last executing test programs: 1m1.84544874s ago: executing program 1 (id=1185): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @empty, 0x3}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80020080}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x150, 0x1403, 0x4, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000080}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELSET={0x84, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}]}]}, @NFT_MSG_DELOBJ={0x178, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xfb, 0x8, "0296bcc4700a6498534c8583455ae9dc708a74084bea5516acce21b67f1fb0abb8b8ca6f5783e03fce25facb8db9b5cf27b422c5d6be5b8a64d7fcb4200c6a5ccdddb5ffd3b8b4cea2d5e5e857dc1571e78300939ba4a434d6053b163a0649b87141334ebb8a97939029dbf48e74edc05570f4daec27775c91f188d565450f60f2ac56bffac5fd1b2e0641cc3e91e5f13f66dfb97f4bb8f948c081c40462019f9119320f3b49e1c63481855ab5b8e26ca331e522e1e8df81d00535b675e0ac1783bf5fcc8cd1e57416442d6530b70677266658b88db603253d8228a3e633f6461889d89031be2c152f00f180e035aa862399549109c039"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x7d, 0x6, "b494ea92f9a49b52b87166eda1afce77ea94896bdcf86c1e46c571a0a6862cb97c3aba16b96d2e9d4ca4a1e6c029024e05b48d353f3c31ed636b4634d6bc9abbdfc2602c043e282cab5e5245a4736aa4e2bea39371f701b5830f94a38285542380267c017f7fb41c2c62c60585b6d03f05a76976ea1594bf3b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xa0, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x347d}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x454}, 0x1, 0x0, 0x0, 0x810}, 0x4000810) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85ff970c2d2f86dd1835e83dcd7105227dad63d67dfbeb9f39fc145a147f3958c985e6f1e330389c6546a8d9547652e5", 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m1.770910588s ago: executing program 1 (id=1186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0xe0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000640)={0x8, 0x6, {0x5, @struct={0xad, 0xc8a6}, 0x0, 0x7fffffffffffffff, 0xef4, 0xe06, 0x10001, 0x67435841, 0x4, @struct={0x1, 0xa6}, 0xfffffffa, 0x0, [0x0, 0x2, 0x7, 0xa, 0x4, 0x1]}, {0x5, @struct={0xfffff000, 0x7fffffff}, 0x0, 0xed, 0x0, 0x5, 0x5, 0x5, 0x92, @struct={0x10000, 0x8ef}, 0x1ff, 0x5, [0x9, 0x8000000000000000, 0x7, 0x38, 0x2, 0x8]}, {0xfffffffffffff800, @usage=0xfffffffffffff7e2, 0x0, 0x8, 0x8, 0x10000, 0x6, 0x3, 0x445, @usage=0xa, 0x9, 0x4, [0x81, 0x4, 0xffc, 0x0, 0x400, 0xf]}, {0x80000001, 0xf335b98, 0x1}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000a40)={0x2, 0x3, @start={r4, 0x1, "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", "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"}, [0xfcf, 0x7c9, 0x5, 0xff, 0xb, 0x7, 0x9, 0x6, 0x3, 0x9, 0x42c5, 0x9, 0x8, 0xffffffff, 0xffffffffffffffa6, 0x8, 0x81, 0x3, 0x8, 0x4, 0x0, 0x40, 0x7, 0x5887, 0x401, 0x1, 0x100000000, 0x4, 0x9, 0xf8d5, 0x9, 0xec, 0x10, 0x2, 0x7f, 0x8, 0x80000001, 0x8000000000000000, 0xc40e, 0x6, 0x5b, 0x8, 0x4, 0x9e63, 0x0, 0x4, 0x4, 0x3e, 0x0, 0x4, 0xf828, 0xfffffffffffffff9, 0xffffffffffff021c, 0x7f, 0x85e, 0x1028e44c, 0x3, 0x1, 0x80000001, 0x7, 0x5, 0x3, 0x4, 0x5]}) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@allocspi={0x1f0, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20}, {@in6=@remote, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, 0x4, 0x10}, 0x2, 0x1a0b1}, [@etimer_thresh={0x8, 0xc, 0xc4}, @offload={0xc}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@mcast2, 0x4e21, 0x1, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3c}, {@in=@private=0xa010100, 0x4d3, 0x6c}, @in=@broadcast, {0x7ff, 0x2, 0xfffffffffffffffb, 0x5ca42eb8, 0x8, 0xd, 0x101, 0x2}, {0x2, 0xdf, 0x6, 0x2}, {0x40000401, 0x2, 0x3}, 0x70bd28, 0x3506, 0x2, 0x1, 0xd1, 0x55}}]}, 0x1f0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4020810) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0xfffffffffffffffc}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000340)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x10000000, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000894}, 0x4800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r12, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r12, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x40}}, 0x44) 1m1.63683939s ago: executing program 1 (id=1193): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x453, 0x10, 0x70bd25, 0x25dfdbfd, "21359b8d19f0df262d669a4e97f160d7f6761c289057baa456c34e0ba46ec7fd118444", ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c801}, 0x1000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c000240000000000000000008000540000040000c00014000000000000004000800044000000001"], 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x6414, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x4, r8, r12}, {0x1, 0x0, 0x369, 0x7fffffff, 0x2, 0x6, 0x7, 0x3}, {0x1, 0xec1, 0x5, 0x100000000}, 0x3ff, 0x6e6bc0, 0x1, 0x1, 0x4, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0x2b}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3506, 0x3, 0x0, 0x2, 0xe, 0x8000, 0x5}}, 0xe8) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0xa4, r2, 0x100, 0x0, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d4133c35118f8104be07b4a6fc447f05b93104d66208362"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ad30462ff18563f74e961d72ccc95eb9e19326db6235c932"}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r13 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r13, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, 0x13, 0x100, 0x70bd2c, 0x25dfdbfe, {0x29, 0x4, 0x2, 0x1, {0x4e22, 0x4e24, [0x80000001, 0xa, 0x73b, 0x5], [0x2, 0x5, 0x8, 0xc5], r11, [0x2, 0x9]}, 0xfff, 0x526}, [@INET_DIAG_REQ_BYTECODE={0x82, 0x1, "d6f10f9266094f2432e6a8a1fb9f34cd6075894ef9d40efd18815c80898b3a3b22db8b1c0404c6f54a1948cee0dd0ead309a2a1a2dda3d5527f94b6650835daaa1b23f6f9398412ee89a5685522b4c6ce10a6c69c2e7777310e4bb2cb4a482e240fc8149e6ebab89a7a1556f32585d7004a1f6151c4ef25be5417742a9dd"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44}, 0x1) 1m1.355909486s ago: executing program 4 (id=1198): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m1.265742545s ago: executing program 3 (id=1199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x20000992) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b2030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000006c0000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000e0000002000000000000000000000000000000003300000002000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000002000000ff020000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000000000000003000000000000000000000007000000000000000000000001"], 0x23c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x88, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x10, 0x4, 0x10, 0xb, 0x9, 0x3, 0x4, 0xb, 0x7, 0xf, 0x7, 0x7, 0x8, 0xa, 0xd, 0x2], 0x1, [0x6, 0x7fff, 0x401, 0xf3c7, 0x4, 0x2, 0xf, 0x4, 0x7, 0x3, 0x8001, 0x8, 0x1c00, 0x0, 0x1, 0x7], [0x8, 0x101, 0x9, 0x5, 0x5, 0x3, 0x6, 0x800, 0x0, 0x4, 0x8, 0x4, 0x7, 0x9ca6, 0x10, 0x1ff]}}}}]}, 0x88}}, 0x4014) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m1.2606152s ago: executing program 1 (id=1200): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r0, 0x21) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x2, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3ff}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) (async) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x9, 0xf989, "45ee4f42ed"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74000000100001040000000000000000e5e177ce5d4834118400"/35, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140400000000000000000005000000000000000108000f9733e2a9fe5de5f05f9b1a07fd31b0b3f462c26ec8a9e0d882f68abedb115e52d705f4296ec0c8a6fbfc9f135dce270c4a5e7dc6a6218931937fdd4001849844e1e62aa5d8e4008740e44bbdbc89fc", @ANYRESOCT=r1], 0x74}}, 0x0) 1m1.202492501s ago: executing program 4 (id=1202): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) close(r3) r4 = socket(0x22, 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r4], 0x50}}, 0xc0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$unix(0x1, 0x4, 0x0) recvfrom$unix(r7, &(0x7f00000009c0)=""/17, 0x11, 0x40002173, &(0x7f0000000a00)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x7}, {0x0, 0x4e1a, 0x40, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x804) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x0, 0x8001, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x700, 0x8, 0x0, 0x6}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x3, 0x6, {{0x2d, 0x4, 0x1, 0x22, 0xb4, 0x67, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0xfffffff0, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0x2}, {0x2, 0xf, "29612ce0e0049da8facd002b74"}]}, @generic={0x44, 0x11, "c6f25d1666362f50a63cd64f89c816"}, @ssrr={0x89, 0x7, 0xde, [@rand_addr=0x64010100]}, @rr={0x7, 0x7, 0xe4, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp_prespec={0x44, 0x24, 0x90, 0x3, 0x4, [{@loopback, 0x9}, {@local, 0x5}, {@multicast1, 0x7}, {@remote, 0x7}]}, @timestamp_addr={0x44, 0x44, 0xe8, 0x1, 0x3, [{@local, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@private=0xa010102, 0x494}, {@multicast1, 0x7fffffff}, {@multicast1, 0x5}, {@local, 0x5c}, {@local, 0x1}, {@local, 0x2}]}]}}}}}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000006c0)={@private0, 0x0}, &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x2f, 0xbe, 0x8, 0x6, 0xc, @loopback, @mcast2, 0x7800, 0x10, 0x6, 0x6}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x104, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000001c0)={0x2}, 0x4) 1m1.081708993s ago: executing program 3 (id=1203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r2, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) 1m1.073152163s ago: executing program 0 (id=1204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f200010000008000000000010000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800005e4cd36bb96bd2b9"], 0x0) 1m0.973608649s ago: executing program 0 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x90) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x174, 0x45, 0x9, 0x0, 0x0, {0x17}, [@nested={0x160, 0xd2, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @u32=0x6}, @nested={0xc, 0x53, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @u32=0xe000000}]}, @nested={0x146, 0xd1, 0x0, 0x1, [@generic="1bd1c5d517f35e92e8e049e9b30fd973eb3fb70788dd1f005993f0de1815444de884bcac8654a79087dce727016b0b58bf20db5aae624ad3e9b3edc1b8be85b73fa6226bda0b1f0bef98164ebf1d78f4d5e7773accd6a5a364b2d80be28177885ce4aa39fd69eb705c63c6aeb6662b5c6118175e418239677e82e21a50e8f8e6a35bf3375a70aa7bec5ad89b5bf14106e3af1d61a7d7e71ffe72008e141a743560040b48cd063824e38656ef648a8b71db02fce171d7522bafbd", @nested={0x18, 0x47, 0x0, 0x1, [@nested={0x4, 0xba}, @typed={0x8, 0x12f, 0x0, 0x0, @pid=r2}, @typed={0x7, 0xfd, 0x0, 0x0, @str='^:\x00'}]}, @generic, @generic="3aed0da48070d6265052e91d232017ff3fadfd169cf2af3ddec80286dbc5e5d58461a21f2a18f0afb95bdd10f81385170afecba17c8713398fea05edd37395eac5f375f43ea27c732ee85d396c01e8955475e6d98caad81b1369a468913b92b983add0a3c213d20934eb0b5d9b7c6647"]}]}]}, 0x174}}, 0x0) 1m0.926747055s ago: executing program 3 (id=1206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x72bd27, 0xa5dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8f0d37240cfdb579}, 0x4c891) syz_emit_ethernet(0x22, &(0x7f00000007c0)={@remote, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "7e871a29f8cadbf6"}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair(0x21, 0x1, 0x6, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$SIOCAX25OPTRT(r2, 0x89e7, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x15c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x840) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x40}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f000000, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d8fb14e638c66f4014098bb34409e3e6428180a457118d665a9377b5343b2023708efc4e7ec9ca0d134dd8fede0d748a536a8938125f8d486d1c9e2f2c2dabfe04343ddd844d1ebdb8a449d79f4288deea2de52657a2673d44c9e88c7d68b70eaca587962993cca894d49608137fe007c179082e338f5adff87a970095", 0x7d}, {&(0x7f0000000240)="6700bf742ed661a10535bc5c77c17e73a6e8a14cd1cac6ea57940c8a5d5659123432b9f1aa98d0a1b3c1f31f9c4649fecd2e7b09f41ee321081340d80efedb289186d69ec23e82c1378003b745a40982baaee1ddfd2be65a68d060906435905cbef095758d84b66518011b14374c2086e51f7fcd21f4fba585d5439ea00aa3638c5c34322d1cc2e6f140b06b5888", 0x8e}, {&(0x7f00000000c0)="63323fed90c2043dff8e7fae3992cb312ca3fde1900f741e3f37eba4c36e969bc7c8b72f35", 0x25}, {&(0x7f0000000300)="574b4386496b9fa3970931fc1360f3cb75ff55152974646a4d0b2cff3f56d8aa98f492220dbd1133e8bbae81623453cb31cb37e3bcd2de67c5072d8c30eee05b02ca665e321b40e3c03206fde6119e51dd5c05d7a47bee8218451fe9ec0f89b4378cea9d5ace5d0fe50748cfc9ed49cbff", 0x71}, {&(0x7f0000000380)="2a8904f564faa19a7f43b31687538bb437e2bcc18d034efbb13bf19adb4484453239ba1f238355dfb8ecf806db58ab5de4a46d5705cab76e", 0x38}, {&(0x7f00000003c0)="247537b4d36f7830", 0x8}, {&(0x7f00000004c0)="fed54b0667a31931c8021de6f629e29acefd4b6e9ee56ebf3c6985385e64014db8ed34cad05344e10d1ec98b69b24c0734f60745497b4d6bfa802fa2d29f4924406d331810e75068ab4a65c0", 0x4c}, {&(0x7f0000000540)="4d5320c3a4b84b764cb2333dbc41881fab498f86c595864ac4b1b433a64c5f7f3343f36f806ae2364b399c06f30092", 0x2f}], 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x110}, 0x4004) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 1m0.881713161s ago: executing program 4 (id=1207): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@private0, 0x3a, r2}) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r4, 0x1) 1m0.841443891s ago: executing program 0 (id=1208): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = accept(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async, rerun: 64) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r5, 0x320, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8084) (async, rerun: 32) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1) (rerun: 32) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}}, 0xf6459daa87f47dbe) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x2cc, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x20}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "cb"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_REALM={0x17, 0xfa, "6b70b5e7221ad94e48a2cbeda7c440be8427f8"}, @NL80211_ATTR_FILS_ERP_REALM={0xea, 0xfa, "cf5aace863619aeb2fc63fa5ad174687adbc738f3f2c0114847668a91ea11ee62f88f6115a9906616d36ba33b1022f7dde11998a8b8565b38a61b232acaf711e6c345e369719f385de159eac0a1f9f8e86a119144b53011fe584833658f4687b9887df5fc1e7bf1d5c9d23f1dc597693973cbeabdcbc196dcf70baa46d412b8c092ee8181959e4221cc12840194f2e0b27c9ab8842a0b9eeb014d337bf41ad7a4573a447570d3f3b0e516eca9cde8209922fa1eef833e541d4cc23a631fb52bce7e58523e37275b62e8d6c5409ea3bdb5bad5311d27c6141710d1c57680f4653061d266384bc"}], @NL80211_ATTR_IE={0xcd, 0x2a, [@cf={0x4, 0x6, {0xa, 0x40, 0x8, 0x7f}}, @preq={0x82, 0x57, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0x1, @device_b, 0x1, @value=@broadcast, 0x70, 0x6, 0x5, [{{0x1, 0x0, 0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_a, 0x12b}, {{0x1}, @broadcast, 0x3f0c}, {{0x0, 0x0, 0x1}, @device_b, 0x2}]}}, @mic={0x8c, 0x18, {0x371, "6d141f13165e", @long="1b551ee432a1425673d2feee456ff6b4"}}, @perr={0x84, 0xf, {0x4, 0x1, [{{}, @broadcast, 0x6, @void, 0x7}]}}, @channel_switch={0x25, 0x3, {0x0, 0xaf, 0x61}}, @gcr_ga={0xbd, 0x6, @broadcast}, @cf={0x4, 0x6, {0x6, 0x7, 0x8, 0x2}}, @ht={0x2d, 0x1a, {0x2848, 0x2, 0x4, 0x0, {0x29f5, 0xcba, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x5}}, @ibss={0x6, 0x2, 0x4}, @mesh_chsw={0x76, 0x6, {0xf7, 0x6, 0x30, 0x8}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x8, 0xfa, "d9c8d7ed"}, @NL80211_ATTR_FILS_ERP_RRK={0x66, 0xfc, "28a222ef448a87a3ab24287d23fc9e5be86c2814de83679733419946bf330a8bcaf7e65f690172768f297899eccd2e7df210ceb7481aab85f665eece9a110cc12933b6ed4970267e66a91f031726c58dccc7676adef7d5134d48410194f78d36f910"}], @NL80211_ATTR_IE={0x4f, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x70, 0x8}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x4, @void}}, @challenge={0x10, 0x1, 0x8b}, @cf={0x4, 0x6, {0x7f, 0x1, 0x8000, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x6, 0x2, @device_a, 0x2, 0x7fffffff, 0x4}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0xef}}, @peer_mgmt={0x75, 0x14, {0x0, 0xd25b, @void, @void, @val="b7a2df906beee275e28552452b37e1da"}}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, 0x140e, 0x400, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40810}, 0x44) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000d00)) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0xc080) (async) getpeername(r0, &(0x7f0000000e40)=@phonet, &(0x7f0000000ec0)=0x80) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000f00), r1) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001000)={'gre0\x00', &(0x7f0000000f80)={'ip_vti0\x00', 0x0, 0x8000, 0x1, 0x7, 0x8ed, {{0x14, 0x4, 0x2, 0x0, 0x50, 0x66, 0x0, 0xc, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1a}, {[@ssrr={0x89, 0x13, 0x65, [@private=0xa010100, @loopback, @loopback, @multicast1]}, @noop, @timestamp={0x44, 0x28, 0xc0, 0x0, 0x1, [0x400, 0x3, 0x5, 0x7fff, 0x5, 0xc, 0xffff, 0xfffffff8, 0x101]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000010c0)={'ip6_vti0\x00', &(0x7f0000001040)={'ip6tnl0\x00', 0x0, 0x2f, 0xf, 0xfd, 0xe, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x40, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001180)={'syztnl2\x00', &(0x7f0000001100)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x2, 0x10, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x0, 0x703f82fe440c4490, 0x3265, 0x2}}) (async) getpeername$packet(r1, &(0x7f00000011c0)={0x11, 0x0, 0x0}, &(0x7f0000001200)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001240)={'team0\x00', 0x0}) (async) getsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000001280)={@multicast2, @remote, 0x0}, &(0x7f00000012c0)=0xc) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001300)={0x0, @broadcast, @local}, &(0x7f0000001340)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001880)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001840)={&(0x7f00000016c0)={0x170, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x80c1}, 0x55) 1m0.824133467s ago: executing program 4 (id=1209): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$int_out(r1, 0x5460, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x1a, 0x0, 0x0) r4 = accept$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) ioctl$sock_netdev_private(r4, 0x89f8, &(0x7f00000004c0)="94b46a8483b0054248d84480e6cd728d94ff24c4aac4b867927f62c1b14896efb30cb7698614b50b5b10b028ed92b52d5aa04764f4a690933f300204e56c34c3e8dd1035fe137c169d305499b90b1b7ca5e399e9bb0edc4036a395fbd57671a06b7e60d21a146a306b75924862c338aa996611978a622d5ed17919cc39c9f3be3b9ae607286c59fe7be236c5e425e0815d77cad693a92535e52278df3fd1dfb088659aaa8c44cba6290ab9f13c12ae4794245bf02a") sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r2, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000440)=0x1, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x17, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8864"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0x5}, {0x9, 0x5, 0x0, 0xd}]}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="808002000a0002000980c20000007f00"], 0x28}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@delchain={0x0, 0x65, 0x0, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xffe0, 0xe}, {0xffe0, 0xfff3}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0x0, 0x41, @local}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT, @TCA_FLOWER_KEY_UDP_SRC_MASK, @TCA_FLOWER_KEY_ICMPV4_CODE, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x0, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0xfff7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x0, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x0, 0x2, 0xd118}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0xcd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x2fb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x0, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x0, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x7}]}]}]}}, @TCA_RATE={0x0, 0x5, {0x9, 0x5}}, @TCA_CHAIN={0x0, 0xb, 0x100}]}, 0xfc}}, 0x0) 1m0.768395026s ago: executing program 3 (id=1211): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r0, 0x34, 0x1, 0x7, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_emit_ethernet(0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004c0067000000069078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec000000907800001312c2ad8e98be22f76b333c631c7206577113123e485e6a2fcf5e989a88b00cbf0d3f93ef685077d0813fabcb42461097735d4226344f17bf383b8e92e00b300729fa9508fbe19d7cb8dcb9c5d5b7553dc5fe4df01f1971145f3a7d41f840554f6b8239903987ba4e2d6d9176f2ab8d4b832813465ad07571388d1d030d8175a7997d2d6b6317356f010bc374e17eabb964922c164ca35b8042a8b62959ac3ead1c0b8d293144f543fd150ef4efaee1fb59808b6d942423e723958627399cee7eee7cee46ad332c4ae0"], 0x0) 1m0.709401787s ago: executing program 3 (id=1212): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(0xffffffffffffffff, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000011) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0xf0, r4, 0x20, 0x400000, 0x3, {}, [@NLBL_MGMT_A_DOMAIN={0xbf, 0x1, '[\x00]\x84\xff\xc0=\xd3\xc7\xf33\x99~\xa8M\xfc\xe3hI\x87B\xa1\xef\x15\x81\x0ex\xb2\x03d\xaf\x15\x83\\\x88\xcb\xfch\x95D\x80\x9e\fI\x7f\xa0\x1b\x9b\xe9\x88c\xc7\xaa\xb1\xb2}\x964B\xb9\xa3\x96y\xe7\x06+\xd2\x85\xbd\xb1\x9c\r>\xf0\x93\x96\x19\x13,%\xde\xb5J\x7fs\xaa\x8e \xe4d\xb5\x19+t\xc9\x18c\x99\xa9\xe2\xc8B\x9aXZ\fuw\xea{\xd9\xea\xea.\x19x8\x1a\xf3\xb4\tw&\x8e;\xf40x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r5, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m0.635916696s ago: executing program 0 (id=1213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}, 0xa) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x10, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x400}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1m0.453547084s ago: executing program 0 (id=1216): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x4e, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x30, 0x0, @opaque="567a7ae336756221f0361e067d647240f70096a945b6f251b5adb8b4f183406b9eedd7ca8954eadbe853d69be258"}}}, 0x5c) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xcc, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x89, 0x6, "4860d7fc9b319706c55b7efc8d6d149081678b922a6709816410c0a624fae624b1ded36745eb8641e7830bf26affc4fc47c1630082ae00d20a57a7c45068e8c9d09406f54c0c5cdbc9e5be513a189aef09bed6ee4368fd31ddc30a7caed35feb1c891ad4556deb9054235dfb8bd01347adfdd51536e6b1a1ec50b3f34bdbd60f60f232e0cc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x13c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x8, 0x6}, {}, {0x3}}}, 0x24}, 0x1, 0x2000000, 0x0, 0x10}, 0x44004) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000ec0)=[@in6={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7f}, @in={0x2, 0x4e22, @empty}], 0x2c) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1m0.313578592s ago: executing program 1 (id=1217): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000120001002bbd7000fbdbdf251502070e4e204e220600000008000000442a00000300000002000000080000000400000003000000", @ANYRES32=0x0, @ANYBLOB="0010000006000000a0ee00008311e67ab85eb55e4ffc5f0000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x0, 0x4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @broadcast, 0xffffffffffffffff, "2d317de00ff7f1d1611c57fbe71aeec234480266f10004ef2324cbe1d4967e62", 0x401, 0x7, 0x4, 0x24}, 0x3c) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="9d33d16df4151a3ed1b0756b59f38a9549dc8e89", 0x14}], 0x1}}], 0x1, 0x480e1) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES8=r5, @ANYRES8=r1, @ANYRES64=r2, @ANYRESHEX=r5, @ANYRESHEX=r3], 0x16c}, 0x1, 0x0, 0x0, 0x20040041}, 0x90) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r6) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdf251500000028002b8008000100000000001c0003800600010001000000080002000200000006000300a1aa000008000300", @ANYRES32=r9, @ANYBLOB="0b000000000000000000d0ac36db"], 0x5c}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fddbdf251e0000000c000600020000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c000600020000000200000050002f800c0002000203aaaaaaaaaaaa0c0002000202aaaaaaaaaaaa080001000080000008000100490d00000800010004000000080001000001000008000100020000000c0002000203aaaaaaaaaaaa08000300", @ANYRES32=r10, @ANYBLOB="412c92cf706439bc0c5dcb87665772a5f8727933f2ad7226eb5a8796b5e05e56f8b141eb0cd293f4dca9869b09a8123ad7aba1bf4046ad083656057723710e4d015dc8d8c5febd78dd14008ff24d4a752b483add50a36d4727cd0632f4b1a0f7a2377215892301f7d98f8e4c0ab6ef800f714dd72b60ff6520a2dd1c6031a54265280242a44af472c0967229df"], 0x8c}, 0x1, 0x0, 0x0, 0x4004090}, 0x40010) (async, rerun: 64) r11 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) sendmsg$tipc(r11, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x4) (async, rerun: 64) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) (rerun: 64) splice(r4, &(0x7f0000000240)=0x80, r12, &(0x7f0000000540)=0x6, 0xc1, 0x0) (async) sendmsg$tipc(r11, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) (async, rerun: 64) accept4(r4, 0x0, 0x0, 0x400000000000000) (rerun: 64) close(0x3) 1m0.177356799s ago: executing program 0 (id=1218): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219, 0x20904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast}, &(0x7f0000000100)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@private1, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)=@polexpire={0x314, 0x1b, 0x800, 0x70bd2a, 0x2210, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010101, 0x4e21, 0x7, 0x4e22, 0x4, 0x2, 0x0, 0x20, 0x3a, 0x0, r2}, {0x3, 0x0, 0x2, 0x7, 0xffffffffffff6671, 0x2547, 0x6, 0x3}, {0x9, 0x7, 0x3, 0x6}, 0x9, 0x6e6bbf, 0x2, 0x1, 0x3, 0x1}, 0x5}, [@mark={0xc, 0x15, {0x35075b, 0x1ff}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@empty, 0x4e22, 0xa000, 0x4e20, 0xb5, 0xa, 0x20, 0x20, 0x5c, r3, r4}, {0x4, 0x1fd, 0x1ff, 0x0, 0x1, 0x9, 0x30, 0x101}, {0xb77, 0x7ff, 0x722, 0x2}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x1}}, @XFRMA_SET_MARK_MASK={0x8}, @proto={0x5, 0x19, 0x3c}, @algo_auth={0x93, 0x1, {{'crc32c-intel\x00'}, 0x258, "47bab4adab45392ba166ae7c2f3ab1f14f3c028ef6e232dcc2d5b9e524be1e6bdeea627349bdb98495ba0f28ef8d413f36bf265630e758c58ddad6a4950ac8edd7f70bb566c0965800e5c7"}}, @sa={0xe4, 0x6, {{@in6=@remote, @in=@private=0xa010102, 0x4e24, 0x80, 0x4e22, 0xac9, 0x2, 0x80, 0x20, 0x16, r5}, {@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d2, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x3, 0x3, 0x3, 0x29cd, 0x100000000, 0x6, 0x83, 0xaec0}, {0x3c, 0x80000000, 0x200}, {0x7, 0xb, 0x16}, 0x70bd29, 0x0, 0x2, 0x4, 0x4}}, @etimer_thresh={0x8}]}, 0x314}, 0x1, 0x0, 0x0, 0x8040}, 0xc884) socket$alg(0x26, 0x5, 0x0) 59.832598264s ago: executing program 32 (id=1218): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219, 0x20904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast}, &(0x7f0000000100)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@private1, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)=@polexpire={0x314, 0x1b, 0x800, 0x70bd2a, 0x2210, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010101, 0x4e21, 0x7, 0x4e22, 0x4, 0x2, 0x0, 0x20, 0x3a, 0x0, r2}, {0x3, 0x0, 0x2, 0x7, 0xffffffffffff6671, 0x2547, 0x6, 0x3}, {0x9, 0x7, 0x3, 0x6}, 0x9, 0x6e6bbf, 0x2, 0x1, 0x3, 0x1}, 0x5}, [@mark={0xc, 0x15, {0x35075b, 0x1ff}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@empty, 0x4e22, 0xa000, 0x4e20, 0xb5, 0xa, 0x20, 0x20, 0x5c, r3, r4}, {0x4, 0x1fd, 0x1ff, 0x0, 0x1, 0x9, 0x30, 0x101}, {0xb77, 0x7ff, 0x722, 0x2}, 0x8, 0x6e6bb4, 0x1, 0x1, 0x2, 0x1}}, @XFRMA_SET_MARK_MASK={0x8}, @proto={0x5, 0x19, 0x3c}, @algo_auth={0x93, 0x1, {{'crc32c-intel\x00'}, 0x258, "47bab4adab45392ba166ae7c2f3ab1f14f3c028ef6e232dcc2d5b9e524be1e6bdeea627349bdb98495ba0f28ef8d413f36bf265630e758c58ddad6a4950ac8edd7f70bb566c0965800e5c7"}}, @sa={0xe4, 0x6, {{@in6=@remote, @in=@private=0xa010102, 0x4e24, 0x80, 0x4e22, 0xac9, 0x2, 0x80, 0x20, 0x16, r5}, {@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d2, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x3, 0x3, 0x3, 0x29cd, 0x100000000, 0x6, 0x83, 0xaec0}, {0x3c, 0x80000000, 0x200}, {0x7, 0xb, 0x16}, 0x70bd29, 0x0, 0x2, 0x4, 0x4}}, @etimer_thresh={0x8}]}, 0x314}, 0x1, 0x0, 0x0, 0x8040}, 0xc884) socket$alg(0x26, 0x5, 0x0) 59.813660119s ago: executing program 1 (id=1220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010801000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000d30000009500000000000000f7be00eeeebf1753a028c5892f0651ea5b3d7d08dad6c3e4ad7b953632e6a3c4d008111e68819e90a4a75d1108bb2975f294c9c34f18c83e78b65f952ac1f413e571e3e0bf9dba07e69397ddbabb36c4f23f1ebe3dd3c168d89994e8ecc11a367033310cc1b619470caf70d6d8856bfa8b867a00c8dfcd212af864a1d9e3422d27c300ff15e9b17791ab3e71500ec775ffe70d461b5c37c16a54cb6a92af05ec784cd7"], 0x0}, 0x90) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.81305616s ago: executing program 33 (id=1220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010801000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000d30000009500000000000000f7be00eeeebf1753a028c5892f0651ea5b3d7d08dad6c3e4ad7b953632e6a3c4d008111e68819e90a4a75d1108bb2975f294c9c34f18c83e78b65f952ac1f413e571e3e0bf9dba07e69397ddbabb36c4f23f1ebe3dd3c168d89994e8ecc11a367033310cc1b619470caf70d6d8856bfa8b867a00c8dfcd212af864a1d9e3422d27c300ff15e9b17791ab3e71500ec775ffe70d461b5c37c16a54cb6a92af05ec784cd7"], 0x0}, 0x90) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.752496348s ago: executing program 4 (id=1221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2b, 0x80801, 0x1) accept4$tipc(r1, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private1, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x20, 0x130, 0x33, 0x0, 0xee01}, {0x7, 0xfffffffffffffffc, 0x100, 0xfffffffffffffffa, 0x0, 0x7fff, 0xfc, 0x6}, {0x5, 0x6, 0x5, 0xb5}, 0x3, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in=@broadcast, 0x3505, 0x4, 0x0, 0x9d, 0x2, 0x9, 0xc}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "3d186e85f3a07d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="acad7d2838492351d687de16f55a159f381d10a1af597231082efe472ed2178e2516dfb9c1f9b5f8b6a57cc2d8db6537091bbf8cd858f96b59f2ed49769f3c2be414b9ebf07da1a9c56d5d6811072b2a4fa74253da231af2c63717f43fe7cf240000", 0x62}], 0x1) 59.287447834s ago: executing program 3 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xfffffffffffffe66}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r3, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xdc, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb115}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x61f2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x717}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1c}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x38000000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 58.939169986s ago: executing program 34 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xfffffffffffffe66}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r3, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xdc, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb115}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x61f2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x717}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1c}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x38000000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 58.924887784s ago: executing program 4 (id=1224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x1040}, 0x804) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}]}]}], {0x14}}, 0x94}}, 0x0) 58.920449744s ago: executing program 35 (id=1224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x1040}, 0x804) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}]}]}], {0x14}}, 0x94}}, 0x0) 3.28588399s ago: executing program 5 (id=1900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x11, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x1b8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218) r2 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x89, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}}, 0x40008095) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) 2.701204695s ago: executing program 2 (id=1910): sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="e3710f00217d24965647c62556fdfd5a1c8fa69473fa99bc395b70edf18e3d94a3c2d0f4fdf009c830bb0000000000006e37126edf502069303187fde7bf2ad4841bdac1a83d6b8519b298517c", 0x4d, 0x24000884, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9fef01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000fe5f00"], 0x0, 0x34}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'xfrm0\x00', {0x2, 0x0, @private}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8}, 0x94) 2.58250713s ago: executing program 2 (id=1914): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000100)={r4, 0x0, 0x10, 0x20000000006, 0xb1aa}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r4, 0xf, "97ef73383f154e5a345b048429f286"}, &(0x7f0000000280)=0x17) syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000340), 0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x845}, 0x4004000) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) recvmsg(r10, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x20) r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r13, r12, 0x0, 0xf2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200408c5}, 0x4004800) 2.477894373s ago: executing program 7 (id=1915): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01", @ANYRES16], 0x6) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/155, 0x9b}], 0x2}, 0x40002020) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x8000) 2.45322339s ago: executing program 7 (id=1917): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x24) (async) getsockopt$bt_hci(r1, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x24) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1}, {@in=@multicast2, 0x4d6, 0x32}, @in=@dev, {0x0, 0x0, 0xfffffffffffffffc}, {0x7}, {}, 0x0, 0x2, 0x2, 0x0, 0x0, 0x8}, [@algo_auth={0x48, 0x1, {{'sha384-avx\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000006900030500000000000000000081"], 0x18}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000006900030500000000000000000081"], 0x18}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001100020027bd7000fbdb0600ac1e0001000000000000000000000000000004d402006c0014000e00ac14140e000000000000000000000000422f215a8166a2c68844ac6e42da23406230a54ba89ebb9967178ef242081bbb07f6a91ed3b1730d619eb4698066a055c7ef9eb82e8aa73544c91cad7c09d576acdc74f4dfac015866fe2b30b7380a9e"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x48021) 2.339481082s ago: executing program 7 (id=1919): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$rfkill(r3, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) (async) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r1, 0xc08ba000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 2.288513177s ago: executing program 5 (id=1921): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) close(0x3) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r4, 0x0, 0x0}, 0x20) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 2.237618708s ago: executing program 6 (id=1922): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000000)=0x10002, 0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}]}, 0x38}}, 0x0) 2.227001062s ago: executing program 7 (id=1923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002dbd7000030000000001000000000000", @ANYRES32=r2, @ANYBLOB="0a001a0008021100000000000a00060008021100000100000a00060008021100000100000a001a0008021100000100000a000600ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0xc054}, 0xa0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 2.149084069s ago: executing program 6 (id=1925): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409776d0a89"], 0xa) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) (async) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409776d0a89"], 0xa) (async) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) listen(r2, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) 2.111357589s ago: executing program 5 (id=1926): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0xfe33) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000580)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000640)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c400000019000100fc360b1bd9000000ac14142c000000000000000000000000fe80000000aa4e2200004e240060000040000a1bfd0230f81f38992aeabadbef7c98e6095901841000"/82, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="00000000000000000104000000000010feffffffff00000000000000000400001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001000200000000000a00100001"], 0xc4}, 0x1, 0x0, 0x0, 0x4014}, 0x8044) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000070a010200cf204c49000000000000000100000008000b40"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000050) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999ea", 0x5c}, {&(0x7f0000001400)="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", 0xcae}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000084, 0x0, 0x0) 2.098839663s ago: executing program 6 (id=1927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00040100000000000c002b80080001009bf7051a67e406d923c2a54394dff701c936", @ANYRES32=r1, @ANYBLOB="08001b000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)) 2.017541896s ago: executing program 7 (id=1928): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0xe, 0xfffffff7, 0x3301, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x9}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008e1c2d9fd8be3560f3f8e9f88952a8dcf316f9f4a50f2a4da1b0e2ed7cd7e87fbdd5c99e26c16a8697f585e7bb8a", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xc040ff0b, 0x2000000000) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$packet(0x11, 0x2, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000200)=r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) listen(r5, 0x0) r11 = socket(0x28, 0x5, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x20, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x20}}, 0xc000) connect$vsock_stream(r11, &(0x7f0000000080), 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000340)={0x0, 'rose0\x00', {}, 0x9}) 1.973488629s ago: executing program 8 (id=1929): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001100)=@req={0x28, &(0x7f0000000080)={'team_slave_0\x00', @ifru_ivalue=0x8000}}) sendto$l2tp(r0, &(0x7f0000000100)="f78f361b4f372769d94ca9b85da1d7add2e3173f2a0881fa4ea9e1ef87e3dce8f4ccfbe1738fcc03b85a6f4795523847b581a390d1b4b5ab4dcff482c2e5400a354e9e7a61fe07d69b85bf4fdf5b8d23a4cdbd06a16fff8b1cc22f4b8ad085d4c5eb769104918f3a0e12d727fbd5e4dfd4bb6bfea45bf548ff2c3f52348ab046385158e78decd9c6ab57ac1909c9b1b355adede448465fd15318655296acfade057749f2e2d9667beac2990e709e1359419673a7b7d32b5d4259c1ae3acbe880b712404acdd41c82f72cdb64bfe41d0d71ea259726af50baadc5aa9e393a9d72dc2ff1959f1c3067383683ecc524db36335debaefbdb9f36bb703ae9174a429d491b15aaf68ba5d1956c14381f150e4ce7a241a7c5c41b99aa73789d48474b7f9f5838ebd817bc3d7794406fc5bcfb7b7277d6f6a226e20d950fd46a250e4c5e0330fff68d24e7a86aff09b1e6fd8f128e163f154fcc3398c0585d66fc9a3d9649e6282ce36f9e2968b2d645f97aec0e3718836e8603d7e62e87bf0a08629a40f9b10b5d63f86189adea619f8fcd4497cf6ac0157157d0728b1832ad2037e4068bca584a5a369ae75e6c799319b80ab97eaa38b771d57e455ef0aa2059311682bff521f0be1cbf897480da2e44ce9e9d3bd8f9361a7613abcd35e860e1649cc05b1aa5a62a5a4c918a112dbf0fa78dbe32c200a2bd9c8c67236fc34d90267787a3ac0e9be2550198e30b73bf1b8b5ac7ae7172435d7aa3a0cfcf4c74c44ae0af2b04682b3accf3fe1764db34b81fa62daeadbe311546f38a365d7a529749a3b482b09aa27853eafea8e91fdc1c2bde438a58ff0db68a2b58ad75d59c29d62586a1c4328e4c77350de56a11bb07d3470f79602652346569ecd249a15d29d562e0da33faf6fe52078f419dcf545c41a950c29c42dd1218a3ae59a26c2384cfd87ae66ee52113792d6cf74b681109ad5b89d448d0f9ba5ac2b6aa8eb803639f8cd0a5f43c3c48010f8c573517a5f53e11ea3e2af3c64bb364bfb5b3d30eb9f515d6ee93bf8723f33dbf03794ef12a9317f26e49feeded8a2b9fa9ef64c36b0a8692357cb5e37b24187629bc7d33eba37fb91e1654c66e0eb244f1a5baad8a040b12daeebc40187afd9acdab340b58e257519a509c8eda8b87a0c3c103146f5592835c9f435d4d46ae2cc0b94a3f777280d6126d5e967d1789a56fe3d237265fc8275fa002f6995c5cc1c4c1adf4b138220d29e36cf8536810df805d0759025352e768b24bff6af1a2e08013b9661a2451d458b12a9c1de0609c9e1508f462a99fad81c193d001f9c10dad6254532114e16790258434ee4711eec455b164ab4643a470fc75b46958832a6880d3b17d50adc4e82863c3401fe73e14173f1f08907e0a9c4a8856beac3d12a9165262dcfe8ce541aea831def366c8d735276e290e99a3bcc793592487718a0c22827e7c76c4043d6e3327b8fa697667d4ddd76501263fae400612e22e9727c5cbd4fe7c29a247ead325d7b72c25cacfb60b1570f5a3b36c3ff7c6e8261c11b2f18112bcfc13c4465d4100fad9add19b8407da65eefa2383200941eb7faf6db1e2a2eec381267799d2e45f703cfd2c901135723e91e74d12910ea7c4466727445c92bf78a980009426e360455d7bd93efa6650b0bdd9d385f353a2ef08df0885bef1241f41ec2a0581cf4a5b2d516e8283fe7d29479b832cc3b4d0ac2354f658d510b837f356bd05974fa919d34456740addfc87e03188f8e31f621647af29dbe36c9c61b1e041a7df279a6f625b96b4163ad732b579735326d0bcaa0c605d133f46311c84986deb8dc14db4e63e1b18c426e61d084669f97aab7c28c887c1ac7f7ad21576ec646aa10652c647ee4dda98da8df392ff90daaa5a49caf4eb29441ea736a887e711fc6a2de45114c6c60016b4ed1d438f4940fb40bd251250d78e19b8f27de5a8183ad8e778509ec3a0126b8f2df3cf9300665512fdda6dd6cad7c41c8e5496e3819eae20e9334be72be8477101150a2cdc9fd78430a7f38a3c938939ddc33094eb41e389d0b979ae4eeb58f61883e8684bca087769a6b7ee16303078b0b54b55c46698bb0739bc03d454602f130b8adabe705196b99bbbb4c56a2d70f721d8b48939227f3d4276e44e3ee4d8cf45005f62023baf2894307009f808695ceb141c0a98d75bbe03bcfb24b2c4a4f2786029086a60412aa63711a79cec76a436cacd2f925d3deb9c10079cd9ec9f8262938188aef2f8c5ff035997642dfbb78c8077413f82db393d30bcc35f6c8dd045422aa4d890c4526bc29ed2e883943063e148ccb87323f9b78e89b7ab6bf01ef4a325565941eac9a7e7c6896ce66a0c5695167ed38c2cc9290038a680e3da8c83f74a4fc19575080f4f5d991c695a2efd28ce723ae1d87e0a54c526c09a639fcbbd54180c4b25754f69e660308e47ba9aaa5f021daf68e8a5a3e37e2766a2b7429d9967567440804ea0e44731e720a8bc8b8a6fe453b2dc171695f3c0d07d20b5faab3a7c8dc56f46217f690d3009f810312b65e3d2850b55e69ff38cf78693a3879748cd4da807e258b354fac27cdbe5ce1d2e9fb90a5afdea8d85b179e9fd846753c512b1bf53334b39e3804588003443d42967d68d68285a990eae9e042d6c05f4cb67103f86469d8ecf02a59da955ddaf163199de7838aadeb7970f69b139a94a424763f04bc23f503537263e0595e0088ff86093b1109534a02247745e9e5626f1292ed5f7bd14297cc5281983146b0946baef79c61dd6155eb0d05677718d720f6e7a9efd915a2b533f798ce18574d68ef0f3c37513130af9ccc0bb3b892daac5582fac42557c6ebb4344f5f64d261e3715765e73cc35cbcc8ea2e935b2e9682a47698459d0a252287cfaad405149e5ed1e065e7fe8f4706bc204498de0797df66d5b3b2bc243fccf2304a73cdef84cfde18955e1c3e52d08b42ad58865c08c8e7f3673a516b1aff7b221710ad539f18de892ef02ca179a78c75815cd0093a5d76417fe21989863921718faf042890f8da3c2ce424241c24194a698160a7ee6197772c484b04a517ba30db3a07c07d9dc9f844f8c5cc9db2921d6a8a0991669b781f12693b56a2c98ce1dfe00df16976573046712287ad788e952f95ec53f0fe1d77f41e588bba8fee14401ba58ba592a829174568c1a12d7be2f978085aaca30cfdbbc6a5dd99d77df36cc12d0a0ac7e5184f9d5428e23ef9f1ed178ee9776e0cc8a7f6ec329cfe736e9d0e75d815ca20b1fe78fad95c813c2df9979fea562f138437baee8cf55a0f90abee3373f7c9ba5d543e1cfa6c22436c5bbead9775fa2722109a382a72d5eefd4d29214f02f71e231128abcaba570c83042260581736e1aad0135234981a7a9d05026ff2cf889aae9225407388bf0899dab9e78d9d2ddda4cc9b19af695bc0410827de428ac85d382cdc16f3ecf02f48c0a3707cfccec8e5ed882d895ac5b6faad6dce46e40d08d0e594eed4f78db37d34b6b06d3e2fe75b28badb0b749da2e87fc4e3c7556417bb5f87a8f6773400d4bf63a64a3fca18e72dd3796dc504afdfc352c618d39c290638dcdff927abfbe54956b68f791d5ad277cb6ea6c0be817b9a2e6e4f7de31cf46509c44d9877fb88d604274cf91ca1daa1d79ead9e9078c4fc11fedd53453e4fcb98ec1f3c92160b5454811e205d4ca5118995e3e6106692bbc0911f8ae7519d095d5d94d74bc00d809857c7c1a77da678ae22c0ed4216a75719370ea6e9174782cea2a94b444abf25d319f7d2266e4e515e5980407aef531da8997c4d7b3662f2e8d97c7fe4ae7da99e83e71b62cbb4628e3731e3582236697e070f85cb57e7d61a29a720e74b48478d7708a46a4e88c30f2e651e18ff332c48ef4166086c044f5ceef72f8de81c69d06cd228fcdb43f3aa8c4e1e2174dc1eb72413d7f9b25ddff390171067220a69dce43ca44bbb4b6f642372c2b49ddbc547482005c05da153aa530c1f4f43b11186825f4d9b6b0112cd957edd769c4b948b9fccefa135c9201aa94fcb1a83723d046cab706032ea16616685f6aa9572cc716e9bd615758c4265b27812d00253aa4aba187d97bff983e58ffa935aba5d1c06707d81f2697c2f63878f521970104ee7039d3dca7d5ef2615ba7f34ae4e6ad595711b18c73c28c7e58b5b293d74b11cb401f76749d56fd3b034c525ee1eb96cadd86de3985dced1e48f188ffeb2668d9c61e46777627fb384eb1b1ab74504aa77036913f08e0be1382a72426b2d9ed13c67c6f33bd28af690c4842ffcef0444812e7aa8624f8101a9e694e3d7a458f8f2420e290dfafe60d7cfaecd751cf783823d839bd2ca0d04e492af08621c29285b4864fed2b865c2ea5c7a9c237b376054dd7b35546ca88cbc40cb2de5b4baf3ac5cf86f888639ca9786e447aea56d5031d4037a9667bc6f66a9e31f28fded98300d7a920e7ed57a10c7336a45b9c72188a280b8a9c2503482318728ed390613343798a33dd1b53ce01161fdaee6c223dc466d26c1a38e7ee80883a0946394b3e67776f0e31855c22523ec62926831ba2dadb06c801a6a45adfea98126c7283ee829f3e5bdffe8b1fdf3633af97323fafe87d075dbef8f69dd18a05fc6aaa3364af525d0f8d6a4f1793c3220379d072868013f7a596b00178e58c3ce16d688ec82f3e5a663a9786474c81c16073d3b3969eb9fc3a78b5ba0fa4ade2281f994cff40c8328845efb00eb36733ffb95e0b71c71a8eabf17ae34b25c54591dea183e2d766d49e993a651509d23e27ba69f2d35eadc9494668673cb098c566755433b93fb19bf2f4c5dfea793d42cfde552611a306a806c23b87aabd2bc27a556d130467d7b3669baee298c7009f0eda781c00f0231acffd0d25fd0ddc20935d1b709ed944c7155630aa5e748732cf8c12baa9ca4d8cd48a73fb0eaa750ed88cd0ddc5cb4862c6c1859c24456335527f7878f46c1491a7c80f52029f315fa3bfd629433d164774aca16a5235d4d4ead308038a7660ded0c209d897cd5657095e8b9bb2a5f68884fc93eb04c537eb1edcf4335c5f0d67d04327a5cf48d571ac96dcbd89b4d521626273ee08c1564956786a30cd35d2073b78f3f332a5d78df6c9a661d1fe364e3bc4a0d3ef8368c5148212f9a6ca81ed0996b954f37e580fb86d49f926f4313ea8f92c75d4279d601735fd8c5781796eb893c514291579b3749270dada97f2f3d38d2e6a2d6266fdfa2ddb7260dc2b3d0a21247ab6a579defa5a79a2d1d0871ba33399a6ae6b52471afa221e8def10fe2d811d3704fca679b29e5595bb81736e74b1e2250771d1196a74fee957edc6d2feebc4cdcf4cb7f218e2d0bbbc6de6487eb31bcd6328bf0c3e1fd213edaa1f7261ad949feada7fde2b141e467b01e56f00561e3c2ac6938f8d9c6a3e668dacce9a3b90eecaef6d4a478150e2c5fb9d5947dede3785057c7508ded67c9606bc22e06b5901cf92c752a400abced01f92d19495b80b96f5c7eaf7c73c3ce1e5e5dbe4ebd619c96bc05a227d00eb18d514f827911cf091853fb8739c10d087e0e07bb75ea33c1a7209c58fb072eccd2fb3f1b4a853c3d78049697cc29df2a1f5269ef54e70698ff2b808dc9bb1be49d7b0b9c64486398488e39189644d4d017f99c0620b9ac6673730c8cc6f2ddb5e4f7b03e2f36107a0423f764817c47748c2297a20b0498ce233344b6ec787f3512fa13d6eadde6d94cfdbc6cc80fee1abdf88a6458be908db3f495259498070fd326124c8a", 0x1000, 0x800, &(0x7f0000000040)={0x2, 0x0, @loopback, 0x4}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffff, 0x7fff, 0x0, 0x81, 0x8, 0xd40}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x13, r0, 0xc252e000) 1.918249588s ago: executing program 6 (id=1930): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x2ab8, @private1={0xfc, 0x1, '\x00', 0x2}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffa}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge_slave_1\x00', 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.797672746s ago: executing program 5 (id=1931): r0 = socket(0x1e, 0x5, 0x0) getpeername$packet(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x7ff, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000001c0)=""/36, &(0x7f0000000280)=0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x144}}, 0x20000000) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x6}, {0x0, 0x1}}}, 0x24}}, 0x4000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x5, 0x9, 0x48, 0x7, 0xc, 0x4, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 1.793901895s ago: executing program 8 (id=1932): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x38}}, 0x811) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x608204c0}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000804}, 0x4040006) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000007b280000000c000180080001", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x198, r5, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x27}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}, {0x8, 0x0, 0xd8a9}, {0x8, 0x0, 0xfff}, {0x8, 0x0, 0xc}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0xffffffff}, {0x8}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x118, 0x84, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ce6a9e6f8b81"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, @random="aa78"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1481d5c62bcd"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xa}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xd}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0xe2d63ee0}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8001}, @NL80211_BAND_LC={0x8, 0x5, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x20, 0x1, @random="637e173dbe122584e7afdbfe2060a26522d73a30c2d6050709a16535"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="67c079415781"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x9, 0x1, @random="79cb54b0a8"}]}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xd4}]}, 0x198}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) r7 = socket$kcm(0x10, 0x5, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.704455731s ago: executing program 8 (id=1933): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.659773963s ago: executing program 2 (id=1934): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x20040000, 0x0, 0x2, 0x10004000, 0xb, 0x0, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x4}]}, 0x34}}, 0x240008c0) 1.573734785s ago: executing program 8 (id=1935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x50}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, r10, 0xb97534d5fe9704cf, 0x70bd24, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x8008) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket(0x400000000010, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x50}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, r10, 0xb97534d5fe9704cf, 0x70bd24, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x8008) (async) 344.634402ms ago: executing program 6 (id=1936): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}], {0x14}}, 0x3c}}, 0x0) 337.378744ms ago: executing program 5 (id=1937): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x78) socket(0x2b, 0x80801, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) (async) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x78) (async) 285.056324ms ago: executing program 2 (id=1938): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x151, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @void, {@mpls_mc={0x8848, {[{0xffff5}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6000}, {0x1}], @ipv4=@tcp={{0x26, 0x4, 0x0, 0x1, 0x12f, 0x67, 0x0, 0x3, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast, {[@timestamp={0x44, 0x28, 0x93, 0x0, 0x1, [0x7, 0x2, 0x400, 0x4, 0x5, 0x6, 0x5, 0x3, 0x9]}, @ssrr={0x89, 0x17, 0x7, [@multicast1, @local, @remote, @local, @rand_addr=0x64010101]}, @rr={0x7, 0x13, 0xd6, [@private=0xa010100, @multicast2, @rand_addr=0x64010100, @rand_addr=0x64010100]}, @lsrr={0x83, 0x17, 0x76, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x14}, @remote]}, @ssrr={0x89, 0x1b, 0xeb, [@rand_addr=0x64010100, @local, @rand_addr=0x64010100, @rand_addr=0x64010101, @broadcast, @multicast1]}]}}, {{0x4e23, 0x4e22, r0, r1, 0x0, 0x0, 0xb, 0x20, 0x2, 0x0, 0x7, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0xf, 0xa, 0x1}, @fastopen={0x22, 0x6, "4ae1c85b"}, @exp_smc={0xfe, 0x6}]}}, {"0cf629ef89adfb079934645e11296bbabac85f394535e4d86fb6e1b1e6e2d2e291d0e94087e6fb7b5a8d93c16f2abc48d6978d8de524c8261d1de90a06d94c73afd6bf94b6ffce084890586218aa21f0ce8c4ab70054e07e636b57f6ba3914efda17c5643104a00d48cc52"}}}}}}}, &(0x7f0000000200)={0x1, 0x1, [0x884, 0xaeb, 0xf56, 0x74e]}) r2 = accept(0xffffffffffffffff, &(0x7f0000000240)=@un=@abs, &(0x7f00000002c0)=0x80) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb4, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) syz_extract_tcp_res$synack(&(0x7f0000000600), 0x1, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x238, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x491}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x16}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2ed}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x600000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x832e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8dc}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6000000}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x800}, 0x4008015) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a40)={'erspan0\x00', &(0x7f0000000980)={'sit0\x00', 0x0, 0x7800, 0x7800, 0xbfd5, 0x3, {{0x27, 0x4, 0x3, 0x3a, 0x9c, 0x66, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@noop, @timestamp={0x44, 0x24, 0x6, 0x0, 0xe, [0x3, 0x4, 0x2, 0x1, 0x8, 0x9, 0x0, 0x1]}, @noop, @timestamp_addr={0x44, 0x34, 0xf1, 0x1, 0x1, [{@private=0xa010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@remote, 0x7}, {@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xfffffeff}]}, @ssrr={0x89, 0x1b, 0x25, [@empty, @private=0xa010101, @private=0xa010100, @loopback, @empty, @multicast1]}, @ssrr={0x89, 0x13, 0x84, [@multicast2, @multicast1, @remote, @private=0xa010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl0\x00', r6, 0x29, 0xc, 0x10, 0x4, 0x23, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x7800, 0x10, 0x9, 0xffff34d3}}) syz_extract_tcp_res(&(0x7f0000000b40), 0xb3, 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x120, r7, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x10c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e9f}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000090}, 0x4010) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r2) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, r8, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_SSID={0x11, 0x34, @random="ffdce794c3071dc24587914716"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b5f07a5e87e9"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r9, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000001040)="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") syz_extract_tcp_res$synack(&(0x7f0000001140), 0x1, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r10, 0x1, 0x1, &(0x7f0000001180)={0x4}, 0x4) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000013c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001200)={0x160, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa4, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffe11}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xae}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa930}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x189e}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff678}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x88, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffe}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffff01}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ec4b65c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xee7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040001) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r9) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r12, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0d0}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000001540)=0x8, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r11, 0x0, 0x487, &(0x7f0000001580), &(0x7f00000015c0)=0x30) 277.332066ms ago: executing program 7 (id=1939): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) bind$ax25(r2, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto$ax25(r2, 0x0, 0x0, 0x40, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x3d) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r2, 0x9, 0xcc5, 0x4}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r5, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x3, 0x0, {0xb3, 0x3, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x6, 0x4, 0x74}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 221.723498ms ago: executing program 2 (id=1940): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c2300a400000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000280), 0x0, 0x40800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="b700d4eb8b7520aca55e58b2f7e64bfc727fa97d555dcfa0afd38b3f85fe87c70461e82e4bce831edcd222cfcb1ca703dd67698b2531bc66b581d8fb3195301d17dff71a526e97430ad2f1083eea84e49a45365087ab087dbacd89cef3369e02407a588d264e0777255fec0ae39c3eb895186a60422abadf74d52fac25467f5d9149cfd61d69b575924cad9af6cceb04d60d4f1f4cae42fd", 0x98) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x2021) setsockopt(r1, 0x100010, 0x100, &(0x7f0000000600)="c889189ee666c9c328bf0083b4ad3905a5e891de6c0a903bc271351bcb3a3992ee590852c99c1c7d2f5da4031a08258266f63c3618304b35b6dbd6ea36dd92a2b2e5fa8472b21ae900f3a172b5b07211603e77ffe34acae43543e3bd48bbb0188ec5c86d94a26715783bf91f63dfee75a58be27a897c164b85beffb04a753ec9618f66d2048e0fd92e3ea53e656f1e31b95733d192ab5fde6406fcb026b9b311e678da410f02753475afd2525d99d8e6826cab264107fc494e", 0xb9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0xe7f}, 0x1c) listen(r3, 0x803) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "abf400", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbffffffff00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7cca05104dc5d2ffa3f58af44f4723d6d0647cf120ec8e6c9606e7e60bfcc6d51a1933b3b87c377e389ffc7a42c6850ee25db8216f061487d102247e90992f7881cab1915b2cb4e2dd330b69f908d3c5c83272a7b096885a6cc085870b4981b72b34d5e0118911ea64e2f0cbbbfce49dbf600fdc06491a81e3be00c8d664f7018da96aabc2d0605ccf1fafca292c8004de18380d570dedf9de5deeae7fb55e6c0542029707834d3b71a51e219846d8b375b6ecf475a66dda831367129b4344afb7bcaa3f527972ba78239cf62e8ad73a1c5f425f2837e4f6b92cb91e5c874fdb1db0e5dd0846fb6115eb20a488ee5f"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0xbc, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "14ad6a095190c1044f0be1e5a8d113fa8bbbaab2bdabb60bc6a4dc748853b0354a850192093aa23f2d49a9050c1554df71095c6c7d7d10c5df340a06d334204adcb24b9d588d33f1a655b400b36f8d3b07b28be36f84a65db5f5568a478a7b3eab381ba4cc296454b4d81c52eba8aa9ae123161bcf7556c61fb94dbe9a7249309246eee65f8c193275ce4396b31dbde94a1f64ba652ce4"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008800) 105.359968ms ago: executing program 8 (id=1941): ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x9b, 0x30}, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10) (async) socketpair(0x1e, 0x3, 0xffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newlinkprop={0x28, 0x6c, 0x500, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x840, 0x1104}, [@IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) (async, rerun: 64) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @private=0xa010102}, 0x10) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81f}, {}, {}, [@jmp={0x5, 0x0, 0x3, 0x4, 0xa, 0xfffffffffffffff8, 0x10}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @ldst={0x0, 0x2, 0x2, 0x1, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x2, 0x30, &(0x7f0000000440)=""/48, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x2, 0x3, 0x7, 0x6}, {0x3, 0x2, 0x4, 0x4}, {0x3, 0x1, 0xd, 0x8}, {0x3, 0x2, 0x1, 0x13}, {0x1, 0x3, 0x3, 0x1}, {0x0, 0x2, 0x8, 0x4}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000680)=r4}, 0x20) setsockopt(r0, 0x8, 0xe0e1, &(0x7f0000000700)="4fb03a61b4b9dcebe5b5de59d988037172e2fdd455e77a327c4f55fd4d3bb9972e75e9527539962e", 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x40, 0x80, 0xc, 0x200, {{0xa, 0x4, 0x1, 0x8, 0x28, 0x64, 0x0, 0x2, 0x29, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x13, 0xfa, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x33}, @local, @remote]}]}}}}}) bind(r1, &(0x7f0000000800)=@xdp={0x2c, 0x3, r6, 0x1e}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000880)={0xa, 0x4e24, 0x6d9, @mcast1, 0xa}, 0x1c, &(0x7f0000000b40)=[{&(0x7f00000008c0)="05e1f0f46d1ed8d669977dd9489cdba3f57c45650816189bc7ecb49f8909bda4a3f6034c9a103384a0ba74b0aa83ba3c4c21dcaa0adb5103a2e16bf03ff2fcc4f562e47ee385ba8d4ba091b3b9388be449bc7a70e339b380a8a189895fbc28cbb536403824aa74ddf32f2ebb3c06e2d7ab4a65601c34a60613", 0x79}, {&(0x7f0000000940)="547b2dcc05b70d972d6702640fea92515ac93f4a7a359ab672a7763191c5086e050e794d618112ac4fa67b1374279e21473bb5d0cb0bad638d0938984634e4809fdab9f670230a2f6daf", 0x4a}, {&(0x7f00000009c0)="00004765413c844636974cc5ee85341ca95418f69b020bce222c7f5fe77910a0095eb5f1482933e97e8496fb96050725a526b9a6d5112ae298a050792e7c679b9837d9c0d97f2d97df142a0d22a413e76b1dc1f7a3fa073b5a175d609df0978b658eebac2be0d258fd632494632d457a5967d20e45c771cbcf3d4e77ec73486847c94a090fc6279a8d89f755955e31da5846a87a172299c78618836d129d58c5355b7cf8a3c024672bf956d5e7e29d2ca4699070f5e3cdbd6129be39a5371878f6c2ca9f3bf6", 0xc6}, {&(0x7f0000000ac0)="0c0ae56921999384d3e4c793606d81f26465a5026942ad1e56d7fa49287952f8a4cbd8c5ba70f3e91b8896050863f300455a364202d88444087edf6db34ca64dfc1112aac0c2ef52c461d02563dce4e214e36e5c", 0x54}], 0x4, &(0x7f0000000b80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}], 0x18}, 0x4000000) (async, rerun: 64) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000c00)={0x11, 0xf6, r6, 0x1, 0x6, 0x6, @multicast}, 0x14) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) (async, rerun: 32) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000c80)=@req={0x28, &(0x7f0000000c40)={'veth0_macvtap\x00', @ifru_flags=0x2000}}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000d00)={0x0, 0x3c, &(0x7f0000000cc0)=[@in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @local}]}, &(0x7f0000000d40)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000d80)={r8, 0x8}, &(0x7f0000000dc0)=0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={r4, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f0000001f80)=[{}, {}], 0x10, 0x10, &(0x7f0000001fc0), &(0x7f0000002000), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x1, 0x7, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000e40)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e80)=""/4096, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e80)={0x0, 0xe, 0x401, 0x6}, 0x10, r9, r4, 0x5, 0x0, &(0x7f00000021c0)=[{0x4, 0x2, 0x8, 0x1}, {0x0, 0x2, 0x5, 0x5}, {0x1, 0x2, 0xc, 0x7}, {0x3, 0x1, 0xb, 0x6}, {0x2, 0x3, 0x5, 0x8}], 0x10, 0x8}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002640)={&(0x7f00000024c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8f, 0x8f, 0x5, [@func={0x6, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x200}}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x2}, @datasec={0xf, 0x4, 0x0, 0xf, 0x3, [{0x1, 0x8, 0x10001}, {0x5, 0xd, 0x9}, {0x3, 0x2, 0x7}, {0x1, 0x482b, 0x2}], "fdcea9"}, @var={0xf, 0x0, 0x0, 0xe, 0x3}, @volatile={0xd, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x5f, 0x6f]}}, &(0x7f0000002580)=""/177, 0xad, 0xb1, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002740)={0x6, 0x20, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x7, 0x1, 0x2, 0x1, 0x8, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @generic={0x5, 0x2, 0x6, 0x76, 0x847}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x747}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4b6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x1, 0xb, 0x2, 0x4, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000002440)='GPL\x00', 0x4, 0x24, &(0x7f0000002480)=""/36, 0x40f00, 0x40, '\x00', r6, 0x25, r11, 0x8, &(0x7f0000002680)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000026c0)=[{0x4, 0x1, 0x7, 0x3}, {0x3, 0x1, 0x9, 0x2}, {0x0, 0x5, 0xa}, {0x5, 0x5, 0xf, 0xa}, {0x1, 0x2, 0x5, 0x1}], 0x10, 0x6}, 0x94) (async) accept4$inet6(r2, 0x0, &(0x7f0000002800), 0x800) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)=@getpolicy={0x70, 0x15, 0x800, 0x70bd25, 0x25dfdbfb, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0xffff, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x4}, 0x6e6bb7, 0x2}, [@extra_flags={0x8, 0x18, 0x7d3}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @etimer_thresh={0x8, 0xc, 0x4}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008802) 103.411023ms ago: executing program 2 (id=1942): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r3, 0x1}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0xffffffffffffff98, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008044}, 0x4000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062019c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe7a}, 0x94) 102.623452ms ago: executing program 6 (id=1943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0000004a00010000010000000000000a"], 0x1c}}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000080)={r5, 0x1, 0x2}) 98.603516ms ago: executing program 5 (id=1944): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r2 = accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3, 0x7, 0x7f, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @loopback}}, 0xa, 0x6, 0x7, 0xffff, 0x100}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000340)={r3, 0x4}, &(0x7f0000000380)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000000000)='GPL\x00', 0xffff44c8, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) 0s ago: executing program 8 (id=1945): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000640)={0x0, 0x80000000}, &(0x7f0000000680)=0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="135e8d738885df6dbea62d", @ANYRES16=r3, @ANYBLOB="080028bd7000fedbdf256b0000000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000000000a000600ffffffffffff00000a001a00ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a0006000802110000010000"], 0x74}, 0x1, 0x0, 0x0, 0x20004405}, 0x440c1) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000000c0)={0x3, @random="5dd2a3d62980"}) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x24004805) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.1.221'. [ 168.097746][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 168.514936][ T6696] syzkaller0: entered promiscuous mode [ 168.525998][ T6696] syzkaller0: entered allmulticast mode [ 169.193570][ T6722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.249783][ T6729] bridge_slave_1: left allmulticast mode [ 169.269091][ T6729] bridge_slave_1: left promiscuous mode [ 169.275035][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.377581][ T6729] bridge_slave_0: left allmulticast mode [ 169.406552][ T6729] bridge_slave_0: left promiscuous mode [ 169.419690][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.967407][ T6767] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 170.300313][ T6778] sctp: [Deprecated]: syz.2.244 (pid 6778) Use of int in max_burst socket option. [ 170.300313][ T6778] Use struct sctp_assoc_value instead [ 170.360344][ T6784] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 170.739541][ T6804] __nla_validate_parse: 6 callbacks suppressed [ 170.739560][ T6804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.252'. [ 170.788488][ T6810] x_tables: duplicate underflow at hook 2 [ 171.191978][ T6829] syzkaller0: entered promiscuous mode [ 171.197526][ T6829] syzkaller0: entered allmulticast mode [ 171.337840][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 171.368395][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 171.497854][ T6841] syz.3.262: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 171.516861][ T6841] CPU: 0 UID: 0 PID: 6841 Comm: syz.3.262 Not tainted syzkaller #0 PREEMPT(full) [ 171.516889][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.516901][ T6841] Call Trace: [ 171.516909][ T6841] [ 171.516918][ T6841] dump_stack_lvl+0x189/0x250 [ 171.516955][ T6841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.516983][ T6841] ? __pfx__printk+0x10/0x10 [ 171.517012][ T6841] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 171.517040][ T6841] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 171.517071][ T6841] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 171.517102][ T6841] warn_alloc+0x214/0x310 [ 171.517140][ T6841] ? __pfx_warn_alloc+0x10/0x10 [ 171.517182][ T6841] ? __get_vm_area_node+0x28f/0x300 [ 171.517211][ T6841] ? packet_set_ring+0x6f3/0x2120 [ 171.517235][ T6841] __vmalloc_node_range_noprof+0x690/0x12d0 [ 171.517299][ T6841] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 171.517331][ T6841] ? alloc_pages_mpol+0x3cd/0x4a0 [ 171.517354][ T6841] ? packet_set_ring+0x6f3/0x2120 [ 171.517373][ T6841] vzalloc_noprof+0xb2/0xf0 [ 171.517401][ T6841] ? packet_set_ring+0x6f3/0x2120 [ 171.517422][ T6841] packet_set_ring+0x6f3/0x2120 [ 171.517464][ T6841] ? __pfx_packet_set_ring+0x10/0x10 [ 171.517517][ T6841] ? _copy_from_user+0x94/0xb0 [ 171.517549][ T6841] packet_setsockopt+0xc5a/0x12c0 [ 171.517584][ T6841] ? __pfx_packet_setsockopt+0x10/0x10 [ 171.517616][ T6841] ? file_init_path+0x3b/0x590 [ 171.517655][ T6841] ? aa_sk_perm+0x81e/0x950 [ 171.517689][ T6841] ? __pfx_aa_sk_perm+0x10/0x10 [ 171.517719][ T6841] ? aa_sock_opt_perm+0xff/0x1b0 [ 171.517754][ T6841] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 171.517774][ T6841] ? __pfx_packet_setsockopt+0x10/0x10 [ 171.517807][ T6841] do_sock_setsockopt+0x17c/0x1b0 [ 171.517834][ T6841] __x64_sys_setsockopt+0x13f/0x1b0 [ 171.517861][ T6841] do_syscall_64+0xfa/0xfa0 [ 171.517888][ T6841] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.517915][ T6841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.517935][ T6841] ? clear_bhb_loop+0x60/0xb0 [ 171.517960][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.517980][ T6841] RIP: 0033:0x7f7aec38f6c9 [ 171.518006][ T6841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.518022][ T6841] RSP: 002b:00007f7aed212038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.518043][ T6841] RAX: ffffffffffffffda RBX: 00007f7aec5e6180 RCX: 00007f7aec38f6c9 [ 171.518058][ T6841] RDX: 000000000000000d RSI: 0000000000000107 RDI: 000000000000000b [ 171.518069][ T6841] RBP: 00007f7aec411f91 R08: 000000000000001c R09: 0000000000000000 [ 171.518082][ T6841] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 171.518094][ T6841] R13: 00007f7aec5e6218 R14: 00007f7aec5e6180 R15: 00007ffcdc040288 [ 171.518129][ T6841] [ 171.518142][ T6841] Mem-Info: [ 171.631127][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 171.663935][ T6841] active_anon:5493 inactive_anon:0 isolated_anon:0 [ 171.663935][ T6841] active_file:2632 inactive_file:39883 isolated_file:0 [ 171.663935][ T6841] unevictable:768 dirty:59 writeback:0 [ 171.663935][ T6841] slab_reclaimable:10333 slab_unreclaimable:96192 [ 171.663935][ T6841] mapped:28974 shmem:1356 pagetables:1121 [ 171.663935][ T6841] sec_pagetables:0 bounce:0 [ 171.663935][ T6841] kernel_misc_reclaimable:0 [ 171.663935][ T6841] free:1337444 free_pcp:12895 free_cma:0 [ 171.664013][ T6841] Node 0 active_anon:21972kB inactive_anon:0kB active_file:10528kB inactive_file:159328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115896kB dirty:236kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11792kB pagetables:4344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.664064][ T6841] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.664113][ T6841] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.664179][ T6841] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 171.664225][ T6841] Node 0 DMA32 free:1438252kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21972kB inactive_anon:0kB active_file:10528kB inactive_file:159328kB unevictable:1536kB writepending:236kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:34012kB local_pcp:18912kB free_cma:0kB [ 171.664288][ T6841] lowmem_reserve[]: 0 0 0 0 0 [ 171.664332][ T6841] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.721072][ T6848] netlink: 'syz.4.265': attribute type 5 has an invalid length. [ 171.755775][ T6841] lowmem_reserve[]: [ 171.766052][ T6847] netlink: 'syz.4.265': attribute type 5 has an invalid length. [ 171.800240][ T6841] 0 [ 171.963997][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 171.993874][ T6841] 0 [ 172.008434][ T6847] can: request_module (can-proto-0) failed. [ 172.074214][ T6841] 0 0 0 [ 172.087937][ T6841] Node 1 Normal free:3896164kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17568kB local_pcp:6528kB free_cma:0kB [ 172.150102][ T6841] lowmem_reserve[]: 0 0 0 0 0 [ 172.199009][ T6841] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.255305][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.270'. [ 172.272388][ T6841] Node 0 DMA32: 1228*4kB (UM) 287*8kB (UME) 215*16kB (UM) 241*32kB (UM) 78*64kB (UME) 27*128kB (UME) 13*256kB (UME) 9*512kB (UME) 2*1024kB (ME) 4*2048kB (UM) 340*4096kB (M) = 1437624kB [ 172.364854][ T6841] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 172.417778][ T6841] Node 1 Normal: 173*4kB (UE) 50*8kB (UME) 44*16kB (UME) 59*32kB (UME) 18*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3896164kB [ 172.437537][ T6841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.447704][ T6841] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.458339][ T6841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.468854][ T6841] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.478346][ T6841] 43967 total pagecache pages [ 172.483158][ T6841] 0 pages in swap cache [ 172.489520][ T6841] Free swap = 124996kB [ 172.496646][ T6841] Total swap = 124996kB [ 172.506813][ T6841] 2097051 pages RAM [ 172.516924][ T6841] 0 pages HighMem/MovableOnly [ 172.534552][ T6841] 424119 pages reserved [ 172.538760][ T6841] 0 pages cma reserved [ 172.586108][ T6875] bond1: option miimon: invalid value (18446744073709551585) [ 172.595821][ T6875] bond1: option miimon: allowed values 0 - 2147483647 [ 172.605640][ T6875] bond1 (unregistering): Released all slaves [ 172.612396][ T6881] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.302767][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 173.325217][ T6918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.383114][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 173.618246][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 173.691768][ T6923] veth0_macvtap: left promiscuous mode [ 173.735834][ T6926] netlink: 44 bytes leftover after parsing attributes in process `syz.3.289'. [ 173.941984][ T6934] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 174.066636][ T6949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.705366][ T6980] geneve2: entered promiscuous mode [ 174.870983][ T6991] sctp: [Deprecated]: syz.1.304 (pid 6991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.870983][ T6991] Use struct sctp_sack_info instead [ 175.757388][ T7036] netlink: 232 bytes leftover after parsing attributes in process `syz.4.312'. [ 175.842909][ T7042] netlink: 'syz.4.312': attribute type 2 has an invalid length. [ 175.904832][ T7042] netlink: 44 bytes leftover after parsing attributes in process `syz.4.312'. [ 176.091497][ T7054] syzkaller0: entered promiscuous mode [ 176.127322][ T7054] syzkaller0: entered allmulticast mode [ 176.152494][ T7053] tipc: Started in network mode [ 176.172661][ T7053] tipc: Node identity 26cea2a80267, cluster identity 4711 [ 176.203568][ T7060] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.319'. [ 176.221437][ T7053] tipc: Enabled bearer , priority 0 [ 176.283102][ T7053] tipc: Resetting bearer [ 176.332383][ T7053] tipc: Disabling bearer [ 176.594003][ T7078] syzkaller0: entered promiscuous mode [ 176.643238][ T7078] syzkaller0: entered allmulticast mode [ 176.734873][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.324'. [ 177.147033][ T7100] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.330'. [ 177.866945][ T7149] netlink: 32 bytes leftover after parsing attributes in process `syz.3.341'. [ 177.888566][ T7150] syzkaller1: entered promiscuous mode [ 177.918647][ T7150] syzkaller1: entered allmulticast mode [ 177.961716][ T7150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.343'. [ 178.021236][ T7150] netlink: 'syz.0.343': attribute type 7 has an invalid length. [ 178.049275][ T7150] netlink: 'syz.0.343': attribute type 8 has an invalid length. [ 178.084372][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 178.097973][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 178.291649][ T7173] dvmrp0: entered allmulticast mode [ 178.319333][ T7173] xt_hashlimit: size too large, truncated to 1048576 [ 178.340003][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.350'. [ 178.690053][ T7194] netlink: 'syz.2.356': attribute type 22 has an invalid length. [ 178.728423][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.753558][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.779365][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.798401][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.951066][ T7215] netlink: 'syz.4.359': attribute type 2 has an invalid length. [ 179.327630][ T7229] vlan0: entered promiscuous mode [ 179.333178][ T7229] vlan0: entered allmulticast mode [ 179.369839][ T7229] veth0_vlan: entered allmulticast mode [ 179.467319][ T7238] Driver unsupported XDP return value 0 on prog (id 78) dev N/A, expect packet loss! [ 179.647589][ T7244] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 180.017320][ T7266] vlan2: entered promiscuous mode [ 180.022928][ T7266] hsr_slave_1: entered promiscuous mode [ 180.028871][ T7266] vlan2: entered allmulticast mode [ 180.034875][ T7266] hsr_slave_1: entered allmulticast mode [ 180.833385][ T7308] netlink: 'syz.4.387': attribute type 10 has an invalid length. [ 180.849072][ T7308] __nla_validate_parse: 8 callbacks suppressed [ 180.849088][ T7308] netlink: 224 bytes leftover after parsing attributes in process `syz.4.387'. [ 180.877647][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 180.900351][ T7307] netlink: 'syz.4.387': attribute type 10 has an invalid length. [ 180.908401][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.386'. [ 180.915499][ T7307] netlink: 224 bytes leftover after parsing attributes in process `syz.4.387'. [ 180.967110][ T7304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.205922][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'. [ 181.549300][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.394'. [ 181.623065][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 181.628804][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 181.750907][ T7351] macvlan2: entered promiscuous mode [ 181.756640][ T7351] macvlan2: entered allmulticast mode [ 181.763167][ T7351] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 181.908699][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 181.967707][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 182.126287][ T7369] netlink: 'syz.0.403': attribute type 4 has an invalid length. [ 182.140986][ T7365] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 182.272369][ T7365] bond1: (slave geneve2): making interface the new active one [ 182.323603][ T7365] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 182.365654][ T154] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 182.431931][ T154] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 182.454059][ T154] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 182.498048][ T154] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 182.777504][ T7407] bond0: entered promiscuous mode [ 182.805355][ T7407] bond_slave_0: entered promiscuous mode [ 182.836337][ T7407] bond_slave_1: entered promiscuous mode [ 182.874330][ T7407] batadv0: entered promiscuous mode [ 182.913931][ T7407] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 183.439803][ T7439] bridge0: port 3(team0) entered disabled state [ 183.687749][ T7439] team0 (unregistering): left allmulticast mode [ 183.695030][ T7439] team_slave_0: left allmulticast mode [ 183.700890][ T7439] team_slave_1: left allmulticast mode [ 183.706562][ T7439] team0 (unregistering): left promiscuous mode [ 183.712953][ T7439] team_slave_0: left promiscuous mode [ 183.718618][ T7439] team_slave_1: left promiscuous mode [ 183.727723][ T7439] bridge0: port 3(team0) entered disabled state [ 183.742879][ T7439] team0 (unregistering): Port device team_slave_0 removed [ 183.755858][ T7439] team0 (unregistering): Port device team_slave_1 removed [ 183.794758][ T7459] pim6reg1: entered promiscuous mode [ 183.800271][ T7459] pim6reg1: entered allmulticast mode [ 184.102328][ T7469] netem: incorrect ge model size [ 184.107709][ T7469] netem: change failed [ 184.121910][ T7467] netlink: 'syz.0.430': attribute type 1 has an invalid length. [ 184.131020][ T7467] nbd: error processing sock list [ 184.136508][ T7467] block nbd0: shutting down sockets [ 184.141854][ T7472] netem: incorrect ge model size [ 184.166189][ T7472] netem: change failed [ 184.346982][ T7485] lo: entered allmulticast mode [ 184.564042][ T7501] netlink: 'syz.4.437': attribute type 10 has an invalid length. [ 184.566699][ T7492] syzkaller0: entered promiscuous mode [ 184.580420][ T7492] syzkaller0: entered allmulticast mode [ 184.620615][ T7501] team0: Port device geneve0 added [ 185.946159][ T7527] __nla_validate_parse: 13 callbacks suppressed [ 185.946179][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 186.029962][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.047389][ T7505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.201157][ T7534] netlink: 'syz.4.445': attribute type 10 has an invalid length. [ 186.212397][ T7534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.445'. [ 186.217015][ T7510] geneve2: entered promiscuous mode [ 186.227325][ T7510] geneve2: entered allmulticast mode [ 186.257625][ T7523] bridge_slave_0: left allmulticast mode [ 186.264624][ T7523] bridge_slave_0: left promiscuous mode [ 186.280084][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.318522][ T7523] bridge_slave_1: left allmulticast mode [ 186.337506][ T7523] bridge_slave_1: left promiscuous mode [ 186.343537][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 186.343883][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.374112][ T7523] bond0: (slave bond_slave_0): Releasing backup interface [ 186.384650][ T7523] bond0: (slave bond_slave_1): Releasing backup interface [ 186.398829][ T7523] team0: Port device team_slave_0 removed [ 186.417126][ T7523] team0: Port device team_slave_1 removed [ 186.424497][ T7523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.432067][ T7523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.441044][ T7523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.448470][ T7523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.465027][ T7523] bond1: (slave geneve2): Releasing active interface [ 186.502928][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.539017][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.558839][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 186.575042][ T7534] dummy0: entered promiscuous mode [ 186.607760][ T7534] team0: Port device dummy0 removed [ 186.613856][ T7534] bridge0: port 3(dummy0) entered blocking state [ 186.622345][ T7534] bridge0: port 3(dummy0) entered disabled state [ 186.629802][ T7534] dummy0: entered allmulticast mode [ 186.646935][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.657949][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.669733][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 186.747755][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.778999][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.806479][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 186.835864][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.881742][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.907598][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 187.004084][ T7556] bridge2: entered promiscuous mode [ 187.011418][ T7556] bridge2: entered allmulticast mode [ 187.093090][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 187.102496][ T7560] netlink: 'syz.2.452': attribute type 3 has an invalid length. [ 187.119321][ T7566] netlink: 10 bytes leftover after parsing attributes in process `syz.1.454'. [ 187.139037][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 187.149792][ T1147] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 187.167256][ T1147] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 187.369451][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 187.687448][ T7592] syzkaller0: entered promiscuous mode [ 187.724454][ T7592] syzkaller0: entered allmulticast mode [ 187.833304][ T7597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.846366][ T1147] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 187.920763][ T7611] bond_slave_0: entered promiscuous mode [ 187.926751][ T7611] bond_slave_1: entered promiscuous mode [ 187.933530][ T7611] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 187.963498][ T7611] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 188.665419][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.472'. [ 188.980274][ T7670] netlink: zone id is out of range [ 188.993786][ T7670] netlink: zone id is out of range [ 189.000004][ T7670] netlink: zone id is out of range [ 189.005219][ T7670] netlink: zone id is out of range [ 189.010514][ T7670] netlink: zone id is out of range [ 189.015789][ T7670] netlink: del zone limit has 4 unknown bytes [ 189.497279][ T7685] netlink: 'syz.4.482': attribute type 1 has an invalid length. [ 189.536994][ T7687] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 189.580536][ T7694] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 189.588975][ T7685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.627823][ T7697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.635210][ T7697] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 189.657338][ T7697] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 189.735655][ T7694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.951358][ T7711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.486'. [ 189.982791][ T7718] Bluetooth: MGMT ver 1.23 [ 190.103865][ T7711] tipc: Enabling of bearer rejected, failed to enable media [ 190.218154][ T7730] netlink: 1 bytes leftover after parsing attributes in process `syz.0.491'. [ 190.237777][ T7730] xt_policy: neither incoming nor outgoing policy selected [ 190.729432][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 190.776771][ T7747] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 191.322090][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.503'. [ 191.341357][ T7786] tipc: Enabling of bearer rejected, failed to enable media [ 191.643667][ T7800] x_tables: duplicate underflow at hook 2 [ 191.673902][ T7801] netlink: 'syz.0.507': attribute type 1 has an invalid length. [ 191.901051][ T7812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.513'. [ 192.004449][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 192.042901][ T7809] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 192.106051][ T7809] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 192.129226][ T7809] gretap1: entered promiscuous mode [ 192.147524][ T7809] gretap1: entered allmulticast mode [ 192.190620][ T7827] netlink: 88 bytes leftover after parsing attributes in process `syz.4.517'. [ 192.414745][ T7840] netlink: 'syz.1.521': attribute type 10 has an invalid length. [ 192.437989][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 192.449019][ T7840] veth1_macvtap: left promiscuous mode [ 192.880243][ T7862] x_tables: duplicate entry at hook 2 [ 193.065320][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 193.080441][ T7880] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.531'. [ 193.770297][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 193.786312][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 193.945585][ T7896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.970958][ T7896] bond0: (slave rose0): Enslaving as an active interface with an up link [ 194.030495][ T7892] veth1_to_batadv: entered allmulticast mode [ 194.089247][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 194.106986][ T7911] openvswitch: netlink: Flow key attr not present in new flow. [ 194.258608][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266014][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.345534][ T7925] netlink: 'syz.1.543': attribute type 25 has an invalid length. [ 194.359043][ T5831] IPVS: starting estimator thread 0... [ 194.444046][ T7931] trusted_key: syz.0.545 sent an empty control message without MSG_MORE. [ 194.463031][ T7932] tipc: Started in network mode [ 194.471040][ T7926] IPVS: using max 30 ests per chain, 72000 per kthread [ 194.481322][ T7932] tipc: Node identity ac1414aa, cluster identity 4711 [ 194.516788][ T7932] tipc: Enabled bearer , priority 10 [ 194.974347][ T7949] team1: entered promiscuous mode [ 194.993978][ T7949] team1: entered allmulticast mode [ 195.147106][ T7966] syzkaller0: create flow: hash 1212412602 index 2 [ 195.212847][ T12] syzkaller0: tun_net_xmit 76 [ 195.235631][ T12] syzkaller0: tun_net_xmit 48 [ 195.242845][ T5943] syzkaller0: tun_net_xmit 76 [ 195.247049][ T7971] sctp: [Deprecated]: syz.0.555 (pid 7971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.247049][ T7971] Use struct sctp_sack_info instead [ 195.371598][ T5892] syzkaller0: tun_net_xmit 76 [ 195.413601][ T7960] syzkaller0: delete flow: hash 1212412602 index 2 [ 197.303864][ T5892] tipc: Node number set to 2886997162 [ 197.313242][ T7992] netlink: 'syz.4.558': attribute type 12 has an invalid length. [ 197.322995][ T7992] netlink: 'syz.4.558': attribute type 29 has an invalid length. [ 197.331314][ T7992] __nla_validate_parse: 4 callbacks suppressed [ 197.331328][ T7992] netlink: 148 bytes leftover after parsing attributes in process `syz.4.558'. [ 197.347273][ T7992] netlink: 'syz.4.558': attribute type 3 has an invalid length. [ 197.357751][ T7992] netlink: 'syz.4.558': attribute type 2 has an invalid length. [ 197.366331][ T7992] netlink: 'syz.4.558': attribute type 3 has an invalid length. [ 197.376969][ T7992] netlink: 7 bytes leftover after parsing attributes in process `syz.4.558'. [ 197.421153][ T8023] tipc: Enabled bearer , priority 0 [ 197.561913][ T8023] tipc: Disabling bearer [ 197.630820][ T8044] SET target dimension over the limit! [ 197.876956][ T8062] netlink: 64 bytes leftover after parsing attributes in process `syz.2.569'. [ 198.046340][ T8070] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 198.259560][ T8085] bond1: option mode: unable to set because the bond device has slaves [ 198.288535][ T8085] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.314719][ T8085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.337045][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.574'. [ 198.397345][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 198.461181][ T8085] bond2 (unregistering): Released all slaves [ 198.477555][ T8108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.806742][ T8120] xt_socket: unknown flags 0x50 [ 199.116772][ T8143] netlink: 'syz.0.587': attribute type 4 has an invalid length. [ 199.393130][ T8157] tipc: Enabled bearer , priority 0 [ 199.423168][ T8157] syzkaller0: entered promiscuous mode [ 199.428700][ T8157] syzkaller0: entered allmulticast mode [ 199.472698][ T8157] tipc: Resetting bearer [ 199.572826][ T8150] tipc: Resetting bearer [ 199.673334][ T8150] tipc: Disabling bearer [ 199.817905][ T8182] netlink: 'syz.4.597': attribute type 4 has an invalid length. [ 199.871884][ T8182] netlink: 17 bytes leftover after parsing attributes in process `syz.4.597'. [ 200.115733][ T8198] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 200.355123][ T8204] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 200.401455][ T8204] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 200.416271][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.604'. [ 200.501558][ T8205] gretap2: entered promiscuous mode [ 200.517617][ T8205] bond1: (slave gretap2): making interface the new active one [ 200.530479][ T8205] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 200.571572][ T8198] macvlan2: entered promiscuous mode [ 200.576955][ T8198] macvlan2: entered allmulticast mode [ 200.583928][ T8198] bond1: entered promiscuous mode [ 200.624544][ T8198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 200.647701][ T8198] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 200.690855][ T8198] bond1: left promiscuous mode [ 200.977159][ T8244] xt_TCPMSS: Only works on TCP SYN packets [ 201.083881][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 201.119144][ T8258] x_tables: unsorted entry at hook 1 [ 201.149425][ T8261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.187915][ T8261] netlink: 56 bytes leftover after parsing attributes in process `syz.4.619'. [ 201.197623][ T8261] netlink: 56 bytes leftover after parsing attributes in process `syz.4.619'. [ 201.315305][ T8267] syzkaller0: entered promiscuous mode [ 201.321151][ T8267] syzkaller0: entered allmulticast mode [ 201.355653][ T8267] tipc: Started in network mode [ 201.360989][ T8267] tipc: Node identity 9ab15bfb748f, cluster identity 4711 [ 201.383035][ T8267] tipc: Enabled bearer , priority 0 [ 201.437598][ T8276] netlink: 'syz.3.623': attribute type 7 has an invalid length. [ 201.456434][ T8276] netlink: 'syz.3.623': attribute type 8 has an invalid length. [ 201.480510][ T8272] : entered promiscuous mode [ 201.519204][ T8276] ip6gretap0: entered promiscuous mode [ 201.530470][ T8276] syz_tun: entered promiscuous mode [ 201.559545][ T8276] gretap0: entered promiscuous mode [ 201.576088][ T8276] debugfs: 'hsr1' already exists in 'hsr' [ 201.605919][ T8276] Cannot create hsr debugfs directory [ 201.623894][ T8259] tipc: Resetting bearer [ 201.686906][ T8259] tipc: Disabling bearer [ 201.775136][ T8286] syzkaller0: refused to change device tx_queue_len [ 202.201944][ T8302] syz.1.632 uses old SIOCAX25GETINFO [ 202.210082][ T8301] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 202.262821][ T8301] netlink: 'syz.3.631': attribute type 11 has an invalid length. [ 202.491244][ T8314] __nla_validate_parse: 5 callbacks suppressed [ 202.491265][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 202.495325][ T8316] bond0: option ad_select: unable to set because the bond device is up [ 202.497498][ T8314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.637'. [ 202.534977][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 202.587595][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 202.665479][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 202.763652][ T8330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.642'. [ 202.851973][ T8335] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 203.240349][ T8351] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 203.258398][ T8351] netlink: 224 bytes leftover after parsing attributes in process `syz.4.649'. [ 203.524853][ T8367] netlink: 284 bytes leftover after parsing attributes in process `syz.3.654'. [ 203.889640][ T8390] netlink: 'syz.0.660': attribute type 10 has an invalid length. [ 203.937944][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.978588][ T8390] bridge_slave_1: left allmulticast mode [ 203.987207][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 204.008338][ T8390] bridge_slave_1: left promiscuous mode [ 204.068530][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.094850][ T8404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.663'. [ 204.148319][ T8390] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 204.485826][ T8432] netlink: 'syz.1.665': attribute type 3 has an invalid length. [ 205.668150][ T8466] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 205.710785][ T8464] nbd: device at index 0 is going down [ 206.196996][ T1147] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.229975][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.266496][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.306204][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.410021][ T52] Bluetooth: hci4: command tx timeout [ 206.426329][ T8503] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 206.532936][ T8503] bond2: entered promiscuous mode [ 206.555094][ T8503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.748684][ T8524] bond2: (slave bridge5): making interface the new active one [ 206.756553][ T8524] bridge5: entered promiscuous mode [ 206.762956][ T8524] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 206.990875][ T8544] Bluetooth: MGMT ver 1.23 [ 207.321707][ T8566] rdma_op ffff888030b331f0 conn xmit_rdma 0000000000000000 [ 207.497399][ T8572] syz_tun: entered allmulticast mode [ 207.517853][ T8572] syz_tun: left allmulticast mode [ 207.879473][ T8604] __nla_validate_parse: 12 callbacks suppressed [ 207.879492][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 207.907867][ T8606] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 207.921695][ T8606] netlink: 'syz.1.718': attribute type 1 has an invalid length. [ 207.934166][ T8606] netlink: 228 bytes leftover after parsing attributes in process `syz.1.718'. [ 207.944297][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 208.678459][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.686414][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.909383][ T8642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.928087][ T8642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.062834][ T8642] vlan0: left promiscuous mode [ 209.165212][ T8673] tipc: Failed to remove unknown binding: 66,1,1/0:598309694/598309696 [ 209.179098][ T8673] tipc: Failed to remove unknown binding: 66,1,1/0:598309694/598309696 [ 209.196209][ T8673] openvswitch: netlink: Message has 1 unknown bytes. [ 209.215721][ T8673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.239200][ T8673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.730'. [ 209.249902][ T8673] netlink: 32 bytes leftover after parsing attributes in process `syz.2.730'. [ 209.313705][ T8679] netlink: 'syz.1.731': attribute type 1 has an invalid length. [ 209.398351][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 209.407519][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 209.418069][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 209.428527][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 209.453280][ T1157] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.463673][ T1157] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.602949][ T8680] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.642011][ T8680] bond2: (slave bond3): making interface the new active one [ 209.650217][ T8680] bond2: (slave bond3): Enslaving as an active interface with an up link [ 209.689886][ T8698] Bluetooth: MGMT ver 1.23 [ 209.703267][ T8681] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 209.719457][ T8681] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 209.745752][ T1157] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.768146][ T1157] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.891284][ T8704] netlink: 'syz.4.736': attribute type 14 has an invalid length. [ 210.026273][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 210.988251][ T8762] netlink: 'syz.3.748': attribute type 13 has an invalid length. [ 211.103367][ T8777] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 211.233706][ T8762] veth0_to_bond: left allmulticast mode [ 211.450589][ T8762] bond2: left promiscuous mode [ 211.460245][ T8762] bridge5: left promiscuous mode [ 211.696296][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 211.705350][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 211.712908][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 212.542482][ T8853] block nbd1: Unsupported socket: should be TCP or UNIX. [ 213.066745][ T8837] __nla_validate_parse: 3 callbacks suppressed [ 213.066765][ T8837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.761'. [ 213.125326][ T8855] xt_hashlimit: size too large, truncated to 1048576 [ 213.280518][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.770'. [ 213.436608][ T8873] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 213.507973][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 213.592459][ T8873] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.618070][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 213.680624][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 213.704324][ T8884] team0: entered promiscuous mode [ 213.711663][ T8884] team0: entered allmulticast mode [ 213.853521][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 213.879511][ T8903] syzkaller0: entered promiscuous mode [ 213.888060][ T8903] syzkaller0: entered allmulticast mode [ 213.904542][ T8901] vxcan2: entered allmulticast mode [ 213.927667][ T8903] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 213.932945][ T8906] netlink: 'syz.0.783': attribute type 1 has an invalid length. [ 214.073240][ T8908] bond4: (slave bridge3): making interface the new active one [ 214.083557][ T8908] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 214.147946][ T8912] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.785'. [ 214.158190][ T8914] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.785'. [ 214.172674][ T8912] openvswitch: netlink: Message has 6 unknown bytes. [ 214.208441][ T8914] openvswitch: netlink: Message has 6 unknown bytes. [ 214.711037][ T8941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.795'. [ 215.023663][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 215.123626][ T8956] netlink: 'syz.1.799': attribute type 2 has an invalid length. [ 215.133558][ T8957] netlink: 'syz.1.799': attribute type 2 has an invalid length. [ 215.484785][ T8975] netlink: 'syz.1.804': attribute type 3 has an invalid length. [ 215.566165][ T8980] pim6reg: entered allmulticast mode [ 215.573799][ T8980] pim6reg: left allmulticast mode [ 215.780616][ T8996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.050039][ T9023] netlink: 'syz.0.819': attribute type 4 has an invalid length. [ 216.095479][ T9023] tipc: Enabled bearer , priority 0 [ 216.103337][ T9023] syzkaller0: entered promiscuous mode [ 216.109561][ T9023] syzkaller0: entered allmulticast mode [ 216.138546][ T9023] tipc: Resetting bearer [ 216.160521][ T9019] tipc: Resetting bearer [ 216.200923][ T9019] tipc: Disabling bearer [ 216.240365][ T9031] netlink: 'syz.1.821': attribute type 9 has an invalid length. [ 216.264316][ T9031] netlink: 'syz.1.821': attribute type 6 has an invalid length. [ 216.316688][ T9039] chnl_net:caif_netlink_parms(): no params data found [ 217.368420][ T9078] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 217.431239][ T9085] batman_adv: batadv0: Adding interface: dummy0 [ 217.437567][ T9085] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.441915][ T9090] netlink: 'syz.4.838': attribute type 9 has an invalid length. [ 217.474070][ T9085] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 217.497202][ T9078] bond5: (slave bridge4): making interface the new active one [ 217.505791][ T9078] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 217.639823][ T9096] ip6t_srh: unknown srh match flags 5F28 [ 217.699301][ T9104] netlink: 'syz.4.841': attribute type 11 has an invalid length. [ 217.723535][ T9102] netlink: 'syz.4.841': attribute type 11 has an invalid length. [ 217.737374][ T9107] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 217.892091][ T9120] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 217.938993][ T9120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.110697][ T9127] __nla_validate_parse: 19 callbacks suppressed [ 218.110715][ T9127] netlink: 68 bytes leftover after parsing attributes in process `syz.3.850'. [ 218.351648][ T9150] pim6reg1: entered promiscuous mode [ 218.362296][ T9150] pim6reg1: entered allmulticast mode [ 218.563565][ T9163] dvmrp0: entered allmulticast mode [ 218.579100][ T9169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.866'. [ 218.612075][ T9163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.863'. [ 218.623755][ T9169] netlink: 32 bytes leftover after parsing attributes in process `syz.0.866'. [ 218.665662][ T9170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.863'. [ 218.676651][ T9170] netlink: 96 bytes leftover after parsing attributes in process `syz.2.863'. [ 218.729158][ T9173] batman_adv: batadv0: Adding interface: dummy0 [ 218.745700][ T9173] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.840269][ T9173] batman_adv: batadv0: Interface activated: dummy0 [ 218.890917][ T9179] batadv0: mtu less than device minimum [ 218.907144][ T9179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.919396][ T9179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.931427][ T9179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.943438][ T9179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.955451][ T9179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.068004][ T9194] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 219.099076][ T9194] netlink: 224 bytes leftover after parsing attributes in process `syz.3.874'. [ 219.105300][ T9195] bridge2: entered promiscuous mode [ 219.160842][ T9195] bridge2: entered allmulticast mode [ 219.343812][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 219.373325][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 219.417879][ T9216] net_ratelimit: 15 callbacks suppressed [ 219.417899][ T9216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.539996][ T9225] netlink: 56 bytes leftover after parsing attributes in process `syz.0.881'. [ 220.142233][ T9267] delete_channel: no stack [ 220.232667][ T9272] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 220.508600][ T9252] netlink: 'syz.2.888': attribute type 11 has an invalid length. [ 220.674636][ T9281] netlink: 'syz.0.899': attribute type 11 has an invalid length. [ 220.799274][ T9293] netlink: 'syz.1.902': attribute type 11 has an invalid length. [ 220.947341][ T9304] tipc: Enabled bearer , priority 0 [ 221.026630][ T9290] tipc: Resetting bearer [ 222.415502][ T9290] tipc: Disabling bearer [ 222.448541][ T9315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 222.473753][ T8830] tipc: Node number set to 3997064187 [ 222.593069][ T9315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 222.635668][ T9352] validate_nla: 2 callbacks suppressed [ 222.635686][ T9352] netlink: 'syz.4.918': attribute type 10 has an invalid length. [ 222.659262][ T9352] dummy0: left allmulticast mode [ 222.671088][ T9359] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 222.675106][ T9352] dummy0: left promiscuous mode [ 222.697019][ T9361] netlink: 'syz.4.918': attribute type 10 has an invalid length. [ 222.703346][ T9352] bridge0: port 3(dummy0) entered disabled state [ 222.719807][ T9352] team0: Port device dummy0 added [ 222.725790][ T9359] netlink: 'syz.3.920': attribute type 30 has an invalid length. [ 222.733922][ T9347] ip6gretap0: entered promiscuous mode [ 222.756044][ T9361] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 222.768688][ T9361] team0: Failed to send options change via netlink (err -105) [ 222.776597][ T9361] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 222.785992][ T9361] team0: Port device dummy0 removed [ 222.794101][ T9361] dummy0: entered promiscuous mode [ 222.802236][ T9361] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 222.819173][ T9315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 222.833081][ T9369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.907104][ T9315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 223.022345][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.041286][ T1157] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.057632][ T1157] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.077053][ T1157] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.126693][ T9381] __nla_validate_parse: 12 callbacks suppressed [ 223.126707][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 223.143418][ T9381] chnl_net:caif_netlink_parms(): no params data found [ 223.461152][ T9389] nbd1: detected capacity change from 0 to 127 [ 223.470196][ T5833] block nbd1: Receive control failed (result -32) [ 223.574015][ T9395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.694018][ T9404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.932'. [ 223.762172][ T9408] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 223.869938][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 223.897269][ T9416] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 223.920138][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.965636][ T9421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.936'. [ 224.052637][ T9425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.938'. [ 224.062584][ T9425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.938'. [ 224.415383][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 224.467527][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 224.669186][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 224.777118][ T9466] netlink: 'syz.2.954': attribute type 23 has an invalid length. [ 225.366104][ T9494] netlink: 108 bytes leftover after parsing attributes in process `syz.0.962'. [ 225.385471][ T9477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.753360][ T9509] syzkaller0: entered promiscuous mode [ 225.759178][ T9509] syzkaller0: entered allmulticast mode [ 226.189035][ T9547] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 227.369454][ T9568] netlink: 'syz.1.983': attribute type 16 has an invalid length. [ 227.408698][ T9568] netlink: 'syz.1.983': attribute type 17 has an invalid length. [ 227.523507][ T9568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.716902][ T9598] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.794072][ T9598] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.367082][ T9637] __nla_validate_parse: 10 callbacks suppressed [ 228.367104][ T9637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1002'. [ 228.541184][ T9647] lo: entered promiscuous mode [ 228.573381][ T9647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.601857][ T9651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.663379][ T9651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1006'. [ 228.691356][ T9651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.771061][ T9651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.802237][ T9651] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1006'. [ 228.838431][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 229.237025][ T9683] veth5: entered promiscuous mode [ 229.242634][ T9683] veth5: entered allmulticast mode [ 229.286502][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 229.320928][ T9686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1014'. [ 229.343840][ T9689] tipc: New replicast peer: 255.255.255.255 [ 229.350960][ T9689] tipc: Enabled bearer , priority 10 [ 229.357943][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 229.652450][ T9706] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 229.964523][ T9730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1031'. [ 230.410575][ T9756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.474354][ T9756] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1038'. [ 230.483755][ T8830] tipc: Node number set to 615097000 [ 230.514349][ T9761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.853940][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 231.128513][ T9792] IPVS: set_ctl: invalid protocol: 47 172.20.20.21:20004 [ 231.189916][ T9795] xt_limit: Overflow, try lower: 604147548/4200216962 [ 231.190099][ T9798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.248616][ T9800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.547913][ T9824] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 231.826980][ T9846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.210650][ T9874] netlink: 'syz.2.1068': attribute type 6 has an invalid length. [ 232.431690][ T9891] netlink: 'syz.4.1073': attribute type 1 has an invalid length. [ 232.482571][ T9891] bond6 (unregistering): Released all slaves [ 232.614676][ T9903] netlink: 'syz.1.1077': attribute type 29 has an invalid length. [ 232.813575][ T9916] nbd: device at index 64 is going down [ 232.892712][ T9915] netem: change failed [ 232.985266][ T9926] netlink: 'syz.0.1085': attribute type 30 has an invalid length. [ 233.096861][ T9927] unsupported nlmsg_type 40 [ 233.191069][ T9927] netlink: 'syz.4.1086': attribute type 29 has an invalid length. [ 233.225590][ T9938] netlink: 'syz.4.1086': attribute type 29 has an invalid length. [ 233.239855][ T9927] netlink: 'syz.4.1086': attribute type 29 has an invalid length. [ 233.426918][ T9951] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 233.546084][ T9957] veth0_vlan: mtu less than device minimum [ 233.570784][ T9956] veth0_vlan: mtu less than device minimum [ 233.629685][ T9960] delete_channel: no stack [ 233.635405][ T9960] delete_channel: no stack [ 233.665019][ T9960] delete_channel: no stack [ 233.673818][ T9960] delete_channel: no stack [ 233.678483][ T9960] delete_channel: no stack [ 233.685011][ T9960] delete_channel: no stack [ 233.695174][ T9960] delete_channel: no stack [ 233.716232][ T9960] delete_channel: no stack [ 233.729161][ T9960] delete_channel: no stack [ 233.736106][ T9960] delete_channel: no stack [ 233.747903][ T9960] delete_channel: no stack [ 233.758052][ T9960] delete_channel: no stack [ 233.768204][ T9960] delete_channel: no stack [ 233.778357][ T9960] delete_channel: no stack [ 233.796167][ T9960] delete_channel: no stack [ 233.807264][ T9960] delete_channel: no stack [ 233.819295][ T9960] delete_channel: no stack [ 233.832544][ T9978] __nla_validate_parse: 13 callbacks suppressed [ 233.832565][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 233.838728][ T9960] delete_channel: no stack [ 234.046222][ T9989] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1102'. [ 234.181349][T10004] netlink: 'syz.2.1107': attribute type 32 has an invalid length. [ 234.197199][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 234.257395][T10004] bond2: option coupled_control: invalid value (52) [ 234.302080][T10004] bond2 (unregistering): Released all slaves [ 234.321076][T10010] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 234.330856][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 234.443900][T10008] syzkaller1: entered promiscuous mode [ 234.449559][T10008] syzkaller1: entered allmulticast mode [ 234.856491][T10036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 235.031940][T10056] batadv_slave_1: entered promiscuous mode [ 235.063390][T10054] batadv_slave_1: left promiscuous mode [ 235.152041][T10061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.159705][T10061] IPv6: NLM_F_CREATE should be set when creating new route [ 235.429101][T10073] bond3: option all_slaves_active: invalid value (222) [ 235.439755][T10073] bond3 (unregistering): Released all slaves [ 236.224470][T10123] syzkaller0: entered promiscuous mode [ 236.231299][T10123] syzkaller0: entered allmulticast mode [ 236.678527][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'. [ 237.165768][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'. [ 237.208155][T10164] veth7: entered promiscuous mode [ 237.522592][T10189] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1159'. [ 237.570526][T10189] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1159'. [ 237.656359][T10202] sctp: [Deprecated]: syz.0.1161 (pid 10202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.656359][T10202] Use struct sctp_sack_info instead [ 237.860377][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'. [ 238.060803][T10234] netlink: 'syz.1.1170': attribute type 21 has an invalid length. [ 238.078827][T10234] netlink: 'syz.1.1170': attribute type 1 has an invalid length. [ 238.159937][T10236] tipc: Started in network mode [ 238.167181][T10236] tipc: Node identity 4e34c8b6a213, cluster identity 4711 [ 238.175776][T10236] tipc: Enabled bearer , priority 0 [ 238.192886][T10236] syzkaller0: entered promiscuous mode [ 238.200490][T10236] syzkaller0: entered allmulticast mode [ 238.224941][T10236] netlink: 'syz.2.1173': attribute type 5 has an invalid length. [ 238.255125][T10236] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 238.283916][T10245] set match dimension is over the limit! [ 238.314276][T10235] tipc: Resetting bearer [ 238.363524][T10235] tipc: Disabling bearer [ 238.541198][T10267] netlink: 'syz.4.1182': attribute type 21 has an invalid length. [ 238.972027][T10280] : entered promiscuous mode [ 238.981359][T10284] __nla_validate_parse: 8 callbacks suppressed [ 238.981379][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 239.006142][T10285] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 239.020933][T10285] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1188'. [ 239.141441][T10294] Unsupported ieee802154 address type: 0 [ 239.182798][T10296] Unsupported ieee802154 address type: 0 [ 239.188056][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'. [ 239.202795][T10299] hsr_slave_0: left promiscuous mode [ 239.232006][T10299] hsr_slave_1: left promiscuous mode [ 239.273834][T10307] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1191'. [ 239.350415][T10312] Cannot find del_set index 49151 as target [ 239.387084][ T30] audit: type=1107 audit(1763226399.252:2): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!5&-fN`v(WVN nD' [ 239.448769][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1196'. [ 239.504107][T10315] veth0: entered promiscuous mode [ 239.509360][T10315] veth0: entered allmulticast mode [ 239.666048][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 239.972917][T10349] syz_tun: entered allmulticast mode [ 239.987212][T10347] syz_tun: left allmulticast mode [ 240.259955][T10369] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 240.263757][T10371] netlink: 'syz.3.1212': attribute type 64 has an invalid length. [ 240.280086][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1212'. [ 240.287673][T10369] bond7 (unregistering): Released all slaves [ 240.477093][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 240.499656][T10389] netlink: 'syz.2.1215': attribute type 1 has an invalid length. [ 240.753215][ T8078] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.778968][ T8078] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.882043][ T8078] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.909272][ T8078] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.014262][ T8078] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.030970][ T8078] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.172201][ T8078] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.182960][ T8078] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.243651][ T5848] syz_tun (unregistering): left promiscuous mode [ 241.606133][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'. [ 242.196789][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.205882][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.213641][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.224612][ T8814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.233595][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.241990][ T8814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.252517][ T8814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.261741][ T8814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.279968][ T8814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.287614][ T8814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.471754][ T8814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.495690][ T8814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.509815][ T8814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.528373][ T8814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.547162][ T8814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.547890][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.564988][ T8814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.575313][ T8814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.584272][ T8814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.584306][ T8078] bond0 (unregistering): Released all slaves [ 242.592270][ T8814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.610039][ T8078] bond1 (unregistering): Released all slaves [ 242.627530][ T8078] bond2 (unregistering): (slave bond3): Releasing backup interface [ 242.637848][ T8078] bond2 (unregistering): Released all slaves [ 242.717080][ T8078] bond3 (unregistering): Released all slaves [ 242.848429][ T8078] : left promiscuous mode [ 242.952703][ T8078] : left promiscuous mode [ 243.018805][ T8078] tipc: Disabling bearer [ 243.029835][ T8078] tipc: Left network mode [ 243.464648][T10409] chnl_net:caif_netlink_parms(): no params data found [ 243.561871][T10411] chnl_net:caif_netlink_parms(): no params data found [ 243.706211][T10413] chnl_net:caif_netlink_parms(): no params data found [ 243.723012][T10415] chnl_net:caif_netlink_parms(): no params data found [ 243.742467][T10439] netlink: 'syz.2.1227': attribute type 3 has an invalid length. [ 243.811717][ T8078] batman_adv: batadv0: Interface deactivated: dummy0 [ 243.818487][ T8078] batman_adv: batadv0: Removing interface: dummy0 [ 243.840298][ T8078] veth0_macvtap: left promiscuous mode [ 243.846058][ T8078] veth1_vlan: left promiscuous mode [ 243.851470][ T8078] veth0_vlan: left promiscuous mode [ 244.332432][ T5833] Bluetooth: hci0: command tx timeout [ 244.343303][ T8814] Bluetooth: hci1: command tx timeout [ 244.569475][ T8814] Bluetooth: hci2: command tx timeout [ 244.649239][ T8814] Bluetooth: hci3: command tx timeout [ 244.678358][T10448] macvlan3: entered promiscuous mode [ 244.686043][T10448] macvlan3: entered allmulticast mode [ 244.692102][T10448] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 244.734280][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.742192][T10409] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.749642][T10409] bridge_slave_0: entered allmulticast mode [ 244.763569][T10409] bridge_slave_0: entered promiscuous mode [ 244.815700][T10409] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.824713][T10409] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.832105][T10409] bridge_slave_1: entered allmulticast mode [ 244.839967][T10409] bridge_slave_1: entered promiscuous mode [ 244.988376][T10411] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.996247][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.005480][T10411] bridge_slave_0: entered allmulticast mode [ 245.015655][T10411] bridge_slave_0: entered promiscuous mode [ 245.024591][T10411] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.032107][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.039409][T10411] bridge_slave_1: entered allmulticast mode [ 245.047447][T10411] bridge_slave_1: entered promiscuous mode [ 245.057442][T10409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.069683][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 245.080446][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.088732][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.097764][T10413] bridge_slave_0: entered allmulticast mode [ 245.106165][T10413] bridge_slave_0: entered promiscuous mode [ 245.158387][T10409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.181632][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.190146][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.197434][T10413] bridge_slave_1: entered allmulticast mode [ 245.205342][T10413] bridge_slave_1: entered promiscuous mode [ 245.225077][T10415] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.232279][T10415] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.239523][T10415] bridge_slave_0: entered allmulticast mode [ 245.246748][T10415] bridge_slave_0: entered promiscuous mode [ 245.260789][T10411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.273525][T10411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.296971][T10409] team0: Port device team_slave_0 added [ 245.321261][T10415] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.328636][T10415] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.336433][T10415] bridge_slave_1: entered allmulticast mode [ 245.345302][T10415] bridge_slave_1: entered promiscuous mode [ 245.558399][T10409] team0: Port device team_slave_1 added [ 245.580476][ T8078] IPVS: stop unused estimator thread 0... [ 245.701956][T10413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.722596][T10413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.833349][T10411] team0: Port device team_slave_0 added [ 246.236381][T10409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.244995][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.273544][T10409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.286952][T10409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.294398][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.321790][T10409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.347908][T10411] team0: Port device team_slave_1 added [ 246.356829][T10415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.370162][T10415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.409327][ T8814] Bluetooth: hci1: command tx timeout [ 246.409575][ T5833] Bluetooth: hci0: command tx timeout [ 246.435217][T10413] team0: Port device team_slave_0 added [ 246.509815][T10415] team0: Port device team_slave_0 added [ 246.518225][T10413] team0: Port device team_slave_1 added [ 246.553837][T10415] team0: Port device team_slave_1 added [ 246.575480][T10411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.583203][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.609502][T10411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.627943][T10409] hsr_slave_0: entered promiscuous mode [ 246.634429][T10409] hsr_slave_1: entered promiscuous mode [ 246.640752][T10409] debugfs: 'hsr0' already exists in 'hsr' [ 246.646565][T10409] Cannot create hsr debugfs directory [ 246.652103][ T5833] Bluetooth: hci2: command tx timeout [ 246.686894][T10411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.694318][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.720723][T10411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.739802][ T5833] Bluetooth: hci3: command tx timeout [ 246.760648][ T8078] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 246.770640][ T8078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.811509][T10415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.818500][T10415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.847682][T10415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.859082][T10479] block nbd2: not configured, cannot reconfigure [ 246.867428][T10413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.875178][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.902130][T10413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.934700][T10415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.941757][T10415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.968150][T10415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.987600][T10413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.994827][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.020923][T10413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.104361][ T8078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.234132][T10415] hsr_slave_0: entered promiscuous mode [ 247.242574][T10415] hsr_slave_1: entered promiscuous mode [ 247.248688][T10415] debugfs: 'hsr0' already exists in 'hsr' [ 247.255023][T10415] Cannot create hsr debugfs directory [ 247.265167][T10411] hsr_slave_0: entered promiscuous mode [ 247.271515][T10411] hsr_slave_1: entered promiscuous mode [ 247.277882][T10411] debugfs: 'hsr0' already exists in 'hsr' [ 247.283662][T10411] Cannot create hsr debugfs directory [ 247.309832][ T8078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.344035][T10413] hsr_slave_0: entered promiscuous mode [ 247.351424][T10413] hsr_slave_1: entered promiscuous mode [ 247.358480][T10413] debugfs: 'hsr0' already exists in 'hsr' [ 247.364775][T10413] Cannot create hsr debugfs directory [ 247.477130][ T8078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.571268][T10497] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1242'. [ 247.685257][T10497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.696649][T10497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.706075][T10497] bond0 (unregistering): Released all slaves [ 248.175528][T10409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.186273][T10409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.206492][T10409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.245594][T10409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.321570][T10415] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 248.333494][T10415] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 248.371030][T10415] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 248.385798][T10415] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 248.489061][ T5833] Bluetooth: hci0: command tx timeout [ 248.489070][ T8814] Bluetooth: hci1: command tx timeout [ 248.501486][T10411] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 248.513318][T10411] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 248.546417][T10411] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 248.566193][ T8078] bridge_slave_1: left allmulticast mode [ 248.572366][ T8078] bridge_slave_1: left promiscuous mode [ 248.579294][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.592382][ T8078] bridge_slave_0: left allmulticast mode [ 248.598060][ T8078] bridge_slave_0: left promiscuous mode [ 248.603909][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.628741][ T8078] bridge_slave_1: left allmulticast mode [ 248.634858][ T8078] bridge_slave_1: left promiscuous mode [ 248.641269][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.653611][ T8078] bridge_slave_0: left allmulticast mode [ 248.660345][ T8078] bridge_slave_0: left promiscuous mode [ 248.666108][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.683487][ T8078] bond_slave_0: left promiscuous mode [ 248.690063][ T8078] bond_slave_1: left promiscuous mode [ 248.734563][ T5833] Bluetooth: hci2: command tx timeout [ 248.782823][ T8078] ip6gretap0 (unregistering): left promiscuous mode [ 248.809405][ T5833] Bluetooth: hci3: command tx timeout [ 248.878027][ T8078] gretap0 (unregistering): left promiscuous mode [ 249.228776][ T8078] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 249.398791][ T8078] bond1 (unregistering): (slave macvlan3): Removing an active aggregator [ 249.408499][ T8078] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 249.423284][ T8078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.434348][ T8078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.445409][ T8078] bond0 (unregistering): Released all slaves [ 249.528511][ T8078] bond1 (unregistering): Released all slaves [ 249.610389][ T8078] bond2 (unregistering): Released all slaves [ 249.743919][ T8078] dvmrp0 (unregistering): left allmulticast mode [ 249.772584][ T8078] team0: Port device geneve0 removed [ 249.961053][ T8078] bond0 (unregistering): left promiscuous mode [ 249.967273][ T8078] bond_slave_0: left promiscuous mode [ 249.972872][ T8078] bond_slave_1: left promiscuous mode [ 249.978392][ T8078] dummy0: left promiscuous mode [ 249.985385][ T8078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.995363][ T8078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.005438][ T8078] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 250.016685][ T8078] bond0 (unregistering): Released all slaves [ 250.031012][ T8078] bond1 (unregistering): Released all slaves [ 250.119246][ T8078] bond2 (unregistering): Released all slaves [ 250.197608][ T8078] bond3 (unregistering): Released all slaves [ 250.213274][ T8078] bond4 (unregistering): Released all slaves [ 250.227258][ T8078] bond5 (unregistering): Released all slaves [ 250.243530][T10411] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.452329][T10413] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 250.473793][T10413] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 250.493463][T10413] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 250.517983][T10413] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 250.523092][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1249'. [ 250.554399][T10409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.569351][ T5833] Bluetooth: hci1: command tx timeout [ 250.569357][ T8814] Bluetooth: hci0: command tx timeout [ 250.632484][T10409] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.644791][T10415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.682829][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.690038][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.736072][ T8075] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.743383][ T8075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.779929][T10415] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.786849][T10554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.814791][ T5833] Bluetooth: hci2: command tx timeout [ 250.847003][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.854317][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.889279][ T5833] Bluetooth: hci3: command tx timeout [ 250.894206][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.901974][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.933146][T10411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.028660][T10411] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.064974][T10413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.125163][T10562] syzkaller0: entered promiscuous mode [ 251.132546][T10562] syzkaller0: entered allmulticast mode [ 251.149458][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.156634][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.285046][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.292280][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.341763][T10413] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.404118][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.411319][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.475873][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.483023][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.525657][T10409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.626753][T10415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.667958][T10413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.109720][T10411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.236825][ T8078] tipc: Left network mode [ 253.311860][T10409] veth0_vlan: entered promiscuous mode [ 253.398040][T10409] veth1_vlan: entered promiscuous mode [ 253.457151][ T8078] tipc: Left network mode [ 253.516441][T10409] veth0_macvtap: entered promiscuous mode [ 253.582693][T10409] veth1_macvtap: entered promiscuous mode [ 253.634769][T10413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.745980][T10409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.782998][T10415] veth0_vlan: entered promiscuous mode [ 253.881443][T10409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.904815][T10415] veth1_vlan: entered promiscuous mode [ 253.933453][T10609] tipc: Enabled bearer , priority 0 [ 253.955150][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.976588][T10609] syzkaller0: entered promiscuous mode [ 253.983225][T10609] syzkaller0: entered allmulticast mode [ 253.994672][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.042666][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.052904][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.111465][T10609] tipc: Resetting bearer [ 254.158444][T10608] tipc: Resetting bearer [ 254.174342][T10608] tipc: Disabling bearer [ 254.193456][T10411] veth0_vlan: entered promiscuous mode [ 254.214888][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.222665][ T8078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.231710][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.239395][ T8078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.256448][ T8078] batadv0: left promiscuous mode [ 254.272271][ T8078] hsr_slave_0: left promiscuous mode [ 254.278577][ T8078] hsr_slave_1: left promiscuous mode [ 254.285061][ T8078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.293830][ T8078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.309854][ T8078] veth1_macvtap: left promiscuous mode [ 254.315399][ T8078] veth0_macvtap: left promiscuous mode [ 254.321242][ T8078] veth1_vlan: left promiscuous mode [ 254.326556][ T8078] veth0_vlan: left promiscuous mode [ 255.022620][ T8078] pimreg (unregistering): left allmulticast mode [ 255.304502][ T8078] team0 (unregistering): Port device team_slave_1 removed [ 255.338061][ T8078] team0 (unregistering): Port device team_slave_0 removed [ 255.649378][T10415] veth0_macvtap: entered promiscuous mode [ 255.678248][T10615] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 255.682293][T10617] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 255.700553][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.716646][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.737659][T10411] veth1_vlan: entered promiscuous mode [ 255.804903][T10622] netlink: 'syz.2.1259': attribute type 17 has an invalid length. [ 255.808625][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.814436][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 255.830243][T10622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1259'. [ 255.835203][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.857290][T10622] gretap0: entered promiscuous mode [ 255.864050][T10622] gretap0: left promiscuous mode [ 255.874525][T10415] veth1_macvtap: entered promiscuous mode [ 255.926123][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.936431][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.953900][T10413] veth0_vlan: entered promiscuous mode [ 255.970086][T10413] veth1_vlan: entered promiscuous mode [ 256.001621][T10415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.051838][T10415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.084937][ T1104] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.095547][ T1104] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.141853][ T1104] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.156598][ T1104] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.209472][T10411] veth0_macvtap: entered promiscuous mode [ 256.217811][T10413] veth0_macvtap: entered promiscuous mode [ 256.253922][T10411] veth1_macvtap: entered promiscuous mode [ 256.271448][T10413] veth1_macvtap: entered promiscuous mode [ 256.364391][T10411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.392630][T10411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.405911][T10413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.474264][T10413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.494348][ T8075] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.550901][ T8075] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.574378][ T8075] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.610327][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.618190][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.635488][T10646] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1265'. [ 256.671428][ T8075] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.714071][ T8075] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.740468][ T8075] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.794351][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.795501][ T8075] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.816806][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.818579][ T8078] IPVS: stop unused estimator thread 0... [ 256.833338][ T8075] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.964536][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.997237][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.009074][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.016926][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.082521][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.112125][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.145120][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.164729][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.179902][T10661] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1268'. [ 257.197460][T10661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.325160][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1229'. [ 257.335062][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1229'. [ 257.402411][T10668] syzkaller0: entered promiscuous mode [ 257.421747][T10668] syzkaller0: entered allmulticast mode [ 257.897639][T10699] netlink: 'syz.6.1276': attribute type 4 has an invalid length. [ 257.966244][T10706] netlink: 7064 bytes leftover after parsing attributes in process `syz.8.1279'. [ 258.008621][T10706] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 258.949242][T10744] netlink: 'syz.5.1292': attribute type 29 has an invalid length. [ 258.959554][T10744] netlink: 'syz.5.1292': attribute type 29 has an invalid length. [ 258.968268][T10744] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1292'. [ 259.036032][T10749] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1294'. [ 259.051750][T10749] netlink: 'syz.5.1294': attribute type 11 has an invalid length. [ 259.059902][T10749] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1294'. [ 259.204950][T10756] syzkaller0: entered promiscuous mode [ 259.212622][T10756] syzkaller0: entered allmulticast mode [ 260.709642][T10788] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 260.717196][T10788] team0: Device macvtap1 is already an upper device of the team interface [ 260.751529][T10794] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.788432][T10796] hsr0 speed is unknown, defaulting to 1000 [ 260.795008][T10796] hsr0 speed is unknown, defaulting to 1000 [ 260.798040][T10795] vet0_virt_wifi: renamed from dummy0 (while UP) [ 260.815195][T10796] hsr0 speed is unknown, defaulting to 1000 [ 260.845951][T10796] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 260.876026][T10804] netlink: 'syz.5.1307': attribute type 10 has an invalid length. [ 260.881783][T10796] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.900836][T10804] veth0_virt_wifi: entered allmulticast mode [ 260.924052][T10804] team0: Port device veth0_virt_wifi added [ 260.977170][T10796] hsr0 speed is unknown, defaulting to 1000 [ 260.993430][T10805] syzkaller1: entered promiscuous mode [ 261.001804][T10805] syzkaller1: entered allmulticast mode [ 261.017692][T10796] hsr0 speed is unknown, defaulting to 1000 [ 261.026387][T10796] hsr0 speed is unknown, defaulting to 1000 [ 261.051615][T10796] hsr0 speed is unknown, defaulting to 1000 [ 261.064001][T10796] hsr0 speed is unknown, defaulting to 1000 [ 261.073121][T10796] hsr0 speed is unknown, defaulting to 1000 [ 261.132232][T10813] netlink: 'syz.2.1315': attribute type 39 has an invalid length. [ 261.431006][T10829] ip6t_REJECT: ECHOREPLY is not supported [ 261.838058][T10846] x_tables: duplicate underflow at hook 1 [ 261.946970][T10841] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.954856][T10841] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.055575][T10841] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 262.103678][T10848] __nla_validate_parse: 4 callbacks suppressed [ 262.103697][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1328'. [ 262.365135][T10869] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1332'. [ 262.377916][T10869] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1332'. [ 262.399530][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1332'. [ 262.401945][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1333'. [ 262.419755][T10871] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 262.460020][T10871] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.467968][T10871] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.573017][T10875] tipc: Enabling of bearer rejected, failed to enable media [ 262.601083][T10879] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1334'. [ 262.846942][T10886] bridge: RTM_NEWNEIGH with invalid ether address [ 262.873331][T10893] Cannot find del_set index 0 as target [ 263.207290][T10916] netlink: 'syz.8.1346': attribute type 1 has an invalid length. [ 263.219192][T10916] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1346'. [ 263.278188][T10920] tipc: Enabling of bearer rejected, failed to enable media [ 263.347791][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'. [ 263.397464][T10922] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1348'. [ 263.419973][T10922] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1348'. [ 263.433635][T10928] ipt_REJECT: ECHOREPLY no longer supported. [ 263.590465][ T8078] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 263.592246][T10941] xt_hashlimit: size too large, truncated to 1048576 [ 264.283033][T10958] netlink: 'syz.6.1355': attribute type 1 has an invalid length. [ 264.291671][T10958] netlink: 'syz.6.1355': attribute type 7 has an invalid length. [ 264.324921][T10958] netlink: 'syz.6.1355': attribute type 8 has an invalid length. [ 264.389076][T10958] NCSI netlink: No device for ifindex 65584 [ 264.887425][ T30] audit: type=1107 audit(1763226424.742:3): pid=11000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='UɜjV_$3I&a ~0qɻn'i$aA;!JBy8(,ӷZmcE2ڰu,ݫAC*;Ni3L0v# RNڕo\- ` [ 264.887425][ T30] ' [ 265.275146][T11027] netlink: 'syz.8.1370': attribute type 10 has an invalid length. [ 265.341714][T11027] team0: Port device geneve0 added [ 265.653208][T11049] syzkaller0: entered promiscuous mode [ 265.659380][T11049] syzkaller0: entered allmulticast mode [ 265.686008][T11049] tipc: Started in network mode [ 265.704279][T11049] tipc: Node identity , cluster identity 4711 [ 265.723251][T11049] tipc: Failed to obtain node identity [ 265.728799][T11049] tipc: Enabling of bearer rejected, failed to enable media [ 266.083140][T11090] xt_NFQUEUE: number of total queues is 0 [ 267.204410][T11096] !: renamed from bond_slave_0 (while UP) [ 267.774259][T11128] __nla_validate_parse: 6 callbacks suppressed [ 267.774279][T11128] netlink: 3648 bytes leftover after parsing attributes in process `syz.7.1400'. [ 267.801674][T11128] netlink: 3648 bytes leftover after parsing attributes in process `syz.7.1400'. [ 267.885153][T11138] gtp0: entered promiscuous mode [ 267.900666][T11138] gtp0: entered allmulticast mode [ 268.198713][T11165] netlink: 'syz.7.1409': attribute type 9 has an invalid length. [ 268.314794][T11174] netlink: 'syz.6.1412': attribute type 14 has an invalid length. [ 268.480825][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1414'. [ 268.517661][T11180] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1415'. [ 268.529656][T11183] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1415'. [ 268.547427][T11177] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1414'. [ 268.788621][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1418'. [ 268.874735][T11204] netdevsim netdevsim5: Firmware load for './file0/../file0' refused, path contains '..' component [ 268.920076][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1421'. [ 269.336802][T11236] !: renamed from bond_slave_0 (while UP) [ 269.354796][ T8819] IPVS: starting estimator thread 0... [ 269.397864][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 269.411433][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 269.474168][T11242] IPVS: using max 25 ests per chain, 60000 per kthread [ 269.682976][T11266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.694769][T11265] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 269.896443][T11278] vlan1: entered promiscuous mode [ 269.902078][T11278] bridge0: entered promiscuous mode [ 270.250912][T11296] block nbd2: Unsupported socket: should be TCP or UNIX. [ 270.602368][T11314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.619770][T11314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.818667][T11329] netlink: 'syz.5.1451': attribute type 4 has an invalid length. [ 270.825979][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.849746][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.873047][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.902806][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.190470][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 271.229971][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 271.278565][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 271.302576][ T1104] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 271.700252][T11374] tipc: Started in network mode [ 271.705204][T11374] tipc: Node identity 26afd50bb1a5, cluster identity 4711 [ 271.740255][T11374] tipc: Enabled bearer , priority 0 [ 272.196617][T11399] x_tables: duplicate underflow at hook 2 [ 272.351968][T11397] gretap1: entered promiscuous mode [ 272.357255][T11397] gretap1: entered allmulticast mode [ 272.434649][T11404] netlink: 'syz.5.1480': attribute type 13 has an invalid length. [ 272.445114][T11367] tipc: Disabling bearer [ 272.482885][T11404] gretap0: refused to change device tx_queue_len [ 272.504667][T11404] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.580314][T11411] bridge0: port 3(ipvlan0) entered blocking state [ 272.587158][T11411] bridge0: port 3(ipvlan0) entered disabled state [ 272.594344][T11411] ipvlan0: entered allmulticast mode [ 272.599957][T11411] bridge0: entered allmulticast mode [ 272.608093][T11411] ipvlan0: left allmulticast mode [ 272.614434][T11411] bridge0: left allmulticast mode [ 272.655849][T11414] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 272.665588][T11414] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 272.674924][T11414] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 272.898198][T11424] syzkaller0: entered promiscuous mode [ 272.905222][T11424] syzkaller0: entered allmulticast mode [ 273.167872][T11442] tipc: Started in network mode [ 273.191574][T11442] tipc: Node identity 7ef84d3a5ef1, cluster identity 4711 [ 273.200184][T11433] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 273.210330][T11442] tipc: Enabled bearer , priority 0 [ 273.241771][T11433] hsr0 speed is unknown, defaulting to 1000 [ 273.395332][T11442] tipc: Disabling bearer [ 273.617968][T11474] __nla_validate_parse: 13 callbacks suppressed [ 273.617987][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1496'. [ 273.892163][T11488] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1503'. [ 274.013835][T11493] pim6reg1: entered promiscuous mode [ 274.029922][T11493] pim6reg1: entered allmulticast mode [ 274.030489][T11498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.142000][T11500] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 274.151484][T11500] team0: Device macvtap1 is already an upper device of the team interface [ 274.268595][T11502] syzkaller1: entered promiscuous mode [ 274.276287][T11502] syzkaller1: entered allmulticast mode [ 274.306773][T11507] netlink: 'syz.7.1508': attribute type 1 has an invalid length. [ 274.367309][T11507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.377643][T11507] bond1: (slave bond2): making interface the new active one [ 274.385631][T11507] bond1: (slave bond2): Enslaving as an active interface with an up link [ 274.412370][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1508'. [ 274.442650][T11507] dvmrp0: entered allmulticast mode [ 274.516555][T11514] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 274.537254][T11514] bond1 (unregistering): Released all slaves [ 274.636238][T11522] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1512'. [ 274.965142][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1519'. [ 275.004594][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1519'. [ 275.016686][ T8666] hid-generic 0005:15C2:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 275.281358][T11562] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20001 [ 275.346350][T11565] netlink: 'syz.8.1523': attribute type 21 has an invalid length. [ 275.379078][T11565] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1523'. [ 275.459973][T11572] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 275.493502][T11572] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1528'. [ 275.585924][T11584] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 275.621832][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1526'. [ 275.638024][T11587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1531'. [ 275.653755][T11586] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 276.713596][T11662] syz.8.1552: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 276.748989][T11662] CPU: 0 UID: 0 PID: 11662 Comm: syz.8.1552 Not tainted syzkaller #0 PREEMPT(full) [ 276.749019][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.749037][T11662] Call Trace: [ 276.749046][T11662] [ 276.749056][T11662] dump_stack_lvl+0x189/0x250 [ 276.749096][T11662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.749127][T11662] ? __pfx__printk+0x10/0x10 [ 276.749149][T11662] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 276.749180][T11662] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 276.749213][T11662] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 276.749246][T11662] warn_alloc+0x214/0x310 [ 276.749289][T11662] ? stack_depot_save_flags+0x40/0x860 [ 276.749327][T11662] ? __pfx_warn_alloc+0x10/0x10 [ 276.749361][T11662] ? kasan_save_track+0x3e/0x80 [ 276.749390][T11662] ? __kasan_kmalloc+0x93/0xb0 [ 276.749423][T11662] ? xsk_setsockopt+0x4dc/0x8d0 [ 276.749447][T11662] ? do_sock_setsockopt+0x17c/0x1b0 [ 276.749467][T11662] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 276.749486][T11662] ? do_syscall_64+0xfa/0xfa0 [ 276.749515][T11662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.749546][T11662] __vmalloc_node_range_noprof+0x125/0x12d0 [ 276.749613][T11662] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 276.749650][T11662] ? __kasan_kmalloc+0x93/0xb0 [ 276.749689][T11662] vmalloc_user_noprof+0xad/0xf0 [ 276.749721][T11662] ? xskq_create+0xbf/0x170 [ 276.749750][T11662] xskq_create+0xbf/0x170 [ 276.749782][T11662] xsk_init_queue+0xb0/0x110 [ 276.749813][T11662] xsk_setsockopt+0x4dc/0x8d0 [ 276.749843][T11662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 276.749872][T11662] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.749904][T11662] ? aa_sock_opt_perm+0xff/0x1b0 [ 276.749940][T11662] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 276.749961][T11662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 276.749988][T11662] do_sock_setsockopt+0x17c/0x1b0 [ 276.750015][T11662] __x64_sys_setsockopt+0x13f/0x1b0 [ 276.750044][T11662] do_syscall_64+0xfa/0xfa0 [ 276.750073][T11662] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.750102][T11662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.750123][T11662] ? clear_bhb_loop+0x60/0xb0 [ 276.750149][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.750170][T11662] RIP: 0033:0x7ff58cf8f6c9 [ 276.750189][T11662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.750207][T11662] RSP: 002b:00007ff58dd7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.750230][T11662] RAX: ffffffffffffffda RBX: 00007ff58d1e5fa0 RCX: 00007ff58cf8f6c9 [ 276.750245][T11662] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 276.750258][T11662] RBP: 00007ff58d011f91 R08: 0000000000000004 R09: 0000000000000000 [ 276.750272][T11662] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.750292][T11662] R13: 00007ff58d1e6038 R14: 00007ff58d1e5fa0 R15: 00007ffeed6141b8 [ 276.750330][T11662] [ 276.750417][T11662] Mem-Info: [ 277.065470][T11662] active_anon:7499 inactive_anon:0 isolated_anon:0 [ 277.065470][T11662] active_file:3213 inactive_file:39936 isolated_file:0 [ 277.065470][T11662] unevictable:768 dirty:104 writeback:0 [ 277.065470][T11662] slab_reclaimable:12079 slab_unreclaimable:102184 [ 277.065470][T11662] mapped:31687 shmem:4010 pagetables:1104 [ 277.065470][T11662] sec_pagetables:0 bounce:0 [ 277.065470][T11662] kernel_misc_reclaimable:0 [ 277.065470][T11662] free:1326073 free_pcp:12430 free_cma:0 [ 277.112551][T11662] Node 0 active_anon:30696kB inactive_anon:0kB active_file:12852kB inactive_file:159540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127448kB dirty:416kB writeback:0kB shmem:15304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14252kB pagetables:4276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 277.146413][T11662] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 277.241791][T11662] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.278536][T11662] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 277.304616][T11662] Node 0 DMA32 free:1390688kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30796kB inactive_anon:0kB active_file:12852kB inactive_file:159540kB unevictable:1536kB writepending:416kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:34612kB local_pcp:13532kB free_cma:0kB [ 277.344243][T11662] lowmem_reserve[]: 0 0 0 0 0 [ 277.350649][T11662] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.380716][T11662] lowmem_reserve[]: 0 0 0 0 0 [ 277.386649][T11662] Node 1 Normal free:3897580kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16000kB local_pcp:5600kB free_cma:0kB [ 277.424003][T11662] lowmem_reserve[]: 0 0 0 0 0 [ 277.428969][T11662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 277.442326][T11662] Node 0 DMA32: 1668*4kB (U) 348*8kB (UM) 109*16kB (UE) 23*32kB (UME) 59*64kB (UME) 35*128kB (UM) 30*256kB (UM) 8*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 330*4096kB (UM) = 1390816kB [ 277.466644][T11662] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 277.479938][T11662] Node 1 Normal: 167*4kB (UE) 50*8kB (UME) 44*16kB (UME) 88*32kB (UME) 26*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3897580kB [ 277.520235][T11662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.558214][T11662] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.578453][T11662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.599745][T11662] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.641135][T11662] 45480 total pagecache pages [ 277.657365][T11662] 0 pages in swap cache [ 277.661838][T11662] Free swap = 124996kB [ 277.671989][T11662] Total swap = 124996kB [ 277.676191][T11662] 2097051 pages RAM [ 277.690205][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.709777][T11662] 0 pages HighMem/MovableOnly [ 277.714500][T11662] 424119 pages reserved [ 277.729338][T11662] 0 pages cma reserved [ 277.841832][T11707] netlink: 'syz.2.1562': attribute type 4 has an invalid length. [ 278.203975][T11740] IPv6: sit1: Disabled Multicast RS [ 278.212301][T11740] sit1: entered allmulticast mode [ 278.419714][T11748] tipc: Started in network mode [ 278.430864][T11753] netlink: 'syz.8.1578': attribute type 5 has an invalid length. [ 278.438752][T11748] tipc: Node identity 86b0ceb71a4e, cluster identity 4711 [ 278.446281][T11748] tipc: Enabled bearer , priority 0 [ 278.459543][T11757] netlink: 'syz.8.1578': attribute type 5 has an invalid length. [ 278.477562][T11754] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 278.519686][T11746] tipc: Disabling bearer [ 278.691800][T11775] __nla_validate_parse: 80 callbacks suppressed [ 278.691820][T11775] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1583'. [ 278.837530][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 279.039532][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 279.177987][T11808] bond1: ARP target 1.0.0.0 is already present [ 279.185300][T11808] bond1: option arp_ip_target: invalid value (1) [ 279.202275][T11808] bond1 (unregistering): Released all slaves [ 279.394445][T11823] veth7: entered allmulticast mode [ 279.682887][T11845] x_tables: unsorted entry at hook 2 [ 279.744986][T11844] delete_channel: no stack [ 279.912939][T11851] netem: incorrect gi model size [ 279.918360][T11851] netem: change failed [ 279.973405][T11854] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1609'. [ 280.413372][T11875] netlink: 'syz.6.1616': attribute type 1 has an invalid length. [ 280.490692][T11875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 280.511218][T11878] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1616'. [ 280.614627][T11878] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1616'. [ 280.760024][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1623'. [ 280.774308][T11888] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 280.799895][T11890] netlink: 'syz.2.1622': attribute type 1 has an invalid length. [ 280.814059][T11890] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 280.829425][T11895] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1621'. [ 280.910378][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1626'. [ 280.921181][T11898] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1625'. [ 280.950061][T11901] netlink: 'syz.6.1626': attribute type 29 has an invalid length. [ 280.985576][T11898] TC_ACT_REPEAT abuse ? [ 281.002817][T11901] netlink: 'syz.6.1626': attribute type 29 has an invalid length. [ 281.350618][T11924] : entered promiscuous mode [ 281.698250][T11956] Bluetooth: MGMT ver 1.23 [ 281.811827][ T8827] IPVS: starting estimator thread 0... [ 281.898991][T11968] IPVS: using max 26 ests per chain, 62400 per kthread [ 281.963640][T11982] netlink: 'syz.6.1650': attribute type 23 has an invalid length. [ 282.342445][T12001] veth3: entered promiscuous mode [ 282.637414][T12021] geneve3: entered promiscuous mode [ 282.645073][T12021] geneve3: entered allmulticast mode [ 282.652828][T12020] hsr0 speed is unknown, defaulting to 1000 [ 282.654630][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.684167][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.777020][T12023] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 282.785527][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.865588][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.101193][T12041] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 283.331981][T12055] netlink: 'syz.7.1674': attribute type 1 has an invalid length. [ 283.556828][T12067] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 283.566021][T12067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.608808][T12067] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 283.686221][T12067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.757234][T12077] tipc: Enabled bearer , priority 0 [ 283.777746][T12077] syzkaller0: entered promiscuous mode [ 283.789482][T12077] syzkaller0: entered allmulticast mode [ 283.809898][T12077] tipc: Resetting bearer [ 283.822124][T12076] tipc: Resetting bearer [ 283.852150][T12076] tipc: Disabling bearer [ 283.934090][T12083] pim6reg1: entered promiscuous mode [ 283.940428][T12083] pim6reg1: entered allmulticast mode [ 284.028094][T12089] syzkaller0: entered promiscuous mode [ 284.109271][T12089] syzkaller0: entered allmulticast mode [ 284.161112][T12091] __nla_validate_parse: 12 callbacks suppressed [ 284.161132][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1687'. [ 284.370077][T12110] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1690'. [ 284.629674][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1697'. [ 284.642997][T12128] openvswitch: netlink: Unknown key attributes 2 [ 284.703071][T12129] macvtap1: entered allmulticast mode [ 284.708521][T12129] veth0_macvtap: entered allmulticast mode [ 284.759356][T12137] netlink: 'syz.5.1698': attribute type 4 has an invalid length. [ 284.914872][T12147] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1702'. [ 285.389860][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1711'. [ 285.522649][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1714'. [ 286.158428][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1719'. [ 286.318483][T12229] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1723'. [ 286.390472][T12235] dvmrp0: entered allmulticast mode [ 286.455140][T12239] netlink: 'syz.7.1724': attribute type 19 has an invalid length. [ 286.574363][T12242] tipc: Cannot configure node identity twice [ 286.814374][T12257] netlink: 'syz.6.1729': attribute type 22 has an invalid length. [ 286.828533][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1729'. [ 286.832400][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1730'. [ 286.916186][ T1147] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.945394][ T1147] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.986532][ T1147] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.009708][ T1147] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.050531][T12270] netlink: 'syz.7.1733': attribute type 5 has an invalid length. [ 287.089946][T12270] netlink: 'syz.7.1733': attribute type 6 has an invalid length. [ 287.176887][ T8075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.196593][ T8075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.302616][T12281] openvswitch: netlink: IP tunnel dst address not specified [ 287.385912][T12285] Cannot find del_set index 4 as target [ 287.438647][T12290] openvswitch: netlink: IP tunnel dst address not specified [ 287.711045][T12311] batadv1: entered allmulticast mode [ 287.792962][T12315] netlink: 'syz.7.1746': attribute type 1 has an invalid length. [ 287.805619][T12315] netlink: 'syz.7.1746': attribute type 1 has an invalid length. [ 287.977873][T12326] netlink: 'syz.6.1750': attribute type 4 has an invalid length. [ 288.022017][T12326] netlink: 'syz.6.1750': attribute type 28 has an invalid length. [ 288.043986][T12326] netlink: 'syz.6.1750': attribute type 3 has an invalid length. [ 288.207255][T12331] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 289.010579][T12368] netlink: 'syz.5.1765': attribute type 1 has an invalid length. [ 289.025350][T12368] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 289.328655][T12385] __nla_validate_parse: 18 callbacks suppressed [ 289.328676][T12385] netlink: 212216 bytes leftover after parsing attributes in process `syz.5.1768'. [ 289.383083][T12390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1770'. [ 289.392782][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 289.809148][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1778'. [ 289.926138][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1780'. [ 290.227771][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1785'. [ 290.268177][T12453] netlink: 50 bytes leftover after parsing attributes in process `syz.7.1785'. [ 290.302582][T12453] netlink: 50 bytes leftover after parsing attributes in process `syz.7.1785'. [ 290.517039][T12461] bond0: entered promiscuous mode [ 290.551388][T12461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.615799][T12461] bond0: (slave bridge2): making interface the new active one [ 290.649009][T12461] bridge2: entered promiscuous mode [ 290.656947][T12461] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 290.775986][T12493] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1795'. [ 290.855651][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'. [ 291.570426][T12530] blkio.reset_stats is deprecated [ 291.603531][T12534] validate_nla: 8 callbacks suppressed [ 291.603550][T12534] netlink: 'syz.8.1804': attribute type 30 has an invalid length. [ 291.670839][T12534] bond1: option arp_missed_max: invalid value (0) [ 291.693051][T12534] bond1: option arp_missed_max: allowed values 1 - 255 [ 291.707810][T12534] bond1 (unregistering): Released all slaves [ 292.095132][T12569] tipc: Started in network mode [ 292.104839][T12569] tipc: Node identity 06dd1af2ef93, cluster identity 4711 [ 292.125273][T12569] tipc: Enabled bearer , priority 0 [ 292.141935][T12569] syzkaller0: entered promiscuous mode [ 292.150768][T12569] syzkaller0: entered allmulticast mode [ 292.166483][T12569] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 292.209232][T12569] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 292.234692][T12569] tipc: Resetting bearer [ 292.248102][T12569] netlink: 'syz.8.1816': attribute type 1 has an invalid length. [ 292.272707][T12568] tipc: Resetting bearer [ 292.338737][T12568] tipc: Disabling bearer [ 292.352864][T12584] netlink: 'syz.7.1818': attribute type 33 has an invalid length. [ 293.141151][T12628] netlink: 'syz.5.1834': attribute type 63 has an invalid length. [ 293.613849][T12654] veth9: entered promiscuous mode [ 293.677556][T12657] tipc: Enabling of bearer rejected, media not registered [ 293.725005][T12661] bridge0: entered promiscuous mode [ 293.737677][T12661] syz_tun: entered promiscuous mode [ 293.746071][T12661] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 293.764403][T12661] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 293.788780][T12663] syzkaller0: entered promiscuous mode [ 293.796289][T12663] syzkaller0: entered allmulticast mode [ 293.871196][T12667] netlink: 'syz.2.1847': attribute type 21 has an invalid length. [ 293.921526][T12671] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.092541][T12679] only policy match revision 0 supported [ 294.092563][T12679] unable to load match [ 294.464751][T12696] __nla_validate_parse: 15 callbacks suppressed [ 294.464781][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1857'. [ 294.470219][T12698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1856'. [ 294.693049][T12702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1859'. [ 294.973271][T12705] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1860'. [ 295.647555][T12728] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 295.781328][T12740] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 295.786981][T12736] ip6t_srh: unknown srh invflags 4000 [ 295.816799][T12736] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1874'. [ 295.914993][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1876'. [ 295.951827][T12746] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 296.002900][T12746] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1876'. [ 296.162097][T12766] netlink: zone id is out of range [ 296.167431][T12766] netlink: set zone limit has 4 unknown bytes [ 296.253277][T12776] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1885'. [ 296.486119][T12790] netlink: 'syz.8.1886': attribute type 10 has an invalid length. [ 296.520589][T12790] bridge0: port 3(team0) entered blocking state [ 296.540245][T12790] bridge0: port 3(team0) entered disabled state [ 296.556835][T12790] team0: entered allmulticast mode [ 296.570601][T12790] team_slave_0: entered allmulticast mode [ 296.590220][T12790] team_slave_1: entered allmulticast mode [ 296.607052][T12790] geneve0: entered allmulticast mode [ 296.625533][T12790] team0: entered promiscuous mode [ 296.636499][T12790] team_slave_0: entered promiscuous mode [ 296.650812][T12790] team_slave_1: entered promiscuous mode [ 296.681654][T12790] geneve0: entered promiscuous mode [ 296.872269][T12805] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20000 [ 296.894335][T12805] netlink: 'syz.7.1891': attribute type 6 has an invalid length. [ 296.928464][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1892'. [ 296.965191][T12810] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.978769][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1892'. [ 297.385244][T12822] netlink: 'syz.5.1897': attribute type 32 has an invalid length. [ 297.887613][T12846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.985695][T12851] netlink: 'syz.7.1907': attribute type 29 has an invalid length. [ 297.997201][T12852] netem: invalid attributes len -24 [ 298.023082][T12851] netlink: 'syz.7.1907': attribute type 29 has an invalid length. [ 298.049316][T12851] netlink: 'syz.7.1907': attribute type 11 has an invalid length. [ 298.239752][T12864] netlink: 'syz.7.1912': attribute type 18 has an invalid length. [ 298.253589][T12864] netlink: 'syz.7.1912': attribute type 18 has an invalid length. [ 298.469238][T12884] netlink: 'syz.8.1918': attribute type 1 has an invalid length. [ 298.542137][T12884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.787749][T12908] bond0: invalid ARP target 0.0.0.0 specified for addition [ 298.798464][T12908] bond0: option arp_ip_target: invalid value (0) [ 298.811765][T12906] can: request_module (can-proto-4) failed. [ 298.926221][T12915] syzkaller0: entered promiscuous mode [ 298.934035][T12915] syzkaller0: entered allmulticast mode [ 298.956932][T12915] tipc: Enabled bearer , priority 0 [ 298.967784][T12922] netlink: 'syz.6.1930': attribute type 5 has an invalid length. [ 298.968739][T12915] netlink: del zone limit has 4 unknown bytes [ 298.993340][T12913] tipc: Resetting bearer [ 299.039783][T12924] netlink: 'syz.6.1930': attribute type 11 has an invalid length. [ 300.385906][T12913] tipc: Disabling bearer [ 300.401355][T12922] geneve3: entered promiscuous mode [ 300.406715][T12922] geneve3: entered allmulticast mode [ 300.427710][ T8666] tipc: Node number set to 537480506 [ 300.440238][ T36] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 300.466867][ T36] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 300.488364][ T36] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 300.498181][ T36] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 300.827845][T12973] [ 300.830233][T12973] ====================================================== [ 300.837262][T12973] WARNING: possible circular locking dependency detected [ 300.844303][T12973] syzkaller #0 Not tainted [ 300.848730][T12973] ------------------------------------------------------ [ 300.855757][T12973] syz.6.1943/12973 is trying to acquire lock: [ 300.861833][T12973] ffffffff8f426458 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 300.871158][T12973] [ 300.871158][T12973] but task is already holding lock: [ 300.878524][T12973] ffff8880316bd670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 300.888017][T12973] [ 300.888017][T12973] which lock already depends on the new lock. [ 300.888017][T12973] [ 300.898416][T12973] [ 300.898416][T12973] the existing dependency chain (in reverse order) is: [ 300.907424][T12973] [ 300.907424][T12973] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 300.915418][T12973] lock_acquire+0x120/0x360 [ 300.920444][T12973] _raw_spin_lock_bh+0x36/0x50 [ 300.925730][T12973] nr_rt_device_down+0x12a/0x720 [ 300.931191][T12973] nr_device_event+0x137/0x150 [ 300.936484][T12973] notifier_call_chain+0x1b6/0x3e0 [ 300.942117][T12973] netif_close_many+0x29c/0x410 [ 300.947491][T12973] netif_close+0x158/0x210 [ 300.952434][T12973] dev_close+0x10a/0x220 [ 300.957210][T12973] bpq_device_event+0x377/0x6a0 [ 300.962921][T12973] notifier_call_chain+0x1b6/0x3e0 [ 300.968551][T12973] netif_close_many+0x29c/0x410 [ 300.973926][T12973] netif_close+0x158/0x210 [ 300.978876][T12973] dev_close+0x10a/0x220 [ 300.983651][T12973] bond_setup_by_slave+0x5f/0x3f0 [ 300.989215][T12973] bond_enslave+0x6ca/0x38a0 [ 300.994337][T12973] bond_do_ioctl+0x635/0x9b0 [ 300.999450][T12973] dev_ifsioc+0x90b/0xf00 [ 301.004310][T12973] dev_ioctl+0x7b4/0x1150 [ 301.009162][T12973] sock_do_ioctl+0x22c/0x300 [ 301.014280][T12973] sock_ioctl+0x576/0x790 [ 301.019168][T12973] __se_sys_ioctl+0xfc/0x170 [ 301.024386][T12973] do_syscall_64+0xfa/0xfa0 [ 301.029425][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.035941][T12973] [ 301.035941][T12973] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 301.043768][T12973] lock_acquire+0x120/0x360 [ 301.048798][T12973] _raw_spin_lock_bh+0x36/0x50 [ 301.054090][T12973] nr_rt_device_down+0xa9/0x720 [ 301.059471][T12973] nr_device_event+0x137/0x150 [ 301.064761][T12973] notifier_call_chain+0x1b6/0x3e0 [ 301.070426][T12973] netif_close_many+0x29c/0x410 [ 301.075803][T12973] netif_close+0x158/0x210 [ 301.080749][T12973] dev_close+0x10a/0x220 [ 301.085511][T12973] bpq_device_event+0x377/0x6a0 [ 301.090882][T12973] notifier_call_chain+0x1b6/0x3e0 [ 301.096515][T12973] netif_close_many+0x29c/0x410 [ 301.101891][T12973] netif_close+0x158/0x210 [ 301.106836][T12973] dev_close+0x10a/0x220 [ 301.111596][T12973] bond_setup_by_slave+0x5f/0x3f0 [ 301.117148][T12973] bond_enslave+0x6ca/0x38a0 [ 301.122286][T12973] bond_do_ioctl+0x635/0x9b0 [ 301.127404][T12973] dev_ifsioc+0x90b/0xf00 [ 301.132305][T12973] dev_ioctl+0x7b4/0x1150 [ 301.137175][T12973] sock_do_ioctl+0x22c/0x300 [ 301.142306][T12973] sock_ioctl+0x576/0x790 [ 301.147168][T12973] __se_sys_ioctl+0xfc/0x170 [ 301.152291][T12973] do_syscall_64+0xfa/0xfa0 [ 301.157330][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.163753][T12973] [ 301.163753][T12973] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 301.171756][T12973] validate_chain+0xb9b/0x2140 [ 301.177066][T12973] __lock_acquire+0xab9/0xd20 [ 301.182269][T12973] lock_acquire+0x120/0x360 [ 301.187384][T12973] _raw_spin_lock_bh+0x36/0x50 [ 301.192674][T12973] nr_remove_neigh+0x25/0xe0 [ 301.197798][T12973] nr_add_node+0x1d9f/0x2570 [ 301.202918][T12973] nr_rt_ioctl+0xc12/0xd50 [ 301.207861][T12973] sock_do_ioctl+0xdc/0x300 [ 301.212890][T12973] sock_ioctl+0x576/0x790 [ 301.217856][T12973] __se_sys_ioctl+0xfc/0x170 [ 301.223006][T12973] do_syscall_64+0xfa/0xfa0 [ 301.228215][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.234632][T12973] [ 301.234632][T12973] other info that might help us debug this: [ 301.234632][T12973] [ 301.244858][T12973] Chain exists of: [ 301.244858][T12973] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 301.244858][T12973] [ 301.258697][T12973] Possible unsafe locking scenario: [ 301.258697][T12973] [ 301.266144][T12973] CPU0 CPU1 [ 301.271503][T12973] ---- ---- [ 301.276862][T12973] lock(&nr_node->node_lock); [ 301.281630][T12973] lock(nr_node_list_lock); [ 301.288740][T12973] lock(&nr_node->node_lock); [ 301.296054][T12973] lock(nr_neigh_list_lock); [ 301.300735][T12973] [ 301.300735][T12973] *** DEADLOCK *** [ 301.300735][T12973] [ 301.308880][T12973] 1 lock held by syz.6.1943/12973: [ 301.313997][T12973] #0: ffff8880316bd670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 301.323764][T12973] [ 301.323764][T12973] stack backtrace: [ 301.329651][T12973] CPU: 1 UID: 0 PID: 12973 Comm: syz.6.1943 Not tainted syzkaller #0 PREEMPT(full) [ 301.329672][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.329682][T12973] Call Trace: [ 301.329689][T12973] [ 301.329697][T12973] dump_stack_lvl+0x189/0x250 [ 301.329723][T12973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.329745][T12973] ? __pfx__printk+0x10/0x10 [ 301.329759][T12973] ? stack_trace_save+0x9c/0xe0 [ 301.329785][T12973] print_circular_bug+0x2ee/0x310 [ 301.329808][T12973] check_noncircular+0x134/0x160 [ 301.329830][T12973] validate_chain+0xb9b/0x2140 [ 301.329859][T12973] __lock_acquire+0xab9/0xd20 [ 301.329877][T12973] ? nr_remove_neigh+0x25/0xe0 [ 301.329897][T12973] lock_acquire+0x120/0x360 [ 301.329911][T12973] ? nr_remove_neigh+0x25/0xe0 [ 301.329934][T12973] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 301.329956][T12973] ? nr_remove_neigh+0x25/0xe0 [ 301.329976][T12973] _raw_spin_lock_bh+0x36/0x50 [ 301.330000][T12973] ? nr_remove_neigh+0x25/0xe0 [ 301.330020][T12973] nr_remove_neigh+0x25/0xe0 [ 301.330042][T12973] nr_add_node+0x1d9f/0x2570 [ 301.330062][T12973] ? dev_get_by_name+0x21/0x200 [ 301.330082][T12973] ? dev_get_by_name+0x21/0x200 [ 301.330099][T12973] ? dev_get_by_name+0x21/0x200 [ 301.330117][T12973] ? nr_call_to_digi+0x136/0x1b0 [ 301.330136][T12973] nr_rt_ioctl+0xc12/0xd50 [ 301.330160][T12973] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 301.330177][T12973] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.330205][T12973] ? apparmor_capable+0x137/0x1b0 [ 301.330226][T12973] ? capable+0x89/0xe0 [ 301.330244][T12973] ? nr_ioctl+0x1b1/0x3b0 [ 301.330260][T12973] sock_do_ioctl+0xdc/0x300 [ 301.330282][T12973] ? __pfx_sock_do_ioctl+0x10/0x10 [ 301.330309][T12973] sock_ioctl+0x576/0x790 [ 301.330328][T12973] ? __pfx_sock_ioctl+0x10/0x10 [ 301.330349][T12973] ? __fget_files+0x3a0/0x420 [ 301.330363][T12973] ? __fget_files+0x2a/0x420 [ 301.330379][T12973] ? bpf_lsm_file_ioctl+0x9/0x20 [ 301.330396][T12973] ? __pfx_sock_ioctl+0x10/0x10 [ 301.330415][T12973] __se_sys_ioctl+0xfc/0x170 [ 301.330436][T12973] do_syscall_64+0xfa/0xfa0 [ 301.330458][T12973] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.330480][T12973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.330495][T12973] ? clear_bhb_loop+0x60/0xb0 [ 301.330512][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.330528][T12973] RIP: 0033:0x7f683a78f6c9 [ 301.330543][T12973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.330557][T12973] RSP: 002b:00007f683b59f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.330573][T12973] RAX: ffffffffffffffda RBX: 00007f683a9e6180 RCX: 00007f683a78f6c9 [ 301.330585][T12973] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000007 [ 301.330595][T12973] RBP: 00007f683a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.330605][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.330614][T12973] R13: 00007f683a9e6218 R14: 00007f683a9e6180 R15: 00007ffde2b30a78 [ 301.330633][T12973]