last executing test programs: 4m58.968964817s ago: executing program 4 (id=470): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) r0 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfff8, 0x90000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg$alg(r3, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 4m57.535590707s ago: executing program 4 (id=487): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8, @ANYRES64], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x1f, 0x40, 0xfffffffd, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x20, 0x7, 0x18000000, 0x8}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x2) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r10, 0x0, 0x0, 0x40010, &(0x7f0000000840)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x114, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c8) 4m56.816170243s ago: executing program 4 (id=495): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0xc00}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 4m56.641121639s ago: executing program 4 (id=497): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffff7f}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x20000000}], 0x5, 0xc0) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 4m55.849961336s ago: executing program 4 (id=504): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002740)) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) shutdown(r3, 0x1) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r5, @ANYRES64=r4, @ANYBLOB="445abc8df086dd7a65da6bdaf7cf33feb6b7b9564eaa03c7b45f4b3d99ea64b586200d794236f43245496420e37903464d2ea403483d2fd0f922cb20be031df06baafc9279e8b46a4ec4b8c1049b774d8b55ec10753efcc55375c10e6cc5a70ece36ac5036e4bfc6351362ea957f9f0e54c801e8024b07b508462c2ea6883f76d333b7bada", @ANYRES64=0x77359400, @ANYRESDEC=r1, @ANYBLOB="00da34fdf8"], 0x48}}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x840) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000540)={&(0x7f0000000480), 0x0, 0x38, 0x0, 0x1d8d}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x3953c2, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1405, 0x702, 0x70bd2a, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x9, 0x0, 0x2, 0x6, 0x1bd1, 0x8}, &(0x7f0000000100)=0x20) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x2b) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4m52.988771193s ago: executing program 4 (id=526): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x80}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='@', 0xffe0, 0x2404c8d5, &(0x7f0000000140)={0xa, 0x4e23, 0xffffffff, @loopback, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 4m37.916357819s ago: executing program 32 (id=526): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x80}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='@', 0xffe0, 0x2404c8d5, &(0x7f0000000140)={0xa, 0x4e23, 0xffffffff, @loopback, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 2m42.176867441s ago: executing program 5 (id=1638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xfff8}, {0xffff, 0xffff}, {0x16, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0xd, 0x81, 0x16, 0x2, 0x12, 0x5}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @exit], &(0x7f0000000100)='GPL\x00', 0x1, 0x3b, &(0x7f0000000140)=""/59, 0x40e00, 0x2, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0x1}, 0x94) 2m41.913107697s ago: executing program 5 (id=1642): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)}, 0x4}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000140)={0x8, 0xda96, 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x419cb969}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x24004000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x3, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x5, 0x19, "d8"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x7002, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8002}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48884}, 0x410) 2m41.069991782s ago: executing program 5 (id=1654): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) socketpair(0x2a, 0x80f, 0x40, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000003c60010000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000009060500000000000000000007000001100008800c00078006001d40000100000500010007000000200008800c000780060005404e240000100007800b001a0023295c262f3a0000090002007b797a320000000005000100070000000500010007000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r2, r0}, 0xc) 2m40.785304605s ago: executing program 5 (id=1658): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r2, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000042000000000000000000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x2000000000031, 0xffffffffffffffff, 0x0) 2m40.480818393s ago: executing program 5 (id=1662): socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "6ff1af", 0x30, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "485392a90164e9a0f695ee47cd5da4b76f3148e9465e425964845ea5ca579b8d2ea79715"}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x73) r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x1c, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) socket$kcm(0x2, 0xa, 0x73) socket$kcm(0x2, 0xa, 0x73) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m39.848074918s ago: executing program 5 (id=1670): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x54}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c17ab1025ce32b1301ff8ba83303e82c29bc", 0x13}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0x184, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x66}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'ccm(blowfish-asm)\x00'}}}]}, 0x184}}, 0x20000844) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r4}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r10, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f0671271e31c2f8d", 0x1a}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x6}], 0x3) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r9, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r9, 0x910, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131f}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xadc}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5c6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1277}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x87c}]}, 0x70}}, 0x64044080) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)}, {&(0x7f0000000300)="4f5196c5b0ac0e984fb91427741cb57529251fa8c8203443e9f022a748c47d5791b4c78ed16720e79083feac831a97722575149d28fa1a2a07c2b2b1f03b0fbf1f6e1b31075b9f9c63df40bac9954071b7335c19d1199fc61218831124fd3be17cc78079e237e264902f7514003155b2293916155c35e7d06fcb02cf1a72854448e320e94fd7218fb0f141f12b1c31a65986803540c22de0499973deae", 0x9d}, {&(0x7f0000000400)="69c062fed47198c46a924a48fd507c263ec0ccccf0f745a3780bb6", 0x1b}], 0x3, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x20040011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r12, 0x4, 0xfd, 0x6, 0x5, 0x39, @local, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0x0, 0xe}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x3c}}, 0x44811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) 2m24.279062824s ago: executing program 33 (id=1670): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x54}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c17ab1025ce32b1301ff8ba83303e82c29bc", 0x13}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0x184, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x66}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'ccm(blowfish-asm)\x00'}}}]}, 0x184}}, 0x20000844) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r4}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r10, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f0671271e31c2f8d", 0x1a}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x6}], 0x3) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r9, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r9, 0x910, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131f}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xadc}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5c6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1277}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x87c}]}, 0x70}}, 0x64044080) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)}, {&(0x7f0000000300)="4f5196c5b0ac0e984fb91427741cb57529251fa8c8203443e9f022a748c47d5791b4c78ed16720e79083feac831a97722575149d28fa1a2a07c2b2b1f03b0fbf1f6e1b31075b9f9c63df40bac9954071b7335c19d1199fc61218831124fd3be17cc78079e237e264902f7514003155b2293916155c35e7d06fcb02cf1a72854448e320e94fd7218fb0f141f12b1c31a65986803540c22de0499973deae", 0x9d}, {&(0x7f0000000400)="69c062fed47198c46a924a48fd507c263ec0ccccf0f745a3780bb6", 0x1b}], 0x3, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x20040011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r12, 0x4, 0xfd, 0x6, 0x5, 0x39, @local, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0x0, 0xe}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x3c}}, 0x44811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) 2m0.321825211s ago: executing program 6 (id=1971): socket$netlink(0x10, 0x3, 0x0) 2m0.040483666s ago: executing program 6 (id=1976): r0 = socket(0xa, 0x80000, 0x101) sendmsg(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)="ceac9458f7db6db7c7436d80efe75ab0b1fe4b7746b64c8e31f078e3bb0176c48cca50f106", 0x25}, {&(0x7f0000000380)="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", 0x1000}], 0x2, &(0x7f00000013c0)=[{0xc8, 0x11, 0x0, "d4b6c27b48fb3795a8ea8244ddcc7376633cd210054244c2bf0e031f9ea6aeb5ef512a4f6f03f22c545987f416106841768aeba3d70ed83c80ce1811060f3b8c9849d196969b352ff526fbe2d2617e3e29b4214d16632f9ca40a8ebbcb304d1464ab642a212b493d5d77a5a1e3505e88b3732c7e64cece8e6be7fc7b3e5839260e925f31a63b428ee8069c7544e3cb8ce6158d55b3114f9405e4a4db1d53dd19a90244789c3f05be0b8020f8f82c082e1993d0d564"}, {0x60, 0x108, 0x3, "6bc3994027e77049212fa45aa7b528903b7b4786a7af5ed23d3c234cf6a1a3000e976aa477348334e122438e53b2367f5ba79cdb9dd3a06cfbfe368c7b1364bd8d770c99c63ebcd59976"}, {0xd0, 0x102, 0x9, "0eddb7d2242aa4d2c9a99082d0848172e65ba4a88c111b2cf36300224525d29bb49c038aca9e4b5bdad0b483b77a2a15d1244168480cea00b449f328445224285755106b7af21dca25084e05610db14ac8350bfb6fe8b1ef4346b2796c3a61b008847a4b2adff15089cb04a124fc31ecb980b57a1e0afcb5e02413d4629a689b7f4d475ffb18372eff5556a084e9d346fd5f61c8e420ebd18cc0288df3b62b3076e3f8e07154f776b5ce7253f509c5cc3364def14caf2ad38e1cc6096ff0"}], 0x1f8}, 0x4001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg$unix(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002102, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x90000005}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) 1m58.972816818s ago: executing program 6 (id=1986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'blkio'}, {0x2b, 'cpuacct'}]}, 0x10) sendto$inet6(r0, &(0x7f0000000240)="e1", 0x1, 0x200080c1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000440)={0x2, 0xf, 0xd, 0x8, 0x205, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_sec_ctx={0x201, 0x18, 0x24, 0x89, 0x1000, "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"}]}, 0x1028}}, 0x4040090) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a31000000000500040000000000140007800500150040f17c0708001240000000000500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x20004890) sendto$inet6(r0, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'blkio'}, {0x2b, 'cpuacct'}]}, 0x10) (async) sendto$inet6(r0, &(0x7f0000000240)="e1", 0x1, 0x200080c1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000440)={0x2, 0xf, 0xd, 0x8, 0x205, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_sec_ctx={0x201, 0x18, 0x24, 0x89, 0x1000, "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"}]}, 0x1028}}, 0x4040090) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a31000000000500040000000000140007800500150040f17c0708001240000000000500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x20004890) (async) sendto$inet6(r0, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e) (async) 1m58.563837281s ago: executing program 6 (id=1989): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x21, @remote, 0x4e23, 0x4, 'sh\x00', 0x24, 0xa, 0x6f}, {@multicast1, 0x4e23, 0x1, 0x6, 0x80, 0x5}}, 0x44) 1m58.008691406s ago: executing program 6 (id=1993): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000711050000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006200028008004040cc4912"], 0x3c}}, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000080)={0x0, @local}, &(0x7f0000000180)=0xc) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="09000300010000", 0x7) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd2a, 0x25dfdbff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x4, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x4, {@ip4=@dev={0xac, 0x14, 0x14, 0x35}, 0x1000}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00000001300000225bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000004006010000024002b800800030001000000080003000c00000089fd03000800000008000100", @ANYRES32=r2, @ANYBLOB="08002500040000000d002200552b6b2200000000000000000b002200d159dcdf08270100220022000ec041e9850ea6a363de15e45b02e935e840ce5cfc8561036cc207468140007b6dad3d0003000000140003006261746164765f26eceaa29daf598163cb21b807736c6176655f30000008000f00060077b3bd558a73ba776c3e3e480e8d69000004"], 0xfffffffffffffcaa}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket(0xa, 0x3, 0x87) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0xe, 0x5, 0x7, 0x3b, @private0, @mcast2, 0x700, 0x10, 0x0, 0xde}}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000711050000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006200028008004040cc4912"], 0x3c}}, 0x0) (async) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket(0x10, 0x803, 0x0) (async) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000080)={0x0, @local}, &(0x7f0000000180)=0xc) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r7, &(0x7f0000000000)="09000300010000", 0x7) (async) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd2a, 0x25dfdbff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x4, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x4, {@ip4=@dev={0xac, 0x14, 0x14, 0x35}, 0x1000}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00000001300000225bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000004006010000024002b800800030001000000080003000c00000089fd03000800000008000100", @ANYRES32=r2, @ANYBLOB="08002500040000000d002200552b6b2200000000000000000b002200d159dcdf08270100220022000ec041e9850ea6a363de15e45b02e935e840ce5cfc8561036cc207468140007b6dad3d0003000000140003006261746164765f26eceaa29daf598163cb21b807736c6176655f30000008000f00060077b3bd558a73ba776c3e3e480e8d69000004"], 0xfffffffffffffcaa}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket(0xa, 0x3, 0x87) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0xe, 0x5, 0x7, 0x3b, @private0, @mcast2, 0x700, 0x10, 0x0, 0xde}}) (async) 1m54.004799409s ago: executing program 6 (id=1997): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x31, &(0x7f0000000280)="b74560dc", 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xe5c}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x1, 0x0, 0xfffffff7, 0x73, r6}, 0x10) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0xff1e) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r7, @ANYRES64=r0, @ANYBLOB="890c020000000000480012800b0001006970366772650000380002800400120008000100", @ANYBLOB="659ed62c8f25944e8f40fe82c78194be0f59b7f3bf108751fdcf01cf2caf5ad9a078c933", @ANYBLOB="14000700ff6da9000000000000000000000000011400060020c7"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 1m38.958044115s ago: executing program 34 (id=1997): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000880) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x31, &(0x7f0000000280)="b74560dc", 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xe5c}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x1, 0x0, 0xfffffff7, 0x73, r6}, 0x10) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0xff1e) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r7, @ANYRES64=r0, @ANYBLOB="890c020000000000480012800b0001006970366772650000380002800400120008000100", @ANYBLOB="659ed62c8f25944e8f40fe82c78194be0f59b7f3bf108751fdcf01cf2caf5ad9a078c933", @ANYBLOB="14000700ff6da9000000000000000000000000011400060020c7"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 36.67618866s ago: executing program 2 (id=2552): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xd, 0x2}]}, @union={0xa, 0x5, 0x0, 0x5, 0x1, 0x6, [{0xa, 0x1, 0x40}, {0x3, 0x4, 0x236}, {0xd, 0x0, 0x800}, {0xd, 0x3, 0x401}, {0x9, 0x1, 0x6}]}]}}, &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x1, 0x10}, 0x28) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x20000400) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x81, 0x2, 0x4, 0x4b, @mcast1, @private2, 0x7, 0x80, 0x0, 0x6}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001780)={&(0x7f0000003240)=ANY=[@ANYBLOB="c4120000", @ANYRES16=r1, @ANYBLOB="000228bd7000fedbdf250c000000480003800400010036000500eddf3fa6445d6da2987781621b353e520daca080ab8ff6253a64cba3d1c1aeb458b084891924981b502d45914a4c4c40bd100000080002009b030000040003802000018008000100", @ANYRES32=r3, @ANYBLOB="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"], 0x12c4}, 0x1, 0x0, 0x0, 0x4040004}, 0x44) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d30145653600648d1d0012000200270000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e20, 0xd6b, @local, 0x2}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="48271f627ca5f1b101a6daa788b6cb6760a9e1d651e721fe185acb5e1549f7d7457a6dd1911e194a76b71ddb46b1b009", 0x30}], 0x1, &(0x7f0000000180)=[@hoplimit={{0x14, 0x29, 0x34, 0xe}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x0, 0x5, '\x00', [@ra={0x5, 0x2, 0x9}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0xd}]}}}], 0x60}, 0x800) 36.437752149s ago: executing program 2 (id=2555): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c3, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041) 36.032894773s ago: executing program 2 (id=2560): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x434, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x3, 0x9, 0x4, 0x6, 0x40, 0x4, 0x40, 0x6, 0x482e3068, 0xff, 0xfffffbea, 0x6, 0x542, 0x400040, 0xe0000, 0x1, 0xc, 0x1, 0x800, 0xd, 0x0, 0x7ff, 0xb3e, 0x3ff, 0x7, 0x7, 0x400, 0x7, 0xa45, 0xc, 0x7f, 0x401, 0x5, 0xfffffff7, 0xfffffff2, 0x3, 0x9, 0x7436, 0x7, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1, 0x2bf7, 0x6, 0x7, 0x0, 0x3, 0x3, 0x1, 0x9, 0x1, 0x4, 0x4, 0x6, 0x3, 0x10000, 0x7, 0x5, 0x3, 0x80000001, 0x9, 0x5, 0x1cb, 0x5, 0x7, 0x7, 0x7, 0xfff, 0x2, 0x7, 0x9, 0xffff, 0x800001, 0x3, 0x4, 0x8, 0xe1cc, 0x9, 0xc7, 0x7, 0x55, 0x6, 0x75a, 0x8, 0x2, 0x6, 0x40, 0x8, 0x7, 0x5, 0x0, 0xf03, 0x7, 0x8, 0x9, 0x3, 0x7, 0x21931f93, 0x1, 0x800, 0x10, 0xfffffffd, 0x0, 0x2, 0xffffffc0, 0x1, 0x7ff, 0x6ed4, 0xffffff80, 0x3, 0x200, 0xcc4, 0x2, 0x3, 0x10b, 0x2, 0x8000009, 0xac21, 0x0, 0x8, 0xc33, 0xff, 0x2f, 0x8, 0x85, 0x2, 0xf1c6, 0x8, 0x5, 0x6, 0x40, 0x4, 0x2, 0xa, 0x80000001, 0xb, 0x7, 0x3, 0x9, 0x7, 0xa93, 0x80000000, 0x80000001, 0x7f, 0x1ff, 0x0, 0x3, 0x870, 0x67bae144, 0x9, 0x4, 0x6a8, 0xe4b, 0x1, 0x13, 0x1, 0x6, 0x4a68, 0xe, 0x10, 0xffffffff, 0x7f, 0x0, 0xa0a, 0x9, 0x3, 0xffffffe8, 0xc71, 0x8, 0xffffff5b, 0x8, 0x0, 0x80000001, 0x5, 0x6, 0x0, 0x30869cc6, 0x0, 0x3ff, 0x4, 0x80, 0x5, 0x15bf41b1, 0xf, 0x6, 0xfffffffe, 0x8, 0x0, 0x943, 0x7, 0xe, 0x5, 0x9, 0x2, 0x0, 0x1, 0x1000, 0x1000, 0x7ff, 0x6, 0x2, 0x0, 0x7, 0xb263, 0x1, 0x7, 0x4, 0x1, 0xc, 0x1, 0x200, 0x8001, 0x5, 0x303f, 0x5d, 0x3, 0x4, 0x3, 0x4, 0x2, 0x7, 0x39b1e32c, 0x0, 0x8a84, 0x1, 0x40, 0x10000, 0x1, 0xb, 0xfffffffd, 0x4, 0x6, 0x5, 0xf2, 0x1834, 0x10000, 0x7ff, 0x1, 0xeb7, 0x67f1, 0x9, 0xffff, 0x3ff, 0x80000000, 0xd, 0x3, 0x10001, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0xfffffffffffffdb0, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(r2, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a0001062abd7000f4ffffff02000000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x30}}, 0x0) 35.728528257s ago: executing program 2 (id=2564): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xc00}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 35.558927874s ago: executing program 2 (id=2565): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1000}, @map_fd={0x18, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x5d}, @exit, @alu={0x0, 0x0, 0x5, 0x9, 0x8, 0x18}]}, &(0x7f0000000180)='GPL\x00', 0x7c, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xd, 0x10000, 0x10}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000380)=[{0x2, 0x1, 0x8, 0xc}, {0x0, 0x3, 0x2, 0x1}, {0x3, 0x3, 0xc, 0x3}, {0x3, 0x3, 0x5}, {0x2, 0x5, 0x6, 0x6}, {0x1, 0x4, 0xd, 0x3}], 0x10, 0xc5}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000004c0)={0x5, 0x4}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)={'b', ' *:* ', 'r\x00'}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1a, 0x226, 0xedf7, 0x9, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa0, 0xb, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x57be}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_vlan\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xcb}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x88}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_virt_wifi\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000001340)="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", 0xcc1}], 0x5, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=@base={0x4, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0xfffffffe}, 0x8}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x2, 0x1, 0xffffffffffffffff, 0x400}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000012c0)=[@mss={0x2, 0xfff}, @timestamp], 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r6}, &(0x7f0000001300), &(0x7f0000001340)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r5}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r7}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) 33.832131436s ago: executing program 2 (id=2575): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002000010026bd706d603a08dd2677ca5c8600fbdbdf2502101000090000060600010008000200ac14"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbfe, {0x3}}, 0x14}}, 0x4004804) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="20030000", @ANYRES16=r2, @ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x24000014}, 0xc001) 18.779271558s ago: executing program 35 (id=2575): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002000010026bd706d603a08dd2677ca5c8600fbdbdf2502101000090000060600010008000200ac14"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbfe, {0x3}}, 0x14}}, 0x4004804) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="20030000", @ANYRES16=r2, @ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x24000014}, 0xc001) 10.871591591s ago: executing program 1 (id=2712): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000020) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f000000e000)=[{{0x0, 0x0, &(0x7f000000d400)=[{&(0x7f000000d080)="eaba3e5f9c19b49d25d8ec768f0a06bcd9291c2d7aeb39f8db27c9a7f2d4b7b61c8821399d9913a441c8233fca7886eaad96", 0x32}, {&(0x7f000000d100)="f9e5778253cc3fbe6184aaf51726d4ccdf0e3844874dcc9c33c34fead6ff1dfcd5b9122710188c0274a3073f4f0284ce06569ed1c47f2427870173e21318675df806379658debdc302ec76835e20517ab1cc56299142f1aeff2c6af65a7b559109b275a2892ce8b27d82efeb59cf60655db42bad5934b4794ec6395763802ee9d0f71c662d27f912ba2988d772f9e4a405969cdc119b8340c7", 0x99}, {&(0x7f000000d1c0)="989cf6f681284ccb2787f9c14894c81e2a1e9a63eb2530cd2c17f68c1e73a8dd85e6f2fc66cd2eb3189de352d9592b12d2faad4a10b4a4a22e4955c91b0b2554dceb78e0fefbdd7ae130e7", 0x4b}, {&(0x7f000000d240)="ff93941bfac5998a84b767d07aad33f0d5d1d7d3086fb4ddb3818f177aba1dda515b8ff35a55a117f4e44e3602bd08f0ae1c4cb6192dd5cd9bb4aeb4f484a4d8d7c5a9d971f2b95cdca5f4a54bba07f8a12b", 0x52}, {&(0x7f000000d2c0)="15e485d542", 0x5}, {&(0x7f000000d3c0)="c34f64e90c5ef31171a283", 0xb}], 0x6, 0x0, 0x0, 0x20000805}}], 0x1, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r5, 0x25, 0x0, @void}, 0x10) sendto$packet(r3, &(0x7f00000002c0)="f09141c22961f84270f8633c200df745d07cc1d8bd6324842fd8c771a70fabd0181d1d14ab163255ee0118c89c3a8f53241a5e559f63a8398cadaafc283fd3c7fa2498e2f43965ad147a668468cbe59704d0745ff648f3eb301e17f3d5d668e375603d632c62c5ece440ed59", 0x6c, 0x2004c080, &(0x7f0000000340)={0x11, 0x5, r5, 0x1, 0x5, 0x6, @multicast}, 0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x80000000}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000540)={{r1, &(0x7f0000000180)='xfrm0\x00', 0x101801, &(0x7f00000001c0)={@align=0x2800000000, {0x8000, 0x23, 0x2, 0x45a}}, 0xeaa, 0x0, 0x0}, 0x0, 0x0}) 10.348831389s ago: executing program 1 (id=2716): epoll_create1(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000180)) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001f0ffffff00000000000500000a3c000000060a010400000000000000000a0000010900010073797a31000000000900020073797a3200000000100004800c0001800700010063740000140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500210007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2572], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r9, r8}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r7, r6}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000300)={r10}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0x6, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0xf, "37cf010c80d952c1e7cef44021"}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x70, 0x29, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x8, 0xa}, {0x4, 0x2}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d) 9.706952727s ago: executing program 1 (id=2721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) 9.295199868s ago: executing program 1 (id=2725): r0 = socket(0x840000000002, 0x3, 0x100) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000004c000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000001b351077d9bf9bd33cdcbed903c3bab68827fe7214c4cfb56db23cba76a8ca24fdd8067a6ac71705cb616119d0d8f0eb25e412dcaf79f41ced1c930afcc4a2a509ae504ceeb42fc03f95a0fe403573658020dc9696340e872b305a700c7b284da68eaddc9c124cc213c1d3958b78d2cc14aa04163efe53af2c8527872205222cc4bc562a2391569282cdb2ab64ca16c189d11915924e47e32269597009b9f295c0ce9df36d7788384c1734ca1513968519b80b1604d36af7b107ac76ffabd61521841b3095caac21350057ae4906844816", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r3}, 0x20) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x7}, {0x1, 0xffff}, {0x6, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048045}, 0x4000005) r7 = socket(0x25, 0x5, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004440) socket(0x10, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r10, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r9], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000379176cc81618424d5ba6fd91566107b2d7a1783ccbb516a5f0cbd50661b7282f76b1f0036b76383751439563a7e20156b7761a426ec53df8e09a5daac815d178ae163c9aea0bf16a0b8f0ef85cd15b99006322f947ecfcf75ac7b86c1900a8258a4dc732d63a97cff77918dd105e23d10fea43b3e4ff1d524f9b6eb0e218b84834bcd38e4fac1370f", @ANYRES16=r8, @ANYRES16=r7], 0x2c}}, 0xc8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1d16ab55}]}]}], {0x14}}, 0x80}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r13, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000140}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf250700000014000600ff01000000000000000000000000000114000600200100000000000000000000000000f6562cc71b487227cee527d07fabd8e002"], 0x3c}, 0x1, 0x0, 0x0, 0x400c011}, 0x804) sendmmsg$inet(r0, &(0x7f0000005240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001900000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 9.170884438s ago: executing program 1 (id=2726): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r3], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000006a8f8d000000", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000300"/28], 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) r9 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.452308596s ago: executing program 1 (id=2729): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r1, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x62, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x2c, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x42, 0x25}, @sack_perm={0x4, 0x2}, @sack={0x5, 0xa, [0x1, 0x9dd]}]}}}}}}}}, 0x0) 3.236371502s ago: executing program 7 (id=2755): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) unshare(0xa020480) write$tun(r0, &(0x7f0000000640)=ANY=[], 0x204) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0, 0x0, {0x3000000}}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686) 3.074735783s ago: executing program 3 (id=2757): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x3feff, 0x20110}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x4c}}, 0x0) 3.039297413s ago: executing program 7 (id=2759): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.856466053s ago: executing program 3 (id=2760): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000240)={@loopback, 0x76}) getpeername(r0, &(0x7f0000000180)=@tipc=@id, &(0x7f0000000200)=0x80) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x477b2ac261c822f7, &(0x7f0000000100)=0x5, 0x4) sendmsg$AUDIT_TRIM(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x400, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x94) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 2.634982751s ago: executing program 0 (id=2763): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000020000000000000700000000030000000000000f0100000000000000000000020200000000002e2e"], 0x0, 0x44}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000020000000000000700000000030000000000000f0100000000000000000000020200000000002e2e"], 0x0, 0x44}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x15d2c3, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)=0x1) (async) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCGNPMODE(r6, 0x4008744b, &(0x7f0000000100)={0x29, 0x2}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0x5}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0x5}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff6d, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_DATA={0xe, 0x3, '.)}@/):$*\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf2535000061da000300", @ANYRES32=r10, @ANYBLOB="0c00990002000000260000000600fd0081000000"], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x804) 2.485585408s ago: executing program 3 (id=2764): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x453, 0x10, 0x70bd2c, 0x25dfdbfc, "56df9dada94d808a22ccfe1b7fe7192a09a5e5d7c8c60c8d28339346fb49db764caca401ef9a2493f405cd920f"}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000800)={{r2, &(0x7f0000000180)='\x00', 0x40000, &(0x7f00000001c0)={@align, {0x5, 0xb, 0xfffffffc, 0xa1}}, 0x200, &(0x7f0000000280), &(0x7f00000002c0)=0x9}, 0x3, &(0x7f0000000740)=[{0x2, 0x9, &(0x7f0000000440)='tls', &(0x7f0000000480)="ccb63a38cc7b4c3190e1dd21bc6de65f1b6825", 0x13}, {0x2, 0x7e0, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="7b21a457b0c3e1867a846085407f5aa45e0a2ebc8793610efcb446f41e07d9f9dd0177145d0331eb947ef8cc09ace65501190d51d990", 0x36, 0x32}, {0x3, 0x3, &(0x7f0000000540)='-{$:\x00', &(0x7f0000000580), 0x0, 0x10}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000dc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x4040000) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x28, 0xa, 0x0) 2.484149359s ago: executing program 7 (id=2765): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1f, 0xffffffffffffff04, &(0x7f0000000040)="b9ff03076844268cb89e14f086dd47e08906200060000021000aac141440e0", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa10000000000000701000000feffffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000001c0)={@remote, @empty}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newchain={0xac0, 0x64, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {0x0, 0x10}, {0x6, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_fw={{0x7}, {0xa54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_ctinfo={0x4c, 0x1b, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}]}, {0x17, 0x6, "5258aa217f2ccd22aa53fffcdc065e1ef378a6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_POLICE={0x418, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x411a, 0x6, 0x9, 0xc97, 0x4, 0x3, 0x3, 0x1, 0x200, 0x4, 0x2, 0x6, 0xffff, 0x9, 0x5cf, 0x1c8, 0x0, 0x2, 0x5, 0x80000001, 0x400, 0xfffffffe, 0x9, 0x39d, 0xfff, 0x1, 0x8001, 0xd, 0x200000, 0x0, 0xf, 0xa7, 0x0, 0xff, 0x8000, 0x2, 0x7d4, 0x6, 0x5, 0x1ff, 0x7, 0x5, 0x8000, 0x9, 0xf, 0x9, 0x68a, 0x4, 0x4, 0x2, 0xb7, 0x2, 0x6, 0xffff, 0x3, 0x4c56, 0xfffffba1, 0x3, 0x7fff, 0x5, 0x80000000, 0x8001, 0xc, 0x10000, 0x5, 0xffffff46, 0x5dd, 0x3, 0x1ff, 0x10, 0x3, 0x2, 0x4, 0x8, 0x5, 0x8, 0x7, 0x4, 0x7, 0x5, 0x7, 0xb18, 0x8, 0xae4, 0x8001, 0xb81f, 0x3, 0x9, 0x6, 0xa000000, 0x6, 0x3, 0x1, 0x5, 0xfffffffd, 0x7ff, 0x97, 0x6c3c, 0x4, 0xff, 0x8, 0x5, 0x4, 0x8, 0xf5e0, 0x400, 0x3c40, 0x12, 0x4c2, 0x3, 0x1, 0x9, 0x7, 0x2, 0x5, 0x8d1, 0x1, 0x0, 0x7f, 0x9, 0x39, 0x7, 0x80000001, 0x4, 0xffffffff, 0x3, 0x8001, 0x81, 0xffffffff, 0x9, 0x3, 0x846, 0x37b153e7, 0xfff, 0x327, 0x3, 0x8, 0x2, 0x6, 0x1, 0x7f, 0x78a, 0x9, 0x4, 0x8, 0x2, 0xff, 0x3, 0x2, 0x6, 0x3, 0xabdb, 0x2, 0x8, 0x8, 0x1000, 0xfff, 0x1, 0x1ff, 0x8, 0x430, 0x6, 0x6, 0x8, 0x6, 0x1, 0x1, 0x2, 0x62bb, 0x2, 0x10001, 0x3, 0x800, 0x7d, 0x4, 0x4, 0x1ff, 0x1, 0x8, 0x1, 0x5, 0xff, 0x8, 0x1, 0x7, 0x7b, 0x6ce40afe, 0x1, 0x401, 0x8, 0xb, 0x46, 0x1, 0xc2, 0x0, 0x6, 0x9, 0x100, 0xa, 0x1, 0x72c, 0x287, 0x4, 0x8, 0x0, 0x3ff, 0x4, 0x6, 0x6, 0xe, 0x2, 0xff, 0x7ff, 0x200, 0x1, 0x4e1, 0x5, 0x5, 0x7, 0x9, 0x8000000, 0x7ece, 0x0, 0x4, 0x974408a9, 0x5, 0x800, 0x10000, 0x1, 0x8, 0xffffffff, 0x4, 0x3e910e1c, 0x8, 0x3, 0x15, 0x6, 0x0, 0xc52, 0x0, 0x5, 0x200, 0x8, 0x2, 0x7fff, 0x2, 0x6, 0x7, 0xd05, 0x8cb0, 0x10001, 0x90b03d96, 0x1, 0x4, 0xe57]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_FW_POLICE={0x478, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0xf, 0x1ff, 0x230a, {0x9, 0x1, 0x1, 0x9, 0xb3d8, 0x7}, {0x4, 0x2, 0x2, 0x0, 0xd, 0x3}, 0x3, 0x6, 0x97e}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3e, 0x7fffffff, 0x2, 0x9, 0x9, 0x1, 0x66, 0x8000, 0x4, 0x77c08e8f, 0x0, 0x8, 0x2a7, 0x1ff, 0x0, 0xfff, 0x3, 0x5, 0xaa, 0x5, 0x17d, 0xf293, 0x2, 0x5, 0x8001, 0x6, 0x2, 0x5a, 0xecd3, 0x4, 0x7, 0x3, 0x5, 0xfc000000, 0x500000, 0x1b19644f, 0x1, 0xc7c5, 0xffff0000, 0x0, 0x1, 0x80000001, 0x9b2, 0x2, 0x6, 0x4, 0x5, 0x2, 0x0, 0x23, 0x9, 0x1, 0x5, 0x0, 0x1, 0x3, 0x8001, 0x6, 0x2dcf, 0x2d91, 0xfffffffb, 0x4, 0x8d, 0x6, 0x0, 0xe, 0x8, 0x7, 0xb, 0x29, 0x7, 0x2, 0x70a2, 0x677d, 0x3, 0x80000000, 0x7ff, 0x3, 0x7ff, 0x1ff, 0xf, 0x7ff, 0xfffffffb, 0x7, 0x6667, 0x7f, 0x8000, 0x9, 0x9, 0x6, 0x1, 0x0, 0xfffffffc, 0x9, 0xe, 0x8, 0xffffffff, 0x0, 0x4, 0x8, 0x1a, 0xf, 0x2, 0x0, 0x6a, 0x3, 0x7ff, 0x8, 0x7, 0x6, 0x0, 0x0, 0x80000001, 0xa, 0x40000, 0x3, 0x643, 0x8001, 0x6, 0x773255ae, 0x3, 0x4, 0x7fffffff, 0x7, 0x0, 0x4, 0x6, 0x296, 0xfffffffe, 0x1, 0x3ff, 0x2, 0x80000001, 0x3, 0x2, 0x1, 0x0, 0x6, 0x3, 0xffffffff, 0xc5, 0x8001, 0xfffffffe, 0x7, 0x5, 0xffffff8e, 0x35ae3fc4, 0x4, 0x8, 0xa06af69f, 0x1ff, 0xc, 0x800, 0x7, 0x4, 0x7, 0x2, 0x3, 0x96, 0xc8a4, 0x0, 0x800, 0x0, 0x4, 0x6b00, 0x1, 0xfff, 0x6, 0x7, 0x2800, 0x25, 0x3ff, 0x0, 0x18000, 0x3, 0x2, 0x5, 0x1d80, 0x8, 0x2, 0x8, 0x101, 0x7ff, 0x4, 0x8, 0xa, 0x9, 0x0, 0x8, 0xa1, 0x9, 0x101, 0x1, 0x8001, 0x36, 0x6b, 0x1, 0xb, 0x85c, 0x5, 0x8523, 0x0, 0x3, 0xe1, 0xb7be, 0x4, 0x101, 0x5, 0x6, 0x94d, 0x36, 0xa, 0x8, 0x4, 0x401, 0x5, 0x8000, 0x3, 0x3, 0x3, 0x8, 0x1, 0x3, 0x2, 0x7fffffff, 0x1ff, 0x0, 0x5, 0xd4, 0x6, 0x9, 0x6, 0x5, 0xc, 0x1000, 0x0, 0x6b, 0x80000000, 0xce38, 0x7, 0xcb, 0x8, 0x4, 0x9, 0x81, 0x8, 0x2af, 0x5, 0xab, 0x8, 0xf9cf, 0x1, 0x9, 0x81, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_ACT={0xc4, 0x4, [@m_connmark={0xc0, 0x19, 0x0, 0x0, {{0xd}, {0x4}, {0x8e, 0x6, "8761240d7d5e94527f474bd611e12d73e5e8791683aaa5dd22e5da98a6f1da8f4bd92e642db54d77f73abfd1e37e483f43221e79011e2dc3d17cca58cc90b8b46dac97ab463da1df3fa290190711ee92a5e5851b0f1363b41e8d600198d84e82ab82f77729ee2f58d303651953c3fb09eac3a37a54e58105effbba89834c9d3ad4318ef049f5c878fd3d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x7}}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_FW_MASK={0x8, 0x5, 0x80000000}, @TCA_FW_ACT={0x8c, 0x4, [@m_mpls={0x88, 0x19, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfff, 0x0, 0x8, 0x1eca}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8917}]}, {0x25, 0x6, "faa9f4056f1f5a468122308a9d6048c2dbf00fc6f02eba066b3957a115764f8158"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff5, 0xd}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1}]}}]}, 0xac0}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000003, 0x1010, 0xffffffffffffffff, 0x8b268000) 2.23993989s ago: executing program 8 (id=2766): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x4000}, 0xfffffffffffffe31) (async) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) (async) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 2.141663004s ago: executing program 0 (id=2767): r0 = socket(0x2b, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/15, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000380)={0x0, 0x9, [0x5, 0xcd5, 0x2, 0x10000, 0x6, 0x8]}) write$tun(r1, &(0x7f0000000300)=ANY=[], 0xd6) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) socket$kcm(0x29, 0x2, 0x0) unshare(0x24020400) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x19681}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9820}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x80000003}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r10, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r10, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.035116482s ago: executing program 3 (id=2768): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000f90000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000af00000000000000851000000100000095000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010003000000000000000100000008000100020000002400048005000300020000000500030001000200050003000200000005000300010000000800020002"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20000480) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0500330002000000080032000700000008003100fc030000080034"], 0x44}}, 0x80) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0xac, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x488717b4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a2e3b4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bcf766c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x539b0ae1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4eb3a4a8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x250640c8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42556e9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ca56cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16d60baf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4008000) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRESHEX=0x0], 0xa) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) (async) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) (async) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000004200010a00000000fbdbdf250a0000000800f400", @ANYRES32=0x0, @ANYBLOB="4f135b7dbf5bbe591db559983123c088359ad378e63bccf3d44b0d4e858737aa1e0b87c750ec372af9580db21525cb00dc447aeb05a5ddf84b50d997ea7cc7abfb1c36af5260277d0e8845e53a0157084da0bc2182b88e2a3ff2699bd48dfb8b4b92b29dece48d60e0a4fc01c4d16ad6bc3dd6d02a8b05154e94647f2dd3bd8c6686e113db5b67bf16842adcb1d94dfc50aae85bf8e42d872280a0b0fc966917938002f689cf7db7a6f86ae0ee935829ff2c51c80afe5beb724e4744d0c7c7e55f6b1ca9c7688dc7c638d99505bf1f6169abd5fc8efc39d044da3275431f1d47bf539efc059c196dbf0603756868cc6a6be1821e80e396"], 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES8, @ANYRES16=r10, @ANYRESOCT=r3, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0xe25a1281e37dbf75}, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r12) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) (async) recvmmsg(r13, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) 1.995150875s ago: executing program 8 (id=2769): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r3, @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r3, @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xdc, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x179}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4be}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x222}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) accept4(r0, 0x0, 0x0, 0x800) (async) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/55, 0x5}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000a40)=""/140, 0x8c}, {&(0x7f0000000980)=""/124, 0x7c}], 0x4}, 0x0) 1.880161885s ago: executing program 3 (id=2770): socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000680)=@allocspi={0x10c, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast2, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x33}, {@in6=@remote, 0x4d5, 0x33}, @in=@local, {0xfffffffffffffffd, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x1}, {0x500000, 0x4, 0x6, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3503, 0xa, 0x1, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc, 0x20}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}, 0x1, 0x0, 0x0, 0x2400c8c0}, 0x48000) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f00000005c0)=0xe8) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3b071, 0xffffffffffffffff, 0x4000) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendmsg$802154_raw(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x24, @short={0x2, 0x1}}, 0x14, &(0x7f0000000440)={&(0x7f00000003c0)="f931c2121e4d32237bd73fc1310f81cff3a25eee05f8d7f5a307e27a29425be392ed64bd258fa37fe78641d540431513204728168db9251a", 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x40810) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) 1.838880067s ago: executing program 8 (id=2771): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x20050000}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 1.83083969s ago: executing program 7 (id=2772): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000d80)=@ccm_128={{0x281}, "5596fe28d93ee9ca", "700e64e7e804e9e36fa5e1da10b0f418", "691679a0", "ce852fe81d017d87"}, 0x28) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xfff9}, {0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x7361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x109041, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r7, @ANYBLOB="010000000d0000000000010000000000210001410000001c001700000000000000006504003a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x20044844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.660593022s ago: executing program 8 (id=2773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd30000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000080)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x9, 0x0, 0x0, 0x5, 0xc, 0x4}, 0x20) 1.57871578s ago: executing program 8 (id=2774): r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000005e00)) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x52, &(0x7f0000003000)}, 0x5}, {{&(0x7f0000003180)=@alg, 0x80, 0x0}, 0x408}, {{&(0x7f0000003380)=@hci, 0x80, &(0x7f0000003780), 0x0, &(0x7f0000003800)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, 0x0}, 0x40}], 0x4, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x1000) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0xd0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) connect$netlink(r7, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42900, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'\x00', 0x1}) ioctl$TUNSETDEBUG(r8, 0x400454c9, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000611082000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="070028bd70000000000002000010000001800500020006000000060001000a000000"], 0x28}}, 0x0) recvmsg(r0, 0x0, 0x0) 1.101850631s ago: executing program 0 (id=2775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb0}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff92f9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x20008084) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x842) 808.729631ms ago: executing program 0 (id=2776): r0 = socket$kcm(0x23, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0xc}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="a918c793b3b8", 0x6}], 0x1, 0x0, 0x0, 0x100100}, 0x0) 678.233795ms ago: executing program 0 (id=2777): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000005127ffff9500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$inet(r0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000fedbdf251100000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="744e2bb27b330c37ce35937d38998c7f182163dd3687801568d9073d3cfcb04ae7116aa725565353995a15c88b00f334307383e91fbb65baeb8ff3279d35c3eadcefc77ebf3fa2961a968cb084323a22b8df2265847234b08de4c234de9d5d5774b93214cf7ad3438befcee7c08b368297f12592d2889fa8cae7257bf8e6aa8a88ad1116022d5225786ed32507e0cc34df9d603e3e9e37014ce399e7b1bc449dfa68860460a2f1fba9c4e9e9777e23efa260f94cedf404541d0755125e044b918ec9b63650a2"], 0x24}}, 0x4010) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) r5 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r5], 0x14) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) (async) socket(0x200000000000011, 0x2, 0xd) (async) socket(0x200000000000011, 0x2, 0x0) r8 = socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r9], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 609.824273ms ago: executing program 3 (id=2778): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x8000, 0x9, {{0x18, 0x4, 0x0, 0x8, 0x60, 0x68, 0x0, 0xfe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast, {[@rr={0x7, 0x1b, 0xbd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast, @broadcast, @empty]}, @cipso={0x86, 0x2f, 0x1, [{0x7, 0x8, "8290043db64f"}, {0x0, 0xa, "5eba608e3602d816"}, {0x1, 0x8, "eb3d0df87d87"}, {0x6, 0xa, "6a81ee27b19f419b"}, {0x5, 0x5, "93c058"}]}]}}}}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3400000013000100000000000000000807000000", @ANYRES32=r7, @ANYBLOB="000000030000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x840) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xe, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0xc, 0x2}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000005) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={0x1, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0xc7, 0x4, 0x0, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7800, 0xb, 0x80000000}}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x4, 0x0, 0x2, 0xfffffff9}}}}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000b00)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x8, 0x7fff, {{0x7, 0x4, 0x2, 0x3d, 0x1c, 0x64, 0x0, 0x3, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x8, "02d3380f026f"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0x40, 0x87de, 0x1, 0x9, {{0x25, 0x4, 0x2, 0x9, 0x94, 0x67, 0x0, 0xa9, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x23, 0x9b, [@remote, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x4, "8553"}, @noop, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0xd3, 0x3, 0x1, [{@local, 0x6}, {@private=0xa010102, 0xffff2eae}, {@rand_addr=0x64010102, 0x8}, {@loopback, 0x2}, {@local, 0x7}, {@loopback, 0x6}, {@local, 0x80000000}, {@private=0xa010102, 0x1000}, {@broadcast}]}, @end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000c80)={0x720, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x0, 0x7, 0x5}, {0x8, 0x6, 0x5, 0x5}, {0x6, 0x5d, 0x95, 0x7}, {0xb825, 0x0, 0x3, 0x3}, {0x200, 0xfa, 0x80, 0x7}, {0x0, 0x7, 0x2, 0xfffffff7}, {0x6, 0x1, 0x40, 0x7}, {0x3, 0x0, 0x4, 0x3}, {0x9, 0x7f, 0x8, 0x2}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r10}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x9, 0x1, 0x8}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r18}}}]}}]}, 0x720}, 0x1, 0x0, 0x0, 0x8001}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) 391.930281ms ago: executing program 7 (id=2779): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth1_to_bridge\x00', &(0x7f0000000580)=@ethtool_perm_addr={0x20, 0xe6, "d12ed34d0cd940e1408485f44dd98cd3cc4861884de2acf32c8c8448bb63661b54f80e00081884dab36707e59ea183668c25be0e7204a0b73e0954fc6417912aef383d677349624a8861142255d93de1a12da7eff892a25ce9f5e0146d8581729a1d014272ace687cd1923b45a145ecaa201c581a250793f8ab81e2b490bb553949f198dabaa42c09dd2b638caae55342c880d2d9919f3b23e03fc651edd72fc13646cfc5a4c5a9032d227818aed8a9b181603876ffb4ee5bc2d521d45fbeda9ef3fc2b909aaae0ae8aebed8bff10adb526e593e0b86bcfd745df4e2b7472a18a03dbab0b9f3"}}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x54, r1, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) getsockopt$inet_mreqn(r3, 0x0, 0x24, 0x0, 0x0) shutdown(r3, 0x1) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044001) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000040900010073797a30000000000900020073797a3200000000400004803c0001800b00010065787468647200002c000280080003400000008c080007400000000e080006400000000105000200890000000800044000000093140000001100010000000000000000000000000aea8dd140fb2a10ed1df64871c491b128b41673cf687bea1c6d202f8c3e58f41280f30f4c4f62b52b1e26fae51aeb15aee683a05a405531ccc8c9c7a76d85fad0efd6065c1dd81615e7b2a482a39ccaed"], 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 230.229671ms ago: executing program 8 (id=2780): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa3d, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 223.441348ms ago: executing program 0 (id=2781): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x400, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x0, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) r5 = socket(0x10, 0x5, 0x1) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x18, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000008}, 0x4005) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES8=r0, @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff00000500d20009000000"], 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r3, 0x1, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x0], &(0x7f00000001c0), 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=0x1, 0xffffffffffffffff, 0x38, 0x18, 0x0, @void, @value=r8, @void, @void, r9}, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000500)={@local, 0x48, r10}) bind$l2tp(r0, &(0x7f00000005c0)={0x2, 0x0, @empty}, 0x10) socket(0x10, 0x803, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') unshare(0x20400) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0xd8094) 0s ago: executing program 7 (id=2782): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x40000000}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) kernel console output (not intermixed with test programs): 294] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1454'. [ 273.784383][T11294] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1454'. [ 273.812778][T11294] tipc: Started in network mode [ 273.854169][T11294] tipc: Node identity 4, cluster identity 4711 [ 273.890664][T11294] tipc: Node number set to 4 [ 273.897190][T11294] tipc: Cannot configure node identity twice [ 274.280816][T11312] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 274.379466][T11314] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 274.388117][T11314] netlink: 'syz.0.1460': attribute type 2 has an invalid length. [ 274.471117][T11316] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1461'. [ 274.517302][T11316] netlink: 'syz.5.1461': attribute type 1 has an invalid length. [ 274.556292][T11316] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1461'. [ 274.570140][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 274.753083][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.030298][T11341] openvswitch: netlink: IP tunnel dst address not specified [ 275.120326][T11344] netlink: 'syz.2.1467': attribute type 2 has an invalid length. [ 275.130155][T11344] netlink: 'syz.2.1467': attribute type 5 has an invalid length. [ 276.077063][T11364] syzkaller0: entered promiscuous mode [ 276.083375][T11364] syzkaller0: entered allmulticast mode [ 277.899166][T11334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.856115][T11367] batadv0: entered promiscuous mode [ 279.862079][T11367] batadv0: left allmulticast mode [ 279.867800][T11367] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 279.884716][T11368] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1473'. [ 280.442579][T11405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.087121][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 281.330682][T11444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1497'. [ 281.374249][T11448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1498'. [ 281.528735][T11452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1497'. [ 282.030032][T11479] ip6gre1: entered promiscuous mode [ 282.055858][T11479] ip6gre1: entered allmulticast mode [ 282.249528][T11490] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1509'. [ 282.540473][T11507] validate_nla: 1 callbacks suppressed [ 282.540575][T11507] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 282.613793][T11507] syzkaller0: entered promiscuous mode [ 282.662921][T11507] syzkaller0: entered allmulticast mode [ 283.161326][T11529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1522'. [ 283.171380][T11523] xt_hashlimit: size too large, truncated to 1048576 [ 283.356697][T11539] bridge0: port 3(syz_tun) entered blocking state [ 283.405536][T11539] bridge0: port 3(syz_tun) entered disabled state [ 283.423614][T11539] syz_tun: entered allmulticast mode [ 283.435569][T11539] bridge0: port 3(syz_tun) entered blocking state [ 283.442814][T11539] bridge0: port 3(syz_tun) entered forwarding state [ 283.491195][T11545] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 283.815559][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 283.989147][T11565] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1530'. [ 284.077174][T11571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1532'. [ 284.179034][T11582] team_slave_1: Caught tx_queue_len zero misconfig [ 284.479667][T11590] syzkaller0: entered promiscuous mode [ 284.492573][T11590] syzkaller0: entered allmulticast mode [ 285.196959][T11614] __nla_validate_parse: 4 callbacks suppressed [ 285.196981][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1547'. [ 285.236648][T11616] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 285.277647][T11614] netlink: 'syz.5.1547': attribute type 2 has an invalid length. [ 285.339217][T11622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.587247][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 285.655588][T11633] bond8: option broadcast_neighbor: invalid value (4) [ 285.667123][T11633] bond8 (unregistering): Released all slaves [ 285.834674][T11641] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1555'. [ 286.013789][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1557'. [ 286.039712][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1557'. [ 287.117229][T11701] netlink: 'syz.2.1568': attribute type 39 has an invalid length. [ 288.193922][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.225401][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1571'. [ 289.438207][T11673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.840809][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 289.894609][T11738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.017932][T11747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.095431][T11754] sctp: [Deprecated]: syz.0.1576 (pid 11754) Use of int in max_burst socket option. [ 290.095431][T11754] Use struct sctp_assoc_value instead [ 290.112398][T11745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.562524][ T57] tipc: Subscription rejected, illegal request [ 290.791103][T11775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1589'. [ 290.861051][T11771] sctp: [Deprecated]: syz.3.1587 (pid 11771) Use of int in max_burst socket option. [ 290.861051][T11771] Use struct sctp_assoc_value instead [ 290.918394][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'. [ 290.933160][T11772] sctp: [Deprecated]: syz.3.1587 (pid 11772) Use of int in max_burst socket option deprecated. [ 290.933160][T11772] Use struct sctp_assoc_value instead [ 291.123157][T11778] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.163658][T11778] 8021q: adding VLAN 0 to HW filter on device bond7 [ 291.423138][T11792] netlink: 'syz.0.1594': attribute type 13 has an invalid length. [ 291.438726][T11792] gretap0: refused to change device tx_queue_len [ 291.449415][T11792] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.551548][T11804] tun0: tun_chr_ioctl cmd 1074812117 [ 291.764099][T11808] lo speed is unknown, defaulting to 1000 [ 292.055332][T11824] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1600'. [ 292.315097][T11834] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 292.735249][T11830] veth15: entered allmulticast mode [ 292.762200][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 292.779681][T11830] bond8: (slave veth15): Enslaving as an active interface with a down link [ 292.844878][T11845] bond8: (slave veth0_to_bond): making interface the new active one [ 292.866033][T11845] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 292.995882][T11839] macvlan2: entered promiscuous mode [ 293.019939][T11839] macvlan2: entered allmulticast mode [ 293.042475][T11839] bond8: entered promiscuous mode [ 293.065750][T11839] veth0_to_bond: entered promiscuous mode [ 293.106458][T11839] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.144292][T11839] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth15 [ 293.166931][T11839] bond8: left promiscuous mode [ 293.176724][T11839] veth0_to_bond: left promiscuous mode [ 293.246512][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'. [ 293.289554][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 293.313764][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 293.323797][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 293.386397][T11869] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 293.430644][T11869] batman_adv: batadv0: Adding interface: gretap1 [ 293.453871][T11878] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1613'. [ 293.465235][T11869] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.493934][T11879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1615'. [ 293.518127][T11869] batman_adv: batadv0: Interface activated: gretap1 [ 293.558019][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1615'. [ 293.769159][T11888] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 293.966720][T11898] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 293.982101][T11898] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 293.994995][ C0] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 294.006476][ C0] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 294.410583][T11919] syzkaller1: entered promiscuous mode [ 294.423213][T11919] syzkaller1: entered allmulticast mode [ 294.457991][T11921] pim6reg1: entered promiscuous mode [ 294.471613][T11921] pim6reg1: entered allmulticast mode [ 294.721643][T11937] netlink: 'syz.5.1632': attribute type 6 has an invalid length. [ 294.734914][T11937] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.084215][T11955] tunl0: Caught tx_queue_len zero misconfig [ 295.361416][T11964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.083563][T11998] __nla_validate_parse: 6 callbacks suppressed [ 296.083587][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'. [ 296.289982][T12007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.365444][T12010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.384491][T12009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1657'. [ 296.415226][T12007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.728577][T12022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1661'. [ 296.757693][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 296.768064][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1661'. [ 296.815549][T12022] netlink: 'syz.3.1661': attribute type 11 has an invalid length. [ 296.826219][T12025] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1662'. [ 296.844241][T12022] netlink: 'syz.3.1661': attribute type 13 has an invalid length. [ 297.028420][T12031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1664'. [ 297.040133][T12034] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 298.208567][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1676'. [ 298.295002][T12069] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1677'. [ 298.378135][T12071] netlink: 'syz.3.1679': attribute type 83 has an invalid length. [ 298.497270][T12077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1680'. [ 298.591823][T12069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.602629][T12071] siw: device registration error -23 [ 298.758467][T12087] Cannot find map_set index 65532 as target [ 299.163492][T12111] syzkaller0: entered promiscuous mode [ 299.187606][T12111] syzkaller0: entered allmulticast mode [ 299.297489][T12118] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 299.316625][T12118] bond6 (unregistering): Released all slaves [ 299.390443][T12122] netpci0: tun_chr_ioctl cmd 1074025678 [ 299.396939][T12122] netpci0: group set to 0 [ 300.489588][T12170] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 300.911335][T12189] syzkaller0: entered promiscuous mode [ 300.917991][T12189] syzkaller0: entered allmulticast mode [ 301.113970][T12197] syzkaller0: entered promiscuous mode [ 301.120210][T12197] syzkaller0: entered allmulticast mode [ 301.135023][T12197] simple: basic_1 [ 301.141797][T12197] simple: basic_2 [ 301.145755][T12197] simple: basic_3 [ 301.149528][T12197] simple: basic_4 [ 301.153281][T12197] simple: basic_5 [ 301.157101][T12197] simple: basic_6 [ 301.160957][T12197] simple: basic_7 [ 301.164718][T12197] simple: basic_8 [ 301.168590][T12197] simple: basic_9 [ 301.172325][T12197] simple: basic_10 [ 301.176243][T12197] simple: basic_11 [ 301.180185][T12197] simple: basic_12 [ 301.184096][T12197] simple: basic_13 [ 301.188285][T12197] simple: basic_14 [ 301.192103][T12197] simple: basic_15 [ 301.196117][T12197] simple: basic_16 [ 301.199940][T12197] simple: basic_17 [ 301.204016][T12197] 0: reclassify loop, rule prio 0, protocol 800 [ 301.358601][T12205] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 301.949174][T12231] netlink: 'syz.2.1729': attribute type 13 has an invalid length. [ 302.008584][T12231] netlink: 'syz.2.1729': attribute type 13 has an invalid length. [ 302.028343][T12238] geneve1: entered promiscuous mode [ 302.039031][T12238] geneve1: left promiscuous mode [ 302.054878][ T200] netdevsim netdevsim2 ªªªªª»: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.066517][ T200] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.078845][ T200] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.108286][ T200] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.197009][T12244] __nla_validate_parse: 14 callbacks suppressed [ 302.197030][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1732'. [ 302.338459][T12252] bridge0: port 4(vlan3) entered blocking state [ 302.345728][T12252] bridge0: port 4(vlan3) entered disabled state [ 302.353725][T12252] vlan3: entered allmulticast mode [ 302.359033][T12252] geneve0: entered allmulticast mode [ 302.367800][T12252] vlan3: entered promiscuous mode [ 302.373945][T12252] geneve0: entered promiscuous mode [ 303.323427][T12290] syzkaller0: entered promiscuous mode [ 303.331003][T12290] syzkaller0: entered allmulticast mode [ 303.444715][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'. [ 304.031253][T12309] netlink: 'syz.3.1753': attribute type 2 has an invalid length. [ 305.035663][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 305.045716][T12344] netlink: 'syz.0.1762': attribute type 10 has an invalid length. [ 305.348983][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 306.141169][T12357] syzkaller0: entered promiscuous mode [ 306.147292][T12357] syzkaller0: entered allmulticast mode [ 306.161517][T12357] tipc: Enabled bearer , priority 0 [ 306.174173][T12357] tipc: Resetting bearer [ 306.211557][T12362] netlink: 'syz.2.1768': attribute type 1 has an invalid length. [ 306.220671][T12362] netlink: 'syz.2.1768': attribute type 4 has an invalid length. [ 306.229839][T12362] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1768'. [ 306.264615][T12356] tipc: Resetting bearer [ 306.320369][T12356] tipc: Disabling bearer [ 306.350433][T12365] netlink: 'syz.2.1768': attribute type 1 has an invalid length. [ 306.431550][T12365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.444806][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'. [ 306.535876][T12369] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1769'. [ 306.897092][T12392] ipvlan0: entered promiscuous mode [ 306.903571][T12392] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 306.917512][T12392] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 306.933842][T12393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1774'. [ 306.948829][T12392] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 306.963892][T12393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1774'. [ 307.427669][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1781'. [ 307.595093][T12415] syzkaller0: entered promiscuous mode [ 307.605899][T12415] syzkaller0: entered allmulticast mode [ 307.839580][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'. [ 307.914362][T12429] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.922377][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1786'. [ 307.964017][T12429] dummy0: left promiscuous mode [ 308.004899][T12429] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 308.057298][T12429] netlink: 'syz.1.1786': attribute type 10 has an invalid length. [ 308.084042][T12429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1786'. [ 308.094916][T12429] dummy0: entered promiscuous mode [ 308.128541][T12429] bond6: (slave dummy0): Releasing backup interface [ 308.306649][T12447] netlink: 65544 bytes leftover after parsing attributes in process `syz.0.1788'. [ 310.782575][T12457] IPVS: set_ctl: invalid protocol: 12 172.20.20.39:20003 [ 311.864238][T12511] xt_hashlimit: size too large, truncated to 1048576 [ 311.884757][ T7801] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa3 [ 313.010277][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.022264][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.035167][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.046615][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.060210][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 314.790061][T12506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.822534][T12515] netlink: 'syz.2.1808': attribute type 11 has an invalid length. [ 314.864679][T12515] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1808'. [ 314.921866][T12519] lo speed is unknown, defaulting to 1000 [ 315.144830][T12543] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 315.153226][ T5622] Bluetooth: hci6: command tx timeout [ 315.178265][T12543] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1813'. [ 315.638593][T12567] bond3: entered allmulticast mode [ 315.891673][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 316.066609][T12590] team0: entered promiscuous mode [ 316.083990][T12592] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1824'. [ 316.100128][T12590] team0: entered allmulticast mode [ 316.137248][T12590] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.171876][T12590] team0: Cannot enslave team device to itself [ 316.199124][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.230255][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.260425][T12519] bridge_slave_0: entered allmulticast mode [ 316.295128][T12519] bridge_slave_0: entered promiscuous mode [ 316.349265][T12602] bridge4: entered promiscuous mode [ 316.374807][T12602] bridge4: entered allmulticast mode [ 316.406275][T12602] team0: Port device bridge4 added [ 316.419636][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.449878][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.470022][T12519] bridge_slave_1: entered allmulticast mode [ 316.490612][T12519] bridge_slave_1: entered promiscuous mode [ 316.610020][T12606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.631225][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'. [ 316.683286][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1827'. [ 316.712655][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.795738][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.980506][T12519] team0: Port device team_slave_0 added [ 317.008107][T12519] team0: Port device team_slave_1 added [ 317.185337][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.211738][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.237342][ T5622] Bluetooth: hci6: command tx timeout [ 317.250101][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.345816][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.379253][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.458670][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.495665][T12636] tipc: Enabling of bearer rejected, failed to enable media [ 317.715941][T12519] hsr_slave_0: entered promiscuous mode [ 317.747089][T12519] hsr_slave_1: entered promiscuous mode [ 317.764992][T12519] debugfs: 'hsr0' already exists in 'hsr' [ 317.774259][T12519] Cannot create hsr debugfs directory [ 317.790742][T12650] netlink: 'syz.3.1838': attribute type 4 has an invalid length. [ 317.964999][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'. [ 318.335335][T12671] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1844'. [ 318.375976][T12671] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1844'. [ 318.388977][T12671] netlink: 'syz.0.1844': attribute type 5 has an invalid length. [ 318.397589][T12671] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1844'. [ 318.476882][T12670] batman_adv: batadv0: Adding interface: vlan4 [ 318.517750][T12670] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.555460][T12670] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 318.738140][T12682] pimreg: entered allmulticast mode [ 318.889359][T12690] netlink: 'syz.3.1849': attribute type 24 has an invalid length. [ 319.313436][ T5622] Bluetooth: hci6: command tx timeout [ 319.556068][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.393079][ T5622] Bluetooth: hci6: command tx timeout [ 321.931540][T12690] bridge0: port 3(syz_tun) entered disabled state [ 322.001672][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.009615][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.157162][T12690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.170262][T12690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.034693][ T138] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.065447][ T138] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.099027][ T138] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.122511][ T138] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.227738][ T138] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.274624][ T138] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.329856][ T138] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.379242][ T138] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.481598][T12735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1857'. [ 323.501896][T12735] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 323.531448][T12519] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.547316][T12519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.558264][T12519] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 323.575402][T12519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.597229][T12519] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.613933][T12519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.625001][T12519] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.640207][T12519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.940642][T12753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1860'. [ 323.983871][T12753] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1860'. [ 324.017378][T12519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.018216][T12753] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1860'. [ 324.061956][T12519] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.081142][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.089359][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.115714][T12753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1860'. [ 324.145183][T12760] Bluetooth: MGMT ver 1.23 [ 324.152529][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'. [ 324.166893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.174918][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.455763][T12768] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 324.458059][T12765] syzkaller0: entered promiscuous mode [ 324.483645][T12765] syzkaller0: entered allmulticast mode [ 324.509077][T12769] netlink: 4384 bytes leftover after parsing attributes in process `syz.3.1866'. [ 324.533088][T12765] tipc: Enabled bearer , priority 0 [ 324.675442][T12764] tipc: Resetting bearer [ 324.781926][T12764] tipc: Disabling bearer [ 325.056768][T12786] netlink: 'syz.1.1870': attribute type 4 has an invalid length. [ 325.136832][T12789] netlink: 'syz.3.1871': attribute type 3 has an invalid length. [ 325.157136][T12789] netlink: 'syz.3.1871': attribute type 3 has an invalid length. [ 325.472544][T12807] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1872'. [ 325.487724][T12800] gretap0: refused to change device tx_queue_len [ 325.508136][T12800] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 325.527492][T12808] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 325.560700][T12810] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 325.621662][T12806] xt_TCPMSS: Only works on TCP SYN packets [ 325.643446][T12808] xt_TCPMSS: Only works on TCP SYN packets [ 325.656336][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 325.826880][T12817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1876'. [ 326.052491][T12823] sctp: [Deprecated]: syz.3.1877 (pid 12823) Use of int in max_burst socket option. [ 326.052491][T12823] Use struct sctp_assoc_value instead [ 326.250310][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.516352][T12835] bond4: entered promiscuous mode [ 326.537450][T12835] bond4: entered allmulticast mode [ 326.557362][T12835] 8021q: adding VLAN 0 to HW filter on device bond4 [ 326.736063][T12846] syzkaller0: entered promiscuous mode [ 326.759612][T12846] syzkaller0: entered allmulticast mode [ 326.938171][T12858] netlink: 'syz.1.1884': attribute type 4 has an invalid length. [ 326.986632][T12858] netlink: 'syz.1.1884': attribute type 4 has an invalid length. [ 327.028792][T10422] lo speed is unknown, defaulting to 1000 [ 327.049725][T10422] syz2: Port: 1 Link ACTIVE [ 327.411835][T12871] ipvlan2: entered promiscuous mode [ 327.419264][T12871] bridge0: port 5(ipvlan2) entered blocking state [ 327.426905][T12871] bridge0: port 5(ipvlan2) entered disabled state [ 327.436640][T12871] ipvlan2: entered allmulticast mode [ 327.443268][T12871] bridge0: entered allmulticast mode [ 327.452053][T12871] ipvlan2: left allmulticast mode [ 327.464488][T12871] bridge0: left allmulticast mode [ 327.539050][T12519] veth0_vlan: entered promiscuous mode [ 327.608497][T12519] veth1_vlan: entered promiscuous mode [ 327.769363][T12519] veth0_macvtap: entered promiscuous mode [ 327.814548][T12519] veth1_macvtap: entered promiscuous mode [ 327.887887][T12873] block nbd2: not configured, cannot reconfigure [ 327.930925][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.991480][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.008550][T12880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.066435][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.106050][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.157985][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.185696][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.512913][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 328.603889][ T204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.628082][ T204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.682332][T12908] __nla_validate_parse: 3 callbacks suppressed [ 328.682354][T12908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1898'. [ 328.779579][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.803548][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.914755][T12915] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1901'. [ 328.960212][T12915] erspan0: left promiscuous mode [ 328.976810][T12915] erspan0: left allmulticast mode [ 329.010961][T12918] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 329.045437][T12918] netlink: 'syz.2.1902': attribute type 178 has an invalid length. [ 329.068490][T12915] bridge0: port 3(syz_tun) entered blocking state [ 329.076332][T12915] bridge0: port 3(syz_tun) entered forwarding state [ 329.089321][T12915] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.108456][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.316537][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.327949][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.343821][T12915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.373022][T12915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.402468][T12915] veth1_vlan: left promiscuous mode [ 329.423192][T12915] veth0_vlan: left promiscuous mode [ 329.437361][T12915] veth0_vlan: entered promiscuous mode [ 329.449393][T12929] xt_hashlimit: max too large, truncated to 1048576 [ 329.462255][T12915] veth1_vlan: entered promiscuous mode [ 329.488909][T12915] veth1_macvtap: left promiscuous mode [ 329.507984][T12915] veth0_macvtap: left promiscuous mode [ 329.527034][T12915] veth0_macvtap: entered promiscuous mode [ 329.548031][T12915] veth1_macvtap: entered promiscuous mode [ 329.615682][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.642243][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.653498][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.664844][T12915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.690943][T12915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.757879][T12915] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.808111][T12915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.832655][T12915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 329.843959][T12915] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 329.858688][T12915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.868137][T12915] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 329.897694][ T204] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.907364][ T204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.949493][ T204] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.957412][ T204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.076692][ T5754] batman_adv: batadv0: Interface activated: vlan4 [ 330.089718][ T5754] bridge0: port 4(vlan3) entered blocking state [ 330.098550][ T5754] bridge0: port 4(vlan3) entered forwarding state [ 330.126537][ T138] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.147608][ T138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.168080][ T138] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.187787][ T138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.208248][T12934] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1906'. [ 330.339419][ T138] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.361470][ T138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.387957][T12711] IPVS: starting estimator thread 0... [ 330.393728][ T138] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.424347][ T138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.513222][T12947] IPVS: using max 26 ests per chain, 62400 per kthread [ 330.667043][T12953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1910'. [ 331.349601][T12967] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 331.430828][T12967] bond6 (unregistering): Released all slaves [ 331.640900][T12982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.699463][T12981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.802444][T12989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1924'. [ 331.896174][T12991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1925'. [ 332.222551][T12997] lo speed is unknown, defaulting to 1000 [ 332.340045][T12998] lo speed is unknown, defaulting to 1000 [ 332.437870][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1931'. [ 333.290285][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1938'. [ 334.090630][T13045] netlink: 'syz.1.1941': attribute type 1 has an invalid length. [ 334.114718][T13047] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1942'. [ 334.305499][T13045] 8021q: adding VLAN 0 to HW filter on device bond7 [ 334.400032][T13051] vlan4: entered allmulticast mode [ 334.414836][T13051] bond7: entered allmulticast mode [ 334.459871][T13045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.585936][T13053] bond7: (slave geneve3): making interface the new active one [ 334.612850][T13053] geneve3: entered allmulticast mode [ 334.629678][T13053] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 334.656164][ T204] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.665839][T13051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.682510][ T204] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.719459][ T204] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.770160][ T204] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.908795][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1947'. [ 334.947576][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1947'. [ 335.098862][T13081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.144229][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1950'. [ 335.167834][T13080] IPVS: Error connecting to the multicast addr [ 335.406817][T13092] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1954'. [ 336.212372][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1962'. [ 336.607913][T13146] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1966'. [ 336.650580][T13150] tipc: New replicast peer: 172.20.20.187 [ 336.691004][T13150] tipc: Enabled bearer , priority 26 [ 337.045640][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 337.160311][T13154] bridge1: left allmulticast mode [ 337.234806][T13154] gretap1: left allmulticast mode [ 337.466025][T13154] bond3: left allmulticast mode [ 337.477777][T13154] bridge4: left allmulticast mode [ 337.524719][T13154] bond4: left allmulticast mode [ 337.574300][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 337.592379][T13183] netlink: 'syz.1.1978': attribute type 2 has an invalid length. [ 337.605650][ T57] netdevsim netdevsim2 ªªªªª»: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.627362][ T57] netdevsim netdevsim2 ªªªªª»: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.742829][ T57] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.757253][T13186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1979'. [ 337.767138][ T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.818647][ T57] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.830448][ T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.840749][ T57] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.852134][ T57] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.898212][ T6973] tipc: Node number set to 870270467 [ 338.497239][T13217] vlan2: entered allmulticast mode [ 338.519917][T13217] gretap0: entered allmulticast mode [ 338.785664][T13234] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20003 [ 338.956022][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ebdfc00: rx timeout, send abort [ 339.138895][T13236] bridge6: entered promiscuous mode [ 339.173869][T13236] bridge6: entered allmulticast mode [ 339.198015][T13244] __nla_validate_parse: 5 callbacks suppressed [ 339.198036][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1993'. [ 339.395687][T13251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1995'. [ 339.917512][ T30] audit: type=1804 audit(1784620886.330:4): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1996" name="/newroot/360/cgroup.controllers" dev="tmpfs" ino=1880 res=1 errno=0 [ 339.954567][ T30] audit: type=1800 audit(1784620886.330:5): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1996" name="cgroup.controllers" dev="tmpfs" ino=1880 res=0 errno=0 [ 343.388340][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2000'. [ 343.480820][T13281] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2003'. [ 343.551990][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2000'. [ 343.610028][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2004'. [ 343.698821][T13292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2004'. [ 343.725876][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 343.884296][T13293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2001'. [ 343.921311][T13293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2001'. [ 344.462054][T13299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2005'. [ 345.702756][T13286] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 345.884941][T13307] siw: device registration error -23 [ 345.907555][T13306] openvswitch: netlink: Actions may not be safe on all matching packets [ 345.926813][T13309] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2009'. [ 346.037873][T13305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2007'. [ 346.538860][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2017'. [ 346.735612][T13342] dummy0: left promiscuous mode [ 346.788954][T13342] netdevsim netdevsim2 ªªªªª»: left promiscuous mode [ 346.817414][T13342] bridge1: left promiscuous mode [ 346.829464][T13342] geneve2: left promiscuous mode [ 346.849083][T13342] bridge4: left promiscuous mode [ 346.855806][T13342] bond4: left promiscuous mode [ 346.900284][T13342] bridge6: left promiscuous mode [ 346.906227][T13342] bridge6: left allmulticast mode [ 346.947028][T13348] netlink: 'syz.3.2020': attribute type 1 has an invalid length. [ 346.960752][T13348] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2020'. [ 347.100087][T13351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2021'. [ 347.124915][T13353] sctp: [Deprecated]: syz.3.2022 (pid 13353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.124915][T13353] Use struct sctp_sack_info instead [ 347.153015][T13354] sctp: [Deprecated]: syz.3.2022 (pid 13354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.153015][T13354] Use struct sctp_sack_info instead [ 347.340104][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 347.866344][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2028'. [ 347.881451][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 348.420118][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'. [ 348.792523][T13429] lo speed is unknown, defaulting to 1000 [ 349.469979][T13419] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 349.479559][ C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 349.486761][ C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 349.849234][T13455] __nla_validate_parse: 1 callbacks suppressed [ 349.849258][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 349.883235][T13455] netlink: 'syz.0.2047': attribute type 10 has an invalid length. [ 349.923600][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 349.995335][T13455] geneve3: entered promiscuous mode [ 350.011158][T13455] geneve3: entered allmulticast mode [ 350.232511][T13458] syzkaller0: entered promiscuous mode [ 350.250571][T13458] syzkaller0: entered allmulticast mode [ 350.777973][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2058'. [ 351.143748][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2059'. [ 354.801787][T13538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2070'. [ 354.875166][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 354.981988][T13538] veth1: entered allmulticast mode [ 355.011851][T13538] bond7: (slave veth1): Enslaving as an active interface with an up link [ 355.046686][T13546] bond7 (unregistering): (slave veth1): Releasing backup interface [ 355.059318][T13546] bond7 (unregistering): Released all slaves [ 355.143087][T13548] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2073'. [ 355.564043][T13565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2078'. [ 355.572084][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 355.589731][T13565] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2078'. [ 355.591076][T13567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2079'. [ 355.775710][T13573] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2081'. [ 355.800851][T13573] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 355.835647][T13550] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 355.940102][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'. [ 356.333732][T13599] syzkaller0: entered promiscuous mode [ 356.354573][T13599] syzkaller0: entered allmulticast mode [ 356.366284][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 356.389479][T13607] tipc: Enabled bearer , priority 0 [ 356.491808][T13610] netlink: 480 bytes leftover after parsing attributes in process `syz.3.2091'. [ 356.685731][T13607] tipc: Resetting bearer [ 356.696192][T13598] tipc: Resetting bearer [ 356.756150][T13598] tipc: Disabling bearer [ 356.852284][T13620] openvswitch: netlink: Key type 2061 is out of range max 32 [ 356.946072][T13624] FAULT_INJECTION: forcing a failure. [ 356.946072][T13624] name failslab, interval 1, probability 0, space 0, times 0 [ 356.971014][T13624] CPU: 0 UID: 0 PID: 13624 Comm: syz.3.2095 Not tainted syzkaller #0 PREEMPT(full) [ 356.971046][T13624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 356.971058][T13624] Call Trace: [ 356.971066][T13624] [ 356.971074][T13624] dump_stack_lvl+0xe8/0x150 [ 356.971111][T13624] should_fail_ex+0x40c/0x560 [ 356.971140][T13624] should_failslab+0xa8/0x100 [ 356.971170][T13624] __kmalloc_cache_noprof+0xa8/0x660 [ 356.971196][T13624] ? ip_set_pernet+0x23/0x240 [ 356.971353][T13624] ? ip_set_create+0x38f/0x1a40 [ 356.971368][T13624] ? ip_set_create+0x38f/0x1a40 [ 356.971389][T13624] ip_set_create+0x38f/0x1a40 [ 356.971411][T13624] ? rcu_is_watching+0x15/0xb0 [ 356.971453][T13624] ? __pfx_ip_set_create+0x10/0x10 [ 356.971499][T13624] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 356.971582][T13624] ? unwind_get_return_address+0x4d/0x90 [ 356.971617][T13624] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 356.971680][T13624] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 356.971767][T13624] netlink_rcv_skb+0x226/0x4a0 [ 356.971793][T13624] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 356.971829][T13624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.971866][T13624] ? bpf_lsm_capable+0x9/0x20 [ 356.971911][T13624] ? security_capable+0x7e/0x2c0 [ 356.972022][T13624] nfnetlink_rcv+0x2b9/0x28c0 [ 356.972056][T13624] ? __dev_queue_xmit+0x29b/0x3820 [ 356.972110][T13624] ? __local_bh_enable_ip+0xd0/0x130 [ 356.972146][T13624] ? lockdep_hardirqs_on+0x7a/0x110 [ 356.972167][T13624] ? __dev_queue_xmit+0x29b/0x3820 [ 356.972187][T13624] ? __local_bh_enable_ip+0xd0/0x130 [ 356.972208][T13624] ? __dev_queue_xmit+0x29b/0x3820 [ 356.972229][T13624] ? __dev_queue_xmit+0x1edc/0x3820 [ 356.972251][T13624] ? do_syscall_64+0x174/0x580 [ 356.972270][T13624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.972306][T13624] ? __dev_queue_xmit+0x29b/0x3820 [ 356.972330][T13624] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 356.972367][T13624] ? __pfx___dev_queue_xmit+0x10/0x10 [ 356.972398][T13624] ? ref_tracker_free+0x689/0x830 [ 356.972475][T13624] ? __pfx_ref_tracker_free+0x10/0x10 [ 356.972508][T13624] ? __skb_clone+0x449/0x6c0 [ 356.972559][T13624] ? skb_clone+0x246/0x3a0 [ 356.972584][T13624] ? __netlink_deliver_tap+0x811/0x860 [ 356.972604][T13624] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.972631][T13624] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.972651][T13624] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.972688][T13624] netlink_unicast+0x7bb/0x940 [ 356.972734][T13624] netlink_sendmsg+0x813/0xb40 [ 356.972767][T13624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.972804][T13624] ? aa_sock_msg_perm+0xf1/0x1b0 [ 356.972831][T13624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.972853][T13624] sock_sendmsg_nosec+0x13a/0x180 [ 356.972885][T13624] ____sys_sendmsg+0x54e/0x850 [ 356.972914][T13624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.972947][T13624] ? import_iovec+0x73/0xa0 [ 356.972983][T13624] ___sys_sendmsg+0x2a5/0x360 [ 356.973003][T13624] ? __lock_acquire+0x683/0x2cf0 [ 356.973037][T13624] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.973096][T13624] ? __fget_files+0x2a/0x420 [ 356.973123][T13624] ? __fget_files+0x3a2/0x420 [ 356.973159][T13624] __x64_sys_sendmsg+0x1b1/0x290 [ 356.973314][T13624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.973369][T13624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.973394][T13624] do_syscall_64+0x174/0x580 [ 356.973417][T13624] ? trace_irq_disable+0x3b/0x140 [ 356.973446][T13624] ? clear_bhb_loop+0x40/0x90 [ 356.973473][T13624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.973494][T13624] RIP: 0033:0x7efc17d9de99 [ 356.973517][T13624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.973536][T13624] RSP: 002b:00007efc18c6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.973561][T13624] RAX: ffffffffffffffda RBX: 00007efc18025fa0 RCX: 00007efc17d9de99 [ 356.973578][T13624] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 356.973592][T13624] RBP: 00007efc18c6b090 R08: 0000000000000000 R09: 0000000000000000 [ 356.973605][T13624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.973616][T13624] R13: 00007efc18026038 R14: 00007efc18025fa0 R15: 00007ffe61813af8 [ 356.973652][T13624] [ 357.846263][T13633] bond7: option lp_interval: invalid value (0) [ 357.852625][T13633] bond7: option lp_interval: allowed values 1 - 2147483647 [ 357.863696][T13633] bond7 (unregistering): Released all slaves [ 358.297763][T13666] C: renamed from veth1_to_team (while UP) [ 358.588035][T13676] netlink: 'syz.2.2109': attribute type 13 has an invalid length. [ 358.631128][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.650809][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.660981][T13680] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 358.664668][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.691292][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.709897][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 358.872225][T13686] syz.1.2112: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 358.954346][T13686] CPU: 0 UID: 0 PID: 13686 Comm: syz.1.2112 Not tainted syzkaller #0 PREEMPT(full) [ 358.954380][T13686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 358.954404][T13686] Call Trace: [ 358.954414][T13686] [ 358.954423][T13686] dump_stack_lvl+0xe8/0x150 [ 358.954469][T13686] warn_alloc+0x24c/0x270 [ 358.954524][T13686] ? stack_depot_save_flags+0x33/0x800 [ 358.954555][T13686] ? __pfx_warn_alloc+0x10/0x10 [ 358.954585][T13686] ? kasan_save_track+0x3e/0x80 [ 358.954612][T13686] ? __kasan_kmalloc+0x93/0xb0 [ 358.954641][T13686] ? xsk_setsockopt+0x52a/0x960 [ 358.954774][T13686] ? do_sock_setsockopt+0x17c/0x1b0 [ 358.954842][T13686] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 358.954876][T13686] ? do_syscall_64+0x174/0x580 [ 358.954915][T13686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.954950][T13686] __vmalloc_node_range_noprof+0x12c/0x1730 [ 358.955013][T13686] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 358.955047][T13686] ? __kasan_kmalloc+0x93/0xb0 [ 358.955080][T13686] ? __kmalloc_cache_noprof+0x32d/0x660 [ 358.955109][T13686] ? __kmalloc_cache_noprof+0x150/0x660 [ 358.955141][T13686] vmalloc_user_noprof+0xad/0xe0 [ 358.955168][T13686] ? xskq_create+0xbf/0x170 [ 358.955202][T13686] xskq_create+0xbf/0x170 [ 358.955239][T13686] xsk_init_queue+0x8a/0xe0 [ 358.955275][T13686] xsk_setsockopt+0x52a/0x960 [ 358.955306][T13686] ? __fget_files+0x2a/0x420 [ 358.955337][T13686] ? __pfx_xsk_setsockopt+0x10/0x10 [ 358.955369][T13686] ? __pfx_aa_sk_perm+0x10/0x10 [ 358.955457][T13686] ? aa_sock_opt_perm+0xff/0x1a0 [ 358.955483][T13686] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 358.955508][T13686] ? __pfx_xsk_setsockopt+0x10/0x10 [ 358.955541][T13686] do_sock_setsockopt+0x17c/0x1b0 [ 358.955582][T13686] __x64_sys_setsockopt+0x13d/0x1b0 [ 358.955619][T13686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.955645][T13686] do_syscall_64+0x174/0x580 [ 358.955667][T13686] ? trace_irq_disable+0x3b/0x140 [ 358.955696][T13686] ? clear_bhb_loop+0x40/0x90 [ 358.955724][T13686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.955748][T13686] RIP: 0033:0x7ff63179de99 [ 358.955770][T13686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.955789][T13686] RSP: 002b:00007ff632699028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 358.955813][T13686] RAX: ffffffffffffffda RBX: 00007ff631a25fa0 RCX: 00007ff63179de99 [ 358.955830][T13686] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 358.955844][T13686] RBP: 00007ff631833eaf R08: 0000000000000004 R09: 0000000000000000 [ 358.955858][T13686] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.955873][T13686] R13: 00007ff631a26038 R14: 00007ff631a25fa0 R15: 00007ffcb71e3e98 [ 358.955921][T13686] [ 359.099704][T13686] Mem-Info: [ 359.286106][T13656] bridge4: entered promiscuous mode [ 359.292406][T13686] active_anon:9430 inactive_anon:0 isolated_anon:0 [ 359.292406][T13686] active_file:0 inactive_file:43561 isolated_file:0 [ 359.292406][T13686] unevictable:768 dirty:240 writeback:0 [ 359.292406][T13686] slab_reclaimable:11453 slab_unreclaimable:160352 [ 359.292406][T13686] mapped:47951 shmem:4153 pagetables:1419 [ 359.292406][T13686] sec_pagetables:0 bounce:0 [ 359.292406][T13686] kernel_misc_reclaimable:0 [ 359.292406][T13686] free:1214654 free_pcp:7799 free_cma:0 [ 359.294501][T13656] bridge4: entered allmulticast mode [ 359.393237][T13686] Node 0 active_anon:37768kB inactive_anon:0kB active_file:0kB inactive_file:174048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:191820kB dirty:960kB writeback:0kB shmem:15092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14716kB pagetables:5512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 359.483046][T13686] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 359.519702][T13686] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.520004][T13694] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 359.520024][T13686] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 359.623306][T13686] Node 0 DMA32 free:904816kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37668kB inactive_anon:0kB active_file:0kB inactive_file:174048kB unevictable:1536kB writepending:960kB zspages:0kB present:3129332kB managed:2548700kB mlocked:0kB bounce:0kB free_pcp:39620kB local_pcp:23680kB free_cma:0kB [ 359.706323][T13686] lowmem_reserve[]: 0 0 0 0 0 [ 359.722779][T13686] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.786256][T13686] lowmem_reserve[]: 0 0 0 0 0 [ 359.812117][T13686] Node 1 Normal free:3942424kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.883996][T13686] lowmem_reserve[]: 0 0 0 0 0 [ 359.893563][T13686] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 359.963574][T13686] Node 0 DMA32: 811*4kB (UME) 448*8kB (UME) 364*16kB (UME) 550*32kB (UME) 68*64kB (UME) 21*128kB (UME) 31*256kB (UME) 21*512kB (UME) 14*1024kB (UME) 3*2048kB (M) 208*4096kB (UM) = 928428kB [ 360.028117][T13686] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 360.047054][T13686] Node 1 Normal: 0*4kB 1*8kB (M) 3*16kB (UM) 1*32kB (M) 5*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942424kB [ 360.065026][T13686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.087134][T13686] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 360.108202][T13686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.130005][T13686] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 360.153552][T13686] 44864 total pagecache pages [ 360.164434][T13686] 0 pages in swap cache [ 360.173691][T13686] Free swap = 124996kB [ 360.184598][T13686] Total swap = 124996kB [ 360.199670][T13686] 2097051 pages RAM [ 360.213027][T13686] 0 pages HighMem/MovableOnly [ 360.226560][T13686] 428195 pages reserved [ 360.238479][T13686] 0 pages cma reserved [ 360.485295][T13678] lo speed is unknown, defaulting to 1000 [ 360.501377][T13713] __nla_validate_parse: 10 callbacks suppressed [ 360.501398][T13713] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2116'. [ 360.752929][ T5629] Bluetooth: hci7: command tx timeout [ 361.290530][T13717] syzkaller0: entered promiscuous mode [ 361.308814][T13717] syzkaller0: entered allmulticast mode [ 362.130317][T13751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2124'. [ 362.388987][T13678] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.427490][T13678] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.452571][T13678] bridge_slave_0: entered allmulticast mode [ 362.479257][T13678] bridge_slave_0: entered promiscuous mode [ 362.505394][T13678] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.536288][T13678] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.562257][T13678] bridge_slave_1: entered allmulticast mode [ 362.607156][T13678] bridge_slave_1: entered promiscuous mode [ 362.726918][T13759] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 362.790466][T13759] bond7 (unregistering): Released all slaves [ 362.832791][ T5629] Bluetooth: hci7: command tx timeout [ 362.914652][T13678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.928120][T13678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.057686][T13678] team0: Port device team_slave_0 added [ 363.090549][T13678] team0: Port device team_slave_1 added [ 363.356326][T13678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.373657][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.417125][T13678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.450170][T13678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.463603][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.550751][T13678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.596208][T13781] syzkaller0: entered promiscuous mode [ 363.606670][T13781] syzkaller0: entered allmulticast mode [ 363.708413][T13790] netlink: 'syz.1.2130': attribute type 7 has an invalid length. [ 363.747396][T13790] netlink: 'syz.1.2130': attribute type 8 has an invalid length. [ 364.011479][T13678] hsr_slave_0: entered promiscuous mode [ 364.026608][T13678] hsr_slave_1: entered promiscuous mode [ 364.042449][T13678] debugfs: 'hsr0' already exists in 'hsr' [ 364.060731][T13678] Cannot create hsr debugfs directory [ 364.496840][T13824] veth1_to_bond: entered allmulticast mode [ 364.792207][T13825] veth1_to_bond: left allmulticast mode [ 364.924504][ T5629] Bluetooth: hci7: command tx timeout [ 364.928346][T13845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2145'. [ 364.997801][T13850] netlink: 'syz.2.2147': attribute type 1 has an invalid length. [ 365.204577][T13850] bond5: entered promiscuous mode [ 365.210563][T13850] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.228603][T13861] netlink: 'syz.3.2149': attribute type 1 has an invalid length. [ 365.255970][T13861] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2149'. [ 365.336112][T13853] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.346976][T13853] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 365.357739][T13853] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 365.373737][T13853] bond5: (slave vti0): making interface the new active one [ 365.381478][T13853] vti0: entered promiscuous mode [ 365.390991][T13853] bond5: (slave vti0): Enslaving as an active interface with an up link [ 365.879930][T13678] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 365.919387][T13678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.935210][T13887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2156'. [ 365.967202][T13886] vlan6: entered promiscuous mode [ 365.974368][T13886] hsr0: entered promiscuous mode [ 365.980399][T13886] vlan6: entered allmulticast mode [ 365.992238][T13886] hsr0: entered allmulticast mode [ 366.004486][T13886] hsr_slave_0: entered allmulticast mode [ 366.024118][T13886] hsr_slave_1: entered allmulticast mode [ 366.058437][T13678] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 366.076967][T13678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.086546][T13678] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 366.100570][T13678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.115840][T13888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2156'. [ 366.127755][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2155'. [ 366.143701][T13678] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 366.170914][T13678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.243094][T13896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2158'. [ 366.537575][T13678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.606749][T13912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.628247][T13912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.646015][T13678] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.651599][T13910] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2161'. [ 366.683784][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.691043][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.717351][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.726310][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.739238][T13912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2162'. [ 366.797681][T13912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.993193][ T5629] Bluetooth: hci7: command tx timeout [ 367.591338][T13951] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 367.658599][T13954] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.954333][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2175'. [ 367.993448][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2175'. [ 368.026228][T13678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.035345][T13969] xt_connbytes: Forcing CT accounting to be enabled [ 368.068314][T13969] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 368.413869][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2179'. [ 368.661442][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2180'. [ 368.956389][T13678] veth0_vlan: entered promiscuous mode [ 369.039937][T13678] veth1_vlan: entered promiscuous mode [ 369.111652][T13999] xt_hashlimit: size too large, truncated to 1048576 [ 369.148001][T13678] veth0_macvtap: entered promiscuous mode [ 369.186896][T13678] veth1_macvtap: entered promiscuous mode [ 369.255962][T13678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.279433][T13678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.303978][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.322480][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.357308][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.539670][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.829705][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.872091][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.019461][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.047367][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.495695][T14024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.665451][T14027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 371.931289][T14053] netlink: 'syz.2.2199': attribute type 1 has an invalid length. [ 372.044601][T14057] __nla_validate_parse: 17 callbacks suppressed [ 372.044625][T14057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2199'. [ 374.796963][T14027] 8021q: adding VLAN 0 to HW filter on device bond9 [ 374.809411][T14027] bridge4: left promiscuous mode [ 374.819135][T14027] vlan6: left promiscuous mode [ 374.826062][T14027] hsr0: left promiscuous mode [ 374.911579][T14055] bond6: (slave geneve4): making interface the new active one [ 374.926184][T14055] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 374.944221][ T204] bond8: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 375.000473][T14057] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.031805][ T12] netdevsim netdevsim2 ªªªªª»: set [1, 0] type 2 family 0 port 20000 - 0 [ 375.056763][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2201'. [ 375.071098][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 375.141154][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 375.205733][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 375.319069][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 375.491252][T14082] netlink: 'syz.0.2202': attribute type 30 has an invalid length. [ 375.578284][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2207'. [ 376.042022][T14106] syzkaller0: entered promiscuous mode [ 376.063161][T14106] syzkaller0: entered allmulticast mode [ 376.529364][T14134] netlink: 'syz.7.2214': attribute type 13 has an invalid length. [ 376.569510][T14134] netlink: 'syz.7.2214': attribute type 17 has an invalid length. [ 376.705695][T14128] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.714350][T14128] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.987971][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2219'. [ 377.040523][T14152] netlink: 'syz.2.2219': attribute type 1 has an invalid length. [ 377.051584][T14128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.071977][T14128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.108552][T14154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'. [ 377.420331][T14134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.435395][T14134] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.456018][T14134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.512624][T14134] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.520464][T14134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.536663][T14134] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.544837][T14134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.591623][T14134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.606885][T14134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.653459][T14134] veth1_vlan: left promiscuous mode [ 377.661498][T14134] veth0_vlan: left promiscuous mode [ 377.672062][T14134] veth0_vlan: entered promiscuous mode [ 377.685070][T14134] veth1_vlan: entered promiscuous mode [ 377.706424][T14134] veth1_macvtap: left promiscuous mode [ 377.716585][T14134] veth0_macvtap: left promiscuous mode [ 377.742230][T14134] veth0_macvtap: entered promiscuous mode [ 377.784416][T14134] veth1_macvtap: entered promiscuous mode [ 377.851912][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.916617][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.961153][T14176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2221'. [ 377.966510][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.990607][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.135666][T14152] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 378.267227][T14185] openvswitch: netlink: IP tunnel dst address not specified [ 378.633307][T14200] netlink: 'syz.2.2229': attribute type 29 has an invalid length. [ 378.705208][T14205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2231'. [ 378.947472][T14217] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 379.074685][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.478092][T14224] netlink: 'syz.0.2236': attribute type 58 has an invalid length. [ 379.488077][T14224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2236'. [ 379.713454][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 380.044263][T14247] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 380.200284][T14253] tipc: Enabled bearer , priority 0 [ 380.230907][T14253] syzkaller0: entered promiscuous mode [ 380.250486][T14253] syzkaller0: entered allmulticast mode [ 380.260236][T14255] openvswitch: netlink: Missing key (keys=40, expected=100) [ 380.271295][T14253] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 380.282760][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2249'. [ 380.378887][T14259] tipc: Resetting bearer [ 380.420150][T14263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2251'. [ 380.436608][T14250] tipc: Resetting bearer [ 380.487930][T14250] tipc: Disabling bearer [ 380.711247][T14278] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2255'. [ 380.854850][T14277] batman_adv: batadv0: Interface deactivated: gretap1 [ 381.271461][T12711] lo speed is unknown, defaulting to 1000 [ 381.280763][ T138] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.299564][T12711] syz2: Port: 1 Link DOWN [ 381.317315][ T138] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.356101][ T138] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.383220][ T138] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.556784][T14313] netlink: 'syz.0.2264': attribute type 1 has an invalid length. [ 381.608283][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 381.639190][T14310] sctp: [Deprecated]: syz.7.2263 (pid 14310) Use of int in max_burst socket option. [ 381.639190][T14310] Use struct sctp_assoc_value instead [ 381.672500][T14321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2265'. [ 381.811884][T14321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2265'. [ 382.090715][T14335] xt_TPROXY: Can be used only with -p tcp or -p udp [ 382.118676][T14335] 8021q: VLANs not supported on syzkaller0 [ 382.286465][T14346] __nla_validate_parse: 32 callbacks suppressed [ 382.286488][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2271'. [ 382.479931][T14352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2274'. [ 382.570831][T14352] netlink: 'syz.3.2274': attribute type 11 has an invalid length. [ 387.057694][T14387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2283'. [ 387.293038][T14399] FAULT_INJECTION: forcing a failure. [ 387.293038][T14399] name failslab, interval 1, probability 0, space 0, times 0 [ 387.307118][T14399] CPU: 0 UID: 0 PID: 14399 Comm: syz.2.2288 Not tainted syzkaller #0 PREEMPT(full) [ 387.307150][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 387.307164][T14399] Call Trace: [ 387.307173][T14399] [ 387.307183][T14399] dump_stack_lvl+0xe8/0x150 [ 387.307226][T14399] should_fail_ex+0x40c/0x560 [ 387.307261][T14399] should_failslab+0xa8/0x100 [ 387.307304][T14399] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 387.307333][T14399] ? skb_clone+0x212/0x3a0 [ 387.307356][T14399] ? skb_clone+0x212/0x3a0 [ 387.307380][T14399] ? run_filter+0x23/0x270 [ 387.307522][T14399] skb_clone+0x212/0x3a0 [ 387.307552][T14399] ? packet_rcv+0x563/0x16f0 [ 387.307580][T14399] packet_rcv+0x65d/0x16f0 [ 387.307618][T14399] __netif_receive_skb_core+0x2705/0x30b0 [ 387.307712][T14399] ? kernel_text_address+0xa5/0xe0 [ 387.307752][T14399] ? unwind_get_return_address+0x4d/0x90 [ 387.307775][T14399] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 387.307817][T14399] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 387.307876][T14399] ? kasan_save_track+0x4f/0x80 [ 387.307904][T14399] ? __kasan_slab_alloc+0x6c/0x80 [ 387.307931][T14399] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 387.307962][T14399] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 387.307987][T14399] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 387.308017][T14399] __netif_receive_skb_list_core+0x24d/0x830 [ 387.308063][T14399] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 387.308106][T14399] netif_receive_skb_list_internal+0x995/0xcf0 [ 387.308141][T14399] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 387.308168][T14399] ? eth_type_trans+0x49b/0x800 [ 387.308265][T14399] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 387.308308][T14399] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 387.308379][T14399] netif_receive_skb_list+0x67/0x480 [ 387.308407][T14399] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 387.308437][T14399] bpf_test_run_xdp_live+0x1875/0x1c20 [ 387.308474][T14399] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 387.308516][T14399] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 387.308550][T14399] ? 0xffffffffa02057c0 [ 387.308625][T14399] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 387.308659][T14399] ? _copy_from_user+0x94/0xb0 [ 387.308693][T14399] ? bpf_test_init+0x113/0x150 [ 387.308712][T14399] ? xdp_convert_md_to_buff+0x5b/0x330 [ 387.308739][T14399] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 387.308783][T14399] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 387.308812][T14399] ? __fget_files+0x2a/0x420 [ 387.308847][T14399] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 387.308873][T14399] bpf_prog_test_run+0x2c5/0x340 [ 387.308908][T14399] __sys_bpf+0xa22/0xd90 [ 387.308947][T14399] ? __pfx___sys_bpf+0x10/0x10 [ 387.308989][T14399] ? __fget_files+0x2a/0x420 [ 387.309035][T14399] ? ksys_write+0x242/0x270 [ 387.309072][T14399] ? __pfx_ksys_write+0x10/0x10 [ 387.309112][T14399] __x64_sys_bpf+0xba/0xd0 [ 387.309139][T14399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.309164][T14399] do_syscall_64+0x174/0x580 [ 387.309188][T14399] ? trace_irq_disable+0x3b/0x140 [ 387.309216][T14399] ? clear_bhb_loop+0x40/0x90 [ 387.309244][T14399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.309267][T14399] RIP: 0033:0x7fedc459de99 [ 387.309289][T14399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.309309][T14399] RSP: 002b:00007fedc546f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.309334][T14399] RAX: ffffffffffffffda RBX: 00007fedc4825fa0 RCX: 00007fedc459de99 [ 387.309350][T14399] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 387.309365][T14399] RBP: 00007fedc546f090 R08: 0000000000000000 R09: 0000000000000000 [ 387.309379][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.309392][T14399] R13: 00007fedc4826038 R14: 00007fedc4825fa0 R15: 00007ffd9dcebb38 [ 387.309430][T14399] [ 387.779761][T14401] netlink: 'syz.3.2289': attribute type 1 has an invalid length. [ 387.907074][T14402] IPVS: Scheduler module ip_vs_sip not found [ 387.989233][T14401] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2289'. [ 388.077045][T14412] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2293'. [ 388.089045][T14416] ±ÿ: renamed from lo [ 388.372307][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'. [ 388.390249][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'. [ 388.428201][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'. [ 388.468694][T14422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 388.502008][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2294'. [ 388.520303][T14432] netlink: 'syz.2.2298': attribute type 1 has an invalid length. [ 388.634473][T14432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.685709][T14441] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 388.729370][T14441] bond7: entered allmulticast mode [ 388.810340][T14432] vlan0: left allmulticast mode [ 388.817263][T14432] geneve0: left allmulticast mode [ 388.825196][T14432] bridge0: port 1(vlan0) entered disabled state [ 389.147332][T14457] ±ÿ speed is unknown, defaulting to 1000 [ 389.313601][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 389.405950][T14470] netlink: 'syz.2.2305': attribute type 1 has an invalid length. [ 389.516237][T14470] 8021q: adding VLAN 0 to HW filter on device bond8 [ 389.706583][T14470] bond8: (slave gretap3): making interface the new active one [ 389.731337][T14470] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 389.930721][T14484] syzkaller0: entered promiscuous mode [ 389.950227][T14484] syzkaller0: entered allmulticast mode [ 389.987294][T14493] syzkaller0: entered promiscuous mode [ 390.001004][T14493] syzkaller0: entered allmulticast mode [ 390.014779][T14470] syz.2.2305 (14470) used greatest stack depth: 17888 bytes left [ 390.197772][T14500] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2311'. [ 394.235169][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2316'. [ 394.283303][T14512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.485557][T14518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2317'. [ 395.345133][T14553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.845380][T14574] macsec1: entered promiscuous mode [ 396.495714][T14600] tipc: Failed to remove unknown binding: 66,0,0/0:3926593302/3926593304 [ 396.526134][T14600] tipc: Failed to remove unknown binding: 66,0,0/0:3926593302/3926593303 [ 396.587973][T14603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 396.667215][T14605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2343'. [ 396.749467][T14609] netlink: 'syz.1.2343': attribute type 10 has an invalid length. [ 396.757617][T14609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2343'. [ 396.830449][T14603] 8021q: adding VLAN 0 to HW filter on device bond8 [ 396.979880][T14624] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 397.010914][T14624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.320354][T14647] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2354'. [ 397.451399][T14646] ±ÿ speed is unknown, defaulting to 1000 [ 397.814602][T14656] netlink: 'syz.0.2358': attribute type 15 has an invalid length. [ 397.833753][T14656] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2358'. [ 397.883799][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2360'. [ 397.917807][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2360'. [ 399.553925][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.908341][T14722] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2374'. [ 400.187674][T14712] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.361902][T14766] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 401.433959][T14774] wlan0: left promiscuous mode [ 401.455651][T14774] wlan0: left allmulticast mode [ 401.477632][T14774] team0: left promiscuous mode [ 401.516833][T14774] team0: left allmulticast mode [ 401.552569][T14774] dummy0: left promiscuous mode [ 401.676095][T14774] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 401.706635][T14774] bridge1: left allmulticast mode [ 401.830894][T14774] vlan4: left allmulticast mode [ 401.862759][T14774] bond7: left allmulticast mode [ 401.877655][T14774] geneve3: left allmulticast mode [ 401.984584][ T30] audit: type=1800 audit(1784620948.390:6): pid=14803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2391" name=20 dev="tmpfs" ino=227 res=0 errno=0 [ 402.210727][ T5281] netdevsim netdevsim2 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 402.239316][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.720944][T14841] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2399'. [ 402.958149][T14830] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 403.134037][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 403.230046][T14855] ±ÿ speed is unknown, defaulting to 1000 [ 403.413960][T14869] team0: Device syz_tun is of different type [ 403.569933][T14876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2412'. [ 403.662321][T14880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2413'. [ 403.909876][ T13] tipc: Resetting bearer [ 404.160807][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 404.507888][T14919] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 404.507888][T14919] Please contact the netfilter-devel mailing list or update your nftables rules. [ 404.550474][T14918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2421'. [ 404.576616][T14913] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 404.619419][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2422'. [ 404.631976][T14921] x_tables: duplicate underflow at hook 2 [ 404.718391][T14913] bond9 (unregistering): Released all slaves [ 405.208507][T14938] batadv_slave_1: entered promiscuous mode [ 405.236741][T14937] batadv_slave_1: left promiscuous mode [ 405.350721][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 405.467571][T14947] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2428'. [ 405.762504][T14955] ±ÿ speed is unknown, defaulting to 1000 [ 406.215886][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 406.261250][T14970] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 406.384979][T12711] ±ÿ speed is unknown, defaulting to 1000 [ 406.407374][T12711] syz2: Port: 1 Link ACTIVE [ 406.478089][T14971] bridge11: entered allmulticast mode [ 406.609481][T14986] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 406.632302][T14989] netlink: 'syz.2.2441': attribute type 32 has an invalid length. [ 406.644810][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 406.661797][T14992] netlink: 'syz.7.2440': attribute type 9 has an invalid length. [ 406.682410][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 406.696265][T14970] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 406.777300][T14986] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 406.942226][T14989] bond9: option coupled_control: invalid value (255) [ 406.967513][T15002] SET target dimension over the limit! [ 406.984808][T14989] bond9 (unregistering): Released all slaves [ 407.246658][T15011] ±ÿ speed is unknown, defaulting to 1000 [ 407.258123][T15013] ±ÿ speed is unknown, defaulting to 1000 [ 408.138054][T15033] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2451'. [ 408.198317][T15038] netlink: 'syz.1.2452': attribute type 21 has an invalid length. [ 408.227036][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2451'. [ 408.235284][T15038] netlink: 'syz.1.2452': attribute type 22 has an invalid length. [ 408.259296][T15038] netlink: 'syz.1.2452': attribute type 23 has an invalid length. [ 408.290278][T15038] netlink: 'syz.1.2452': attribute type 25 has an invalid length. [ 408.321561][T15038] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2452'. [ 408.343755][T15042] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2454'. [ 408.488104][T15051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2456'. [ 408.513883][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 408.549789][T15051] xt_hashlimit: size too large, truncated to 1048576 [ 408.886293][T15069] rdma_op ffff888076d551f0 conn xmit_rdma 0000000000000000 [ 409.028768][T15072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.099455][T15080] hsr0: entered promiscuous mode [ 409.174243][T15083] syzkaller0: entered promiscuous mode [ 409.181101][T15083] syzkaller0: entered allmulticast mode [ 409.330086][ T5629] block nbd1: Receive control failed (result -32) [ 409.352380][T15077] netlink: 'syz.1.2463': attribute type 7 has an invalid length. [ 409.459859][T15078] hsr0: left promiscuous mode [ 409.616097][T15097] ±ÿ speed is unknown, defaulting to 1000 [ 409.825835][T15103] bridge0: port 3(syz_tun) entered disabled state [ 409.838475][T15103] bridge0: port 4(vlan3) entered disabled state [ 409.845747][T15103] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.853265][T15103] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.938870][T15103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.959333][T15103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.191184][T15113] netlink: 'syz.0.2473': attribute type 30 has an invalid length. [ 410.209279][T15103] batman_adv: batadv0: Interface deactivated: vlan4 [ 410.220366][T15103] veth1: left allmulticast mode [ 410.228205][T15103] macsec1: left promiscuous mode [ 410.246526][ T204] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.272095][ T204] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.385916][ T204] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.397476][T15116] netlink: 'syz.0.2473': attribute type 30 has an invalid length. [ 410.423164][ T204] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.458136][ T204] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.495600][ T204] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.621748][ T204] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.644488][T15121] __nla_validate_parse: 1 callbacks suppressed [ 410.644541][T15121] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2475'. [ 410.669382][ T204] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.832015][T15129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.900894][T15139] 8021q: adding VLAN 0 to HW filter on device bond11 [ 410.924015][T15139] vlan7: entered allmulticast mode [ 410.930175][T15139] bond11: entered allmulticast mode [ 411.273574][T15147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2482'. [ 411.511474][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2484'. [ 411.739639][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 411.775942][T15167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2488'. [ 411.810191][T15168] validate_nla: 2 callbacks suppressed [ 411.810211][T15168] netlink: 'syz.3.2488': attribute type 1 has an invalid length. [ 411.869962][T15168] netlink: 'syz.3.2488': attribute type 2 has an invalid length. [ 411.888565][T15168] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2488'. [ 412.139664][T15176] sctp: [Deprecated]: syz.0.2491 (pid 15176) Use of int in max_burst socket option deprecated. [ 412.139664][T15176] Use struct sctp_assoc_value instead [ 412.393504][T15187] netlink: 'syz.0.2491': attribute type 1 has an invalid length. [ 412.471311][T15187] bond12: option mode: invalid value (9) [ 412.480871][T15196] xt_hashlimit: size too large, truncated to 1048576 [ 412.530104][T15187] bond12 (unregistering): Released all slaves [ 412.550753][T15202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2496'. [ 412.599353][T15196] xt_hashlimit: max too large, truncated to 1048576 [ 412.613134][T15202] netlink: 'syz.7.2496': attribute type 7 has an invalid length. [ 412.645037][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2495'. [ 412.656419][T15202] netlink: 'syz.7.2496': attribute type 8 has an invalid length. [ 412.665631][T15192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2495'. [ 412.679723][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2496'. [ 412.707480][T15201] : renamed from dummy0 [ 412.835425][T15192] bridge3: entered promiscuous mode [ 412.841513][T15192] bridge3: entered allmulticast mode [ 412.851915][T15192] team0: Port device bridge3 added [ 412.946792][T15210] bond0: entered promiscuous mode [ 412.965083][T15210] bond_slave_0: entered promiscuous mode [ 412.975959][T15210] bond_slave_1: entered promiscuous mode [ 412.990056][T15210] ipvlan1: entered promiscuous mode [ 412.997655][T15210] ipvlan1: left promiscuous mode [ 413.004915][T15210] bond0: left promiscuous mode [ 413.009895][T15210] bond_slave_0: left promiscuous mode [ 413.017564][T15210] bond_slave_1: left promiscuous mode [ 413.040084][T15212] bond0: entered promiscuous mode [ 413.046228][T15212] bond_slave_0: entered promiscuous mode [ 413.052742][T15212] bond_slave_1: entered promiscuous mode [ 413.060963][T15212] ipvlan1: entered promiscuous mode [ 413.068887][T15212] ipvlan1: left promiscuous mode [ 413.075968][T15212] bond0: left promiscuous mode [ 413.082270][T15212] bond_slave_0: left promiscuous mode [ 413.089595][T15212] bond_slave_1: left promiscuous mode [ 413.137857][T15214] vlan5: entered promiscuous mode [ 413.143733][T15214] gretap0: entered promiscuous mode [ 413.520972][T15231] bridge_slave_1: left allmulticast mode [ 413.539516][T15231] bridge_slave_1: left promiscuous mode [ 413.551091][T15231] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.579180][T15231] bridge_slave_0: left allmulticast mode [ 413.601950][T15231] bridge_slave_0: left promiscuous mode [ 413.631099][T15231] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.789501][T15241] netlink: 'syz.3.2505': attribute type 10 has an invalid length. [ 413.836093][T15241] geneve3: entered promiscuous mode [ 413.842271][T15241] geneve3: entered allmulticast mode [ 414.759492][T15286] IPVS: length: 24 != 129048 [ 414.759963][T15287] syz_tun: entered promiscuous mode [ 414.795354][T15284] syz_tun: left promiscuous mode [ 414.870472][T15274] FAULT_INJECTION: forcing a failure. [ 414.870472][T15274] name failslab, interval 1, probability 0, space 0, times 0 [ 414.883560][T15274] CPU: 0 UID: 0 PID: 15274 Comm: syz.7.2510 Not tainted syzkaller #0 PREEMPT(full) [ 414.883588][T15274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 414.883602][T15274] Call Trace: [ 414.883610][T15274] [ 414.883619][T15274] dump_stack_lvl+0xe8/0x150 [ 414.883663][T15274] should_fail_ex+0x40c/0x560 [ 414.883698][T15274] should_failslab+0xa8/0x100 [ 414.883734][T15274] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 414.883761][T15274] ? skb_clone+0x212/0x3a0 [ 414.883785][T15274] ? skb_clone+0x212/0x3a0 [ 414.883808][T15274] ? run_filter+0x23/0x270 [ 414.883840][T15274] skb_clone+0x212/0x3a0 [ 414.883860][T15274] ? packet_rcv+0x563/0x16f0 [ 414.883888][T15274] packet_rcv+0x65d/0x16f0 [ 414.883923][T15274] __netif_receive_skb_core+0x2705/0x30b0 [ 414.883961][T15274] ? kernel_text_address+0xa5/0xe0 [ 414.884005][T15274] ? unwind_get_return_address+0x4d/0x90 [ 414.884028][T15274] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 414.884063][T15274] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 414.884119][T15274] ? kasan_save_track+0x4f/0x80 [ 414.884146][T15274] ? __kasan_slab_alloc+0x6c/0x80 [ 414.884173][T15274] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 414.884202][T15274] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 414.884226][T15274] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 414.884252][T15274] __netif_receive_skb_list_core+0x24d/0x830 [ 414.884298][T15274] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 414.884341][T15274] netif_receive_skb_list_internal+0x995/0xcf0 [ 414.884377][T15274] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 414.884403][T15274] ? eth_type_trans+0x49b/0x800 [ 414.884430][T15274] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 414.884470][T15274] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 414.884502][T15274] netif_receive_skb_list+0x67/0x480 [ 414.884529][T15274] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 414.884557][T15274] bpf_test_run_xdp_live+0x1875/0x1c20 [ 414.884596][T15274] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 414.884633][T15274] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 414.884658][T15274] ? bpf_dispatcher_xdp+0x800/0x1000 [ 414.884735][T15274] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 414.884769][T15274] ? _copy_from_user+0x94/0xb0 [ 414.884803][T15274] ? bpf_test_init+0x113/0x150 [ 414.884822][T15274] ? xdp_convert_md_to_buff+0x5b/0x330 [ 414.884850][T15274] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 414.884893][T15274] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 414.884923][T15274] ? __fget_files+0x2a/0x420 [ 414.884958][T15274] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 414.884983][T15274] bpf_prog_test_run+0x2c5/0x340 [ 414.885029][T15274] __sys_bpf+0xa22/0xd90 [ 414.885067][T15274] ? __pfx___sys_bpf+0x10/0x10 [ 414.885109][T15274] ? __fget_files+0x2a/0x420 [ 414.885158][T15274] ? ksys_write+0x242/0x270 [ 414.885193][T15274] ? __pfx_ksys_write+0x10/0x10 [ 414.885232][T15274] __x64_sys_bpf+0xba/0xd0 [ 414.885258][T15274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.885283][T15274] do_syscall_64+0x174/0x580 [ 414.885306][T15274] ? trace_irq_disable+0x3b/0x140 [ 414.885334][T15274] ? clear_bhb_loop+0x40/0x90 [ 414.885361][T15274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.885383][T15274] RIP: 0033:0x7f853f59de99 [ 414.885404][T15274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.885428][T15274] RSP: 002b:00007f8540391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.885453][T15274] RAX: ffffffffffffffda RBX: 00007f853f825fa0 RCX: 00007f853f59de99 [ 414.885469][T15274] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 414.885483][T15274] RBP: 00007f8540391090 R08: 0000000000000000 R09: 0000000000000000 [ 414.885496][T15274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.885508][T15274] R13: 00007f853f826038 R14: 00007f853f825fa0 R15: 00007ffde4708a18 [ 414.885545][T15274] [ 415.741998][T15304] __nla_validate_parse: 10 callbacks suppressed [ 415.742018][T15304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2519'. [ 415.785525][T15310] ip6tnl0: Caught tx_queue_len zero misconfig [ 415.821406][T15310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 416.056902][T15325] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2526'. [ 416.675870][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2529'. [ 416.791625][T15347] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 418.268996][T15369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2537'. [ 418.821940][T15385] x_tables: unsorted underflow at hook 3 [ 419.201113][T15331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.517112][T15392] xt_hashlimit: max too large, truncated to 1048576 [ 419.673909][T15400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2542'. [ 419.779966][T15400] vlan0: entered promiscuous mode [ 420.585390][T15432] netlink: 'syz.2.2552': attribute type 5 has an invalid length. [ 420.607773][T15438] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2554'. [ 421.194533][T15465] nbd: must specify at least one socket [ 421.209089][T15468] nbd: must specify at least one socket [ 421.251165][T15462] netlink: 'syz.3.2561': attribute type 13 has an invalid length. [ 421.295976][T15462] netlink: 'syz.3.2561': attribute type 17 has an invalid length. [ 421.474656][T15462] bridge0: port 3(syz_tun) entered blocking state [ 421.481731][T15462] bridge0: port 3(syz_tun) entered forwarding state [ 421.516637][T15462] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.552553][T15462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.703728][T15462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.729158][T15462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.767828][T15462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.792848][T15462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.818011][T15462] veth1_vlan: left promiscuous mode [ 421.835458][T15462] veth0_vlan: left promiscuous mode [ 421.855601][T15462] veth0_vlan: entered promiscuous mode [ 421.875637][T15462] veth1_vlan: entered promiscuous mode [ 421.924190][T15462] veth1_macvtap: left promiscuous mode [ 421.937359][T15462] veth0_macvtap: left promiscuous mode [ 421.957563][T15462] veth0_macvtap: entered promiscuous mode [ 422.004436][T15462] veth1_macvtap: entered promiscuous mode [ 422.033368][T15462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.067727][T15462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.114981][T15462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.141242][T15462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.336233][T15462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.360236][T15462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.381062][T15462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.393367][T15462] 8021q: adding VLAN 0 to HW filter on device bond4 [ 422.402082][T15462] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 422.419532][T15462] 8021q: adding VLAN 0 to HW filter on device bond5 [ 422.429107][T15462] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 422.462933][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.471082][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.487799][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.495640][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.613957][ T6966] batman_adv: batadv0: Interface activated: vlan4 [ 422.636808][ T6966] bridge0: port 4(vlan3) entered blocking state [ 422.643517][ T6966] bridge0: port 4(vlan3) entered forwarding state [ 422.660042][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.673683][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.697242][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.708869][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.718803][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.730828][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.763913][T15492] netlink: 'syz.3.2568': attribute type 2 has an invalid length. [ 422.773720][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.783204][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.796736][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 422.958857][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2571'. [ 423.051346][T15502] x_tables: duplicate underflow at hook 1 [ 423.146766][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2572'. [ 423.258324][T15506] hsr_slave_1 (unregistering): left promiscuous mode [ 423.490326][T15523] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2577'. [ 423.524682][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2577'. [ 424.070467][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2583'. [ 424.164432][T15540] 8021q: adding VLAN 0 to HW filter on device bond9 [ 424.257985][T15547] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 424.712973][T15568] openvswitch: netlink: Multiple metadata blocks provided [ 424.746064][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2589'. [ 425.362935][T15591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2596'. [ 425.410074][T15591] 8021q: adding VLAN 0 to HW filter on device bond12 [ 425.848310][T15601] bond0: (slave ip6tnl0): refused to change device type [ 425.873778][T15601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2598'. [ 425.892285][T15601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2598'. [ 426.472544][T15616] bridge0: port 3(syz_tun) entered disabled state [ 426.616936][T15616] syz_tun (unregistering): left allmulticast mode [ 426.653436][T15616] bridge0: port 3(syz_tun) entered disabled state [ 426.866746][T15632] netlink: 'syz.1.2607': attribute type 1 has an invalid length. [ 426.877057][T15632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.933426][T15635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.651221][T15658] netlink: 'syz.7.2614': attribute type 1 has an invalid length. [ 427.774448][T15658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.921645][T15659] bond1: (slave gretap1): making interface the new active one [ 427.964782][T15659] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 428.168792][T15676] __nla_validate_parse: 6 callbacks suppressed [ 428.168814][T15676] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2619'. [ 428.258652][T15679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2620'. [ 428.405461][T15682] sctp: [Deprecated]: syz.1.2620 (pid 15682) Use of int in max_burst socket option. [ 428.405461][T15682] Use struct sctp_assoc_value instead [ 429.404379][T15698] batadv0: entered promiscuous mode [ 429.425091][T15698] macvlan2: entered promiscuous mode [ 429.447655][T15698] macvlan2: entered allmulticast mode [ 429.474008][T15698] batadv0: entered allmulticast mode [ 429.484042][T15698] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 429.513795][T15698] batadv0: left allmulticast mode [ 429.519623][T15698] batadv0: left promiscuous mode [ 429.571880][T15703] bridge4: entered promiscuous mode [ 429.596613][T15703] bridge4: entered allmulticast mode [ 429.630821][T15703] team0: Port device bridge4 added [ 430.150123][T15719] xt_hashlimit: size too large, truncated to 1048576 [ 430.463117][T15733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2630'. [ 430.494260][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2630'. [ 431.054120][T15743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2633'. [ 431.172949][T15739] x_tables: duplicate underflow at hook 2 [ 433.040049][T15714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.051463][T15721] netlink: 'syz.0.2629': attribute type 11 has an invalid length. [ 433.062436][T15721] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2629'. [ 433.348580][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2640'. [ 433.465692][ T5629] Bluetooth: hci7: link tx timeout [ 433.480919][ T5629] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.511043][ T5622] Bluetooth: hci7: link tx timeout [ 433.517383][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.530072][ T5622] Bluetooth: hci7: link tx timeout [ 433.535899][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.546365][ T5622] Bluetooth: hci7: link tx timeout [ 433.551758][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.561289][ T5622] Bluetooth: hci7: link tx timeout [ 433.567026][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.576027][ T5622] Bluetooth: hci7: link tx timeout [ 433.582025][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.590593][ T5622] Bluetooth: hci7: link tx timeout [ 433.596128][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.604997][ T5622] Bluetooth: hci7: link tx timeout [ 433.610431][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.619123][ T5622] Bluetooth: hci7: link tx timeout [ 433.624600][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.635436][ T5622] Bluetooth: hci7: link tx timeout [ 433.640851][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.662270][ T5622] Bluetooth: hci7: link tx timeout [ 433.668357][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.676205][ T5622] Bluetooth: hci7: link tx timeout [ 433.681477][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.693780][ T5622] Bluetooth: hci7: link tx timeout [ 433.699225][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.707412][ T5622] Bluetooth: hci7: link tx timeout [ 433.713147][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.722185][ T5622] Bluetooth: hci7: link tx timeout [ 433.728900][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.737260][ T5622] Bluetooth: hci7: link tx timeout [ 433.744296][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.753454][ T5622] Bluetooth: hci7: link tx timeout [ 433.759630][ T5622] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 434.199055][T15785] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2643'. [ 434.229124][T15785] bond0: entered promiscuous mode [ 434.239508][T15785] bond_slave_0: entered promiscuous mode [ 434.264454][T15785] bond_slave_1: entered promiscuous mode [ 434.276243][T15786] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2643'. [ 434.303890][T15785] gretap0: entered promiscuous mode [ 434.335751][T15785] hsr1: entered promiscuous mode [ 434.516678][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'. [ 434.540355][T15788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.604056][T15788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.553807][T15818] Bluetooth: hci7: command 0x0406 tx timeout [ 435.589628][T15821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2652'. [ 437.472920][T15818] Bluetooth: hci6: command 0x0406 tx timeout [ 437.819098][T15830] syzkaller0: entered promiscuous mode [ 437.825798][T15830] syzkaller0: entered allmulticast mode [ 438.265485][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'. [ 438.277429][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'. [ 438.675961][ T5629] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 438.695244][ T5629] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 438.708281][ T5629] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 438.726121][ T5629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 438.740520][ T5629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 439.299992][T15871] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2666'. [ 440.035853][T15856] ±ÿ speed is unknown, defaulting to 1000 [ 440.763784][T15927] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.2677'. [ 440.784056][T15927] netlink: 'syz.3.2677': attribute type 1 has an invalid length. [ 440.836058][ T5622] Bluetooth: hci8: command tx timeout [ 441.095002][T15856] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.103698][T15856] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.111351][T15856] bridge_slave_0: entered allmulticast mode [ 441.142003][T15856] bridge_slave_0: entered promiscuous mode [ 441.174525][T15856] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.204168][T15856] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.235362][T15856] bridge_slave_1: entered allmulticast mode [ 441.256993][T15856] bridge_slave_1: entered promiscuous mode [ 441.467171][T15856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.500157][T15856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.577071][T15856] team0: Port device team_slave_0 added [ 441.644649][T15856] team0: Port device team_slave_1 added [ 441.843053][T15856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.866420][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.909862][T15856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.002119][T15856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.015931][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.046875][T15856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.064730][T15970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.126574][T15970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.336533][T15992] netlink: 'syz.7.2693': attribute type 2 has an invalid length. [ 442.394680][T15992] : entered promiscuous mode [ 442.573780][T15856] hsr_slave_0: entered promiscuous mode [ 442.583415][T15856] hsr_slave_1: entered promiscuous mode [ 442.590861][T15994] netlink: 'syz.7.2694': attribute type 1 has an invalid length. [ 442.602163][T15856] debugfs: 'hsr0' already exists in 'hsr' [ 442.611197][T15856] Cannot create hsr debugfs directory [ 442.619898][T15988] ±ÿ speed is unknown, defaulting to 1000 [ 442.671499][T15994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.913936][ T5622] Bluetooth: hci8: command tx timeout [ 442.957676][T15995] bond2: (slave veth5): Enslaving as an active interface with a down link [ 442.977243][T15996] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 442.985316][T15996] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 443.517195][T16007] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 443.532417][T16007] bond3 (unregistering): Released all slaves [ 443.683453][T16019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2698'. [ 444.093780][T15856] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 444.105389][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.116151][T15856] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 444.140254][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.160134][T15856] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 444.174580][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.184393][T15856] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 444.279197][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.505429][T15856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.562253][T15856] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.607614][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.615422][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.668589][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.676432][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.993323][ T5622] Bluetooth: hci8: command tx timeout [ 445.398689][T16060] netlink: 'syz.1.2706': attribute type 1 has an invalid length. [ 445.438220][T16060] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2706'. [ 445.479154][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2706'. [ 445.769177][T15856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.450849][T16096] bond9: (slave dummy0): Releasing backup interface [ 446.481270][T16096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 446.618372][T16096] team0: Refused to change device type [ 446.728426][T15856] veth0_vlan: entered promiscuous mode [ 446.885658][T15856] veth1_vlan: entered promiscuous mode [ 447.044448][T15856] veth0_macvtap: entered promiscuous mode [ 447.068569][T16119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2717'. [ 447.084107][ T5622] Bluetooth: hci8: command tx timeout [ 447.103193][T15856] veth1_macvtap: entered promiscuous mode [ 447.126869][T15856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.143938][T15856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.261359][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2718'. [ 447.293259][ T48] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.327786][ T48] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.483652][T16126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.518251][T16127] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 447.543212][ T48] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.612468][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.639444][T16140] netlink: 'syz.3.2722': attribute type 1 has an invalid length. [ 447.703861][T16143] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2722'. [ 447.769726][T16145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2722'. [ 447.917937][T16145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 447.989497][T16140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2722'. [ 448.192994][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 448.440362][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.480844][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.589075][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.616911][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.049014][T16192] netlink: 'syz.3.2731': attribute type 83 has an invalid length. [ 449.164179][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2732'. [ 449.252413][T16197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 449.344177][T16199] bond3: (slave dummy0): Releasing backup interface [ 449.360995][T16199] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 449.529462][T16211] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2736'. [ 449.553718][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2736'. [ 449.594587][T16212] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 449.614451][T16215] netlink: 'syz.8.2737': attribute type 2 has an invalid length. [ 449.646177][T16211] netlink: 'syz.7.2736': attribute type 1 has an invalid length. [ 449.658564][T16215] netlink: 'syz.8.2737': attribute type 10 has an invalid length. [ 449.816464][T16218] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 449.833580][T16218] syzkaller0: entered promiscuous mode [ 449.842946][T16218] syzkaller0: entered allmulticast mode [ 450.487210][T16241] __nla_validate_parse: 5 callbacks suppressed [ 450.487234][T16241] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2746'. [ 450.515395][T16222] bridge0: port 3(macvlan0) entered disabled state [ 450.570195][T16222] tipc: Resetting bearer [ 451.348031][T16222] veth1_vlan: left allmulticast mode [ 451.611711][T16222] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 452.050862][T16250] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2749'. [ 452.079154][T16250] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2749'. [ 452.118015][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2749'. [ 452.128507][ T5629] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 452.129652][T16252] netlink: 'syz.7.2749': attribute type 10 has an invalid length. [ 452.145406][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2749'. [ 452.158060][ T5629] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 452.170727][ T5629] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 452.198975][ T5629] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 452.213334][ T5629] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 452.704080][T16222] gretap1: left allmulticast mode [ 452.737404][T16222] veth15: left allmulticast mode [ 453.178353][T16222] bridge4: left allmulticast mode [ 453.188245][T16222] vlan6: left allmulticast mode [ 453.196076][T16222] hsr0: left allmulticast mode [ 453.201648][T16222] hsr_slave_0: left allmulticast mode [ 453.210062][T16222] hsr_slave_1: left allmulticast mode [ 453.231756][T16222] vlan7: left allmulticast mode [ 453.237779][T16222] bond11: left allmulticast mode [ 453.356478][T16252] geneve2: entered promiscuous mode [ 453.374895][T16252] geneve2: entered allmulticast mode [ 453.479538][T16258] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2750'. [ 453.501673][ T57] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.521969][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.645514][ T57] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.676878][ T57] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.701677][ T48] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.723507][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.740942][ T48] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.773162][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.097059][T16283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.207368][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2759'. [ 454.273416][ T5622] Bluetooth: hci9: command tx timeout [ 454.327827][T16291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.439327][T16295] bond4: (slave dummy0): Releasing backup interface [ 454.489185][T16295] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 454.542268][T16251] ±ÿ speed is unknown, defaulting to 1000 [ 454.946231][T16324] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.2766'. [ 455.448885][T16346] syzkaller0: entered promiscuous mode [ 455.479185][T16346] syzkaller0: entered allmulticast mode [ 455.727759][T16342] netlink: 'syz.3.2770': attribute type 32 has an invalid length. [ 456.118095][T16355] tun0: tun_chr_ioctl cmd 21731 [ 456.134492][T16251] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.145198][T16355] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2774'. [ 456.160339][T16251] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.181462][T16251] bridge_slave_0: entered allmulticast mode [ 456.205658][T16251] bridge_slave_0: entered promiscuous mode [ 456.234202][T16251] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.246058][T16251] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.253939][T16251] bridge_slave_1: entered allmulticast mode [ 456.277347][T16251] bridge_slave_1: entered promiscuous mode [ 456.354625][ T5622] Bluetooth: hci9: command tx timeout [ 456.427747][T16251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.443296][T16251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.626759][T16251] team0: Port device team_slave_0 added [ 456.735020][T16251] team0: Port device team_slave_1 added [ 456.789729][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2778'. [ 456.831563][T16378] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2779'. [ 457.053956][T16251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.067586][T16251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.107440][T16251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.143731][T16251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.153853][T16251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.163817][ T31] INFO: task syz.5.1670:12047 blocked for more than 143 seconds. [ 457.217470][T16251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.231715][ T31] Not tainted syzkaller #0 [ 457.238056][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.278058][ T31] task:syz.5.1670 state:D stack:24112 pid:12047 tgid:12045 ppid:8299 task_flags:0x400140 flags:0x00080002 [ 457.367010][ T31] Call Trace: [ 457.386285][ T31] [ 457.399238][ T31] __schedule+0x17d9/0x56c0 [ 457.430927][ T31] ? __lock_acquire+0x683/0x2cf0 [ 457.458420][ T31] ? __lock_acquire+0x683/0x2cf0 [ 457.481460][ T31] ? __pfx___schedule+0x10/0x10 [ 457.500835][ T31] ? schedule+0x90/0x2b0 [ 457.517562][ T31] schedule+0x164/0x2b0 [ 457.535471][ T31] schedule_preempt_disabled+0x13/0x30 [ 457.550768][T16400] netlink: 'syz.0.2781': attribute type 3 has an invalid length. [ 457.564922][ T31] __mutex_lock+0x7bf/0x1550 [ 457.574189][ T31] ? __mutex_lock+0x5d4/0x1550 [ 457.598249][T16251] hsr_slave_0: entered promiscuous mode [ 457.607704][ T31] ? nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 457.616223][T16251] hsr_slave_1: entered promiscuous mode [ 457.623142][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 457.629659][T16251] debugfs: 'hsr0' already exists in 'hsr' [ 457.639801][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.647470][T16251] Cannot create hsr debugfs directory [ 457.653963][ T31] ? kern_path+0xd1/0x150 [ 457.658638][ T31] nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 457.673962][ T31] ? __nla_parse+0x40/0x60 [ 457.689589][ T31] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 457.701237][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 457.716895][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 457.732772][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 457.745376][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 457.760777][ T31] ? bpf_lsm_capable+0x9/0x20 [ 457.773199][ T31] ? security_capable+0x7e/0x2c0 [ 457.786212][ T31] genl_rcv_msg+0x614/0x7a0 [ 457.803156][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.822733][ T31] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 457.833457][ T31] netlink_rcv_skb+0x226/0x4a0 [ 457.843951][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.855928][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.872340][ T31] ? down_read+0x2be/0x330 [ 457.878057][ T31] genl_rcv+0x28/0x40 [ 457.884140][ T31] netlink_unicast+0x7bb/0x940 [ 457.889593][ T31] netlink_sendmsg+0x813/0xb40 [ 457.900252][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.914050][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 457.925278][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.933514][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 457.939528][ T31] ____sys_sendmsg+0x54e/0x850 [ 457.945805][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.952523][ T31] ? import_iovec+0x73/0xa0 [ 457.959206][ T31] ___sys_sendmsg+0x2a5/0x360 [ 457.965117][ T31] ? __lock_acquire+0x683/0x2cf0 [ 457.971047][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.978214][ T31] ? futex_wait+0x2a2/0x390 [ 457.984398][ T31] ? __fget_files+0x2a/0x420 [ 457.989310][ T31] ? __fget_files+0x3a2/0x420 [ 457.995107][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 458.000577][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 458.009087][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.018087][ T31] do_syscall_64+0x174/0x580 [ 458.023627][ T31] ? trace_irq_disable+0x3b/0x140 [ 458.029397][ T31] ? clear_bhb_loop+0x40/0x90 [ 458.038229][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.044566][ T31] RIP: 0033:0x7f057ed9de99 [ 458.050001][ T31] RSP: 002b:00007f057fd51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.063971][ T31] RAX: ffffffffffffffda RBX: 00007f057f025fa0 RCX: 00007f057ed9de99 [ 458.074262][ T31] RDX: 0000000004000080 RSI: 00002000000000c0 RDI: 0000000000000009 [ 458.085477][ T31] RBP: 00007f057ee33eaf R08: 0000000000000000 R09: 0000000000000000 [ 458.097229][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.107677][ T31] R13: 00007f057f026038 R14: 00007f057f025fa0 R15: 00007ffcdf2c98a8 [ 458.124324][ T31] [ 458.128002][ T31] [ 458.128002][ T31] Showing all locks held in the system: [ 458.136915][ T31] 1 lock held by khungtaskd/31: [ 458.142295][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 458.154039][ T31] 2 locks held by getty/5375: [ 458.160004][ T31] #0: ffff888035e110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 458.170817][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 458.183720][ T31] 2 locks held by syz.4.526/7874: [ 458.189208][ T31] #0: ffffffff9009d8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 458.198227][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 458.209738][ T31] 2 locks held by syz.5.1670/12047: [ 458.215452][ T31] #0: ffffffff9009d8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 458.225178][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 458.237436][ T31] 2 locks held by syz.6.1997/13260: [ 458.243578][ T31] #0: ffffffff9009d8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 458.252896][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 458.263639][ T31] 2 locks held by syz.2.2575/15518: [ 458.268906][ T31] #0: ffffffff9009d8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 458.278795][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 458.290006][ T31] 6 locks held by syz-executor/16251: [ 458.296193][ T31] #0: ffff88807f96a450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 458.306014][ T31] #1: ffff88807a63d480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 458.316869][ T31] #2: ffff88802933d878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 458.328505][ T31] #3: ffffffff8f8a9520 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 458.341332][ T31] #4: ffff888032bbf128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 458.354348][ T31] #5: ffff88807b77a258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 458.365364][ T31] 2 locks held by syz.8.2780/16382: [ 458.370911][ T31] #0: ffff88804d0f0dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 458.381978][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 458.446832][ T5622] Bluetooth: hci9: command tx timeout [ 458.458329][ T31] [ 458.461405][ T31] ============================================= [ 458.461405][ T31] [ 458.477552][ T31] NMI backtrace for cpu 0 [ 458.477573][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 458.477605][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.477618][ T31] Call Trace: [ 458.477627][ T31] [ 458.477636][ T31] dump_stack_lvl+0xe8/0x150 [ 458.477675][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 458.477812][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 458.477853][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 458.477887][ T31] sys_info+0x135/0x170 [ 458.477931][ T31] watchdog+0xfd7/0x1030 [ 458.477977][ T31] ? watchdog+0x1c7/0x1030 [ 458.478019][ T31] kthread+0x388/0x470 [ 458.478050][ T31] ? __pfx_watchdog+0x10/0x10 [ 458.478078][ T31] ? __pfx_kthread+0x10/0x10 [ 458.478136][ T31] ret_from_fork+0x514/0xb70 [ 458.478195][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 458.478234][ T31] ? __switch_to+0xc89/0x1420 [ 458.478270][ T31] ? __pfx_kthread+0x10/0x10 [ 458.478302][ T31] ret_from_fork_asm+0x1a/0x30 [ 458.478339][ T31] [ 458.478363][ T31] Sending NMI from CPU 0 to CPUs 1: [ 458.605700][ C1] NMI backtrace for cpu 1 [ 458.605721][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 458.605742][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.605753][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 458.605778][ C1] Code: 0c 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ba 19 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 458.605795][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 458.605812][ C1] RAX: 00000000000e0c19 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 458.605826][ C1] RDX: 0000000000000001 RSI: ffffffff8e22cef3 RDI: ffffffff8c4bda80 [ 458.605839][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 458.605853][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 458.605866][ C1] R13: 1ffff11003bdf000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 458.605881][ C1] FS: 0000000000000000(0000) GS:ffff88812505a000(0000) knlGS:0000000000000000 [ 458.605896][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.605908][ C1] CR2: 00007fed6bf6dff8 CR3: 000000007acc0000 CR4: 00000000003526f0 [ 458.605925][ C1] Call Trace: [ 458.605935][ C1] [ 458.605942][ C1] default_idle+0x9/0x20 [ 458.605963][ C1] default_idle_call+0x72/0xb0 [ 458.605986][ C1] do_idle+0x2e0/0x540 [ 458.606036][ C1] ? __pfx_do_idle+0x10/0x10 [ 458.606066][ C1] cpu_startup_entry+0x43/0x60 [ 458.606091][ C1] start_secondary+0x101/0x110 [ 458.606117][ C1] common_startup_64+0x13e/0x157 [ 458.606147][ C1] [ 458.785745][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 458.794963][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 458.810398][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.826353][ T31] Call Trace: [ 458.830345][ T31] [ 458.834430][ T31] vpanic+0x56c/0xa60 [ 458.839463][ T31] ? __pfx___schedule+0x10/0x10 [ 458.845147][ T31] ? __pfx_vpanic+0x10/0x10 [ 458.849901][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 458.856213][ T31] panic+0xc5/0xd0 [ 458.860144][ T31] ? __pfx_panic+0x10/0x10 [ 458.864815][ T31] ? preempt_schedule_common+0x82/0xd0 [ 458.870770][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 458.876544][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 458.882843][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 458.889688][ T31] watchdog+0x1030/0x1030 [ 458.894899][ T31] ? watchdog+0x1c7/0x1030 [ 458.899455][ T31] kthread+0x388/0x470 [ 458.903766][ T31] ? __pfx_watchdog+0x10/0x10 [ 458.908972][ T31] ? __pfx_kthread+0x10/0x10 [ 458.913872][ T31] ret_from_fork+0x514/0xb70 [ 458.918785][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 458.924543][ T31] ? __switch_to+0xc89/0x1420 [ 458.929481][ T31] ? __pfx_kthread+0x10/0x10 [ 458.934737][ T31] ret_from_fork_asm+0x1a/0x30 [ 458.940024][ T31] [ 458.944304][ T31] Kernel Offset: disabled [ 458.949353][ T31] Rebooting in 86400 seconds..