last executing test programs: 2m55.761963003s ago: executing program 0 (id=683): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'macvlan0\x00', {}, {}, 0x88, 0x40, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x6}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffff00], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x12, 0x60a, 0xd0, 0x202, 0x1a0, 0x2e8, 0x2e8, 0x1a0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfc}, {0xffffffffffffffff, 0xf9, 0x6}}}}, {{@ipv6={@private2, @local, [], [], 'vxcan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008a93654aeeaeae81f16549485d5e0b6c45842b8b3fc76342673b7fb04ba8527dd8ea1a44c0ee1e70e1374bd93022a9c7fd8ee46561966c9caf139bac4d8ceeb16c27242b0fe99dce2ea802cf6a07ad471648e658963dd5d4f72e18f2ae0775cf41c48f224b4e4af0e9f8e93c7dd783e022fa1ff9387559cf2b7177fccc92c0cc", @ANYRESHEX=r2, @ANYRESOCT=r0], &(0x7f0000000780)='syzkaller\x00', 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008a93654aeeaeae81f16549485d5e0b6c45842b8b3fc76342673b7fb04ba8527dd8ea1a44c0ee1e70e1374bd93022a9c7fd8ee46561966c9caf139bac4d8ceeb16c27242b0fe99dce2ea802cf6a07ad471648e658963dd5d4f72e18f2ae0775cf41c48f224b4e4af0e9f8e93c7dd783e022fa1ff9387559cf2b7177fccc92c0cc", @ANYRESHEX=r2, @ANYRESOCT=r0], &(0x7f0000000780)='syzkaller\x00', 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000440)={@private2}, 0x20) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xf, 0x0, &(0x7f0000000840)) (async) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xf, 0x0, &(0x7f0000000840)) 2m55.470387362s ago: executing program 0 (id=686): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8fbffffb50202000800f7ffb70300000000000085000000a400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1000180000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = socket(0x18, 0xa, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x8850) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0x8000000000000000, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000071187c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}, 0x94) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000005200010004000000000000001c00"], 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000140)) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000040), 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$SIOCAX25GETUID(r9, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r10}) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000100)={0x3, @bcast, r10}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000200)={r4, 0x2, 0x2666, 0x1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}}, 0x101, 0xb1dd, 0x0, 0x8, 0x88, 0x4b, 0xf}, &(0x7f0000000300)=0x9c) 2m55.145807877s ago: executing program 0 (id=689): r0 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) unshare(0x20000400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000002040)="162dd3cad75f87", 0x7}], 0x1, 0x6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @empty, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000001"], 0x18}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={[0x81]}, 0x8}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0be2923780c0a99f"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x10) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24, r6, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}}, 0x8c0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x4, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x8000, 0x100, 0x1}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@rand_addr=' \x01\x00', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81, 0x0, 0x4, 0x0, 0xebf, 0x200, r10}) syz_emit_ethernet(0x1fe, &(0x7f0000000200)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c8, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, [{0x4, 0x33, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb1d710154d25344dc4b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34cb64994c78f38f5c966190288a11b5c7c3830af6b26868600f042ff7778f02de78c461feec2dbc7777f3c1648da649b02ab84887d321d98ce20c8e1998b380ba10bc62d1f3965f657d607a0b5dc8c3a0b319b563b758f3368982151727decc966d3971da04a3de762195acbe67019b828d036a19da5c13890cac99197cc8195d6e1db4c557b4278675e1bcd19b8e7cf05330356af6db28c3535b1aef3a597df0a00ac7bbc"}, {0x4, 0x1, "11fb6825931b"}]}}}}}}, 0x0) 2m53.852279213s ago: executing program 0 (id=690): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4840) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) (async) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) (async) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101080, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x3, [@struct={0x0, 0x5, 0x0, 0x4, 0x1, 0x7, [{0xa, 0x4, 0x2}, {0xb, 0x0, 0x9}, {0x4, 0x400, 0xb5}, {0x5, 0x5, 0x2}, {0xa, 0x2, 0xffffffff}]}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @datasec={0x8, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x101, 0xfffffffc}, {0x2, 0x2, 0xfff}], "032a"}]}, {0x0, [0x2e]}}, &(0x7f0000000240)=""/240, 0x97, 0xf0, 0x0, 0x7}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x5, 0x5, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090aafc5bbc9a2a6f69c00000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000002c0000001d0a010300000000000000000a0000020900010073797a31000000000c0010"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 2m52.849592854s ago: executing program 0 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r1, 0x1, 0x28, &(0x7f0000000000)=""/41, &(0x7f0000000040)=0x29) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=@mpls_delroute={0x30, 0x18, 0x9, 0x70bd6c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r3) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) close(0x3) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) 2m52.702408184s ago: executing program 0 (id=707): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_discard_blocks\x00', 0xffffffffffffffff, 0x0, 0x7da}, 0x18) r2 = socket(0x10, 0x80006, 0x8b) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf2501000000080001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140020073f6e17"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x70, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x45, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537b11b37357f"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000003c0)='yeah', 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600004e2300000000000000000000810000000000000001000000fdffffff0000010000000000", @ANYRES32=0x0, @ANYBLOB="00000000ff7f22000700090000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400cc14) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000005000000080000004000000042000000", @ANYRES32, @ANYBLOB="000000000000e7ffffffffffffff000047410f80", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x80001000, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r8, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 2m37.559333432s ago: executing program 32 (id=707): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_discard_blocks\x00', 0xffffffffffffffff, 0x0, 0x7da}, 0x18) r2 = socket(0x10, 0x80006, 0x8b) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf2501000000080001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140020073f6e17"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x70, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x45, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537b11b37357f"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000003c0)='yeah', 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600004e2300000000000000000000810000000000000001000000fdffffff0000010000000000", @ANYRES32=0x0, @ANYBLOB="00000000ff7f22000700090000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400cc14) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000005000000080000004000000042000000", @ANYRES32, @ANYBLOB="000000000000e7ffffffffffffff000047410f80", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x80001000, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r8, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 5.385702832s ago: executing program 1 (id=2280): readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r4, r3, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) 5.27040295s ago: executing program 1 (id=2281): socket$netlink(0x10, 0x3, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000000c0)={'dvmrp0\x00', 0xf6dd}) (async) splice(r3, 0x0, r4, 0x0, 0x1, 0x5) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x700, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "a6493a7b26e8f5de714f86407ffa223f"}}}}}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.809552025s ago: executing program 5 (id=2289): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f0000001480)='f2fs_unlink_enter\x00', r3, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001280)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x5b, @local, 0x7}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000012c0)="1a60c71506475478339b449ba911c39e6db623a5a986b02cd23c2e4c6a1b17b61e5e71ff01bb8f2e897f444ed6838c9d17d3bf59ea6f25164271bd85cd3e6b747bff18780770391286d223127768495d7d9877d5777f0450d1e17ec39a420557319f43e6f25e05644070772ee32ffca0989583db60577c47631d76905e5890ad74e38a9b8d30d8bfa3b17e54c4d22a6ce5e0c17b9f905f1ab1cd3d30454a397df91787dc1cc6bad9", 0xa8}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="140000000000000029000000341300000a00000000000000180000000000000029000000040000008700000000000000"], 0x30}}], 0x1, 0x4000840) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104feffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="419f03001d000000140012800b0001006d61637365630000040002800800", @ANYRES32=r6, @ANYBLOB='\b'], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=""/95, &(0x7f0000000100)=0x5f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f00000011c0)='sched_switch\x00', r7, 0x0, 0x6}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x2a}, 0x80, 0x0}, 0x0) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x2, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0x4, 0x0, &(0x7f00000000c0)) 3.226395205s ago: executing program 5 (id=2301): epoll_create1(0x80000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4845}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x54) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x000x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002bbd7000fbdbdf25210000000800", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00@\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) 2.392361176s ago: executing program 3 (id=2314): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x24044891}}], 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) r2 = getpid() r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r3, 0x0, 0x10a, &(0x7f0000000280)='cgp\xd94`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xda!%\xbcz\xe2\xb4,%\xc4\xc4\x8c\x83\x92~\xff\x13\x00\xd6!\x16vQ78\xb8\x83\x90\x98Kv}\x03\x9f\r/\xb8Y\r_WE{\x86!tkR}\ay\xda\xe1\x1e\xd4U\xbc4c\x05\x96,j\xa7dq\xdcB\xbf\x84bu\xff)\xab\x04\x11\xae\x89\n\xe8\x9d\xa4\x92J\x94\xe1\x98\xa7:\'-\x1083\xba\xac\x90XL%__VBT\xa0\x87\xb0\x92\"\x18\x8d\xbe\f\xa4\x97\xc1\x06\xec\xcaD\xf6\xfbC\xb7\xfbx\n\xc7\xd5\x15\xff\xbe3\x91U\xa8{\xee\xa7\x12M\xc6\x9b\x1fT\xab\xf2\x98\xcc\xcd\xcd\r;\xb6\xce_\x1b`\xcb\x88\xd3\x11\xbeH\xa2Qr8\xdc\xcf\xd1\x00\xb0I\xe1\x84\x06\xae_\x89ui3I\x92\xf2\nU\xf2R\x14np8F\xad\xe1:Sq\xb9n\xa7\xfa\x96w.\x9d\x9c\xe9\xf5\xe8\'\xb9^\x86>\x98b\x1b=\xf6\xd0\r\x92A#\xc4!\xed\xa6\xf3\x05_\xf1e\xea\xffJ{B\x97\xcc\xc3\x1f\x9f'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0xfff) r9 = socket$inet6(0xa, 0x3, 0x3c) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r11 = accept4(r10, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r11, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r11) recvmsg$qrtr(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000002c0)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x100) setsockopt$inet6_int(r9, 0x29, 0x3b, &(0x7f0000000100)=0x10000, 0x4) 2.208437471s ago: executing program 3 (id=2315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x709d2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51223}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x400}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r8, &(0x7f0000000580)=[{&(0x7f0000000180)=""/64, 0x40}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/166, 0xa6}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f00000003c0)=""/16, 0x10}], 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xe, 0x0, 0x7fff, 0x38f7}, {0x9, 0x1, 0x0, 0xfffe, 0x8, 0x401}, 0x5, 0x80000001, 0x165e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee3ce641f2ef5769}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.122501968s ago: executing program 5 (id=2316): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$nci(r0, &(0x7f0000000640)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @a_listen={0x8, 0x0, 0x4, 0x80, 0x1, 0xd, 0x9, "", 0xf4, 0xc2, 0x10, 0x40, 0x3, "c7d860"}}, 0x12) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) 2.121410347s ago: executing program 1 (id=2317): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @dev, @multicast2}, &(0x7f0000000080)=0xc) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @dev, @multicast2}, &(0x7f0000000080)=0xc) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x8, 0x1) (async) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x8, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/110, 0x1000, 0x1800, 0x5, 0x2}, 0x20) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000280)) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x88, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9c}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x288, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x254, 0x3, 0x0, 0x1, [{0x250, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "f24889fc19c0a0f660de1648be2d4fc9ac285a4e7ced335b5e93d00f9c381a30cec654a90df562a056b60b3ec391f76c3228c60ec951a5c1d2212d25436611a3d5c726d0156e46cf67cc8979cce019ed2543092305140c766b5197dddccbd9f3e1ff9b1d335c48be51e5"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "df0179fda1a96fd0c01add7c8d36cb70b15b32ff8a407c0a649b747398a4ef0a86faee27eda5475a230fed255569e0b9c4fc5d180d85eaf09ddc87dde168716c6a5c1f83e4c610ab87f25f2399fc12403633e89f9e61bb992f4561dc4cf4e8189a192c24bb0bbfa8b57534"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x6c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_NAME={0x8, 0x1, 'TOS\x00'}, @NFTA_TARGET_NAME={0xc, 0x1, 'SECMARK\x00'}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x40c}, 0x1, 0x0, 0x0, 0x40080}, 0x20006040) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) accept4$inet6(r0, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000c00)=0x1c, 0x800) (async) r5 = accept4$inet6(r0, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000c00)=0x1c, 0x800) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000c40), 0x1, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000c80)={{r6}, "796eb62c2db8042077bc755419f976f71b587d30f73cca7722eadfd6f21d266af176e7414feb289c8108d2643fac756fa98dd3c9d486a44d676d56051e842660df55bc86f43be254d45b6fc06d042cfd1a45250c29dbe5c90c7a2bb163b99e7c0d83ac0eeb44bfd78e88162b7b824fd3ce766f00019173790381339b71e191cab394a1e36a063d94b343d647fcf1708e9d68167a532b611f1210a0e5c5581a8232855fcb12a0ae4d8926d1b824a559d921593246fbd00fc79e90b6764e237d9646eb8c3c6f8b15d66ea1be9dcb39690452d9627a0a80a1e5bf86c770b977866e6e39f6f0d1a0ce070edc0882b657ef81fe0e9d08efa1338fe05d70f3b7f1134f87557fcf4a52f797ad3760fcb3ff19092c950f42a220dba73c7a82d86be927ef6b4a5e2a6c33d08ea9552e2db8ca69a06c539ce1dd2b165bfe7c9db0706bc47476d825c1c1f27d9ac80e6af8095a84c736f2954f470b8f99b51cfefde5cd42a8b0714a80d705e09b4c9baef8f2f9b17b225a697405d4bee3e63ee818be7881a6f84d57ddd3eab17e0ee5a0cff12af04f3e90b67b96e86a4fddcf45fb73810f140a3bc131453fbc4e15f802a8280e6514eec4663fee75bb9dbfc697ce0e094ce2a3da00a0aa87ae3b925a48d30bbbbd04b23f65f59d7d627744453245b13a53ec53bc8106e9ca6e1789920be958540a6d6c7eb26858bc4da8e4dfe814c163538da88561b8a282d0d5d1d9ea3003abccbdd0692926219df22788d548ac6f59487001c2007b7a406d4ec744b0a49a15896404189495a56fc40d5fd1eb12d24faef4dd00ac2e0ea0ce4e57b11df3609ec402b7e5186085803744a6b2fc3702da1efd35ed1fc2074c2c07562a7118f65cc55d002ea141bda27c03852b72a1151863a2f20a9cb9602d7140ecb8a228c433e72a34cb162b64773719eb64eabf53188bd0a4fb17aab6783c3faa4d90b2ff9f7f2a592f47eb0c2a08c9c941aa6562c68b73979ad35284ad4d4925d5f112505edc1a5913db01311e01b1bcc5f6b9b59d8570985423cffcdb1116ba1a8d2f3721c8f1546a37d5324be981272978d04173d73cf2cb49c5080709d7ceb6980cba1b3d75e7dbcb5d89b14a6f6588503853804212a95da599b2377361c9477313e5d85d9a4a633c0bfb1c252dd48eb56a1b2184f79dfb0865357377d2ea6854a16ac2d0ac037b099bd0422fafacc7a5d4e474ed4b5837b462b37c17e47c07afaf371ce44b92452fc1e3e2f46881d903dc011d4c30a75e580e758e302659b4592a6c7fb8d0f58eec79e576896fbd8969139388a85e035a8cd71ee2110028565df419d8dfc1c3394a5fb64612f15ba94b75804148309ba3b01ef1edc6546477399c5f1342aecd010ed826439133870eedaf8ad204d467b0f1aeece39c10975c94e7e3a6edc4014ed0bab8662aefe6001500b04635d32c169b7c14ee9aff792ad2a0dfa787c500580a373bc4a4c99d6584a61506fde14fe87b76e538ecdcc9ae5c5cf41184f4520e53431615aeb7a7fb8c254e39c5b156cc6a26d56a34afc0df770dbf258ef07550636122821b5cb2d27c1605be5078326433ac1ea017018996f8a880b031beb5815dd600a6a4a0bac4b31f087f8ce50e93c0aa015131bbad327d9ef28b8251493cf3fe7e3a9c8ff844c72c791a7396d1a2bdfb19b4c5e021da7cc9b1578a5f431bba11585526b8b3248e60cf38d514aee3fc51ace24e681ccdc142d2459f495e3de56ec16df04c80d6194eb5c2b634b86abb6f0697847dec2a36b2e271fc399f7edc552524fc8875821ce8ff6e7791bf19f98732f4a5d53d76b214a030708f037401a8a71db76340249034676a1b1f60d4aa8fe5880dca9e8f78d504f12157f42aeaad94e7eaa9a2bf6711fa79821c4975de4f1e282c69d2342ac446172b191b8da19c72bfeb5cd938afb981966281bbbe156c682c5aea134ade363143333754fec2bd5d680f7d89d9cf4c29c2c2da1c5a1a100e73086ee72ed899f8661ad7484a9ebcc6277e0549629d99bf76821f4c51a22972f60d86f84ce631ee49c77611da3e8d3d496371a8c7af613d9fa3e297f87e6e8e7039a3bf63d4c57cb384685adea4df34a04bcf411fa9c3601e7546a8b74c5bfcf1944900da0185cd6e93acc3a4e3a0e58f074107553ec93a8bd0ff932c56fa37372525ded37636c0df303bcb0a78b0cd45e6017e88ec3256e8600c33b393f2966d711cdb79c1ef48aa18e8206facd1d276bb95d88c3e03a709c68907e6d9d69031f7810636a74ab8e73e846b192f96b549171269e734db0a7cea582fb70ab68b0cbe6586abd88e61085c63dac6f650300cf5f75097f0f33d2f248220d074a8f54a45d82be536c35eadb714e96f9d3025bc2baf6a745326d3bd1771a3b3717426fad63ee4c1705dbe4e66f86fb0b2c4ab8e52bf597462ecef3ec2f9db45875c2d544bec07a1702f116f5e5864f5cf7e143310f3677383dd45099892fb1a88a631655cf802bfbd9c4ee26fbf839bb5ca9699818c8ec7067aa04104644e80a0fd55aa70291c841ff020c5ea131b4e3dae4f5eefd8496d33466e96f4df1ec85b24921bad02ce40cabe77f531be491921546087baf2f2f4c876b2ffded153dcdeb36956f4a8bf0f3f2175a4426607e33cfefb8dba6c03221fa7b93079fd9d65a0628b5b1e55891cfcd40b7b0bedcc3160b1d3426fff8917e03ff97c28bd378555dcd93ed79487c86df5e55e8619ad0a7d098fdff3e79792f7303de1ca008ac8bebc585226fde395389a3dffd732ff4550e3331256b076947bf2f321cf22b7851d1af10678650937ab932f227617f79e02e4c53cd1d4c6d6ed99f1d4497ab27e05ddf21ca2f821400c7b4360e1e1dd99d74ecdaf6aa65ba0587d12d101bc1025c527c0a31f79d875f9f5c467b8163f8c0ddd47b81c19f0cbe55d8fc4a8820c9abccc1e8902ae3c1e33b0f9f2fe4ebdc3a890c5deebef2278042adced3cd97595751e45f5d0bbccf37a96e545aba276367dc4437098fbfdfed879ac45a4d5925edd733620b2993f7a58e086e96b440816156ea7715c9ddd754f53bd6c873fa06023f61f455e4b784b0629e91265492ce456285395d4af21c6cc15feace78dff86e10d3b8660f91e3fddb0187b653519b95e7405706490e518704316275706e909fbdbf0f277dd5c4f23dcfa5084a9e8aed64e27e6fec8fdfa2be8c354a596e76c46f72e0a15fcbafc9a4c47a8e933ea50af2b9a1ecc0c6d7566e0395ad184954e0efd48a4ee4f67ccfd17cb79c9716cc3e971b5136379ed3b61e8338761945bc6e93b3192a423ba61fbf7ccee1c0c77db18d0002f7c6922bffb78ba9285fa694569d9f521d7eeaee014530c4cacbf752b600bb7c7815f82d36e1ad7eaa9fa221633d26eb499b47f1ceef93f9759bf23d00d2dd225f9fc0673c0c7767ac8890c643ba88a55732bdea834c748ee2bd158c2b4847dda37514040c2b828c8e3b8250b97bf7e473d94bf60e741b94012ef713b85dc9af5f3641b3de696e09179039bba1cead023c5eeade2ec7cbe2215243849bbce1e60f101f43c8e1d59220dbb2f3e8aaf8dfe7b85916bef1146496d52a16475d5d721f2ad8fb22dd72d11a973fba90c087dc01cafa1a60fa4df118dd0cae532410f9f5465e4e2bef1389b9c81f68adedb772e796cb098cf910baa9f59325eaaae7803676bfaa8faedcb1668cf8b7db80aeda2289eaa2f3b3fd89b7462944094368960c7328f065d27240e08bde53a5220afd7405ad47cc833829000e98730f37a8a8bce8a80657a7ebee81a6559e09d2cb6d4d4351a3923bab975c9864db4f40086754496a4e2d210b485c8a066cde1fa794e950445bad7a7fed46a59eea2cfdb3017433b9298da94865e16a54d4fafbcfc4c8e32de741e6d804bd58119b028c35b2cc1a364fc35a9e84662b6845c40db147dab6a4cfa66782fbe6b39a08566de4461ae9c4b5d80edbd2dd76dd98272b15b381b10ec6c6245539247c32d5a1e1278e25101c711e926cc371876dac5c02234877cb0b407bfb941bd45842fccd806c175f77766dc8192e5b04186c57955d9b98d00226794f44296b54952203aa85228b9ae9514100f759aaa2009b0a23ddddb77b02fff8c1d28a1ee807581cfab083412502e953564fcbae3245caf706b250d2fae89eb7b5c466cdaf4914072b19d5b333ef6f416b2de4d3f6f32cbb68de9225d64f376b935df5d61453dccc6d899c1fbad18d7b4d4af91a8ce8d7022743e90cacbc35780921a2cdf1d3a765a7d82e1f54995a69f3b95e749d5e2e55458b219cf589f4b98c37e981317ba7939e0beb54bceebaa0eb38e41137791443845e52682f56efc339f3a2ed01d49a95f5e0ca64e9c374ed20342d6cc96e27d4944ee363ed0fee4b48ea849e15b50c09594de82258870ed432518dc4e7974c2ba7c65043cfb88e256edc7dc5303e2eb3b4e2dfbab3a8fd4956c22533f2844fc2d42261344694f3c23b5ef86277aeaeee2e34d7c2fdc9412be7d56c43e6f76ff5faa2336ad7e01c764c76fa6593d57ba5a1fe428749aa931e669285dd4aa7f0ff97d9e4084d1e82530558b79c1a1037260ed164aea90f3fad3e15aee651f2a781fe7887102568194a0e7573f929155bd639dffc95e544c29d2fe50024645771a13863357b62b63ceca5af50bb1cf2296d955de285e65fd821ea9780460b47d885a345a0c4b5014a681b6b262ac6c6533141375fc69bd8806d7c8259845766a99591b5b5935817bab6c3f838dac4eaf92a60d9f1bf7e134fa195e77efab97e0ac0171a85b2e8fd56b53bc54d7488819fa2998c1c6b3d946e66243abf5b3c1dd645decaa6516bb27fb36dbc0b59b02569f1a3fbb0964463161264a81269e9e55b0af0518d4f8e0909cd277bf1309c29e43d8656b982e24e5dd48f7ac20e7e002d01033d8722896023e2628ffdda627cabab74ca658ee19e5f935a5ef3599cb52a5b03dc88efa198f8018fc83486edba0f924271c9ac230ebb7f99ca23b64ee40c62989aa2e78e740c885186a2bf6d886eacbb1e26695ad207981a8a7347ae39bd824c3773b8d52dbb6b8fe06da499e814461f3f655b96328c87b31475a313add88a852a33fc82d150998f1f505b67fecc516dbfd51a2ca271be70227cc638e3304ea59276e73972ccdbe98f68b0665101a8dbf26f42a193ae41ee2fd674ed9cd513f0ebe43bc21d67a869d727c12fd6a3cc26a93f9024d0af9ff79b28c4b7e80a0e30875f9d9622ae5f0ce936382ee5eeb448d873d5d69cdd3c1eb540e8c7e8558c03d6aa893b7073bcb0fd30024c9cb3e1f3d2f84adb86a97ab497c3e06eb23f8fcde5febc13e5609ae242b17b083ba3589feb9f76a8e2c4dfe6ec0c1b7e5da00a3475ec918c3f8507e6842fb78bca99ae50eb11fc921182631ae763fd576e77f676af167387ed350cf0c2169d67e56fbc53b0e61cc804cae9712ec6bfa7317a02ce964f8ac3bf8c8afd270d9eb86f74026a81c01941456e707e8f33c4b2e9a004c4932b47c0699f175dc0dd89c85250d59c98285d4701a4a76369c574084ed6b4ee7cb72443ec0bc9ad144aad4b40de164b40a28004428ad42ac35b7f37d96c4581ec4c87b7df9773982075edafa1026ae82236dda0e5d444467bd3ffa629b605cede9b6cd33d4218f15c29c96a678aef181041e81da9d697f760587c1012d292bc9a34540d4b4a1736bfe17415d8a3d38b8e7c431f3a07c54304bcab50534693aa1d3b2d7fb2bfec5bd82ca845629b2660fe08ceefea1"}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r2) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x58, r8, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r7) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000002040)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002000)={&(0x7f0000001ec0)={0x130, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1d, 0xc5, "cb0f490aafe9f0d1b77343f53a6c501b2cadf4a8b9abf7fd42"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80000000}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "f23fef5dad05f3853497a8a9ffd36cdc1240219b108327129cea21e8725aa74d859171c7322f7bf0a0b501fb0e8a76b2e861fc517fd0a396e94734ed4f27bb87e70613342486df33d190245ebfe535e80b590d62f538c43ce9c1cd35b60d5ebc17fcdcf2635d500a88e7acfd55a89273fd1ad0e08ff6d20aeb6d2c940ebd863aebf0131c58c5025bc6081f525152789233489377cb10ebf526528fc5b3c4473851c582455c6cc7d8c506680596d03ca8e6951bf1970e57863e228dc207352184d243a7e7abf1691b8bd084a11df808278e2f54744d66"}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000881}, 0x4048080) socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000002080)={0x87, @loopback, 0x4e22, 0x1, 'sed\x00', 0x10, 0x1, 0x51}, 0x2c) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000020c0)=""/226, 0xe2}, {&(0x7f00000021c0)=""/119, 0x77}, {&(0x7f0000002240)=""/42, 0x2a}, {&(0x7f0000002280)=""/178, 0xb2}, {&(0x7f0000002340)=""/175, 0xaf}, {&(0x7f0000002400)=""/136, 0x88}, {&(0x7f00000024c0)=""/64, 0x40}], 0x7, &(0x7f0000002580)=""/198, 0xc6}, 0x3ff}, {{&(0x7f0000002680)=@can, 0x80, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1, &(0x7f0000003740)=""/188, 0xbc}, 0x200}], 0x2, 0x0, &(0x7f0000003880)) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000003900)={r3, r3, 0x1261, 0x3, &(0x7f00000038c0)="02387a", 0x4, 0x3, 0x37, 0x6, 0x4, 0x0, 0x3, 'syz1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003ac0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)={0x50, r8, 0xa0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003ac0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)={0x50, r8, 0xa0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003b00)={0x0, 0x4, 0xe0, 0x2, @vifc_lcl_addr=@loopback, @local}, 0x10) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003b00)={0x0, 0x4, 0xe0, 0x2, @vifc_lcl_addr=@loopback, @local}, 0x10) socket$caif_stream(0x25, 0x1, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003b40)=@assoc_value, &(0x7f0000003b80)=0x8) ioctl$BTRFS_IOC_GET_FEATURES(r11, 0x80189439, &(0x7f0000003bc0)) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000003d00)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c5}, 0x4000000) 2.003773154s ago: executing program 3 (id=2318): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10002, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000f80), 0x29) (async) connect$bt_sco(r1, &(0x7f0000001000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) shutdown(r1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000240)) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000280)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) (async) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="30000000000000002900000032000000ff02000000000000c910fc000000000008"], 0x30}, 0x40) (async) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)={0x5bf005dd, 0x6}) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r0, &(0x7f00000001c0), 0x0, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x12571144d43d7ee5, 0x10008095, 0x0, 0x0) 1.866069078s ago: executing program 5 (id=2319): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x1, 0x2, 0x42, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x1, 0xa26, 0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newlinkprop={0x38, 0x6c, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x100, 0x40000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0xd7fa}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x80) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ac1f631b0000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc966", 0x27, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r13, 0x1, 0x70bd27}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r10, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1.786460687s ago: executing program 1 (id=2320): syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2000080aaaaaaaaaa53c3f7847d1033ca049969f151752598d12807296f84ae0ecd1f2b116f48b791a95202"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000c40)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0xbfff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}}, 0x20008000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) write$tun(r1, &(0x7f0000000980)={@val={0x0, 0x10}, @void, @llc={@snap={0xaa, 0x1, "a8dc", "63e2f0", 0x8848, "3cfba8f1d4e4e8ed26f2689b867f7d01aa09cc73dae0a458a1c2ded1445fd08a4fb52fb3f7c91f026ecba62b6886c8019491bedc0e9f3cf194a23a57c9d1a7b933e2124a58543bf154a3"}}}, 0x57) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) 1.78055134s ago: executing program 3 (id=2321): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x20, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x2, 0x1, 0x8, 0xb, 0xc, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x1, 0x0, 0x9, 0x3, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x43, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x1, 0x24e, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, 0x0, 0x25, 0x2, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x9) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x17, 0x4) bind$llc(r2, &(0x7f0000000600)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @multicast}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r6, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) 1.613396062s ago: executing program 2 (id=2323): syz_init_net_socket$ax25(0x3, 0x2, 0xca) socket$l2tp(0x2, 0x2, 0x73) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a"], 0x50) r1 = socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0xf, 0x2, 0x200, 0x0, @remote, @mcast2, 0x7, 0x1, 0x5}}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb0, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8880}, 0x4) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.56772174s ago: executing program 3 (id=2324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$rds(0x15, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0x8, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffc, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x210004, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x6a040000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x424, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xa}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x9}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x9}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xef}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xb}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8845}, 0x40050) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) close(r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="000000040000000000822c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 1.293825545s ago: executing program 2 (id=2326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c5}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='page_pool_state_hold\x00', r2, 0x0, 0x100000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17f}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r6, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x400, 0x9, 0x9480, 0x2, 0xff, 0xae, 0x7dd0, {0x0, @in={{0x2, 0x4e24, @remote}}, 0x3, 0x9, 0x80, 0x708, 0x100}}, &(0x7f00000000c0)=0xb0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 1.264926605s ago: executing program 4 (id=2327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000001200)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.094615867s ago: executing program 2 (id=2328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffe}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111df1800000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 1.080018447s ago: executing program 4 (id=2329): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9924}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x9, &(0x7f0000000400)=""/9, 0x41000, 0x4}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x13, 0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xf25) (async) listen(r1, 0x20) (async) shutdown(r1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000240)=""/20, &(0x7f0000000340)=0x14) unshare(0x6a040000) r3 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r3, &(0x7f00000012c0)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x18, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) (async) sendto$inet6(r3, 0x0, 0x0, 0x24000084, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.013295639s ago: executing program 2 (id=2330): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)={0xff, 0x267, 0x6, 0x0, 0x0, [{{r1}, 0x10}, {{r0}, 0x6}, {{r1}, 0x4c3}, {{r1}, 0xa}, {{r0}, 0x5}, {{r1}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x8, &(0x7f0000000200), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x28, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030383000000000000000ce9ffff07000300"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x2004c091) 954.069631ms ago: executing program 4 (id=2331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {0x0, 0x0, 0x3}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) 833.210793ms ago: executing program 5 (id=2332): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x1e, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x6cd4, 0x7ff, 0x1ff, 0xa480, r1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x7}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x6cd4, 0x7ff, 0x1ff, 0xa480, r1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x7}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r5) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x34, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0700000004000000080000000100000008010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000400000000000000000000000000000000000000000060a5670abe86d7311324dd03b4c1b5ea1bcc02b9f537715fc298715b0b1954685f1c3f5738523e78fa37d5176f9d40b3ee5e4bf8feb8f3dd08e84f10"], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r7, &(0x7f0000001600), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r7, &(0x7f0000001600), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000025c0)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c80), r8) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000040)={0x30, r10, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x200040c5}, 0x80) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 811.306094ms ago: executing program 2 (id=2333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x2, 0x2, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) accept4(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000000)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000506000000000000000000000c"], 0x0, 0x32, 0x0, 0xa, 0x7ff}, 0x28) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x40, r3, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "cb90f9ea0c82a9c996935c85db"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40905}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54a4bba8feb987d9d9e5fa6e8049271994e24ece", @ANYRES16=r2, @ANYBLOB="000428bd7000fddbdf251d0000000c009900050000006c000000080001005a00000008000300", @ANYRES32=r5, @ANYBLOB="2400238008001500c800000006001000fcff0000060004006e0000000600020032000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000085) 728.704516ms ago: executing program 1 (id=2334): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x2}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYBLOB="01000000fae20200703aba"]) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0xf75156e587a4e817, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x10000, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000004c0)=[@mss, @sack_perm, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @timestamp, @timestamp, @mss={0x2, 0x8}, @timestamp, @mss={0x2, 0x5}], 0x31) r3 = socket(0x15, 0x80005, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), r5) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r6, 0x1, 0x0, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x800) getsockopt(r3, 0x200000000114, 0x2719, 0xffffffffffffffff, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000280)=""/8, 0x8, 0x700, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xcf, 0xffff}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 677.996676ms ago: executing program 1 (id=2335): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r2) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x8040) syz_genetlink_get_family_id$tipc2(0x0, r1) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0xfffffdef) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffffffa6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0xc, 0x1c, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f0000000700)='GPL\x00', 0x5a1, 0x1000, &(0x7f0000001940)=""/4096, 0x40f00, 0x10, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000002940)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000002980)={0x0, 0xb, 0x8, 0xfb7}, 0x10, 0x0, r0, 0x1, &(0x7f00000029c0), &(0x7f0000002a00)=[{0x4, 0x2, 0x9, 0x5}], 0x10, 0x80000000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002dc0)={0x6, 0x1e, &(0x7f0000002b00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x4, 0x2, 0x0, 0x9, 0xc7}, @call={0x85, 0x0, 0x0, 0x1}], &(0x7f0000002c00)='syzkaller\x00', 0x3ff, 0x91, &(0x7f0000002c40)=""/145, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002d00)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002d40)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000002d80)=[{0x3, 0x4, 0xa, 0x1}, {0x5, 0x1, 0xb, 0x4}], 0x10, 0xbcc}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003000)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000050000000000000001800000183200000200000000000000000000008520000002000000cf9950001000000063b18b3200000000094d92b85a00411365c37d018f65e9b828ecd981c2a8b739210d6cb827d2c06b4a0f21702fe5701818b8e61b40e9652e1be86f0bcec71904"], &(0x7f0000002ec0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002f00)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000002f40)={0x0, 0x1, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000002f80)=[{0x4, 0x1, 0xc}, {0x1, 0x3, 0xa, 0xa}, {0x1, 0x4, 0x4, 0xb}, {0x0, 0x4, 0x2, 0x1}, {0x3, 0x5, 0x8, 0xc}, {0x4, 0x1, 0x1, 0x2}, {0x4, 0x3, 0x10, 0xb}, {0x4, 0x3, 0x5, 0x1}], 0x10, 0x6}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000030c0)='blkio.bfq.time\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000003240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003100)=@setlink={0xc4, 0x13, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x25600}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8020, 0x22140}}}}}}, @IFLA_BROADCAST={0xa}, @IFLA_LINKMODE={0x5, 0x11, 0x7f}, @IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_LINKMODE={0x5, 0x11, 0xc3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004}, 0x2000010) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls}, 0x94) close(0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87f00010000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 645.636904ms ago: executing program 4 (id=2336): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) (async) socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000640)="bd552a1c5c", &(0x7f0000000700)=""/218}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000360007010300040000000002017c17c2d64f660588ae4f0015100003800c00080000100000000000005943f91c56fd86601e2f75efff80e3f5c94e90514b97638b497bb98d054a6a2d78a0a9571084febe2092198ada908205e3bd7fc28cfeefce4ef8f7ac0b1712428ede0a0bae5a2a921d0268f07283f32c47"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r9 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f37bad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003360000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async) close(r5) socket$kcm(0x11, 0x3, 0x0) 570.473511ms ago: executing program 3 (id=2337): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{0x0, 0x43}, {&(0x7f0000000640)='%', 0x1}], 0x2, 0x0, 0x0, 0x900}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0xfffd, 0x0, @mcast1, 0xfffffffd}}, {{0xa, 0x4e21, 0x8001, @empty, 0x8}}}, 0x108) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xcf}, 0xffffffffffffff43) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0503000000000000000007"], 0x1c}}, 0x40004) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042bbd7000fedbdf25040000000500370e0000000008003c000900000005002f00010000000500380001000000050033000200000008000b0001000000080039000100008005002f0c0000000005003307000000000600280003000000"], 0x64}}, 0x8000) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800080005000200b6e71400020045b0002800680000030690780a010100e00000014e204e28", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00n'], 0x36) r8 = socket$inet6_udp(0xa, 0x2, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/81, 0x51}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/49, 0x31}], 0x5, 0xffffff00, 0xfffffff7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc6010aa00000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 471.026688ms ago: executing program 4 (id=2338): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000052) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x10, 0x0, &(0x7f0000000000)="f8ad4803ce97b523018befdd95beca08", 0x0, 0x2, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 422.272725ms ago: executing program 2 (id=2339): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r0, 0x0, 0xffffffff000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x1, 0x9}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) 202.512113ms ago: executing program 4 (id=2340): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x25, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="07ffffffff101a0000"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005bcb7a43aafa3d161dbe33c7ebbb00a699fac12acca8d631ed0a6908dd0355dbc73df938ffffffffda02e18e05e4bed8aa364fb8af091e3d8f1c3c07b8095f81e1155d76af", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x40, 0x0, &(0x7f0000000440)="868e0aaa1a2514bbe4e5138da30483bddefe77f5b87b8f632ee22d35d7539b8ba052eb6bc516c3dbba33a4533532ee91f803b600"/64, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket(0x2, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000340)=[{0x0, 0x0, {0x0, 0x1, 0x4}, {0x2}, 0xff, 0x1}, {0x2, 0x3, {0x2, 0x1, 0x4}, {0x2, 0xff}, 0x0, 0x2}, {0x1, 0x3, {0x2, 0xff, 0x3}, {0x0, 0x0, 0x1}, 0xfe}, {0x1, 0x0, {0x2, 0x0, 0x3}, {0x1, 0xf0, 0x1}, 0xfd, 0x1}], 0x80) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRES16=r9, @ANYRES16=r5, @ANYRES8=r11, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x2004e884) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r13, 0x101, 0x6, 0x80000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000012800000000000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0xf, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42}, 0x94) 0s ago: executing program 5 (id=2341): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="20a0218aa5", 0x5}, {&(0x7f0000000100)="3d682b1e2e948303206a1c7fc6c9386fa4dca836195f57d176245bbabff82f7a08733f793bdc7c8b30f7d0b744c745fcb2caeb0fe251fdd1de6a6423ac60931287c6e878d216f16a8c3579d231b3efbf9c72c113132bf88b9731f41a0273572305b510e94943a98c9dd18458696fa78fa7333c64762f1370d8910df46624bca10ed5", 0x82}, {&(0x7f0000000280)="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", 0xf79}], 0x3) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 2][ T7563] netlink: 56 bytes leftover after parsing attributes in process `syz.0.366'. [ 298.704241][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 298.725050][ T7537] infiniband syz0: set down [ 298.736724][ T7537] infiniband syz0: added lo [ 298.747479][ T7537] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 298.751473][ T7537] infiniband syz0: Couldn't open port 1 [ 298.791017][ T5950] lo speed is unknown, defaulting to 1000 [ 298.851763][ T7537] RDS/IB: syz0: added [ 298.870061][ T7537] smc: adding ib device syz0 with port count 1 [ 298.893020][ T7537] smc: ib device syz0 port 1 has no pnetid [ 298.920001][ T5950] lo speed is unknown, defaulting to 1000 [ 298.928525][ T7537] lo speed is unknown, defaulting to 1000 [ 299.077923][ T7588] dummy0: entered promiscuous mode [ 299.090533][ T7588] vlan2: entered promiscuous mode [ 299.282862][ T7599] syzkaller0: entered promiscuous mode [ 299.311635][ T7599] syzkaller0: entered allmulticast mode [ 299.731322][ T7537] lo speed is unknown, defaulting to 1000 [ 300.418201][ T7537] lo speed is unknown, defaulting to 1000 [ 300.776598][ T7631] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 301.053228][ T7638] netlink: 80 bytes leftover after parsing attributes in process `syz.3.387'. [ 301.188895][ T7537] lo speed is unknown, defaulting to 1000 [ 301.289600][ T7644] netlink: 'syz.1.389': attribute type 11 has an invalid length. [ 301.346087][ T7638] bond4: option arp_validate: invalid value (18446744073491447809) [ 301.357415][ T7638] bond4 (unregistering): Released all slaves [ 301.387476][ T7649] pim6reg1: entered promiscuous mode [ 301.392948][ T7649] pim6reg1: entered allmulticast mode [ 301.677460][ T7656] tipc: Enabled bearer , priority 0 [ 301.692187][ T7660] netlink: 'syz.3.392': attribute type 5 has an invalid length. [ 301.709593][ T7656] syzkaller0: entered promiscuous mode [ 301.715140][ T7656] syzkaller0: entered allmulticast mode [ 301.753699][ T7660] ip6erspan0: entered promiscuous mode [ 301.841845][ T7654] tipc: Resetting bearer [ 301.859969][ T7654] netlink: 3 bytes leftover after parsing attributes in process `syz.1.391'. [ 301.878890][ T7654] 0ªX¹¦À: renamed from caif0 [ 301.924815][ T7654] 0ªX¹¦À: entered allmulticast mode [ 301.940060][ T7654] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 301.966823][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.3.396'. [ 301.993304][ T7653] tipc: Resetting bearer [ 301.999423][ T7537] lo speed is unknown, defaulting to 1000 [ 302.034427][ T7653] tipc: Disabling bearer [ 302.339809][ T7682] netlink: 72 bytes leftover after parsing attributes in process `syz.1.400'. [ 302.386477][ T7687] netlink: 194768 bytes leftover after parsing attributes in process `syz.0.402'. [ 302.605416][ T7677] lo speed is unknown, defaulting to 1000 [ 302.978662][ T7704] batadv1: entered allmulticast mode [ 302.985671][ T7704] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 303.579709][ T7716] macsec1: entered allmulticast mode [ 303.601742][ T7716] dummy0: entered allmulticast mode [ 303.823533][ T7721] netlink: 32 bytes leftover after parsing attributes in process `syz.0.410'. [ 303.845281][ T7718] lo speed is unknown, defaulting to 1000 [ 303.950074][ T7728] netlink: 48 bytes leftover after parsing attributes in process `syz.2.411'. [ 304.116100][ T7728] geneve2: entered promiscuous mode [ 304.434844][ T7737] bond1: (slave team0): Device is not bonding slave [ 304.463286][ T7741] netlink: 44 bytes leftover after parsing attributes in process `syz.3.415'. [ 304.479570][ T7737] bond1: option active_slave: invalid value (team0) [ 304.492043][ T7737] bond1 (unregistering): Released all slaves [ 305.209243][ T7752] lo speed is unknown, defaulting to 1000 [ 305.607573][ T7781] gretap0: entered promiscuous mode [ 305.962588][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 306.051001][ T7792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.425'. [ 306.101041][ T7791] lo speed is unknown, defaulting to 1000 [ 306.815973][ T7819] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 306.888826][ T7820] netlink: 5 bytes leftover after parsing attributes in process `syz.4.432'. [ 306.897673][ T7820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.432'. [ 306.958695][ T7820] netlink: 5 bytes leftover after parsing attributes in process `syz.4.432'. [ 307.076421][ T7819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.117666][ T7826] vlan2: entered promiscuous mode [ 307.122959][ T7826] bond1: entered promiscuous mode [ 307.136203][ T7826] vlan2: entered allmulticast mode [ 307.150965][ T7826] bond1: entered allmulticast mode [ 307.301057][ T7833] netlink: 'syz.4.435': attribute type 21 has an invalid length. [ 307.345902][ T7833] netlink: 132 bytes leftover after parsing attributes in process `syz.4.435'. [ 307.571313][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 307.734077][ T7841] netlink: set zone limit has 4 unknown bytes [ 308.067316][ T7867] tipc: Enabled bearer , priority 0 [ 308.172672][ T7867] x_tables: duplicate underflow at hook 1 [ 308.243398][ T7866] tipc: Disabling bearer [ 308.384170][ T7880] lo speed is unknown, defaulting to 1000 [ 308.524105][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 308.601068][ T7894] tipc: Enabled bearer , priority 0 [ 308.644950][ T7891] syzkaller0: entered promiscuous mode [ 308.660859][ T7891] syzkaller0: entered allmulticast mode [ 308.705428][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 308.705462][ T7901] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.452'. [ 308.749320][ T7895] x_tables: duplicate underflow at hook 2 [ 308.777176][ T7889] tipc: Resetting bearer [ 308.904884][ T7889] tipc: Disabling bearer [ 308.947732][ T7901] xt_CT: No such helper "snmp" [ 309.369557][ T7927] netlink: 'syz.0.458': attribute type 1 has an invalid length. [ 309.447746][ T7927] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 309.459520][ T7927] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 309.508684][ T7918] lo speed is unknown, defaulting to 1000 [ 309.524229][ T7930] netlink: 'syz.1.459': attribute type 5 has an invalid length. [ 309.547699][ T7931] bond3: (slave gretap1): making interface the new active one [ 309.562188][ T7931] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 309.600355][ T7927] macvlan4: entered promiscuous mode [ 309.605907][ T7927] macvlan4: entered allmulticast mode [ 309.613014][ T7927] bond3: entered promiscuous mode [ 309.618271][ T7927] gretap1: entered promiscuous mode [ 309.625457][ T7927] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 309.637594][ T7927] bond3: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 309.650960][ T7927] bond3: left promiscuous mode [ 309.655858][ T7927] gretap1: left promiscuous mode [ 309.866200][ T7925] lo speed is unknown, defaulting to 1000 [ 310.224506][ T7928] lo speed is unknown, defaulting to 1000 [ 310.452817][ T7935] lo speed is unknown, defaulting to 1000 [ 310.643192][ T7946] tipc: Started in network mode [ 310.648265][ T7946] tipc: Node identity 62ecab781011, cluster identity 4711 [ 310.670455][ T7946] tipc: Enabled bearer , priority 0 [ 310.684603][ T7946] syzkaller0: entered promiscuous mode [ 310.690311][ T7946] syzkaller0: entered allmulticast mode [ 310.719755][ T7946] tipc: Resetting bearer [ 310.730463][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.463'. [ 310.749429][ T7945] tipc: Resetting bearer [ 310.767534][ T7945] tipc: Disabling bearer [ 311.160292][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 311.440091][ T7957] Bluetooth: MGMT ver 1.23 [ 312.014557][ T7964] bond0: (slave team0): Releasing backup interface [ 312.032333][ T7964] bond0: (slave bond_slave_0): Releasing backup interface [ 312.042596][ T7964] bond0: (slave bond_slave_1): Releasing backup interface [ 312.055309][ T7964] team0: Port device team_slave_0 removed [ 312.063689][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 312.076159][ T7964] team0: Port device team_slave_1 removed [ 312.082789][ T7964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.091748][ T7964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.099848][ T7964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 312.116210][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.468'. [ 312.142675][ T7966] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 312.151520][ T7966] netlink: 224 bytes leftover after parsing attributes in process `syz.1.468'. [ 312.245137][ T7974] netlink: 56 bytes leftover after parsing attributes in process `syz.1.468'. [ 312.320731][ T7974] bond1 (unregistering): Released all slaves [ 312.424891][ T7981] netlink: 64 bytes leftover after parsing attributes in process `syz.0.471'. [ 312.434193][ T7981] netlink: 64 bytes leftover after parsing attributes in process `syz.0.471'. [ 312.728334][ T7995] pimreg1: tun_chr_ioctl cmd 2147767520 [ 312.768399][ T7995] lo speed is unknown, defaulting to 1000 [ 313.922346][ T8043] netlink: 'syz.2.486': attribute type 9 has an invalid length. [ 313.964674][ T8043] netlink: 'syz.2.486': attribute type 7 has an invalid length. [ 314.010132][ T8043] netlink: 'syz.2.486': attribute type 8 has an invalid length. [ 314.112727][ T8045] bridge2: entered promiscuous mode [ 314.382839][ T8058] nbd: must specify a device to reconfigure [ 315.154868][ T8100] netlink: 'syz.2.494': attribute type 12 has an invalid length. [ 315.292884][ T8100] netlink: 'syz.2.494': attribute type 4 has an invalid length. [ 315.671429][ T8123] lo speed is unknown, defaulting to 1000 [ 315.729848][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 315.835035][ T8126] netlink: 32 bytes leftover after parsing attributes in process `syz.4.502'. [ 315.879683][ T8128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.501'. [ 316.540225][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 317.200762][ T8184] tipc: Enabling of bearer rejected, failed to enable media [ 317.505485][ T8204] __nla_validate_parse: 2 callbacks suppressed [ 317.505504][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.524'. [ 317.556557][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.524'. [ 317.600163][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.524'. [ 317.659139][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.524'. [ 317.676062][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.524'. [ 317.688360][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.524'. [ 317.699688][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.524'. [ 317.736020][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.524'. [ 317.760095][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.524'. [ 317.779365][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.524'. [ 317.805320][ T8209] tipc: Started in network mode [ 317.835774][ T8209] tipc: Node identity 2649a21b4932, cluster identity 4711 [ 317.853863][ T8209] tipc: Enabled bearer , priority 0 [ 317.888920][ T8212] syzkaller0: entered promiscuous mode [ 317.894432][ T8212] syzkaller0: entered allmulticast mode [ 318.022283][ T8212] tipc: Resetting bearer [ 318.093185][ T8212] tipc: Disabling bearer [ 318.133702][ T8223] 8021q: VLANs not supported on syzkaller1 [ 318.494997][ T8247] lo speed is unknown, defaulting to 1000 [ 318.916262][ T8271] xt_CT: You must specify a L4 protocol and not use inversions on it [ 319.049762][ T8281] netlink: 'syz.2.543': attribute type 10 has an invalid length. [ 319.104232][ T8281] team0: Port device netdevsim0 added [ 319.686759][ T8314] netlink: 'syz.2.551': attribute type 3 has an invalid length. [ 319.750021][ T8319] netlink: 'syz.4.552': attribute type 11 has an invalid length. [ 319.755331][ T8320] netlink: 'syz.4.552': attribute type 11 has an invalid length. [ 320.340151][ T8339] syzkaller1: entered promiscuous mode [ 320.362380][ T8339] syzkaller1: entered allmulticast mode [ 320.818841][ T8368] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 320.946618][ T8369] syzkaller0: entered promiscuous mode [ 320.962168][ T8369] syzkaller0: entered allmulticast mode [ 322.482219][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.581142][ T8380] syzkaller0: entered promiscuous mode [ 322.586721][ T8380] syzkaller0: entered allmulticast mode [ 322.598146][ T8403] __nla_validate_parse: 67 callbacks suppressed [ 322.598160][ T8403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.574'. [ 324.184909][ T8448] xt_policy: output policy not valid in PREROUTING and INPUT [ 324.418044][ T8458] netlink: get zone limit has 4 unknown bytes [ 324.434978][ T8458] netlink: 'syz.3.588': attribute type 15 has an invalid length. [ 324.445167][ T8462] sctp: [Deprecated]: syz.2.589 (pid 8462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.445167][ T8462] Use struct sctp_sack_info instead [ 324.504193][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'. [ 324.521339][ T8459] lo speed is unknown, defaulting to 1000 [ 324.567829][ T8462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.589'. [ 324.617212][ T8462] netlink: 72 bytes leftover after parsing attributes in process `syz.2.589'. [ 324.814706][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 325.170588][ T8484] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 325.414816][ T8484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.809107][ T8515] tipc: Enabled bearer , priority 0 [ 325.902170][ T8516] tipc: Disabling bearer [ 325.918655][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 325.997071][ T8524] pim6reg1: entered promiscuous mode [ 326.003419][ T8524] pim6reg1: entered allmulticast mode [ 326.184531][ T8532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.937912][ T8539] vcan0: Master is either lo or non-ether device [ 327.108057][ T8546] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 327.260920][ T8561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.615'. [ 328.155192][ T8588] netlink: 88 bytes leftover after parsing attributes in process `syz.1.622'. [ 328.264720][ T8588] netlink: 116 bytes leftover after parsing attributes in process `syz.1.622'. [ 328.321389][ T8568] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 328.332371][ T8568] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 328.760044][ T8612] xt_NFQUEUE: number of total queues is 0 [ 329.274799][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 329.299949][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 329.370551][ T8638] bond0: (slave bond_slave_1): Releasing backup interface [ 329.502819][ T8640] netlink: 60 bytes leftover after parsing attributes in process `syz.3.635'. [ 329.514018][ T8640] netlink: 60 bytes leftover after parsing attributes in process `syz.3.635'. [ 329.548034][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 329.624545][ T8645] netlink: 'syz.0.636': attribute type 21 has an invalid length. [ 329.635340][ T8645] netlink: 156 bytes leftover after parsing attributes in process `syz.0.636'. [ 330.183409][ T8665] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 330.199500][ T8665] netlink: 'syz.0.641': attribute type 2 has an invalid length. [ 330.209115][ T8663] syzkaller0: entered promiscuous mode [ 330.216741][ T8663] syzkaller0: entered allmulticast mode [ 330.235593][ T8663] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.640'. [ 330.326542][ T8663] xt_CT: No such helper "snmp" [ 330.781136][ T8703] syz_tun: entered allmulticast mode [ 330.787602][ T8693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.648'. [ 330.814550][ T8700] bridge6: entered promiscuous mode [ 330.835102][ T8700] bridge6: entered allmulticast mode [ 331.143071][ T8713] bond4 (unregistering): Released all slaves [ 331.174212][ T8699] syz_tun: left allmulticast mode [ 331.371535][ T8732] netlink: 'syz.4.658': attribute type 2 has an invalid length. [ 331.466752][ T8734] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 331.633930][ T8734] 8021q: adding VLAN 0 to HW filter on device bond4 [ 331.660303][ T8748] netlink: 'syz.2.662': attribute type 10 has an invalid length. [ 331.701115][ T8743] 8021q: adding VLAN 0 to HW filter on device bond4 [ 331.708348][ T8743] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 331.720242][ T8743] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 331.766491][ T8748] team0: Port device dummy0 added [ 331.797758][ T8745] gretap2: entered promiscuous mode [ 331.994833][ T8757] netlink: 'syz.1.666': attribute type 10 has an invalid length. [ 332.014814][ T8757] dummy0: entered promiscuous mode [ 332.051034][ T8757] bridge0: port 4(dummy0) entered blocking state [ 332.065343][ T8757] bridge0: port 4(dummy0) entered disabled state [ 332.073949][ T8757] dummy0: entered allmulticast mode [ 332.083948][ T8757] bridge0: port 4(dummy0) entered blocking state [ 332.090511][ T8757] bridge0: port 4(dummy0) entered forwarding state [ 332.367160][ T8783] veth3: entered promiscuous mode [ 332.564979][ T8798] IPVS: Unknown mcast interface: pimreg1 [ 332.697539][ T8803] netlink: 'syz.1.678': attribute type 11 has an invalid length. [ 332.906607][ T8806] lo speed is unknown, defaulting to 1000 [ 332.999531][ T8817] SET target dimension over the limit! [ 333.239373][ T8825] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 333.276381][ T8825] __nla_validate_parse: 6 callbacks suppressed [ 333.276399][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 335.153714][ T8867] netlink: 'syz.4.693': attribute type 5 has an invalid length. [ 335.346557][ T8870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.618744][ T8886] dvmrp1: entered allmulticast mode [ 335.641325][ T8880] dvmrp1: left allmulticast mode [ 335.971220][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.704'. [ 336.000846][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.704'. [ 336.037321][ T8907] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 336.065911][ T8907] netlink: 'syz.4.703': attribute type 4 has an invalid length. [ 336.087287][ T8907] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.703'. [ 336.159044][ T8913] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 336.174472][ T8912] netlink: 252 bytes leftover after parsing attributes in process `syz.0.707'. [ 336.185059][ T8913] netlink: 'syz.4.703': attribute type 4 has an invalid length. [ 336.195001][ T8913] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.703'. [ 336.313673][ T8917] netlink: 3 bytes leftover after parsing attributes in process `syz.1.708'. [ 336.373211][ T8917] 1ªX¹¦À: renamed from 60ªX¹¦À [ 336.423005][ T8917] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 336.767767][ T8935] syzkaller0: entered promiscuous mode [ 336.773385][ T8935] syzkaller0: entered allmulticast mode [ 337.231418][ T8952] sctp: [Deprecated]: syz.4.717 (pid 8952) Use of int in maxseg socket option. [ 337.231418][ T8952] Use struct sctp_assoc_value instead [ 337.652563][ T8969] lo speed is unknown, defaulting to 1000 [ 338.075347][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 338.100061][ T8983] netlink: 52 bytes leftover after parsing attributes in process `syz.1.727'. [ 339.050796][ T9010] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 339.293923][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'. [ 339.540338][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 339.554978][ T9033] lo speed is unknown, defaulting to 1000 [ 339.702354][ T9045] x_tables: duplicate underflow at hook 3 [ 339.717047][ T9045] netlink: 96 bytes leftover after parsing attributes in process `syz.1.745'. [ 340.301842][ T9067] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 340.339268][ T9067] netlink: 224 bytes leftover after parsing attributes in process `syz.1.750'. [ 340.387973][ T9063] vxcan0: entered allmulticast mode [ 340.407424][ T9069] netlink: 'syz.3.752': attribute type 62 has an invalid length. [ 340.577267][ T9075] delete_channel: no stack [ 340.859744][ T9082] netlink: 208 bytes leftover after parsing attributes in process `syz.3.755'. [ 340.973673][ T9082] pimreg3: entered allmulticast mode [ 341.377932][ T9093] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 341.587986][ T9100] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 342.351774][ T9120] syzkaller0: entered promiscuous mode [ 342.357310][ T9120] syzkaller0: entered allmulticast mode [ 342.413552][ T9121] macsec1: entered promiscuous mode [ 342.510269][ T9123] macsec1: entered promiscuous mode [ 342.613825][ T9127] syzkaller0: entered promiscuous mode [ 342.624326][ T9127] syzkaller0: entered allmulticast mode [ 344.160579][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.780'. [ 344.209601][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.780'. [ 344.254809][ T9185] netlink: 'syz.4.781': attribute type 11 has an invalid length. [ 345.244680][ T9198] lo speed is unknown, defaulting to 1000 [ 345.399717][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.787'. [ 345.583989][ T9208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.787'. [ 346.048322][ T9216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.791'. [ 346.116943][ T9216] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 346.196307][ T9216] bond2 (unregistering): Released all slaves [ 346.302027][ T9216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.791'. [ 346.379325][ T9216] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 346.405074][ T9216] bond2 (unregistering): Released all slaves [ 346.491710][ T9216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.791'. [ 346.685947][ T9216] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 346.735997][ T9216] bond2 (unregistering): Released all slaves [ 346.812100][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 346.825821][ T9216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.791'. [ 346.849279][ T9222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.792'. [ 346.888924][ T9216] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 346.921499][ T9216] bond2 (unregistering): Released all slaves [ 347.745122][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 347.797952][ T9245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.799'. [ 348.787948][ T9256] lo speed is unknown, defaulting to 1000 [ 349.347881][ T9264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.591028][ T9153] Set syz1 is full, maxelem 65536 reached [ 349.786424][ T30] audit: type=1800 audit(1766414849.261:2): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.807" name="4" dev="tmpfs" ino=891 res=0 errno=0 [ 349.825817][ T9266] vlan2: entered promiscuous mode [ 349.845333][ T9266] bond0: entered promiscuous mode [ 349.850613][ T9266] bond_slave_0: entered promiscuous mode [ 349.856925][ T9266] bond_slave_1: entered promiscuous mode [ 350.082767][ T9281] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 350.122189][ T9289] openvswitch: netlink: Flow key attr not present in new flow. [ 350.477216][ T9304] set match dimension is over the limit! [ 350.795663][ T9317] openvswitch: netlink: Message has 4 unknown bytes. [ 350.872036][ T9319] lo speed is unknown, defaulting to 1000 [ 351.019405][ T9323] __nla_validate_parse: 7 callbacks suppressed [ 351.019425][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'. [ 351.272369][ T9327] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 351.288890][ T9328] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 351.410474][ T9329] delete_channel: no stack [ 351.486239][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.523441][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.532399][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.541134][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.559292][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.610633][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 351.640001][ T9335] netlink: 168 bytes leftover after parsing attributes in process `syz.4.825'. [ 351.670129][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 351.997745][ T9331] lo speed is unknown, defaulting to 1000 [ 352.622049][ T9332] lo speed is unknown, defaulting to 1000 [ 353.496394][ T9372] veth1_macvtap: left promiscuous mode [ 353.502430][ T9372] macsec0: entered allmulticast mode [ 353.547165][ T9369] veth1_macvtap: entered promiscuous mode [ 353.576909][ T9369] veth1_macvtap: entered allmulticast mode [ 353.589569][ T5847] Bluetooth: hci5: command tx timeout [ 353.638984][ T9369] macsec0: left allmulticast mode [ 353.668809][ T9369] veth1_macvtap: left allmulticast mode [ 353.740788][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 353.754212][ T9374] syz_tun: entered allmulticast mode [ 353.818499][ T9371] syz_tun: left allmulticast mode [ 353.869713][ T9378] lo speed is unknown, defaulting to 1000 [ 353.901515][ T9386] syzkaller0: entered promiscuous mode [ 353.920144][ T9386] syzkaller0: entered allmulticast mode [ 354.590045][ T9408] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 354.637972][ T9332] chnl_net:caif_netlink_parms(): no params data found [ 355.402840][ T9436] openvswitch: netlink: Message has -2 unknown bytes. [ 355.443255][ T9436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.670987][ T5847] Bluetooth: hci5: command tx timeout [ 356.618654][ T9453] netlink: 'syz.4.853': attribute type 22 has an invalid length. [ 357.365077][ T9332] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.389006][ T9332] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.396328][ T9332] bridge_slave_0: entered allmulticast mode [ 357.420547][ T9332] bridge_slave_0: entered promiscuous mode [ 357.463058][ T9332] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.478317][ T9332] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.486583][ T9332] bridge_slave_1: entered allmulticast mode [ 357.494936][ T9332] bridge_slave_1: entered promiscuous mode [ 357.695859][ T9332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.738470][ T9473] IPv6: Can't replace route, no match found [ 357.755145][ T5847] Bluetooth: hci5: command tx timeout [ 357.823537][ T9332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.861401][ T9475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.005180][ T9332] team0: Port device team_slave_0 added [ 358.060737][ T9332] team0: Port device team_slave_1 added [ 358.208400][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 358.297490][ T9332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.330324][ T9332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.370310][ T9332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.408902][ T9332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.428341][ T9332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.476392][ T9332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.538140][ T9496] lo speed is unknown, defaulting to 1000 [ 358.556511][ T9505] netlink: 40 bytes leftover after parsing attributes in process `syz.4.867'. [ 358.579138][ T9506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.867'. [ 359.193896][ T9332] hsr_slave_0: entered promiscuous mode [ 359.206731][ T9332] hsr_slave_1: entered promiscuous mode [ 359.221351][ T9332] debugfs: 'hsr0' already exists in 'hsr' [ 359.233900][ T9332] Cannot create hsr debugfs directory [ 359.570714][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 359.835768][ T5847] Bluetooth: hci5: command tx timeout [ 360.052634][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'. [ 360.076378][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'. [ 360.104019][ T9538] openvswitch: netlink: Flow actions attr not present in new flow. [ 360.128292][ T9537] openvswitch: netlink: Flow actions attr not present in new flow. [ 360.256718][ T9332] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 360.283052][ T9332] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.312357][ T9332] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.343128][ T9332] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.443403][ T9544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.877'. [ 360.664964][ T9332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.701697][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 360.727291][ T9332] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.818241][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.825506][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.937007][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.944295][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.957185][ T9570] netlink: 52 bytes leftover after parsing attributes in process `syz.3.883'. [ 360.989226][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.997929][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.029235][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 361.087608][ T9573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.864239][ T9608] lo speed is unknown, defaulting to 1000 [ 361.979345][ T9332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.100078][ T9621] bond4: option ad_select: invalid value (34) [ 362.125766][ T9621] bond4 (unregistering): Released all slaves [ 362.837626][ T9634] lo speed is unknown, defaulting to 1000 [ 363.144421][ T9332] veth0_vlan: entered promiscuous mode [ 363.187163][ T9332] veth1_vlan: entered promiscuous mode [ 363.284957][ T9332] veth0_macvtap: entered promiscuous mode [ 363.316549][ T9332] veth1_macvtap: entered promiscuous mode [ 363.375277][ T9657] dvmrp1: tun_chr_ioctl cmd 3222336776 [ 363.389342][ T9657] dvmrp1: tun_chr_ioctl cmd 35111 [ 363.424232][ T9332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.617988][ T9650] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 364.080569][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.088141][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.550470][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.599358][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.159746][ T9332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.196857][ T38] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.206568][ T38] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.244101][ T38] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.268184][ T38] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.321490][ T38] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.333406][ T38] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.356023][ T38] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.382549][ T38] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.617946][ T9674] __nla_validate_parse: 9 callbacks suppressed [ 365.617966][ T9674] netlink: 56 bytes leftover after parsing attributes in process `syz.2.909'. [ 365.713697][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.841107][ T9677] IPVS: ip_vs_add_dest(): server weight less than zero [ 365.957436][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.092944][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.143904][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 366.175543][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 366.285749][ T9676] cgroup: fork rejected by pids controller in /syz4 [ 368.523704][ T9679] veth7: entered promiscuous mode [ 368.701562][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.758306][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.788725][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.927365][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.950956][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.040266][ T12] bond1: left allmulticast mode [ 369.045334][ T12] bond1: left promiscuous mode [ 369.066172][ T12] bridge0: port 3(bond1) entered disabled state [ 369.076660][ T12] bridge_slave_1: left allmulticast mode [ 369.082592][ T12] bridge_slave_1: left promiscuous mode [ 369.088412][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.100541][ T12] bridge_slave_0: left allmulticast mode [ 369.106340][ T12] bridge_slave_0: left promiscuous mode [ 369.113396][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.624264][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.635348][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.644142][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.652678][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.678117][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.787498][ T12] bond3 (unregistering): (slave gretap1): Releasing active interface [ 370.090491][ T12] team0: Port device bridge4 removed [ 370.148356][ T12] team0: Port device bridge5 removed [ 370.350063][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.390852][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.440302][ T12] bond0 (unregistering): Released all slaves [ 370.760869][ T12] bond1 (unregistering): Released all slaves [ 370.797186][ T12] bond2 (unregistering): Released all slaves [ 370.859197][ T12] bond3 (unregistering): Released all slaves [ 371.000002][ T9812] tipc: Enabled bearer , priority 0 [ 371.112398][ T9811] tipc: Disabling bearer [ 371.215594][ T12] tipc: Left network mode [ 371.294974][ T9807] lo speed is unknown, defaulting to 1000 [ 371.674058][ T9835] tipc: Enabled bearer , priority 0 [ 371.751909][ T52] Bluetooth: hci1: command tx timeout [ 371.796039][ T9835] tipc: Disabling bearer [ 371.906494][ T9842] bond0: (slave wg0): Error: Device can not be enslaved while up [ 372.397577][ T12] hsr_slave_0: left promiscuous mode [ 372.413729][ T12] hsr_slave_1: left promiscuous mode [ 372.441127][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.453104][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.462304][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.479053][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.573618][ T12] veth1_macvtap: left promiscuous mode [ 372.580294][ T12] veth0_macvtap: left promiscuous mode [ 372.586152][ T12] veth1_vlan: left promiscuous mode [ 372.594918][ T12] veth0_vlan: left promiscuous mode [ 372.682332][ T9872] netlink: 'syz.5.935': attribute type 11 has an invalid length. [ 372.690555][ T9872] netlink: 140 bytes leftover after parsing attributes in process `syz.5.935'. [ 373.139171][ T12] team0 (unregistering): Port device team_slave_1 removed [ 373.177254][ T12] team0 (unregistering): Port device team_slave_0 removed [ 373.819836][ T9892] bridge_slave_1: left allmulticast mode [ 373.825561][ T9892] bridge_slave_1: left promiscuous mode [ 373.832438][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.839555][ T52] Bluetooth: hci1: command tx timeout [ 373.867414][ T9892] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 373.990789][ T9807] chnl_net:caif_netlink_parms(): no params data found [ 374.292085][ T9807] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.318330][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.340317][ T9807] bridge_slave_0: entered allmulticast mode [ 374.366416][ T9807] bridge_slave_0: entered promiscuous mode [ 374.391726][ T9807] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.399641][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.407006][ T9807] bridge_slave_1: entered allmulticast mode [ 374.420346][ T9807] bridge_slave_1: entered promiscuous mode [ 374.429932][ T9923] netlink: 'syz.3.947': attribute type 11 has an invalid length. [ 374.489113][ T9807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.545672][ T9807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.691435][ T9807] team0: Port device team_slave_0 added [ 374.711261][ T9807] team0: Port device team_slave_1 added [ 374.803111][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.820198][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.882333][ T9807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.905966][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.913208][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.960364][ T9944] netlink: 24 bytes leftover after parsing attributes in process `syz.5.955'. [ 374.978592][ T9807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.010836][ T9943] netlink: 'syz.1.953': attribute type 3 has an invalid length. [ 375.038917][ T9943] netlink: 'syz.1.953': attribute type 3 has an invalid length. [ 375.075444][ T9944] netlink: 20 bytes leftover after parsing attributes in process `syz.5.955'. [ 375.106952][ T9949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.124244][ T9944] netlink: 'syz.5.955': attribute type 2 has an invalid length. [ 375.134792][ T9944] netlink: 'syz.5.955': attribute type 9 has an invalid length. [ 375.150846][ T9944] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.955'. [ 375.258006][ T9807] hsr_slave_0: entered promiscuous mode [ 375.260343][ T9955] netlink: 'syz.2.958': attribute type 10 has an invalid length. [ 375.269559][ T9807] hsr_slave_1: entered promiscuous mode [ 375.290985][ T9807] debugfs: 'hsr0' already exists in 'hsr' [ 375.308967][ T9807] Cannot create hsr debugfs directory [ 375.401944][ T9955] netlink: 'syz.2.958': attribute type 10 has an invalid length. [ 375.467015][ T9955] team0: Port device dummy0 removed [ 375.476463][ T9955] dummy0: entered promiscuous mode [ 375.484641][ T9955] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 375.689580][ T9969] netlink: zone id is out of range [ 375.698610][ T9969] netlink: zone id is out of range [ 375.703783][ T9969] netlink: zone id is out of range [ 375.729729][ T9969] netlink: zone id is out of range [ 375.734925][ T9969] netlink: get zone limit has 4 unknown bytes [ 375.777793][ T9973] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 375.918730][ T52] Bluetooth: hci1: command tx timeout [ 376.067320][ T9981] vlan2: entered promiscuous mode [ 376.078763][ T9981] bond0: entered promiscuous mode [ 376.083880][ T9981] bond_slave_0: entered promiscuous mode [ 376.099102][ T9981] vlan2: entered allmulticast mode [ 376.111110][ T9981] bond0: entered allmulticast mode [ 376.118083][ T9981] bond_slave_0: entered allmulticast mode [ 376.264125][ T9989] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.967'. [ 376.291173][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'. [ 376.300293][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'. [ 376.310837][ T9989] netlink: 'syz.1.967': attribute type 18 has an invalid length. [ 376.350773][ T9986] tipc: Enabled bearer , priority 0 [ 376.358008][ T9987] syzkaller0: entered promiscuous mode [ 376.364715][ T9987] syzkaller0: entered allmulticast mode [ 376.431539][ T9807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 376.446635][ T9807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 376.460558][ T9807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 376.473913][ T9807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 376.501633][ T9985] tipc: Resetting bearer [ 376.543302][ T9985] tipc: Disabling bearer [ 376.756819][T10011] tipc: Enabling of bearer rejected, failed to enable media [ 376.823238][ T9807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.863294][T10014] netlink: 'syz.5.974': attribute type 32 has an invalid length. [ 376.873511][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.974'. [ 376.897510][T10017] syz.1.972 (10017) used obsolete PPPIOCDETACH ioctl [ 376.939008][T10014] bond1: option coupled_control: invalid value (12) [ 376.947889][T10014] bond1 (unregistering): Released all slaves [ 376.995670][ T9807] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.115645][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.122907][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.162676][ T3843] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.169935][ T3843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.316849][T10026] lo speed is unknown, defaulting to 1000 [ 377.347927][T10030] syzkaller1: entered promiscuous mode [ 377.362690][T10030] syzkaller1: entered allmulticast mode [ 377.747830][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 377.761226][ T9807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.805927][T10046] erspan0: entered promiscuous mode [ 377.828453][T10046] macvtap1: entered promiscuous mode [ 377.834417][T10046] macvtap1: entered allmulticast mode [ 377.840413][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 377.850594][T10046] erspan0: entered allmulticast mode [ 377.988669][ T52] Bluetooth: hci1: command tx timeout [ 378.536158][ T9807] veth0_vlan: entered promiscuous mode [ 378.559201][ T9807] veth1_vlan: entered promiscuous mode [ 378.716399][ T9807] veth0_macvtap: entered promiscuous mode [ 378.744264][ T9807] veth1_macvtap: entered promiscuous mode [ 378.749558][T10085] netlink: 56 bytes leftover after parsing attributes in process `syz.1.991'. [ 378.800014][T10089] Cannot find set identified by id 0 to match [ 378.813239][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.965519][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.997012][ T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.020305][T10094] netlink: 36 bytes leftover after parsing attributes in process `syz.3.996'. [ 379.057307][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.077607][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.088101][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.100386][T10098] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.997'. [ 379.215693][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.997'. [ 379.386393][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.406846][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.529807][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.537891][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.724765][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 379.759651][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 379.788036][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 379.819435][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 380.125338][T10139] Cannot find add_set index 0 as target [ 380.262917][T10141] validate_nla: 1 callbacks suppressed [ 380.262937][T10141] netlink: 'syz.4.1007': attribute type 1 has an invalid length. [ 380.278124][T10141] netlink: 'syz.4.1007': attribute type 2 has an invalid length. [ 380.297006][T10141] netlink: 'syz.4.1007': attribute type 1 has an invalid length. [ 380.312957][T10141] netlink: 'syz.4.1007': attribute type 3 has an invalid length. [ 380.424235][T10145] tipc: Enabled bearer , priority 0 [ 380.555660][T10142] tipc: Disabling bearer [ 380.832289][T10158] netlink: 'syz.3.1012': attribute type 12 has an invalid length. [ 381.036213][T10165] lo speed is unknown, defaulting to 1000 [ 381.612431][T10185] lo speed is unknown, defaulting to 1000 [ 382.691824][T10216] syzkaller0: entered promiscuous mode [ 382.697413][T10216] syzkaller0: entered allmulticast mode [ 383.149428][T10225] __nla_validate_parse: 92 callbacks suppressed [ 383.149447][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1026'. [ 383.371314][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 383.391643][T10230] netlink: 'syz.4.1028': attribute type 1 has an invalid length. [ 383.407447][T10233] netlink: 'syz.5.1030': attribute type 8 has an invalid length. [ 383.416824][T10234] smc: removing ib device syz0 [ 383.425358][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 383.438982][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1030'. [ 383.469726][T10233] bond0: entered promiscuous mode [ 383.484042][T10233] bond_slave_0: entered promiscuous mode [ 383.501558][T10233] bond_slave_1: entered promiscuous mode [ 383.526832][T10233] geneve0: entered promiscuous mode [ 383.567322][T10233] team_slave_0: entered promiscuous mode [ 383.576020][T10233] team_slave_0: left promiscuous mode [ 383.584758][T10233] bond0: left promiscuous mode [ 383.601265][T10233] bond_slave_0: left promiscuous mode [ 383.610618][T10233] bond_slave_1: left promiscuous mode [ 383.627137][T10233] geneve0: left promiscuous mode [ 383.688131][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 383.705541][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 383.750355][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 383.787764][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 383.834467][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 383.871413][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 384.567921][T10277] syzkaller0: entered promiscuous mode [ 384.604285][T10277] syzkaller0: entered allmulticast mode [ 384.709966][T10277] tipc: Started in network mode [ 384.729985][T10277] tipc: Node identity 26b9285df6be, cluster identity 4711 [ 384.760575][T10277] tipc: Enabled bearer , priority 0 [ 384.812372][T10275] tipc: Resetting bearer [ 384.834374][T10288] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 384.895098][T10275] tipc: Disabling bearer [ 384.942859][T10293] xt_hashlimit: max too large, truncated to 1048576 [ 384.977752][T10293] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 386.352878][T10343] xt_hashlimit: overflow, try lower: 0/0 [ 386.367947][T10338] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 386.788882][T10359] netlink: 'syz.4.1063': attribute type 2 has an invalid length. [ 386.980102][T10359] !: entered promiscuous mode [ 387.562901][T10400] netem: incorrect ge model size [ 387.600593][T10400] netem: change failed [ 387.839146][T10414] x_tables: duplicate underflow at hook 3 [ 388.221936][T10426] __nla_validate_parse: 101 callbacks suppressed [ 388.221958][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1079'. [ 389.299813][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 389.314562][T10494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1094'. [ 389.335681][T10497] geneve3: entered promiscuous mode [ 389.361484][T10494] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 389.381858][T10494] erspan1: entered allmulticast mode [ 389.447603][T10504] netlink: 'syz.1.1096': attribute type 3 has an invalid length. [ 389.635677][T10508] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 389.761859][T10512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.780609][T10512] batadv_slave_0: entered promiscuous mode [ 390.186798][T10533] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 390.243426][T10533] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 390.265414][T10503] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 390.270418][T10533] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 390.288443][T10533] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 390.689375][T10556] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1108'. [ 390.712899][T10556] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1108'. [ 390.764864][T10557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1108'. [ 390.935625][T10572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1113'. [ 390.955301][T10572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1113'. [ 390.957866][T10574] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 390.967508][T10572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1113'. [ 391.102439][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1114'. [ 391.179528][T10574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.267654][T10589] netlink: 'syz.2.1117': attribute type 6 has an invalid length. [ 391.281500][T10589] netlink: 'syz.2.1117': attribute type 5 has an invalid length. [ 391.325229][ T1941] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 391.333913][ T1941] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 391.349300][ T6992] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 391.374760][T10580] bond3: entered allmulticast mode [ 391.389337][ T7006] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 391.407450][T10588] bridge0: port 4(dummy0) entered disabled state [ 391.429576][T10588] dummy0: left allmulticast mode [ 391.434584][T10588] dummy0: left promiscuous mode [ 391.440373][T10588] bridge0: port 4(dummy0) entered disabled state [ 391.453363][T10588] bond3: (slave dummy0): making interface the new active one [ 391.462877][T10588] dummy0: entered allmulticast mode [ 391.469519][T10588] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 391.719050][ T7006] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 392.272415][T10617] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 392.296054][T10617] bond4 (unregistering): Released all slaves [ 392.595197][T10637] netlink: 'syz.3.1132': attribute type 15 has an invalid length. [ 392.720073][T10646] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 392.950674][ T6992] IPVS: starting estimator thread 0... [ 393.048768][T10655] IPVS: using max 37 ests per chain, 88800 per kthread [ 393.165856][T10668] netlink: 'syz.5.1141': attribute type 1 has an invalid length. [ 393.303466][T10672] __nla_validate_parse: 11 callbacks suppressed [ 393.303476][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 393.303485][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1143'. [ 393.303504][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 393.346515][ T3843] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.346828][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1143'. [ 393.379180][ T3843] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.388292][ T3843] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.406828][ T3843] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.424358][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 393.489146][T10682] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.512483][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1143'. [ 393.526605][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 393.622575][T10687] netlink: 'syz.5.1146': attribute type 2 has an invalid length. [ 393.684360][T10692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1147'. [ 393.815391][T10698] bond_slave_0: entered promiscuous mode [ 393.821475][T10698] bond_slave_1: entered promiscuous mode [ 393.834660][T10698] vlan2: entered promiscuous mode [ 393.840228][T10698] bond0: entered promiscuous mode [ 394.741920][T10730] team_slave_0: entered promiscuous mode [ 394.747991][T10730] team_slave_1: entered promiscuous mode [ 394.772994][T10730] vlan3: entered promiscuous mode [ 394.787069][T10730] team0: entered promiscuous mode [ 394.890820][T10736] netlink: 'syz.1.1156': attribute type 3 has an invalid length. [ 395.598773][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 395.693108][T10755] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1160'. [ 395.815071][T10764] netlink: 'syz.5.1163': attribute type 10 has an invalid length. [ 395.837531][T10764] bridge0: port 3(macsec0) entered blocking state [ 395.854836][T10764] bridge0: port 3(macsec0) entered disabled state [ 395.888984][T10764] macsec0: entered allmulticast mode [ 395.895672][T10764] veth1_macvtap: entered allmulticast mode [ 395.917865][T10764] macsec0: entered promiscuous mode [ 395.932382][T10764] bridge0: port 3(macsec0) entered blocking state [ 395.939108][T10764] bridge0: port 3(macsec0) entered forwarding state [ 396.062165][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1167'. [ 396.246301][T10786] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20066 [ 396.301323][T10786] syzkaller1: entered promiscuous mode [ 396.307278][T10786] syzkaller1: entered allmulticast mode [ 397.301993][T10829] batman_adv: batadv0: Adding interface: dummy0 [ 397.320178][T10829] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.385606][T10829] batman_adv: batadv0: Interface activated: dummy0 [ 397.622080][T10843] netlink: 'syz.4.1187': attribute type 10 has an invalid length. [ 397.644572][T10843] dummy0: entered promiscuous mode [ 397.661336][T10843] batman_adv: batadv0: Interface deactivated: dummy0 [ 397.687085][T10843] batman_adv: batadv0: Removing interface: dummy0 [ 397.696645][T10843] bridge0: port 3(dummy0) entered blocking state [ 397.715238][T10843] bridge0: port 3(dummy0) entered disabled state [ 397.727951][T10843] dummy0: entered allmulticast mode [ 397.747693][T10843] bridge0: port 3(dummy0) entered blocking state [ 397.754414][T10843] bridge0: port 3(dummy0) entered forwarding state [ 397.778232][T10851] syzkaller1: entered promiscuous mode [ 397.799070][T10851] syzkaller1: entered allmulticast mode [ 398.218937][T10874] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 398.551320][T10891] __nla_validate_parse: 1 callbacks suppressed [ 398.551341][T10891] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1196'. [ 398.845459][T10898] vlan2: entered promiscuous mode [ 398.879720][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1198'. [ 398.903878][T10898] macsec0: left allmulticast mode [ 398.912097][T10898] veth1_macvtap: left allmulticast mode [ 398.927389][T10898] macsec0: left promiscuous mode [ 398.939088][T10898] bridge0: port 3(macsec0) entered disabled state [ 398.967480][T10898] bridge_slave_1: left allmulticast mode [ 398.977294][T10898] bridge_slave_1: left promiscuous mode [ 398.994146][T10898] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.038878][T10898] bridge_slave_0: left allmulticast mode [ 399.058608][T10898] bridge_slave_0: left promiscuous mode [ 399.081021][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.354613][T10917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.454561][T10923] bond1: option arp_validate: invalid value (18446744073491447809) [ 399.464499][T10929] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1206'. [ 399.483288][T10929] netlink: 'syz.5.1206': attribute type 13 has an invalid length. [ 399.492669][T10923] bond1 (unregistering): Released all slaves [ 399.678994][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 399.766622][T10929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.787003][T10929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.860174][T10904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.867091][T10904] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 399.889270][T10904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.899921][T10904] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 400.041439][T10917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.098133][T10936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.198323][T10936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.245593][ T65] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.256947][ T65] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.270870][ T65] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.280306][ T65] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.396128][T10917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.440261][ T65] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.469247][ T65] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.488888][ T65] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.520179][ T65] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.576793][T10917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.627764][T10950] syzkaller1: entered promiscuous mode [ 400.647415][T10904] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 400.664870][T10904] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 400.731047][T10904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 400.756078][T10904] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 400.801558][ T3708] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.858101][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.898788][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.966175][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.423592][T10988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1221'. [ 401.705953][T11001] netlink: zone id is out of range [ 401.717092][T11001] netlink: zone id is out of range [ 401.734259][T11001] netlink: zone id is out of range [ 401.747995][T11001] netlink: zone id is out of range [ 401.765386][T11001] netlink: zone id is out of range [ 401.771223][T10997] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1222'. [ 401.788374][T11001] netlink: zone id is out of range [ 401.804732][T11001] netlink: zone id is out of range [ 401.821383][T11001] netlink: zone id is out of range [ 401.834331][T11001] netlink: zone id is out of range [ 401.848327][T11001] netlink: zone id is out of range [ 402.129857][T11007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1224'. [ 403.005129][T11039] tipc: Enabling not permitted [ 403.019459][T11039] tipc: Enabling of bearer rejected, failed to enable media [ 403.105502][T11046] bond0: (slave rose0): Enslaving as an active interface with an up link [ 403.221689][T11051] netlink: 'syz.3.1242': attribute type 6 has an invalid length. [ 403.230167][T11051] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1242'. [ 403.416276][T11056] syzkaller0: entered promiscuous mode [ 403.431643][T11056] syzkaller0: entered allmulticast mode [ 404.208692][T11088] delete_channel: no stack [ 404.391368][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 404.529658][T11096] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1250'. [ 404.715567][T11104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1251'. [ 404.850880][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'. [ 405.387825][T11076] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 405.389090][T11077] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 405.403804][T11077] syzkaller1: linktype set to 768 [ 405.716894][T11135] netlink: 'syz.4.1259': attribute type 10 has an invalid length. [ 405.883238][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 405.903431][T11135] team0: Device veth1_macvtap failed to register rx_handler [ 405.958142][T11145] netlink: 'syz.3.1260': attribute type 39 has an invalid length. [ 406.771164][T11161] netlink: 'syz.4.1264': attribute type 8 has an invalid length. [ 406.835671][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1263'. [ 406.928950][T11162] batadv0: entered promiscuous mode [ 406.935942][T11162] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 406.957027][T11162] batadv0: left promiscuous mode [ 407.574712][T11188] dummy0: left allmulticast mode [ 407.583466][T11188] bridge0: port 3(dummy0) entered disabled state [ 407.605047][T11188] bridge_slave_0: left allmulticast mode [ 407.613580][T11188] bridge_slave_0: left promiscuous mode [ 407.635155][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.671329][T11188] bridge_slave_1: left allmulticast mode [ 407.677496][T11188] bridge_slave_1: left promiscuous mode [ 407.683737][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.697597][T11188] bond0: (slave bond_slave_0): Releasing backup interface [ 407.710684][T11188] bond0: (slave bond_slave_1): Releasing backup interface [ 407.763018][T11188] team0: Port device team_slave_0 removed [ 407.811484][T11188] team0: Port device team_slave_1 removed [ 407.818371][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.848822][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.876575][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.896383][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.922641][T11188] net_ratelimit: 46 callbacks suppressed [ 407.922664][T11188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.132811][T11191] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 408.480823][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 408.490700][T11227] openvswitch: netlink: Invalid VLAN frame [ 408.605547][T11234] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1279'. [ 408.630370][T11233] tipc: Enabled bearer , priority 0 [ 408.654908][T11233] syzkaller0: entered promiscuous mode [ 408.661447][T11233] syzkaller0: entered allmulticast mode [ 408.679307][T11237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1279'. [ 408.753762][T11233] tipc: Resetting bearer [ 408.813941][T11244] bridge0: port 1(macvtap1) entered blocking state [ 408.845055][T11244] bridge0: port 1(macvtap1) entered disabled state [ 408.854825][T11244] macvtap1: entered allmulticast mode [ 408.861037][T11244] bridge0: entered allmulticast mode [ 408.892676][T11244] macvtap1: left allmulticast mode [ 408.900640][T11244] bridge0: left allmulticast mode [ 408.932819][T11232] tipc: Resetting bearer [ 408.986763][T11258] netlink: 'syz.5.1280': attribute type 5 has an invalid length. [ 408.995581][T11232] tipc: Disabling bearer [ 409.323276][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 409.624013][T11293] netlink: 'syz.3.1295': attribute type 13 has an invalid length. [ 409.638770][T11293] netlink: 'syz.3.1295': attribute type 17 has an invalid length. [ 409.722917][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 409.770719][T11307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1295'. [ 410.755487][T11339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.861084][T11339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.902232][T11340] ip_vti0: entered promiscuous mode [ 410.910159][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 411.003917][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'. [ 411.077824][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 411.220255][T11358] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1311'. [ 411.695654][T11379] netlink: 'syz.4.1318': attribute type 13 has an invalid length. [ 412.496524][ T3556] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.507592][ T3556] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.520283][ T3556] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.529618][T11410] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1324'. [ 412.538984][ T3556] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.548095][T11410] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1324'. [ 412.559402][T11410] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1324'. [ 412.647571][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 412.658281][T11414] bond0: Device is already in use. [ 414.109703][T11501] netlink: 'syz.3.1356': attribute type 2 has an invalid length. [ 414.149633][T11503] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 414.205620][T11503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.212794][T11508] sctp: [Deprecated]: syz.5.1358 (pid 11508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.212794][T11508] Use struct sctp_sack_info instead [ 414.262860][T11507] bond4: (slave ip6erspan0): making interface the new active one [ 414.287874][T11507] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 414.438122][T11510] netlink: 'syz.2.1359': attribute type 13 has an invalid length. [ 414.465362][T11510] netlink: 'syz.2.1359': attribute type 17 has an invalid length. [ 415.375972][T11533] netlink: 'syz.2.1365': attribute type 1 has an invalid length. [ 415.535838][T11533] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.564884][T11544] openvswitch: netlink: IPv4 tun info is not correct [ 415.663595][T11538] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.678305][T11538] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 415.693701][T11538] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 415.839981][T11542] veth9: entered promiscuous mode [ 415.871423][T11542] bond5: (slave veth9): Enslaving as an active interface with a down link [ 416.276979][T11566] wg1 speed is unknown, defaulting to 1000 [ 416.333915][T11566] wg1 speed is unknown, defaulting to 1000 [ 416.372347][T11566] wg1 speed is unknown, defaulting to 1000 [ 416.497004][T11566] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 416.546774][T11569] wg1 speed is unknown, defaulting to 1000 [ 416.740876][T11566] wg1 speed is unknown, defaulting to 1000 [ 416.761199][T11566] wg1 speed is unknown, defaulting to 1000 [ 416.780368][T11566] wg1 speed is unknown, defaulting to 1000 [ 416.958389][T11574] netlink: 'syz.2.1376': attribute type 3 has an invalid length. [ 416.976672][T11574] __nla_validate_parse: 13 callbacks suppressed [ 416.976694][T11574] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1376'. [ 416.996149][T11566] wg1 speed is unknown, defaulting to 1000 [ 417.043551][T11566] wg1 speed is unknown, defaulting to 1000 [ 417.071199][T11566] wg1 speed is unknown, defaulting to 1000 [ 417.240348][T11579] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1377'. [ 417.300014][T11579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1377'. [ 417.573121][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'. [ 418.072120][T11603] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1384'. [ 418.100719][T11601] syzkaller0: entered promiscuous mode [ 418.128130][T11601] syzkaller0: entered allmulticast mode [ 418.492305][T11609] wg1 speed is unknown, defaulting to 1000 [ 418.539229][T11616] openvswitch: netlink: IPv4 tunnel dst address is zero [ 418.847863][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 419.106827][T11628] wg1 speed is unknown, defaulting to 1000 [ 420.130597][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 420.222218][T11649] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 420.269429][T11654] syzkaller0: entered promiscuous mode [ 420.289289][T11654] syzkaller0: entered allmulticast mode [ 420.513893][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 421.089976][T11677] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1404'. [ 421.678697][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 421.983612][T11663] team_slave_0: left promiscuous mode [ 422.001759][T11663] team0 (unregistering): Port device team_slave_0 removed [ 422.023902][T11663] team_slave_1: left promiscuous mode [ 422.042090][T11663] team0 (unregistering): Port device team_slave_1 removed [ 422.077334][T11664] dummy0: Device is already in use. [ 422.101978][T11679] batadv_slave_0: entered promiscuous mode [ 422.111729][T11679] batadv_slave_0: entered allmulticast mode [ 422.213303][T11684] netlink: 'syz.5.1407': attribute type 6 has an invalid length. [ 422.458144][T11697] netlink: 'syz.3.1411': attribute type 21 has an invalid length. [ 422.477498][T11695] wg1 speed is unknown, defaulting to 1000 [ 422.487725][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 422.651107][T11699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1410'. [ 422.680973][T11699] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1410'. [ 422.703932][T11708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1411'. [ 423.303466][T11726] can: request_module (can-proto-3) failed. [ 423.564315][T11741] tipc: Enabled bearer , priority 0 [ 423.602684][T11741] syzkaller0: entered promiscuous mode [ 423.608238][T11741] syzkaller0: entered allmulticast mode [ 423.690595][T11749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1424'. [ 423.710145][T11741] tipc: Resetting bearer [ 423.743862][T11740] tipc: Resetting bearer [ 423.761037][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 423.783377][T11740] tipc: Disabling bearer [ 423.827222][T11753] wg1 speed is unknown, defaulting to 1000 [ 424.264184][T11760] team0: Failed to send options change via netlink (err -105) [ 424.289169][T11760] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 424.327479][T11760] team0: Port device netdevsim0 removed [ 424.455032][T11786] netlink: 'syz.3.1433': attribute type 4 has an invalid length. [ 424.545394][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 424.720016][T11789] hsr_slave_1 (unregistering): left promiscuous mode [ 424.748917][T11793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1435'. [ 424.893063][T11806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1439'. [ 425.161486][T11818] openvswitch: netlink: IP tunnel TTL not specified. [ 425.175762][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 425.209746][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.234412][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.253291][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.272413][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.383261][T11823] delete_channel: no stack [ 425.401465][T11823] delete_channel: no stack [ 425.545027][T11829] wg1 speed is unknown, defaulting to 1000 [ 426.340881][T11855] wg1 speed is unknown, defaulting to 1000 [ 426.412065][T11854] wg1 speed is unknown, defaulting to 1000 [ 426.506759][T11870] batadv0: mtu less than device minimum [ 426.716393][T11875] bond0: left allmulticast mode [ 426.721515][T11875] bond_slave_0: left allmulticast mode [ 426.727031][T11875] bond_slave_1: left allmulticast mode [ 426.739308][T11875] bridge0: port 3(bond0) entered disabled state [ 426.756095][T11875] bridge_slave_1: left allmulticast mode [ 426.763250][T11875] bridge_slave_1: left promiscuous mode [ 426.770431][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.783864][T11875] bridge_slave_0: left allmulticast mode [ 426.790874][T11875] bridge_slave_0: left promiscuous mode [ 426.796848][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.158803][T11878] syz_tun: entered allmulticast mode [ 427.190496][T11880] netlink: 'syz.1.1458': attribute type 2 has an invalid length. [ 427.304118][T11878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.334081][T11878] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.345417][T11878] dummy0: left promiscuous mode [ 427.368985][T11878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.420676][T11885] veth0: entered promiscuous mode [ 427.426194][T11877] syz_tun: left allmulticast mode [ 427.619012][T11898] tipc: Started in network mode [ 427.629717][T11898] tipc: Node identity , cluster identity 4711 [ 427.635889][T11898] tipc: Failed to obtain node identity [ 427.653865][T11898] tipc: Enabling of bearer rejected, failed to enable media [ 427.764707][T11902] syzkaller0: entered promiscuous mode [ 427.771180][T11902] syzkaller0: entered allmulticast mode [ 427.892991][T11909] __nla_validate_parse: 8 callbacks suppressed [ 427.893006][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 429.162746][T11909] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 429.168984][T11884] veth0: left promiscuous mode [ 429.323105][T11923] netlink: 'syz.2.1470': attribute type 1 has an invalid length. [ 429.332445][T11922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.378756][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 429.413243][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1472'. [ 429.467663][T11923] 8021q: adding VLAN 0 to HW filter on device bond6 [ 429.520568][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1474'. [ 429.557640][T11943] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1475'. [ 429.568078][T11927] 8021q: adding VLAN 0 to HW filter on device bond6 [ 429.609223][T11927] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 429.621087][T11927] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 430.269406][T11979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1482'. [ 430.312893][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1484'. [ 430.334209][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1484'. [ 430.469514][T11989] x_tables: duplicate underflow at hook 2 [ 430.592804][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 430.602195][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1490'. [ 430.756004][T12006] vlan2: entered allmulticast mode [ 430.761741][T12006] veth1: entered allmulticast mode [ 430.953945][T12013] netlink: 'syz.1.1495': attribute type 30 has an invalid length. [ 430.974238][T12017] netlink: 'syz.2.1496': attribute type 8 has an invalid length. [ 431.011297][T12013] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 431.024643][T12013] bond5 (unregistering): Released all slaves [ 431.691205][T12059] tipc: Started in network mode [ 431.696237][T12059] tipc: Node identity 2277059f05f7, cluster identity 4711 [ 431.720143][T12059] tipc: Enabled bearer , priority 0 [ 431.807544][T12061] tipc: Disabling bearer [ 432.035641][T12074] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 433.046117][T12126] wg1 speed is unknown, defaulting to 1000 [ 433.838814][T12171] __nla_validate_parse: 10 callbacks suppressed [ 433.838836][T12171] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1526'. [ 433.900126][T12171] netlink: 'syz.1.1526': attribute type 6 has an invalid length. [ 435.162070][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1540'. [ 435.171975][T12218] netlink: 'syz.3.1540': attribute type 7 has an invalid length. [ 435.180193][T12218] netlink: 'syz.3.1540': attribute type 8 has an invalid length. [ 435.187956][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 435.326066][T12221] netlink: 'syz.5.1541': attribute type 1 has an invalid length. [ 435.576279][T12221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.694108][T12222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.709576][T12222] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 435.753092][T12222] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 435.846746][T12220] macvlan2: entered promiscuous mode [ 435.865974][T12220] macvlan2: entered allmulticast mode [ 435.872479][T12220] bond1: entered promiscuous mode [ 435.878455][T12220] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 435.902654][T12220] bond1: left promiscuous mode [ 435.987600][T12227] ip6gretap1: entered promiscuous mode [ 436.082563][T12236] sctp: [Deprecated]: syz.1.1543 (pid 12236) Use of int in max_burst socket option deprecated. [ 436.082563][T12236] Use struct sctp_assoc_value instead [ 436.293940][T12247] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1546'. [ 436.544916][T12262] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 436.600856][T12261] geneve3: entered promiscuous mode [ 436.950846][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1553'. [ 437.283121][T12283] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 437.411324][T12285] nbd: must specify at least one socket [ 437.418912][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 437.493934][T12292] netlink: 'syz.2.1559': attribute type 13 has an invalid length. [ 438.011853][T12307] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1561'. [ 438.053309][T12307] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1561'. [ 438.613070][T12317] wg1 speed is unknown, defaulting to 1000 [ 438.696148][T12320] gretap0: entered promiscuous mode [ 438.776986][T12320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1564'. [ 438.849878][T12321] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1564'. [ 439.042372][T12326] No such timeout policy "syz1" [ 439.175502][T12324] wg1 speed is unknown, defaulting to 1000 [ 439.184555][T12324] wg1 speed is unknown, defaulting to 1000 [ 439.196516][T12324] wg1 speed is unknown, defaulting to 1000 [ 439.287992][T12324] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 439.373725][T12324] wg1 speed is unknown, defaulting to 1000 [ 439.392440][T12324] wg1 speed is unknown, defaulting to 1000 [ 439.401430][T12324] wg1 speed is unknown, defaulting to 1000 [ 439.435049][T12324] wg1 speed is unknown, defaulting to 1000 [ 439.461766][T12324] wg1 speed is unknown, defaulting to 1000 [ 439.472405][T12324] wg1 speed is unknown, defaulting to 1000 [ 440.189741][T12354] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1575'. [ 440.740709][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1581'. [ 440.864267][T12370] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 440.941455][T12370] bond5 (unregistering): Released all slaves [ 440.993019][T12367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'. [ 441.108816][T12385] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 441.117163][T12385] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 441.232012][T12175] Set syz1 is full, maxelem 65536 reached [ 441.337528][T12391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1587'. [ 441.713315][T12408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1594'. [ 441.927845][T12419] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1595'. [ 441.931197][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 442.165043][T12425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1597'. [ 442.281487][T12433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1600'. [ 442.553069][T12446] wg1 speed is unknown, defaulting to 1000 [ 442.581376][T12446] wg1 speed is unknown, defaulting to 1000 [ 442.679362][T12449] syzkaller0: entered promiscuous mode [ 442.685553][T12449] syzkaller0: entered allmulticast mode [ 442.769736][T12449] tipc: Enabled bearer , priority 0 [ 442.845033][T12449] tipc: Resetting bearer [ 442.868959][T12448] tipc: Resetting bearer [ 442.909667][T12448] tipc: Disabling bearer [ 442.919940][ T6994] IPVS: starting estimator thread 0... [ 443.009525][T12455] IPVS: using max 26 ests per chain, 62400 per kthread [ 443.080594][T12453] "syz.2.1607" (12453) uses obsolete ecb(arc4) skcipher [ 443.191822][T12466] x_tables: duplicate underflow at hook 2 [ 443.219938][T12447] netlink: 'syz.5.1605': attribute type 13 has an invalid length. [ 443.227832][T12447] netlink: 'syz.5.1605': attribute type 17 has an invalid length. [ 444.052592][T12505] netlink: 'syz.2.1618': attribute type 1 has an invalid length. [ 444.180533][T12505] bridge0: port 3(macvtap1) entered blocking state [ 444.207589][T12505] bridge0: port 3(macvtap1) entered disabled state [ 444.249953][T12505] macvtap1: entered allmulticast mode [ 444.255398][T12505] bridge0: entered allmulticast mode [ 444.332155][T12505] macvtap1: left allmulticast mode [ 444.339079][T12505] bridge0: left allmulticast mode [ 444.443484][T12521] __nla_validate_parse: 3 callbacks suppressed [ 444.443506][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 444.757667][T12567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.828320][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1630'. [ 444.875016][T12572] openvswitch: netlink: Missing key (keys=40, expected=80) [ 444.978303][T12587] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 445.006368][T12589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1633'. [ 445.097318][T12589] bridge3: entered allmulticast mode [ 445.145684][T12575] syzkaller1: entered promiscuous mode [ 445.159511][T12575] syzkaller1: entered allmulticast mode [ 445.370173][T12599] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1637'. [ 445.626915][T12599] .70·: renamed from hsr0 [ 445.709883][T12599] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 445.748752][T12599] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.760184][T12599] .70·: entered allmulticast mode [ 445.765386][T12599] hsr_slave_0: entered allmulticast mode [ 445.771326][T12599] hsr_slave_1: entered allmulticast mode [ 445.786586][T12599] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 445.964283][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 446.140597][T12618] syzkaller0: entered promiscuous mode [ 446.146147][T12618] syzkaller0: entered allmulticast mode [ 446.219826][T12622] rdma_rxe: rxe_newlink: failed to add lo [ 446.228166][T12618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.370099][T12629] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 446.377002][T12624] : entered promiscuous mode [ 446.558988][T12637] bond0: (slave sit0): Error: Device type is different from other slaves [ 446.882349][T12654] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 447.035596][T12664] netlink: 'syz.1.1658': attribute type 30 has an invalid length. [ 447.072509][T12667] netlink: 'syz.2.1660': attribute type 10 has an invalid length. [ 447.166201][T12667] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.211957][T12667] team0: entered promiscuous mode [ 447.231190][T12667] team_slave_0: entered promiscuous mode [ 447.245151][T12667] team_slave_1: entered promiscuous mode [ 447.281648][T12667] bond0: (slave team0): Enslaving as an active interface with an up link [ 447.353738][T12674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1662'. [ 447.457556][T12676] atomic_op ffff888052b4a998 conn xmit_atomic 0000000000000000 [ 447.723492][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 447.733698][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 447.797476][T12692] gretap5: entered promiscuous mode [ 447.810085][T12692] batman_adv: batadv0: Adding interface: gretap5 [ 447.827901][T12692] batman_adv: batadv0: The MTU of interface gretap5 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.885598][T12692] batman_adv: batadv0: Not using interface gretap5 (retrying later): interface not active [ 447.901765][T12694] batman_adv: batadv0: Adding interface: dummy0 [ 447.910001][T12694] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.954609][T12694] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 448.144438][T12701] veth1_macvtap: left promiscuous mode [ 448.159425][T12701] macsec0: entered promiscuous mode [ 448.312521][T12713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1681'. [ 448.322336][T12713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1681'. [ 449.282758][T12769] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 449.556685][T12783] ip6gre0: entered promiscuous mode [ 449.612138][T12783] team0: Port device ip6gre0 added [ 449.684058][T12792] __nla_validate_parse: 5 callbacks suppressed [ 449.684079][T12792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1710'. [ 449.831641][T12796] wg1: entered promiscuous mode [ 449.840321][T12796] wg1: entered allmulticast mode [ 450.062481][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'. [ 450.118141][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1720'. [ 450.275978][T12822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1724'. [ 450.646121][T12840] netlink: 352 bytes leftover after parsing attributes in process `syz.2.1731'. [ 450.805504][T12853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.950702][T12860] tipc: Enabled bearer , priority 10 [ 451.172497][T12866] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 451.305480][T12881] wg1 speed is unknown, defaulting to 1000 [ 451.314331][T12881] wg1 speed is unknown, defaulting to 1000 [ 451.396772][T12884] bond10: option tlb_dynamic_lb: invalid value (5) [ 451.421667][T12884] bond10 (unregistering): Released all slaves [ 451.611696][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1746'. [ 451.828128][T12900] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1749'. [ 451.841713][T12900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.942872][T12905] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 452.119278][T12909] netlink: 'syz.2.1751': attribute type 10 has an invalid length. [ 452.179451][T12909] bond0: (slave team0): Releasing backup interface [ 452.196331][T12909] team0: left promiscuous mode [ 452.201761][T12909] team_slave_0: left promiscuous mode [ 452.214236][T12917] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 452.223964][T12909] team_slave_1: left promiscuous mode [ 452.231560][T12909] team0: Cannot enslave team device to itself [ 452.238149][ T7006] tipc: Node number set to 3490130013 [ 452.321004][T12917] bond5: entered promiscuous mode [ 452.327862][T12917] 8021q: adding VLAN 0 to HW filter on device bond5 [ 452.396610][T12923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1754'. [ 452.523163][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1755'. [ 452.556069][T12932] batadv0: entered promiscuous mode [ 452.566710][T12932] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 452.776304][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1760'. [ 453.179520][T12954] ip6tnl2: entered promiscuous mode [ 453.196322][T12954] ip6tnl2: entered allmulticast mode [ 453.309340][T12961] tipc: Enabling of bearer rejected, failed to enable media [ 453.723445][T12982] syzkaller0: entered promiscuous mode [ 453.738665][T12982] syzkaller0: entered allmulticast mode [ 454.252704][T12999] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 454.498380][T13031] sctp: [Deprecated]: syz.5.1784 (pid 13031) Use of int in max_burst socket option deprecated. [ 454.498380][T13031] Use struct sctp_assoc_value instead [ 454.971809][T13045] netlink: 'syz.5.1786': attribute type 4 has an invalid length. [ 455.871019][T13012] wg1 speed is unknown, defaulting to 1000 [ 455.891149][T13012] wg1 speed is unknown, defaulting to 1000 [ 456.153795][T13050] __nla_validate_parse: 4 callbacks suppressed [ 456.153827][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1788'. [ 456.228722][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 456.557975][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1796'. [ 456.726399][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 456.993586][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'. [ 457.140601][T13097] bond0: (slave bond_slave_1): Releasing backup interface [ 457.150770][T13097] bond_slave_1 (unregistering): left promiscuous mode [ 457.260719][T13112] netlink: 'syz.4.1809': attribute type 11 has an invalid length. [ 457.283323][T13113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1808'. [ 457.417706][T13118] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 457.449963][T13119] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 457.523805][T13120] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1812'. [ 457.653653][T13122] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 457.779656][T13127] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1814'. [ 457.788930][T13127] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1814'. [ 458.326013][T13146] netlink: 'syz.1.1821': attribute type 10 has an invalid length. [ 458.346786][T13146] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1821'. [ 458.396416][T13153] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20003 [ 458.854091][T13176] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1823'. [ 459.179780][T13179] batadv0: mtu less than device minimum [ 459.555309][T13196] tipc: Enabling of bearer rejected, failed to enable media [ 460.037698][T13210] wg1 speed is unknown, defaulting to 1000 [ 460.056062][T13210] wg1 speed is unknown, defaulting to 1000 [ 460.866683][T13243] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 460.969265][T13244] 8021q: VLANs not supported on xfrm0 [ 461.292093][T13253] __nla_validate_parse: 4 callbacks suppressed [ 461.292114][T13253] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1847'. [ 461.468391][T13258] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1848'. [ 461.479934][T13258] netlink: 'syz.1.1848': attribute type 29 has an invalid length. [ 461.541658][T13260] netlink: 'syz.1.1848': attribute type 29 has an invalid length. [ 462.043558][T13286] netlink: 'syz.4.1856': attribute type 21 has an invalid length. [ 462.069615][T13286] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1856'. [ 462.088141][T13286] xt_TCPMSS: Only works on TCP SYN packets [ 462.388226][T13296] wg1 speed is unknown, defaulting to 1000 [ 462.432892][T13296] wg1 speed is unknown, defaulting to 1000 [ 462.439249][T13292] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1859'. [ 462.454725][T13292] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1859'. [ 462.490247][T13304] xt_limit: Overflow, try lower: 271964/0 [ 462.521474][T13304] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1864'. [ 463.039867][T13325] vlan3: entered allmulticast mode [ 463.169093][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'. [ 463.230012][T13329] tipc: Enabled bearer , priority 0 [ 463.238351][T13329] syzkaller0: entered promiscuous mode [ 463.245070][T13329] syzkaller0: entered allmulticast mode [ 463.277286][T13310] lec:lec_atm_close: lec0: Shut down! [ 463.287308][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1875'. [ 463.446059][T13345] tipc: Resetting bearer [ 463.480096][T13344] wg1 speed is unknown, defaulting to 1000 [ 463.487965][T13344] wg1 speed is unknown, defaulting to 1000 [ 463.509270][T13328] tipc: Resetting bearer [ 463.565226][T13328] tipc: Disabling bearer [ 463.832007][T13365] netlink: 'syz.5.1877': attribute type 12 has an invalid length. [ 464.512308][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1886'. [ 464.521714][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 464.646957][ T1135] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.658655][ T1135] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.682171][ T1135] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.716348][ T1135] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.809990][T13404] syzkaller1: entered promiscuous mode [ 464.816197][T13404] syzkaller1: entered allmulticast mode [ 464.859080][T13404] wg1 speed is unknown, defaulting to 1000 [ 464.894975][T13404] wg1 speed is unknown, defaulting to 1000 [ 465.222627][T13410] wg1 speed is unknown, defaulting to 1000 [ 465.358439][T13410] wg1 speed is unknown, defaulting to 1000 [ 465.637176][T13435] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 466.281731][T13444] netlink: 'syz.3.1899': attribute type 11 has an invalid length. [ 466.309141][T13444] __nla_validate_parse: 2 callbacks suppressed [ 466.309160][T13444] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1899'. [ 466.862478][T13471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1906'. [ 467.094487][ T30] audit: type=1800 audit(1766414966.551:3): pid=13484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1910" name="memory.events" dev="tmpfs" ino=2070 res=0 errno=0 [ 467.116467][T13484] pimreg: tun_chr_ioctl cmd 1074025680 [ 467.148255][T13484] pimreg: tun_chr_ioctl cmd 1074025676 [ 467.176226][ T30] audit: type=1804 audit(1766414966.561:4): pid=13484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1910" name="/newroot/400/memory.events" dev="tmpfs" ino=2070 res=1 errno=0 [ 467.212508][T13493] IPv6: Can't replace route, no match found [ 467.277581][T13495] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1913'. [ 467.769895][T13500] wg1 speed is unknown, defaulting to 1000 [ 467.799910][T13489] wg1 speed is unknown, defaulting to 1000 [ 467.807799][T13500] wg1 speed is unknown, defaulting to 1000 [ 467.826103][T13489] wg1 speed is unknown, defaulting to 1000 [ 468.094315][T13526] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1920'. [ 468.103674][T13526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1920'. [ 468.141473][T13520] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 468.164662][T13526] ip6gretap1: entered allmulticast mode [ 468.349199][T13530] wg1 speed is unknown, defaulting to 1000 [ 468.360879][T13530] wg1 speed is unknown, defaulting to 1000 [ 468.451299][T13540] netlink: 'syz.2.1924': attribute type 10 has an invalid length. [ 468.469209][T13540] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 468.492534][T13540] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1924'. [ 469.074640][T13574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1933'. [ 469.087998][T13572] wg1: left promiscuous mode [ 469.092959][T13572] wg1: left allmulticast mode [ 469.142953][T13572] vlan2: left promiscuous mode [ 469.163269][T13572] ip6gretap1: left allmulticast mode [ 469.219409][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1932'. [ 469.270612][T13572] hsr_slave_0: left promiscuous mode [ 469.303622][T13572] hsr_slave_1: left promiscuous mode [ 469.423448][T13591] : entered promiscuous mode [ 469.480582][T13593] netlink: 996 bytes leftover after parsing attributes in process `syz.2.1936'. [ 469.634819][T13597] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 469.857876][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'. [ 470.234784][T13632] syz.1.1952 uses old SIOCAX25GETINFO [ 471.122440][T13681] netlink: 'syz.5.1962': attribute type 16 has an invalid length. [ 471.127721][T13673] syzkaller0: entered promiscuous mode [ 471.202391][T13681] netlink: 'syz.5.1962': attribute type 17 has an invalid length. [ 471.221974][T13673] syzkaller0: entered allmulticast mode [ 471.387990][T13681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.416662][T13681] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.443072][T13681] batman_adv: batadv0: Interface activated: dummy0 [ 471.464012][T13681] batadv0: mtu less than device minimum [ 471.482641][T13681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 471.494970][T13681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 471.506967][T13681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 471.518989][T13681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 471.530987][T13681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 471.543022][T13681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 471.555059][T13681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 471.567051][T13681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 471.579118][T13681] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.842694][T13726] __nla_validate_parse: 5 callbacks suppressed [ 472.842717][T13726] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1975'. [ 473.913420][T13739] netlink: 'syz.2.1978': attribute type 12 has an invalid length. [ 473.952298][T13739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1978'. [ 474.000743][T13739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1978'. [ 474.036127][T13739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1978'. [ 474.147919][T13739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1978'. [ 474.269541][T13752] netlink: 'syz.1.1976': attribute type 11 has an invalid length. [ 474.284429][T13752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1976'. [ 474.473079][T13755] macsec1: entered allmulticast mode [ 474.498728][T13755] macsec0: entered allmulticast mode [ 474.633985][T13763] syzkaller0: entered promiscuous mode [ 474.659725][T13763] syzkaller0: entered allmulticast mode [ 474.706091][T13763] tipc: Enabled bearer , priority 0 [ 474.743888][T13765] tipc: Enabled bearer , priority 0 [ 474.778930][T13762] tipc: Resetting bearer [ 474.837322][T13762] tipc: Disabling bearer [ 474.963277][T13764] tipc: Disabling bearer [ 475.749674][T13905] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2000'. [ 476.445323][T13931] netlink: 'syz.1.2007': attribute type 11 has an invalid length. [ 476.529942][T13936] netlink: 'syz.4.2008': attribute type 1 has an invalid length. [ 476.537781][T13936] net_ratelimit: 12 callbacks suppressed [ 476.537797][T13936] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 476.999563][T13953] syzkaller0: entered promiscuous mode [ 477.005231][T13953] syzkaller0: entered allmulticast mode [ 477.014951][T13965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2017'. [ 477.880681][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2022'. [ 478.115182][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2024'. [ 478.953237][T13982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.089237][T14005] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2026'. [ 479.186934][T14008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2028'. [ 479.258343][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2030'. [ 479.365909][T14019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2030'. [ 479.617445][T14033] netlink: 'syz.5.2032': attribute type 9 has an invalid length. [ 479.626970][T14033] netlink: 'syz.5.2032': attribute type 6 has an invalid length. [ 479.865233][T14055] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2039'. [ 479.883657][T14055] ipvlan2: entered promiscuous mode [ 480.000912][T14064] netlink: 'syz.1.2042': attribute type 4 has an invalid length. [ 480.040566][T14068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2040'. [ 480.064748][T14064] netlink: 'syz.1.2042': attribute type 4 has an invalid length. [ 480.073910][T14068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2040'. [ 480.094404][T14068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2040'. [ 481.670624][T14064] erspan0: left allmulticast mode [ 481.778445][T12536] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.801362][T12536] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.953885][T12536] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.998548][T12536] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.048997][T12536] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.057948][T12536] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.149831][T12536] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.199062][T12536] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.404422][T14131] x_tables: duplicate underflow at hook 1 [ 483.155654][T14163] bond1: entered allmulticast mode [ 483.171333][T14163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.204512][T14169] __nla_validate_parse: 3 callbacks suppressed [ 483.204532][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2062'. [ 483.277644][T14169] macvlan2: entered promiscuous mode [ 483.295374][T14169] macvlan2: entered allmulticast mode [ 483.305969][T14169] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 483.652393][T14192] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001 [ 484.113153][T14225] syzkaller0: entered promiscuous mode [ 484.123839][T14225] syzkaller0: entered allmulticast mode [ 484.225338][T14225] tipc: Enabled bearer , priority 0 [ 484.277901][T14223] tipc: Resetting bearer [ 484.378846][T14223] tipc: Disabling bearer [ 484.456545][T14227] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2072'. [ 484.638106][T14242] wg1 speed is unknown, defaulting to 1000 [ 484.668256][T14242] wg1 speed is unknown, defaulting to 1000 [ 484.675572][T14239] wg1 speed is unknown, defaulting to 1000 [ 484.775501][T14239] wg1 speed is unknown, defaulting to 1000 [ 485.626802][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 486.468954][T14300] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2090'. [ 486.636251][T14306] tipc: Enabling of bearer rejected, failed to enable media [ 486.648047][T14306] tipc: Enabled bearer , priority 25 [ 487.413196][T14344] delete_channel: no stack [ 487.802523][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2105'. [ 487.811967][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'. [ 487.841467][T14366] netlink: 'syz.4.2105': attribute type 12 has an invalid length. [ 488.256516][T14378] veth3: entered promiscuous mode [ 488.274620][T14384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2109'. [ 488.322605][T14385] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2111'. [ 488.348433][T14379] wg1 speed is unknown, defaulting to 1000 [ 488.356384][T14379] wg1 speed is unknown, defaulting to 1000 [ 488.651379][T14400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2114'. [ 488.704066][T14404] sock: sock_timestamping_bind_phc: sock not bind to device [ 488.732461][T14405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2116'. [ 489.002059][T14400] veth5: entered promiscuous mode [ 489.127153][T12538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.157278][T12538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.268080][T13743] udevd[13743]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 489.324698][T13743] udevd[13743]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 489.659987][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 489.683980][T14445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 489.782971][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 489.792403][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 489.814439][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 489.834972][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 490.262153][T14473] netlink: 'syz.1.2129': attribute type 3 has an invalid length. [ 490.489356][T14489] netlink: 'syz.2.2135': attribute type 9 has an invalid length. [ 490.526461][T14489] netlink: 'syz.2.2135': attribute type 11 has an invalid length. [ 490.558607][T14489] netlink: 'syz.2.2135': attribute type 12 has an invalid length. [ 490.659507][T14493] netlink: 'syz.4.2136': attribute type 1 has an invalid length. [ 490.747764][T14493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 490.869619][T14497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 490.876930][T14497] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 490.880418][T14505] x_tables: duplicate underflow at hook 1 [ 490.930908][T14497] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 490.991980][T14493] macvlan2: entered promiscuous mode [ 490.997416][T14493] macvlan2: entered allmulticast mode [ 491.021416][T14493] bond2: entered promiscuous mode [ 491.031518][T14493] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 491.055145][T14493] bond2: left promiscuous mode [ 492.212568][T14572] netlink: 'syz.1.2153': attribute type 1 has an invalid length. [ 492.506185][T14586] syzkaller0: entered promiscuous mode [ 492.512646][T14586] syzkaller0: entered allmulticast mode [ 492.559889][T14582] wg1 speed is unknown, defaulting to 1000 [ 492.604164][T14582] wg1 speed is unknown, defaulting to 1000 [ 493.207635][T14618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.429430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.480186][T14621] wg1 speed is unknown, defaulting to 1000 [ 493.517155][T14636] gretap1: entered promiscuous mode [ 493.523253][T14621] wg1 speed is unknown, defaulting to 1000 [ 493.664471][T14639] __nla_validate_parse: 21 callbacks suppressed [ 493.664493][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'. [ 493.718079][T14639] tipc: Enabled bearer , priority 10 [ 493.727525][T14644] Cannot find add_set index 0 as target [ 493.909226][T14651] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2174'. [ 494.030428][T14659] ip6gretap2: entered allmulticast mode [ 494.478739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.534674][T14683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2180'. [ 494.712055][T14660] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2175'. [ 494.855100][T14685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2181'. [ 494.983401][T14691] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2184'. [ 495.119731][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2188'. [ 495.508651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.740776][T14743] IPVS: rr: FWM 3 0x00000003 - no destination available [ 496.036708][T14726] wg1 speed is unknown, defaulting to 1000 [ 496.061399][T14726] wg1 speed is unknown, defaulting to 1000 [ 496.548964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.575207][T14753] wg1 speed is unknown, defaulting to 1000 [ 496.583320][T14753] wg1 speed is unknown, defaulting to 1000 [ 496.771169][T14761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2201'. [ 497.060962][T14779] netlink: 'syz.4.2206': attribute type 11 has an invalid length. [ 497.189430][ T1941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.198618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.284620][T14788] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2209'. [ 497.588613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.788813][T14799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2211'. [ 497.817428][T14800] bridge_slave_0: left allmulticast mode [ 497.848906][T14800] bridge_slave_0: left promiscuous mode [ 497.865367][T14800] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.901004][T14806] netlink: 'syz.3.2212': attribute type 1 has an invalid length. [ 497.920326][T14800] bond0: (slave bond_slave_0): Releasing backup interface [ 497.939690][T14800] bond_slave_0: left promiscuous mode [ 497.957152][T14800] bond_slave_0: left allmulticast mode [ 497.971999][T14800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.989376][T14800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.027107][T14800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 498.148852][T14804] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 498.160677][T14804] bond3 (unregistering): Released all slaves [ 498.473991][T14822] syzkaller0: entered promiscuous mode [ 498.486158][T14822] syzkaller0: entered allmulticast mode [ 498.530883][T14822] tipc: Enabled bearer , priority 0 [ 498.558954][T14820] tipc: Resetting bearer [ 498.583193][T14820] tipc: Disabling bearer [ 498.628600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.809485][T14837] __nla_validate_parse: 2 callbacks suppressed [ 498.809505][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 498.940463][T14837] macsec2: entered promiscuous mode [ 498.945829][T14837] macsec2: entered allmulticast mode [ 499.066797][T14851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2225'. [ 499.107085][T14851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2225'. [ 499.393477][T14870] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 499.413495][T14872] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2231'. [ 499.485814][T14871] wg1 speed is unknown, defaulting to 1000 [ 499.493834][T14871] wg1 speed is unknown, defaulting to 1000 [ 499.668857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.727693][T14884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2236'. [ 499.910711][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2237'. [ 500.000549][T14897] netlink: 'syz.3.2239': attribute type 8 has an invalid length. [ 500.221528][T14902] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2240'. [ 500.232189][T14902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2240'. [ 500.241301][T14902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2240'. [ 500.359126][T14906] sctp: [Deprecated]: syz.3.2240 (pid 14906) Use of int in maxseg socket option. [ 500.359126][T14906] Use struct sctp_assoc_value instead [ 500.395268][T14903] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2240'. [ 500.708708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.817114][T14932] netlink: 'syz.5.2248': attribute type 5 has an invalid length. [ 500.846325][T14932] syzkaller1: entered allmulticast mode [ 500.972026][T14938] wg1 speed is unknown, defaulting to 1000 [ 501.025978][T14938] wg1 speed is unknown, defaulting to 1000 [ 501.081399][T14946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.090417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.114686][T14944] erspan0: entered promiscuous mode [ 501.299267][T14954] syzkaller1: entered promiscuous mode [ 501.304818][T14954] syzkaller1: entered allmulticast mode [ 501.356544][T14966] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 501.622674][T14983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.655477][T14983] tipc: Trying to set illegal importance in message [ 501.737787][T14983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.758606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.201878][T14999] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 502.308912][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.476422][T15010] bond0: (slave dummy0): Releasing backup interface [ 502.491848][T15010] dummy0: left promiscuous mode [ 502.498181][T15010] bridge_slave_0: left promiscuous mode [ 502.505141][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.526224][T15010] bridge_slave_1: left allmulticast mode [ 502.549282][T15010] bridge_slave_1: left promiscuous mode [ 502.574678][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.629404][T15010] bond0: (slave bond_slave_0): Releasing backup interface [ 502.651704][T15010] bond_slave_0: left promiscuous mode [ 502.681568][T15010] team0: Port device team_slave_0 removed [ 502.711757][T15010] team0: Port device team_slave_1 removed [ 502.718029][T15010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.771412][T15010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.068396][T15045] netlink: 'syz.2.2278': attribute type 6 has an invalid length. [ 503.076507][T15045] netlink: 'syz.2.2278': attribute type 5 has an invalid length. [ 503.090711][T15045] netlink: 'syz.2.2278': attribute type 4 has an invalid length. [ 503.099777][T15045] netlink: 'syz.2.2278': attribute type 4 has an invalid length. [ 503.114623][T15045] x_tables: duplicate underflow at hook 1 [ 503.574862][T15062] vetè0_virt_wif: renamed from lo (while UP) [ 503.733548][T15076] wg1 speed is unknown, defaulting to 1000 [ 503.740814][T15076] wg1 speed is unknown, defaulting to 1000 [ 503.937011][T15085] tipc: Enabled bearer , priority 0 [ 504.079063][T15088] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 504.145093][T15102] tipc: Resetting bearer [ 504.178875][T15085] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 504.186351][T15085] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 504.227387][T15085] tipc: Resetting bearer [ 504.250370][T15105] __nla_validate_parse: 15 callbacks suppressed [ 504.250392][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2289'. [ 504.882382][T15101] macsec0: left allmulticast mode [ 505.020439][T15112] netlink: 'syz.2.2295': attribute type 10 has an invalid length. [ 505.049019][T15112] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 505.057048][T15112] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 505.107815][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 505.599884][T15145] Cannot find add_set index 1 as target [ 505.662785][T12547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.677620][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2301'. [ 505.697279][T12547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.013078][T15170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2310'. [ 506.051015][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2310'. [ 506.068352][T15170] tipc: Enabling of bearer rejected, failed to enable media [ 506.172495][T15173] wg1 speed is unknown, defaulting to 1000 [ 506.182671][T15173] wg1 speed is unknown, defaulting to 1000 [ 506.566752][T15191] tipc: Enabling of bearer rejected, already enabled [ 506.977189][T15215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2322'. [ 507.065615][T15216] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2321'. [ 507.236199][T15228] wg1 speed is unknown, defaulting to 1000 [ 507.259838][T15228] wg1 speed is unknown, defaulting to 1000 [ 507.964565][T15267] netlink: 'syz.2.2333': attribute type 4 has an invalid length. [ 508.257467][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 508.368422][T15287] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.2337'. [ 508.602780][T15292] team0: Port device ip6gre0 removed [ 508.613097][T15292] net_ratelimit: 7 callbacks suppressed [ 508.613117][T15292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 508.651530][T14081] skbuff: skb_under_panic: text:ffffffff8a27e548 len:116 put:40 head:ffff888058d97000 data:ffff888058d96fe8 tail:0x5c end:0x6c0 dev:team0 [ 508.685073][T14081] ------------[ cut here ]------------ [ 508.691004][T14081] kernel BUG at net/core/skbuff.c:213! [ 508.710105][T14081] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 508.716440][T14081] CPU: 0 UID: 0 PID: 14081 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 508.725961][T14081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 508.736052][T14081] Workqueue: mld mld_ifc_work [ 508.740802][T14081] RIP: 0010:skb_panic+0x157/0x160 [ 508.745863][T14081] Code: c7 20 98 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 2e 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 508.765576][T14081] RSP: 0018:ffffc90014bbf2c0 EFLAGS: 00010286 [ 508.771677][T14081] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 7d8e10d4fc01b600 [ 508.779675][T14081] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 508.787665][T14081] RBP: 00000000000006c0 R08: ffffc90014bbefc7 R09: 1ffff92002977df8 [ 508.795653][T14081] R10: dffffc0000000000 R11: fffff52002977df9 R12: ffff888058368dd0 [ 508.803642][T14081] R13: ffff888058d97000 R14: ffff888058d96fe8 R15: 000000000000005c [ 508.811631][T14081] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 508.820595][T14081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 508.827225][T14081] CR2: 00007f26467b42f8 CR3: 00000000619a2000 CR4: 00000000003526f0 [ 508.835237][T14081] Call Trace: [ 508.838536][T14081] [ 508.841497][T14081] ? ip6gre_header+0xc8/0x790 [ 508.846204][T14081] ? ip6gre_header+0xc8/0x790 [ 508.850920][T14081] skb_push+0xc3/0xe0 [ 508.854949][T14081] ip6gre_header+0xc8/0x790 [ 508.859521][T14081] ? __pfx_ip6gre_header+0x10/0x10 [ 508.864659][T14081] ? read_seqbegin+0x1ac/0x250 [ 508.869534][T14081] ? __pfx_read_seqbegin+0x10/0x10 [ 508.874748][T14081] ? ___neigh_create+0x1c5f/0x2230 [ 508.879875][T14081] ? __pfx_ip6gre_header+0x10/0x10 [ 508.885015][T14081] neigh_connected_output+0x286/0x460 [ 508.890420][T14081] ip6_finish_output2+0xfb3/0x1480 [ 508.895565][T14081] ? __pfx_ip6_finish_output2+0x10/0x10 [ 508.901226][T14081] ? ip6_mtu+0x7d/0x490 [ 508.905407][T14081] ? ip6_mtu+0x38c/0x490 [ 508.909758][T14081] ? ip6_finish_output+0x2ef/0x4e0 [ 508.914887][T14081] ? ip6_output+0x126/0x550 [ 508.919847][T14081] ip6_output+0x340/0x550 [ 508.924209][T14081] NF_HOOK+0x9e/0x380 [ 508.928224][T14081] ? NF_HOOK+0x101/0x380 [ 508.932523][T14081] ? __pfx_NF_HOOK+0x10/0x10 [ 508.937141][T14081] ? __pfx_dst_output+0x10/0x10 [ 508.942024][T14081] ? icmp6_dst_alloc+0x3a5/0x420 [ 508.946988][T14081] ? icmp6_dst_alloc+0x3a5/0x420 [ 508.951948][T14081] mld_sendpack+0x8d4/0xe60 [ 508.956482][T14081] ? mld_sendpack+0x1e7/0xe60 [ 508.961221][T14081] ? __pfx_mld_sendpack+0x10/0x10 [ 508.966278][T14081] mld_ifc_work+0x83e/0xd60 [ 508.970806][T14081] ? _raw_spin_unlock_irq+0x23/0x50 [ 508.976029][T14081] ? process_scheduled_works+0x9ef/0x1770 [ 508.981768][T14081] process_scheduled_works+0xad1/0x1770 [ 508.987365][T14081] ? __pfx_process_scheduled_works+0x10/0x10 [ 508.993393][T14081] worker_thread+0x8a0/0xda0 [ 508.998028][T14081] ? __kthread_parkme+0x7b/0x200 [ 509.003001][T14081] kthread+0x711/0x8a0 [ 509.007112][T14081] ? __pfx_worker_thread+0x10/0x10 [ 509.012254][T14081] ? __pfx_kthread+0x10/0x10 [ 509.016872][T14081] ? _raw_spin_unlock_irq+0x23/0x50 [ 509.022102][T14081] ? lockdep_hardirqs_on+0x98/0x140 [ 509.027322][T14081] ? __pfx_kthread+0x10/0x10 [ 509.032112][T14081] ret_from_fork+0x599/0xb30 [ 509.036725][T14081] ? __pfx_ret_from_fork+0x10/0x10 [ 509.041857][T14081] ? __switch_to_asm+0x39/0x70 [ 509.046652][T14081] ? __switch_to_asm+0x33/0x70 [ 509.051445][T14081] ? __pfx_kthread+0x10/0x10 [ 509.056069][T14081] ret_from_fork_asm+0x1a/0x30 [ 509.060911][T14081] [ 509.063953][T14081] Modules linked in: [ 509.068428][T14081] ---[ end trace 0000000000000000 ]--- [ 509.109292][T15291] caif:caif_disconnect_client(): nothing to disconnect [ 509.144893][T14081] RIP: 0010:skb_panic+0x157/0x160 [ 509.159407][T15275] lec:lec_atm_close: lec0: Shut down! [ 509.218585][T14081] Code: c7 20 98 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 2e 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 509.248649][T14081] RSP: 0018:ffffc90014bbf2c0 EFLAGS: 00010286 [ 509.254800][T14081] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 7d8e10d4fc01b600 [ 509.273625][T14081] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 509.281855][T14081] RBP: 00000000000006c0 R08: ffffc90014bbefc7 R09: 1ffff92002977df8 [ 509.290020][T14081] R10: dffffc0000000000 R11: fffff52002977df9 R12: ffff888058368dd0 [ 509.298034][T14081] R13: ffff888058d97000 R14: ffff888058d96fe8 R15: 000000000000005c [ 509.306553][T14081] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 509.315643][T14081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.322364][T14081] CR2: 0000001b31622ff8 CR3: 0000000065d72000 CR4: 00000000003526f0 [ 509.332364][T14081] Kernel panic - not syncing: Fatal exception [ 509.339020][T14081] Kernel Offset: disabled [ 509.343358][T14081] Rebooting in 86400 seconds..