last executing test programs: 4.775514778s ago: executing program 3 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="20ff7f00", @ANYRES16=r1, @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c004) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC], 0xe0}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000003180)={0x0, 0x3f, &(0x7f0000003140)={&(0x7f00000005c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) (async) sendto$inet(r3, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604, 0x3}, 0x10) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmmsg$inet(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) connect$can_bcm(r8, 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x74bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xb, 0x8}, {0x3, 0xfff9}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xfffffffffffffef6) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(r2) 4.254470503s ago: executing program 3 (id=248): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42441, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), r2) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000018373ee4a13098fef81259d4d851535967fc684fc78e6ee268f8ecd6b4cd206034dcc073ea15a1ba3e6abd9d4460db293c6e634523d09b5384e403cc1b94aff1d1dc168e965fa49f003bd5daa7c9dc9f4ea75ea062", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf25110000000c00060001000000010000000500120040000000"], 0x28}, 0x1, 0x0, 0x0, 0x80a0}, 0x20000000) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES16], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x78, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:insmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x4014}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000003c0)='nilfs2_mdt_insert_new_block\x00', r6, 0x0, 0x4}, 0x18) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfe1f) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) (async) connect$can_bcm(r10, 0x0, 0x0) 3.486957056s ago: executing program 3 (id=253): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback={0x20010000}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102399, &(0x7f00000000c0)=0x18fff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}, 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"}) 3.170855314s ago: executing program 2 (id=255): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000000)={0x0, "c25153c8b8185150ed5279721fe84f0d"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001000)={r1, 0x7, 0x1, [0x9, 0x8, 0x3, 0x8, 0x2], [0xda, 0x1, 0x9, 0xc, 0x5, 0xb1, 0x3, 0x0, 0x4, 0xa95, 0x0, 0x1, 0x70c, 0x3, 0x8, 0x7, 0x8, 0x4, 0xfffffffffffff7ba, 0x8, 0x6, 0x3, 0x2, 0x1000, 0x1, 0x8, 0x78, 0x0, 0x8, 0x1ff, 0x8000000000000000, 0x3, 0x0, 0xa, 0x3, 0xe45, 0x3, 0xd, 0x4, 0x5, 0x7, 0x7, 0x7fffffffffffffff, 0x3ff, 0x4, 0xffffffffffffffc0, 0x6, 0x0, 0x7ff, 0x200, 0x2, 0x1, 0x1, 0x1, 0xfffffffffffffff7, 0x5a, 0x2, 0x1, 0x8, 0x7f, 0x8, 0x4, 0xffffffffffffff38, 0x8001, 0x100000001, 0x100, 0x5, 0xb06, 0x2b, 0xfff, 0x8, 0x1, 0x4, 0x1000, 0x0, 0x34, 0x5, 0x4, 0x4, 0xfffffffffffffffb, 0x401, 0x8000, 0x2, 0x2, 0xfffffffffffffb4c, 0x4, 0x4, 0x3, 0x625, 0x8, 0xffffffffffffffff, 0x9, 0x4, 0x67c, 0x34e, 0x2, 0x0, 0x81, 0x7, 0x2, 0xfff, 0xfffffffffffffff9, 0xb15e, 0xfff, 0x7, 0x1, 0x54, 0x80, 0xfffffffffffffffb, 0x9, 0x100, 0x6d7b, 0x4, 0xffffffffffffffff, 0x200, 0x1, 0xd, 0x4, 0x10, 0x2, 0x1000]}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001480)={&(0x7f0000001440)=""/50, 0x32}) r2 = socket$rds(0x15, 0x5, 0x0) recvmsg(r2, &(0x7f00000017c0)={&(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001540)=""/2, 0x2}, {&(0x7f0000001580)=""/30, 0x1e}, {&(0x7f00000015c0)=""/226, 0xe2}], 0x3, &(0x7f0000001700)=""/159, 0x9f}, 0x10100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000018c0), &(0x7f0000001900)}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002ac0)={&(0x7f0000001a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x5}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000001ac0)=""/4096, 0x2c, 0x1000, 0x0, 0x6fe7, 0x10000}, 0x28) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002b40)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002c00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002b80), &(0x7f0000002bc0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002c40), &(0x7f0000002c80)='%pB \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x1a, 0xc, &(0x7f0000001980)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ldst={0x2, 0x2, 0x1, 0x6, 0x2, 0x0, 0x4}], &(0x7f0000001a00)='GPL\x00', 0x401, 0x10, &(0x7f0000001a40)=""/16, 0x40f00, 0x2, '\x00', r3, @fallback=0x34, r6, 0x8, &(0x7f0000002b00)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000002d00)=[r7, r8, r9, 0x1], &(0x7f0000002d40)=[{0x1, 0x3, 0x9, 0x6}, {0x3, 0x1, 0xe, 0xc}, {0x4, 0x4, 0x10, 0xb}], 0x10, 0x8}, 0x94) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e80)={0xa4, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x36}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8000000000000000}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg1\x00'}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2c}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc040}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000041c0)={r10, 0x0, 0x53, 0x8b, &(0x7f0000002fc0)="de55b2ce984b0d1862e32e6c8bfcc752e354d5a46467808aa9f90d5d3c6f4a731147184827c39ec6e27a8936a8df08662d03644bdf7eced635e5dfb5b0ec3f79824d0f3bff78863583c1099cd5077bb92d34cf", &(0x7f0000003040)=""/139, 0x9, 0x0, 0x1000, 0xab, &(0x7f0000003100)="f52b2bf0627d5caf425e66e129fd13d706dd0e8234f29a0619e588ff345d54eca84c530e4b8a7f97c41317e7e791fcf6b1c2fcd8d06a2539be45429208f0e49a55f8744542516a595b0e12d37f96443dfa8d4c98ddf9abf775f56dd22a46bb3307a52b117eace8dd26888e632a757f8bf547c8632abaf93b24edb7dedd5fb96f17df77f9ab856abc1b186f0da1f9406d419cb2827e450345d1125f316aa5fcc7db8b31caf66730f2d114fc08c6dd69df920f8faca39a9b433872b16ae6ae07f9bc4515c022cc70895f6e4d7e459118ca7cb3d10b9fabef4dc4fbb9ba2baa0623348d6ce9c452ee3a7cbc268a0b4f85cd95adc8e59299034ee710bde4dda316ccab30734ff33a9c947633f423400d5cdc21d6c2f32d36ca4b526ea9e479ad233e891cfb4b14d417b58eb46f7039ecd35953efff1cc1c18486a8238ab6bc31ad72bd8c765a52aa4b70a299eb901003a3ba168124191863cb35f9b7632d01401b1d3bc8779eeafb11f1c8859b70f456c77e232abbde43c273ce4e75fb0167e4d64a36067c470fd7306566142093b21e024b7e5a39401f304c102cf306bc868f898d756eafaa12dcfc096e9df86c26c376f83af0949e7b484c56bc9d0d943aca1a680a5e9533640ae7256cf373ff0fcb7d804cb8ff3ee0aadbfcee9ba8cc8485b34fc8b06e48efe095d13af192e129854fcf0dc2e9228ba89f5c96c41d1e09946d968de98c1e9860314f5bff73a012492e1293fd14c725989f031501dcee319d49cc2795e70a0c765e8de91851246eaf550246ef4affaf5fb3958465e95550ee9dbf99cc724d2cfdc0fc0cdda74cc05907b5ee77baaa293fb1d68876a116a1859498e64272879675120d9460988d2b141822fa4a4bac9084012bd75085d0cd48426fca77390669c25a38e2655ce39263db870d33df4cb13511efaba8a6298396b95844f2a07c91898aa81e3fc78653cacd831ac1078ca4bdd471fedb6f23b3e2f67e9d6501134a642673df4b003709ba550fafd2c1c0ee5d450c1323d1515fc83b955fc3b2abc44a66f7145ea849c6c4f3f5ec7b33ed8ef22666e39a23fc87264d2a5a3f8ce089bc9b717092cde3fc7373ffa51d952fb934a369c10d6a594e1943eb57a9be36949521fe72637f227f4968c57ff8a186b6fbc42389a3d27dcf74d28a90b3d90e519e9a2f52aaf0f5a5d5bc336d61b104e62f4ba80dc9c284efd725b3e661c7aee5c5d427097c99e223fd61b56ea8369fbe61c1647c3e44113a4e53a23ff5955f81a83a90e046c1bfbca0a2955fca93fbc7ed49025c6d1c191540d59914838d31f7fca5b4889738b72c2651cfd9680cb9df5dbe8360826dc8c66fe7084c925ff187b6af9df7994b64797a611aa8584444d5be3274e8da4c671ce0048c152b19d0981fc3ac2033b6846f6114b9f09903d1dc115b93eb1b1a2ed84f5268639b2545ca8bfc9404dc074abffd1e871aefdd0728d612570e7e2607ae16db7d5e3b51f939a059105c350d7a25cc9a8fa456e89ee170910f9a1a3004a733993176ee4190664bccff151b85fb021f43df4c7ad564b7f0fb30f46fc9fa89126c4a1cf9804a64177fa7a8806ad5ce1ee9b9b1fa29ec4684c9ea29e66aca806dc9894b56b342161deeab7dcd62b2c19051999289f545bf343ebef6ca9c12ad5a603b62d117bff888ea56e003b9dd721df5c410cf2db771a8d32e2b2aadd93cc1bf37114befa32ff26a53e3f80f98dddf91e252973ff07589e186ee7d6919adbce92c91e25fad0730f615da44bedfcbf76711bff478cb06aa0e6e54c75c3a1b29b958ac9016955b66b97ad3b2a16ef9a5d36d2a6a27c9039efdfa7074ffba2cb67bbbed1c02276b4e49f1a20eb530c104268b501ffb3f577fad6d342e866d426062f9535602ace94867a66e4263f6c99b2885acaadbcf838cb2b09938170c214f4a9e1ed85a5e2052616cc3c152c66dfc111267b228397e088141b412dab9ef110940627030be8167823b4da908ea14e8324981ecdd693ddb40774e504b3226931ae14c6b9846e45a649069e6bf41e8698dcd9d14d6fdef4331f720a288a9b498d1dc25d87d127d46d0dcaac40cd0d79e772ee048ebae04f057e791280a49e73081d1d8e8f6c098af1ac2cdaf3c26ba505249f624dd279a51325382f75ed41fa1917c954d2670c7ab5e96058d7f89616cf893c1b84af6f21aea1afc407b68dde1ae1fff8a5baf80b23bf494bcd979348ed124143160d8e59ec331ccee76d110c6903bb769f0935f1b2ccea0ebb2f6ce571a52935728debe45dc53c289713c461b048c21d2f0a55b7f21b78ca182d70940d7648dfce0833533a970eaeac900dd487a704db8ac62dad718de76c28c008589a1ad974b0e122e13771d567eadb01dae1aa938c27d44b50ada5593d44b4d516a73665c21d05037df8a59ff32e1485354b4aac61d5e3b156eead9788a7856c79e5183d64fc4c3974731f9c3158f8c3ea128c284938a02cbf39bd5b5f4daccd938c9135bcd2db6f5d76d118c69c2e9801a8cb41b0ee4d6b085a713563cd4d0f11565a24bc20597189ada8ac1b367bc4a20a30adfb15b79e85d6dce120cd858476ec300b73e7ad13961392972fdd586351eba620673de6808dcb49d768acd41c978d850302f34f63d6d898095fd25cd1f88afc6e3a9ec834578bfaf0563f76ae219882ef6499cf344587a912b8c5baf8e84fbc48190244cd27e244c7f9f1a8b0503d4ca8f48f803e287454c0cfc2fcf60e883f4049af7f85a96b9e55fb974774b4633c753139201d168bb748dabe16d9d9b09923fb680f1a3994b4e1b52f94e4565661b5cef57dc4397af9fec52446767d1deb4f3070d452b1a827fa3cbffa47570eba9af61fdc8dd0b6aea250026015ff31a167ef31312105a67d6f84baaaa530ee829c9f20bd31ae17cc7b6dee68969c3f18a7ac8d582dee977844ecd843e5ac24e8352ca5f60694044fef71d56c088c8409ce9adff1380542406d9ae2490d68868b187e49b79b93b303795d45fede25bf46d9d56a0fca29c048f0d14878739181c717e2d9fdf9d3092bcef81cbd44c903988b852f91ca67f4c0e4d0405903d5fa910f5e16809eb95aff13af5702b51953f8b3480dc571e0e55e538bff2fe267a3a164b2c79b63d36e97c6ed0f6ba934fd2549943b9ed81f21f48150f82eaad7400978e203ab5244d093638e553d697c0d5b3d4095231b45c7625627952c9f1097e76ff02193c58a237d9fd507b1d528f1a236c2ca5b3d2b860febf704e776cd35a76384e444bf19bb36609d994fdff07b8ae47272d214105baf5522e35ad27ba46c8da3f8c6dc90fe23a9ade5ac2e08284d317ddcd2a530515f9f2d1ea30f852db9b691664f4eaee65b0709b98a5ab623d83bf6bbb4bfe614e867369a5510347fd3f30a2eeb8977c27c54274d0d2a7dd23fb22daa7883c0bffa5c8c8d913430f91f1c73323327edfa9bf0c238b3baff7c2af83d34a71e6a033267c08373aa32ae56fbb69761ac5a88feae35d8c1187d6411ec038b0be2efde6efdf653bd9d41c7ec99e3537fd45fb844ad471be116fa9398127b26d0c34499988d5527058d96b8a64fccc0c34b8f9a982229248b3b274fd8210f7fa74d21288969371c8c76386566e36ff2d761b8e2deea9a0deeb1376659a2db93fe7e43de9cfb90227d9636523159e9f0471b8f1a5a74796959d7e066e39cfe784b7874c8e85069a82d033cb2c333515a5ab35bef03afa19d34a2413695a8f7d28744e51c55dfc1b46ecb3938c0675cb3fd52d7b29046559f30e14f4d278080625cca20e017593c7b32b94f66176c6813a11c98109f6c31f8862db83ab7b9ec746a487a2e6836d31b461c317a94a941f4c04ad17d7c8fadbf51995989783c65b6519b7ca389dff6be4c62aa347bf4b60174eefc0b9d570ab3a876a0ea4361b9752dd7d920ad24fda02fb7118b92e6390bc59a2e43ad37e467ec2ed19f6bfe5d9242b430edfe14214906f2eec8b49af89ad38abbc8ef767892c5b1636dbf0b2f0edaf693bd642fd2c8a8c60140df4ba676f6434ee7321b40cd9be993819f71ef0d0b8ce2e1707209a6087a6fd7d6d3be824dd5abe258bd681b8d4604dee9960dbc9786396bcafab4891401d7e89a1a9d3c81a0f02b8ce36901945f46c42d42da3ec81dae7707c339a071ac85abcacb79473efdb84489c53ee8994ae19ca795393ab8e16de7bfcc8ad4f81b4b71e159103bb3192ec53571f06d65fc4009b68b64f6a4b66fb9e4a32a02cf86193d8c725b414fd96de8f7b12d03e8ca34d9e6a9af2e85359ee66829e49be7d97fbff6c6a3fc9d0bc265116f5da15b1f334c83d02ae02a3f9d60ab7dcb58022ecd388b1295cf4e9d4d3f9c33fce2618466f0a4c815f48db3691ab6e5da362017794ff7926e9ed32aaed85aab4bc3dfa36999535a72773a3adcd7749742564b329249d16c42b2589b277b1399a684e12fba37f8d64365df6efe355b8fd9e491b5ab7bc25988e51e5069184654f8a34a4b68318b75ae9bbad58f9d171d15e6a7cab1781e0733114a572808fb812c937862137948c943c4bfa3b690a4f36d5bebc5fdb4dff8ef83ee14c071975159cf773941e12ad92ba770a83574a4f7265f28af251061033f52498c68f0003a426ae41ed340be0ce4a80b60b98542342c5fbd28304c365ebd503b1d563e529a127ab9a0043769e33b0e35173a3a9bf47a93cd9c99d7e5c5c4fb2afbad09f0492d1cf15ba84564f0d8e75abb30d70f82e249450bb8e2f56ac98ae389cef671b19972bcc0f1ccb1b1078c66ac5b5bfd484b6b8ae13f0c8f9c663811687e8a1f58ff3e752cc20e482f0e85769979158f44e2bd87cff87ed2f17126f08b27edabd4229fa5f5235a76e15853dbb20dcd48191da1695b8c477d31ec94def9bcb1b857eab1c04b4c40f9fd044eae2d48a88af527350de839ea5d075b819a6b861f5e1d1eeaa1e0a4e74adda5871a27708b6c4bea6dc14f21ebfbb815bd5870c3b2681e08baae7f6342634b41f77ff80360b339eac40779baae1c37541395b3b5434a811cb5aaaec4e7d17f897631a90505fadd6f1a860521f5908a1efe2753ec6fac8c61e0801d9640535abc79a18ab581ad1a5bfca31a8924c7b03218c0c8a438882c96cb0389e5af8c94994ec072603710564d815c3c80f88355ada49839017cbb5af9968ace3dc2dcaa7c8077aec919f7dab0f15d42655d20ddee4d22c3c905598c275431eec0ad36e8e60eea5995eec3860a52a71f451aecd5703b8e8a8a686883ecfd54d2e4ef91ffb926dfabd12158faae35e452852dbd3cbf6cd9c5a86c32218a1864c82032c0907d2af09890d1af2801a0a05d5c6740d3b2c3d7733fb6e064ef24b93980bd51aa43c092d81ddadf8df4b0855ff77149965c8c5e97f0fee1efcd63262af30367500c13b75c546a36b7ed088b985394d0c103778b022a9c67549cd643d7e64cdecc319f965cd88166d2eb8a8fb52e075382bd05f60a8ab5cbff85300b765b4731ac683d797a4df67cb47c53f343d62bfe49e4d46c16a0b2c132c107316063fadbbe63d2bbc273ad7135feb73324961388a195978c24a8b96324f7a24cf597ca4df9c54908539ac8984bc57c6ffac1b607f073d988a95007906d08c723a8dbf6cbe461e6d7d9d687b0b3ff67ee83df747c0837ca8f4e35e08a48292352b660dd4cbbc225f642eb37a114df01d85d36f32441b77db628864cb5d1b7a7a5c3a7d348a9279e75e53077dffe06587045710def4e4f12ba4f99c632ba3fb4fbd1a0e17e5", &(0x7f0000004100)="997307be41914cb4b6005400ac2e1967f4d7ba28745928ee9208fae6286581d9efb8d86e841c26e2575b3e1f4e4798a105a1f30af7f8d89f9e2f78142958a2d0e096b3dffb6b39cb9c624677e85b00df13ecd8877897a16f2b82bb79b87b0268d712cab90204d571c53560484faac8b3698221039d3168ec4c964e96e452b472231b655c3bf119abcd62a5f8a70028601ac9c22e52f16d8f6459a5e4aa14f344bf8e0706dedfe54f3b4915", 0xa, 0x0, 0x6}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000042c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r11, &(0x7f0000004380)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x28, r12, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x80000000, 0xe}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x1) unshare(0x2010000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000043c0)={r11}) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000004540)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004500)={&(0x7f0000004440)={0x8c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x52f2f0948d721405}, 0x24008085) r15 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004700)={r10, 0xffffffffffffffff, 0xa, 0x0, @val=@kprobe_multi=@syms={0x0, 0x5, &(0x7f00000046c0)=[&(0x7f0000004580)='wlan0\x00', &(0x7f00000045c0)='GPL\x00', &(0x7f0000004600)='\x00', &(0x7f0000004640)='#]\x00', &(0x7f0000004680)='\x00'], 0x0, 0x7}}, 0x30) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000004740)={r15}, 0x8) r17 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r17, 0x890b, &(0x7f0000004780)={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0xfff, 0x692, 0x100, 0xeb, 0x2180000, r3}) r18 = syz_genetlink_get_family_id$tipc(&(0x7f0000004840), r11) sendmsg$TIPC_CMD_GET_NETID(r16, &(0x7f0000004900)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004880)={0x1c, r18, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004a80)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004b80)={0x6, 0x4, &(0x7f0000004940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe133}, [@ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0x30, 0x1}]}, &(0x7f0000004980)='syzkaller\x00', 0x90000000, 0xa5, &(0x7f00000049c0)=""/165, 0x41000, 0x2, '\x00', r19, 0x25, r6, 0x8, &(0x7f0000004ac0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000004b00)={0x4, 0xa, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004b40)=[r9, r7, r16, r16, r9], 0x0, 0x10, 0x1}, 0x94) 2.866204029s ago: executing program 4 (id=260): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100008}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 2.807581105s ago: executing program 4 (id=262): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x2, 0x1, 0x40000}, {0xa, 0x3, 0x0, 0x5}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xfffffff4, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xaa09f2c5b8de7161) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'bond0\x00', 0x1000}) r4 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x29, 0xa, 0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000000000000c520ec8196ccdcd65649732fcd3efb0b7eac1f7625042317c19b34950700000000000000068df3d7e035e4ef0c495093fcc71410b9e1c411a6eb9497c8eb7342a47f408d384b7573ff54f9a6e3548cff9fdb6b63f373278c876fb46d12"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x75) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000002053174f6c87000fcdbdf250afc130000170004000400000c001680050009eb0000000208001700ffffffff06a6ab1fbbc709dbafe3f6e6140ad068a25b7b220e2b22d24d1232c9ac1a4a9074921614d532f507"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 2.652993593s ago: executing program 0 (id=264): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x10, 0x40, 0x7, 0x499, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x65, 0x0, 0x4, 0x2b, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0x3b, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp={0x44, 0x8, 0xe5, 0x0, 0xd, [0x9]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00'}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xa}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x4, 0x8}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd70000500000002000000090001"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xe2, 0x5, 0xb, 0x4, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x80, 0x6}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xeb, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0xbb, 0x5, 0x908, 0x12, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7800, 0x8, 0x1}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@multicast1, @private}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)) 2.538125772s ago: executing program 1 (id=265): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0xc) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000cffffffc38af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.231334842s ago: executing program 1 (id=266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x300, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000a4080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000089500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 2.230558716s ago: executing program 2 (id=267): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}]}}]}, 0x50}}, 0x0) 2.191578871s ago: executing program 3 (id=268): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x30, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000630050000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x6a98047402e98331, 0x78bd2a, 0xffffffff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x101) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f00000002c0)=0x6b, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}, 0xcf}], 0x1, 0x45833af92e4b39ff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x0, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@multicast1, @loopback, 0xffffffff, 0xff, 'pim6reg0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2f, 0x2, 0x49}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0xff, 0x8], 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'ip6_vti0\x00', 'lo\x00', {}, {0xff}, 0x1d, 0x1, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x2d, 0x1, [0x3c, 0x9, 0x36, 0x24, 0x5, 0x14, 0x14, 0x19, 0x3, 0x40, 0x2b, 0x3d, 0x30, 0xf, 0x2e, 0x26], 0x1, 0x8, 0x4}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x3]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [0xffffff00, 0xffffffff, 0xff], 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4, 0x4, 0x4, 0x52, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fscache_access\x00', r4, 0x0, 0x3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x1c}}, 0x40040) 1.599650964s ago: executing program 2 (id=269): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[]) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 1.59650913s ago: executing program 1 (id=270): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000068000100000000000000000002000000000000000600070008000000100008801c000100000000000000000008000500", @ANYRES32=r3], 0x38}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfefffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="180026bd06000000df250100000008080100", @ANYRES32=r3, @ANYBLOB="7c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004322000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000004000008000600", @ANYRES32=r11, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x20044004}, 0x4080) unshare(0x6a040000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010", @ANYRES8], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) 1.596245599s ago: executing program 0 (id=271): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r0 = socket$inet(0x2, 0x3, 0x30) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x1b59, 0x8}}}}}}}, 0x42) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 1.595887053s ago: executing program 2 (id=272): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xaa67, @empty, 0x732}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x400}) write$tun(r2, &(0x7f0000001880)={@val={0x0, 0x86dd}, @val={0x0, 0x80, 0x11, 0x800, 0xffff}, @mpls={[], @ipv4=@udp={{0x20, 0x4, 0x1, 0x3, 0x120, 0x67, 0x0, 0x20, 0x11, 0x0, @broadcast, @loopback, {[@rr={0x7, 0xf, 0xe2, [@dev={0xac, 0x14, 0x14, 0xc}, @local, @private=0xa010102]}, @ssrr={0x89, 0x1b, 0xff, [@rand_addr=0x64010101, @private=0xa010102, @rand_addr=0x64010100, @multicast2, @private=0xa010100, @empty]}, @timestamp_addr={0x44, 0x1c, 0xd2, 0x1, 0x8, [{@loopback, 0x1ef}, {@rand_addr=0x64010101, 0x6}, {@empty, 0x2}]}, @cipso={0x86, 0x21, 0x3, [{0x0, 0x2}, {0x5, 0xa, '\x00\b\x00\x00\x00\x00\x00\x00'}, {0x2, 0xf, "e7875a542ae0daee51e7d9b4ca"}]}, @timestamp_addr={0x44, 0x4, 0x34, 0x1, 0x1}, @end]}}, {0x4e24, 0x4e22, 0xa0, 0x0, @opaque="103d431fef95bfb2d20a067e59e8487ab98bf7a679640932042a6ec77c39bf9cb9c6e93d0494fa811b81fcbc04b3ded42b9d90b22ed03b6b349fed4923f30663b1d2e242041c32c04077dd3ee8aa29f8a7d074d7f2d148a758baee776d461960a9f983bb1af11af199acbcb5a17dda927e8185f80752f7cd0e01b543066a09e1ac05795ba76d79d048b2609367b55bad9a00f0358fe8118b"}}}}, 0x12e) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0xe3f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x1e, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00'}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "234696264ee63a84df9828c23a87bc218d8f"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r4, 0x2000000, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'team_slave_0\x00', 0x2000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0xa4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4044080) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x28, 0x140d, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x28}}, 0x80) write(r1, &(0x7f0000000300)="41000200510001d4bb8b07cd410f6b54cd070d08f9be7cc9814b530b487ee8c884719ac098aef7146d3ad1905947b065b574e041c3a88afc2020180b235158c248c6d6c4a4624250623941f70bf1c8126aa4594579e5afd279837ebd5b4addc7a7e79567941bab80e376ed51f189541bbeec22448fa1b6172443bcf3ea5ea52df81e4692b6b55656503850bb581414264e938c1ffab09df593b12728b2d92599e775efece96dca1cd5f695d740d87c1e3fe889286f4e45175830e92e1167ffc712437eb5f31aeabe345e129421991e", 0xcf) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000240)={0x32, 0x14, 0x0, 0x1, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @empty}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @mcast2, @loopback, @local]}, 0xa8) 1.59451143s ago: executing program 0 (id=273): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x28044000) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x2, 0x1, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4009005}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) gettid() (async) r4 = gettid() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b40), 0x280, 0x0) (async) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b40), 0x280, 0x0) r6 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000b80), &(0x7f0000000c00)=0x60) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0}, &(0x7f0000000c80)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000cc0)) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000cc0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000e00)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e40)={0x0, 0x0, 0x0}, &(0x7f0000000e80)=0xc) sendmsg$netlink(r1, &(0x7f0000000f40)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)=[{&(0x7f00000004c0)={0x438, 0x3e, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x1ec, 0xfa, 0x0, 0x1, [@generic="26a71d5c6731ddf9f7d881e24859c278d8cbec835a58d6a9b515cead272c7e3207643f2aea29121a4fac11c1dabd224252f29e74737a025b2e0e6162efbef15d487b8bd89fa47caa3ac7e73506810233353e91d212ecd287d81ea8e362b6d88f14472760cf551a0a370043c1a26ef16e867828", @typed={0x8, 0x25, 0x0, 0x0, @uid=r3}, @generic="61d2c8a2207f16e82573baf1a401b87fd552363eb13358e215c931930e3458c2fb48e8270183c42a48e6ab4d57904d304605fc86da37d37d67a71d3861f5d1ebe13eccb7991ab69aafe18300dddf3353774679e9ab5cf09e0c7f8d393570f791711d52c6d23c7859d2666dad3afe12dd9467d9bcd0", @generic="518de4061cb96078b425585f9b3102ec69b8f0a1b7444a08b8c5df39a2a10331438e059341acd8c875d9b8d6f45bf633798f12004a6575733d0d8b377252158f9cbeb82f9970415c5265ba6593a1a2d88c74ccd8105b9f4967eb5ce118b395245f92115283be37b5fa082688b111d484d798d0aa9afb72bac8010b8ad48136fb3b76e37fd3535e02b35f93ff3cb8ad54e925e176e87abb2912a238b0bb42cb02a5feaaab030af6a6a5ce4f4387d94629efc6a536ecf2f8beb24969167a2c17f451cf3630744827c25df52f3700adb1d8c7b36b8b2c49ad05272b864dd6ba026816e0fb7f7c8b690d00094ab205049e0ef3df81c1", @nested={0x4, 0x141}]}, @typed={0x8, 0xc1, 0x0, 0x0, @fd=r0}, @generic="9feb5b30bcd1e7725eaacf4d16a6d3d9b0a36b4eba0ef43ade73cfcfbae76ac5ae575258cbd0a78bbcb973ab52e14fb204e5e99ae52be79ea4300e8774409b78f232b9341d523dbfeb774b8ea24279003dd9d150cb2a87cb42c6b0730ba4d22d40e07908eda69afb2c1430b3e5f9339958eccf03448ce42a79fde136035e198554569137f1f06512288a352c07cec4d99e534b3e59c9987f115cd639a6416b4e71fc642c1ef7cf41c5e5837a77c4a323e22e377e665c2e7d4a1883b1bc19b86a3f913b7a662777100017505e5b89b2b68bbf0ed8f0ce", @typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}, @typed={0x4, 0x8}, @typed={0x8, 0x43, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @typed={0xc, 0xc8, 0x0, 0x0, @str='ethtool\x00'}, @nested={0x13a, 0xa5, 0x0, 0x1, [@generic="7d804e5cf31cdabd3fc86faa92a3e403158bd918ff1c4dc5e27a5073a1fb127598819c6b7a5c55d86ae6de", @nested={0x4, 0x51}, @typed={0x8, 0x9c, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x13e}, @nested={0x4, 0x147}, @generic="89c7b1a8f7f1578406b40017a9f8e0df1f78e7ba369a3ae24c1435bc684af8c4298527f66c52a6a8e1164abc1b4b215e9e969cf7388af031b0b34654fa953cec0bc942449a0e66642fbe5500763fd1722c72b4d2b110a089e998ef4725877dd4ab76dbb10dae7bcfd42c86d67a7c5b5f83ee22ba2502c1be143184d4cd3cd24d3072676dcb4be69c797984d41b21c1e2db32adb1f820494a2403910f3aad5094101c1a0524fc7aa8bfef39715fd01eff62ba0d01e556415efb9a230c176ad357fbdcdb948f41057a8a1383b2feccfb51fc40339aa3b074ef4c199125f8ab521daa61b6944ca52440ac9c9e42c325e26493d65761212368"]}]}, 0x438}, {&(0x7f0000000900)={0x190, 0x3c, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@generic="1cf94a38866121062412c4a9c80c1d26050aff30e413eda1d5f546fda2157ebbb78a66a03cc46e1aaaae947d5758afc241615b79368b73788cbaf482074404ab1080bdf32c7ba8209b466e28ed67f2cb46a7db08cf047dbd95bab0014e3e1f7f41b225a02082313e092db53691e7f53c8dc1ade1d3f3c3f79d90cae22fa5d3786e9b4185a1c6c71536c72b6ee00b4dd0c91b5b793c6cf86106a6a31095d26015636b96a6ac293e5bee7f972aadf0521dfc0ab2f7432a0dce25987b39e8b45d80f8860dcd96171b7618457443f60f2f052aaf7c685cf060756b291ced9fb742bd", @generic="c70cb4c64d526c3a3e23e0bd635d2bf849d9b1038a8f3de8eafc893de08354a25e7243379ed94760030dfde6302a628be1688b2e4ad6981c022267f29d2b0f6052f1a8ade393358306c3885a16ca83b4432fb8c4a65ab348346d8a4f3889f20a526b8d0f7a2c8dd29e7ae7242324f83bf48d665df534d002d773e62b1c516e9e485b76ad5fd3df77cc4c6f9dbd15deaa5e2b11b3e2f25081afcbcdd40106cf"]}, 0x190}, {&(0x7f0000000ac0)={0x34, 0x1b, 0x10, 0x70bd2a, 0x25dfdbff, "", [@typed={0x21, 0x9c, 0x0, 0x0, @binary="8df131e4038625bca96de8538d735365677f3e829063787d4329c68648"}]}, 0x34}], 0x3, &(0x7f0000000ec0)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r0, r5, r6, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x70, 0x4004004}, 0x40048c0) socket(0x1, 0x1, 0xfc9a) (async) r11 = socket(0x1, 0x1, 0xfc9a) setsockopt$CAIFSO_LINK_SELECT(r11, 0x116, 0x7f, &(0x7f0000000f80)=0x2, 0x4) (async) setsockopt$CAIFSO_LINK_SELECT(r11, 0x116, 0x7f, &(0x7f0000000f80)=0x2, 0x4) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000fc0)) r12 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$l2tp(0x0, r12) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r12, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r13, 0x709, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x82f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008054}, 0x24000080) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000011c0)={0x0, 0x5c, &(0x7f0000001140)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0xfffffff3}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000001200)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f0000001240)=@assoc_id=r14, &(0x7f0000001280)=0x4) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f0000001240)=@assoc_id=r14, &(0x7f0000001280)=0x4) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001300), r11) sendmsg$IPVS_CMD_SET_CONFIG(r15, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r16, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x36}]}, 0x3c}, 0x1, 0x0, 0x0, 0x180}, 0x20044) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001740)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001700)={&(0x7f00000014c0)={0x21c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x5f, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1ef}, @broadcast, @device_b, @from_mac, {0xe, 0x2}, @value=@ver_80211n={0x0, 0x4000, 0x2, 0x0, 0x0, 0x3, 0x1}}, @tdls_setup_req={0xc, 0x0, "", 0x4, @val=0x402, @val={0x1, 0x8, [{0x0, 0x1}, {0x9, 0x1}, {0xc, 0x1}, {0x3, 0x1}, {0x16}, {0x1b, 0x1}, {0x5, 0x1}, {0xaeed5ce9180e4f52}]}, @val={0x2d, 0x1a, {0x8000, 0x0, 0x7, 0x0, {0x7, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x7fffffff, 0xf0}}, @val={0x65, 0x12, {@random="8a2d542589ed"}}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x190, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_a, @random="e34d3d51a25c", {0x9, 0x5}}, 0x400, 0x27, @default, @val={0x1, 0x6, [{0x2}, {0x1}, {0x18, 0x1}, {0xc}, {0x49}, {0x12}]}, @void, [{0xdd, 0xdc, "2f9007372b301099d5f24e44e208551571a0df76aac0d3f169b3e15c14461fe05dbc3e5246ec989669edacacdd08435c6469fc0c688842f9374027db7975386fcc1aadc6932d01653eabe99f9e07e74d70fa8a501e3063acbdb8fa4e36f93c175e26d739554b8b210dcdceaf04be9c1e02609c7e7cd55ee418423946aa1028936810e3d42f6c6065b374f50c21e307be86ad0fda3d7a506c4ca97c080014e772cfd639e2793bb658b581d6e24a7f216e29e8c3a04f20aa329a960b6c865eebe74534486e70a7fc1e8b20e5a626058ad5af19030feacb57c8fb3fafcc"}, {0xdd, 0x62, "0233045a4c6361df0c638371888449ca98c3ac47541aa3fd2234081cb9b1669c3d5f656c29ecbf239b200ea7f1eb9c496841bbaf21e92fec1f1dc58441dee2cfd21fca3b6aa622df4e22ce152d20f624a8c1d7091a8a5072c8823e90e3cefead145e"}, {0xdd, 0x22, "7fe594978e1400a0547fbe1e2ed97eaf9305bfd1337fb751bee8fa9895366ed58f2b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4010}, 0x80) 1.503954062s ago: executing program 3 (id=274): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0xa, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x1003, 0x2}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) unshare(0x8040480) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r7 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r7, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r6, 0x400, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0x44) unshare(0x6a040000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000000400007012bbd7000fedbdf008400"/32, @ANYRES32=r9, @ANYBLOB="04000800"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) 1.333866531s ago: executing program 0 (id=275): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r0, &(0x7f0000004f40)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000700)=""/83, 0x53}, {&(0x7f0000000780)=""/74, 0x4a}], 0x8, &(0x7f0000003cc0)=""/87, 0x57}, 0x1dc2}, {{&(0x7f0000000900)=@ax25={{0x3, @null}, [@default, @bcast, @default, @remote, @null, @netrom, @remote, @rose]}, 0x80, &(0x7f0000001f40)=[{&(0x7f00000003c0)}, {&(0x7f0000000980)=""/142, 0x8e}, {&(0x7f00000004c0)=""/16, 0x10}, {&(0x7f0000000a40)=""/153, 0x99}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/175, 0xaf}, {&(0x7f0000001bc0)=""/249, 0xf9}, {&(0x7f0000001cc0)=""/198, 0xc6}, {&(0x7f0000001dc0)=""/86, 0x56}, {&(0x7f0000001e40)=""/210, 0xd2}], 0xa, &(0x7f0000002000)=""/94, 0x5e}, 0x7}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002080)=""/192, 0xc0}, {&(0x7f0000002180)=""/239, 0xef}, {&(0x7f0000002280)=""/70, 0x46}], 0x3, &(0x7f0000002340)=""/194, 0xc2}, 0x8}, {{&(0x7f0000002440)=@ax25={{0x3, @netrom}, [@bcast, @rose, @bcast, @netrom, @remote, @netrom, @bcast, @null]}, 0x80, &(0x7f0000003a80)=[{&(0x7f00000024c0)=""/212, 0xd4}, {&(0x7f00000025c0)=""/194, 0xc2}, {&(0x7f00000026c0)=""/162, 0xa2}, {&(0x7f0000002780)=""/209, 0xd1}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/65, 0x41}, {&(0x7f0000003900)=""/127, 0x7f}, {&(0x7f0000003980)=""/197, 0xc5}], 0x8}, 0x7f}, {{&(0x7f0000003b00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003b80)=""/35, 0x23}, {&(0x7f0000003bc0)=""/143, 0x8f}, {&(0x7f0000003c80)=""/20, 0x14}, {&(0x7f00000052c0)=""/215, 0xd7}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000004e40)=""/216, 0xd8}, 0x3}], 0x5, 0x2000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0xb47, r2}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f0000005140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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"/312, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000005080)=ANY=[@ANYBLOB="180200000200000000000000000000008500000011000000950000000001000026f307a82b150c0788e80f33c57763393858bc81aa6c0a95450e3e7ca88a164d8bd60f285924e0fd39eabfe69b7ae5193e1429333b345c77743b28b8216ab48466f4060e8fd51e4d59060ec901edff118b16032f9763bf70bfc41054b9adbab3997da261d585a8449321470acff41480923577af262bcaeacd33cccbd2101bd4fe714f18427d4677bc91c160fa8b69c3dc098df276"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000003c0)={0x2, 'dvmrp1\x00', {0x1ff}, 0x8}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="e02742e8680d85ff9782762f86dd", 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffe34) 1.146669306s ago: executing program 2 (id=276): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB="01000000fae20200703aba"]) bind$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0xc8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xc89}, @CTA_LABELS_MASK={0x10, 0x17, [0xb09, 0x5, 0xa]}]}, 0xc8}}, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000280)=""/8, 0x8, 0x700, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xcf, 0x2}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) 1.14630096s ago: executing program 0 (id=277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="42c018", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001640)="e49a23e6f24567e780e96487301929d2553b302059e40876dd895a3e728f5fc395", 0x21}, {0x0, 0xfffffebc}], 0x2}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001280)="f7aef3a8e81f7efb5fadf4444ffb3cfcfdbef223506c156b3a9a21c6af4c3565cd3d50186137130156a4c9d14893f1", 0x2f}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002640)="90fffd321a1349", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004240)="f82c031eac4f306631f3f87b2d3f686b71046433d84ce3bf81a559", 0x1b}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000004640)="d21937ae0f38", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000049c0)="12a7101d", 0x4}]}}], 0x7, 0x8000) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "696335283bf79057", "5615c6250f36550293b1f5bd2e006a7a1b6ea19e0000000000000800", "0100", "ffffffffe000"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x314}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc"}, 0x38) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd617d52f500101101fe8000000000000000000000000000bbfe8000000000000013e6a5b900000000000000aa4e244e23001090780200010000000000"], 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xa}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa2, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xa, 0xb}, {0xd, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0xe}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000091}, 0x4080) 1.135888896s ago: executing program 1 (id=278): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003440)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x9, @local}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x2f35, @remote, 0x8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000040)="4fe142a77cb073cca71064fcd553dde5eaa47b15c22bb10a8b0f77b493cf415d36f178ef3228a186651d5c146f92b065950e568ec9e9", 0x36}, {&(0x7f0000000180)="b93d51ecf862dea2d845eb9fd365be1c14024bb30cd856c447c7cc4ca189995883d595be85a859800c5a87267ddbc1f6b16b3ef337751d5fea761303971339ae4c4fecaddd9d8f801aff8cfcc7d62dd9c603d91dcaff10b7d822c329bdf0141b81ba1b0ffe1e7fec041b895587f48859a998041d36e485e8acec24f2eb4d7d83e088d969c7d7bf8eb00cd5667cef70a1671d2a30be29ddc96cc6ad773ad9b6eaf1e5cfd09076fd2024c37777d25dde6e04c87ea545e84594537173883a486a47e25369dcdf338991f6eb006409a3157cff307aa9d7069374df241858f960d5e7ffe257db766d", 0xe6}, {&(0x7f0000000280)="4a3890956b7648591c9e9153eed1f8a72d738426e89982dc0a351dbab9695e342aa108855ef464b9b3bb71931fa1f942ee713160267c45fb9d47b14db04a2e46e6c6d7833e2444dc337dcb662ac615b6c6e5e9f2094b54555715b2f30d1c7003ae8bf51360a780e87ce111a4de3832d1efd3a6cfee05979829a7dd1a3d90bedf289df4c74b524e6d590cf3b6fc0200db3b7ad08eeb", 0x95}, {&(0x7f0000000080)="bc3c5689b07a86c24f45d2b0f52fc6d57dd46dfb8f5db507d279860917b1eb580bd61ebd60f5f2ac68f37580f3d5d3adda5c9e9a9f229a6e3f801c0d2b5c", 0x3e}, {&(0x7f0000000480)="51bc0520df4e07ce35fa8dd64952e56e3585068c8ae402edb9d3db4f507294fb03a250a1e3fd2c2f76a77f518f8c59f1ae2ace670394266b84cbf6acbe22c625dbe79dda73f46e1e149afa62b87ca8b1ebc6d5699d96fe6436a07e0b7ed43f18d08fc401d5fbd324d2b2a1bd8a1cba5b0acd117876bc2c756b7808d5b9f1926df3e414dd6f23486c94430ffd295ad5e927b3b2c902c4d1ab9b180a0b4660be3a69d97483811078bd8fa60b8d0b1999e3", 0xb0}], 0x5}}], 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0x2}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) shutdown(r0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x2, 0x1, 0x0, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040014) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x4a, &(0x7f00000003c0)=""/74, 0x40f00, 0x23, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0xfffffffffffffcb9, 0x10, &(0x7f0000000480)={0x5, 0x4101, 0x18c9d50d, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f00000034c0)={{0x0, 0x2, 0xfffffffff1d455cb, 0x3, 0x40, 0x6, 0x1, 0x0, 0xfffffff6, 0x9, 0x7, 0xd89, 0x4, 0x7, 0x7fff}}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000044c0)={{r10, 0x0, 0x2, 0xfffffffffffffff8, 0x4, 0xfffffffffffffff7, 0x1, 0x3, 0x9, 0x9, 0xff, 0xc2, 0x4, 0x4, 0x5}}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r9, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r11, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 1.056245948s ago: executing program 4 (id=279): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="f398ea8c", @ANYRES16=r1, @ANYBLOB="010086911ed335a93acce2463a00000000fbdbdf2501000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan0\x00'}) (async, rerun: 64) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (rerun: 64) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000740)='kvm_dirty_ring_push\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'], 0x48) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4000}, 0xfffffe8b) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async, rerun: 32) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async, rerun: 32) close(r4) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000002400010300000000800000001100000004002f80787f079f85320f8ccfa6acd3e51eb721b5c0bd53ce14a3cafff4c04d45bd9f2fc3816845955a4e3fe43d10fa1c813fe2b450abf4a1cf790f3eeb34779b2cf6ce4aa65cfb2f51d19c641afdb0f5f63b3ef7967ec3d51cc8fd830322ef28299040e17baa0788e1cdf701b5ebb2f8a3ee0ad0f8a2aff1745b927e2d0b165639f9f810e2896b987c7027f94a9a44579b2f67b1ba827ebcd38a2cd1689205b4288b41a00d67cdf3be383814e82ca16b740a746fce0ebc5f0c82ecc1baab51c64fbf0658c755a07e33f2e609eceb1edfcbce1531b05f4b09"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000040)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 662.706227ms ago: executing program 4 (id=280): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x14, 0x603, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="ec000000210097266e197df3de43fffffc020000000000000000000000000000fe8000000000000000000000000000aafffc0000000000080a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000080000000009c001100ac1414aa00000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa3201000002000000020002006401010000000000000000000000000000000000000000000000ffff0a01010200000000000000000000000000000000fc0200000000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 593.96695ms ago: executing program 4 (id=281): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 504.036315ms ago: executing program 0 (id=282): syz_init_net_socket$ax25(0x3, 0x3, 0xcc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @local}, &(0x7f00000003c0)=0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x9}}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @float={0xb, 0x0, 0x0, 0x10, 0x8}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}, @restrict={0x4, 0x0, 0x0, 0xb, 0x2}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @struct={0x2, 0x8, 0x0, 0x4, 0x0, 0x8, [{0xf, 0x4, 0x1}, {0xa, 0x5, 0xe}, {0x4, 0x3, 0x5}, {0x9, 0x1, 0x80}, {0xa, 0x4, 0x7f}, {0x4, 0x5, 0x1}, {0x10, 0x4, 0x3}, {0xa, 0x3, 0x80000000}]}]}, {0x0, [0x30, 0x61, 0x0, 0x30, 0x2e, 0x5f]}}, &(0x7f00000005c0)=""/174, 0xe0, 0xae, 0x1, 0x80000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0200"/20, @ANYBLOB="2186f1a6b80c3ded37c6a53eaeebc08be9f83c24d36b270ca038489059a9f6e2439fe6178612998791633646166d1e26e8e505e2ad4f61f2b14925976fd19efc48324609f842bd0cfb6aaaee46", @ANYRES32=r3, @ANYBLOB="02000000020000000100"/28], 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x70, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x35, 0x5, 0x3956e63}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b2e93b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a5c7578}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5929ef2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x368d7fee}]}]}]}, 0x70}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008000300e0000002060015"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r7) getsockopt$inet_int(r7, 0x0, 0x31, &(0x7f0000000980), &(0x7f00000009c0)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xd2c}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20048040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000b060108000000000000000002000002050001000700e5ff3b00078018000100000000000000000000000000000000000000001f1800018014000240fc010000000000000000000000000000060004404e2400000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x48}, 0x4800) unshare(0x66000080) 439.074437ms ago: executing program 4 (id=283): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x3b, 0x0, 0x1, 0x1}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000440006803e00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000091}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004010000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/mnt\x00') r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x49}]}}]}, 0x4c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) 432.734922ms ago: executing program 1 (id=284): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x7}, 0x4) 115.650837ms ago: executing program 2 (id=285): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x4) read(r0, &(0x7f0000000240)=""/233, 0xe9) write(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000140), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8004) sendfile(r1, r6, 0x0, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) socket(0x2, 0x80805, 0x0) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmmsg$inet(r9, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r7], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc004) 55.343313ms ago: executing program 1 (id=286): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x83}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000fbdbdf250a8000f9ff"], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005"], 0x50}}, 0x4000850) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x12, r4, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000180001002abd7000fcdbdf250a200000fd00ff050010000014000500fefe"], 0x30}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000840)={0x9f, 0x3, 0x6}, 0xc) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=287): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r0]) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb441681815fa433e953138ec1eb6c7f56119ff985", 0x22}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0", 0x4e}], 0x4, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)}, 0xffffff0b}], 0x2, 0x2001, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x40890) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000080)='bond_slave_1\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r8, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @loopback}, 0x80, 0x0}, 0x24044840) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x3}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 70.002195][ T5814] cgroup: Unknown subsys name 'net' [ 70.136841][ T5814] cgroup: Unknown subsys name 'cpuset' [ 70.145048][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.287184][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.294191][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.467185][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.440209][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.464877][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.472149][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.480779][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.489674][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.489950][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.506506][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.506802][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.514821][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.523093][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.529323][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.536819][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.543232][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.557090][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.558599][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.568367][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.572353][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.587420][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.588145][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.595793][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.602747][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.617692][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.629278][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.639933][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.647769][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.269371][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 74.352744][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 74.447669][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 74.520450][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 74.615953][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 74.649506][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.657951][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.665357][ T5827] bridge_slave_0: entered allmulticast mode [ 74.672291][ T5827] bridge_slave_0: entered promiscuous mode [ 74.721597][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.728884][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.736294][ T5827] bridge_slave_1: entered allmulticast mode [ 74.743308][ T5827] bridge_slave_1: entered promiscuous mode [ 74.763101][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.770478][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.777910][ T5828] bridge_slave_0: entered allmulticast mode [ 74.784940][ T5828] bridge_slave_0: entered promiscuous mode [ 74.829578][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.837045][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.845626][ T5828] bridge_slave_1: entered allmulticast mode [ 74.852689][ T5828] bridge_slave_1: entered promiscuous mode [ 74.922208][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.936214][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.943816][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.951189][ T5831] bridge_slave_0: entered allmulticast mode [ 74.958303][ T5831] bridge_slave_0: entered promiscuous mode [ 74.976383][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.983966][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.991349][ T5825] bridge_slave_0: entered allmulticast mode [ 74.998600][ T5825] bridge_slave_0: entered promiscuous mode [ 75.007894][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.022290][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.029573][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.036837][ T5831] bridge_slave_1: entered allmulticast mode [ 75.044068][ T5831] bridge_slave_1: entered promiscuous mode [ 75.053501][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.063313][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.071626][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.079344][ T5825] bridge_slave_1: entered allmulticast mode [ 75.086487][ T5825] bridge_slave_1: entered promiscuous mode [ 75.122356][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.193458][ T5827] team0: Port device team_slave_0 added [ 75.199652][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.207213][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.215156][ T5824] bridge_slave_0: entered allmulticast mode [ 75.222047][ T5824] bridge_slave_0: entered promiscuous mode [ 75.231987][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.252967][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.265039][ T5827] team0: Port device team_slave_1 added [ 75.270944][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.278342][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.286086][ T5824] bridge_slave_1: entered allmulticast mode [ 75.292968][ T5824] bridge_slave_1: entered promiscuous mode [ 75.301628][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.312783][ T5828] team0: Port device team_slave_0 added [ 75.320943][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.359697][ T5828] team0: Port device team_slave_1 added [ 75.442048][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.449619][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.475939][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.490028][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.502500][ T5831] team0: Port device team_slave_0 added [ 75.509334][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.516826][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.542948][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.559370][ T5825] team0: Port device team_slave_0 added [ 75.565857][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.573153][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.599353][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.612179][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.623401][ T5831] team0: Port device team_slave_1 added [ 75.629927][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.637340][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.663540][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.677072][ T5825] team0: Port device team_slave_1 added [ 75.684948][ T5834] Bluetooth: hci4: command tx timeout [ 75.685215][ T5151] Bluetooth: hci0: command tx timeout [ 75.691244][ T5841] Bluetooth: hci2: command tx timeout [ 75.697016][ T5839] Bluetooth: hci3: command tx timeout [ 75.708223][ T5836] Bluetooth: hci1: command tx timeout [ 75.790694][ T5824] team0: Port device team_slave_0 added [ 75.797982][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.805231][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.832356][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.846836][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.854210][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.880585][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.911455][ T5824] team0: Port device team_slave_1 added [ 75.918088][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.925210][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.952041][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.964011][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.971127][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.997352][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.059330][ T5827] hsr_slave_0: entered promiscuous mode [ 76.066388][ T5827] hsr_slave_1: entered promiscuous mode [ 76.076436][ T5828] hsr_slave_0: entered promiscuous mode [ 76.082718][ T5828] hsr_slave_1: entered promiscuous mode [ 76.090016][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 76.096007][ T5828] Cannot create hsr debugfs directory [ 76.117282][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.124704][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.150725][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.200405][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.208101][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.234622][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.302736][ T5831] hsr_slave_0: entered promiscuous mode [ 76.309488][ T5831] hsr_slave_1: entered promiscuous mode [ 76.315559][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 76.321277][ T5831] Cannot create hsr debugfs directory [ 76.342593][ T5825] hsr_slave_0: entered promiscuous mode [ 76.348834][ T5825] hsr_slave_1: entered promiscuous mode [ 76.355337][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 76.361064][ T5825] Cannot create hsr debugfs directory [ 76.479185][ T5824] hsr_slave_0: entered promiscuous mode [ 76.486585][ T5824] hsr_slave_1: entered promiscuous mode [ 76.492854][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 76.498759][ T5824] Cannot create hsr debugfs directory [ 76.907560][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.920124][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.931813][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.950006][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.000350][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.011698][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.025925][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.037206][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.123552][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.137991][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.148263][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.175590][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.291963][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.317292][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.350081][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.371243][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.405844][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.452118][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.473090][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.484789][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.502264][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.510737][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.547083][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.554313][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.578196][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.585319][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.636677][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.687878][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.703375][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.762347][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.769664][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.774240][ T5839] Bluetooth: hci3: command tx timeout [ 77.778733][ T5834] Bluetooth: hci4: command tx timeout [ 77.782385][ T5836] Bluetooth: hci1: command tx timeout [ 77.788265][ T5841] Bluetooth: hci2: command tx timeout [ 77.793989][ T5151] Bluetooth: hci0: command tx timeout [ 77.814430][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.821687][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.831138][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.846298][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.853444][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.911952][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.919083][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.032616][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.064603][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.169078][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.185308][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.237846][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.245450][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.287875][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.295152][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.322295][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.329561][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.368761][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.376030][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.441128][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.551956][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.632123][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.789816][ T5827] veth0_vlan: entered promiscuous mode [ 78.858018][ T5827] veth1_vlan: entered promiscuous mode [ 78.919237][ T5825] veth0_vlan: entered promiscuous mode [ 78.999429][ T5827] veth0_macvtap: entered promiscuous mode [ 79.031109][ T5827] veth1_macvtap: entered promiscuous mode [ 79.068768][ T5825] veth1_vlan: entered promiscuous mode [ 79.116299][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.138652][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.161408][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.188299][ T3476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.197815][ T3476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.217498][ T3476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.227233][ T3476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.274493][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.285085][ T5825] veth0_macvtap: entered promiscuous mode [ 79.315878][ T5825] veth1_macvtap: entered promiscuous mode [ 79.352205][ T5828] veth0_vlan: entered promiscuous mode [ 79.410658][ T5831] veth0_vlan: entered promiscuous mode [ 79.420396][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.450120][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.452786][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.468397][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.479374][ T5828] veth1_vlan: entered promiscuous mode [ 79.490844][ T5831] veth1_vlan: entered promiscuous mode [ 79.526984][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.537885][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.557594][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.567104][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.592249][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.605663][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.636746][ T5824] veth0_vlan: entered promiscuous mode [ 79.719954][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.750507][ T5828] veth0_macvtap: entered promiscuous mode [ 79.760013][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.772492][ T5831] veth0_macvtap: entered promiscuous mode [ 79.776083][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.784980][ T5831] veth1_macvtap: entered promiscuous mode [ 79.805728][ T5824] veth1_vlan: entered promiscuous mode [ 79.845346][ T5839] Bluetooth: hci3: command tx timeout [ 79.845382][ T5841] Bluetooth: hci2: command tx timeout [ 79.850922][ T5151] Bluetooth: hci0: command tx timeout [ 79.857728][ T5834] Bluetooth: hci4: command tx timeout [ 79.862341][ T5836] Bluetooth: hci1: command tx timeout [ 79.887621][ T5828] veth1_macvtap: entered promiscuous mode [ 79.972397][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.984536][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.007282][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.061412][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.086911][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.136835][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.154354][ T5824] veth0_macvtap: entered promiscuous mode [ 80.199768][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.229278][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.269960][ T5824] veth1_macvtap: entered promiscuous mode [ 80.291961][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.305255][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.339696][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.358332][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.398555][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.452650][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.503454][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.623133][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.647935][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.661338][ T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.675657][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.684485][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.699235][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.708718][ T147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.722075][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.738711][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.851248][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 80.890964][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.899949][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.946557][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.959252][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.053733][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.104587][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.192914][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 81.313711][ T5966] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.320122][ T5966] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.360699][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.400888][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.604505][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 81.620723][ T5979] IPVS: length: 35 != 24 [ 81.636683][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 81.650252][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 81.659371][ T5967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.903494][ T5201] udevd[5201]: worker [5830] terminated by signal 33 (Unknown signal 33) [ 81.926799][ T5836] Bluetooth: hci4: command tx timeout [ 81.926825][ T5151] Bluetooth: hci2: command tx timeout [ 81.932548][ T5841] Bluetooth: hci0: command tx timeout [ 81.938097][ T5839] Bluetooth: hci3: command tx timeout [ 81.943447][ T5834] Bluetooth: hci1: command tx timeout [ 81.962503][ T5201] udevd[5201]: worker [5830] failed while handling '/devices/virtual/block/loop2' [ 82.210713][ T5995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 82.365067][ T6001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17'. [ 82.392080][ T6001] netlink: 260 bytes leftover after parsing attributes in process `syz.3.17'. [ 82.422425][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'. [ 82.549298][ T6002] netlink: 236 bytes leftover after parsing attributes in process `syz.3.17'. [ 83.049448][ T5901] IPVS: starting estimator thread 0... [ 83.090409][ T6026] netlink: 'syz.2.21': attribute type 1 has an invalid length. [ 83.173981][ T6028] IPVS: using max 25 ests per chain, 60000 per kthread [ 83.212716][ T6026] bridge2: entered allmulticast mode [ 83.276635][ T6033] netlink: 'syz.3.23': attribute type 11 has an invalid length. [ 84.638569][ T6101] delete_channel: no stack [ 84.830896][ T6109] bond0: entered promiscuous mode [ 84.863930][ T6109] bond0: entered allmulticast mode [ 85.067872][ T6121] Zero length message leads to an empty skb [ 85.395534][ T6142] netlink: 'syz.0.52': attribute type 3 has an invalid length. [ 85.415569][ T6142] netlink: 'syz.0.52': attribute type 2 has an invalid length. [ 85.435422][ T6142] netlink: 'syz.0.52': attribute type 2 has an invalid length. [ 85.669626][ T6151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.868285][ T6163] syz.2.56 uses obsolete (PF_INET,SOCK_PACKET) [ 85.899652][ T6163] __nla_validate_parse: 19 callbacks suppressed [ 85.899676][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 85.961221][ T6151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.123155][ T30] audit: type=1804 audit(1766260033.224:2): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.60" name="/newroot/4/cgroup.controllers" dev="tmpfs" ino=39 res=1 errno=0 [ 86.223882][ T30] audit: type=1800 audit(1766260033.224:3): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.60" name="cgroup.controllers" dev="tmpfs" ino=39 res=0 errno=0 [ 86.305451][ T6151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.356314][ T6184] netlink: 'syz.4.62': attribute type 21 has an invalid length. [ 86.372405][ T6184] netlink: 156 bytes leftover after parsing attributes in process `syz.4.62'. [ 86.431751][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'. [ 86.510602][ T6151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.573401][ T6200] netlink: 'syz.0.65': attribute type 13 has an invalid length. [ 86.597918][ T6200] netlink: 'syz.0.65': attribute type 17 has an invalid length. [ 86.660548][ T10] cfg80211: failed to load regulatory.db [ 86.667229][ T6206] netlink: 'syz.2.67': attribute type 2 has an invalid length. [ 86.812959][ T6200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.860045][ T258] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.069671][ T258] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.198392][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.276529][ T3476] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.298186][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 87.316295][ T6239] netlink: 348 bytes leftover after parsing attributes in process `syz.4.75'. [ 87.360504][ T1149] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.544645][ T6251] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 87.794815][ T6267] syzkaller0: entered promiscuous mode [ 87.800501][ T6267] syzkaller0: entered allmulticast mode [ 87.855635][ T6269] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.931851][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 87.989241][ T6273] cgroup: fork rejected by pids controller in /syz2 [ 88.316233][ T6384] syzkaller0: entered promiscuous mode [ 88.335835][ T6384] syzkaller0: entered allmulticast mode [ 88.963408][ T6411] geneve2: entered promiscuous mode [ 89.366522][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.609932][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.752638][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.765931][ T6444] netlink: 'syz.4.101': attribute type 6 has an invalid length. [ 89.797564][ T6442] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 89.823874][ T6442] syzkaller0: linktype set to 780 [ 89.941013][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.951666][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.960862][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.972673][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.981881][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.000171][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.116310][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 90.206099][ T6459] syzkaller0: entered promiscuous mode [ 90.226229][ T6459] syzkaller0: entered allmulticast mode [ 90.611860][ T6477] netlink: 464 bytes leftover after parsing attributes in process `syz.1.108'. [ 90.719386][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.728015][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.803606][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.822776][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.938230][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 90.965165][ T6491] syzkaller0: entered promiscuous mode [ 90.971401][ T6491] syzkaller0: entered allmulticast mode [ 90.996136][ T3476] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.035383][ T3476] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.090954][ T50] bridge_slave_1: left allmulticast mode [ 91.098163][ T50] bridge_slave_1: left promiscuous mode [ 91.105009][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.330528][ T50] bridge_slave_0: left allmulticast mode [ 91.337503][ T50] bridge_slave_0: left promiscuous mode [ 91.345970][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.768811][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.779996][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.790264][ T50] bond0 (unregistering): Released all slaves [ 91.803351][ T3476] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.814315][ T3476] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.857816][ T6513] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 91.918136][ T6518] netlink: 48 bytes leftover after parsing attributes in process `syz.0.116'. [ 92.005757][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.013905][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.083814][ T5836] Bluetooth: hci0: command tx timeout [ 92.098051][ T6527] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 92.098179][ T6515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.121359][ T6515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.171347][ T6528] netlink: 44 bytes leftover after parsing attributes in process `syz.0.118'. [ 92.184305][ T6528] netlink: 43 bytes leftover after parsing attributes in process `syz.0.118'. [ 92.196255][ T6528] netlink: 'syz.0.118': attribute type 5 has an invalid length. [ 92.209004][ T6528] netlink: 43 bytes leftover after parsing attributes in process `syz.0.118'. [ 92.293558][ T258] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.328301][ T258] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.412720][ T258] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.441763][ T258] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.495545][ T6449] chnl_net:caif_netlink_parms(): no params data found [ 92.648851][ T6549] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.821219][ T6552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.124'. [ 92.962778][ T50] hsr_slave_0: left promiscuous mode [ 92.976375][ T6562] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 92.985119][ T50] hsr_slave_1: left promiscuous mode [ 92.992198][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.000157][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 93.009685][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.025418][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.047062][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.101615][ T50] veth1_macvtap: left promiscuous mode [ 93.107709][ T50] veth0_macvtap: left promiscuous mode [ 93.116003][ T50] veth1_vlan: left promiscuous mode [ 93.121649][ T50] veth0_vlan: left promiscuous mode [ 93.884826][ T6584] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 94.050718][ T50] team0 (unregistering): Port device team_slave_1 removed [ 94.083244][ T50] team0 (unregistering): Port device team_slave_0 removed [ 94.167530][ T5836] Bluetooth: hci0: command tx timeout [ 94.454887][ T6449] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.462171][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.493763][ T6449] bridge_slave_0: entered allmulticast mode [ 94.502087][ T6449] bridge_slave_0: entered promiscuous mode [ 94.548791][ T6449] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.562562][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.576447][ T6449] bridge_slave_1: entered allmulticast mode [ 94.597177][ T6449] bridge_slave_1: entered promiscuous mode [ 94.748083][ T6449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.800474][ T6449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.829061][ T6595] netlink: 'syz.4.135': attribute type 12 has an invalid length. [ 94.963284][ T6449] team0: Port device team_slave_0 added [ 95.006944][ T6449] team0: Port device team_slave_1 added [ 95.024895][ T50] IPVS: stop unused estimator thread 0... [ 95.162968][ T6600] netlink: 'syz.4.136': attribute type 13 has an invalid length. [ 95.174117][ T6449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.176262][ T6600] netlink: 'syz.4.136': attribute type 17 has an invalid length. [ 95.182517][ T6449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.218830][ T6449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.366509][ T6600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.380510][ T6600] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.386479][ T6605] netlink: 260 bytes leftover after parsing attributes in process `syz.0.137'. [ 95.407120][ T6600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.424915][ T6449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.433418][ T6449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.464544][ T6449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.731702][ T6449] hsr_slave_0: entered promiscuous mode [ 95.739245][ T6449] hsr_slave_1: entered promiscuous mode [ 95.748101][ T6449] debugfs: 'hsr0' already exists in 'hsr' [ 95.754145][ T6449] Cannot create hsr debugfs directory [ 96.120442][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 96.138553][ T6618] netlink: 'syz.3.139': attribute type 5 has an invalid length. [ 96.144887][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 96.204867][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.229558][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.246947][ T5836] Bluetooth: hci0: command tx timeout [ 96.254187][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.388591][ T6620] tipc: Started in network mode [ 96.395239][ T6620] tipc: Node identity a6c6facd9a53, cluster identity 4711 [ 96.406445][ T6620] tipc: Enabled bearer , priority 0 [ 96.418838][ T6619] tipc: Disabling bearer [ 96.697468][ T6449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.725428][ T6636] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.728758][ T6449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.765349][ T6636] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 96.806378][ T6449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.833380][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 96.863882][ T6449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.911286][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.146'. [ 96.969703][ T6641] tipc: Started in network mode [ 96.980985][ T6641] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 97.011778][ T6641] tipc: Enabled bearer , priority 10 [ 97.044074][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.148'. [ 97.335122][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 97.380512][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 97.400647][ T6640] syz.1.144 (6640) used greatest stack depth: 17688 bytes left [ 97.418662][ T6449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.508901][ T6449] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.527766][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.535357][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.569784][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.577057][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.125304][ T9] tipc: Node number set to 1 [ 98.297776][ T6691] netlink: 64 bytes leftover after parsing attributes in process `syz.1.156'. [ 98.323933][ T5836] Bluetooth: hci0: command tx timeout [ 98.334874][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.156'. [ 98.353237][ T6449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.518544][ T6449] veth0_vlan: entered promiscuous mode [ 98.550577][ T6449] veth1_vlan: entered promiscuous mode [ 98.654650][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 98.680451][ T6449] veth0_macvtap: entered promiscuous mode [ 98.712988][ T6449] veth1_macvtap: entered promiscuous mode [ 98.807486][ T6449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.829058][ T6449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.896308][ T3441] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.926301][ T3441] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.946528][ T3441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.985851][ T3441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.310561][ T6737] netlink: 'syz.0.169': attribute type 10 has an invalid length. [ 99.321083][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.343888][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.442504][ T6741] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 99.457020][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.486964][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.597992][ T6751] ieee802154 phy0 wpan0: encryption failed: -90 [ 99.627247][ T6750] ieee802154 phy0 wpan0: encryption failed: -90 [ 99.661220][ T6751] netlink: 'syz.3.172': attribute type 15 has an invalid length. [ 99.685591][ T6752] netlink: 'syz.1.173': attribute type 1 has an invalid length. [ 100.026550][ T6775] netlink: 'syz.4.179': attribute type 29 has an invalid length. [ 100.186274][ T6782] batadv1: entered promiscuous mode [ 100.404496][ T5836] Bluetooth: hci0: command tx timeout [ 101.438417][ T6814] lec:lec_atm_close: lec0: Shut down! [ 101.465641][ T6838] dummy0: entered promiscuous mode [ 101.471392][ T6838] macsec1: entered promiscuous mode [ 101.508276][ T6838] macsec1: entered allmulticast mode [ 101.513775][ T6838] dummy0: entered allmulticast mode [ 101.546556][ T6849] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 101.635873][ T6838] dummy0: left allmulticast mode [ 101.641255][ T6838] dummy0: left promiscuous mode [ 102.094440][ T6867] wg1 speed is unknown, defaulting to 1000 [ 102.125086][ T6867] wg1 speed is unknown, defaulting to 1000 [ 102.175962][ T6870] __nla_validate_parse: 14 callbacks suppressed [ 102.175982][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 102.235074][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'. [ 102.257184][ T6867] wg1 speed is unknown, defaulting to 1000 [ 102.263527][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 102.272775][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'. [ 102.293891][ T6867] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.316422][ T6867] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 102.395320][ T6871] wg1 speed is unknown, defaulting to 1000 [ 102.422324][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 102.499670][ T6876] ipvlan2: entered promiscuous mode [ 102.526674][ T6878] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 102.546291][ T6867] wg1 speed is unknown, defaulting to 1000 [ 102.582972][ T6880] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 102.649791][ T6867] wg1 speed is unknown, defaulting to 1000 [ 102.669431][ T6867] wg1 speed is unknown, defaulting to 1000 [ 102.678094][ T6867] wg1 speed is unknown, defaulting to 1000 [ 102.686807][ T6867] wg1 speed is unknown, defaulting to 1000 [ 102.700181][ T6869] netlink: 48 bytes leftover after parsing attributes in process `syz.0.194'. [ 102.707037][ T6867] wg1 speed is unknown, defaulting to 1000 [ 102.718178][ T6867] wg1 speed is unknown, defaulting to 1000 [ 102.813314][ T6887] netlink: 'syz.3.201': attribute type 4 has an invalid length. [ 102.837551][ T6888] IPVS: set_ctl: invalid protocol: 60 172.20.20.49:21 [ 102.885921][ T6890] netlink: 'syz.3.201': attribute type 4 has an invalid length. [ 102.935004][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.201'. [ 103.607841][ T6924] netlink: 'syz.1.207': attribute type 7 has an invalid length. [ 103.625977][ T6923] netlink: 'syz.3.208': attribute type 21 has an invalid length. [ 103.649004][ T6923] netlink: 132 bytes leftover after parsing attributes in process `syz.3.208'. [ 103.649126][ T6924] netlink: 'syz.1.207': attribute type 7 has an invalid length. [ 103.789612][ T6932] netlink: 64 bytes leftover after parsing attributes in process `syz.0.210'. [ 103.808973][ T6931] netlink: 64 bytes leftover after parsing attributes in process `syz.0.210'. [ 103.847852][ T6929] wg1 speed is unknown, defaulting to 1000 [ 104.168013][ T6946] tipc: Enabled bearer , priority 0 [ 104.186755][ T6947] tipc: Enabling of bearer rejected, already enabled [ 104.249717][ T6946] syzkaller0: entered promiscuous mode [ 104.267799][ T6946] syzkaller0: entered allmulticast mode [ 104.568813][ T6947] tipc: Resetting bearer [ 104.582559][ T6944] tipc: Resetting bearer [ 104.604325][ T6944] tipc: Disabling bearer [ 104.787142][ T6972] hsr_slave_1 (unregistering): left promiscuous mode [ 104.817577][ T6973] syzkaller0: entered promiscuous mode [ 104.823131][ T6973] syzkaller0: entered allmulticast mode [ 104.917011][ T6985] netlink: 'syz.2.224': attribute type 29 has an invalid length. [ 104.945162][ T6983] syz_tun: entered promiscuous mode [ 104.962060][ T6983] macvtap1: entered promiscuous mode [ 105.012896][ T6992] netlink: 'syz.0.226': attribute type 9 has an invalid length. [ 105.027873][ T6992] netlink: 'syz.0.226': attribute type 11 has an invalid length. [ 105.036303][ T6992] netlink: 'syz.0.226': attribute type 12 has an invalid length. [ 105.390877][ T7007] bond_slave_0: entered promiscuous mode [ 105.397097][ T7007] bond_slave_1: entered promiscuous mode [ 105.403816][ T7007] macvlan2: entered promiscuous mode [ 105.409162][ T7007] bond0: entered promiscuous mode [ 105.416733][ T7007] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.452683][ T7009] macsec1: entered promiscuous mode [ 105.458923][ T7009] bridge0: entered promiscuous mode [ 105.523609][ T7007] tipc: Started in network mode [ 105.530411][ T7007] tipc: Node identity c23676f97815, cluster identity 4711 [ 105.542146][ T7007] tipc: Enabled bearer , priority 0 [ 105.614797][ T7017] netlink: 'syz.0.236': attribute type 3 has an invalid length. [ 105.867822][ T7032] Bluetooth: MGMT ver 1.23 [ 105.874575][ T7031] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 105.916886][ T7025] wg1 speed is unknown, defaulting to 1000 [ 105.976457][ T7032] bond0: (slave bond_slave_1): Releasing backup interface [ 106.200577][ T7029] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 106.213886][ T7029] dvmrp1: linktype set to 774 [ 106.532955][ T7053] wg1 speed is unknown, defaulting to 1000 [ 106.572368][ T7059] wg1 speed is unknown, defaulting to 1000 [ 106.811721][ T107] tipc: Node number set to 3122886393 [ 107.640990][ T7112] bond2: option resend_igmp: invalid value (2878) [ 107.654042][ T7112] bond2: option resend_igmp: allowed values 0 - 255 [ 107.688803][ T7112] bond2 (unregistering): Released all slaves [ 107.923919][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.928180][ T7126] syzkaller0: entered promiscuous mode [ 107.931546][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 107.946317][ T7126] syzkaller0: entered allmulticast mode [ 108.285216][ T7149] wg1 speed is unknown, defaulting to 1000 [ 108.533576][ T7162] __nla_validate_parse: 15 callbacks suppressed [ 108.533597][ T7162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.264'. [ 108.576788][ T7152] wg1 speed is unknown, defaulting to 1000 [ 108.691172][ T7167] netlink: 84 bytes leftover after parsing attributes in process `syz.0.264'. [ 108.712720][ T7167] netlink: 175 bytes leftover after parsing attributes in process `syz.0.264'. [ 109.096084][ T7182] Illegal XDP return value 4294967294 on prog (id 94) dev syz_tun, expect packet loss! [ 109.146973][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 109.359520][ T7187] wg1 speed is unknown, defaulting to 1000 [ 109.475471][ T7193] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 109.821456][ T7210] wg1 speed is unknown, defaulting to 1000 [ 110.074755][ T7218] tipc: Started in network mode [ 110.080134][ T7218] tipc: Node identity de2625c8d7c6, cluster identity 4711 [ 110.089762][ T7218] tipc: Enabled bearer , priority 0 [ 110.119309][ T7234] syzkaller0: entered promiscuous mode [ 110.143950][ T7234] syzkaller0: entered allmulticast mode [ 110.200898][ T7214] tipc: Resetting bearer [ 110.231975][ T7214] tipc: Disabling bearer [ 110.548141][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 110.972145][ T7262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.286'. [ 111.018270][ T7256] wg1 speed is unknown, defaulting to 1000 [ 111.030327][ T6449] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 111.036533][ T6449] CPU: 0 UID: 0 PID: 6449 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 111.045991][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.056050][ T6449] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 111.061615][ T6449] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 a1 e7 5c ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 c6 43 c3 ff 49 83 3f 00 0f 84 [ 111.081579][ T6449] RSP: 0018:ffffc9000bb97800 EFLAGS: 00010206 [ 111.087745][ T6449] RAX: ffffffff8264caaf RBX: 0000000000000000 RCX: ffff8880310a8000 [ 111.095804][ T6449] RDX: 0000000000000000 RSI: ffff8881416be780 RDI: 0000000000000000 [ 111.103865][ T6449] RBP: 0000000000000006 R08: ffff8880310a8000 R09: 0000000000000008 [ 111.111852][ T6449] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 111.120086][ T6449] R13: ffff8881416be780 R14: 0000000000000000 R15: 0000000000000030 [ 111.128153][ T6449] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 111.137259][ T6449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.143873][ T6449] CR2: 00007fbe6d5e7dac CR3: 0000000077aba000 CR4: 00000000003526f0 [ 111.151849][ T6449] Call Trace: [ 111.155208][ T6449] [ 111.158150][ T6449] ? trace_kmalloc+0x1f/0xb0 [ 111.162739][ T6449] ? kobject_move+0x368/0x6e0 [ 111.167683][ T6449] kobject_move+0x525/0x6e0 [ 111.172475][ T6449] ? __pfx_kobject_move+0x10/0x10 [ 111.177746][ T6449] ? do_raw_spin_unlock+0x122/0x240 [ 111.183051][ T6449] ? get_device_parent+0x366/0x3a0 [ 111.188423][ T6449] device_move+0xe0/0x730 [ 111.192756][ T6449] ? disable_delayed_work_sync+0x5c/0xf0 [ 111.198389][ T6449] hci_conn_del_sysfs+0xb8/0x1a0 [ 111.203380][ T6449] hci_conn_del+0xc36/0x1240 [ 111.208067][ T6449] hci_conn_hash_flush+0x191/0x260 [ 111.213313][ T6449] hci_dev_close_sync+0x821/0x1100 [ 111.218517][ T6449] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 111.224071][ T6449] ? up_write+0x1ac/0x410 [ 111.228670][ T6449] ? rcu_is_watching+0x15/0xb0 [ 111.233444][ T6449] hci_unregister_dev+0x21a/0x5b0 [ 111.238469][ T6449] vhci_release+0x152/0x1a0 [ 111.242981][ T6449] ? __pfx_vhci_release+0x10/0x10 [ 111.248359][ T6449] __fput+0x44c/0xa70 [ 111.252347][ T6449] task_work_run+0x1d4/0x260 [ 111.257381][ T6449] ? __pfx_task_work_run+0x10/0x10 [ 111.262503][ T6449] ? kmem_cache_free+0x197/0x620 [ 111.267525][ T6449] ? do_exit+0x6c0/0x2310 [ 111.271859][ T6449] do_exit+0x6c5/0x2310 [ 111.276110][ T6449] ? __pfx_do_exit+0x10/0x10 [ 111.280793][ T6449] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.285998][ T6449] ? lockdep_hardirqs_on+0x98/0x140 [ 111.291285][ T6449] do_group_exit+0x21c/0x2d0 [ 111.296143][ T6449] __x64_sys_exit_group+0x3f/0x40 [ 111.301430][ T6449] x64_sys_call+0x2210/0x2210 [ 111.307062][ T6449] do_syscall_64+0xfa/0xf80 [ 111.311744][ T6449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.317897][ T6449] ? clear_bhb_loop+0x60/0xb0 [ 111.322748][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.328646][ T6449] RIP: 0033:0x7fbc20b8f749 [ 111.333149][ T6449] Code: Unable to access opcode bytes at 0x7fbc20b8f71f. [ 111.340163][ T6449] RSP: 002b:00007fffd649a9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 111.348667][ T6449] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbc20b8f749 [ 111.356810][ T6449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 111.364779][ T6449] RBP: 00007fbc20c15888 R08: 00007fffd6498776 R09: 00000000000927c0 [ 111.372752][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 111.380900][ T6449] R13: 00000000000927c0 R14: 000000000001ae6a R15: 00007fffd649ab90 [ 111.388880][ T6449] [ 111.391897][ T6449] Modules linked in: [ 111.396749][ T6449] ---[ end trace 0000000000000000 ]--- [ 111.413752][ T6449] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 111.419681][ T6449] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 a1 e7 5c ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 c6 43 c3 ff 49 83 3f 00 0f 84 [ 111.440313][ T6449] RSP: 0018:ffffc9000bb97800 EFLAGS: 00010206 [ 111.447686][ T6449] RAX: ffffffff8264caaf RBX: 0000000000000000 RCX: ffff8880310a8000 [ 111.457091][ T6449] RDX: 0000000000000000 RSI: ffff8881416be780 RDI: 0000000000000000 [ 111.465370][ T6449] RBP: 0000000000000006 R08: ffff8880310a8000 R09: 0000000000000008 [ 111.474383][ T6449] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 111.482665][ T6449] R13: ffff8881416be780 R14: 0000000000000000 R15: 0000000000000030 [ 111.491440][ T6449] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 111.501130][ T6449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.508739][ T6449] CR2: 0000000000000000 CR3: 0000000076eca000 CR4: 00000000003526f0 [ 111.517573][ T6449] Kernel panic - not syncing: Fatal exception [ 111.523834][ T6449] Kernel Offset: disabled [ 111.528155][ T6449] Rebooting in 86400 seconds..