [ 88.864778][ T6545] Bluetooth: MGMT ver 1.23 [ 88.977899][ T6551] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 89.006182][ T6551] syzkaller1: Refused to change device type [ 89.013289][ T6551] syzkaller1: tun_chr_ioctl cmd 3391657013 [ 89.152725][ T6564] syzkaller0: entered promiscuous mode [ 89.184214][ T6564] syzkaller0: entered allmulticast mode [ 89.264609][ T6569] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 89.417321][ T6569] bond2: Unable to set up delay as MII monitoring is disabled [ 89.466191][ T6569] bond2 (unregistering): Released all slaves [ 89.536847][ T6593] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 89.634469][ T6582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.725817][ T6606] Cannot find set identified by id 0 to match [ 89.765646][ T6603] bond2: entered promiscuous mode [ 89.816373][ T6603] bond2: entered allmulticast mode [ 89.838957][ T6603] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.961511][ T6617] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 89.983736][ T6622] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 90.226493][ T6634] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 90.240964][ T6634] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 90.523572][ T6654] tipc: Enabling of bearer rejected, failed to enable media [ 90.872536][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.907178][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.924454][ T3539] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.974422][ T3539] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.050270][ T6681] __nla_validate_parse: 15 callbacks suppressed [ 91.050287][ T6681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.229'. [ 91.066691][ T6681] netlink: 43 bytes leftover after parsing attributes in process `syz.0.229'. [ 91.078298][ T6690] vlan2: entered promiscuous mode [ 91.090853][ T6681] netlink: 'syz.0.229': attribute type 6 has an invalid length. [ 91.109967][ T6681] netlink: 'syz.0.229': attribute type 5 has an invalid length. [ 91.117215][ T6690] vlan2: entered allmulticast mode [ 91.123463][ T6681] netlink: 43 bytes leftover after parsing attributes in process `syz.0.229'. [ 91.154165][ T6690] hsr_slave_1: entered allmulticast mode [ 91.161587][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.233'. [ 91.435805][ T6709] macvlan0: entered promiscuous mode [ 91.479291][ T6712] tap0: tun_chr_ioctl cmd 2148553947 [ 91.495284][ T6719] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 91.529084][ T6707] syzkaller0: entered promiscuous mode [ 91.534660][ T6707] syzkaller0: entered allmulticast mode [ 91.598047][ T6725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.244'. [ 91.654850][ T6725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.244'. [ 91.668186][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 91.685243][ T6725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.244'. [ 91.696966][ T6725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.244'. [ 91.788996][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 91.930368][ T6738] PKCS7: Unknown OID: [4] (bad) [ 91.942011][ T6738] PKCS7: Only support pkcs7_signedData type [ 91.949086][ T6740] openvswitch: netlink: Flow actions attr not present in new flow. [ 92.946344][ T6807] netlink: get zone limit has 4 unknown bytes [ 93.465167][ T6839] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.211323][ T6888] netlink: 'syz.2.302': attribute type 1 has an invalid length. [ 95.111205][ T6956] ip6gre1: entered promiscuous mode [ 95.117027][ T6956] ip6gre1: entered allmulticast mode [ 95.132140][ T6962] SET target dimension over the limit! [ 95.155894][ T6962] syzkaller1: entered promiscuous mode [ 95.161477][ T6962] syzkaller1: entered allmulticast mode [ 95.338942][ T6972] netlink: 'syz.1.323': attribute type 12 has an invalid length. [ 95.393786][ T6972] bond1: option primary_reselect: invalid value (255) [ 95.402358][ T6972] bond1 (unregistering): Released all slaves [ 95.689205][ T6993] delete_channel: no stack [ 96.091755][ T7021] openvswitch: netlink: Flow actions attr not present in new flow. [ 96.124035][ T7026] netlink: 'syz.1.334': attribute type 39 has an invalid length. [ 96.222334][ T12] tipc: Subscription rejected, illegal request [ 96.238834][ T7034] netlink: 'syz.2.337': attribute type 7 has an invalid length. [ 96.249308][ T7037] __nla_validate_parse: 23 callbacks suppressed [ 96.249322][ T7037] netlink: 76 bytes leftover after parsing attributes in process `syz.1.334'. [ 96.372028][ T7041] netlink: 'syz.2.338': attribute type 2 has an invalid length. [ 96.702081][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 97.066299][ T7091] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.084397][ T7091] bond4: (slave lo): Enslaving as an active interface with an up link [ 97.089574][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 97.093030][ T7091] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 97.119388][ T7097] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 97.151990][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 97.170234][ T7093] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 97.306605][ T7106] netlink: 48 bytes leftover after parsing attributes in process `syz.3.352'. [ 97.325561][ T7108] netlink: 44 bytes leftover after parsing attributes in process `syz.2.354'. [ 97.392220][ T7113] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 97.482224][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 97.497018][ T7120] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 97.635662][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 97.645568][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 97.668598][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 97.997533][ T7139] geneve2: entered promiscuous mode [ 98.033311][ T7139] geneve2: entered allmulticast mode [ 98.033475][ T7151] netlink: 'syz.3.364': attribute type 83 has an invalid length. [ 98.117833][ T7155] netlink: 'syz.4.369': attribute type 1 has an invalid length. [ 98.176280][ T7155] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 98.193897][ T7163] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.207599][ T7155] bond2 (unregistering): Released all slaves [ 98.240657][ T7163] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 98.484433][ T7175] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 99.270558][ T7236] bond2: entered promiscuous mode [ 99.286490][ T7236] bond2: entered allmulticast mode [ 99.302980][ T7236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.692553][ T7266] syzkaller0: entered promiscuous mode [ 99.732540][ T7266] syzkaller0: entered allmulticast mode [ 100.055234][ T7283] block nbd0: server does not support multiple connections per device. [ 100.078995][ T7283] block nbd0: shutting down sockets [ 100.095112][ T7288] syzkaller0: entered promiscuous mode [ 100.103469][ T7288] syzkaller0: entered allmulticast mode [ 100.292427][ T7298] bond1: option lacp_active: mode dependency failed, not supported in mode balance-xor(2) [ 100.307430][ T7298] bond1 (unregistering): Released all slaves [ 100.653973][ T7322] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 100.900256][ T7334] syzkaller0: entered promiscuous mode [ 100.905837][ T7334] syzkaller0: entered allmulticast mode [ 101.293600][ T7358] __nla_validate_parse: 10 callbacks suppressed [ 101.293617][ T7358] netlink: 256 bytes leftover after parsing attributes in process `syz.2.424'. [ 101.358218][ T7358] netlink: 'syz.2.424': attribute type 9 has an invalid length. [ 101.394980][ T7368] nbd: must specify at least one socket [ 101.536622][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 101.934327][ T29] audit: type=1107 audit(1771505179.312:2): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='DZ{4SaoMbwr }-xŝwUV4^^&cjь[+z-x2+ZϦ-\{XtG@ɫ9yv[>Ps&ѝ,c9{' [ 102.027920][ T7407] bond1: option mode: unable to set because the bond device is up [ 102.058498][ T7406] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 102.072849][ T7406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.088990][ T7406] bond1: (slave lo): Enslaving as an active interface with an up link [ 102.095220][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.438'. [ 102.098373][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 102.115317][ T7406] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 102.137109][ T7415] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.145001][ T7415] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.162163][ T7407] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 102.317879][ T7428] netlink: 64 bytes leftover after parsing attributes in process `syz.2.440'. [ 102.755130][ T7460] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 102.926031][ T7469] tipc: Enabling of bearer rejected, failed to enable media [ 102.988757][ T7469] bridge2: entered promiscuous mode [ 102.996583][ T7469] bridge2: entered allmulticast mode [ 103.008649][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 103.010553][ T7469] team0: Port device bridge2 added [ 103.334221][ T7494] tipc: Failed to remove unknown binding: 66,0,0/0:1172792500/1172792501 [ 103.347123][ T7494] tipc: Failed to remove unknown binding: 66,0,0/0:1172792500/1172792501 [ 103.366259][ T7494] Bluetooth: MGMT ver 1.23 [ 103.553068][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 103.569720][ T7509] openvswitch: netlink: Key type 1568 is out of range max 32 [ 103.798460][ T7526] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.471'. [ 103.886766][ T7533] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 103.907556][ T7533] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 103.955800][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.974657][ T7533] bridge_slave_1: left allmulticast mode [ 103.980445][ T7533] bridge_slave_1: left promiscuous mode [ 103.990399][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.029972][ T7533] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 104.052956][ T7546] netlink: 56 bytes leftover after parsing attributes in process `syz.1.476'. [ 104.073683][ T7546] tipc: Enabling of bearer rejected, failed to enable media [ 104.116704][ T7548] netlink: 'syz.3.477': attribute type 8 has an invalid length. [ 104.135464][ T7545] netlink: 56 bytes leftover after parsing attributes in process `syz.1.476'. [ 104.163602][ T7545] tipc: Enabling of bearer rejected, failed to enable media [ 104.806637][ T7600] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 104.817043][ T7600] nbd: error processing sock list [ 104.837060][ T7600] block nbd1: shutting down sockets [ 104.915611][ T7600] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 104.932339][ T7600] nbd: error processing sock list [ 104.948521][ T7600] block nbd3: shutting down sockets [ 104.961233][ T7610] veth0: entered promiscuous mode [ 105.043968][ T7600] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 105.051685][ T7600] nbd: error processing sock list [ 105.062035][ T7600] block nbd1: shutting down sockets [ 105.124194][ T7600] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 105.140926][ T7600] nbd: error processing sock list [ 105.151316][ T7600] block nbd3: shutting down sockets [ 105.214255][ T7600] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 105.227630][ T7600] nbd: error processing sock list [ 105.232875][ T7600] block nbd1: shutting down sockets [ 105.277195][ T7621] veth1_to_bond: entered allmulticast mode [ 105.303070][ T7621] veth1_to_bond: left allmulticast mode [ 105.306956][ T7600] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 105.363440][ T7600] nbd: error processing sock list [ 105.368871][ T7600] block nbd1: shutting down sockets [ 105.474794][ T7600] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 105.493720][ T7600] nbd: error processing sock list [ 105.499010][ T7600] block nbd3: shutting down sockets [ 105.526506][ T7624] syzkaller0: entered promiscuous mode [ 105.543217][ T7624] syzkaller0: entered allmulticast mode [ 105.551080][ T7625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.575808][ T7600] nbd: error processing sock list [ 105.582181][ T7600] block nbd1: shutting down sockets [ 106.639463][ T7650] __nla_validate_parse: 66 callbacks suppressed [ 106.639481][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 106.691920][ T7651] netlink: 256 bytes leftover after parsing attributes in process `syz.1.507'. [ 106.877726][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 106.898956][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 107.015621][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 107.100217][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 107.149364][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e0c8000: rx timeout, send abort [ 107.212722][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 107.239019][ T7687] syzkaller0: entered promiscuous mode [ 107.249442][ T7688] validate_nla: 1 callbacks suppressed [ 107.249456][ T7688] netlink: 'syz.2.518': attribute type 5 has an invalid length. [ 107.264679][ T7687] syzkaller0: entered allmulticast mode [ 107.274586][ T7688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.518'. [ 107.316810][ T7688] geneve3: entered promiscuous mode [ 107.326311][ T7688] geneve3: entered allmulticast mode [ 107.335107][ T3539] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 107.347420][ T3539] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 107.457825][ T3539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 107.468141][ T3539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 107.484092][ T7697] syzkaller1: entered promiscuous mode [ 107.489672][ T7697] syzkaller1: entered allmulticast mode [ 107.632626][ T7712] ip6_vti0: entered promiscuous mode [ 107.639037][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 107.649625][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e0cac00: rx timeout, send abort [ 107.658365][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e0c8000: abort rx timeout. Force session deactivation [ 107.874595][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 108.157850][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e0cac00: abort rx timeout. Force session deactivation [ 110.256752][ T7692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.459638][ T9] IPVS: starting estimator thread 0... [ 110.464997][ T7738] netlink: 'syz.1.534': attribute type 62 has an invalid length. [ 110.563949][ T7740] IPVS: using max 32 ests per chain, 76800 per kthread [ 110.620750][ T7749] team0: No ports can be present during mode change [ 110.626896][ T7744] netlink: 'syz.0.536': attribute type 13 has an invalid length. [ 111.086407][ T7780] xfrm1: entered promiscuous mode [ 111.119917][ T7780] xfrm1: entered allmulticast mode [ 111.160703][ T7787] tipc: Enabling of bearer rejected, failed to enable media [ 111.515726][ T7812] tls_set_device_offload: netdev not found [ 111.652865][ T7816] __nla_validate_parse: 3 callbacks suppressed [ 111.652882][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 111.732413][ T7821] netlink: 32 bytes leftover after parsing attributes in process `syz.4.559'. [ 112.098425][ T7841] : entered promiscuous mode [ 112.120221][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 112.142647][ T7847] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 112.155651][ T7847] team0: Port device batadv1 added [ 112.161815][ T7848] syz_tun: entered allmulticast mode [ 112.198067][ T7848] dvmrp8: entered allmulticast mode [ 112.217682][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.569'. [ 112.320927][ T7860] lo: Caught tx_queue_len zero misconfig [ 112.327408][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 112.336889][ T7860] netem: incorrect ge model size [ 112.343164][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 112.352968][ T7860] netem: change failed [ 112.375070][ T7859] netlink: 52 bytes leftover after parsing attributes in process `syz.1.573'. [ 112.550225][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 112.561385][ T7876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.577'. [ 112.941039][ T7846] syz_tun: left allmulticast mode [ 113.227858][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'. [ 113.779885][ T7950] gretap0: entered promiscuous mode [ 113.845677][ T7950] gretap0: left promiscuous mode [ 113.877761][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.884956][ T7950] bridge0: port 2(bridge_slave_1) entered listening state [ 113.892333][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.899505][ T7950] bridge0: port 1(bridge_slave_0) entered listening state [ 113.957977][ T7950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.979998][ T7959] netlink: 'syz.0.599': attribute type 3 has an invalid length. [ 114.185390][ T7976] netlink: 'syz.2.605': attribute type 16 has an invalid length. [ 114.196200][ T7976] netlink: 'syz.2.605': attribute type 17 has an invalid length. [ 114.221835][ T7978] bridge3: entered promiscuous mode [ 114.262841][ T7978] bridge3: entered allmulticast mode [ 114.278113][ T7978] team0: Port device bridge3 added [ 114.333993][ T7976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.342244][ T7976] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.357719][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.373662][ T7976] netlink: 'syz.2.605': attribute type 16 has an invalid length. [ 114.375068][ T7978] bridge0: port 3(team0) entered blocking state [ 114.381471][ T7976] netlink: 'syz.2.605': attribute type 17 has an invalid length. [ 114.396358][ T7978] bridge0: port 3(team0) entered disabled state [ 114.402854][ T7978] team0: entered allmulticast mode [ 114.408188][ T7978] team_slave_0: entered allmulticast mode [ 114.414177][ T7978] team_slave_1: entered allmulticast mode [ 114.419919][ T7978] batadv1: entered allmulticast mode [ 114.427012][ T7978] team0: entered promiscuous mode [ 114.432035][ T7978] team_slave_0: entered promiscuous mode [ 114.438480][ T7978] team_slave_1: entered promiscuous mode [ 114.444876][ T7978] batadv1: entered promiscuous mode [ 114.450648][ T7978] bridge0: port 3(team0) entered blocking state [ 114.457132][ T7978] bridge0: port 3(team0) entered listening state [ 114.522412][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.546455][ T7976] netlink: 'syz.2.605': attribute type 16 has an invalid length. [ 114.603213][ T7976] netlink: 'syz.2.605': attribute type 17 has an invalid length. [ 114.672821][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.700537][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 114.704857][ T7976] netlink: 'syz.2.605': attribute type 16 has an invalid length. [ 114.710023][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 114.718102][ T7976] netlink: 'syz.2.605': attribute type 17 has an invalid length. [ 114.773101][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.794191][ T7976] netlink: 'syz.2.605': attribute type 16 has an invalid length. [ 114.814705][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.850070][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.905297][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.969100][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.188665][ T8014] "syz.0.616" (8014) uses obsolete ecb(arc4) skcipher [ 115.342482][ T8035] openvswitch: netlink: Flow actions attr not present in new flow. [ 115.785942][ T8061] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 116.473097][ T8119] veth0: entered promiscuous mode [ 116.620644][ T8119] veth0 (unregistering): left promiscuous mode [ 116.672796][ T8130] __nla_validate_parse: 21 callbacks suppressed [ 116.672811][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 116.690329][ T8121] bond2 (unregistering): Released all slaves [ 116.817426][ T8124] 8021q: adding VLAN 0 to HW filter on device bond5 [ 116.946005][ T8147] erspan0: entered allmulticast mode [ 117.005098][ T8150] netlink: 56 bytes leftover after parsing attributes in process `syz.1.649'. [ 117.223281][ T8160] netlink: 204 bytes leftover after parsing attributes in process `syz.0.654'. [ 117.229546][ T8161] netlink: 72 bytes leftover after parsing attributes in process `syz.3.653'. [ 118.476165][ T8223] ip6tnl0: Caught tx_queue_len zero misconfig [ 118.564973][ T8228] syzkaller1: entered promiscuous mode [ 118.599866][ T8228] syzkaller1: entered allmulticast mode [ 118.607574][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 118.670564][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.674'. [ 118.954917][ T8250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.000433][ T8250] bond0: (slave rose0): Enslaving as an active interface with an up link [ 119.029997][ T8257] netlink: 64 bytes leftover after parsing attributes in process `syz.3.679'. [ 119.649208][ T8309] netlink: 144 bytes leftover after parsing attributes in process `syz.2.684'. [ 119.763487][ T8319] validate_nla: 11 callbacks suppressed [ 119.763506][ T8319] netlink: 'syz.1.685': attribute type 2 has an invalid length. [ 119.801350][ T8311] syzkaller0: entered promiscuous mode [ 119.806988][ T8311] syzkaller0: entered allmulticast mode [ 119.997591][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'. [ 120.023957][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'. [ 120.230817][ T8350] netlink: 'syz.3.695': attribute type 1 has an invalid length. [ 120.345005][ T8350] bond5: entered promiscuous mode [ 120.350928][ T8350] bond5: entered allmulticast mode [ 120.359675][ T8350] 8021q: adding VLAN 0 to HW filter on device bond5 [ 120.398426][ T8359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.405851][ T8359] IPv6: NLM_F_CREATE should be set when creating new route [ 120.430250][ T8354] erspan1: entered allmulticast mode [ 120.457518][ T8354] bond5: (slave erspan1): making interface the new active one [ 120.522600][ T8354] erspan1: entered promiscuous mode [ 120.543047][ T8354] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 120.718331][ T8383] sit0: entered promiscuous mode [ 120.753275][ T8383] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 120.933972][ T8405] netlink: 'syz.4.704': attribute type 21 has an invalid length. [ 121.161936][ T8420] syz_tun: entered allmulticast mode [ 121.261455][ T8420] syzkaller0: entered promiscuous mode [ 121.274649][ T8420] syzkaller0: entered allmulticast mode [ 121.710578][ T8444] netlink: 'syz.3.714': attribute type 29 has an invalid length. [ 121.745718][ T8444] netlink: 'syz.3.714': attribute type 29 has an invalid length. [ 121.790090][ T8444] __nla_validate_parse: 8 callbacks suppressed [ 121.790107][ T8444] netlink: 500 bytes leftover after parsing attributes in process `syz.3.714'. [ 121.845673][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 121.858887][ T8444] unsupported nla_type 58 [ 121.895831][ T8459] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 121.919348][ T8459] netlink: 'syz.1.717': attribute type 2 has an invalid length. [ 121.952718][ T8459] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 121.969841][ T8462] macsec1: entered promiscuous mode [ 122.027759][ T8459] netlink: 'syz.1.717': attribute type 3 has an invalid length. [ 122.065075][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 122.232664][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'. [ 122.535781][ T8497] syzkaller0: entered promiscuous mode [ 122.551835][ T8497] syzkaller0: entered allmulticast mode [ 122.681147][ T49] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 122.693074][ T49] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 122.701499][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 122.710761][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.720797][ T49] Workqueue: krdsd rds_tcp_accept_worker [ 122.726441][ T49] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 122.732233][ T49] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e3 41 46 f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 122.751818][ T49] RSP: 0018:ffffc90000ba7960 EFLAGS: 00010202 [ 122.757868][ T49] RAX: 1ffff1100b4c18a3 RBX: 0000000000000012 RCX: 0000000000000000 [ 122.766254][ T49] RDX: 0000000000000006 RSI: ffffffff8dee23a3 RDI: 00000000ffffffff [ 122.774205][ T49] RBP: ffffc90000ba7ad8 R08: ffffffff90109277 R09: 1ffffffff202124e [ 122.782156][ T49] R10: dffffc0000000000 R11: fffffbfff202124f R12: ffff8880456ed840 [ 122.790105][ T49] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff92000174f34 [ 122.798061][ T49] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 122.806967][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.813530][ T49] CR2: 000020000000d000 CR3: 000000007d290000 CR4: 00000000003526f0 [ 122.821484][ T49] Call Trace: [ 122.824745][ T49] [ 122.827659][ T49] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 122.833188][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 122.838195][ T49] ? lock_acquire+0x106/0x330 [ 122.842861][ T49] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 122.848218][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 122.853920][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 122.859620][ T49] rds_tcp_accept_worker+0x1d/0x70 [ 122.865147][ T49] ? process_scheduled_works+0xa0f/0x17a0 [ 122.870843][ T49] process_scheduled_works+0xaec/0x17a0 [ 122.876378][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 122.882338][ T49] ? assign_work+0x3d5/0x5e0 [ 122.886908][ T49] worker_thread+0xa50/0xfc0 [ 122.891487][ T49] kthread+0x388/0x470 [ 122.895541][ T49] ? __pfx_worker_thread+0x10/0x10 [ 122.900631][ T49] ? __pfx_kthread+0x10/0x10 [ 122.905201][ T49] ret_from_fork+0x51e/0xb90 [ 122.909772][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 122.914862][ T49] ? __switch_to+0xc7d/0x1400 [ 122.919515][ T49] ? __pfx_kthread+0x10/0x10 [ 122.924084][ T49] ret_from_fork_asm+0x1a/0x30 [ 122.928838][ T49] [ 122.931835][ T49] Modules linked in: [ 122.936960][ T49] ---[ end trace 0000000000000000 ]--- [ 123.002525][ T49] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 123.010360][ T49] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e3 41 46 f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 123.032114][ T49] RSP: 0018:ffffc90000ba7960 EFLAGS: 00010202 [ 123.040160][ T49] RAX: 1ffff1100b4c18a3 RBX: 0000000000000012 RCX: 0000000000000000 [ 123.049315][ T49] RDX: 0000000000000006 RSI: ffffffff8dee23a3 RDI: 00000000ffffffff [ 123.059644][ T49] RBP: ffffc90000ba7ad8 R08: ffffffff90109277 R09: 1ffffffff202124e [ 123.071627][ T49] R10: dffffc0000000000 R11: fffffbfff202124f R12: ffff8880456ed840 [ 123.079973][ T49] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff92000174f34 [ 123.088241][ T49] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 123.097390][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.104174][ T49] CR2: 00007fcf7a25a6b0 CR3: 000000007ea1c000 CR4: 00000000003526f0 [ 123.112147][ T49] Kernel panic - not syncing: Fatal exception [ 123.118511][ T49] Kernel Offset: disabled [ 123.122815][ T49] Rebooting in 86400 seconds..