last executing test programs: 2m25.739299438s ago: executing program 3 (id=1920): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000040)={0x9, 0x5025fc884606ca0, 0x7}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x0, 0x2, 0x52f2}) r1 = socket$kcm(0x29, 0xd, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local, 0x3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="a1f6995e70e328f18b59cf1402c8bdf1456fd6ab16b7", 0x16}, {&(0x7f0000000180)="659ef446fbdc79aff3483a595425881244447b7611a46f65663b72a2698023ce2b", 0x21}, {&(0x7f00000001c0)="61e29fdf4cbd8e2a61a14b23a33da4c4d11e0f8337ea8fd407fef1348a8657d644e497554391e7d3276dc357e02c971312c791efc0a84ea40d006e785d82745da1555cd1066d1a49eb875837794f5196f118ced8140bdd99feb064e35ac5fc58bd43c528b1f84019768503f4999b05dbd3e37134a4dd77ce8a00c6be3266bcd67fc43f165e7e089c008ea488e7c84ef4dfe1093e3ec22b5e6c77772cc20cfa4972b7ec8e66ce6a92d8b3bb8e212da4a80f8cb5f6", 0xb4}, {&(0x7f0000000280)="133b30ed789da5fb0d7188bbcb9ec3f24398", 0x12}, {&(0x7f00000002c0)="45a047485173579f2a3b981ae9a04faed4d8a2a945086b1f643e5c69712a442fcfca0da41968faf42bb21f9f832d7633245a1757ae6a28a59e", 0x39}], 0x5}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x11, 0x8, 0x70bd26, 0x25dfdbfe, {0x13}, [@typed={0x10, 0xd0, 0x0, 0x0, @str='cgroup.type\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x90000}, 0x84) read(r0, &(0x7f00000004c0)=""/9, 0x9) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000500)={0x2, 0x5, @status={[0x3, 0x45, 0x5, 0x3, 0x1, 0x8]}, [0xe523f72, 0x1, 0x8, 0x80000000, 0x0, 0x9, 0x4, 0x7, 0x988cccf, 0x1, 0xffff, 0x9, 0x6, 0x4, 0xba, 0x4, 0x5, 0x1, 0x1bff, 0x5, 0xc80f, 0x6c, 0x64, 0x10, 0x81, 0x9, 0x8fe5, 0xa, 0x9, 0xfc3f, 0x4, 0x9, 0xff80000000000000, 0x4, 0x8, 0x100000001, 0xdcd, 0xd, 0x4, 0x161, 0x1, 0x6, 0x0, 0x2, 0x8, 0x81, 0xaf, 0x3, 0x8000, 0x1, 0x669, 0x7, 0x6, 0xa, 0x0, 0x1155, 0x5, 0x5, 0xd, 0x2, 0x89, 0xa953, 0x40, 0x1ce4]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f40), 0x301102, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000f80)=0x7ff) ioctl(r0, 0x5, &(0x7f0000000fc0)="2f12323059728a96db7c28b1d08d8c7f0c9e2326d358f6f0a23aec48f8229542efc0dfbf42e93a1fbe9f") r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) pwritev(r2, &(0x7f0000001500)=[{&(0x7f0000001140)="a91097a5de90e1cd9313cb29b2580431b929998e94bb12ba0183d6fe6b3491be9bc26b68d6c5ce40b0e8f3da0f715f0b0d0d52597b29d36989f8e71bce17d72578480c34e6376af51ca504b40d9826b27fe88f1b9c7e3187dc1ce33aabe66db8e71753601d98050d83f75219cf10de8f", 0x70}, {&(0x7f00000011c0)="92eef29d8f9b32eeb8f450f4fbe89034d87170af87bd8b9328931b1d3be69efe94d9924b1aeb629d60083f1e4374201df7ddccbf8e5fcf069912fa0f6d33fac955b504133ee2fbb1dc1805f5f6206448ab029b26d01d6533beb0cda7fbaa23c252c1ea4a0c2e2aee1e1a122de35fcfed4bb750fa874797466e83eaa69c50fc387e9f9868df8d33a5881109", 0x8b}, {&(0x7f0000001280)="e33a", 0x2}, {&(0x7f00000012c0)="ec89e687f4840089274d0c406090ccfed01d3c3f6d816a12d72c01a4328b8fac86b92192bf5bce9d", 0x28}, {&(0x7f0000001300)="761c8238d0673a754847f38efb0906a0ce6a7369c45c610ccf5f2f09f0e728ee57a8a8fde95cc8d0d715ed13a651d62d136470bd7977d0ae503a6aec0e38bde2a761391b09dc2614bce1bdc20605de668f32ef5012b9a28b6a3491115757", 0x5e}, {&(0x7f0000001380)="fca01d0621363904184278de1166835f0fe80b94c047ce31eff6a6495f2cca90d774d07eb2d152a34b92ac6eba556392c5bbab7a37ff60c0513ae4b715235b", 0x3f}, {&(0x7f00000013c0)="5dbfdb73aad59063d1e3fe006d34ba9ecee99b1a9abaaafbbc3e39013b55c08f85a399f3aadcd9362e63aae9858a1cf71e5a410915d435561c4059078a94421566092d6fd6e37ae972b4e44c4fca7ae8b920791da8023ec5fa59ba13e1849a80bcc328e8b5e99ee5b4ac6475e0c08a837d0672af84189429c968bfaabdc3e16de8cec79e1745c1e797b760903886fc8739dfb6efdb9b00c74617d80b00c6a1f92cd0347953854fa59f7eccd480", 0xad}, {&(0x7f0000001480)="feea498c0f0897f02e221113ebb8e8ad18247c439a738503a9e97dd03fc274e2d888fc3ddb3eb926da9f90904e127bab673d1b9d64b16c", 0x37}, {&(0x7f00000014c0)="0247431ef1f50cd68c36c9a4bd1aa28bfef356ef", 0x14}], 0x9, 0x9, 0x4) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000015c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f0000001640)={0x50000001}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000001680)={0x80000000, 0x7, 0xd, 0x1ff, 0xad}) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000001700), &(0x7f0000001740)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r5) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000018c0)={r0, &(0x7f00000017c0)='\x00', 0x4840, &(0x7f0000001800)={@align=0x6, {0x7, 0x6, 0x7, 0xea}}, 0x4, &(0x7f0000001840), &(0x7f0000001880)=0x80000001}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001900)={0x0, 0x4}, &(0x7f0000001940)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001980)={r7, 0xb}, 0x8) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000019c0)={0x10, 0x0, "faa28ef490116c28e86a72cb3550cc15"}) openat$cgroup_ro(r6, &(0x7f0000001a00)='memory.swap.events\x00', 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP64(r6, 0x4030582a, &(0x7f0000001a40)={0x0, 0x2, 0xffffffff, 0x8, 0xff, 0x80000000}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000001a80)={r7, 0x16, "849c0d43225aea943571a90a8b4c3331f9e457019505"}, &(0x7f0000001ac0)=0x1e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001b00)={r8, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000001bc0)=0x84) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000001c00)) 2m25.706957297s ago: executing program 3 (id=1923): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000004a80)=0x2100) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000009060300000000000000001907000000340007800c00010400000000000000010c001480080001400a01010006000440500000000600054050640000050007001600000005000100060000000900020073797a3100000000af07cf206e97b300f595d12e72d2d381f71cab395f1b8c504c358c3bf6b741c1200c63bc1019f0ced39fd3cf6eeb4d689f3c317784854ece2cbbc330590445eb9488d2b189a0748c875a1727adb3c8a0a1d8be8f466d9dedfc1e4d6876bebb29e112e7057870a84482d265a10000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @loopback}], 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000005c0)={&(0x7f0000000300)=@can={0x1d, r8}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="cc926c46dc675820f3", 0x9}], 0x1, &(0x7f0000000580)}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="050000000000000000001700000008000300", @ANYRES32=r4, @ANYRES64=r7, @ANYBLOB="0cd2a87211bbe3ee6f1d16b9cae097d2bec1f6c1eb5c565024c7e85e3695385240b79820733c52517bb53b4ddd2416eacea32807fd80a49413aa8468d855112828d942ab628c33eeab798d45cb472bffee4b0a65b927ddc7a08a2519a77167dcc86d11b7ed22fa309bd9d23f0e176817632748588bc3df174be4060f7e07a5e6", @ANYRES32=r5, @ANYBLOB="2c4c9e3a7c0e4ffdce7e40cfefa88905a436b5c6f5b2b0d70e56c534afa50d0e5ee4d93d497ad8c4c5b9a366e527c7b4b4c927619adf677d01c75000f79f79cc9275ef0cbba49ca27ae9d8724d6668a73962ae8ddd1eef2417accc5eb6e3013c141f98f68434a26cd6447e5361fec6a68ad5417fc0f658d85dbed01ece0e1de450e19f8fb0aaf1dcdf98a77a43987ee5bf43f1924915eae85eab7e523676c39b71ae271f26b49a4d3d3958a53b6d8c912bda74cc0923859b0953c8fcd61991780eeffb5b81dafaa20d40dbfdae733ee47950f657679f5ba9b3ec0c73b260c4fc66fd3406b2bf4311eedea4d77096753142", @ANYRES32=r3], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3fdd8192949562be}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002cbd7000ffdbdf25350000000c009900050000006c00000014005500a8a75dc65709cd40ba4ff06c96e90cd10a00340001010101010100000a00340002020202020200000a000600505050505050000009003400a0b117bb870000000500200123000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x8004) syz_genetlink_get_family_id$nl80211(0x0, r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 2m24.680527982s ago: executing program 3 (id=1929): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x10040) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x0, 0x0, 0xaaf}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c00028005000100060000000600020030390000060003"], 0xbc}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e6963766630000000000000000000000800050006000000140017800400"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001c00010229bd7000ffdbfa2507000000", @ANYRES32, @ANYBLOB="40004c060a0002"], 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x44800}, 0x80) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r8], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) 2m24.387508889s ago: executing program 3 (id=1931): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000040)={0x8, 0x1, 0x8000000000000001, 0x3ff, 0x1}) 2m24.065229375s ago: executing program 3 (id=1932): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000002480)=r7, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000080)=0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1f0000001300060000007000fcd54d25b4000000", @ANYRES32=r10, @ANYBLOB="200500000904000008000a00", @ANYRES32=r8, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) 2m23.876824824s ago: executing program 3 (id=1933): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="14000000270001002bbd7000ffdbdf2505000000626b0ef1811c55129052f9f7adc7c8267701486a124a94e50957dbad5c1b8e0486a40d763f34ffb028993cc40e3a3f81701e1a612f03446ad1f6d8ef38f9eda707b11f39ad1faa99467e43"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) sendto$packet(r1, &(0x7f0000000180)="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", 0x1000, 0x40000, &(0x7f0000001180)={0x11, 0xd, r5, 0x1, 0x1, 0x6, @multicast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f00000000c0)={0x1d, r13}, 0x18) connect$can_j1939(r12, &(0x7f0000000140)={0x1d, r13}, 0x18) sendmmsg(r12, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002840)="f55099b901313b89c6", 0x9}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001480)=""/169, 0xa9}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1}}]}}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r8, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r17, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x5, 0xf, 0xa, 0x10, 0x11, 0x3}}]}}]}, 0x148}}, 0x4000010) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800910}, 0xc, &(0x7f0000001480)={&(0x7f00000011c0)={0x25c, r7, 0x5, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1b5167d6ba05c5da7b1f74da6f9ea848"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fee55a75ba6f02929e5727e8092ad53b"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1735fc7d571be3fe0c0a02a707f556b8ed83404bf8227318fb10a68b2777aadc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2afc063fada11276ab7fe755e774128778f0f4b803ecfd08410e2cd0d049c601"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5ce98b6f2a2cb3fb38034db04e61cfd8ce6f134f0cde775ca4baec7b2b0e2e2e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7b8000727a0fddae830ea2a4126d3070"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e70eb89f7cd204604984db84a36d725a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ab344ce7af78242b77f9695dce3e615f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5cd7c9cffbdb15a94e9587534c0a359d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fd48cdbadb6a9ab1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "13e55ee5b6f848fe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "940a4de39468fc0a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3de04755618f7240a9efb0b41512fa13"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9b2a32f7e67e9cbe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2e1509af92e24ca9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "14e03fbf9d696b8f"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b3cf2c0f090510e0"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1b3d5db7b01c8d1a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5e722e8aaeda369cec939bf407cdaf7d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="34469dc46c5d2cfc64c69d0f3152b7c2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="43e9a1cfb5eb3fba7601a94e551d0f1b"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "aeb918fd5238709c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ab8fdd246ed2a9fcd479911fdca93235d0d9de8f1c7bed5f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="42eb7855d7e2d20188c46f61c65104e719216207046a416bb8ffbc2fd12e1b88"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "100294b2db459de5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "943f2ccfff906eca"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x18e5}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000810) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001600)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x100, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) 2m19.541821427s ago: executing program 32 (id=1839): unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000000706ee3680944c099f9100000000000000000000ccd2dd722896120bd81a50308ba786a41ce7bbbb104a"], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb", @ANYRES8=r4], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3d00a0354b9f0000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000005c0)={0x0, 0x15b, "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"}, &(0x7f0000000440)=0x163) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000480)={r7, 0x4, 0xff, 0x951}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000009c9097dbaec9c673bc7fccfdf65b3f155128fda627ed7f34203f2d1d1bf323fb4d100b21bbb94fc24567ef4400fd82663ae8e3b74661151aa74e8440005b950a887f1e67af960eca30b208a764de6530effbfc954c595157436a5d7e3e292a0cdd2469ae4f3b1ade303da20ec23c877bc230382dd27f70833eb86984d9d43b9bbfbc429640b139bc34522987b5a4e90a234d80aea338665d17c7b5809c25f7f0d083bf59b9c872f7879cc7dd9b4140e693e85b282c5c7aecedf5ab8b43f5ebf78f868f3821c0e842f5d1fa8e683627c645280bd0bdb0f35c9886b2f191ac140d22444eb9939d41627fda6a00"/250, @ANYRES16=r3, @ANYBLOB="01002abd7000f9dbdf250f00000008000300", @ANYRES32=r8, @ANYBLOB="08003100040000000500300000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10, 0x80800) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r12, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2m8.805907542s ago: executing program 33 (id=1933): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="14000000270001002bbd7000ffdbdf2505000000626b0ef1811c55129052f9f7adc7c8267701486a124a94e50957dbad5c1b8e0486a40d763f34ffb028993cc40e3a3f81701e1a612f03446ad1f6d8ef38f9eda707b11f39ad1faa99467e43"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) sendto$packet(r1, &(0x7f0000000180)="302283b186c4c0068530d62a8f48aeed308b448e6fde46347d3794be13d8610e852434e262bcb826988999bdc5accc586b283ae9a4b6d185792018e89859d74a6dad0411cb27e4e3a98375c350f6608ed2c1675afe6e2a7cfde3aff687c8e13b5dff85a22a1f290c852a8fffc1acecaff259ba0cff9d30d6182cf4c255e367a371a87e435c4ad275115aa5d1b57477bdf15539972f1f284261c12aedcaae64c03061190316f9c00c22797a7a122815af4302a5207bd502f084a99674c2375b4ee55410d23d76de5beb59af21d9b2a3c7e04eccb5c4cc50b977e9e0631762d0e377f6c61305e0dbd688c52104774d64c879d1fd124e76784f74cc3602b33c8ff67e250e2e4cdc39799e591d5e27c6f83d98f34fc247fe74b6a1468eaa8410c7f0e6e6d74ff0a900385874873f311d52b47bad49cbeebe78a82e953a4de66b16b7b3e19bc84f2eb456756a11547957f75cb6ff11475d660f7b4e59c9ba16f10e979830f0630ebb68b773bd947e5cad1ae9dbae52f4df16a26503e7db8a7371434da69a9fe16d7aaf4e3678d1b7f74e3286365e87e9bf53804ca22799c9a0667a699530357c8b3987c28d7783f37357cda148442ec5af5330229a46c7b1e0fe4a7e806a59b3d220033c2d621d915357ad2de33b3085e8f52c7cc8c0711dbea9cf1644b67404c57417c7c97f3d007d58c5d6b902462405de4a633706fdb78f4e1d3054437d9cab86bda68cfc782f625feba72545cb0f21f194e4236a666169707434d8c844024a324ddbe2883d77ed7e047d81a1e082d93bff267c604760bcb17e97a06c307f1e2828981e087b4ed8eeee291d6e3e858d6e5c03f6cf1df032d91e287e39b0970b1d6d95ac24835903c5de3f22dcbf5f4254f0e6ef077ca856bdbc9f0d0f90b4b1983d3aef9da4a03740c9af75e08444973e00286e4f616911cf99a0343b6f5310a43629d018eaeac000f44d2afd8a34eab5b684a53c6d0abb55922aa0cde659e4d95fb64d2946885dcdad3cd73a77585102f71b6821247375bbfa1fd6617e8dcfba6a3dd66d9126913567c06c7e4da424edb67889f46d07afe118f637d2065c1dc5eb6cddb1800fe0a5fe6033fa64f871ae77414f22703b66beaed1fb35170985004d7f3ed38b40130c375582a57d08ce9bebc4c4c2eb55d9bd617c7448b4e563b51187ec9d65bead2079f8689d7f7ef696789c65540a2e8a68e46d4e2c9d8b61c7e7fb5c132e45b62b16b61ccefcf89680d40edb3bcf0869cab5c526fa2cb009438d495a7746aec5a972374d57da7f7329416bcf2aea8b0c4ef87d9011a9d3734c95769380a3dac1082b4f9f4582cdba202085839ad201dbcf978c7d1a6099f0526d29423abbcab7d53e6dd9f3c2c670863f629d28b4baf9a11a53d7771ce4d300502e9439d91cc2a742317e5e4b3ee04f070d647037328d0c9efdf1a1fad9deabaf44f00ce7e05f7c82613a6698b5af4de886b3a563610e2a237ecb8cae361975eaa4a36db4c49214ec910c2cbaffffb27c153faff049e9e2237c0bf6aa427ce662b54401c369ae9f931a7fbb6cbac4ad19488ee955f40dca51ce3be6392b05b33c0599de836d8d76100ab21a3bbe7df5ab0a65c37598b52b5fef7e60d0472ae35cb79619b2bc876e483766077c05eb096909a9a1d7035f444012a47dd7f8a89bc25f744b78c27afb7816ebcf963641cf508b46b070d6b4df31aa894fdc8eeb27b6cca907f3d5c6b90eba683d7aa3eee0385d30bee2118773754c7c69a7745eadc02fff42c9ecfac35090335bbbb323d429bf7df5a3eaec5b47766cedb25ce31779d8254f5af7328159c9fa7cd5e58f943055805e16a336f1a7232f20bf7c8e0e0336b0f92dc02ebb66fbb942e5ff39109053c6c8e029808d33c2f38ab98aba69f05282d1d6827e51a38ffb599ace30335eeba9b109724bc795cbed85178980b01af6fa0ff9359a0c2b84c9a0dfabd97cf48b270a19ea2b3b470c3fca24c1bfca75eadef00388a5ed80e195fc689fe216a82079826f8b7ae8eabd7f1becdfbbfc9156a70e608523d93ca9af23fccd8e203828b37e79032b5f68c742885af8fd28caac9f74f52701cb964d788547730fc0369107780f5da07c7f34b495ed83e67b2a93d5776ca8bbfaabc2a456e91b9da0199059e9ced63af240e1a1dd2e2e00b84abc4020d065f317abe6bbefbb6c7d039cfc73f85136c6ca0ed7e45b15c637fcbd72903c28ce79755e8016f1e72f03ce71a15f64b32762480f3e72d526b8008a3e258d9fe4a3d0c2beb1213fc99adac27755c3b903638f1d4e9430f532787ae0774ff8909268efcd28d032853bc6d76836cd9c5d700760be8af61177d6f820c42098f8dccfacfe17cd5338fac923733bdfb599cf39ed6ac8698cd83f3ee58545ccec213deb1d2b0e036a78ecd5b18dd4451f3ffc036e4f75a7788fe94e0181cb25d10637eb07793b691be17d47d7eda9333070140dab5260bb15ad49cd72566b77cdabba3596cbe8b4e53b319bd88c4f85d334ac7acbecfb0c4f407b4f91b660ff8ddcd1ac48d1b2082cb037136ffe5044916db0f6844524c23436987ea79433d0460467cd18efd48577145efe03a6705aed30734db042eec1dbeabe6646ddc4fd70e42850adeab2d943992e894a8d294abb1a318ad0ff17392b9fd39bacb2539b9da41db036e5e9e6491006dac10daa35f8ad0e34c85996f158f1f202cad5db9ee6c6ca1e9ec3c6b94438f6761009b118e660d9054f3931dac1def285848d638e62867052b83f0e5864e5730e6f19e331759e2bb036e4c0d9f1ef8f765561a7cb402e39319e7a7bfa71186f95287e76574ddb20211743c047a9e5063f06a163931220749db298d342501116e8af89ff8cf14f1a46af7fb6a53400281156d51ea52ce295319ea429a5bc723d49deb2ee88b30c55d4d7a73a794ab40a2f1198c9fde40663d7f84fdb723bba7d0b8e68cac4d8bf13c46d946e093a0c01e2e47fd1032f659c1b08aaedb16631d3d903e6f7545659b3ff8ba02b937b20c85d8a02d8e68adcea967ee8aafdf41b5b3f19b04e500e95f6537701f4c0cba426cc12beca1cc634d6dcad3db8160749d8210598467dfd4b79f180e7d3052c195faf769a47d6a586457dd512f8e3fb01a78d5f4604b8511b8ad4e1d58da2895a18ec884f9133290630939f040d910c772a564dbd9874679d9e41915c05710be8ef67b6ec9e0e5029aacc1f2f111480a4af29b24180182de15961077b015f1b8f50fc6ef555ecae2e3b3771be83201e20d5da9e2a1b3de528e60381134ca235a6c13fcaa9d8c08febf85d4d1311565bc8fce11dbbccf96df8130e2a590af1208487f062f9df976f92f4aa90564954456ba7da6f3404a538dcdf670804b73cf2e181659064e684312806fbd03da85743b234385cda4769543bd26fdba2aadf338c9903d44c81945475620e434c876bd52aa329738318b84c3982871e9bff9301c5af1effc995b761269b27dc33c0169f5aa3a93ca0e403f0d610167ced4b2483cf9d543fb2e1a15d6fccc1bacbbcd6b38f35daf9328589e1383af9ed35f56582fe79f52c295c7e3a31bc3d04581549aa025fff706704846f292ffa05510ad2f2732933b616cfe39f9e3412a116d366458e9ebf155226ca8ad9df721c31977410ae962b3c45f55b6c1f5a847efd0ebdbaa43be9bd4000259caf0c0fa00e5aba3b61070283814fde1ae196c6a6fe9b5b02376d377a6185d1e78ad8a42946fc7d546e7dfeb08dda3187ce0e7e0c32a973af2f2a5f177fed999186fcdea30bb7f30c4ee245d026d72b6fb713cbbfb715e599b198276b9e115954683ad0a3b255c178d60c87a94487481de8558b320c4d65c5d49eb304f61eeb11142527c707c63b3767b82dac15866fdfdb6d8eff26eb403fde0fb6048e03f03754c344c2ae8b887ad95c4898c34e4bbeb714e736a54cfdaf5a207f8d72a65ac9b4223c24d75e42630ab2d699b83eaa0bb5a6040cfe3505d49a01887abbcf21ff297215e72eb85cc15e7a260ea68550d1bb6c7e7729c2a4ec3b04e4e9d4ba5cf90b60ece1836f19a6a90bf1d65b4f514f467c2c3eb122db5feb8bb94404997cc074439d41a85eb7eb5333db2ccf4d330022c24a62ac671a9d2a481b28cccbc05a6ed28f9259d4de19706ef509ef3f7c8489e34af1b56113bb082f00019d1f452482c63d24caa8356a21a2fa214b3680ec4812ca26ec069b2d20b17cbcade9c024fc505d8fe9483f47463a2e18eb7b4f131710f664705f0aee6b9f1408f47edbaab24a4831aa061fccd9e1e302862357659a6206904a1a60b21e03d0cbb17b9b84403f338336384ec25f791f492229088165dcff6fe4eefd9c07b4ef767ebb2f811bcc23f25822b8d571ef413a5c5d2c90cbeb2ce1a4046becf6387458933066880bb459b46d8f45a26530300d4553f48db6486545f6cd191c05a97c59dbe0be7a7e41817d4984154e881f42d014e7391bf486e4b4150fa4458912492d539ad70ddf95de7cfa2177c8335684611d2737dfb5f3508da0178f82555a2b350a15db2c919884584b709d74c30bb282507b3a26ba496d3cc025ab6cd8581c5ba71c1e0bc5ec3c1122695b09aa1e620a97df718e327a5d90395cf86f72a651ae05840cd610f5b4011c636b59d1b1703ae01fed92bd7d0aff4790a0d065014d8213e077bfa06a06b9e50b9237bfa6ac1553f99884d9cb713fd09bfe2261137e15680e3a1da78ca3073620256454346104fded9a0aeeaacb49dd986197e427f4cf3d4c95805310aedb6c2c7f45493ed137a7dfee1e9df2ebff006a3e9fc2e5bda3b3a01ca9b0f26c3da3383023cedb42349785eb7321834d80b34f58af50109afe9f35e6628d096d126c72d002c0af20efb2a36c92795e0c083f9e0db3cc173f591b7a214240a1d4d4fcbabd398e463087845b6422a8bdd7357a27cf88007d4fb61bcd3bae6a588b169a7710fea0b384eca8db1d41cd104fe9793d068652c6462ed55739e060c20db664187569dd67b041ed820995ba5be66a622f1f7488d2b20d5a25447059fba2d4a77cfac1735f2398b894cdc0d26a91f2c08139b3e93b625afe141e95d5375b5a8810e3455d902b6990b822522d9df11466410e9104693d5582d8984d5537dc7550fc653b79c7297af395b22fe35aa0f8f5cdde9e48190a83b342632e5dd07621384e2d9d19e12fe0ccbb228285b062512ba1d537d8bd52c1f0c707073f4475a5a26b24c99f914bf65bccc6b24ebaea1217d85ec73b3408b420192c7746d3127997844173e3fd2585ac1008d78aa5e7cba115d6c3e20ba00b6743d6e3632a3b21ba8f7657a7424d649e55e82f344e0ca0253ebc9910e9e1d88780e8fdd6ab8c490af0053adcd72764560d37eed3b14fadcef49bcac3099dba56c8ae9b2e3eb332daffa4e27f3b540389944bfeb9c63762f953e9d21990bacab5d79f92ad0e7cb45c1c8be4d14b45f93970a2501032c795b6807f55ebae3e31ee9d8e3347e29f0e77d29adf4275a31d756f6b55ca5f362305f0ccca3dc6493c5a6b55529ae913860488059e44f52e5e7d4cc63dface0f46bd36718fb097f797ef07d8c90f29b7987150052a6c39c14faf8bd2f5b20b8e523d040208f093608943f04d19c2fc95573e971ea7050d6caf930e37c96a31d212e4d5240358a1a0d825c9bab9caf7e28b04d139a49f253f389153b7f867b1aaee70123fc6674240ec9984b87639a2617913f5417d4931d9947bf312625be3b3cbe717a3d2521c3043de774f7790a8854b678c2d29", 0x1000, 0x40000, &(0x7f0000001180)={0x11, 0xd, r5, 0x1, 0x1, 0x6, @multicast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f00000000c0)={0x1d, r13}, 0x18) connect$can_j1939(r12, &(0x7f0000000140)={0x1d, r13}, 0x18) sendmmsg(r12, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002840)="f55099b901313b89c6", 0x9}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001480)=""/169, 0xa9}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1}}]}}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r8, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r17, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x5, 0xf, 0xa, 0x10, 0x11, 0x3}}]}}]}, 0x148}}, 0x4000010) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800910}, 0xc, &(0x7f0000001480)={&(0x7f00000011c0)={0x25c, r7, 0x5, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1b5167d6ba05c5da7b1f74da6f9ea848"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fee55a75ba6f02929e5727e8092ad53b"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1735fc7d571be3fe0c0a02a707f556b8ed83404bf8227318fb10a68b2777aadc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2afc063fada11276ab7fe755e774128778f0f4b803ecfd08410e2cd0d049c601"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5ce98b6f2a2cb3fb38034db04e61cfd8ce6f134f0cde775ca4baec7b2b0e2e2e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7b8000727a0fddae830ea2a4126d3070"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e70eb89f7cd204604984db84a36d725a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ab344ce7af78242b77f9695dce3e615f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5cd7c9cffbdb15a94e9587534c0a359d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fd48cdbadb6a9ab1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "13e55ee5b6f848fe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "940a4de39468fc0a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3de04755618f7240a9efb0b41512fa13"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9b2a32f7e67e9cbe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2e1509af92e24ca9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "14e03fbf9d696b8f"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b3cf2c0f090510e0"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1b3d5db7b01c8d1a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5e722e8aaeda369cec939bf407cdaf7d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="34469dc46c5d2cfc64c69d0f3152b7c2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="43e9a1cfb5eb3fba7601a94e551d0f1b"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "aeb918fd5238709c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ab8fdd246ed2a9fcd479911fdca93235d0d9de8f1c7bed5f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="42eb7855d7e2d20188c46f61c65104e719216207046a416bb8ffbc2fd12e1b88"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "100294b2db459de5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "943f2ccfff906eca"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x18e5}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000810) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001600)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x100, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) 2m7.799456047s ago: executing program 5 (id=2066): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c001a000600000002000000200004801c000a800800010001000000080002"], 0x4c}}, 0x8814) 2m7.538124619s ago: executing program 5 (id=2069): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000007c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "bac6734d333dbaf9eeb943ca05f5b02c57a1e6a78fe77ab965f89a84fb7a4a824ef2a166703f1a4b7efde3690af12b82f528c2bab28c2e5a8e607988197c4fb5c65609b0c614ba24c5eb5b95c8ae2f29"}, 0xd8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) recvmsg$unix(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @rand_addr=0x64010100}}}, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYRESDEC, @ANYBLOB="8a39ee075fc2f1f288f3e17d9713ff7a78629244c711ad197600270723a5a5ea2dc5b1cbba18789d60e1bb6d0802f2d0396bcaaf0533d392db6fd49bc458203643c910169b33c9eee2bdcfcb21df15", @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES16=r1, @ANYRESHEX=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r1, @ANYRES8=r2, @ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050326bd700000000000070000ff070003"], 0x1c}, 0x1, 0xf0ffff, 0x0, 0x20008800}, 0x24044080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x20, 0x40, 0x0, 0x200, {{0x12, 0x4, 0x3, 0x30, 0x48, 0x64, 0x0, 0xc, 0x4, 0x0, @multicast2, @loopback, {[@generic={0x89, 0xe, "aedcbbb39e2e900c943498e5"}, @rr={0x7, 0x13, 0x8e, [@remote, @empty, @rand_addr=0x64010102, @broadcast]}, @generic={0x82, 0xc, "c8b0569c4e87ebb86360"}, @noop, @ra={0x94, 0x4}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="000325bd7000fedbdf250300000008003c000400000005003500060000000a000900aaaaaaaaaa0f000008000300", @ANYRES32=r5, @ANYBLOB="0800340007000000050033000100000008000b000300000008000b0005000000"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x4008081) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f00000007c0)=0x200, 0x4) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x25, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000080) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) sendmmsg$inet(r3, &(0x7f0000003e80)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000001ac0)="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", 0x201}], 0x1}}], 0x1, 0x4000000) 2m6.806391813s ago: executing program 5 (id=2071): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x5, 0x0, 0x3}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x70cbaf76}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '}%\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004041) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r7) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xd) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}, @TCA_NETEM_CORR={0x10, 0x1, {0x7, 0x4, 0x5}}]}}}]}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f00000003c0)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r10, &(0x7f0000001b80)=[{{&(0x7f0000000580)={0x2, 0xc00, @loopback}, 0x10, &(0x7f00000019c0)=[{&(0x7f00000005c0)="cfff1d97bac5aee334ca6e5e521e28e0d728d6d2cb01c9bdf592528f5ba3581fff59dc734a", 0x25}, {&(0x7f0000000800)="59ce095d3e35d552714b40b8dc91beb5c2379ef84f67db7f3dc79b688439bc27907ed3d77acf5710218bb33ccb400e75e575e2a9dfcdbd6df2e6f3b005ae2d7185de8534586f3d2539cec722a6d723198c8efca2104438edd1d7c21e331d59a59b7cd65d64cacd68413bb433168008e5b36215aac91ad61900c8b64104b4416b58a49787a837a36bcbc532216d9878246a22bd97000aeb00f579a4e8d5667ae8120e8169f81daf5f1456929f8ac1927272357d9cfd8290a282a8b07bcecdefb9e994a11a4075be18cc06dcb1e619ece09eae79", 0xd3}, {&(0x7f0000000900)="4f46e2bb8d87d51f35316eb6be28e15d724bc547139108a5c7d014912cc041a75b1beb80a5bac6717df6eb296e6f8294e845fdf1554389c89c88f10f4a47e481b77e7c00c51d69969932d59fd4527afc41ba405d143a392fde483752491afa99dc090f49e28affc027a2fea4aaccd0ba0ebffe9f581b6b4eea589943da869eb8dcd41f61cfe22daea156092a880c0032", 0x90}, {&(0x7f00000009c0)="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", 0x1000}], 0x4, &(0x7f0000001a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a40)="8551d4e015a57a8efe5e39aecd20cc30b3d3b3c402c8accf021403af5b0ea92a0e15dc9adfd4e5372d83ebddcf2d642b15b574c1ca3bbe4c109267eb1b3248594b04181ac519debec5cb94f6fd7324a18d967383369c2d2423234eab4b8354bba0f56142363a0944b8eadf4c6343907fa2c178e1f189f6355efd4272b03cae02c03f23440d645ed40dfb", 0x8a}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @remote}}}], 0x20}}], 0x2, 0x60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x1, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0x752a}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r11, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'}) sendmsg$sock(r11, &(0x7f0000000200)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x1, @random="37e8a119bbb8", 'wlan1\x00'}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="e3b9aaee816ae65d9f77147370eb0121305c6251e3543df20ba87de3f4a67b2c2e33db1df33844eddef1fc67", 0x2c}], 0x1, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x90}, 0x8001) 2m5.387032533s ago: executing program 5 (id=2080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) pipe(&(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000070000000000000000000000850000003600000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b702000000000c00850000008600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x3}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 2m5.224669701s ago: executing program 5 (id=2081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000038a15d838500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x40, 0x0, 0x801, 0x400, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7709678c609a6bcb6ecff404c2"}]}]}, 0x40}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="8beab9000000000000003724634650d9927a8607c7fdd68018ccb613b3857ffe5c2c1c5f584306261c3cd0b4214923f4da03b9bb2e9e4f20b9b4753a7819b88d6c79674b021758178d1a179944a73f7e194b18124ae9b3d54efa7866ef79246d8c331f7c1d186e17ef43f6adaec0c17fc4", @ANYRES32=0x0, @ANYBLOB="0c009900240400001b000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="a801028040000100240001006c625f706f72745f737461747300"/37], 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$inet(r2, 0x0, 0x8040) 2m4.800864198s ago: executing program 5 (id=2084): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000020605000000000000000000000000000c0007800500150003000000c0b0a6a8559187fb"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', r4, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, 0x0, 0x25, 0x4, @val=@netkit}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001040)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r3, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200408c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="4400002041000104f9a325bd7000fedbdf25010000000400488018000180140010800400108009000b007d263a77d3a759e2641e50600000000000c84400000000002a000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76, 0x0, 0x0, 0x2b000000}, [@generic={0x7, 0x7, 0x0, 0xc, 0xb78b}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x78, '\x00', 0x0, @sock_ops}, 0x94) socket$rds(0x15, 0x5, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0xee3e0ec5e1c42de9, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) socket$netlink(0x10, 0x3, 0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000002fc0)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r10, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94) 1m49.347667782s ago: executing program 34 (id=2084): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000020605000000000000000000000000000c0007800500150003000000c0b0a6a8559187fb"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', r4, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, 0x0, 0x25, 0x4, @val=@netkit}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001040)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r3, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200408c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="4400002041000104f9a325bd7000fedbdf25010000000400488018000180140010800400108009000b007d263a77d3a759e2641e50600000000000c84400000000002a000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76, 0x0, 0x0, 0x2b000000}, [@generic={0x7, 0x7, 0x0, 0xc, 0xb78b}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x78, '\x00', 0x0, @sock_ops}, 0x94) socket$rds(0x15, 0x5, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0xee3e0ec5e1c42de9, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) socket$netlink(0x10, 0x3, 0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000002fc0)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r10, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94) 1m38.495606232s ago: executing program 6 (id=2267): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="3fda", 0x2}], 0x1, &(0x7f0000000140)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x18}}], 0x1, 0xc890) 1m38.270331875s ago: executing program 6 (id=2269): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffc}, 0x1c) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000001e80)=""/112, 0x70}, 0x4}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1m37.6532717s ago: executing program 6 (id=2275): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x20000001}, 0x764}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb0800450000200000000001a00086dd000c907801000000"], 0x32) socket(0x840000000002, 0x3, 0x100) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1m37.211061892s ago: executing program 6 (id=2280): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf250d18533d9052da040000004c0003800800020009000000080008000300380f00000800030007000000080002000100000008000100010400000800030000f00c00080001007f09800800020044060000080001009816000008000100fbffffff"], 0x8c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast1}, 0x4, 0x100000}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=ANY=[], 0x108}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x4c8, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x250, 0x7fffffe}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x11, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003240)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0d001600616464727479706500000000c3f6bae4b678c61d336e1fb7b3d1b0ddf6569b6d4776fd327030d5a140bcd2dcd79a96c954221f2a0fe9fd4ec426fae67c1ba6387e146c3a8bcf5cbf0fb155ef777d590027c5a2aa80aebb495e9cf291d601dc0b595328eb0c9414df5f5693492e23dd6a341c0c008500feffffffffffffff04003d801400b100fe8800000000000000000000000000010400", @ANYRES32=r9, @ANYBLOB="0004006d80000000000014001000ff0200000000000000000000000000010000004ee7168f634bfcf9f82179a6cd1d9168ee7c9fb01ce342aab3f8e7a93ab40f0b0a23e8a897abaf9fc2ccb1e5558530375d143ccb9a15f7cae1aa5907b6eeeb7c8cfae4aef4b9de856c941a4f7e7b2b43ba78b775950947df0f6300d01fc8764e07e9972d6e7af971b5d9b50242f3a1a127f946f9a389c07294f88bfc070fd7321e5189f6388c3867aa22b02b4a69878eb82cf1e6ae4c3a4cacbb00000000000000001669a18a3ae531a8a5c9de70b96d6cfe168d551a161ffea595535ff162af78812fd9e3cd65142bdee3e0db5ad6959bd888"], 0x17a0}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) 1m37.005807187s ago: executing program 6 (id=2284): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6ff169010011fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101009078ee373935ef0f8da10b47000507b0025a9001"], 0x128) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x7}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000d008}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000080), &(0x7f00000001c0)=0x60, 0x80000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 1m36.830878056s ago: executing program 6 (id=2287): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2201, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x133, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000000000000000001180000000000000084000000070000000a"], 0x38}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendto$inet(r2, &(0x7f0000000580)="e923d8", 0x3, 0x854, &(0x7f0000000600)={0x2, 0x4e24, @remote}, 0x10) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 1m21.673270908s ago: executing program 35 (id=2287): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2201, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x133, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000000000000000001180000000000000084000000070000000a"], 0x38}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendto$inet(r2, &(0x7f0000000580)="e923d8", 0x3, 0x854, &(0x7f0000000600)={0x2, 0x4e24, @remote}, 0x10) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 1m7.02649817s ago: executing program 0 (id=2515): socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={0x0, 0x0, 0x45, 0x0, 0x1, 0x5}, 0x28) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket(0xa, 0x803, 0x0) sendmsg$tipc(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000002f80)=[{0x0}, {0x0}, {&(0x7f0000002dc0)="3336f70cd0e0e42718329330f8b1453fa54879ffb9a0e2383e3b54cdcabe57e9253ff776cab55ce561139eba62ea", 0x2e}], 0x3, 0x0, 0x0, 0x4000}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000700001002abd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c000180da"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) close(0x3) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x8776, 0x401, 0x0, 0x21e000, 0x80080000}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) accept4$bt_l2cap(r0, &(0x7f0000000140), &(0x7f00000001c0)=0xe, 0x800) writev(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r6, 0x5) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m6.079304802s ago: executing program 0 (id=2524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000003e00008500000089000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0xc1100, 0x30}, 0x94) 1m5.663525073s ago: executing program 0 (id=2529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r0], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000e00"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95ce}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0ea}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x440d0}, 0x4050) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f030200000000000000070000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40840) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0xff, 0x0, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xff], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x168, 0x188, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r10, &(0x7f0000000040)={0xa, 0x0, 0x7ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x5, 0x2}, 0x20) getpeername$l2tp6(r10, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @map_fd={0x18, 0xd, 0x1, 0x0, r9}, @cb_func={0x18, 0x9}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, @jmp={0x5, 0x0, 0x7, 0x7, 0x3, 0x800000000000002b, 0x8}, @alu={0x4, 0x1, 0xb, 0x2, 0x5, 0xc}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x5d, &(0x7f0000000500)=""/93, 0x41000, 0x68, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000640)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r0, r2], &(0x7f0000000700)=[{0x4, 0x5, 0xb, 0xe}], 0x10, 0x2}, 0x94) 1m5.338528073s ago: executing program 0 (id=2532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x24048081}, 0x2000c8c1) 1m5.059471016s ago: executing program 0 (id=2534): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) (async) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e24, @local}, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) ioctl$SIOCSIFHWADDR(r5, 0x8905, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r4, 0xd19, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004090}, 0x4000080) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xee24, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x11}, {0x7, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x2}, 0x5, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@remote, 0x4d5, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe8) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) (async) splice(r0, 0x0, r6, 0x0, 0xf3a, 0x0) 1m4.914979957s ago: executing program 0 (id=2536): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r4 = socket$kcm(0x23, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r4, 0x800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r6) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) 1m3.731454485s ago: executing program 1 (id=2548): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000180)=0x2, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) r2 = socket$inet(0x2, 0x6, 0x74a) bind$inet(r2, &(0x7f0000000000)={0x2, 0x5e21, @empty}, 0x10) close(r2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056", 0x21) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0xfffd, @private=0xa010101}, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0xffffffffffffff52) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="efffffffffff0000000000000004044e8819af255fd84cf258e3ce43455d657ef8ce84537ba0b3ff389e48ab5394bfbe39759f7ceff23dc3ca80a22a3258"], &(0x7f0000000440)={0x0, 0x2, [0x66c, 0xdc5, 0xe81, 0x8ee]}) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x2700) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="b708000000000000ff8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb80200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186a0000040000000000000046000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000001853000004000000000000000000000095000000000000008500000034000000"], &(0x7f0000000340)='GPL\x00', 0x8, 0x6b, &(0x7f0000000500)=""/107, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x19855, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80), 0x10, 0xc}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f00000001c0)=""/91, 0x5b, 0x0, &(0x7f0000000240)=""/177, 0xb1}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1m3.391434223s ago: executing program 1 (id=2550): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40012022, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x60042, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x2, 0x0, 0x82}, {0x6, 0xfe}]}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r7, 0x1, 0x70bd2a, 0x40001, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x40044) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r7, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x10, 0x4, @l2={'eth', 0x3a, 'rose0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)='(\b', 0x2}], 0x1}}], 0x1, 0x400c011) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r0, 0x607d8000) 1m2.929733696s ago: executing program 1 (id=2555): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa0800452400540000000000069078ac1414bbac1414aa4e2240010000000000a6d2000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0002fffe90780000050a00000394000000060506b6bcd4d71e0c11060500000000000000080a00000081000000092206788722af"], 0x0) 1m2.655926216s ago: executing program 1 (id=2557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0x7, 0x0, @val=@netkit}, 0x1c) close(0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) 1m2.615384558s ago: executing program 1 (id=2558): socket(0x15, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900e4050003"], 0xbc}}, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffdb6) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x4) (async) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003ec0000000001010101", 0x2e}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb88a845000014aa00000001170000010203040506070800000c00020006002000080000000c0003000800", @nested={0x19, 0x12e}]}, 0x58}}, 0x4000000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000000000b01601003e80000000001010101", 0x2e}], 0x1, 0x0, 0xffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5, r2}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r5, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x35, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000070000000000000013d380009111bb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f0000000100)="76657468303a3000100004000000000002000000fe") (async) write(r6, &(0x7f0000000100)="eab3f58de54c259d7ac7478e87a9d81cb1d69794893ea5f03447a79618b1653688e3abc72ce9ad720e12bcaa11f25796aecb74d8c8f75b0d840e694018b87d9485bb2341b661d6029ceb8d6ccb955f90f98dcbb1588d7c8e51884412c4eaa29e8fb7cf317823b312ef432fe786bb9eabf0aec85bd9304df690f2ba006c8ac0dc7bb2df59cd9a1b9cc1590c774cc3412d8dc4d9605f5c6d784f14b948c5d7cc4c79724e8d2d3c19663e13cf6f212dc064309a4b7ca461e28891ac9a7b8b5ef16c85b7da71acb250e24cb304d56faff3c3246d57c31e7b988e039b0a3b", 0xdc) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x75, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x3c8, 0x9, 0x1, 0x95ce, 0x8}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x670, 0x5, 0x498, 0x100, 0x100, 0xfeffffff, 0x0, 0x100, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x300, 0x300]}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x3, 0x1], 0x0, 0x4}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_team\x00', {0x44, 0xd6ff, 0x2, 0x8, 0x0, 0x28, 0x6, 0x40, 0x20}, {0x1}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'batadv_slave_1\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 1m1.755761968s ago: executing program 1 (id=2563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0xb4}}, 0x0) (async) r1 = socket$kcm(0xa, 0x0, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x29, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) (async) close(r3) (async) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1}, 0x40002142) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6", @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x297, &(0x7f00000011c0)={@local, @local, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "7abee0", 0x25d, 0x6, 0xff, @mcast2, @remote, {[@dstopts={0x0, 0x14, '\x00', [@enc_lim={0x4, 0x1, 0xc}, @calipso={0x7, 0x50, {0x3, 0x12, 0xf8, 0x800, [0x5, 0xfff, 0x9, 0xc331, 0x2, 0x1, 0x9, 0x8000000, 0x0]}}, @pad1, @pad1, @generic={0x6, 0x1b, "b66a2a6f7a48de053031a1c65307d4c589cc538d10479960156aa1"}, @generic={0x9, 0x27, "b820c24f59159a1d2662b758d2a2dcfa94cb8faeb04c0713d1c7446ac0979e6c1c7c6d79b84343"}, @enc_lim={0x4, 0x1, 0xf}, @pad1]}, @fragment={0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x66}, @hopopts={0x2b, 0xd, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x746c}, @jumbo={0xc2, 0x4, 0x200}, @pad1, @enc_lim={0x4, 0x1, 0x6e}, @enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0x0, [0xfffffffffffffff8, 0x2164bf83, 0x85, 0xffffffffffff8001]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, @fragment={0x5c, 0x0, 0x0, 0x0, 0x0, 0x5, 0x64}, @fragment={0x21, 0x0, 0x1, 0x0, 0x0, 0x13, 0x64}, @dstopts={0x88, 0x1d, '\x00', [@pad1, @generic={0xc, 0xe5, "cd0de453379634d4906f5cc1613dcfb123ae50fc8f47eb80bf7e26aca65173f71611b733e07680d714e54d3e04759101f6a96d858d5365c79aa84cc54c0d4146e3c95c6740399a5c76c873fe064236f831a74ae966fe4d2e8f9ce87da1b3692bc0d1a3ba5bad34d24c546c358c09788875752e539c0cd1455615524154abec2ac39c0e2a4f61ad32f90705923d9d1c56b615caa12ad79f275a911e9e7454a65595c3d5cafbf7925677cfbbb890ed0642146831ae816b583e9fec9bc3ebc1380eaea8a9f651193942a7830ece05b6daddd07a0fd5cbdec70ba5effaffe5e529ebe965b91c71"}, @pad1]}], @payload_direct={{{{0x25, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, 0x2, 0x4, 0x0, 0x2, 0x1, 0x4, 0x3, 0x2, 0xc7b7, 0x2, 0x3c, 0x4e21}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001540), 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000015c0)=""/183, 0xb7}, {&(0x7f0000001680)=""/11, 0xb}, {&(0x7f00000016c0)=""/148, 0x94}, {&(0x7f0000001780)=""/213, 0xd5}, {&(0x7f0000001880)=""/135, 0x87}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)=""/162, 0xa2}, {&(0x7f0000001a80)=""/40, 0x28}, {&(0x7f0000001ac0)=""/199, 0xc7}], 0x9, &(0x7f0000001c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x40010020) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f0000001140)) 49.702002588s ago: executing program 36 (id=2536): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000620af0ff7f000001620af4ff7f000001620af8ff12344e20620ad8ff12344e20620adcff00000000620ae0ff00000000620ae4ff50021000620ae8ff00000000620ac0ff45000028620ac4ff00000000620ac8ff40060000620accff7f000001620ad0ff7f000001bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb705000000000000850000005400000015000b0000000000bf07000000000000bf71000000000000bfa200000000000007020000c0ffffffb703000014000000bfa400000000000007040000d8ffffffb705000014000000850000006e000000bf710000000000008500000056000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r4 = socket$kcm(0x23, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r4, 0x800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r6) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) 46.637663863s ago: executing program 37 (id=2563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0xb4}}, 0x0) (async) r1 = socket$kcm(0xa, 0x0, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x29, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) (async) close(r3) (async) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1}, 0x40002142) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6", @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x297, &(0x7f00000011c0)={@local, @local, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "7abee0", 0x25d, 0x6, 0xff, @mcast2, @remote, {[@dstopts={0x0, 0x14, '\x00', [@enc_lim={0x4, 0x1, 0xc}, @calipso={0x7, 0x50, {0x3, 0x12, 0xf8, 0x800, [0x5, 0xfff, 0x9, 0xc331, 0x2, 0x1, 0x9, 0x8000000, 0x0]}}, @pad1, @pad1, @generic={0x6, 0x1b, "b66a2a6f7a48de053031a1c65307d4c589cc538d10479960156aa1"}, @generic={0x9, 0x27, "b820c24f59159a1d2662b758d2a2dcfa94cb8faeb04c0713d1c7446ac0979e6c1c7c6d79b84343"}, @enc_lim={0x4, 0x1, 0xf}, @pad1]}, @fragment={0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x66}, @hopopts={0x2b, 0xd, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x746c}, @jumbo={0xc2, 0x4, 0x200}, @pad1, @enc_lim={0x4, 0x1, 0x6e}, @enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0x0, [0xfffffffffffffff8, 0x2164bf83, 0x85, 0xffffffffffff8001]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, @fragment={0x5c, 0x0, 0x0, 0x0, 0x0, 0x5, 0x64}, @fragment={0x21, 0x0, 0x1, 0x0, 0x0, 0x13, 0x64}, @dstopts={0x88, 0x1d, '\x00', [@pad1, @generic={0xc, 0xe5, "cd0de453379634d4906f5cc1613dcfb123ae50fc8f47eb80bf7e26aca65173f71611b733e07680d714e54d3e04759101f6a96d858d5365c79aa84cc54c0d4146e3c95c6740399a5c76c873fe064236f831a74ae966fe4d2e8f9ce87da1b3692bc0d1a3ba5bad34d24c546c358c09788875752e539c0cd1455615524154abec2ac39c0e2a4f61ad32f90705923d9d1c56b615caa12ad79f275a911e9e7454a65595c3d5cafbf7925677cfbbb890ed0642146831ae816b583e9fec9bc3ebc1380eaea8a9f651193942a7830ece05b6daddd07a0fd5cbdec70ba5effaffe5e529ebe965b91c71"}, @pad1]}], @payload_direct={{{{0x25, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, 0x2, 0x4, 0x0, 0x2, 0x1, 0x4, 0x3, 0x2, 0xc7b7, 0x2, 0x3c, 0x4e21}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001540), 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000015c0)=""/183, 0xb7}, {&(0x7f0000001680)=""/11, 0xb}, {&(0x7f00000016c0)=""/148, 0x94}, {&(0x7f0000001780)=""/213, 0xd5}, {&(0x7f0000001880)=""/135, 0x87}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)=""/162, 0xa2}, {&(0x7f0000001a80)=""/40, 0x28}, {&(0x7f0000001ac0)=""/199, 0xc7}], 0x9, &(0x7f0000001c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x40010020) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f0000001140)) 33.098471292s ago: executing program 4 (id=2735): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) unshare(0x24020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x8, 0x0, 0x0}}, 0x10) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x24048825) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2162) 33.098061168s ago: executing program 4 (id=2736): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x8, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x8, 0x9}, @srh={0x32, 0x0, 0x4, 0x0, 0x8, 0x40, 0x100}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfffffffd}]}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x200, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@empty, @private0, [0xffffffff, 0xff, 0xffffff00], [0xff, 0xff, 0xffffff00], 'vcan0\x00', 'virt_wifi0\x00', {}, {}, 0x3a, 0x1, 0x2, 0x50}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x9, 0x8, 0x8234, 0x3ff, 0x2, 0x7ff, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4}, {0x1, 0x2}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x89b9, 0x4, 0x9, 0x8, 0x9, 0xb24, 0xf, 0x9]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x4, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x13, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r8 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x4, 0x100000000, 0x0, 0x1, 0xfdb1, 0x2b5, 0x282d, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x200040cc) 31.461831945s ago: executing program 4 (id=2748): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='tunl0\x00'}) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003002e4a"], 0x10c}}, 0x0) r2 = socket(0x15, 0x5, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d0000d18ef3c00000000000000", @ANYRES16=r3, @ANYBLOB="00002cbd7000ffdbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000c008f0004000000000000000c00900008000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f009affffffffffffff0c0090000000040000000000"], 0x90}, 0x1, 0x0, 0x0, 0x44001}, 0x40040) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="740000002f00090027bd70000000000004000000080018000dac0f005300430041d43931504ee2b67fa470fbe8ee053838f9b99c9feded34c5f3d3140f3dedca70a04b7ad88fafa03299fc5ad3967c869adf8f0d78d38a470667c2007e88a97cbc2f3fb900"/112], 0x70}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r7, 0x20, 0x70bd68, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0bf5cb91ae5d"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40084) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, 0x0, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'macvtap0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x2c, 0x10, 0x401, 0x20000, 0x10, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x2302}, [@IFLA_BROADCAST={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040884}, 0x20044854) 30.992766977s ago: executing program 4 (id=2754): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffc}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000001e80)=""/112, 0x70}, 0x4}], 0x1, 0x10000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', r1, 0x10, 0x8000, 0x4, 0x9, {{0xf, 0x4, 0x1, 0x2b, 0x3c, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0x24, [@rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2, @multicast1, @multicast2]}, @ssrr={0x89, 0x7, 0xb0, [@loopback]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @private1, 0x7}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000040)="e079631384123b994f9f41edc009a8c35f151b2db5fae498376553d4ea9b5594cdde75141f9060bad288d9b6acc1f6b6f65e046e1b47dec712521462aaa9969758f49924fec6762def3f63663ae8be8a759e1100c65580b40cbe5ad31184588b03bac683ff413bcb529ff4f535374f8a13a959dc0a093cc4b1311d201dcd59e7818a0efc0f97eb85d4fc73cff1e0a6893cb84d95956c1f", 0x97}, {&(0x7f0000000300)="b7e096a9a84e13afa933770badce0f1d687afe11625ccaecc3d5c1c1f135592c7246000d2a34b31d9bf6a1e983ea56d9662ceac38a035145962eb4b0385912a64fb9a13a5b42f2edacfe6024e13ebc658fad33b5ae48b2484c4dbb85cba678773083c9ae5f95467034a191ce5ef734dc56a94bac7d8c266a5c8d1a9af6ee1d85fcde2d5b2c2d51042a25d2547d40a4897a40ac0066b75ad3757525eb0bef8a59cd8228ef37e5b9a5c07e798b0555845279b114a1dd533b5589b7ea20fd00f7fe188feb2501faed1ea3976cd2a3da6e", 0xcf}], 0x2, &(0x7f00000005c0)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x0, 0x8, 0x0, 0x67, 0x0, [@empty, @loopback, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dstopts={{0xa0, 0x29, 0x37, {0xe0, 0x10, '\x00', [@generic={0x5, 0x75, "7d2b739c197beac4fd075a13ec1ae24aa83b6c74e8efe6ea90f271e0f22758686ebab7e74d7748ab7d597f75b72debb6209d698a0d99f8eeed0e47e6a2534d5f4edbea9e13bd34ff345d81d82679a504fb95d84f5b58f988d20e4fc478aacd501962763eec79ce89202fbaf1bac56b968b0b896953"}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dstopts={{0x60, 0x29, 0x37, {0x198, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x7, [0x10000, 0x2, 0x3, 0x6, 0xffffffff, 0x0, 0x6]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7a3c}}, @tclass={{0x14, 0x29, 0x43, 0x6}}], 0x1e0}}, {{&(0x7f00000007c0)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}, 0x1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000800)="785e1500eaff14e19d95aaf883a351143b612b70b519c1633616bb40e45a97ce0e5f6d07", 0x24}, {&(0x7f0000000840)="3a17fcafa736f40586d8c93112fc5f28292c84a7c014d6d39b171a35c5c13a653b2e1eac0f920f64ba02378da917bfdd8fdea09746f7d918835f001d5525a22c1a38b116ad2ae6576edf", 0x4a}], 0x2, &(0x7f0000000a80)=[@hopopts_2292={{0x98, 0x29, 0x36, {0x0, 0xf, '\x00', [@enc_lim={0x4, 0x1, 0xf}, @jumbo={0xc2, 0x4, 0x518}, @calipso={0x7, 0x58, {0x0, 0x14, 0x1d, 0x223, [0x0, 0x3, 0x80, 0x7, 0x2, 0x4c, 0x7, 0xee6, 0x5, 0x7]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0xb1}, @pad1]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x0, 0x6}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x5, 0x0, [@loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xbaa}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}], 0x120}}], 0x4, 0x20e0086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 29.958866123s ago: executing program 4 (id=2763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000015000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000015000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x25, 0x2, @void}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[], 0x0) (async) 6.700278423s ago: executing program 2 (id=2873): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f00000002c0)="8a0ccac1127f231f41ba7fe58e69dc92f42b70fb6c31", 0x16}], 0x1}}], 0x1, 0x2000c090) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) close(r0) socket$igmp6(0xa, 0x3, 0x2) 5.607607598s ago: executing program 2 (id=2876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0xfffffffffffffe26}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4884) (async) sendmmsg$inet(r2, 0x0, 0x0, 0x48091) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x200440c1}, 0x24008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (async, rerun: 32) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (rerun: 32) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.555590949s ago: executing program 7 (id=2880): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x2) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000090601020000000000000000020000060900020073797a31000000000500010007000000240007801800018014000240fe8000000000000000008000000000bb080009"], 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03633100000004000000040000000a000000000000002dfdd63a0cfbea4b1341916a4d64802d45789efc3c0d52239a6f02542e870a39c67106e168d08f92225f1c37375a4dbf4dea655a3b179d2ad0a8c753e7dfb5977115fdd7ec852f2858fc049a388282d51b6e88da7104a47cf9240e11152a2b6582ca68f0a94bd337f05e32b4124cf87011f879407d9427bbc8359ddf5ba9633b0e9fba21d68fef263713f234fad3ece85ae914", @ANYRES32, @ANYBLOB='P\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000400"/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003e40)={&(0x7f0000000000)="2bbc3b4e07924207b41a51cf1618ad38948fb924859abf66e4cc79e410e619b5a99e6690c1d3271222a54c1cb9f5f70f79dc7ac21ffc1e52b12810d02c5f5b2c5319c422bbde34db310ea9d34fa53f15", &(0x7f0000002cc0)=""/4096, &(0x7f0000003cc0)="1f6f2d9ed140b9f31df843470f2a722448b11ec98b8a7074de077577f274a26d5a2080d48ce5b6f7a3af2597", &(0x7f0000003d00)="6b9cf1161788980be5ebad91b8d98505660ff6db663f79ce9c5306547a93b8087f4d6e3b3b2e7dcbf07cb11d58791e8a77e9f51dac11527e106ba0c046bb307b9d7df3774225c27ab26e909a93025154d9d1b197622e45b6b2a9cfad9fcf39017cf178d029922e6a64dd8b051ea09f5326c0b3081f4c461f848059ff3a3272ae15bc9664", 0x5, r3}, 0x38) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000001e80)=""/112, 0x70}, 0x4}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4.258823245s ago: executing program 8 (id=2882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x58, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x6, {0xc, 0x6, "be1000", 0xe, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, @private1, [@dstopts={0x2f, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x5}]}]}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44010, 0x5080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x4}, @IFLA_BR_MCAST_MLD_VERSION={0x0, 0x2c, 0x4}]}}}]}, 0x3}}, 0x0) 4.115507217s ago: executing program 2 (id=2883): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800a001a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'sit0\x00', r1, 0x80, 0x7800, 0x80000000, 0x2, {{0x9, 0x4, 0x1, 0x17, 0x24, 0x68, 0x0, 0x4, 0x2f, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0xb, 0x9c, [@loopback, @remote]}, @end, @end]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800a001a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) bpf$PROG_LOAD(0x25, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'sit0\x00', r1, 0x80, 0x7800, 0x80000000, 0x2, {{0x9, 0x4, 0x1, 0x17, 0x24, 0x68, 0x0, 0x4, 0x2f, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0xb, 0x9c, [@loopback, @remote]}, @end, @end]}}}}}) (async) 4.114752824s ago: executing program 8 (id=2884): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x448, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x41c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x219, 0x1, 0x8, 0x8001, 0x8, 0xc2, 0x4, 0x7, 0x7fffffff, 0x10001, 0xfffffffe, 0x3ff, 0x0, 0x5, 0x0, 0x4, 0x7, 0xfffff000, 0x5, 0x8a, 0x8, 0x5, 0x200, 0xd, 0x9, 0xac, 0x7, 0x5, 0x7fffffff, 0xff, 0xfffffffc, 0x9, 0x3, 0xee, 0xfffffffc, 0x28, 0xc, 0x40, 0x0, 0x3, 0xa0000, 0x8, 0x8, 0x3, 0x80, 0xffffffff, 0xfffffc01, 0x80, 0x0, 0x6, 0x3, 0x80, 0x7, 0x6, 0xe, 0x5, 0x8, 0x3, 0xb, 0x7, 0x6bb, 0x8000, 0x1, 0xb4, 0x5, 0x0, 0xcd, 0x1, 0x8, 0x3, 0x2, 0x800, 0x2, 0x6, 0x0, 0x7, 0x3, 0x7, 0xfffffffa, 0x10, 0x100, 0x2b, 0x7fffffff, 0x0, 0x7, 0x4, 0x1, 0x3, 0x8, 0x0, 0xe, 0x7ff, 0x7, 0x2, 0x1, 0xbe06, 0xffb, 0x885, 0x8, 0x235, 0x3, 0x800, 0x5a14ae32, 0x6, 0x19, 0x3, 0x7ff, 0x0, 0x2, 0x8, 0x0, 0xd6a5, 0x6, 0x9, 0xe7, 0xe, 0x4, 0x5, 0x7, 0x1, 0x0, 0x3, 0x9, 0x2, 0x8000, 0x9, 0x6, 0x8, 0x0, 0xfffff800, 0x1, 0xcb, 0x2, 0x10001, 0x5, 0x48, 0x5, 0x0, 0x8, 0x8000, 0xfc13, 0x8, 0x445, 0xf2, 0x47a3, 0x9, 0x4, 0x6, 0x3, 0x0, 0xfffffffc, 0x4, 0x5, 0xffff7e7b, 0x7, 0x1aff, 0xfffffffd, 0x875, 0x10001, 0x8, 0x1521, 0x6, 0x5, 0x8, 0x101, 0x6, 0xd51, 0x6, 0x3, 0x8, 0x7c, 0x7fff, 0x1, 0x20000004, 0x600000, 0x7, 0x0, 0x12000000, 0x10, 0x4, 0x7, 0xa, 0x9, 0x3f4a, 0x7, 0x0, 0x10001, 0x60b2, 0x8, 0x330, 0xe21, 0x3, 0xb, 0x5, 0xd, 0x20000007, 0x2, 0x9, 0x2, 0xf, 0x101, 0xe, 0x1, 0x7fff, 0xd3, 0x90, 0x4, 0x9, 0x2, 0x2, 0x400, 0x7eb, 0x6, 0x4, 0xb, 0x7, 0xb, 0x6, 0x7, 0x5, 0x4, 0x100, 0x6a572255, 0xd28, 0x3, 0xc000, 0x5, 0x0, 0x8, 0x1, 0x7, 0xffff5cb4, 0x7, 0x2, 0x0, 0x3612, 0x0, 0x65, 0x80, 0x6, 0x5, 0x5, 0x4, 0x4, 0x1, 0x8, 0x1, 0x200, 0x2, 0x100, 0xffffffff, 0xfffffa20, 0x7, 0x7ff, 0xb1ad]}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PRATE64={0xc, 0x5, 0x75fa86c73905ac5d}]}}]}, 0x448}}, 0x44010) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3.525940104s ago: executing program 9 (id=2885): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 3.504403133s ago: executing program 7 (id=2886): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x28, 0x8}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007"], 0x2c}}, 0x40080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)=ANY=[@ANYBLOB="200000001e00fce400007000000000000700000005002a000000000004000f80"], 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000020301010000000000000000020000000800010001000002090002000000000002000000080003400000000008000440000001000000000000000000"], 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000600)={0x2, 0x4d2, @remote}, 0x10) close(r4) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pwritev(r6, &(0x7f0000001380)=[{&(0x7f0000000040)="aa9e8253819239d7bf479a6e35c8a946cdff5d429072f7e096e7d987279ca1c19b3835e35bcf02ee52fc6383860757e59b939a9aacef86621e3077a06e1deb0e9a9a1e46136e468b4e84906dcb699b", 0x4f}, {&(0x7f00000000c0)="f0a7d4bee87015c4f396c94edfb99b4cb21aa4", 0x13}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="f9ff226ad3ce3499b316142ff3de", 0xe}, {&(0x7f00000012c0)="e1d0e57abeef0ab58be21969deb4a3b716acfae0cd187af71f16cf68c4d6b202d839259bdc7f3a6d3116fd75d9c8719af986547e986a192e5e2d80d0f881ccf2f78354b4c06f0e39d2b3e6303355bd533d0cdd33d57aa8efa1eedca7a794af5fb14a976aafd1382f243e08f2681604318dbfc07bbfe4c4b9231fb1712b3b1e0e", 0x80}, {&(0x7f0000001340)="37da1f15b3aa98efbba9ad52979470f38e2e8e5791313408d3f044093e0e241517374efb4f49b5c50e39d23c133197a0893f38b0f8d593cf8b906b72c7c1", 0x3e}], 0x6, 0x101, 0xc9) 3.270926614s ago: executing program 9 (id=2887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r1 = socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r1, @ANYBLOB="5845ae7f245f16b2402ae42723047613343aa5aef4cd19c43006bc0ccd26f4745b8fa7c2e25111e56de84d835f4eda9e0995688fd882dbe4970d316676c2dd9fa371c86dd2c14132affdf7d4c4b14b657a1974", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) socket(0x11, 0x3, 0x0) (async) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r4, &(0x7f00000006c0)={0x1d, r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x80001000, 0x5, 0x3, 0x1}, 0x8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="030300400000fbdbdf250c00000008000300", @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4c054) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000bd6def66648823a700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000bd6def66648823a700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) 3.10250795s ago: executing program 7 (id=2888): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x73bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040850) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r0, 0x3) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x73bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040850) (async) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0) (async) 3.016328139s ago: executing program 8 (id=2889): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0x8, @private0, 0x4}, {0xa, 0x4e20, 0x3, @local, 0x8}, 0x1, {[0x3, 0x80, 0xc, 0x55, 0xde, 0x9, 0x8, 0x10000]}}, 0x5c) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b40)={r4, &(0x7f0000001a80)="c3", 0x0}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dvmrp0\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0x8, 0xca, 0x0, r4, 0x9, '\x00', r5, r6, 0x2, 0x3, 0x0, 0xe}, 0x50) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000000)) 3.015693222s ago: executing program 2 (id=2890): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffc}, 0x1c) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000001e80)=""/112, 0x70}, 0x4}], 0x1, 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x23}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001f40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x420, 0x118, 0x0, 0x330, 0x330, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000040), {[{{@ipv6={@mcast1, @empty, [0xff, 0xffffff00], [0xffffffff, 0xff000000, 0xff], 'caif0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x33, 0x9, 0x0, 0x40}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @ipv4=@loopback, 0x6, 0x3d, 0x5}}}, {{@ipv6={@empty, @private1, [0x0, 0xffffffff, 0x0, 0xff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffff00], 'pimreg\x00', 'veth1_to_hsr\x00', {}, {}, 0x89, 0x7f, 0x5, 0x11}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@srh={{0x30}, {0x21, 0x2, 0x1, 0x5, 0x4, 0x180, 0x1848}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xffffffff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'bridge_slave_1\x00', 'bond0\x00', {}, {}, 0x29, 0x2, 0x0, 0xd}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@multicast2, 0x2d, 0x18, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@remote, 0xb, 0x2a, 0x2}}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x36}, [0xffffffff, 0x0, 0x0, 0xff000000], [0x0, 0xffffff00], '\x00', 'nr0\x00', {0xff}, {0xff}, 0x32, 0xa6, 0x5, 0x4}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x95, 0x4, 0x1, [0x6, 0x0, 0x0, 0x1000, 0x6, 0xdba8, 0x1, 0xdd8, 0xcc, 0x1000, 0x3, 0x0, 0x9, 0x6, 0x7], 0x5}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1, 0x3e, 0x1, 0xc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) unshare(0x22020600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {0x0, 0xfff3}, {0xe, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4000) recvmsg$can_j1939(r2, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/241, 0xf1}], 0x3, &(0x7f0000003f00)=""/182, 0xb6}, 0x10022) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x2}}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000002b40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002600)={0x4f0, 0x13, 0x20, 0x70bd28, 0x25dfdbfc, {0x10, 0x0, 0x6e, 0x7, {0x4e20, 0x4e21, [0x3ff, 0x6, 0x0, 0x6], [0x7, 0x1, 0xffffffff, 0x3], 0x0, [0x30, 0x1]}, 0x3ff, 0x1d1}, [@INET_DIAG_REQ_BYTECODE={0x79, 0x1, "e21a35759e2cc3d7141eb381d1baf917b5bdfe03e2390ee44fdf497a878ba80b1a5895fc831320971db8591036b845a4850dcea4e94e694d81b20db9c8fe574753e3828d85ffb71755cdad2d6bab11e717c92c5eb45d1aaf3e8a697fdf3cd5b23f8c1649c139554d81afffedbd96eb8298d52e0885"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "76724ff5a988e119f7f6a3870b4cd12832e04f6c8e3f6ba4cd542bf8174e22b75b849d87d5c4e1960a3f16b7d2fb93cf1cd54e6790c8386119275e509e628ca8c3db5dfef09d6659dc2ee870b32a3538e6f9b41ff81c4333c5d64ab64571b9a23def1d82867fa84c1abef4963606c3854690c89f3608d23cf4dd92a566fa93409877b6d2810e1debf13013ae7c546fcec80241b5e8e1b821ff60b7670d118cb7a265dfdc3abc4e9b94e739c27f7f94b1f7ec64916e275e5b80c5d63c0f7d8ce5648ab7325d322e22f815bc93e8bed919e1e15a7dbabc56f55594c7cf2447731f138e17b020d9"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "2a33cb46108f30a9bd492b1673ab2643036845a54131f8b3f84359cdd3bc12fb8720d0d14accb080bad23922db"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "25e09aa442beca5d522cb28f00f73971490e584ba011af9696881e4adf6d1c0e85322b9e2500aa919235ab27842c2a5cb1c721a286bd3e7b8867d33cf57d76924217c9b09a81c3c2a7c35067af52582dff9799d770cfd56ad5606a8687db2e03b146"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "9c5754d14f26226e0f92b63606bf8b6584bb0d71112178cfe38fe1be942a1e0a48fd60ef08d2b09e980d7ad08acd291259da79821c617020f09eb7928105604d510db9bb0bd720808306ffc9332b535c146a5d5d65aa38f9f0122a1dd060d5f1cb9382579ee442"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "65ded723fcec39607c097c46cd9b373bc415de289a86ccbe61bcc255dcf9779c380611feb72225607d392e89994924"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "dabf6db96fc890908bab8b5a87f6bc0689cc3f3f81a3f0284a2dfee09ec5e057c17498611d1cfb43c91621bdd5d89a1703d8146c7c11d22317164c0f9e58727e0a5b47424f9fc42367353edaec688ffbef487ffd751088843520ad34b16b7414762258826ffe1f8694e0d37479b880c4b5a46fb1b3ca32eaf0b526a425e441b3a37e243b56b1b6dc4401b6b16d52cf1e481634798c52db882bfc570975762c18ce0fb92325f567"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "9d422f9f5e21056b6118fabcd24a41493f4e447e0bdab91906c1f354e006b118f6f12c4be965b071f99e5ad1aac1ebb3796c0b35aeb8df10bb7432312ca66222715fee70c3db3beda126e0942cd4ce6628091373b50e1e56530f6bf4c7dfb52a93aa5b6faae3b42c8edb1ea83bcc647aa1a8e682b6f7720ac7b38058f3eb480cb5388c7e057801a6c35d2d3b7c0f6416a3ab562aff5f343d4d5c9ed498d11f48c03379d46efc62a575805ec7a9f308373e94428bf03fb96ebf1ee1d0d5325ccb48f3935f568f7590f5314b25b9e07d050ced2bec3ad09a0d"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "651fae4b15ef98fc9bce99c97f8cde827a7314151f86f7698da68cea74609bcc2c744ad6979e56eae826d63bdfc313981ef274f49600ef8543737af4cf30c391d5a6cefa5bb68f2c5389fd96a3b2e80a25bc60f3511b54bc154e0906182a5b77ebfe0d54e58d520f2900005a2cc5b33206af"}]}, 0x4f0}, 0x1, 0x0, 0x0, 0xc4}, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2.208596819s ago: executing program 7 (id=2891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0x6, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x7, 0x100}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048881}, 0x4000080) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000000600)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @loopback}}}, 0x108) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="38000000240001210100000000000000000000000100000000000100ffffffff0000000008000100657473001a00028005db010003000000", 0x38) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000004c0)={0x4, 0x7fff, 0x4, 0xc967, 0x2, 0x2, 0x6, 0x6950}, &(0x7f0000000500)=0x20) setsockopt$inet_int(r9, 0x0, 0x5, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2000000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e20000008000700000003e80c00058008000100524153000c000d80080001007f000002"], 0x9c}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x1, 0x2, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10b8}, 0x200080c0) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xf, @empty, 0x10}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) close(0x3) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) 2.131877016s ago: executing program 8 (id=2892): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) socket(0x8, 0x4, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x94) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) 1.923715653s ago: executing program 9 (id=2893): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000001480)='syzkaller\x00', 0x9}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0400"/18, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x78}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.464547094s ago: executing program 8 (id=2894): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0x21, 0x0, &(0x7f0000001440)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000001000130725bd700000000000fe8000000000000000000000000000bb00000000000000000000ffffac1414aa4e2200018000000402000060", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="fe80000000000000000034b51ed500bb0000000032000000fe8000000000000000000000000000aa0000000000000000fcffffffff9179b996fe11760ecaac48aeffffff08000000000000000a0000008b7100002a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000600000000000000f8ffffffffffffff0c000000000000000200"], 0x35}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000540)="43210098") r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r6, 0x890b, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x800448d4, &(0x7f0000000400)) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="76d1e66dd7c533a054ba95a5adf554ee5a3ce8d2e2f5952f2efdbf75d688b294624f835c0a8e3d2557b973d4db02168d86ebb57a81f421f2dc6cf792226b3c153a3cccfde97d4325b66d7d590ebf40cd979ab92566faad7a28a31e57b7a8afd20f51c81e4307a2d996b3ad996bdb2eda2f665502592a466b596dfd4471817dc29641f734c8a0ae8bc0c8309260e2ccc58dbf3c55b4e8398ed4287f65cfbc09", @ANYRESOCT=r10, @ANYRES64=r3, @ANYRES16=0x0], 0x0, 0x40, 0x0, 0x0, 0x41000, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) read$nci(r11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.439827463s ago: executing program 2 (id=2895): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000002ce5d17ed37dae1612800b00010067656e65766500001c00028005000d0001000000080001000300000005ff"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 1.224741602s ago: executing program 7 (id=2896): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f0009ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r6, @ANYBLOB="4606"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x20, 0x10, 0x0, 0x0, 0x0, 0x7e, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000801}, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="470b91a0091503037ef06ed17d5c5c5413fa88d020d8b911fec2f1e52f7ec4fc06ef0276fa1b9a98dfddb6f13c92584e83ad1bb90be7fe42592a78e33736fda035eaf94008c82bb7476506bf2b3ad9590d06a3152f80165df5011d825a16d57f57333636863ea2531123649e0b311c776c5f5745f9a808c1c71fd47a18f3c67233e9a7f51e2924df5c8117484804bf276ca020ed22af72b4bb01066bbd4e6af261515fba39584213e7b8a576926b6dd0ae19de7539579ec33c43a68d6c8f86e8cf014e017d7066002f377baebbdc1079702c2f32dce2560c4ebd54bc12145e91853aaa09f23a6152d2b50b3cb124713100320bd7", @ANYRES32=r10, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r11, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="2f030000000000000004"], 0x28) sendto$inet6(r11, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 1.112243985s ago: executing program 9 (id=2897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r4}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r5, 0x1}, 0x20) 1.079162711s ago: executing program 2 (id=2898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$kcm(0x29, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', 0x0}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x3c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8943, 0x0) 587.832539ms ago: executing program 9 (id=2899): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b40), 0x0, 0x0, 0x0, 0xc1a6ec5e96f4987e}, 0x20000000) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x63e6}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0xa287, [{0x1, 0x1, 0x7}]}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0x1}, 0x28) (async) sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e1f, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x49}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000000380)="8000e8bef79dbcf6", 0x8}], 0x1, &(0x7f0000000340)=ANY=[], 0x3}, 0x2400c800) (async) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000240)={r1, &(0x7f0000000140)='\\+}\x00', 0x5a12c2, &(0x7f0000000180)={@align=0xa0b, {0x5, 0xfff8, 0x10000, 0xfffffffffffffffb}}, 0x7, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x400}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18090000ff010000000000000000000000000000144e5eadf0f178f37bc8776a3f2922c3b5a1df554a88bd899590a2542ba8b6044d67929b6488ac92ae19d9c685793597d838b73ef2ac591a0df024a806bb9558f3b0e3475d6638425d565794149f5880e5677a0c67f6a0ef27572822bf72b332225aba5e7e199fdb8c2e6e2c017ab4b88fa8ce349d8aa69312620598e3dd95a69f42da19857a71b90c6c536eb06e60fc474c3d5af6fb697077cd22fa3314669cda36b06b7a4ff8931bf7a095479ca4536e277f0b280498dac2325d90b9f7462e861457fc25a3cb7fe583263a843d1f590cf831ee9f83683160a5ae6f18", @ANYRES32, @ANYBLOB="0000000000000000184800000600000000000000000000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f00000002c0)=0xffffff70, 0x4) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x283, 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r8, 0x1, 0x7}, 0x14) (async) syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a8653d0d7000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600008100000110000000000000000000000ffff00000000fc020000bfb671334dac41564d3e17466c7f0000000000000000000000000002001000000000058900000502000ec204"], 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) (async) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0), 0x13}, 0xb00}], 0x1, 0x40000) 317.573564ms ago: executing program 4 (id=2767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x49d8, 0x1, 0x5, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x1, 0x70bd2c}, 0x20}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdf}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2006c884}, 0x8000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x3, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x400) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) 279.665675ms ago: executing program 7 (id=2900): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c00018008000f00e0000001080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x65, 0x484, 0x0, &(0x7f00000003c0)) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x440d0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r9) recvmmsg(r9, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000880)=""/138, 0x8a}, {&(0x7f0000001640)=""/4089, 0xff9}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000340)=""/145, 0x91}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f00000002c0)=""/115, 0x73}], 0x7}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2062, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000700)={'syztnl0\x00', r8, 0x8, 0x1, 0x336, 0x8, {{0x4e, 0x4, 0x3, 0x8, 0x138, 0x25, 0x0, 0xff, 0x2f, 0x0, @empty, @multicast1, {[@end, @generic={0x86, 0xf, "20819fece49bff3b596c8adfc0"}, @end, @cipso={0x86, 0x43, 0x3, [{0x7, 0x8, "c24774a15dd2"}, {0x2, 0x4, "4489"}, {0x1, 0x8, "329ed0cb361a"}, {0x7, 0x9, "3a3ee7c84c7c55"}, {0x5, 0x5, "b01c79"}, {0x0, 0x5, "fb588b"}, {0x2, 0xa, "c0df243d24ac64b8"}, {0x2, 0xc, "5109f2a6417a26a72a58"}]}, @timestamp_addr={0x44, 0x54, 0x78, 0x1, 0x2, [{@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x10}, {@empty, 0x7fff}, {@remote, 0x62}, {@broadcast, 0x1}, {@local, 0x99fe}, {@private=0xa010102, 0x9}, {@empty, 0xf1}, {@remote, 0x100}, {@private=0xa010101, 0x9}]}, @timestamp={0x44, 0x1c, 0x60, 0x0, 0x3, [0x8, 0x5, 0xffff0000, 0x59c8ae2, 0x7, 0x6]}, @timestamp_prespec={0x44, 0x3c, 0x41, 0x3, 0x8, [{@empty, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x2}, {@loopback, 0x3}, {@local, 0x2}, {@empty, 0x7f}, {@broadcast, 0xa05}, {@multicast1, 0x4}]}, @timestamp_addr={0x44, 0x24, 0xff, 0x1, 0x8, [{@private=0xa010101, 0x4}, {@private=0xa010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x47}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000008c0)={@remote, 0x42, r10}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000200)=0x7) close(r11) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r12, &(0x7f0000000500)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x8000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 165.810822ms ago: executing program 8 (id=2901): r0 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000003a40)={'lo\x00', 0xc737, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000120a09000000000000000000020000000900020073797a320000000008000440000000000800034000000000140000001100010000000000000000000000000af02a31657051dbc884db10e8939686d0582f61f73810afb779ee82ddf2ff0080c68196358acb7df4a7aea3201906abb5488a67"], 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x1, 0x2, 0xfff, 0xffffffffffffffff, 0x1, 0x10000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r4, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r6, 0x7}, 0x14, 0x0}}], 0x1, 0x80) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10010, r2, 0x613a5000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xd8132, r2, 0xdf45b000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 0s ago: executing program 9 (id=2902): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x6, 0x2f09) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@getqdisc={0x2c, 0x26, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8}, {0xa, 0x3}, {0x1, 0x1}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): bridge10): Enslaving as an active interface with an up link [ 424.579107][T14040] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 424.579137][T14040] bridge11: entered allmulticast mode [ 424.751557][T14054] wg2 speed is unknown, defaulting to 1000 [ 424.753463][T14054] lo speed is unknown, defaulting to 1000 [ 425.311529][T14072] wg2 speed is unknown, defaulting to 1000 [ 425.313249][T14072] lo speed is unknown, defaulting to 1000 [ 425.579082][T14082] tipc: Enabling of bearer rejected, failed to enable media [ 425.600826][T14083] tipc: Enabling of bearer rejected, failed to enable media [ 425.910075][T14085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1929'. [ 426.008442][T14099] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1931'. [ 426.677724][T14111] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 426.763332][T14112] netlink: 'syz.3.1933': attribute type 11 has an invalid length. [ 426.996480][T14118] syzkaller0: entered promiscuous mode [ 426.996505][T14118] syzkaller0: entered allmulticast mode [ 427.029212][T14118] macvtap0: entered promiscuous mode [ 427.029247][T14118] bridge0: entered promiscuous mode [ 427.336376][T14129] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 427.336403][T14129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1940'. [ 427.498161][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1942'. [ 427.511695][T14132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1942'. [ 427.567148][T14137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1943'. [ 428.086623][T14156] IPVS: Error joining to the multicast group [ 428.209846][T14160] Bluetooth: MGMT ver 1.23 [ 428.364414][T14168] netlink: 'syz.0.1955': attribute type 11 has an invalid length. [ 428.364447][T14168] netlink: 'syz.0.1955': attribute type 4 has an invalid length. [ 428.501258][T14174] __nla_validate_parse: 3 callbacks suppressed [ 428.501286][T14174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1956'. [ 428.501310][T14174] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1956'. [ 428.501331][T14174] netlink: 'syz.0.1956': attribute type 6 has an invalid length. [ 428.501347][T14174] netlink: 'syz.0.1956': attribute type 5 has an invalid length. [ 428.501363][T14174] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1956'. [ 428.756608][T14181] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1959'. [ 428.756663][T14181] netlink: 'syz.1.1959': attribute type 8 has an invalid length. [ 428.799481][T14181] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 428.799509][T14181] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 429.003718][T14192] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1963'. [ 429.007706][T14192] netlink: 'syz.0.1963': attribute type 5 has an invalid length. [ 429.050710][T14194] ip6gretap0: entered promiscuous mode [ 429.057311][T14194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.107028][T14194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.116945][T14194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.127850][T14194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 429.137804][T14194] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 429.166889][T10664] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.167010][T10664] bridge0: port 1(bridge_slave_0) entered listening state [ 429.200850][T10664] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.200990][T10664] bridge0: port 2(bridge_slave_1) entered listening state [ 429.300340][ T13] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 429.623402][T14213] netlink: 'syz.0.1969': attribute type 7 has an invalid length. [ 429.825391][T14224] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1973'. [ 429.974800][T14226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1975'. [ 429.991634][T14226] veth1_to_team: entered promiscuous mode [ 429.993104][T14226] veth0_to_team: entered promiscuous mode [ 429.993906][T14226] debugfs: 'hsr0' already exists in 'hsr' [ 429.993935][T14226] Cannot create hsr debugfs directory [ 429.993956][T14226] hsr0: entered promiscuous mode [ 430.430275][T14246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1978'. [ 430.613395][T14250] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1980'. [ 430.682306][T14254] syzkaller0: entered promiscuous mode [ 430.682325][T14254] syzkaller0: entered allmulticast mode [ 430.879694][T14258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1983'. [ 431.028814][T14262] vlan4: entered allmulticast mode [ 431.028840][T14262] bridge_slave_0: entered allmulticast mode [ 431.098591][T14264] bond12: option fail_over_mac: invalid value (127) [ 431.111928][T14264] bond12 (unregistering): Released all slaves [ 431.199695][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 431.203488][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.207229][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.235198][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 431.236912][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.266378][T14267] veth1_to_team: entered promiscuous mode [ 431.292408][T14267] veth1_to_team: left promiscuous mode [ 431.328300][ T5650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 431.338996][ T5650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.349789][ T5650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.361944][ T5650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 431.364122][ T5650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 432.166622][T14269] wg2 speed is unknown, defaulting to 1000 [ 432.175104][T14269] lo speed is unknown, defaulting to 1000 [ 432.249122][T14312] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 433.489867][ T5650] Bluetooth: hci5: command tx timeout [ 434.122899][T14356] xt_limit: Overflow, try lower: 268435456/134217728 [ 434.123389][T14357] xt_limit: Overflow, try lower: 268435456/134217728 [ 434.236581][T14359] __nla_validate_parse: 1 callbacks suppressed [ 434.236608][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2006'. [ 435.001991][T14365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2007'. [ 435.077956][T14269] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.078147][T14269] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.078592][T14269] bridge_slave_0: entered allmulticast mode [ 435.104946][T14269] bridge_slave_0: entered promiscuous mode [ 435.114432][T14269] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.114557][T14269] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.114701][T14269] bridge_slave_1: entered allmulticast mode [ 435.117661][T14269] bridge_slave_1: entered promiscuous mode [ 435.292222][T14269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.295547][T14269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.350122][T14269] team0: Port device team_slave_0 added [ 435.354103][T14269] team0: Port device team_slave_1 added [ 435.399103][T14269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.399122][T14269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.399151][T14269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.447700][T14269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.447719][T14269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.447749][T14269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.569699][ T5650] Bluetooth: hci5: command tx timeout [ 435.585218][T14269] hsr_slave_0: entered promiscuous mode [ 435.588464][T14269] hsr_slave_1: entered promiscuous mode [ 435.591383][T14269] debugfs: 'hsr0' already exists in 'hsr' [ 435.591408][T14269] Cannot create hsr debugfs directory [ 436.107436][T14269] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 436.133400][T14269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.134939][T14269] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 436.162543][T14269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.163687][T14269] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 436.189724][T14269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.190814][T14269] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 436.221099][T14269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.588378][T14269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.659207][T14269] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.683126][T10664] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.683246][T10664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.727628][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.727748][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.013308][T14417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.649913][ T5650] Bluetooth: hci5: command tx timeout [ 437.650765][T14446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2024'. [ 437.855935][T14269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.057139][T14464] ip_tables: iptables: counters copy to user failed while replacing table [ 438.079770][T14464] ip_tables: iptables: counters copy to user failed while replacing table [ 438.251104][T14475] vti0: entered promiscuous mode [ 438.251132][T14475] vti0: entered allmulticast mode [ 438.332133][T14479] netlink: 'syz.4.2032': attribute type 5 has an invalid length. [ 438.380847][T14269] veth0_vlan: entered promiscuous mode [ 438.421218][T14269] veth1_vlan: entered promiscuous mode [ 438.477290][T14480] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2033'. [ 438.496965][T14269] veth0_macvtap: entered promiscuous mode [ 438.508979][T14269] veth1_macvtap: entered promiscuous mode [ 438.537584][T14269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.565538][T14269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.640198][T12015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.663639][T12008] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.664498][T12008] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.664541][T12008] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.762982][T12018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.763006][T12018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.834367][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.834385][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.948516][T14485] netlink: 'syz.4.2035': attribute type 16 has an invalid length. [ 438.948546][T14485] netlink: 55946 bytes leftover after parsing attributes in process `syz.4.2035'. [ 439.395439][T14500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2038'. [ 439.739687][ T5650] Bluetooth: hci5: command tx timeout [ 440.183015][T14535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.183030][T14535] IPv6: NLM_F_CREATE should be set when creating new route [ 440.183060][T14535] IPv6: NLM_F_CREATE should be set when creating new route [ 440.183078][T14535] IPv6: NLM_F_CREATE should be set when creating new route [ 440.185312][T14535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.371340][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.424826][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2048'. [ 440.593600][T14550] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 440.593627][T14550] netlink: 'syz.1.2050': attribute type 4 has an invalid length. [ 440.593642][T14550] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2050'. [ 441.174613][ T9566] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 441.378090][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2055'. [ 441.948315][T14608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2062'. [ 442.008522][T14608] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2062'. [ 442.031644][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 442.037339][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 442.046710][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 442.072543][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 442.075208][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 442.166664][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'. [ 442.200815][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2062'. [ 442.816060][T14644] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 443.007677][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'. [ 443.025948][T14652] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2069'. [ 443.058861][T14644] bridge0: port 2(veth1_to_bond) entered disabled state [ 443.103713][T14644] bond10: left promiscuous mode [ 443.104429][T14644] macvtap0: left promiscuous mode [ 443.269974][T14654] syz_tun (unregistering): left allmulticast mode [ 443.651947][T14610] wg2 speed is unknown, defaulting to 1000 [ 443.656955][T14610] lo speed is unknown, defaulting to 1000 [ 444.047468][T14673] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.047894][T14673] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.130557][ T5650] Bluetooth: hci6: command tx timeout [ 444.241395][T14673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.267970][T14673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.345149][T14673] ip6gretap0: left allmulticast mode [ 444.402944][T14673] batman_adv: batadv0: Interface deactivated: gretap1 [ 444.880689][T12015] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.880892][T12015] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.880941][T12015] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.880979][T12015] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.024892][T14701] netlink: 'syz.1.2079': attribute type 3 has an invalid length. [ 445.263676][T14710] __nla_validate_parse: 4 callbacks suppressed [ 445.263703][T14710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2081'. [ 445.263723][T14710] netlink: 356 bytes leftover after parsing attributes in process `syz.5.2081'. [ 445.263743][T14710] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2081'. [ 445.324142][T14693] syzkaller0: entered promiscuous mode [ 445.324177][T14693] syzkaller0: entered allmulticast mode [ 445.326339][T14710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2081'. [ 445.412885][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.590419][T14718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2083'. [ 445.744221][T14610] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.744425][T14610] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.744610][T14610] bridge_slave_0: entered allmulticast mode [ 445.746426][T14610] bridge_slave_0: entered promiscuous mode [ 445.754580][T14610] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.754767][T14610] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.755067][T14610] bridge_slave_1: entered allmulticast mode [ 445.762164][T14610] bridge_slave_1: entered promiscuous mode [ 445.844363][T14731] syzkaller0: entered promiscuous mode [ 445.844392][T14731] syzkaller0: entered allmulticast mode [ 445.910403][T14610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.950963][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2087'. [ 445.982618][T14610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.210257][ T5650] Bluetooth: hci6: command tx timeout [ 446.254706][T14610] team0: Port device team_slave_0 added [ 446.276925][T14610] team0: Port device team_slave_1 added [ 446.361977][T14610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.362002][T14610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.362055][T14610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.366998][T14610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.367018][T14610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.367048][T14610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.528084][T14610] hsr_slave_0: entered promiscuous mode [ 446.529216][T14610] hsr_slave_1: entered promiscuous mode [ 446.541932][T14610] debugfs: 'hsr0' already exists in 'hsr' [ 446.541959][T14610] Cannot create hsr debugfs directory [ 446.682966][T14752] bond5: entered allmulticast mode [ 446.684659][T14752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 446.749047][T14758] bridge4: entered promiscuous mode [ 446.749076][T14758] bridge4: entered allmulticast mode [ 446.765854][T14758] team0: Port device bridge4 added [ 446.856788][T14766] Bluetooth: hci0: unsupported parameter 5134 [ 446.856815][T14766] Bluetooth: hci0: unsupported parameter 8192 [ 446.856847][T14766] Bluetooth: hci0: unsupported parameter 5134 [ 446.856861][T14766] Bluetooth: hci0: unsupported parameter 8192 [ 447.080185][T14769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2095'. [ 447.185209][T14610] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 447.208314][T14610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.217156][T14610] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 447.229219][T14610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.238135][T14610] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 447.251720][T14610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.308088][T14610] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 447.316607][T14610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.527523][T14610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.557630][T14610] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.593980][T12008] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.594101][T12008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.626731][T12008] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.626898][T12008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.670681][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 447.675085][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2100'. [ 447.738613][T14792] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2100'. [ 447.771876][T14791] rds_bind: 55 callbacks suppressed [ 447.771901][T14791] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 448.290273][ T52] Bluetooth: hci6: command tx timeout [ 448.999778][T14610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.509218][T14857] bond12: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 449.524544][T14857] bond12 (unregistering): Released all slaves [ 449.764715][T14610] veth0_vlan: entered promiscuous mode [ 449.782080][T14610] veth1_vlan: entered promiscuous mode [ 449.817711][T14610] veth0_macvtap: entered promiscuous mode [ 449.834293][T14610] veth1_macvtap: entered promiscuous mode [ 449.856816][T14610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.871914][T14610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.931684][T12018] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.931732][T12018] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.931767][T12018] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.931801][T12018] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.068169][ T3370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.068193][ T3370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.201314][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.201339][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.370211][ T52] Bluetooth: hci6: command 0x0419 tx timeout [ 450.448624][T14879] pimreg: entered allmulticast mode [ 450.538720][T14880] syzkaller1: entered promiscuous mode [ 450.538745][T14880] syzkaller1: entered allmulticast mode [ 450.765062][T14887] __nla_validate_parse: 3 callbacks suppressed [ 450.765084][T14887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2120'. [ 450.872851][T14892] batman_adv: batadv0: Adding interface: macvlan2 [ 450.872873][T14892] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.872910][T14892] batman_adv: batadv0: Interface activated: macvlan2 [ 450.985119][T14894] syzkaller0: entered promiscuous mode [ 450.985146][T14894] syzkaller0: entered allmulticast mode [ 451.065664][T14897] lo: left allmulticast mode [ 451.434300][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.437277][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.459919][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.461393][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.462741][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.463900][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.465169][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.467525][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.468882][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.558424][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.571567][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.572961][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.574155][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.576943][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.578261][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.635471][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.636873][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.667803][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.669255][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.690802][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.692078][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.693356][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.694643][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.695887][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.697133][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.698383][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.771407][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.772941][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.774509][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.775851][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.777115][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.778377][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.834602][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.853653][T14920] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2130'. [ 451.885429][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.886860][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.888212][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.924101][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.927891][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.952106][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.953901][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.955657][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.957025][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.958403][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.012083][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.013722][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.015072][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.016378][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.017666][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.018954][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.050262][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.093540][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.094963][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.096210][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.097429][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.098665][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.148202][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.167189][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.206218][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.236699][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.254470][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.270103][T14914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.276264][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.304302][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.352704][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.358405][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.451315][ T5650] Bluetooth: hci6: command 0x0419 tx timeout [ 452.509494][T14934] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 452.608072][T14940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2133'. [ 452.721218][T14943] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2136'. [ 452.724691][T14943] netlink: 'syz.6.2136': attribute type 3 has an invalid length. [ 452.806456][T14949] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 452.808173][T14949] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2137'. [ 453.828615][T14984] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 453.828651][T14984] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 453.966278][T14987] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 454.044980][T14987] veth9: entered allmulticast mode [ 454.050708][T14987] bond21: (slave veth9): Enslaving as an active interface with a down link [ 454.075086][T14987] bond21: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 454.097854][T14987] macvlan3: entered promiscuous mode [ 454.097885][T14987] macvlan3: entered allmulticast mode [ 454.098406][T14987] bond21: entered promiscuous mode [ 454.105274][T14987] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 454.107946][T14987] bond21: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 454.120947][T14987] bond21: left promiscuous mode [ 454.403978][T14993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.537872][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2148'. [ 454.848461][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2154'. [ 455.048821][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f010c00: rx timeout, send abort [ 455.058767][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f010c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 455.138384][T15029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2158'. [ 456.240707][T15068] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2169'. [ 456.240740][T15068] nbd: illegal input index 65508 [ 456.269845][T15069] syzkaller0: entered promiscuous mode [ 456.269873][T15069] syzkaller0: entered allmulticast mode [ 456.416894][T15077] ip6tnl2: entered allmulticast mode [ 456.459705][ T9565] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 456.560859][ T9565] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 456.725693][T15084] netlink: 'syz.4.2173': attribute type 15 has an invalid length. [ 456.725712][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 456.750971][T15084] netlink: 'syz.4.2173': attribute type 15 has an invalid length. [ 456.750998][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 456.753425][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 456.789824][ T3370] netdevsim netdevsim4 netdevsim3: set [0, 2] type 1 family 0 port 2816 - 0 [ 456.800539][T12015] netdevsim netdevsim4 netdevsim1: set [0, 2] type 1 family 0 port 2816 - 0 [ 456.800718][T12015] netdevsim netdevsim4 netdevsim2: set [0, 2] type 1 family 0 port 2816 - 0 [ 456.854019][T15084] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2173'. [ 457.171274][ T9565] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 458.319262][ T3370] nci: nci_rx_work: unknown MT 0x6 [ 458.331743][T15136] netlink: 'syz.4.2186': attribute type 4 has an invalid length. [ 458.331770][T15136] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2186'. [ 458.380972][T15152] syz.6.2191: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 458.381201][T15152] CPU: 0 UID: 0 PID: 15152 Comm: syz.6.2191 Not tainted syzkaller #0 PREEMPT(full) [ 458.381228][T15152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.381247][T15152] Call Trace: [ 458.381256][T15152] [ 458.381267][T15152] dump_stack_lvl+0xe8/0x150 [ 458.381305][T15152] warn_alloc+0x24d/0x270 [ 458.381357][T15152] ? kasan_save_track+0x4f/0x80 [ 458.381381][T15152] ? kasan_save_track+0x3e/0x80 [ 458.381408][T15152] ? __pfx_warn_alloc+0x10/0x10 [ 458.381429][T15152] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 458.381558][T15152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.381602][T15152] __vmalloc_node_range_noprof+0x127/0x1540 [ 458.381662][T15152] ? rcu_is_watching+0x16/0xb0 [ 458.381696][T15152] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 458.381730][T15152] ? __kmalloc_cache_noprof+0x321/0x600 [ 458.381754][T15152] ? __kmalloc_cache_noprof+0x14d/0x600 [ 458.381776][T15152] ? xskq_create+0x56/0x220 [ 458.381852][T15152] xskq_create+0x148/0x220 [ 458.381882][T15152] ? xsk_init_queue+0x8a/0xe0 [ 458.381914][T15152] xsk_init_queue+0x8a/0xe0 [ 458.381951][T15152] xsk_setsockopt+0x52a/0x960 [ 458.381982][T15152] ? __pfx_xsk_setsockopt+0x10/0x10 [ 458.382011][T15152] ? __pfx_aa_sk_perm+0x10/0x10 [ 458.382141][T15152] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 458.382171][T15152] ? __pfx_xsk_setsockopt+0x10/0x10 [ 458.382205][T15152] do_sock_setsockopt+0x17c/0x1b0 [ 458.382237][T15152] __x64_sys_setsockopt+0x13d/0x1b0 [ 458.382273][T15152] do_syscall_64+0x166/0x520 [ 458.382306][T15152] ? trace_irq_disable+0x3b/0x140 [ 458.382329][T15152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.382353][T15152] ? clear_bhb_loop+0x70/0xc0 [ 458.382382][T15152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.382412][T15152] RIP: 0033:0x7f666dd9e159 [ 458.382434][T15152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.382454][T15152] RSP: 002b:00007f666ed11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 458.382479][T15152] RAX: ffffffffffffffda RBX: 00007f666e025fa0 RCX: 00007f666dd9e159 [ 458.382496][T15152] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 458.382510][T15152] RBP: 00007f666de3506b R08: 0000000000000004 R09: 0000000000000000 [ 458.382525][T15152] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.382540][T15152] R13: 00007f666e026038 R14: 00007f666e025fa0 R15: 00007ffe879e6d88 [ 458.382576][T15152] [ 458.382704][T15152] Mem-Info: [ 458.382720][T15152] active_anon:6461 inactive_anon:133 isolated_anon:0 [ 458.382720][T15152] active_file:386 inactive_file:42777 isolated_file:0 [ 458.382720][T15152] unevictable:0 dirty:244 writeback:0 [ 458.382720][T15152] slab_reclaimable:12087 slab_unreclaimable:115399 [ 458.382720][T15152] mapped:40773 shmem:701 pagetables:1339 [ 458.382720][T15152] sec_pagetables:0 bounce:0 [ 458.382720][T15152] kernel_misc_reclaimable:0 [ 458.382720][T15152] free:1284538 free_pcp:6978 free_cma:0 [ 458.382780][T15152] Node 0 active_anon:25844kB inactive_anon:532kB active_file:1544kB inactive_file:170912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163092kB dirty:976kB writeback:0kB shmem:2804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16356kB pagetables:5232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 458.382845][T15152] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 458.382902][T15152] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.382973][T15152] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 458.383018][T15152] Node 0 DMA32 free:1176004kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25844kB inactive_anon:532kB active_file:1544kB inactive_file:170912kB unevictable:0kB writepending:976kB zspages:4kB present:3129332kB managed:2547104kB mlocked:0kB bounce:0kB free_pcp:27912kB local_pcp:21060kB free_cma:0kB [ 458.383088][T15152] lowmem_reserve[]: 0 0 0 0 0 [ 458.383140][T15152] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.383205][T15152] lowmem_reserve[]: 0 0 0 0 0 [ 458.383247][T15152] Node 1 Normal free:3946788kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.383313][T15152] lowmem_reserve[]: 0 0 0 0 0 [ 458.383354][T15152] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 458.383488][T15152] Node 0 DMA32: 572*4kB (UME) 896*8kB (UME) 200*16kB (UM) 77*32kB (UM) 43*64kB (UME) 72*128kB (UM) 62*256kB (UME) 1*512kB (E) 2*1024kB (UM) 10*2048kB (UME) 271*4096kB (UM) = 1176016kB [ 458.383668][T15152] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 458.383929][T15152] Node 1 Normal: 5*4kB (UM) 14*8kB (UM) 6*16kB (UM) 10*32kB (UM) 6*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3946788kB [ 458.384127][T15152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 458.384148][T15152] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 458.384167][T15152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 458.384186][T15152] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 458.384205][T15152] 43860 total pagecache pages [ 458.384225][T15152] 0 pages in swap cache [ 458.384234][T15152] Free swap = 124792kB [ 458.384243][T15152] Total swap = 124996kB [ 458.384253][T15152] 2097051 pages RAM [ 458.384261][T15152] 0 pages HighMem/MovableOnly [ 458.384270][T15152] 428659 pages reserved [ 458.384279][T15152] 0 pages cma reserved [ 459.297378][T15165] netlink: 'syz.0.2193': attribute type 1 has an invalid length. [ 459.297402][T15165] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2193'. [ 460.130568][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 461.003189][T15132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.452741][ T5650] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 461.454123][ T5650] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 461.456398][ T5650] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 461.478456][ T5650] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 461.479150][ T5650] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 462.471394][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2199'. [ 463.355570][T15179] wg2 speed is unknown, defaulting to 1000 [ 463.368482][T15179] lo speed is unknown, defaulting to 1000 [ 463.570303][ T52] Bluetooth: hci7: command tx timeout [ 464.026558][T15232] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 464.056325][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2210'. [ 464.106181][T15235] openvswitch: netlink: IPv4 tunnel dst address is zero [ 464.368995][T15246] bond1: option ad_select: invalid value (34) [ 464.380156][T15251] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2212'. [ 464.382889][T15246] bond1 (unregistering): Released all slaves [ 464.485878][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 464.485904][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2214'. [ 464.487063][T15253] syzkaller1: entered promiscuous mode [ 464.487079][T15253] syzkaller1: entered allmulticast mode [ 464.537950][T15259] netlink: 'syz.4.2214': attribute type 4 has an invalid length. [ 464.537975][T15259] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2214'. [ 464.789212][T15257] wg2 speed is unknown, defaulting to 1000 [ 464.876479][T15257] lo speed is unknown, defaulting to 1000 [ 464.995046][T15179] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.996092][T15179] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.996254][T15179] bridge_slave_0: entered allmulticast mode [ 465.023975][T15179] bridge_slave_0: entered promiscuous mode [ 465.042090][T15179] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.042286][T15179] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.042440][T15179] bridge_slave_1: entered allmulticast mode [ 465.049035][T15179] bridge_slave_1: entered promiscuous mode [ 465.141310][T15179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.145323][T15179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.316791][T15272] bond1: entered promiscuous mode [ 465.316816][T15272] bond1: entered allmulticast mode [ 465.457848][T15179] team0: Port device team_slave_0 added [ 465.496967][T15179] team0: Port device team_slave_1 added [ 465.645173][T15179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.645193][T15179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.646827][T15179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.653004][ T52] Bluetooth: hci7: command tx timeout [ 465.693345][T15287] netlink: 'syz.0.2221': attribute type 2 has an invalid length. [ 465.717058][T15179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.717076][T15179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.717114][T15179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.993922][T15179] hsr_slave_0: entered promiscuous mode [ 465.998430][T15179] hsr_slave_1: entered promiscuous mode [ 466.015392][T15179] debugfs: 'hsr0' already exists in 'hsr' [ 466.015427][T15179] Cannot create hsr debugfs directory [ 466.590650][T15179] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 466.595551][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.596785][T15179] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 466.612571][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.615295][T15179] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 466.665125][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.669053][T15179] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 466.697881][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.917620][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 466.978908][T15179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.993768][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2230'. [ 467.064058][T15179] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.084640][T12020] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.084754][T12020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.134563][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.134679][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.487418][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2233'. [ 467.729808][ T52] Bluetooth: hci7: command tx timeout [ 467.809576][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 467.957559][T15351] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2236'. [ 467.993514][T15345] tipc: Enabling of bearer rejected, failed to enable media [ 468.820197][T15179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.525986][T15179] veth0_vlan: entered promiscuous mode [ 469.554175][T15179] veth1_vlan: entered promiscuous mode [ 469.589226][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'. [ 469.721890][T15179] veth0_macvtap: entered promiscuous mode [ 469.748554][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'. [ 469.749093][T15179] veth1_macvtap: entered promiscuous mode [ 469.810782][ T52] Bluetooth: hci7: command tx timeout [ 469.818775][T15179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.903197][T15179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.011695][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.012057][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.012098][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.012135][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.365298][T12020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.365322][T12020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.455920][T12018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.455945][T12018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.557358][T15453] x_tables: duplicate underflow at hook 1 [ 470.644765][T15457] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2194'. [ 470.664898][T15453] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 471.012196][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 471.780724][T15493] netlink: 'syz.6.2265': attribute type 6 has an invalid length. [ 471.941317][T15497] caif0: tun_chr_ioctl cmd 2147767507 [ 472.034051][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2268'. [ 472.034280][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2268'. [ 472.034486][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2268'. [ 472.034681][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2268'. [ 472.034875][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2268'. [ 472.135767][T15502] netlink: 'syz.7.2268': attribute type 3 has an invalid length. [ 472.879099][T15528] netlink: 'syz.1.2274': attribute type 1 has an invalid length. [ 472.909021][T15531] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.920071][T15531] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.983140][T15531] bond1: left promiscuous mode [ 473.095389][T15533] netlink: 'syz.4.2273': attribute type 1 has an invalid length. [ 473.135888][T15542] x_tables: duplicate underflow at hook 1 [ 473.155675][T15530] __nla_validate_parse: 4 callbacks suppressed [ 473.155701][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2276'. [ 473.187385][T15545] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2279'. [ 473.226380][T15545] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2279'. [ 473.265005][T15548] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 473.282068][T15548] netlink: 6028 bytes leftover after parsing attributes in process `syz.6.2280'. [ 473.592650][T15562] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.595371][T15563] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 473.968726][T15577] syzkaller0: entered promiscuous mode [ 473.968754][T15577] syzkaller0: entered allmulticast mode [ 474.001919][T15577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2289'. [ 474.339174][T15596] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2294'. [ 474.412195][T15587] wg2 speed is unknown, defaulting to 1000 [ 474.427554][T15587] lo speed is unknown, defaulting to 1000 [ 474.601987][T15579] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 474.678618][T15604] s: renamed from veth0 [ 474.756151][T15605] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 475.135860][T15605] bond12: entered promiscuous mode [ 475.135947][T15605] bond12: entered allmulticast mode [ 475.136395][T15605] 8021q: adding VLAN 0 to HW filter on device bond12 [ 476.288437][T15649] xt_l2tp: invalid flags combination: 8 [ 476.525869][ T9565] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3 [ 476.541064][ T9565] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22 [ 476.579509][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2311'. [ 476.807911][T15664] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 476.807931][T15664] bridge1: entered allmulticast mode [ 476.886806][T15669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2312'. [ 477.686910][T15695] x_tables: duplicate entry at hook 4 [ 477.702649][T15695] netlink: Conntrack attr has 4 unknown bytes [ 478.034427][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2324'. [ 478.036254][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2324'. [ 478.737474][T15717] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2331'. [ 479.705358][T15659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.934332][T15723] Bluetooth: hci0: unsupported parameter 5135 [ 479.934362][T15723] Bluetooth: hci0: unsupported parameter 8192 [ 479.934377][T15723] Bluetooth: hci0: unsupported parameter 5135 [ 479.934391][T15723] Bluetooth: hci0: unsupported parameter 8192 [ 480.167955][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 480.196676][T15734] netlink: 'syz.0.2335': attribute type 12 has an invalid length. [ 480.225549][T15743] xt_connbytes: Forcing CT accounting to be enabled [ 480.413200][T15751] wg2 speed is unknown, defaulting to 1000 [ 480.415508][T15751] lo speed is unknown, defaulting to 1000 [ 481.055844][T15770] netlink: 'syz.1.2344': attribute type 1 has an invalid length. [ 481.267662][T15776] netlink: 'syz.1.2344': attribute type 12 has an invalid length. [ 481.267688][T15776] netlink: 'syz.1.2344': attribute type 29 has an invalid length. [ 481.267705][T15776] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2344'. [ 481.267726][T15776] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2344'. [ 481.312929][T15770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2344'. [ 481.375779][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2344'. [ 481.377676][T15770] 8021q: adding VLAN 0 to HW filter on device bond22 [ 481.963736][T15803] netlink: 'syz.1.2348': attribute type 1 has an invalid length. [ 482.147187][T15818] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2350'. [ 482.216304][T15803] 8021q: adding VLAN 0 to HW filter on device bond24 [ 482.243642][T15807] bond24: entered promiscuous mode [ 482.243671][T15807] bond24: entered allmulticast mode [ 482.317761][T15804] bond21: (slave veth0_to_bond): Releasing active interface [ 482.339766][T15804] bond24: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 482.784777][T15836] xt_esp: unknown flags DD [ 482.786159][T15831] netlink: 'syz.7.2353': attribute type 32 has an invalid length. [ 482.807448][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2355'. [ 482.807552][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2355'. [ 482.807645][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2355'. [ 483.072660][T15851] netlink: 'syz.0.2356': attribute type 1 has an invalid length. [ 483.126450][T15851] netlink: 'syz.0.2356': attribute type 1 has an invalid length. [ 483.180432][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 484.574120][T15908] __nla_validate_parse: 32 callbacks suppressed [ 484.574144][T15908] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2366'. [ 484.903406][T15917] netlink: 'syz.1.2367': attribute type 8 has an invalid length. [ 485.032252][T15926] netlink: 'syz.1.2370': attribute type 5 has an invalid length. [ 485.278519][T15934] macvlan0: entered promiscuous mode [ 485.285334][T15934] netlink: 'syz.4.2372': attribute type 1 has an invalid length. [ 485.285361][T15934] netlink: 'syz.4.2372': attribute type 2 has an invalid length. [ 485.679221][T15951] netlink: zone id is out of range [ 485.679242][T15951] netlink: zone id is out of range [ 485.679252][T15951] netlink: zone id is out of range [ 485.679260][T15951] netlink: zone id is out of range [ 485.679269][T15951] netlink: zone id is out of range [ 485.679278][T15951] netlink: zone id is out of range [ 485.679292][T15951] netlink: zone id is out of range [ 485.718502][T15951] netlink: zone id is out of range [ 485.718519][T15951] netlink: zone id is out of range [ 485.718527][T15951] netlink: zone id is out of range [ 485.831184][T15957] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 485.834692][T15940] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 486.038144][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 486.038381][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 486.040806][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 486.040883][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 486.045281][T15963] netlink: 'syz.1.2379': attribute type 1 has an invalid length. [ 486.146931][T15963] bond25: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 486.172454][T15970] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 486.173889][T15963] bond25 (unregistering): Released all slaves [ 487.015510][T16005] netlink: 'syz.4.2386': attribute type 5 has an invalid length. [ 487.233294][T16011] netlink: 'syz.0.2387': attribute type 6 has an invalid length. [ 487.233576][T16011] netlink: 'syz.0.2387': attribute type 6 has an invalid length. [ 487.233815][T16011] netlink: 'syz.0.2387': attribute type 6 has an invalid length. [ 487.234041][T16011] netlink: 'syz.0.2387': attribute type 6 has an invalid length. [ 487.234258][T16011] netlink: 'syz.0.2387': attribute type 6 has an invalid length. [ 487.418836][T16023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2391'. [ 487.450186][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2392'. [ 487.646319][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2394'. [ 487.742267][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2397'. [ 488.272726][T16062] IPVS: Scheduler module ip_vs_mh not found [ 488.311339][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2404'. [ 488.396070][T16070] erspan0: left promiscuous mode [ 488.429216][T16070] macsec1: left allmulticast mode [ 488.429795][T16070] bond6: left promiscuous mode [ 488.429817][T16070] bridge7: left promiscuous mode [ 488.431358][T16070] veth5: left allmulticast mode [ 488.431970][T16070] bond10: left promiscuous mode [ 488.432113][T16070] bond11: left promiscuous mode [ 488.432248][T16070] bond12: left promiscuous mode [ 488.432416][T16070] bond13: left promiscuous mode [ 488.432548][T16070] bond14: left promiscuous mode [ 488.432783][T16070] bond15: left promiscuous mode [ 488.432916][T16070] bond16: left promiscuous mode [ 488.433454][T16070] bond18: left promiscuous mode [ 488.433473][T16070] xfrm1: left promiscuous mode [ 488.434647][T16070] bond20: left promiscuous mode [ 488.434669][T16070] bridge10: left promiscuous mode [ 488.435090][T16070] ip6gre2: left promiscuous mode [ 488.435107][T16070] ip6gre2: left allmulticast mode [ 488.435366][T16070] bridge11: left allmulticast mode [ 488.737946][T16070] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 488.737983][T16070] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 488.807639][T16070] batman_adv: batadv0: Interface deactivated: macvlan2 [ 488.873962][T16070] veth9: left allmulticast mode [ 488.903406][T16070] bond24: left promiscuous mode [ 488.903440][T16070] bond24: left allmulticast mode [ 488.977614][T16085] xt_TCPMSS: Only works on TCP SYN packets [ 489.065916][ T31] audit: type=1800 audit(1790989816.127:12): pid=16082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2407" name="memory.events" dev="tmpfs" ino=2673 res=0 errno=0 [ 489.191190][T16085] bridge_slave_1: left allmulticast mode [ 489.191222][T16085] bridge_slave_1: left promiscuous mode [ 489.191491][T16085] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.247268][T16085] bridge_slave_0: left allmulticast mode [ 489.247303][T16085] bridge_slave_0: left promiscuous mode [ 489.250649][T16085] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.342250][ T5650] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 489.357712][ T5650] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 489.370956][ T5650] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 489.372030][ T5650] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 489.372827][ T5650] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 489.902869][T16115] __nla_validate_parse: 5 callbacks suppressed [ 489.902894][T16115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2415'. [ 489.950848][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2416'. [ 490.659711][T16115] bond25: entered allmulticast mode [ 490.925626][T16131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2417'. [ 490.990894][T16133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2418'. [ 491.027453][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'. [ 491.028714][T16091] wg2 speed is unknown, defaulting to 1000 [ 491.047781][T16091] lo speed is unknown, defaulting to 1000 [ 491.128599][T16142] net_ratelimit: 1004 callbacks suppressed [ 491.128623][T16142] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 491.503443][ T5650] Bluetooth: hci8: command tx timeout [ 491.743492][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2421'. [ 492.295383][T16167] validate_nla: 30 callbacks suppressed [ 492.295409][T16167] netlink: 'syz.7.2426': attribute type 4 has an invalid length. [ 492.317831][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2426'. [ 492.364442][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 492.467699][T16170] can: request_module (can-proto-0) failed. [ 492.574040][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'. [ 492.575996][T16188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2431'. [ 492.668431][T16190] tipc: Enabling of bearer rejected, failed to enable media [ 492.775061][T16196] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input6 [ 493.344841][T16091] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.349704][T16091] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.353049][T16091] bridge_slave_0: entered allmulticast mode [ 493.373859][T16091] bridge_slave_0: entered promiscuous mode [ 493.400604][T16091] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.402563][T16091] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.402729][T16091] bridge_slave_1: entered allmulticast mode [ 493.438260][T16091] bridge_slave_1: entered promiscuous mode [ 493.476659][T16194] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 493.569820][ T5650] Bluetooth: hci8: command tx timeout [ 493.666121][T16091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.692510][T16091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.697365][T16220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.916195][T16091] team0: Port device team_slave_0 added [ 493.941133][T16091] team0: Port device team_slave_1 added [ 494.069280][T16091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.069855][T16091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.069888][T16091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.081529][T16228] Cannot find set identified by id 65535 to match [ 494.157465][T16091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.157486][T16091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.157518][T16091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.350547][T16091] hsr_slave_0: entered promiscuous mode [ 494.352785][T16091] hsr_slave_1: entered promiscuous mode [ 494.353602][T16091] debugfs: 'hsr0' already exists in 'hsr' [ 494.353623][T16091] Cannot create hsr debugfs directory [ 494.598265][T16242] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 494.806208][T16091] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 494.826916][T16091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.837019][T16091] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 494.863350][T16091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.864383][T16091] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 494.888703][T16091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.049187][T16254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.070458][T16254] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 495.072275][T16091] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 495.114139][T16091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.134450][T16268] netlink: 'syz.4.2449': attribute type 3 has an invalid length. [ 495.134699][T16268] netlink: 'syz.4.2449': attribute type 3 has an invalid length. [ 495.182351][T16269] netlink: 'syz.4.2449': attribute type 3 has an invalid length. [ 495.182516][T16269] netlink: 'syz.4.2449': attribute type 3 has an invalid length. [ 495.302633][T16282] netlink: 'syz.1.2453': attribute type 1 has an invalid length. [ 495.396336][T16282] bond26: entered promiscuous mode [ 495.397503][T16282] 8021q: adding VLAN 0 to HW filter on device bond26 [ 495.419022][T16282] __nla_validate_parse: 10 callbacks suppressed [ 495.419051][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 495.526356][T16292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2453'. [ 495.527520][T16282] 8021q: adding VLAN 0 to HW filter on device bond26 [ 495.527873][T16282] bond26: (slave wireguard0): The slave device specified does not support setting the MAC address [ 495.527890][T16282] bond26: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 495.604107][T16282] bond26: (slave wireguard0): making interface the new active one [ 495.604144][T16282] wireguard0: entered promiscuous mode [ 495.606668][T16282] bond26: (slave wireguard0): Enslaving as an active interface with an up link [ 495.652646][ T5650] Bluetooth: hci8: command tx timeout [ 495.717638][T16091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.772316][T16091] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.772603][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'. [ 495.802396][T12015] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.802495][T12015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.833416][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.833533][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.276392][T16308] xt_policy: output policy not valid in PREROUTING and INPUT [ 497.060162][T16330] netlink: 'syz.4.2461': attribute type 83 has an invalid length. [ 497.061158][T16330] netlink: 'syz.4.2461': attribute type 83 has an invalid length. [ 497.061409][T16330] netlink: 'syz.4.2461': attribute type 83 has an invalid length. [ 497.061676][T16330] netlink: 'syz.4.2461': attribute type 83 has an invalid length. [ 497.112038][T16091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.277931][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 497.546761][T16341] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2464'. [ 497.546789][T16341] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2464'. [ 497.547027][T16341] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2464'. [ 497.547046][T16341] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2464'. [ 497.547267][T16341] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2464'. [ 497.547285][T16341] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2464'. [ 497.740145][ T5650] Bluetooth: hci8: command tx timeout [ 498.423394][T16091] veth0_vlan: entered promiscuous mode [ 498.471047][T16091] veth1_vlan: entered promiscuous mode [ 498.527822][T16091] veth0_macvtap: entered promiscuous mode [ 498.571522][T16091] veth1_macvtap: entered promiscuous mode [ 498.663655][T16091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.712537][T16091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.892708][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.893589][T12018] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.893642][T12018] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.893681][T12018] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.992910][T16384] ip6t_rt: too many addresses specified [ 499.237931][T12011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.237957][T12011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.457154][T16402] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 499.478344][T16402] bond6 (unregistering): Released all slaves [ 499.606876][T16409] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 499.606907][T16409] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 499.765262][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.765286][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.007175][T16426] x_tables: duplicate underflow at hook 1 [ 500.330587][T16444] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 500.452510][T16451] syzkaller1: entered promiscuous mode [ 500.452536][T16451] syzkaller1: entered allmulticast mode [ 500.455080][T16451] vcan0: tx drop: invalid da for name 0x00000000000000fe [ 500.917491][T16473] ip_tables: iptables: counters copy to user failed while replacing table [ 501.856799][T16489] validate_nla: 29 callbacks suppressed [ 501.856826][T16489] netlink: 'syz.7.2493': attribute type 1 has an invalid length. [ 501.926447][T16489] netlink: 'syz.7.2493': attribute type 1 has an invalid length. [ 502.006949][T16499] __nla_validate_parse: 88 callbacks suppressed [ 502.006975][T16499] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2495'. [ 502.020119][T16500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2497'. [ 502.133171][T16506] x_tables: duplicate underflow at hook 1 [ 502.155149][T16505] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2493'. [ 502.185410][T16501] bond1: (slave veth3): Enslaving as an active interface with a down link [ 502.316099][T16489] bond1: (slave veth5): Enslaving as an active interface with a down link [ 502.472665][T16525] syzkaller0: entered promiscuous mode [ 502.472690][T16525] syzkaller0: entered allmulticast mode [ 502.492004][T16526] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2501'. [ 502.581261][ T13] IPVS: starting estimator thread 0... [ 502.583447][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2503'. [ 502.671067][T16528] IPVS: using max 26 ests per chain, 62400 per kthread [ 502.950748][T16538] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2505'. [ 502.958923][T16539] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2505'. [ 503.072898][T16546] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2506'. [ 503.072929][T16546] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2506'. [ 503.208839][T16553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2511'. [ 504.431773][T16614] xt_hashlimit: invalid interval [ 505.760552][T16663] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 506.346955][T16684] lo: entered promiscuous mode [ 506.346980][T16684] lo: entered allmulticast mode [ 506.373106][T16684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.813501][T16705] ip_tables: iptables: counters copy to user failed while replacing table [ 507.142279][T16714] __nla_validate_parse: 18 callbacks suppressed [ 507.142306][T16714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2549'. [ 507.199945][ T31] audit: type=1800 audit(1790989834.257:13): pid=16713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2550" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2958 res=0 errno=0 [ 507.418321][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 507.513429][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 507.692988][T16731] openvswitch: netlink: Message has 8 unknown bytes. [ 507.871725][T16741] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2558'. [ 507.871772][T16741] netlink: 'syz.1.2558': attribute type 3 has an invalid length. [ 507.871898][T16741] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2558'. [ 507.871928][T16741] netlink: 'syz.1.2558': attribute type 3 has an invalid length. [ 507.872039][T16741] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2558'. [ 507.872060][T16741] netlink: 'syz.1.2558': attribute type 3 has an invalid length. [ 507.872182][T16741] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2558'. [ 507.872203][T16741] netlink: 'syz.1.2558': attribute type 3 has an invalid length. [ 507.934728][T16741] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2558'. [ 507.934830][T16741] netlink: 'syz.1.2558': attribute type 3 has an invalid length. [ 507.935154][T16741] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2558'. [ 507.935208][T16741] netlink: 'syz.1.2558': attribute type 3 has an invalid length. [ 507.979198][T16741] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2558'. [ 508.003652][T16741] netlink: 'syz.1.2558': attribute type 3 has an invalid length. [ 508.003836][T16741] netlink: 'syz.1.2558': attribute type 3 has an invalid length. [ 508.003981][T16741] netlink: 'syz.1.2558': attribute type 3 has an invalid length. [ 508.004106][T16741] netlink: 'syz.1.2558': attribute type 3 has an invalid length. [ 508.571288][T16756] x_tables: duplicate underflow at hook 1 [ 508.856394][T16774] netlink: 'syz.8.2564': attribute type 11 has an invalid length. [ 508.944509][T16760] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 509.056231][T16782] lo: left promiscuous mode [ 509.056265][T16782] lo: left allmulticast mode [ 509.375732][T16782] macvlan0: left promiscuous mode [ 509.431927][T16782] bond2: left allmulticast mode [ 509.435758][T16782] geneve2: left promiscuous mode [ 509.438401][T16782] bond3: left promiscuous mode [ 509.438541][T16782] bridge1: left promiscuous mode [ 509.494338][T16782] geneve3: left promiscuous mode [ 509.518849][T16782] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 509.624909][T16788] macvtap0: entered promiscuous mode [ 509.639913][T16790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.025064][T16817] IPVS: set_ctl: invalid protocol: 253 0.0.0.0:20002 [ 510.094146][T16817] wg2 speed is unknown, defaulting to 1000 [ 510.113275][T16817] lo speed is unknown, defaulting to 1000 [ 513.276640][T16920] __nla_validate_parse: 34 callbacks suppressed [ 513.276660][T16920] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2597'. [ 513.947239][T16934] wg2 speed is unknown, defaulting to 1000 [ 513.958169][T16934] lo speed is unknown, defaulting to 1000 [ 514.116163][T16941] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 514.155259][T16941] gre1: entered allmulticast mode [ 515.204521][T16962] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2604'. [ 515.574166][T16983] validate_nla: 32 callbacks suppressed [ 515.574187][T16983] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 515.684054][T16983] 8021q: adding VLAN 0 to HW filter on device bond6 [ 515.809608][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 516.268823][T16982] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2610'. [ 516.966087][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2617'. [ 519.076472][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2629'. [ 519.112008][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2629'. [ 519.507818][T17080] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 519.507818][T17080] Please contact the netfilter-devel mailing list or update your nftables rules. [ 519.582306][T17081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.582904][T17080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.907364][T17091] netlink: 'syz.7.2633': attribute type 1 has an invalid length. [ 519.966902][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2633'. [ 520.022071][ T9576] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 520.086660][T17091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.163003][T17096] bond2: (slave bridge2): making interface the new active one [ 520.186870][T17096] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 520.519588][T11333] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 520.775976][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2642'. [ 520.776022][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2642'. [ 520.807920][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 520.976243][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 520.995838][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 521.009073][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 521.020707][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 521.021370][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 521.144994][T17140] netlink: 'syz.4.2646': attribute type 1 has an invalid length. [ 521.191809][T17140] bond7: entered promiscuous mode [ 521.195120][T17140] 8021q: adding VLAN 0 to HW filter on device bond7 [ 521.263927][T17140] netlink: 'syz.4.2646': attribute type 1 has an invalid length. [ 521.556766][T17153] ip_tables: iptables: counters copy to user failed while replacing table [ 521.593489][T17153] tipc: New replicast peer: 172.20.20.187 [ 521.598270][T17153] tipc: Enabled bearer , priority 26 [ 521.707606][T17158] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.2650'. [ 521.769097][T17165] atomic_op ffff88805055a9e0 conn xmit_atomic 0000000000000000 [ 521.782383][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2652'. [ 521.893506][T17132] wg2 speed is unknown, defaulting to 1000 [ 521.897443][T17132] lo speed is unknown, defaulting to 1000 [ 522.662219][T17185] tipc: Started in network mode [ 522.662276][T17185] tipc: Node identity 52662a137728, cluster identity 4711 [ 522.662443][T17185] tipc: Enabled bearer , priority 0 [ 522.719095][T11333] tipc: Node number set to 3954899271 [ 522.898694][T17184] tipc: Disabling bearer [ 523.089594][ T52] Bluetooth: hci9: command tx timeout [ 523.098288][T17132] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.098488][T17132] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.098669][T17132] bridge_slave_0: entered allmulticast mode [ 523.130027][T17132] bridge_slave_0: entered promiscuous mode [ 523.141648][T17132] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.141853][T17132] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.142032][T17132] bridge_slave_1: entered allmulticast mode [ 523.143993][T17132] bridge_slave_1: entered promiscuous mode [ 523.208562][T17132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.223559][T17132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.270037][T17132] team0: Port device team_slave_0 added [ 523.273247][T17132] team0: Port device team_slave_1 added [ 523.336308][T17132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.336328][T17132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.336358][T17132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.338824][T17132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.338841][T17132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.338870][T17132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.438228][T17209] netlink: 'syz.7.2664': attribute type 2 has an invalid length. [ 523.438251][T17209] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2664'. [ 523.514813][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2662'. [ 523.619519][T17205] netlink: 'syz.8.2662': attribute type 10 has an invalid length. [ 523.751598][T17205] team0 (unregistering): Port device team_slave_0 removed [ 523.874674][T17219] IPv6: NLM_F_CREATE should be specified when creating new route [ 523.874782][T17219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.874794][T17219] IPv6: NLM_F_CREATE should be set when creating new route [ 523.874844][T17219] IPv6: NLM_F_CREATE should be set when creating new route [ 523.874871][T17219] IPv6: NLM_F_CREATE should be set when creating new route [ 524.132938][ T5650] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 524.153776][ T5650] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 524.163612][ T5650] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 524.178128][T17224] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 524.187615][T17224] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 524.401343][T17205] team0 (unregistering): Port device team_slave_1 removed [ 524.423429][T17132] hsr_slave_0: entered promiscuous mode [ 524.424368][T17132] hsr_slave_1: entered promiscuous mode [ 524.425014][T17132] debugfs: 'hsr0' already exists in 'hsr' [ 524.425037][T17132] Cannot create hsr debugfs directory [ 524.433477][T17207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.716230][T17230] ip_tables: iptables: counters copy to user failed while replacing table [ 524.782955][T17232] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2668'. [ 524.811533][T17235] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2667'. [ 524.855556][T17230] bridge0: port 1(syz_tun) entered disabled state [ 524.867299][T17230] bridge0: port 2(team0) entered disabled state [ 524.888434][T17237] netlink: 'syz.4.2669': attribute type 16 has an invalid length. [ 524.888460][T17237] netlink: 'syz.4.2669': attribute type 17 has an invalid length. [ 524.990588][ T25] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 525.166117][T17237] bridge0: port 1(syz_tun) entered blocking state [ 525.166362][T17237] bridge0: port 1(syz_tun) entered forwarding state [ 525.179133][T17224] Bluetooth: hci9: command tx timeout [ 525.389698][ T25] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 525.403058][T17250] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2670'. [ 525.403140][T17250] netlink: 356 bytes leftover after parsing attributes in process `syz.7.2670'. [ 525.403181][T17250] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2670'. [ 525.532422][T17237] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 525.562975][T12023] bridge0: port 2(team0) entered blocking state [ 525.563098][T12023] bridge0: port 2(team0) entered forwarding state [ 525.579856][T17250] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2670'. [ 526.097185][T17222] wg2 speed is unknown, defaulting to 1000 [ 526.122431][T17222] lo speed is unknown, defaulting to 1000 [ 526.246056][ T31] audit: type=1804 audit(1790989853.307:14): pid=17264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2675" name="/newroot/581/cgroup.controllers" dev="tmpfs" ino=3003 res=1 errno=0 [ 526.246356][ T31] audit: type=1800 audit(1790989853.307:15): pid=17264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2675" name="cgroup.controllers" dev="tmpfs" ino=3003 res=0 errno=0 [ 526.295255][T17224] Bluetooth: hci10: command tx timeout [ 526.574265][T17270] netlink: 'syz.8.2677': attribute type 23 has an invalid length. [ 526.574297][T17270] netlink: 'syz.8.2677': attribute type 11 has an invalid length. [ 526.575640][T17270] netlink: 'syz.8.2677': attribute type 23 has an invalid length. [ 526.575662][T17270] netlink: 'syz.8.2677': attribute type 11 has an invalid length. [ 526.679827][T17132] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 526.692712][T17132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.709570][T17132] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 526.767631][T17132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.768734][T17132] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 526.818122][T17132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.819204][T17132] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 526.868390][T17132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.097677][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2681'. [ 527.097706][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2681'. [ 527.097740][T17283] netlink: 'syz.7.2681': attribute type 12 has an invalid length. [ 527.144711][T17290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2683'. [ 527.160355][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2681'. [ 527.160396][T17283] netlink: 'syz.7.2681': attribute type 12 has an invalid length. [ 527.185991][T17288] tap0: tun_chr_ioctl cmd 1074025692 [ 527.249927][T17224] Bluetooth: hci9: command tx timeout [ 527.310620][T12011] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.310860][T17295] macsec0: entered promiscuous mode [ 527.311386][T12011] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.311433][T12011] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.315674][T17295] veth1_macvtap: left promiscuous mode [ 527.389667][T17295] macsec0 (unregistering): left promiscuous mode [ 527.452132][T12018] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.542636][T17293] syzkaller0: entered promiscuous mode [ 527.542656][T17293] syzkaller0: entered allmulticast mode [ 527.748179][T17132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.867698][T17132] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.967693][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.967806][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.100742][T12023] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.100857][T12023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.248603][T17324] netlink: 'syz.8.2693': attribute type 1 has an invalid length. [ 528.313875][T17324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.364312][T17317] netlink: 'syz.7.2690': attribute type 1 has an invalid length. [ 528.379954][T17224] Bluetooth: hci10: command tx timeout [ 528.403672][T17313] only policy match revision 0 supported [ 528.403689][T17313] unable to load match [ 528.404861][T17329] batadv0: entered promiscuous mode [ 528.486672][T17222] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.488487][T17222] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.488651][T17222] bridge_slave_0: entered allmulticast mode [ 528.513813][T17222] bridge_slave_0: entered promiscuous mode [ 528.547810][T17222] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.548017][T17222] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.548185][T17222] bridge_slave_1: entered allmulticast mode [ 528.571433][T17222] bridge_slave_1: entered promiscuous mode [ 528.651192][T17222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.655480][T17222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.742373][T17222] team0: Port device team_slave_0 added [ 528.746253][T17222] team0: Port device team_slave_1 added [ 528.821588][T17222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.821610][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.821642][T17222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.827510][T17222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.827529][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.827566][T17222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.297075][T17222] hsr_slave_0: entered promiscuous mode [ 529.298221][T17222] hsr_slave_1: entered promiscuous mode [ 529.299060][T17222] debugfs: 'hsr0' already exists in 'hsr' [ 529.299081][T17222] Cannot create hsr debugfs directory [ 529.330067][T17224] Bluetooth: hci9: command tx timeout [ 529.516997][T17353] ip_tables: iptables: counters copy to user failed while replacing table [ 530.387989][T12020] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 530.436503][T17222] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.436547][T17222] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.452009][T17224] Bluetooth: hci10: command tx timeout [ 530.485803][T17370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.527916][T17370] ip_tables: iptables: counters copy to user failed while replacing table [ 530.610945][T17222] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.610991][T17222] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.871041][T17222] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.871092][T17222] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.170886][T17132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.316573][T17222] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.316617][T17222] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.695889][T17411] __nla_validate_parse: 3 callbacks suppressed [ 531.695913][T17411] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2708'. [ 531.845005][T17419] ip_tables: iptables: counters copy to user failed while replacing table [ 531.857006][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2709'. [ 531.877280][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2709'. [ 532.098839][T17422] debugfs: 'netdev:syzkaller0' already exists in 'phy8' [ 532.143288][T17222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 532.175957][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 532.185536][T17222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 532.222155][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.223621][T17222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 532.261122][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.262255][T17222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 532.321551][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.481304][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2711'. [ 532.529427][T17224] Bluetooth: hci10: command tx timeout [ 532.684115][T17132] veth0_vlan: entered promiscuous mode [ 532.696375][T17222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.770851][T17132] veth1_vlan: entered promiscuous mode [ 532.895133][T17450] sit4: entered promiscuous mode [ 532.955428][T17222] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.005152][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.005275][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.072192][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.072304][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.266367][T17462] netlink: 'syz.8.2716': attribute type 2 has an invalid length. [ 533.266397][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2716'. [ 533.342387][T17132] veth0_macvtap: entered promiscuous mode [ 533.356801][T17132] veth1_macvtap: entered promiscuous mode [ 533.582417][T17132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.634874][T17469] wg2 speed is unknown, defaulting to 1000 [ 533.648480][T17469] lo speed is unknown, defaulting to 1000 [ 533.676820][T17132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.760635][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.761727][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.762022][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.875532][T12013] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.634118][T12023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.634149][T12023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.780678][T17491] bridge1: entered allmulticast mode [ 534.947620][T12018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.947667][T12018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.502765][T17516] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2641'. [ 536.099717][T17222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.212130][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2728'. [ 536.212167][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2728'. [ 536.277562][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2728'. [ 536.277591][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2728'. [ 536.416134][T17222] veth0_vlan: entered promiscuous mode [ 536.436567][T17222] veth1_vlan: entered promiscuous mode [ 536.853212][T17535] vlan3: entered promiscuous mode [ 536.853251][T17535] bridge0: entered promiscuous mode [ 536.947537][T17222] veth0_macvtap: entered promiscuous mode [ 536.966152][T17222] veth1_macvtap: entered promiscuous mode [ 536.978971][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2732'. [ 537.039880][T17222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.075624][T17222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.194071][T17544] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2734'. [ 537.230473][T12020] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.266479][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.277182][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.320283][T10664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.323556][T17550] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2737'. [ 537.403324][T17552] sch_fq: defrate 4294967293 ignored. [ 537.416587][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2736'. [ 537.416753][T17552] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2736'. [ 537.440130][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2736'. [ 537.440224][T17552] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2736'. [ 537.502611][T17548] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 537.610814][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.610838][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.725256][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.725279][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.990133][T17567] netlink: 'syz.9.2740': attribute type 1 has an invalid length. [ 537.990155][T17567] netlink: 228 bytes leftover after parsing attributes in process `syz.9.2740'. [ 538.076801][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2665'. [ 538.160324][T17572] vlan2: entered allmulticast mode [ 538.160357][T17572] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 538.160769][T17572] bridge0: port 3(vlan2) entered blocking state [ 538.160885][T17572] bridge0: port 3(vlan2) entered disabled state [ 538.228442][T17572] vlan2: entered promiscuous mode [ 538.228473][T17572] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 538.332458][T17569] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.438038][T17569] bridge_slave_0 (unregistering): left allmulticast mode [ 538.438074][T17569] bridge_slave_0 (unregistering): left promiscuous mode [ 538.462368][T17569] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.628664][T17572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2665'. [ 538.775423][T17591] 8021q: VLANs not supported on vxcan1 [ 539.224093][T17607] syzkaller0: entered promiscuous mode [ 539.224122][T17607] syzkaller0: entered allmulticast mode [ 539.834431][ T31] audit: type=1804 audit(1790989866.897:16): pid=17636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2756" name="/newroot/140/cgroup.controllers" dev="tmpfs" ino=734 res=1 errno=0 [ 539.835996][ T31] audit: type=1800 audit(1790989866.897:17): pid=17636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2756" name="cgroup.controllers" dev="tmpfs" ino=734 res=0 errno=0 [ 540.039390][T17638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.043601][T17638] team0: Port device bond1 added [ 540.296603][T12011] IPVS: starting estimator thread 0... [ 540.379906][T17655] IPVS: using max 24 ests per chain, 57600 per kthread [ 540.992705][T17676] ipt_ah: unknown flags FF [ 541.351954][T12508] IPVS: starting estimator thread 0... [ 541.372933][T17687] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 541.401219][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 541.412619][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 541.418296][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 541.440717][T17689] IPVS: using max 29 ests per chain, 69600 per kthread [ 541.440968][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 541.447232][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 541.618680][T17693] xt_TPROXY: Can be used only with -p tcp or -p udp [ 542.219746][ T5653] bridge0: port 1(syz_tun) entered disabled state [ 542.295558][ T5653] syz_tun (unregistering): left allmulticast mode [ 542.295588][ T5653] syz_tun (unregistering): left promiscuous mode [ 542.297169][ T5653] bridge0: port 1(syz_tun) entered disabled state [ 542.512390][T17720] netlink: 'syz.7.2776': attribute type 10 has an invalid length. [ 542.793533][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.793574][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 542.793603][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 542.793632][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.067244][T17720] team0 (unregistering): Port device team_slave_0 removed [ 543.176745][T17720] team0 (unregistering): Port device team_slave_1 removed [ 543.445548][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.445589][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 543.445619][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 543.445647][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.523734][T17748] netlink: 'syz.8.2781': attribute type 2 has an invalid length. [ 543.527589][T17748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.569532][T17224] Bluetooth: hci11: command tx timeout [ 543.577327][T17685] wg2 speed is unknown, defaulting to 1000 [ 543.607672][T17685] lo speed is unknown, defaulting to 1000 [ 543.765221][T17753] __nla_validate_parse: 10 callbacks suppressed [ 543.765249][T17753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2783'. [ 543.793934][T17755] ipt_REJECT: TCP_RESET invalid for non-tcp [ 543.875051][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.875080][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 543.875101][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 543.875122][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.979078][T17755] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2784'. [ 544.303898][T12016] IPVS: starting estimator thread 0... [ 544.389553][T17765] IPVS: using max 25 ests per chain, 60000 per kthread [ 545.652084][T17224] Bluetooth: hci11: command tx timeout [ 545.755796][T17805] netlink: 'syz.7.2795': attribute type 1 has an invalid length. [ 545.770958][T17812] ip_tables: iptables: counters copy to user failed while replacing table [ 545.921844][T17821] xt_TCPMSS: Only works on TCP SYN packets [ 545.946367][T17821] netlink: 'syz.2.2794': attribute type 3 has an invalid length. [ 545.946398][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'. [ 545.982195][T17805] 8021q: adding VLAN 0 to HW filter on device bond3 [ 546.119048][T17806] bond3: (slave veth7): Enslaving as an active interface with a down link [ 546.153428][T17815] syzkaller1: entered promiscuous mode [ 546.153459][T17815] syzkaller1: entered allmulticast mode [ 546.233230][T17807] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 546.260405][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2800'. [ 546.282798][T17807] bond3: (slave batadv1): making interface the new active one [ 546.285092][T17807] batadv1: entered promiscuous mode [ 546.285765][T17807] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 546.566041][T17810] bond3 (unregistering): (slave veth7): Releasing active interface [ 546.598133][T17810] bond3 (unregistering): (slave batadv1): Releasing active interface [ 546.598171][T17810] batadv1: left promiscuous mode [ 546.657521][T17810] bond3 (unregistering): Released all slaves [ 546.937254][T17842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2800'. [ 547.235646][T17224] Bluetooth: hci8: connection err: -111 [ 547.254056][ T59] team0: left allmulticast mode [ 547.254101][ T59] team_slave_0: left allmulticast mode [ 547.254143][ T59] team_slave_1: left allmulticast mode [ 547.277609][ T59] team0: left promiscuous mode [ 547.277637][ T59] team_slave_0: left promiscuous mode [ 547.278420][ T59] team_slave_1: left promiscuous mode [ 547.319037][ T59] bridge0: port 2(team0) entered disabled state [ 547.345323][T17867] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2802'. [ 547.729776][T17224] Bluetooth: hci11: command tx timeout [ 548.408449][ T59] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 548.471887][ T59] bond0 (unregistering): (slave bridge5): Releasing backup interface [ 548.471917][ T59] bridge5 (unregistering): left allmulticast mode [ 548.507678][ T59] team0: Port device bridge7 removed [ 548.591179][ T59] bond1 (unregistering): Released all slaves [ 548.610857][ T59] bond2 (unregistering): Released all slaves [ 548.636605][ T59] bond3 (unregistering): Released all slaves [ 548.663692][ T59] bond4 (unregistering): Released all slaves [ 548.686219][ T59] bond0 (unregistering): Released all slaves [ 548.706631][ T59] bond5 (unregistering): Released all slaves [ 548.725994][ T59] bond6 (unregistering): Released all slaves [ 548.755272][ T59] bond7 (unregistering): Released all slaves [ 548.788941][T17861] batadv_slave_1: entered promiscuous mode [ 548.795449][T17861] batadv_slave_1: left promiscuous mode [ 548.802145][T17685] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.802352][T17685] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.802552][T17685] bridge_slave_0: entered allmulticast mode [ 548.804615][T17685] bridge_slave_0: entered promiscuous mode [ 548.866545][T17865] batman_adv: batadv0: Adding interface: macvtap1 [ 548.866621][T17865] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.866654][T17865] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 549.031899][T17685] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.032018][T17685] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.032220][T17685] bridge_slave_1: entered allmulticast mode [ 549.038392][T17685] bridge_slave_1: entered promiscuous mode [ 549.153374][T17685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.156535][T17685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.216236][T17685] team0: Port device team_slave_0 added [ 549.225961][T17685] team0: Port device team_slave_1 added [ 549.272122][T17685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.272145][T17685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.272175][T17685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.290714][T17685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.290767][T17685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.290852][T17685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.622501][ T59] : left promiscuous mode [ 549.810513][T17224] Bluetooth: hci11: command tx timeout [ 549.848322][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2812'. [ 550.228528][T17911] ipvlan0: entered allmulticast mode [ 550.228562][T17911] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 550.243438][T17911] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 550.312796][T17685] hsr_slave_0: entered promiscuous mode [ 550.325930][T17685] hsr_slave_1: entered promiscuous mode [ 550.337368][T17685] debugfs: 'hsr0' already exists in 'hsr' [ 550.337409][T17685] Cannot create hsr debugfs directory [ 550.337659][ T59] tipc: Disabling bearer [ 550.385858][ T59] tipc: Left network mode [ 550.476131][ T59] IPVS: stopping master sync thread 8567 ... [ 551.084528][T17941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2819'. [ 551.142397][T17941] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2819'. [ 551.343989][T17947] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2821'. [ 551.373860][T17949] netlink: 'syz.7.2823': attribute type 1 has an invalid length. [ 551.554314][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2825'. [ 551.574623][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 551.777648][T17961] netlink: del zone limit has 4 unknown bytes [ 552.293418][T17982] netlink: 'syz.9.2829': attribute type 16 has an invalid length. [ 552.293453][T17982] netlink: 'syz.9.2829': attribute type 17 has an invalid length. [ 552.598351][T17981] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.824045][T17982] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.824176][T17982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.376697][T18037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 554.376718][T18037] IPv6: NLM_F_CREATE should be set when creating new route [ 554.528186][T18040] syzkaller1: entered promiscuous mode [ 554.528210][T18040] syzkaller1: entered allmulticast mode [ 554.639201][T18040] netlink: 'syz.9.2840': attribute type 39 has an invalid length. [ 555.022690][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 555.441998][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2846'. [ 555.468588][ T59] veth1_to_team: left promiscuous mode [ 555.480485][ T59] veth0_to_team: left promiscuous mode [ 555.515274][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.515328][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.565316][ T59] veth1_vlan: left promiscuous mode [ 555.565434][ T59] veth0_vlan: left promiscuous mode [ 555.604095][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2846'. [ 555.608324][T18069] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2846'. [ 555.764500][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2846'. [ 555.764541][T18077] netlink: 'syz.8.2846': attribute type 11 has an invalid length. [ 556.245537][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2849'. [ 556.583847][ T59] team0 (unregistering): Port device team_slave_1 removed [ 556.625114][ T59] team0 (unregistering): Port device team_slave_0 removed [ 557.036154][T10664] smc: removing ib device syz1 [ 557.039089][T18065] ªªªªªª: renamed from vlan0 (while UP) [ 557.253982][T10664] smbdirect: ib_dev[syz1] removed [ 557.415309][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2846'. [ 557.415347][T18077] netlink: 'syz.8.2846': attribute type 11 has an invalid length. [ 557.417305][T11330] infiniband syz1: ib_query_port failed (-19) [ 557.435562][T18079] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 557.435712][T18079] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 557.435789][T18079] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 557.536354][T12013] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.540704][T12013] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.542534][T12013] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.542655][T12013] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.918946][T18114] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 557.995396][T17685] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 558.116717][T17685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.127743][T17685] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 558.167318][T17685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.303319][T17685] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 558.378246][T17685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 558.420074][T17685] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 558.534464][T17685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.013832][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2853'. [ 559.013946][T18145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.056323][T18145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.301158][T17224] block nbd1: Receive control failed (result -32) [ 560.713710][T17685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.810618][T17685] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.838610][T12023] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.838726][T12023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.352555][T18225] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 562.366586][T12507] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.366987][T12507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.723022][T18233] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2866'. [ 562.723046][T18233] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2866'. [ 562.773271][T18241] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2868'. [ 562.912950][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2869'. [ 562.912976][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2869'. [ 562.962463][T18247] xt_l2tp: invalid flags combination: 8 [ 562.987169][T18251] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2869'. [ 563.017377][T18251] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2869'. [ 564.042997][T18275] ip_tables: iptables: counters copy to user failed while replacing table [ 564.332427][T18265] x_tables: duplicate underflow at hook 1 [ 564.355324][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2874'. [ 564.513833][T18284] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2874'. [ 565.347643][T18293] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:21 [ 565.497606][T17685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.412486][T18329] bond2 (unregistering): Released all slaves [ 566.414282][T18340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2883'. [ 566.717638][T18340] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 566.735639][T18340] bond1 (unregistering): Released all slaves [ 567.045462][T18348] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 567.058143][T18360] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 567.078982][T18348] bond1 (unregistering): Released all slaves [ 567.333394][T18365] nbd2: detected capacity change from 0 to 32 [ 567.333802][T17224] block nbd2: Receive control failed (result -22) [ 567.338010][T17685] veth0_vlan: entered promiscuous mode [ 567.362483][ T1724] block nbd2: Dead connection, failed to find a fallback [ 567.362531][ T1724] block nbd2: shutting down sockets [ 567.362674][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.362772][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.366778][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.366813][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.375574][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.375697][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.378580][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.378613][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.382109][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.382180][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.387715][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.387800][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.394149][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.394238][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.396700][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.396834][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.402599][T18305] ldm_validate_partition_table(): Disk read failed. [ 567.402908][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.402939][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.408201][ T1724] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.408293][ T1724] Buffer I/O error on dev nbd2, logical block 0, async page read [ 567.429025][T18305] Dev nbd2: unable to read RDB block 0 [ 567.634704][T17685] veth1_vlan: entered promiscuous mode [ 567.656388][ T59] IPVS: stop unused estimator thread 0... [ 567.665636][T18305] nbd2: unable to read partition table [ 567.775522][T18373] __nla_validate_parse: 3 callbacks suppressed [ 567.775542][T18373] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2888'. [ 567.775898][T18373] unsupported nlmsg_type 40 [ 567.803280][T18305] ldm_validate_partition_table(): Disk read failed. [ 567.805343][T18305] Dev nbd2: unable to read RDB block 0 [ 567.807763][T18305] nbd2: unable to read partition table [ 567.848042][T18384] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2888'. [ 567.947288][T17685] veth0_macvtap: entered promiscuous mode [ 567.995862][T18391] x_tables: duplicate underflow at hook 1 [ 568.015930][T17685] veth1_macvtap: entered promiscuous mode [ 568.127822][T17685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.272882][T17685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.566805][T18400] netlink: 'syz.7.2891': attribute type 1 has an invalid length. [ 568.720800][T12018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.720873][T12018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.748452][T18403] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2891'. [ 568.790352][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.066809][T18414] vlan2: entered promiscuous mode [ 569.066834][T18414] macvlan0: entered promiscuous mode [ 569.083359][T18421] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2895'. [ 569.143370][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2894'. [ 569.171839][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2894'. [ 569.237647][T12508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.237671][T12508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.455565][T18435] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2896'. [ 569.468887][T18429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2896'. [ 569.529796][T18443] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2896'. [ 569.629490][T12008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.731694][T18448] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2896'. [ 569.760403][T18443] bond3: entered allmulticast mode [ 569.797514][T12011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.797538][T12011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.873305][T18447] lo: entered promiscuous mode [ 569.912060][T18447] tunl0: entered promiscuous mode [ 569.932885][T18447] gre0: entered promiscuous mode [ 570.001657][T18447] gretap0: entered promiscuous mode [ 570.088081][T18447] erspan0: entered promiscuous mode [ 570.161650][T18447] ip_vti0: entered promiscuous mode [ 570.180196][T18447] ip6_vti0: entered promiscuous mode [ 570.207374][T18461] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 570.233065][T18447] sit0: entered promiscuous mode [ 570.256397][T18447] ip6tnl0: entered promiscuous mode [ 570.283664][T18447] ip6gre0: entered promiscuous mode [ 570.368805][T18447] syz_tun: entered promiscuous mode [ 570.437493][T18447] ip6gretap0: entered promiscuous mode [ 570.484978][T18447] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.485667][T18447] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.488548][T18447] bridge0: entered promiscuous mode [ 570.518226][T18447] vcan0: entered promiscuous mode [ 570.542143][T18447] bond0: entered promiscuous mode [ 570.542170][T18447] bond_slave_0: entered promiscuous mode [ 570.542401][T18447] bond_slave_1: entered promiscuous mode [ 570.568657][T18447] team0: entered promiscuous mode [ 570.574628][T18447] team_slave_0: entered promiscuous mode [ 570.588800][T18447] team_slave_1: entered promiscuous mode [ 570.608583][T18447] dummy0: entered promiscuous mode [ 570.643153][T18447] nlmon0: entered promiscuous mode [ 570.645978][T18447] batadv0: entered promiscuous mode [ 570.670413][T18447] vxcan0: entered promiscuous mode [ 570.671334][T18447] vxcan1: entered promiscuous mode [ 570.673362][T18447] veth0: entered promiscuous mode [ 570.697281][T18447] veth1: entered promiscuous mode [ 570.718549][T18447] wg0: entered promiscuous mode [ 570.726609][T18447] wg1: entered promiscuous mode [ 570.746296][T18447] wg2: entered promiscuous mode [ 570.750688][T18447] veth0_to_bridge: entered promiscuous mode [ 570.773712][T18447] veth1_to_bridge: entered promiscuous mode [ 570.799879][T18447] veth0_to_bond: entered promiscuous mode [ 570.803457][T18447] veth1_to_bond: entered promiscuous mode [ 570.807065][T18447] veth0_to_team: entered promiscuous mode [ 570.831300][T18447] veth1_to_team: entered promiscuous mode [ 570.836304][T18447] veth0_to_batadv: entered promiscuous mode [ 570.858669][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.874600][T18447] batadv_slave_0: entered promiscuous mode [ 570.886394][T18447] veth1_to_batadv: entered promiscuous mode [ 570.898842][T18447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.898907][T18447] batadv_slave_1: entered promiscuous mode [ 570.916769][T18447] xfrm0: entered promiscuous mode [ 570.918972][T18447] veth0_to_hsr: entered promiscuous mode [ 570.967439][T18447] veth1_to_hsr: entered promiscuous mode [ 570.988621][T18447] hsr0: entered promiscuous mode [ 570.999779][T18447] veth1_virt_wifi: entered promiscuous mode [ 571.002537][T18447] veth0_virt_wifi: entered promiscuous mode [ 571.005152][T18447] virt_wifi0: entered promiscuous mode [ 571.034497][T18447] vlan0: entered promiscuous mode [ 571.037632][T18447] vlan1: entered promiscuous mode [ 571.094243][T18447] macvlan0: entered promiscuous mode [ 571.205051][T18447] macvlan1: entered promiscuous mode [ 571.224834][T18447] ipvlan0: entered promiscuous mode [ 571.225042][T18447] ipvlan1: entered promiscuous mode [ 571.268143][T18447] macvtap0: entered promiscuous mode [ 571.287515][T18447] macsec0: entered promiscuous mode [ 571.303037][T18447] geneve0: entered promiscuous mode [ 571.320053][T18447] geneve1: entered promiscuous mode [ 571.354345][T18447] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 571.359026][T18447] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 571.382747][T18447] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 571.414360][T18447] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 571.448724][T18447] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 571.464185][T18447] ip6tnl1: entered promiscuous mode [ 571.465130][T18447] ip6erspan0: entered promiscuous mode [ 571.468736][T18447] macvtap1: entered promiscuous mode [ 571.468938][T18447] vti0: entered promiscuous mode [ 571.490624][ T32] INFO: task syz.3.1933:14110 blocked for more than 143 seconds. [ 571.490651][ T32] Not tainted syzkaller #0 [ 571.490663][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.490685][ T32] task:syz.3.1933 state:D stack:27232 pid:14110 tgid:14106 ppid:5643 task_flags:0x400040 flags:0x00080002 [ 571.490751][ T32] Call Trace: [ 571.490758][ T32] [ 571.490771][ T32] __schedule+0x17db/0x58f0 [ 571.490838][ T32] ? __pfx___schedule+0x10/0x10 [ 571.490877][ T32] ? schedule+0x90/0x2b0 [ 571.490910][ T32] schedule+0x164/0x2b0 [ 571.490958][ T32] schedule_preempt_disabled+0x13/0x30 [ 571.490988][ T32] __mutex_lock+0x7c1/0x1550 [ 571.491027][ T32] ? __mutex_lock+0x5d4/0x1550 [ 571.491064][ T32] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 571.491309][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 571.491349][ T32] ? __nlmsg_put+0xef/0x1b0 [ 571.491464][ T32] ? genlmsg_put+0x137/0x2e0 [ 571.491532][ T32] nfsd_nl_version_get_doit+0x17c/0xd20 [ 571.491563][ T32] ? nlmon_xmit+0xb0/0x100 [ 571.491651][ T32] ? kmem_cache_free+0x182/0x650 [ 571.491680][ T32] ? __nla_parse+0x40/0x60 [ 571.491752][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 571.491781][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 571.491811][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 571.549869][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 571.550097][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 571.550243][ T32] genl_rcv_msg+0x614/0x7a0 [ 571.550330][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.550402][ T32] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 571.550579][ T32] netlink_rcv_skb+0x226/0x4a0 [ 571.550643][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.550787][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 571.550892][ T32] ? down_read+0x2be/0x330 [ 571.550966][ T32] genl_rcv+0x28/0x40 [ 571.551036][ T32] netlink_unicast+0x7bd/0x940 [ 571.551149][ T32] netlink_sendmsg+0x813/0xb40 [ 571.551245][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.551343][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 571.551828][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.551892][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 571.551971][ T32] ____sys_sendmsg+0x54e/0x850 [ 571.552007][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.552046][ T32] ? import_iovec+0x73/0xa0 [ 571.552125][ T32] ___sys_sendmsg+0x2a5/0x360 [ 571.552210][ T32] ? __lock_acquire+0x747/0x2de0 [ 571.552310][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.552398][ T32] ? futex_wait+0x2a2/0x390 [ 571.552639][ T32] ? __fget_files+0x2a/0x420 [ 571.552741][ T32] ? __fget_files+0x3a2/0x420 [ 571.560625][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 571.560750][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.560907][ T32] do_syscall_64+0x166/0x520 [ 571.560998][ T32] ? trace_irq_disable+0x3b/0x140 [ 571.561103][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.561175][ T32] ? clear_bhb_loop+0x70/0xc0 [ 571.561251][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.561305][ T32] RIP: 0033:0x7fab0fd9e159 [ 571.561357][ T32] RSP: 002b:00007fab10d4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.561415][ T32] RAX: ffffffffffffffda RBX: 00007fab10025fa0 RCX: 00007fab0fd9e159 [ 571.561498][ T32] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 571.561534][ T32] RBP: 00007fab0fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 571.561573][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.561606][ T32] R13: 00007fab10026038 R14: 00007fab10025fa0 R15: 00007ffc72519308 [ 571.561699][ T32] [ 571.570881][ T32] [ 571.570881][ T32] Showing all locks held in the system: [ 571.570922][ T32] locks held by kworker/0:1/10: 3, on CPU#0: [ 571.570981][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.571195][ T32] #1: ffffc900000f7c40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.571369][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.571654][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 571.571687][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 571.571832][ T32] #1: ffff ** replaying previous printk message ** [ 571.571832][ T32] #1: ffffffff9ad2f2d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 571.590656][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 571.590709][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 571.590907][ T32] locks held by kworker/u8:3/50: 3, on CPU#0: [ 571.590959][ T32] #0: ffff888031912140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.591143][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.591358][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 571.591667][ T32] locks held by kworker/u8:4/59: 3, last CPU#1: [ 571.591708][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.591864][ T32] #1: ffffc9000200fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.592029][ T32] #2: ffff88807f8ba258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 571.592288][ T32] locks held by kworker/u8:6/147: 3, on CPU#0: [ 571.602500][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.602696][ T32] #1: ffffc90002e6fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.602847][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 571.603099][ T32] locks held by kworker/1:2/944: 3, on CPU#1: [ 571.603148][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.603309][ T32] #1: ffffc90004dffc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.604974][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.605170][ T32] locks held by kworker/0:2/989: 3, on CPU#0: [ 571.605211][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.612684][ T32] #1: ffffc90004e4fc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.612875][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.613161][ T32] locks held by klogd/4975: 2, last CPU#1: [ 571.613203][ T32] #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 571.613349][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 571.613552][ T32] locks held by getty/5378: 2, on CPU#1: [ 571.613592][ T32] #0: ffff888032c610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 571.613850][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 571.614037][ T32] locks held by kworker/1:5/5813: 3, on CPU#1: [ 571.614071][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.614253][ T32] #1: ffffc900052d7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.623735][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 571.624026][ T32] locks held by kworker/1:6/5827: 3, last CPU#1: [ 571.624069][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.624225][ T32] #1: ffffc90005337c40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.624393][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.629195][ T32] locks held by kworker/1:8/9565: 3, on CPU#1: [ 571.629245][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.635048][ T32] #1: ffffc90005517c40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.635227][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.635406][ T32] locks held by kworker/1:10/9567: 3, on CPU#1: [ 571.635520][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.635689][ T32] #1: ffffc90004abfc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.635874][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.636128][ T32] locks held by kworker/1:11/9568: 3, on CPU#1: [ 571.636164][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.636319][ T32] #1: ffffc90004a9fc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.636537][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.647522][ T32] locks held by kworker/1:12/9569: 3, on CPU#1: [ 571.647564][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.649049][ T32] #1: ffffc9000463fc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.649256][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.651590][ T32] locks held by kworker/0:7/9571: 3, on CPU#0: [ 571.651607][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.651664][ T32] #1: ffffc900045efc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.651728][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.651791][ T32] locks held by kworker/0:8/9573: 3, last CPU#0: [ 571.651806][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.651865][ T32] #1: ffffc90003c1fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.651925][ T32] #2: ffff888031c89250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 571.652002][ T32] locks held by kworker/0:11/9576: 3, on CPU#0: [ 571.652017][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.663963][T18447] bridge1: entered promiscuous mode [ 571.666908][ T32] #1: ffffc90003befc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.667132][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.667365][ T32] locks held by kworker/0:12/9580: 3, on CPU#0: [ 571.667407][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.667614][ T32] #1: ffffc90003b7fc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.667779][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.667972][ T32] locks held by kworker/1:13/9589: 3, on CPU#1: [ 571.668026][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.668180][ T32] #1: ffffc90003b0fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.668330][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 571.685658][ T32] locks held by kworker/0:13/11329: 3, on CPU#0: [ 571.685680][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.685886][ T32] #1: ffffc90006627c40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.686065][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.686233][ T32] locks held by kworker/0:15/11331: 3, on CPU#0: [ 571.686276][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.686423][ T32] #1: ffffc900059dfc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.686648][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.686811][ T32] locks held by kworker/0:17/11333: 3, on CPU#0: [ 571.686853][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.687005][ T32] #1: ffffc900059cfc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.687180][ T32] #2: ffffffff902c8260 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 571.713800][ T32] locks held by kworker/u8:16/12008: 3, last CPU#1: [ 571.713860][ T32] #0: ffff888036ba2140 ((wq_completion)krds_cp_wq#2/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.714046][ T32] #1: ffffc900033afc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.714202][ T32] #2: ffff888078431280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 571.714622][ T32] locks held by kworker/u8:21/12013: 3, on CPU#0: [ 571.714657][ T32] #0: ffff8880236bc940 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.714813][ T32] #1: ffffc90002f3fc40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.714977][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xde/0x630 [ 571.715191][ T32] locks held by kworker/u8:24/12016: 3, last CPU#1: [ 571.715233][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.733815][ T32] #1: ffffc90002eefc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.734037][ T32] #2: ffff8880535121c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 571.736292][ T32] locks held by kworker/u8:27/12020: 3, last CPU#1: [ 571.736342][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.736548][ T32] #1: ffffc90002ebfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.736712][ T32] #2: ffff888033e14258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 571.736899][ T32] locks held by kworker/u8:30/12508: 4, last CPU#1: [ 571.736958][ T32] #0: ffff88803668d140 ((wq_completion)krds_cp_wq#2/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.737124][ T32] #1: ffffc90005827c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 571.755116][ T32] #2: ffff888075f07c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 571.755300][ T32] #3: ffff8880b873bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 571.755556][ T32] locks held by syz.2.1839/13706: 2, on CPU#0: [ 571.755586][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.755735][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 571.755915][ T32] locks held by syz.3.1933/14110: 2, on CPU#1: [ 571.755957][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.772197][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 571.772373][ T32] locks held by syz.5.2084/14728: 2, on CPU#0: [ 571.772415][ T32] #0: ffffffff902b8ee8 [ 571.777514][T18447] syzkaller0: entered promiscuous mode [ 571.779581][T12507] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.779679][T12011] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.779721][T12011] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.779764][T12011] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.791094][ T32] (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.791240][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 571.791417][ T32] locks held by syz.6.2287/15570: 2, on CPU#0: [ 571.791514][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.791775][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 571.791947][ T32] locks held by syz.0.2536/16656: 2, on CPU#0: [ 571.791988][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.797959][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 571.798164][ T32] locks held by syz.1.2563/16762: 2, on CPU#1: [ 571.798212][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.798373][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 571.812342][ T32] locks held by syz.2.2898/18438: 1, on CPU#0: [ 571.812360][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 571.812522][ T32] locks held by syz.2.2898/18440: 1, on CPU#0: [ 571.812539][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 571.812594][ T32] locks held by syz.2.2898/18445: 1, on CPU#0: [ 571.812609][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 571.812703][ T32] locks held by syz.4.2767/18456: 1, on CPU#1: [ 571.812720][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 571.812805][ T32] locks held by syz.4.2767/18462: 1, on CPU#1: [ 571.812820][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 571.812877][ T32] locks held by syz.4.2767/18464: 1, on CPU#0: [ 571.812893][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410 [ 571.813028][ T32] locks held by syz.7.2900/18461: 1, on CPU#0: [ 571.813044][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 571.813100][ T32] locks held by syz.7.2900/18465: 3, on CPU#1: [ 571.813169][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.827253][ T32] #1: ffff8880531706e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 571.827421][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_dump_wiphy+0x49/0x6b0 [ 571.843932][ T32] locks held by syz.7.2900/18471: 1, on CPU#1: [ 571.843982][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 571.844168][ T32] locks held by syz.7.2900/18475: 1, on CPU#1: [ 571.844211][ T32] #0: ffff8880531706e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 571.844349][ T32] locks held by syz.7.2900/18480: 1, on CPU#0: [ 571.844391][ T32] #0: ffff8880531706e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 571.844597][ T32] locks held by syz.7.2900/18482: 1, on CPU#1: [ 571.844714][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 571.844878][ T32] locks held by syz.7.2900/18485: 1, on CPU#0: [ 571.844928][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 571.845065][ T32] locks held by syz.7.2900/18487: 1, on CPU#1: [ 571.845105][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 571.845400][ T32] locks held by syz.8.2901/18467: 1, on CPU#1: [ 571.891418][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 571.891664][ T32] locks held by syz.8.2901/18473: 2, on CPU#1: [ 571.891691][ T32] #0: ffffffff907b1da8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 571.891871][ T32] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 571.892131][ T32] locks held by syz.9.2902/18478: 2, on CPU#0: [ 571.892174][ T32] #0: ffffffff907b64a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 571.892336][ T32] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 571.892551][ T32] locks held by syz.9.2902/18481: 1, on CPU#0: [ 571.892587][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 571.892796][ T32] [ 571.892814][ T32] ============================================= [ 571.892814][ T32] [ 571.892864][ T32] NMI backtrace for cpu 1 [ 571.892896][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 571.892955][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.892986][ T32] Call Trace: [ 571.893015][ T32] [ 571.893036][ T32] dump_stack_lvl+0xe8/0x150 [ 571.893126][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 571.893290][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 571.893426][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 571.893510][ T32] sys_info+0x135/0x170 [ 571.893565][ T32] watchdog+0xfd7/0x1030 [ 571.893649][ T32] ? watchdog+0x1c7/0x1030 [ 571.893723][ T32] kthread+0x38b/0x480 [ 571.893786][ T32] ? __pfx_watchdog+0x10/0x10 [ 571.893838][ T32] ? __pfx_kthread+0x10/0x10 [ 571.893898][ T32] ret_from_fork+0x514/0xb70 [ 571.893993][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 571.894076][ T32] ? __switch_to+0xc89/0x1420 [ 571.894161][ T32] ? __pfx_kthread+0x10/0x10 [ 571.894221][ T32] ret_from_fork_asm+0x1a/0x30 [ 571.894332][ T32] [ 571.894427][ T32] Sending NMI from CPU 1 to CPUs 0: [ 571.894544][ C0] NMI backtrace for cpu 0 [ 571.894558][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 571.894579][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.894591][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 571.894617][ C0] Code: e8 fe 82 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 6e 75 06 cc 44 89 f9 80 e1 07 [ 571.894634][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 571.894651][ C0] RAX: 1ffffffff35a5e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 571.894664][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 571.894676][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 571.894688][ C0] R10: dffffc0000000000 R11: ffffffff85736ac0 R12: dffffc0000000000 [ 571.894702][ C0] R13: 0000000000000000 R14: ffffffff9ad2f300 R15: 0000000000000000 [ 571.894715][ C0] FS: 0000000000000000(0000) GS:ffff888124cdc000(0000) knlGS:0000000000000000 [ 571.894730][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.894743][ C0] CR2: 0000557366a714b0 CR3: 0000000051f4e000 CR4: 00000000003526f0 [ 571.894761][ C0] Call Trace: [ 571.894768][ C0] [ 571.894777][ C0] wait_for_lsr+0x184/0x2f0 [ 571.894801][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 571.894833][ C0] serial8250_console_write+0xaa1/0x1200 [ 571.894854][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 571.894885][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 571.894906][ C0] ? __schedule+0x17f1/0x58f0 [ 571.894939][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 571.894968][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 571.894992][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 571.895020][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 571.895085][ C0] nbcon_kthread_func+0x679/0x880 [ 571.895108][ C0] ? nbcon_kthread_func+0x163/0x880 [ 571.895127][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 571.895150][ C0] ? __kthread_parkme+0x71/0x1f0 [ 571.895176][ C0] ? __kthread_parkme+0x199/0x1f0 [ 571.895205][ C0] kthread+0x38b/0x480 [ 571.895221][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 571.895239][ C0] ? __pfx_kthread+0x10/0x10 [ 571.895263][ C0] ret_from_fork+0x514/0xb70 [ 571.895293][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 571.895320][ C0] ? __switch_to+0xc89/0x1420 [ 571.895346][ C0] ? __pfx_kthread+0x10/0x10 [ 571.895363][ C0] ret_from_fork_asm+0x1a/0x30 [ 571.895399][ C0] [ 571.943499][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 573.880090][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 573.889223][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.899300][ T32] Call Trace: [ 573.902609][ T32] [ 573.905557][ T32] vpanic+0x56d/0xa60 [ 573.909574][ T32] ? __pfx___schedule+0x10/0x10 [ 573.914486][ T32] ? __pfx_vpanic+0x10/0x10 [ 573.919017][ T32] ? irqentry_exit+0x218/0x910 [ 573.923825][ T32] panic+0xc5/0xd0 [ 573.927576][ T32] ? __pfx_panic+0x10/0x10 [ 573.932035][ T32] watchdog+0x1030/0x1030 [ 573.936404][ T32] ? watchdog+0x1c7/0x1030 [ 573.940855][ T32] kthread+0x38b/0x480 [ 573.944943][ T32] ? __pfx_watchdog+0x10/0x10 [ 573.949640][ T32] ? __pfx_kthread+0x10/0x10 [ 573.954257][ T32] ret_from_fork+0x514/0xb70 [ 573.958881][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 573.964021][ T32] ? __switch_to+0xc89/0x1420 [ 573.968754][ T32] ? __pfx_kthread+0x10/0x10 [ 573.973367][ T32] ret_from_fork_asm+0x1a/0x30 [ 573.978183][ T32] [ 573.982030][ T32] Kernel Offset: disabled [ 573.986381][ T32] Rebooting in 86400 seconds..