last executing test programs: 3m45.60559898s ago: executing program 1 (id=375): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000014c0)=@delqdisc={0xb4, 0x25, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xe}, {0xfff2, 0x6}, {0x10, 0xe}}, [@q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0xa00, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20044004}, 0x8050) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r9 = socket$isdn(0x22, 0x3, 0x26) accept4(r9, &(0x7f0000000380)=@ieee802154={0x24, @short}, &(0x7f0000000040)=0x80, 0x100000) r10 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001580)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@delchain={0xfe0, 0x65, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x9}, {0x6, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0x38c, 0x2, [@TCA_FLOW_EMATCHES={0x388, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xb}, "1c0312edcb30a44dd2"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5e, 0x2, 0x100}, {0x1, 0x6, 0x1, "24a6c1e2b874"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x574, 0x8, 0x800}, {0x0, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x100, 0x8, 0x5d}, {0x0, 0x6}}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "1874c91328db744531121160cb6cfdf1c08b8dc969d6042f67b8b7ed2b727b7a67b06970cac416fee2d267f97c"}}]}, @TCA_EMATCH_TREE_LIST={0x2ac, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xec, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xfff8}, [@TCA_EM_IPT_MATCH_DATA={0xc6, 0x5, "e8cf364a1749071a28ca0785eee0c302cbb471cdc077dcb2f894a5e775e526f9e760735534cc2db2f63efaa19e78a4df2156dfec8803958ea589a625c7c29ec4fcadd39f222c9a953635de670f6d28b006d003be09e945b39d76f3fdbe2bc49f148181ca0471354bfd7443cf6ebad4d7354ae6e93883e6e711b15eaa604172fa01367f6e0f80698c6bbb1212b4ce20906a611a7e95d9f3cf4a8eae2cd9c02b4029d10309e523cc6745581d00d3efc4075082a901533ac675a88df99a8a72f3d88bde"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}]}}, @TCF_EM_IPT={0x1bc, 0x2, 0x0, 0x0, {{0x5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "d1c29811c8071633b253c065850aabc5cf24c121fe99a69426335e89e9bc42ed8e04a152bfeb4f06435fb3e63d579312f9bc947673b910ca3d52a581c00fa126fa1d3501260866bdc7be0863edf28be3e5f1c6c17035cc0ae2f18a398d92864bcdaaf3e8acc7038bc8ddb7d9c482795d6f14e1915de1cb16ace4fd908d65e98b82"}, @TCA_EM_IPT_MATCH_DATA={0xf5, 0x5, "6226848700e9fa41e4ed4959189e695dd3dafb61113b2264a9fc8fa00fdc7d47a7040d035024bedec8bd0ea2fdaeaeebe7abf7d2dc94af5c43b5d651448cf68642afbb86dccecbc1117d34dddf6a02c87e1a37e472244940c503967c3cba2205f91885dbe159c5e99b70d3929ae9978bff59a40d34d4126a200e97c36234a270d881b6083b0b6c96e323647ec6f9d7bf3f1d293b8a3a137e8611ed9479130d4490a4294effbb24c0f6fe1dd8253a0095ccd03fce9de2fc3a3a829ec4de86896d06a321cfd45d0af26e8171c50ed89c08df070f7e16bd9269d3d189c43bea3dd8a36967eb86272b33439019e1932877e0fc"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xae, 0x1, 0x7}, {0xfffffffc, 0x1, 0xdc, 0x5, 0x4, 0x0, 0x1}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x66}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xc5, 0x8, 0x2}, {0x1, 0x1, 0x3}}}]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc14, 0x2, [@TCA_BPF_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x3, 0x4, 0xfaba, 0x2, 0x7, 0x9, 0xffffffff, 0x9, 0x6, 0xf, 0x2, 0xff, 0x7, 0x5, 0x9, 0x9, 0x8, 0x1, 0x14, 0xd, 0x2b, 0x1, 0x7, 0x5, 0xddf, 0x1, 0x2, 0xb, 0x4, 0xa, 0x9, 0xd, 0xfffff651, 0x81, 0x1, 0x5c, 0xfeaa, 0x6, 0x0, 0x1, 0x2, 0x1, 0x40005, 0x2, 0x5, 0x4, 0x0, 0x400, 0x7, 0x5, 0x8, 0x6, 0x7, 0x10, 0x1000, 0x6, 0xfffffffc, 0x54, 0xc2, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x7, 0x4, 0x3, 0x2, 0x7, 0x7, 0x1, 0x4, 0x6, 0x10000, 0x1, 0x5, 0x7, 0x5, 0x6, 0x10000, 0x3, 0x80000000, 0xa84e, 0x0, 0x5, 0x6c9e, 0x4, 0x80, 0xd, 0x8, 0xe, 0x4, 0x0, 0x7, 0x0, 0x5, 0x3, 0xeb17, 0xfffffff1, 0x3, 0x8, 0xa020, 0xbb, 0x1ff, 0x3, 0x10, 0x2, 0x7ee5, 0x3, 0x5fe4, 0x401, 0x2, 0x98b, 0x1, 0x7fffffff, 0x4, 0x6, 0xfffffffa, 0x7, 0x7fffffff, 0x3, 0x1, 0x198b400, 0xe7, 0x2, 0xe31, 0x8, 0x2f, 0x7, 0x3e3, 0x3, 0xc, 0x3, 0xffffffff, 0x0, 0x5, 0x8, 0xfffffffc, 0x2d1000, 0xa, 0xfffffffd, 0x8, 0x7, 0x4, 0x0, 0x80000000, 0x8, 0x7, 0x6, 0x6, 0x8, 0x5, 0x6, 0x1, 0x8d76, 0x80000000, 0xe, 0x5, 0x6, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x7fffffff, 0x0, 0x2, 0x6, 0x81, 0x2, 0x0, 0xc0000, 0x3, 0x2d, 0xfffffff2, 0x5, 0x8, 0x7, 0xdb23, 0x27, 0x6, 0x0, 0x7, 0x0, 0x3, 0x3e, 0xa8b7, 0x6f0f2833, 0x80000000, 0x0, 0x10001, 0x244d, 0x227b, 0x56497fb0, 0x400, 0x5, 0x3, 0x1000, 0x6, 0x2, 0x40000, 0x0, 0x7, 0x3ff, 0x3, 0x6, 0x3, 0x60b, 0x100, 0xffff, 0x1, 0x4, 0x8, 0x8000, 0x8, 0x0, 0x80, 0x1, 0xff, 0xa, 0xf5d0, 0x3, 0x8000, 0x2, 0x406, 0x401, 0x8, 0xda79, 0x7fffffff, 0x1, 0x7, 0x4, 0x4c3, 0x4, 0x10000, 0x9, 0x1, 0x6, 0x4, 0xd708a80, 0xff, 0x4, 0x37d, 0x400, 0x9, 0x7, 0x23894440, 0x9, 0xd75, 0x9, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffffb6, 0x1, 0x1, 0x5, 0x0, 0x2, 0x1000, 0x1000, 0x8, 0x9, 0x7, 0x8, 0xe, 0x698, 0x4, 0x2, 0x200, 0xfffffff3, 0x8, 0x9, 0x876, 0xbb97, 0x8000000, 0x81c, 0x64127ccb, 0x9, 0x3, 0x4, 0xd, 0x8, 0x8, 0xa, 0xfffffffa, 0x6, 0x2, 0x7, 0xce0, 0xceb1, 0x80, 0x1, 0xe, 0x10, 0x100, 0x9, 0x1, 0x3, 0x3ff, 0x80, 0x1, 0x1, 0x3, 0x7, 0xda96, 0x7, 0x9, 0x4, 0x5, 0x8, 0xfffffffb, 0x3, 0x1, 0xa, 0x6, 0x8246, 0xd2, 0xf9, 0x3, 0x3, 0x401, 0x2, 0x3, 0x8, 0x8c3, 0x9, 0x55d, 0x8, 0x8001, 0x80000000, 0x5, 0x7, 0x5b4a, 0xfffffff2, 0x2, 0x6, 0xfffffffb, 0x8, 0x7, 0x1, 0x2, 0xe, 0x0, 0x0, 0x484c, 0x9, 0x800, 0x9, 0x157, 0x4, 0x4a05, 0x1000, 0xd93d, 0xc3, 0x3, 0x6, 0x3, 0x6, 0x80000001, 0x81, 0x2, 0xc, 0xff, 0x1, 0x7, 0x8, 0x8, 0xc, 0xaaed, 0x795, 0xc5, 0x10001, 0x4, 0x5, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x10000, 0x6, 0x3b910aad, 0x200, 0x3a3, 0x91, 0x7, 0xfffffffd, 0x854, 0x4, 0x4, 0x7, 0x3, 0x5, 0x9, 0x2, 0x5, 0x8, 0x7, 0x8001, 0x100, 0x0, 0x5, 0x4, 0x7, 0x7fff, 0x8, 0x3, 0x4, 0x1, 0x1, 0xfff, 0xd8a, 0x6, 0x5, 0xc72f, 0x8a46, 0xcb, 0x7, 0xff6e, 0x8000, 0xce, 0x7fff, 0x5, 0x9, 0x1, 0x821a, 0x6, 0x7, 0x9, 0xf, 0x1, 0xfff, 0xe7, 0x887, 0x0, 0x3, 0x5, 0x9, 0x56e6, 0x49, 0x8ca, 0x0, 0x4, 0x3, 0x4, 0x9, 0x4, 0x8, 0x0, 0xffff4247, 0x0, 0x1, 0x422, 0x2, 0x2, 0x28, 0x8, 0x8, 0x4fb, 0x8, 0x0, 0x6, 0x4, 0xc1, 0x7, 0x80000001, 0x9, 0x3, 0xf3, 0x2, 0x1, 0x3, 0x1, 0x8, 0x3, 0xf87, 0x3, 0x5, 0xfffffffd, 0x401, 0x4, 0x0, 0xfff, 0xffff8001, 0x2, 0xb0, 0x4, 0x4, 0x2, 0xb, 0x0, 0x0, 0x4, 0xe, 0x6, 0x4, 0x8, 0x1, 0x100, 0x8001, 0xd, 0x4, 0x0, 0xda, 0xb, 0x5, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0xff, 0x81, 0x1, 0x1, 0x5, 0x8, 0xff, 0x0, 0x5, 0x9, 0x30, 0x6, 0x0, 0x7227, 0x4, 0x2020, 0xa39, 0x3, 0x6, 0x8, 0x5, 0x5, 0x7, 0x9, 0x2, 0x35, 0x81, 0x800, 0x4, 0x2, 0x16701ef0, 0x3, 0x5, 0x3, 0x3, 0x3, 0x9, 0x4, 0x7, 0x5, 0x7, 0x5, 0x40, 0xfe, 0x46, 0x2706, 0x9, 0x1, 0x10001, 0x2, 0x481, 0x4cdb, 0x6, 0x3, 0x101, 0x6, 0x3ff, 0x3, 0x8, 0x0, 0x6, 0x2, 0x1, 0xb, 0x10000, 0x8, 0x0, 0x3, 0x4, 0x86, 0x5, 0x8, 0x4c8, 0x1ff, 0x2e, 0x3, 0x8, 0x59a, 0x980, 0xb16, 0x3, 0x9, 0x9, 0x4, 0x8001, 0x5, 0x1, 0xfa, 0x3, 0x5, 0x0, 0x7, 0x6, 0x7, 0xf8, 0xffffffff, 0x8, 0x10001, 0x100, 0x1000, 0x2, 0x1000, 0x4, 0x3, 0x8001, 0x4, 0x2, 0x7, 0xf, 0x5, 0x3ff, 0x0, 0x910e, 0x965d, 0x86e0, 0x8, 0x9, 0xff, 0x7, 0x8, 0x0, 0xfffffffa, 0x9, 0x8, 0x1e, 0x0, 0x2, 0x3, 0x3, 0x5, 0x252b, 0x80, 0x8, 0x8000, 0x3, 0x7, 0x1, 0xffff3736, 0xffffffff, 0x7fff, 0x8, 0x8, 0x10001, 0x80000000, 0x2, 0x8dc, 0x2, 0x80000000, 0x6, 0x763, 0x410, 0x6, 0x4000, 0x80000000, 0x3, 0x2, 0xad02, 0x1, 0x628aab26, 0x7, 0x8, 0x8, 0x9, 0x9, 0x3, 0x80000000, 0x929e, 0xc, 0xbf7, 0xffff1d13, 0x3, 0x9, 0x7, 0x4, 0x9, 0x80, 0xd584, 0x2f72, 0x5, 0x1, 0x7fffffff, 0x2, 0x2, 0x6e4300, 0x2, 0x3, 0x10001, 0x7fffffff, 0x4, 0x5, 0x3, 0x2, 0x1ff, 0x7, 0x1ef60d56, 0xf, 0x3, 0x3, 0x4, 0x4, 0x2, 0x5, 0x7, 0x0, 0x400, 0xb, 0x80000001, 0x7, 0x4a9, 0x9, 0xe, 0xf, 0x10000, 0xc528, 0xffff, 0x5, 0x8, 0x3, 0xc, 0xe8bb, 0x6, 0x3, 0x101, 0x9, 0x5, 0x0, 0x5a, 0x9, 0x6, 0xd, 0x2, 0xf2, 0x0, 0x9, 0x0, 0x1, 0x8, 0x1, 0x0, 0x28, 0x4, 0x4, 0x1, 0x10001, 0x4, 0x5, 0x5, 0x4, 0x1, 0x6, 0x80000001, 0x8, 0x7b4, 0x7]}]}]}}]}, 0xfe0}, 0x1, 0x0, 0x0, 0x40004}, 0x400c004) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0xe}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "85d81ddb59"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000900}, 0x4) 3m44.976194706s ago: executing program 1 (id=382): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) splice(r7, &(0x7f0000000040)=0xfffffffffffffffc, r2, 0x0, 0x800000000ff, 0x0) 3m44.778469188s ago: executing program 1 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="ab3ca28c8ec9c7531401774be067da6f20dbba37aef2dc4b5d421319de51063d324de6a5962fdd40b9972593a3a268844bcc21459bc7f555c0800197adf3da27d8a69611b15b8ce0a9cff7944ddf78fada00d4c4225b65a3f996e8ed0d564397b30b0d3f4e2e06abe5fa68a2", 0x6c}], 0x1, &(0x7f0000000580)=[{0x28, 0x6, 0x8, "20adea87807b828116d68896202c1fef3acdbb"}], 0x28}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8090) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x80, &(0x7f00000005c0)={@multicast, @random="28feee412b8f", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x2d, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0) 3m43.798353014s ago: executing program 1 (id=400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) listen(r0, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7dbb68f62a380a4590000004a00000095f4f0db33eb3e74d508a8a91bf13639128b89527d5107740e3b7ae5fd61ddb27bcbaf4bc82c07f91746067db4f106c7237fc43d9586a0bfc87cdabb9ac64713e55dd12ce0849b5d03bdcb605cf03f82aecd17a12213ad6844dc7421dc5935ab3765"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x38}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 3m43.636212318s ago: executing program 1 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x100, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x1, 0x100, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) (async) 3m43.304210057s ago: executing program 1 (id=405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) 3m28.307911792s ago: executing program 32 (id=405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) 2m37.536162157s ago: executing program 5 (id=1290): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="b8", 0x1}], 0x1}}], 0x1, 0x200408c0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x64, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x64}}, 0x0) 2m37.406452357s ago: executing program 5 (id=1293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x23b, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x223, 0x0, @wg=@data={0x4, 0x4, 0x8, "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"}}}}, 0x249) (fail_nth: 4) 2m37.021006117s ago: executing program 5 (id=1299): r0 = socket(0x2c, 0x1, 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) close(0x3) socket(0x2000000000000021, 0x2, 0x10000000000002) recvmmsg$unix(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 2m36.815095089s ago: executing program 5 (id=1303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000010000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90) 2m36.56869823s ago: executing program 5 (id=1308): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc02, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xffffffff) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000b00)={0x7, 0x8, 0x8, 0x8, 0x6, 0x2, 0x5, 0x3, 0x24, 0x9, 0x4, 0x9, 0x81, 0x4}, 0xe) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYRESDEC=r4], 0x74}}, 0x0) r6 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r6, 0x12) 2m35.719961028s ago: executing program 5 (id=1315): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000101}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f0000000240)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r5, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e21, 0x56, @remote, 0x3}}}, 0x84) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0xb, 0x6, 0x6, 0xf, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_key={0xb, 0x11, 0x248, 0x0, "49d7603e7c987749976fca044e9489cc37bb46d56f26a62398f0071d902c323cfcc002b57d1fd1ee20c0453d978bfe6277855c371d05332247eaa2550839757aeb23cf2cfc6b50eaf9"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}]}, 0x78}}, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x12360, 0x0) r9 = socket$isdn_base(0x22, 0x3, 0x0) ppoll(&(0x7f0000000000)=[{r9, 0x1}], 0x1, &(0x7f0000000080), 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f00000006c0)={0x4, &(0x7f0000000640)=[{0xd, 0x0, &(0x7f0000000400), 0x1, 0x1}, {0xfa, 0xe, &(0x7f0000000440)="ad29b6d47adbc702d952f3fa550d", 0x1, 0x1}, {0xd, 0xc2, &(0x7f00000004c0)="119136a7f88c805a38da72cf7d229acce64ede5a5498a109a16589c520d0942d6c53cf8ff13bc9db9175e8b3dc37c4ded1e1b0e439cd9874d4d8a7b44a6eacc4763ef1d89dcd66bc6bcd3243f806b00e440e521b93c9d8b1e06b0d58c73b3c0e14e7979da79119c901b0f16c0ff14f73457b93eafdd987ae3bf68fc498f24faf8ebc39ea58c3ec52644679aa1970dd3832804615757783a0cd27e6c1a2c745294933dca78072ef6005bd614e97c4c5c7a25f7c755a2010965087fec078edd4e492dc", 0x0, 0x1}, {0x80000000, 0x5f, &(0x7f00000005c0)="a37847089ccbdaef7fbd7c447b77bca69c220f89a210558e782041ac1d2b2b7c99d0a37d1c3db770e4a6188742b9174dfb3c501cab50348ad034bc0ab7e42794c0556a602a92f13f617a5c47a08a0b9f3453001311c20d395d960905f7d1c2"}]}) socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x10}}, 0x0) 2m20.731765854s ago: executing program 33 (id=1315): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000101}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f0000000240)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r5, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e21, 0x56, @remote, 0x3}}}, 0x84) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0xb, 0x6, 0x6, 0xf, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_key={0xb, 0x11, 0x248, 0x0, "49d7603e7c987749976fca044e9489cc37bb46d56f26a62398f0071d902c323cfcc002b57d1fd1ee20c0453d978bfe6277855c371d05332247eaa2550839757aeb23cf2cfc6b50eaf9"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}]}, 0x78}}, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x12360, 0x0) r9 = socket$isdn_base(0x22, 0x3, 0x0) ppoll(&(0x7f0000000000)=[{r9, 0x1}], 0x1, &(0x7f0000000080), 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f00000006c0)={0x4, &(0x7f0000000640)=[{0xd, 0x0, &(0x7f0000000400), 0x1, 0x1}, {0xfa, 0xe, &(0x7f0000000440)="ad29b6d47adbc702d952f3fa550d", 0x1, 0x1}, {0xd, 0xc2, &(0x7f00000004c0)="119136a7f88c805a38da72cf7d229acce64ede5a5498a109a16589c520d0942d6c53cf8ff13bc9db9175e8b3dc37c4ded1e1b0e439cd9874d4d8a7b44a6eacc4763ef1d89dcd66bc6bcd3243f806b00e440e521b93c9d8b1e06b0d58c73b3c0e14e7979da79119c901b0f16c0ff14f73457b93eafdd987ae3bf68fc498f24faf8ebc39ea58c3ec52644679aa1970dd3832804615757783a0cd27e6c1a2c745294933dca78072ef6005bd614e97c4c5c7a25f7c755a2010965087fec078edd4e492dc", 0x0, 0x1}, {0x80000000, 0x5f, &(0x7f00000005c0)="a37847089ccbdaef7fbd7c447b77bca69c220f89a210558e782041ac1d2b2b7c99d0a37d1c3db770e4a6188742b9174dfb3c501cab50348ad034bc0ab7e42794c0556a602a92f13f617a5c47a08a0b9f3453001311c20d395d960905f7d1c2"}]}) socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x10}}, 0x0) 4.857501071s ago: executing program 0 (id=2960): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x300, r0, &(0x7f0000000240)={0x30001010}) socket(0x2d, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x10122, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0) write(r2, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.834079825s ago: executing program 4 (id=2961): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x24, 0x2b, 0xb, 0x0, 0x0, {0x9}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x20000000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x24008004) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48885, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x20000000) 4.070401091s ago: executing program 4 (id=2969): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}}) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x4}, 0xc) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x40) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000013180)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) 3.899698556s ago: executing program 0 (id=2972): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getroute={0x14, 0x1a, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004080) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf8, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000340)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x8, 0x80, 0x9, 0xe4, {{0x26, 0x4, 0x1, 0x32, 0x98, 0x64, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @multicast2, {[@rr={0x7, 0x1b, 0x93, [@private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @remote]}, @generic={0xd7, 0x2}, @timestamp_addr={0x44, 0x1c, 0x20, 0x1, 0x4, [{@multicast1, 0xfffffff7}, {@empty, 0x2}, {@local, 0x3}]}, @timestamp_addr={0x44, 0x24, 0x4c, 0x1, 0x7, [{@empty, 0x100}, {@multicast1, 0xfff}, {@private=0xa010100, 0x4}, {@multicast1, 0x1ff}]}, @cipso={0x86, 0x15, 0x2, [{0x5, 0xf, "8ae2b3327dbf03c5e10ec55e41"}]}, @rr={0x7, 0xf, 0x94, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0x9c, 0x0, 0x20200000, 0x43, @private0, @loopback, 0x7, 0x7, 0x1, 0x80}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x40, 0x8000, 0x183, 0x2, {{0x16, 0x4, 0x1, 0x9, 0x58, 0x67, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x23, 0xd, [@multicast1, @empty, @multicast1, @multicast2, @private=0xa010101, @local, @empty, @empty]}, @cipso={0x86, 0xa, 0x1, [{0x0, 0x4, "a5b7"}]}, @ssrr={0x89, 0x17, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a40)={'tunl0\x00', 0x0, 0x1, 0x10, 0x4, 0x7fff, {{0x8, 0x4, 0x2, 0x2, 0x20, 0x64, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xea, 0x1, 0x5, [{@broadcast, 0x279}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x58, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000000c40)={0x4cc, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfffa, 0x6, 0x7, 0x7d}]}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xeb0f}}}]}}, {{0x8, 0x1, r8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80c}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}, {{0x8, 0x1, r16}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r17 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r17, 0x114, 0x7, &(0x7f0000001300)={@tipc=@name={0x1e, 0x2, 0x0, {{0x3, 0x4}, 0x1}}, {&(0x7f00000011c0)=""/245, 0xf5}, &(0x7f00000012c0), 0x42}, 0xa0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r18, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r19, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r20 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001540), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000002840)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002800)={&(0x7f0000001580)={0x1258, r20, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @remote, 0xdb}}}}]}, @TIPC_NLA_NODE={0x1080, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x62, 0x3, "f11c52d64e438b5d652b516e1d37b31bfa3661ed809bd4c163992401ee59478db59cf2f5009f67453babae9d1f719e8b0241d7408aa92c3379100bc6666a4e74c307f82d73e872b8e0b11043b84702d51bab8995bcbb67dda123ab9143b2"}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17df}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1258}, 0x1, 0x0, 0x0, 0x44080}, 0x40) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r21, &(0x7f0000003cc0)={&(0x7f0000002880)={0xa, 0x4e24, 0x2, @mcast1, 0x239}, 0x1c, &(0x7f0000003a40)=[{&(0x7f00000028c0)="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", 0x1000}, {&(0x7f00000038c0)="d068555410048c8dc6f22c5ecc266fd9da97ef4f7ea4a3b721977d99a32d2074df2ead7b729ac058bbedf5d4fcb262852306817589261039dd19847d20f905d3ceda2ca64df18a42912c09990a88521e115cf7d145d3c15be2c19a6bfa625b52506db11c713602dd1abc548a73121de62e3ac99b798c5506104c52246b6355a8a4c6", 0x82}, {&(0x7f0000003980)="972061623dbcc2bcc0d1a36d549cf33e10a2b43cb79c152ba17c448180ed4e51a7dd5514ac73dfb0805cf6d6853ec74d6937f1ab32e9d8757472aab1473dee2903e6d179100b3d409b7023ef3129c0f9b2457696ce0929f87305687c3654a17f7a8b84d21a", 0x65}, {&(0x7f0000003a00)="a3f2bf4d1954e844a4b03836f61087ae73e7c162", 0x14}], 0x4, &(0x7f0000003a80)=[@tclass={{0x14, 0x29, 0x43, 0x59b9}}, @hopopts={{0x20, 0x29, 0x36, {0x32, 0x0, '\x00', [@pad1]}}}, @dstopts={{0xc8, 0x29, 0x37, {0x19, 0x15, '\x00', [@ra={0x5, 0x2, 0x330e}, @enc_lim={0x4, 0x1, 0xf9}, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x1, [0xc2, 0x1, 0x5, 0x9]}}, @generic={0xfb, 0x1, "d9"}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x6, 0x6d, "400d286032f6b68d3d115e71d98a58148c07eda352f217caf1e7d822e252647c9c33ff76dd61fc35d83fcdd8960336878bc819c47f14f290e8fe0ce48494916a1b9b8c3f89f240d18ccea096159bd80e90433312eb37b6b665f8c297c573e6cf877f24cbe0de99da88f8b4e90d"}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x3c, 0x14, 0x2, 0x8, 0x0, [@empty, @empty, @local, @remote, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, @private1, @remote]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x1, 0x9, 0x0, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x230}, 0x20048000) 3.886565393s ago: executing program 4 (id=2973): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000a00)='syz0\x00', 0x1ff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) 3.738412402s ago: executing program 0 (id=2976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015001500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a73290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab62800"/216, 0xd8}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f00000001c0)=0x7f00, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/19, 0x13}}], 0x1, 0x45833af92e4b38ff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=ANY=[@ANYBLOB="5c0000000206010400000000000000000000000014000780080011400000000005001500030000000900020073797a31000000000500050002000000050004000000000005000100070000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a0001006c696d69740000002c000280080003400000000408000440000000000c00024000000000000000020c000140000000004a9c4b6709a294fe23b11bfae79146c5fa00010073797a30000009000900020073797a32000000001400000011000100"], 0x94}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r9, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000408000100ff0001"], 0x24}}, 0x0) 3.713838813s ago: executing program 4 (id=2977): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x40000000, 0x4) (async) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 3.579336085s ago: executing program 4 (id=2979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_deladdr={0x30, 0x15, 0x8, 0x70bd29, 0x25dfdbfe, {0x2, 0x78, 0x1, 0xff, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0xd831a26bff483436}, @IFA_FLAGS={0x8, 0x8, 0x24}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRESHEX=r1], 0x44}}, 0x0) 3.41971259s ago: executing program 4 (id=2981): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x1d, 0x2, 0x6) recvfrom$packet(r2, 0x0, 0x0, 0x4001, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x75d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={r6}, &(0x7f0000000080)=0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r7, 0x0, 0x7f}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000440)={'ip6erspan0\x00'}) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000100)={0x8, 0x2, 0x2, 0x1, 0x1}, 0x8) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c24b9baa5cbff4b58c87e402f0c4232777c062eebb171b53c0d7981f6bd775d0a06995513ac604dfb5983797dfb11d30a48408fbcc6738671bddc1f0b0a9eccc06488092371c7ab67c7c0ee9792a1f3165214", @ANYRESDEC, @ANYRESDEC=r11, @ANYRES16=r8, @ANYRES16=r7, @ANYRES64=r11], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r12, 0x0, 0x7f}, 0x18) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9cdbd9d15d2dcd393701e"]}]}, 0x5c}], 0x1}, 0x0) 3.41404827s ago: executing program 0 (id=2983): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x3, {0xa, 0x4e21, 0x6, @remote, 0x2}}}, 0x80, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x78, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008041}, 0x8014) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e00d4"], 0x64}}, 0x0) close(r3) 2.563859356s ago: executing program 0 (id=2985): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b05, &(0x7f0000000880)={'wlan1\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0xfff8, 0x7, 0x8, 0x200}, {0x20, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0xfff8, 0x7, 0x8, 0x200}, {0x20, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x3ff}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x4}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x7c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) 2.197398529s ago: executing program 0 (id=2990): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r1, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYBLOB="ba089d7eba7236712b7282e76524f12764d1499b8e821d2d73c071d2abd3b7106e11436bb913871841f2d2553f154e62fab9f6966ce0e99cd505da186b5ccf6ef5b0923ee6955276b1e65a5517905877215660276313d7b8c94cc82e8203d9569ccd657aad1f881f594bbad32362369158328c7ab45395fa", @ANYRESDEC=r0, @ANYRES64, @ANYRES64=r1, @ANYRES64=r1], 0x60}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014c3ff0000120800030043000040a80019000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f6d7f3ef48286112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaac99eddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb06000000588a6364", 0xd8}], 0x1}, 0x0) 1.287709517s ago: executing program 2 (id=2995): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8091, 0x80, 0x3, 0x7f, {{0x20, 0x4, 0x1, 0x9, 0x80, 0x68, 0x0, 0x1, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x36}, {[@generic={0x94, 0xf, "b38fd83fa60fe94c4370c4a701"}, @noop, @timestamp_prespec={0x44, 0x4c, 0xdc, 0x3, 0x9, [{@private=0xa010102, 0x8}, {@empty, 0x15}, {@multicast1, 0xc978}, {@multicast1, 0x4}, {@broadcast, 0x5}, {@multicast2, 0x6}, {@empty, 0x1}, {@remote, 0x4}, {@multicast1, 0x2000}]}, @end, @generic={0x82, 0xf, "17cf1f03b49c19fb5a9bd42f29"}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@rand_addr, 0x0}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x8, 0x10, 0x6, 0x22, {{0x32, 0x4, 0x3, 0x7, 0xc8, 0x65, 0x0, 0xa9, 0x29, 0x0, @rand_addr=0xb7, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0x5b, 0x1, 0x3, [{@multicast2, 0xfffffff1}, {@multicast1}, {@multicast2, 0x459}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x1ff}, {@broadcast, 0x8}, {@multicast1, 0x5}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x7}, {@multicast2, 0x5}]}, @ssrr={0x89, 0x7, 0xcf, [@rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x54, 0xab, 0x1, 0x2, [{@multicast1, 0x8d}, {@rand_addr=0x64010102, 0x7}, {@empty, 0x401}, {@rand_addr=0x64010101, 0x8001}, {@broadcast, 0x94e1}, {@remote, 0xfffffffa}, {@local, 0x8}, {@multicast2, 0xd}, {@remote, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xfffffffe}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x52, 0x278, 0x60, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x0, 0x8000, 0xffffffff, 0x8}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x700, 0x87, 0x2, 0x6, {{0x1a, 0x4, 0x1, 0x3f, 0x68, 0x65, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x14, 0x25, 0x0, 0x0, [0xb, 0x3, 0x101, 0x0]}, @lsrr={0x83, 0xb, 0x7f, [@broadcast, @remote]}, @timestamp_prespec={0x44, 0x14, 0x1d, 0x3, 0x4, [{@remote, 0x7fff}, {@multicast2, 0x78}]}, @end, @rr={0x7, 0x17, 0xf3, [@remote, @private=0xa010101, @multicast1, @local, @rand_addr=0x64010100]}, @timestamp={0x44, 0x8, 0xc3, 0x0, 0x6, [0x81]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x8000, 0x7840, 0x8, 0x3ff, {{0x12, 0x4, 0x2, 0x26, 0x48, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, {[@generic={0x86, 0x6, "8c2789df"}, @cipso={0x86, 0x1d, 0x2, [{0x0, 0x7, "e3555915ed"}, {0x6, 0x10, "507e48a990c33e337e8f2ba18d2c"}]}, @end, @ssrr={0x89, 0xf, 0xc7, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}}) r16 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) sendmsg$can_raw(r16, &(0x7f00000005c0)={&(0x7f00000004c0)={0x1d, r17}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)=@canfd={{0x4, 0x1, 0x1}, 0x3d, 0x1, 0x0, 0x0, "5f885520c668977d43b8bd2b5f39b902b0c20db4b66adb2e85dc4f514782eb811768d5b969cf6bab67db5f7998bb972819eca27236e391986b7b05e455c78bb0"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x240088c0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000a40)={@remote, @rand_addr, 0x0}, &(0x7f0000000a80)=0xc) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080), 0xc, &(0x7f0000001500)={&(0x7f0000001940)=ANY=[@ANYBLOB='H\n\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="4801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008c00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400c400000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004006600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004007200000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c0102803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000014000400000005dd05000000080005010200000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="14004100", @ANYRES32=r2, @ANYBLOB="6001028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040005000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="7001028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000e0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400020000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="7c0002803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400c00016009c0400003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="7002028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000e00000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400050000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040081ff0102ff7f000009000503f40f0000720208009238000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004003f050000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fbffffff"], 0xa48}, 0x1, 0x0, 0x0, 0x1}, 0x800) r19 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r20 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r20, &(0x7f0000001900)={0xa, 0x0, 0x20, @private2={0xfc, 0x2, '\x00', 0x5}}, 0x1c) r21 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r22 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r19) sendmsg$NLBL_MGMT_C_ADDDEF(r21, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xf8e2, r22, 0x1, 0x0, 0xfffffffd}, 0x14}}, 0x0) 1.254848175s ago: executing program 6 (id=2997): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000002000128008000100687372"], 0x40}}, 0x0) 1.17617339s ago: executing program 3 (id=2998): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x8da, 0x12) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000140)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000540)="cd437eac26d6fb4d0b1e979bc998959bf36e8576b2bb673f1500a49875a8fa6a77541456166ba6a8a90a5430272bf1404b666b76d032ff34229449fa367fac14e25c63deb47fed0cc4e570a4e4c138c6637c0d0092414cb1c2f432aba9ed747467c8f6d2b4811c26b1d8f4256ee4ee91b8839d65bd65aa8b1e78722a493bbfe15b2a1c9a961dd1808dca53ce5a627b31af3cd20cee1634f53d88ca0631232c0118961a4916335d146ccc5b32b9ce90ffff", 0xb1}, {&(0x7f0000000600)="cc91e9abe2d9a5562386eab2551385105cc2afad5e8b31a51df17c3ea33b04b775710e242ad03587cd4bc8285745300043a020c93b8d6cc7605d58ed04906a8fa1b3c9134fa4faed272854ae93f190a39cacc9f3e0dad2e7770adc2516e10e0ae4c02679255b9ae8d40ccaf04f5b6fd9ad570f1e90e73b250e76ca7812080ff5a02edc5c7734a1171eaab77e7b3d2d9b9e92002a1bbe841a6d91db1b31577445a330951d76fb789cb37cb3a0cb283359c3a58c6dbf7b35e35f", 0xb9}, {&(0x7f00000006c0)="413495b2e996a6448ed24e150b2e1e456c96ea634b4aa82d6c9e45cd9685521d0a82e5ddfb59a83ac6c97f8cefe387d57d274685693e0adb2815536d29ebdc49a3a42b2319c8f5b75bf9dea91d184aabf8f0183758922cb475cea665e573f37c82d4cf903bb411d491f402c617e63a108d234083b1c166ad29e0", 0x7a}], 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000001f40)=[{{&(0x7f00000007c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/163, 0xa3}, {&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/227, 0xe3}, {&(0x7f0000001ac0)=""/184, 0xb8}, {&(0x7f0000001b80)=""/213, 0xd5}, {&(0x7f0000001c80)=""/171, 0xab}, {&(0x7f0000001d40)=""/130, 0x82}], 0x9, &(0x7f0000001ec0)=""/99, 0x63}, 0x47}], 0x1, 0x2021, &(0x7f0000001f80)={0x77359400}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001fc0)={0x0, 0x9, 0x7fffffffffffffff, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f00000023c0)={0x14, 0x1, {0x2, @usage=0xe33a, 0x0, 0x7, 0x2, 0x100, 0xac2, 0x0, 0xa, @usage, 0x0, 0x4, [0xffffffff, 0xfdd2, 0x6, 0x8491, 0xff, 0x1]}, {0x8, @usage, 0x0, 0x1, 0x2, 0x8, 0x3e, 0x4, 0x4, @struct={0xfffffff8, 0xfffffff8}, 0x2, 0x540e4c75, [0x5, 0x8, 0x0, 0xe6, 0x2, 0x7fffffff]}, {0x10001, @struct={0x4, 0xacd}, 0x0, 0x2, 0x3ff, 0x6, 0x7, 0x5d1, 0x441, @usage=0x5, 0x4, 0x40000000, [0x4, 0xfffffffffffffff8, 0x8, 0x4, 0x0, 0x80]}, {0x8, 0x400, 0x49d}}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f00000027c0)={0x18, 0xb, {0x2, @struct={0x3, 0x9}, 0x0, 0x101, 0x0, 0x9, 0x3, 0x8001, 0x22, @usage=0xf6ec, 0x7fff, 0x0, [0x3fe, 0x3, 0x7f89, 0x7, 0xe2be, 0xfffffffffffffff7]}, {0x3, @struct={0xa, 0x8}, r8, 0x1, 0xb787020, 0x3, 0x0, 0x2, 0x8, @struct={0x8, 0x7c04fcf6}, 0x7ff, 0x27, [0x3, 0xfffffffffffffff7, 0x4, 0x1000, 0xc, 0x80000000]}, {0xbf7, @struct={0x15, 0x5}, r9, 0x1, 0x80000000, 0xbf, 0x0, 0xc5d, 0x409, @usage=0x8, 0x0, 0x3dc, [0x7ff, 0x10, 0x5, 0x2, 0x0, 0x4]}, {0x101, 0x81, 0x7f}}) pselect6(0x40, &(0x7f0000002bc0)={0x1, 0xd3e, 0x1800000000000000, 0x44bee0e4, 0x4, 0xfff, 0x947, 0x9}, &(0x7f0000002c00)={0x401, 0x7, 0x6f2, 0x5, 0x40, 0xffffffffffffffff, 0xa49, 0x1}, &(0x7f0000002c40)={0x0, 0x2, 0x22e, 0x6ed0, 0x100, 0x2, 0x10000, 0x7baa6c79}, &(0x7f0000002c80)={0x77359400}, &(0x7f0000002d00)={&(0x7f0000002cc0)={[0x6]}, 0x8}) sendto(r7, &(0x7f0000002d40)="6139993a1188fa2b31ddb42b8136efcc5a002c0005f762c1a35fae400724ebff720cba957998d279", 0x28, 0x24004010, &(0x7f0000002d80)=@nl=@unspec, 0x80) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000004100)=0x0) r11 = getgid() sendmsg$unix(r6, &(0x7f0000004180)={&(0x7f0000002e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000002e80)="7dad0aa9b519717a7438fee6233a3cfefd7ceda1253fdb", 0x17}, {&(0x7f0000002ec0)="493bb657e2063cb3fc59a0652de1ebe1f77549642b8610c015a54e8b44afe24b75a8d549d406798214dd0619f6cbd07d1f3dd6f93a418fad0264320b9a5f9b2ec44e676e80a1ac65743850d6357bae1e858c6ee307d74c8e57110d2713f8b77dbc1aa6a6edea8cc4102a164d98fb78974a787c4da3f9405a5f722f2da0991b95469a955c92ef6e256ae266e461fba90b4a1d45adaa66f3bd1b45cd77022720bfda939a4629ea49fbef5946b352d8375f9deb2bd90d625b6a", 0xb8}, {&(0x7f0000002f80)="ab013950f5022017464511d80dac4bd152ce918aa8e159b00a1ea79247a3b5caf5ccae9d5cd91ac2ace9afbe1e1b41573f4d5311bbb12946112ace0119692ce222c5c0d7e6c9395fa9f7eab051d305e18301781a94915e90e2dd38b7c6ba3d7a7d6ce330412e29c38066459b624f0c3c7b2d44aceabd6fe9ac15197b11a349b514e96eeafe18f86882e873b2675325d840cc09e3a10623e767245bf23aff6fb200b6f729cf21894234f1df96ca16ef62f4a18c59e2d8633d50719c2ac1eaf28e7893b236712988742827fdd27d44ca2e75fff550fee93b6d97564c9b88663ec307f91d780f002db932cfa88869f820dfe88e9b1ab23228948c2265cbf2561c8fc198679323eeb7cb96001507bc16d0165e5421982a743cbd9719675eac83708e01823470f5c89ab24c7cba4a660278171c16f410d6f5142b4ba614e19bd346c28d2f19ae12e8b22e3d74ec7161c8a933060ec432e3a15eb3f77b70b0041dd16982590e9014ca47d80f8a0fdf7eeadc783d7bb8c90a80ec10a12e5b230f87697f3c68258ea45a4ddbddc393c786ba5962268e5ea7e9e43b32a480e5f0a0097865b3dda3c12dddbd7ac96e600fee94a0d5e0e1a1d820446aee6dbb019fab70647ba7a384d7cf8baeac1157ea1e3f9ff10b8444632f56ae0082af69b6abd5e177d5c8d59b23154d51a9ee3803b20fc1b714f983a83bfe9c6e10c0091b37e07a0548f3e04619d7cdd9cf8176ae29db1c6c6928bc10ffdd9b6b046f90406f662e45feb7f86fb6dec509984f87878dc88fe954f0fc2b40ba130e485cb2707766acd0f01a4336b4ea6a8f5a5435f010d0f419fa156667784bfd138b3ca0d056ec87285535405eb93503b9a4f809547e5d50ee243814e3b7726d7a52f6b71c568334b5d145ec1814a3254398fa51ec7a3f50dea9cc907ae13fcda05f06abc5ac30b39d7b27e76645702244e42a8f3137c3a5ebfc672cf838528b6da057022527ca2c0e1e42c312e3064907eb54b35764efb8ace0a8ec506e943e755bc22bd2fbc2885405f5f32e62474f17826a231b1efefbbab8a1d2b93c2a3834b8cd4a2b3eb27e74b7caf0ac775d88dfa3019f9fe54dd0ddfaea7f3928f13b0a2a401ea16f14ceabe5fddaf382286510932c6c62bdb4315dbafdac486ea01a32a1ee9c2210f40653f04e0d743b40e8cc4017053bd96f878bb97eb65ee9e713ff1c7db900e267ec84da927cf98a6602c8aa8c51a78c6cbc9e87a956d8892e71c051bd60670001cddff0a66d85d9800d1fc7cfb1028359fb4cd1e739fcef09b7508e3f0f32884d85136cd8e53e8cc9f1fcddd3f21c2674d9e6a389ec1949e6cfd53c5f9b403655950f6d5675bd0c029a637d2a67e2a412a6a44c9afa8d1d64f35aa819b0d767eb5937e948ce7af4c8e219521e56f259b61beb7b93539a17468382bc035013bb2877606d964593e61ae7b2fe262d591ad2525454996cc9cdbcc8764c5f033f4b56b24b849e6e5709b4a0e71c812b3de00f05da3029610a493129e8c0fce218389f2b07259098d05dbcf1c321d9f24e31d1ab1b4d73f74973d8aff88c4a323d1b5475cf7f9ac4cf35b6c0e281932be3dcffd356ac96a37bd726d106383accc10dbab2ba557f190db74f380910d845ee3090ea22cfecd2ad3fec8e557c793f28682f2aeb66151eeee7599912a5c3301f037c668028d2405e8a8add7d397ea44808ae9d2e1ce3e8a54e4d9f73ce45b3199d8644b94782392c2f797dec5a3547be65d9c777e938b20f3042a78b54f9062a16b8ca02047ac2afb9c268411ffee402230c53971362fa980b3a8b68ac4b3587d7611374c79a8e7ee67288880a014c552346e1719617ab4fcf16c4b3ca00b6672f040392f370eedcec4729fbaa475427ff69630acf2358c3529848ac52e31801173359e3a9f749d5fa95f0a9906b053000b04562e53e206fa6fbb752fa2cea188aeb3170baffd4edc170c1ea239f349bf7aaaab954878925a43d376432a59d8a753e176db802c788add182d9f8acfb56e237e3db71dd610ded27b8cf6d81b51998efbbe46a1d7307d5fa59b5905ec41287f0004012a5cccac58c5388098b2530b5c54c24d873bc71d3bf0ef1312fadb41b6b66345fb40712ad3d9944bb0b37cb176126995f2335a219e89235cb632c8e779ccb36dbeab94f79abbe4615121b0a76fcf3f721ff7c437fda10c7c8488b6cdc6c7081ca3d579a8180d606b371e3f167caeb2d0c91a5c8b3c2716dcd7ad71e53883beddac1eae2a4ce617c1a003aaddd1b55df9e23be6f0ad51a04afa2f7d4298e94c779ee8b2ff0e248efd0bec41f03530499fb5207ed2b6f7103b2fd6c366f3c37b60e2856dda26158dd6b4edc14aafc84dbe3b591d357ce25f86115bdd52aa1463dfd50d324449e94a3b3eafa2c278d52314f6827d5e59d204419a0bed16d0ebf3b7e2feca9be95ddda48bb42a0115b47add7b520a3f196928bc2d64c33eb6780a2a3f18073c00bc91fc9771dde45058d3521316247fe3b9215befb33a0fa424d8cae7d111cfcb2fa37f8fb832f0bdd1cf4091b4843d95628f7c4b95a24b8132b0fdb09a5cb911f4ede0d7c6229f32025b803036a8714ff6d303bfa2f49ca2f41d465bea0d50a5b4ec567d4a4edd61e8a40689d71a4a40d10817afe025db930b3684198bcc9aa953ec750e52ace363c035c62076d71a2786b52f01d13e865e4c49bb1a7a2d604ef223c0369649b3a72cf2a26fd054324cb5d0325bf75dc7d0e0654ff3b78e36b9f7a77db7a17d4098484ef354626ceba3548250eb81bfadd6cf0386f6fd8ced09cf01a7104b949bd9f7e793b521cad1a7f7f00797d57394bbc149b3461dbc5e129fbc5306060c27203d438a46a7a2d4442e5c1cbc4cdff1529e1fe13823f506eb60a00977314cc8fb626b7aa2185e61755688a96bd0e0a1f0b1e2e99d6e60dd02cde3282e9ea0fe905370482977b798ba010800eba307d945955846d0a1617c4ad43293b73c547aaf1c9a1f89a60b9be9d901a2993621c8aa254652a21ecea50635326939509795aad28d468bedc3ba3ba5c060fdb51073aa6bdcd99b9a2eef2787f1ec4d40e7bb25011d02c576f5699755df0b7db87b8237660a9ec11dfaa1186487704606d53f8d2eda477bdab82b986a4291ad24f40639d4cfeddc07616b1022419e3d2d81e4ee106ec8a765c033d42a0a217dd3a2886f4558da2922fbe0f735deb4f56910235d098f750c534329306215ddaed368b64b840d289788fbeccd9e598acc6f1f58d675a30673a5824ed8ffb24a0564482da4ef2a4e696cb437cf52fb146d85e1f6567b9f5e4ba79d8a463b8a108cf1cd5766aa7daf6030a3c8554bfdaf72b997683218f76b6cf51155357c202256f13c08af77e771f0ab75c6cb9d58915acc36efaa6965e817365c541795b17e0edbac18c86bc03dd0e896d5bf2996982710444275f5fc1d10440b6ed60a9ba19f41dd9abf425768fcd2c7ab1e83ac4c45cc95ed6aeb6c8475db684b72207c27507be2784ab3b2f3c34875517f74ef40f45a0857d66f9ae064a32188f1c541536f7ba3d02137db8932c4d60f35f7fa40b7c79749b551e7c8aa7d5548a6c7683abc5320f113c259733c8a9a0d20d7efcd8f2c13f0fe9a77519b04649f315fef351c7c1ce617d9fc99f3f0828c1dda96d29599f012259c82df60343e5c3fcf5a92e9e12aadc7a02ed56c07f5b01a028e80269928ed84ba24c4570314f7e6a158a9fc52aae9f6420a2f9f51fc0cb5e575a763a3ca377b0af2899a4f1ceb2d5436c4623b6e27a18d42f34678135f220abde00cafda3c7c48b3f9a5987140d6b72a724b3ef989d7de4cccbe71c0464318ae42edf3cc8ca74951e11f087ea1841026357277853002b14e1ea334806e80a489b587f8019d4ac7fa4ed186f2a1073fe5dd0604cdb2c3b339367a93924910e3a19ea44736d8e13e3a90f0383e6d65150367f92359ceafbff0b8e6a52e6dad2e37be418182ae1fee19c55de4b6326763799cf273224dc5be784368fc6f74b182ee2c629e60fb0686a2a3ffc43456b6180c14a638126f677e76abf26c1535821e745ffc0a1487a757252b38af3136122fd03d539f5f646191e2cc4d42ffd296403c25190bab716f99588dc511a0c4fc783f7b0bbbc17f1695595be64e86dc3e1868a45a5431c49330db9e9ae3f2698aac2b4ad1da0740d6f9e8142a5950d68cc4569d2bd2972ba2cf39a9b1dfc6f5b2733af5442a0c6c048ebb428c84df3a4edcb18101a9572f9978a95554ff98a7f4322288912400d9f90af5db27786ca1caadd80cfd4a5743a8bfc0597a85f26853ac9540d081e1e61b48a73763c7d34ce1115159248f10b4ba1c4466944ef0a08e2955982a23f9dd61d2e1ed1dc34635b746a47de70adb08ad609eecf68a85613a02e64da8167e8222d21fd578c5d37a5ea068b3ec3d81d7b14f47112947a4cbfcfa4930b32cfb284a00ca51b5d2bc521e01fd5f5977804dfed8f37dc0a1d231327585489125f1c35b6c234c8e47adceaf934ac514fbdde70b9974c980249ac69b98ab529574f20964c206479690a41c6c193c51e40ac78c0b0bbe4f273f414777e57e42ffd6cc8d7dbceec90bbddc8cdb381aae990e517776f7085591997ffc8e859123bc7fd0f8acec6bffdd684ebab2b2123f386b608d12ad049b63a8c93368f510133be6d42f11f58c8edb3acc4580f1ff73349d0e993f7d29c64fe279576d1756d3c0a9bf1375f82ae79b24ad714517dedd803bb134955c11c36400744d659d23ba72a4bdaecbe697197098d39644eb918a94deef5fc06d73101da733388f521851e7360c3197a2082dc647b541ea34a89ac245db1b0663c618366c1523c5979effd28bc5560c772c5c7a302693b410a1f7e70220f849fe102310c2ae53e6aba7f10d375b356572457725a55a2cd51ff8975ca9fca95089ed4ef6c7d6b63c3c469fe1336f292dedd80b821711e787b40a875e9b583c26c63ab3dabc82d9050aa3165a5a7d781cc052fe941875ae14f729eb77fe347429887b06e3dfc1d966ddfcf4093fac47770ac13ee4c47f5607cf824bf5d31286fe4b9f3e5ea2208eb8bbe733ad31091317fabfa64b2f1cb8342e98587d17d9588c1f4d7fd733cca1b377a060019115ba4f9b37493bd0b23eeb4daa10f4d9e8666e8c30019f72f12742ea2c720c86c4fa9877a4e6d7e0f41449e0ab3ce0f7fab64ddc189c7cb6e8436b4fdcd2bebc133cedf840d3eb8c91cc7a7a05860abd8472c6ab5422e6ff9150a6aa6e4a0e658443da69d388e8e43cfd044f6f843e8f0f1c84bc936ebeca7157172e50abc447c246aa2aeba321a329e4c8399ba00771815e02115b98bd6448446d1d0cabbd405eb3984a12b90b887b226c4fdfc812284189118189e3233edf1146b059cf606a07a9363fd011a787ec2de2933fd0fec0cba7533559e86e360bf74b76127222b2508033ed14aaec3b2f0bb6c36a7041fea8700a2040514fbb1bab3dd54254c85e108634f80f2ae825ee7f53d5a6d8db622e38675426aae1f5142b240b50d607d908fa5beb1b0b4c6bb87219326d510f1b100477c23de4c95148612b90b47be6a01b60be78b3b3b12a383d5b4a1d5d0e7ff0b8990fbbb4e45fca07699e24882ac86c40695db4c4bbba95e64c38350328fdb554a14d79e1302c1ccc5f1c9156ca3ac096ce8cea69b6740c6b8bbfb912e19f52d8aa7043221f36c6ff8c67397e2bdcc78dc53e7dc5d8d407fc650f14e3adde48a8a1a87d237ba9dc51de0430dcff7d6db70b56f8bf9", 0x1000}, {&(0x7f0000003f80)="4213f57a6696d136823238ec6e97e4e286a392311146df9f9952b40dbff801d93ab560d611d7aee87466ea0ff576f04341669e9b4dabf66c5306d2ee479b56930a267c0ca42fcd24a0eb00ee2faa9ff555d40c9b01877b9953328831b6f615b1beab65746b91a6ff745fb2979ad7cea613e00660a92082e37ff37788903e6198c8fc3e93193bff8a77ffbf88ae78dcbeba4fbba2efe142a4043c048e785a69eb54503bf2952132ecadca96f5447bce1d8c078aa4189fdf85ddc563", 0xbb}, {&(0x7f0000004040)="43066bcfa59724eb4f11e62d72957109ec777ab589267def4cc40c0fb542eaeb0f34", 0x22}], 0x5, &(0x7f0000004140)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee00, r11}}}], 0x20, 0x40001}, 0x24060000) pselect6(0x40, &(0x7f00000041c0)={0x8, 0xdc, 0x0, 0x2, 0x1, 0xe, 0x8000000000000001, 0x4}, &(0x7f0000004200)={0x9, 0x3, 0x5133d4de, 0x1, 0x0, 0x81, 0x5, 0x7}, &(0x7f0000004240)={0x6, 0x6, 0x0, 0x1, 0x800, 0xfffffffffffffffe, 0x28000000000, 0x4}, &(0x7f0000004280)={0x0, 0x3938700}, &(0x7f0000004300)={&(0x7f00000042c0), 0x8}) setsockopt(r4, 0x5, 0x8, &(0x7f0000004340)="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", 0x1000) syz_genetlink_get_family_id$batadv(&(0x7f0000005340), r2) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000005380), &(0x7f00000053c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000054c0)={'erspan0\x00', &(0x7f0000005440)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x3, 0x7, {{0xd, 0x4, 0x1, 0x2, 0x34, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @local, {[@ra={0x94, 0x4}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xe7, 0x3, 0xa, [{@multicast1, 0x10001}, {@remote, 0x1}]}]}}}}}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000055c0)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005580)={&(0x7f0000005500)={0x78, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_LINK={0x8, 0x1, r12}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x1a}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044800}, 0x80) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005640), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000005740)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005700)={&(0x7f0000005680)={0x68, r13, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x4040890) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r14, &(0x7f0000005880)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005840)={&(0x7f00000057c0)={0x80, 0x3, 0x3, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x28000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x101}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xfff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3ff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xdc4}]}, 0x80}, 0x1, 0x0, 0x0, 0x8020}, 0x4001) 992.092827ms ago: executing program 6 (id=2999): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="8402020100"], 0x18) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x3}, {}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x8, [{0xc, 0x0, 0xe859}, {0xb, 0x4, 0x8}]}, @enum64={0xe, 0x9, 0x0, 0x13, 0x1, 0xd, [{0x9, 0x4, 0x8}, {0xa, 0x4, 0xcfe}, {0xa, 0x6}, {0x6, 0x7fff, 0x100}, {0xb, 0xd, 0x8}, {0xc, 0x6, 0xb}, {0xe, 0x7, 0x6}, {0x3, 0x80000001, 0x10001}, {0x4, 0xfffffffc, 0x8}]}]}, {0x0, [0x30, 0x0, 0x30, 0x1e, 0x0, 0x61]}}, &(0x7f0000000100)=""/28, 0xe4, 0x1c, 0x0, 0x2}, 0x28) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', r4, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000400)="42bc57755111fd9440d00c7eacd7324be6a234fa4c710f3b1b475c1bead92668f4e3e12882c0983442b3e5a8c33a57dd306bfa0421c03fd5eb564dafa269dbb64c7f36b6246ead4799cb32b98620d472da9cf2b60554e6def173783e9c9e988f5346ac0ae6ee8506635e0bdede0267a08e0e37550ce0e91592969b92ead132d300ce099a039647d16eec8ae7165fb7b5868b37857a5a301ec5c3127510c942db1f723b2dea05795ec248a3ca7dd572d78fbd50fe7b4726bd1b31a286959597dcefc62cd9cfe249719872d87d366b815e67c413d7ee88024756e3fbeb5ee444", &(0x7f0000000500)=""/207, 0x4}, 0x20) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 989.705737ms ago: executing program 2 (id=3000): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f00001500000000000000000000000800120000000100000000000000000006000000000000000000000000000000000000000000000000000000000000002001000000000000000000000000000205000600000000000a00000300000000fe8000000000000000000000000000bb000000000000000001001800000001"], 0xa8}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="4b003300509c0600080211000001080211000001fffffffffffff3ff08004841940000000000000064000e0201000406b40a010006000602090072060303030303037107254c79370f04d0f208005700060018"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={0x59c, r4, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x590}, @NL80211_ATTR_FRAME={0x1bd, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_b, @random="51333adb4f3a", {0x9, 0x3}, @value=@ver_80211n={0x0, 0x346f, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, [{0xdd, 0x60, "f1f40385c24868a8edcdf7ef09311201a80f296865e08595ad94df31a10f28a4b90f3f03465e4237a763d573cc22df841c739c34ca15b524051eef861cdc1c4f5597a5159a39f0440aa0fb2ff044ef260fdbcfbac9ac799e93aad1daa9424ea7"}, {0xdd, 0x54, "202896a3c2066705b3bd1dee7dff12e7ac17bb5a5f45d2eda17112aa0b7a721b4c1ac1e3935baa64d3b7ee7272fc610aba01f652f73d4e4577553cc9f96994a9f93104a82801d63871f251a530b0f1b63c9345fa"}, {0xdd, 0x42, "3dfbc178c72c5a778c442957f989c767aa3886c91bacfa40e5247c545f1e9eb92346434adc8d64f57715ffff6be4b6b20aee66736acf17778e3048e98ad0165c630f"}, {0xdd, 0x97, "3916dfdf0a2e42988d636600f1b946a0d4cd4f114da3782aa14685d2d6d979832438c24f664b50a2ce0d64a5caa04b08735ed8c57575907c087e78864980972ccb4f37031d736d22dc2b26f38970c796a600ad21c82a60705c92608aafbf0b6c8905b4175bfeed077ad8445a719bd4ddf4c96921ac1c1c84dd23e2c99ccd0a15a7a9176dfc4b29a219e936f61d64316a5fbb43ec74070d"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80000000}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}], @NL80211_ATTR_FRAME={0x3a0, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7ff5}, @device_a, @device_a, @random="81520bc3ad06", {0x2, 0x6}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0xfffffffffffffffa, @random=0x2, 0x11, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb}, @val={0x4, 0x6, {0x7, 0x0, 0x800, 0xf6}}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x0, 0x0, {0xfffffffffffffff8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0xa09, 0xc}}, @void, @void, [{0xdd, 0xc7, "41f95695bfac8f311a454c3711014da837d8bd13f98080c0f6615886aef852e7ba4faead85d0bbef0283c0fc667f926147d96e8a3081903ed6921775e8abe6f8bc17f734e18d17dae1c3f1c4fc7a4e7766ea5249526e542848cd6bc0dc5e9e94fc4ac6d5c9420c02c288b9f3c02cc664cfec9a86e0b0349514de7a83106bd50883de1498ed09509bebd93b7dedc3e4ef118e1bf8f83dce31e82dea6e364ee831516cd5c91947831b13c747227e4896984765031e3eb71f775dfe8ea3f0f1998fffe43e4e9a4a34"}, {0xdd, 0x93, "66388ff75e5668728168beadcf57f3b7901b20c348dd61cfee42569cf207d7ac52d65c3b3550e3fd60280e64f646d7e79667cede529019b48216478937d76ec97ee2f88767d3a4c742d72ceb78de681d62bfa434dd79ce2a622eda9027816e172983e71e54e44744ff6eb8f159c0a319dfbee96df96ba6a14a095e0d765aa7f83f33916d880ada85b3c53ef734c0f24ebf3ded"}, {0xdd, 0x62, "ae5c08b67abdcd106c344273ceb977f214b98ba769a968c008f542bee88fc9cef7b0dacd6ec37d0a8c613082a802c0e74cf9a3b332c8d72ce0971a5b6b1f56e1a0e9cfdf41a61381508e4864796f9fcd246f47a5631fa8011b059121f1a5c93ebb77"}, {0xdd, 0xdb, "6a3754f9b00a5150f69e3f32a680a26e854357deeb1f2e0e8f0cb0769ff2f70a961e70fc3896e47a8aad0a7aa31e1b187870d42a7dd63a4e56c9770dbff03bba20cd7cbf7bd81c1da72b2de001db637b1013210d5d6feb70389375441db52a6d6dff506455fc8d7a1f2fac76573b5e4b1419c385a1fb3a16f07b7f6e96d8e13fc607f2f0bf971b426c2208231c9dcccdd7a3796314604a92e699ca03311b7372cd294f063e85d13e3b47ca106c6f0237fa7dc371c4baf06b20a03142c266107725986a44c9f1a83d7af110a7663a0a4efe01539da4d6192d8ffa7d"}, {0xdd, 0x50, "854049a3b8efd15b16d5ba96bdccf232224d95cf5b4ebb4e25c317049c18eb4510e86f216b89d4f8524eb809982a56fdea9b8eff4b3373331abc26fe211d473e6dabbf202f3019680cf1f37f1e3f9297"}, {0xdd, 0x13, "c8069de6a6cd3262bcfe76506c37639b94849c"}, {0xdd, 0xc, "82e4ee10dc10dd2ef3da982a"}, {0xdd, 0x2f, "c80eb6362a121e5075adb0ef15997395ffe3cf8ffbe7c58674d73cc4f307f4711c51c2fc907c659a92fb3d1bf070d8"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c10}, 0xc050) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400e0ff5f0901"], 0x14}], 0x1}, 0x20008040) 914.690257ms ago: executing program 3 (id=3001): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x7, 0x5}}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x50}}, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) (async) syz_emit_ethernet(0x82, &(0x7f0000000000)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)={0x20, r1, 0x539, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840) (async) syz_emit_ethernet(0xa6, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x6, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x22, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc433137593009290"}]}]}}}}}}}, 0x0) 834.023442ms ago: executing program 6 (id=3002): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xe83c, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b36aa89aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab40c4ce63bfba9bc4bca883dcc8495f3ad3176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c417bc19b2b2fd827df94d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbefc538369959f773a4cddf9e90aa9b73270280d0cab060cfbd99bb790cc95042ba7605f8fa201a80ce6c236a9fa14000bb8fbaddbfe180c573c325977484f45c73b2572663dde"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r0}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x4576, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @remote}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x3, 0x0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r11, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{}, &(0x7f0000000740), &(0x7f0000000780)='%ps \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x14, &(0x7f0000000480)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000000540)='GPL\x00', 0x0, 0x29, &(0x7f0000000580)=""/41, 0x41100, 0x20, '\x00', r8, @fallback=0x19, r9, 0x8, &(0x7f0000000640)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x0, 0x10, 0x800}, 0x94) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x0) recvmmsg(r14, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0) 711.697168ms ago: executing program 6 (id=3003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x2b, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2fc370df}, {}, {}, [@tail_call, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @generic={0x40, 0x8, 0x6, 0x5, 0x8}, @jmp={0x5, 0x1, 0x8, 0x8, 0x0, 0x50, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x2e, &(0x7f0000000240)=""/46, 0x41100, 0x41, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xa, 0x7, 0x3ff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000340)=[{0x4, 0x2, 0xe, 0xc}, {0x1, 0x5, 0x2, 0x7}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYRES16=r6], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4048090) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYRES16=r6], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4048090) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYBLOB='H\x000'], 0x64}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40811}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) (async) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCGMRU(r11, 0x80047453, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r12) (async) r13 = syz_genetlink_get_family_id$ieee802154(0x0, r12) sendmsg$IEEE802154_LLSEC_SETPARAMS(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r13, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r14}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r0, 0x4, 0x0, 0x101, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) accept$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs, &(0x7f0000000680)=0x6e) 709.202804ms ago: executing program 2 (id=3004): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xd, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000814}, 0x8000) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x4, 0x1, 0x8, 0x0, 0x4, 0x7fff, 0x9}, 0x1c) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000001540)=""/4096, &(0x7f0000000180)=0x1000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 674.749305ms ago: executing program 3 (id=3005): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80ffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) 572.004522ms ago: executing program 2 (id=3006): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xb0, "7957245263c2aa6786a64690bb03a9974a7c2f1694a272eb69e642df0b7cb8fa50443f341a0687565bb607685dd2d5f2963f7e877fece1a483c807cc556945ec5f4b6a632d24ad0b4ea1cb39db5ef939ea73edbc48c709a2358283685228f752de9efb050cf353fa0850674783272e16771b77f16864563117ab03273a2a66fc34d4b0eac0d9c79e27545bcd2eb4fbd1163c3cdd99aaa5561a831285fd67782b9a61463e3b43e66105b2f1627785b69d"}, &(0x7f00000000c0)=0xb8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000000) (async) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) epoll_create1(0x0) (async) r11 = epoll_create1(0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0x0) (async) listen(r12, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xd, 0x2, 0x4, 0x9, r2}, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000fcffffffffff000000000000000001410000001800170000020000000040696209007265746170300000"], 0x34}}, 0x440c0) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r14, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r14, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r14, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e04476fbe702e073ef07b1177175236dd2be1232", 0x14}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r14, 0x6, 0xc, 0x0, 0x0) 459.879576ms ago: executing program 3 (id=3007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@ssrr={0x89, 0xf, 0x5b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @private=0xa010102]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1=0xe000002f}, {@multicast1}, {@private}, {@dev={0xac, 0x14, 0x14, 0x4}}, {@private, 0x8000}]}]}}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0xfffffffd, {}, [@typed={0xfffffffffffffefd, 0x5, 0x0, 0x0, @u32=0x7}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@polexpire={0x117c, 0x1b, 0x2, 0x70bd25, 0x25dfdbfd, {{{@in=@multicast1, @in=@multicast1, 0x4e20, 0x1, 0x4e21, 0x4bc, 0x2, 0x80, 0x20, 0x3c, r2, r4}, {0x800, 0x5000000000000, 0xfffffffffffffffb, 0x2, 0x0, 0x1, 0x2, 0x2}, {0x0, 0x9, 0x5, 0x9}, 0x100, 0x6e6bb1, 0x2, 0x1, 0x3, 0x2}, 0x7}, [@extra_flags={0x8, 0x18, 0x7b}, @replay_thresh={0x8, 0xb, 0xbf}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd27, 0x80}}, @tmpl={0x44, 0x5, [{{@in=@multicast2, 0x4d2, 0xff}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x5}, 0x34ff, 0x2, 0x3, 0x8, 0x922, 0x0, 0x3}]}, @algo_aead={0x104c, 0x12, {{'authenc(sha224-generic,lrw-cast6-avx)\x00'}, 0x8000, 0x180, "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"}}, @policy_type={0xa}]}, 0x117c}}, 0x4000804) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x854) 451.593573ms ago: executing program 6 (id=3008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400feff0f004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff0600270000000000"], 0x44}}, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose}, [@null, @null, @default, @default, @rose, @remote, @rose]}, &(0x7f0000000180)=0x48, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x1, @bcast, @rose={'rose', 0x0}, 0xeb, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, 0x5, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r4, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "416643c46427168209669d736b27af61"}}}]}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x7800, 0x7800, 0x4, 0x92c8, {{0x2a, 0x4, 0x1, 0x5, 0xa8, 0x68, 0x0, 0x3, 0x0, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @lsrr={0x83, 0x1f, 0x25, [@multicast1, @multicast1, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x90, 0x3, 0x4, [{@rand_addr=0x64010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x10001}, {@broadcast}]}, @timestamp={0x44, 0x24, 0x2e, 0x0, 0x5, [0x62, 0xa179fa6, 0x101, 0x4, 0xfffffffc, 0x1ff, 0x2, 0x8]}, @noop, @ssrr={0x89, 0x27, 0xaa, [@dev={0xac, 0x14, 0x14, 0x1f}, @local, @local, @multicast1, @loopback, @loopback, @empty, @local, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x17, 0x1, 0x1, [{@empty, 0xd}]}]}}}}}) 267.917152ms ago: executing program 2 (id=3009): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='macvtap0\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r3, 0x0, 0x2041) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x66}]}, &(0x7f0000000240)='GPL\x00', 0x4}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) unshare(0x6020400) r5 = socket(0x10, 0x80002, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc, 0xa) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp={0x5, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="110000000000000000000800", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000400)={r7}, 0x42) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1d, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@alu={0x0, 0x1, 0xa, 0x3, 0x9, 0x2, 0x10}, @map_fd={0x18, 0x8, 0x1, 0x0, r7}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x7, 0x2, 0x8, 0xc, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}]}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x68, &(0x7f0000000580)=""/104, 0x41000, 0x0, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x7, 0x2, 0xffff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000640)=[r9, r9, r9, r9, r7, r7, r7, r9, r9, r9], &(0x7f0000000680)=[{0x4, 0x5, 0xe, 0x4}, {0x3, 0x1, 0x2, 0xb}, {0x5, 0x4, 0xb, 0xa}, {0x3, 0x3, 0x2, 0x4}, {0x3, 0x1, 0x0, 0x6}], 0x10, 0xfff}, 0x94) ioctl$SIOCRSACCEPT(r7, 0x89e3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@map=r7, r10, 0x11, 0x0, 0x0, @void, @value=r9}, 0x20) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000000000000006780", @ANYRES32=0x0, @ANYBLOB="0305000003040100140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 192.093017ms ago: executing program 3 (id=3010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='caif0\x00', 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x7, 0x20}, 0xc) sendto$unix(r2, &(0x7f0000000200)="dbb1dda4a834dca2b0db799ae70217a95b6b6719e0210938b7c4addd448445d95fab89147104f744705fd6eb007b1ce5c5c95bc25f2a029b18b78d054e17e1b6cb6541c12ec1b78b694bb6e4dde2df8af071bea56b16b1eb907102312deb79ff858e30a938dd70bd0db06039bfa58467e4f24de5a86da57d026efad90b6aaf2ae43a3f7ec4d3af6e34c1919599152a9486e5c424ac24e294d24adda0ec750d02b8a0aa497619e9f0b0bad07434f129e0971922f27df4bcbe0eaa212549e40ed6225c204c6762c299014923056929bb26423272210cc7359d86b9699d7e229f939c", 0xe1, 0x40000, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 138.779807ms ago: executing program 6 (id=3011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x12}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000004100)=""/4104, 0x1008}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4097, 0x1001}, {&(0x7f0000002a40)=""/4075, 0xfeb}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f0000000100)=""/83, 0x53}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}], 0x8, 0x40010020, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) (rerun: 64) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x8, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56544, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4004000}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x24008850) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000002040)=0xe5, 0x4) (async) r8 = accept4$llc(r5, &(0x7f0000000cc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000d00)=0x10, 0xc0000) close(r8) (async) syz_emit_ethernet(0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd61f6ff0100242f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010088a8ffff000b003ebe000000031c0885100100000000007b43080022eb0000000223022309020000000000000500ebb41b08006558000000000000000000000000008e7d6f95ce347f4ae607e586ef74cbe65af3edab751ed60631bedd6126e02894953f2bc65700001dff4e48beecd522a24cc9a9336ba8dc276deb69481ef63623976f97187c204a5eff0f2748d3c0de96b8fe56c75cdd8713677b126eac64620050dd5e96bd023314fac26db850728c1b"], 0x0) (async) socket$inet(0x2, 0x2, 0xfffffffc) (async) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000680)=ANY=[@ANYRES64=r6, @ANYRES16=0x0], 0x40}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7008fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010008000000430100008000000088a800001400010012390000310f00007f00000081000000"], 0x68}}, 0x24040800) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) recvmsg$qrtr(r5, &(0x7f0000000c40)={&(0x7f0000000740), 0xc, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/102, 0x66}, {&(0x7f0000000780)=""/37, 0x25}, {&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/70, 0x46}], 0x4, &(0x7f0000005140)=[{0x100, 0x0, 0x0, ""/233}, {0x1010, 0x0, 0x0, ""/4096}, {0x90, 0x0, 0x0, ""/125}, {0xf8, 0x0, 0x0, ""/231}], 0x1298, 0x40}, 0x38, 0x40000000) (async, rerun: 32) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r11) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x3c, r12, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00032dbd7000ffdbdf250500000014000500ff0200000000000000000000000000010800020007000000080007000a01010106000b002c00000008000700ffffffffced73f00998debcfe8f1360bc5310cb447f7450d6da3200e804d37c07c7873578f204e0c0e283d2ad0e79d9c8bac8dc891bfd0f74f9905f118e96d9158adf3688c15a6badafcedacf8c9cebe41029ffe03c68c8b97f1"], 0x48}, 0x1, 0x0, 0x0, 0x4008004}, 0x4005045) (async) sendto$inet(r2, &(0x7f0000000300)="eb1d1158c4207c553a1d604c964a7bd88cf36828ec56a3bdbdd0c6974a2375f90971a73d2e2dbde4fd477357fa08aed652b093a20600386fb3c6cf5f71b228cbb4b2f5e6762bd812d0e7d091ee94dc1b140f4aa874ac0769c5ded8b2cf363ab06e6c248fca2d78fc1d741a358442e49c194b582b95f09d3315faf2ff5bb5b1ce15103f7515fcb36ffcf6a3b8944b2ca73cf490549f6f0b7549ea0d711a643e4c8c28f0a33e2df6c5efb20dadcfd716d183ab422ba75375b3a0598fbc7efb36a7ec1a03a025ae210219ae53ba1a130090018a", 0xd2, 0x0, 0x0, 0x0) 57.221838ms ago: executing program 3 (id=3012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x3, 0x2]}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x44, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xbf}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4c}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x417fd42}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xc}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xb}]}}]}, 0xd0}}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc2, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x50080015}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000005c0)={'pimreg\x00', @local}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r2, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x400}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000051}, 0x8d1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), r4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x34}}, 0x42) r8 = socket(0x1f, 0x5, 0x9) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4008000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r9, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r10, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x40000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f0000000bc0)={0x4, &(0x7f0000000b40)=[{}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {}]}) recvfrom(r0, &(0x7f0000000c00)=""/2, 0x2, 0x40000100, &(0x7f0000000c40)=@nfc_llcp={0x27, r11, 0x1, 0x6, 0x8, 0xf7, "b9c983343b7d0367aec760debd43c50f7083b0a3c97df5fc11354552cc90795ef998a573468dc8a71e40f9d27e100dd9905910ba669ebd499674ec0ccc38b2", 0x22}, 0x80) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000cc0)={{r1}, {@void, @max}}) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000d80)={r8}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r9) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wpan4\x00', 0x0}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000e80)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, r12, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_PID={0x8, 0x1c, r14}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 0s ago: executing program 2 (id=3013): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0xdec1, 0x7f}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40094}, 0x20000044) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x2}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80800000, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) write$bt_hci(r1, &(0x7f0000001180)=ANY=[@ANYBLOB="2fe00128fc9e5e4f334cac5c1df7935da57c4cf9ba47bf17a699f36a031d20e3d9556b023defbb7d56fddd4524f64c25bd993f4eed9604b50f643922ddd66ec4ccc5f522d9b77b9772e7b56baeafcce92ea1fda2113026e676bd8ad2c9e1b68d645c28154a8caa292830e3bcbb9b1418e12e353d35de9a74d5ab41b12c046144fa221368e89338315e15e8736d0754af8622760ae743425fbae96d8b03", @ANYBLOB="ef85ae19dfd296292e8dec92fc52665271e456fb9b420fad78dc5321cc0ace0c8090d3a178d6616c11abb91d49fdb8b37ae80e299158d9f155eff699e650bcd03a97f1edab275d4ae9aecab4055de7369142e8d1b0c7941007be3d7df5fba860ce1e2718a03f14b3b927e677828948284fd29cbf166da2a7975a4d5aaa5c54cdefedd1174d0d016ab04e24727ac1d8627e43", @ANYRES8, @ANYRES8=r0, @ANYRES8=r1], 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a074edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000140)) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 52499][T10242] __nla_validate_parse: 1 callbacks suppressed [ 199.352519][T10242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1352'. [ 199.542309][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.734900][ T10] tipc: Node number set to 1022628404 [ 201.042744][T10278] syzkaller1: entered promiscuous mode [ 201.050764][T10278] syzkaller1: entered allmulticast mode [ 201.083807][T10279] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.157136][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 201.494798][T10295] syzkaller1: entered promiscuous mode [ 201.500463][T10295] syzkaller1: entered allmulticast mode [ 202.155049][T10317] netlink: 'syz.3.1374': attribute type 7 has an invalid length. [ 202.417438][T10328] syzkaller1: entered promiscuous mode [ 202.432324][T10328] syzkaller1: entered allmulticast mode [ 202.514502][T10333] tipc: Enabled bearer , priority 0 [ 202.570014][T10332] tipc: Enabling of bearer rejected, already enabled [ 202.653317][T10332] tipc: Disabling bearer [ 202.704716][T10339] IPVS: length: 24 != 958488 [ 202.773387][T10348] netlink: 'syz.3.1384': attribute type 1 has an invalid length. [ 202.781850][T10348] netlink: 'syz.3.1384': attribute type 3 has an invalid length. [ 202.790125][T10348] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1384'. [ 202.913422][T10354] batman_adv: batadv0: Adding interface: dummy0 [ 202.929072][T10354] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 202.960695][T10356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1388'. [ 202.984445][T10354] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 203.105622][T10361] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 203.230485][T10372] netlink: 'syz.0.1392': attribute type 10 has an invalid length. [ 203.284822][T10372] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 203.410025][T10380] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 203.560169][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 203.587811][T10391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1397'. [ 203.694596][T10396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.748328][T10396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.769408][T10396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1399'. [ 203.913665][T10408] sctp: [Deprecated]: syz.4.1403 (pid 10408) Use of int in maxseg socket option. [ 203.913665][T10408] Use struct sctp_assoc_value instead [ 204.088661][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'. [ 204.152614][T10416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1406'. [ 204.198062][T10423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.216622][T10424] tipc: Enabled bearer , priority 10 [ 204.242108][T10424] tipc: Enabling of bearer rejected, failed to enable media [ 204.369616][T10431] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 204.398023][T10431] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1412'. [ 204.440943][T10436] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 204.479157][T10440] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 204.494596][T10436] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1412'. [ 204.590539][T10445] tipc: Enabled bearer , priority 0 [ 204.609967][T10445] syzkaller0: entered promiscuous mode [ 204.620542][T10445] syzkaller0: entered allmulticast mode [ 204.720273][T10452] tipc: Resetting bearer [ 204.858968][T10444] tipc: Resetting bearer [ 204.936380][T10444] tipc: Disabling bearer [ 205.327170][T10471] syzkaller0: entered promiscuous mode [ 205.333070][T10471] syzkaller0: entered allmulticast mode [ 205.634673][ T5928] tipc: Node number set to 4176358197 [ 206.856993][T10502] syzkaller1: entered promiscuous mode [ 206.882997][T10502] syzkaller1: entered allmulticast mode [ 206.937331][T10506] bond2: ARP target 1.0.0.0 is already present [ 206.943742][T10506] bond2: option arp_ip_target: invalid value (1) [ 206.953082][T10506] bond2 (unregistering): Released all slaves [ 207.209350][T10525] syzkaller1: entered promiscuous mode [ 207.221007][T10525] syzkaller1: entered allmulticast mode [ 207.270254][T10528] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1442'. [ 207.279255][T10529] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 207.288165][T10529] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1441'. [ 207.559175][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 207.587049][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1446'. [ 207.646420][T10537] macvtap1: entered promiscuous mode [ 207.660972][T10537] vlan0: entered promiscuous mode [ 207.670782][T10537] macvtap1: entered allmulticast mode [ 207.677969][T10537] vlan0: entered allmulticast mode [ 207.683888][T10537] veth0_vlan: entered allmulticast mode [ 207.808754][T10548] netlink: 'syz.2.1447': attribute type 32 has an invalid length. [ 207.827498][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 207.953654][T10548] bond3: Setting coupled_control to off (0) [ 208.202550][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'. [ 208.599278][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1463'. [ 208.609417][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1463'. [ 208.619044][ T1093] tipc: Subscription rejected, illegal request [ 209.074373][T10613] hsr_slave_0 (unregistering): left promiscuous mode [ 209.112042][T10616] tipc: Enabled bearer , priority 0 [ 209.142497][T10616] syzkaller0: entered promiscuous mode [ 209.168504][T10616] syzkaller0: entered allmulticast mode [ 209.241376][T10616] tipc: Resetting bearer [ 209.259399][T10615] tipc: Resetting bearer [ 209.301503][T10615] tipc: Disabling bearer [ 209.520591][T10639] ieee802154 phy0 wpan0: encryption failed: -90 [ 209.527917][T10639] __nla_validate_parse: 8 callbacks suppressed [ 209.527936][T10639] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1478'. [ 209.565921][T10639] nbd: illegal input index -8454144 [ 209.667651][T10643] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1481'. [ 209.896326][T10660] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1481'. [ 209.935554][T10660] NCSI netlink: No device for ifindex 0 [ 209.946250][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'. [ 210.001849][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1484'. [ 210.088374][T10653] geneve2: entered promiscuous mode [ 210.103588][T10653] geneve2: entered allmulticast mode [ 210.126619][ T1093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.150359][ T1093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.180538][ T1093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.198999][T10667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1487'. [ 210.345746][ T1093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.378587][T10673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1488'. [ 210.499358][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'. [ 210.581809][T10686] netlink: 'syz.0.1490': attribute type 39 has an invalid length. [ 210.876351][T10694] netlink: 'syz.2.1493': attribute type 21 has an invalid length. [ 210.904559][T10694] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1493'. [ 210.949178][T10695] netlink: 'syz.2.1493': attribute type 21 has an invalid length. [ 210.960748][T10694] netlink: 'syz.2.1493': attribute type 4 has an invalid length. [ 210.987738][T10695] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1493'. [ 211.030946][T10694] netlink: 'syz.2.1493': attribute type 5 has an invalid length. [ 211.043536][T10695] netlink: 'syz.2.1493': attribute type 4 has an invalid length. [ 211.052095][T10695] netlink: 'syz.2.1493': attribute type 5 has an invalid length. [ 211.069585][T10700] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 211.255770][T10705] netlink: 'syz.3.1498': attribute type 62 has an invalid length. [ 211.309044][T10706] pim6reg: entered allmulticast mode [ 211.764634][ T5921] lo speed is unknown, defaulting to 1000 [ 211.770466][ T5921] syz0: Port: 1 Link DOWN [ 212.389913][ T5155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.399741][ T5155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.409244][ T5155] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.443844][ T5155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.459055][ T5155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.468513][T10754] validate_nla: 2 callbacks suppressed [ 212.468574][T10754] netlink: 'syz.3.1514': attribute type 18 has an invalid length. [ 212.513183][T10754] netlink: 'syz.3.1514': attribute type 18 has an invalid length. [ 212.521878][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.534194][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.567844][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.600638][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.698781][T10759] wlan0 speed is unknown, defaulting to 1000 [ 212.712083][T10762] tipc: Enabled bearer , priority 0 [ 212.729978][T10762] syzkaller0: entered promiscuous mode [ 212.755263][T10762] syzkaller0: entered allmulticast mode [ 212.777133][T10759] lo speed is unknown, defaulting to 1000 [ 212.930711][T10762] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 213.003684][T10761] tipc: Resetting bearer [ 213.096964][T10761] tipc: Disabling bearer [ 213.278768][T10789] vlan2: entered allmulticast mode [ 213.294616][T10789] hsr0: entered allmulticast mode [ 213.304688][T10789] hsr_slave_0: entered allmulticast mode [ 213.324199][T10789] hsr_slave_1: entered allmulticast mode [ 213.401615][T10793] netlink: 'syz.4.1524': attribute type 3 has an invalid length. [ 213.889257][T10759] chnl_net:caif_netlink_parms(): no params data found [ 213.902606][T10823] netlink: 'syz.0.1532': attribute type 83 has an invalid length. [ 214.266717][T10839] bond3 (unregistering): Released all slaves [ 214.290668][T10759] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.298781][T10759] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.307173][T10759] bridge_slave_0: entered allmulticast mode [ 214.316042][T10759] bridge_slave_0: entered promiscuous mode [ 214.326248][T10759] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.333443][T10759] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.341764][T10759] bridge_slave_1: entered allmulticast mode [ 214.350338][T10759] bridge_slave_1: entered promiscuous mode [ 214.574488][ T51] Bluetooth: hci6: command tx timeout [ 214.651837][T10759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.698624][T10759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.720588][T10860] __nla_validate_parse: 14 callbacks suppressed [ 214.720613][T10860] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1542'. [ 214.901111][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 214.930360][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1545'. [ 214.980049][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'. [ 214.992148][T10759] team0: Port device team_slave_0 added [ 215.005412][T10759] team0: Port device team_slave_1 added [ 215.120427][T10759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.127638][T10759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.156264][T10759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.171567][T10759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.178635][T10759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.204685][T10759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.226524][T10877] IPVS: Unknown mcast interface: vcan0 [ 215.329593][T10881] netlink: 'syz.4.1548': attribute type 1 has an invalid length. [ 215.355675][T10881] netlink: 'syz.4.1548': attribute type 1 has an invalid length. [ 215.402929][T10884] netlink: 'syz.0.1549': attribute type 2 has an invalid length. [ 215.412282][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 215.421004][T10759] hsr_slave_0: entered promiscuous mode [ 215.423561][T10884] netlink: 'syz.0.1549': attribute type 2 has an invalid length. [ 215.435845][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 215.439924][T10759] hsr_slave_1: entered promiscuous mode [ 215.453872][T10759] debugfs: 'hsr0' already exists in 'hsr' [ 215.461747][T10759] Cannot create hsr debugfs directory [ 215.575902][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1552'. [ 215.678064][T10896] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 215.719866][T10899] bond2: Unable to set down delay as MII monitoring is disabled [ 215.731228][T10899] bond2 (unregistering): Released all slaves [ 215.763328][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1552'. [ 215.852575][T10897] syzkaller0: entered promiscuous mode [ 215.868543][T10897] syzkaller0: entered allmulticast mode [ 216.100731][T10909] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1558'. [ 216.668672][ T5838] Bluetooth: hci6: command tx timeout [ 216.978206][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 216.983725][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 216.986369][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 216.990504][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 217.716008][T10925] syzkaller1: entered promiscuous mode [ 217.721567][T10925] syzkaller1: entered allmulticast mode [ 217.760739][T10929] netlink: 'syz.3.1563': attribute type 2 has an invalid length. [ 217.772272][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'. [ 217.961351][T10931] wlan0 speed is unknown, defaulting to 1000 [ 217.980293][T10931] lo speed is unknown, defaulting to 1000 [ 218.029018][T10759] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 218.089433][T10759] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 218.150100][T10759] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 218.191003][T10759] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 218.447328][T10759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.632555][T10759] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.691486][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.698888][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.738314][ T51] Bluetooth: hci6: command tx timeout [ 218.754640][T10962] : renamed from vlan0 [ 218.862437][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.869698][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.110336][T10972] tipc: Enabled bearer , priority 0 [ 219.147377][T10972] syzkaller0: entered promiscuous mode [ 219.153011][T10972] syzkaller0: entered allmulticast mode [ 219.622211][T10976] tipc: Resetting bearer [ 219.652159][T10970] tipc: Resetting bearer [ 219.713726][T10970] tipc: Disabling bearer [ 219.919599][T10989] batman_adv: batadv0: Removing interface: dummy0 [ 219.983208][T10994] __nla_validate_parse: 4 callbacks suppressed [ 219.983232][T10994] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1581'. [ 220.056130][T10998] netlink: 'syz.2.1584': attribute type 1 has an invalid length. [ 220.211092][T10998] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.246630][T10999] bond4: (slave gretap1): making interface the new active one [ 220.257232][T10999] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 220.402037][T11011] bond2 (unregistering): Released all slaves [ 220.457571][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'. [ 220.483371][T10759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.523468][T11018] macvlan0: entered promiscuous mode [ 220.546113][T11018] batadv0: entered promiscuous mode [ 220.576973][T11018] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 220.620603][T11018] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 220.692694][T11018] hsr1: entered allmulticast mode [ 220.721378][T11018] macvlan0: entered allmulticast mode [ 220.743858][T11018] batadv0: entered allmulticast mode [ 220.809992][T11035] bond2: entered allmulticast mode [ 220.815596][ T51] Bluetooth: hci6: command tx timeout [ 220.821726][T11035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.829542][T11035] bridge0: port 1(bond2) entered blocking state [ 220.836677][T11035] bridge0: port 1(bond2) entered disabled state [ 220.847133][T11035] bond2: entered promiscuous mode [ 220.869912][T11029] bond0: Caught tx_queue_len zero misconfig [ 221.039237][T11049] delete_channel: no stack [ 221.238919][T11058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1596'. [ 221.249772][T11057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.296534][T11060] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1597'. [ 221.450631][T10759] veth0_vlan: entered promiscuous mode [ 221.514907][T11069] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1598'. [ 221.518398][T10759] veth1_vlan: entered promiscuous mode [ 221.660247][T10759] veth0_macvtap: entered promiscuous mode [ 221.713374][T10759] veth1_macvtap: entered promiscuous mode [ 222.292379][T10759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.339718][T10759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.413620][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.445109][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.473489][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.490077][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.708212][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.727055][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.735658][T11093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1609'. [ 222.794886][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.802959][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.821950][T11096] dvmrp1: entered allmulticast mode [ 222.833941][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 222.878662][T11099] syzkaller1: entered promiscuous mode [ 222.900917][T11099] syzkaller1: entered allmulticast mode [ 223.571442][T11132] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1619'. [ 223.587798][T11134] netlink: 'syz.2.1620': attribute type 2 has an invalid length. [ 223.599427][T11134] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1620'. [ 223.610734][T11134] nbd: must specify a device to reconfigure [ 223.738586][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1623'. [ 223.782557][T11143] netlink: 'syz.2.1622': attribute type 4 has an invalid length. [ 224.024931][T11153] netlink: 'syz.0.1627': attribute type 1 has an invalid length. [ 224.088926][T11153] netlink: 'syz.0.1627': attribute type 3 has an invalid length. [ 224.132445][T11153] NCSI netlink: No device for ifindex 813332851 [ 224.167434][T11156] tipc: Enabling of bearer rejected, already enabled [ 224.342671][T11172] netlink: 'syz.4.1634': attribute type 21 has an invalid length. [ 224.362286][T11172] netlink: 'syz.4.1634': attribute type 1 has an invalid length. [ 224.762375][T11191] netlink: 'syz.4.1640': attribute type 4 has an invalid length. [ 224.812377][T11196] netlink: 'syz.6.1642': attribute type 1 has an invalid length. [ 224.830807][T11196] netlink: 'syz.6.1642': attribute type 1 has an invalid length. [ 224.839765][T11196] netlink: 'syz.6.1642': attribute type 1 has an invalid length. [ 225.041902][T11214] __nla_validate_parse: 27 callbacks suppressed [ 225.041924][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1647'. [ 225.207674][T11224] IPVS: set_ctl: invalid protocol: 115 172.30.1.1:20003 [ 225.228566][T11224] IPVS: set_ctl: invalid protocol: 115 172.30.1.1:20003 [ 225.239065][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.246774][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.274543][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.309379][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.340509][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.350635][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.374522][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.394290][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.416470][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.443301][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.461164][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.468786][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.476479][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.485197][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.503187][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.511463][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.519618][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.592978][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.600779][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.608782][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.617151][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.628775][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.689754][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.710700][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.732875][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.761160][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.775980][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.792317][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.811252][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.847497][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.896429][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.923043][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 225.961385][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 226.024632][T11224] IPVS: set_ctl: invalid protocol: 10 112.104.121.50:12288 [ 226.538564][T11283] syzkaller1: entered promiscuous mode [ 226.569205][T11283] syzkaller1: entered allmulticast mode [ 226.610972][T11283] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1667'. [ 226.843278][T11298] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 226.924723][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1675'. [ 227.000813][T11307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1674'. [ 227.016009][T11307] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 227.034181][T11307] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 227.049242][T11307] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 227.069839][T11310] lo: Caught tx_queue_len zero misconfig [ 227.083033][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'. [ 227.159732][T11316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1675'. [ 227.519190][T11332] wlan0 speed is unknown, defaulting to 1000 [ 227.529320][T11332] lo speed is unknown, defaulting to 1000 [ 227.655518][T11342] tipc: Enabling of bearer rejected, failed to enable media [ 228.061181][T11359] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1691'. [ 228.105024][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1693'. [ 228.377658][T11337] batadv_slave_0: entered promiscuous mode [ 228.557777][T11378] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1699'. [ 228.842213][T11396] tipc: Enabling of bearer rejected, failed to enable media [ 228.944704][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1705'. [ 229.157855][T11409] tc_dump_action: action bad kind [ 229.229466][T11414] tipc: Can't bind to reserved service type 2 [ 229.349038][T11417] tipc: Enabled bearer , priority 0 [ 229.367697][T11417] syzkaller0: entered promiscuous mode [ 229.373240][T11417] syzkaller0: entered allmulticast mode [ 229.492025][T11417] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 229.536165][T11417] tipc: Resetting bearer [ 229.562063][T11416] tipc: Resetting bearer [ 229.629630][T11416] tipc: Disabling bearer [ 230.037462][T11461] tunl0: left promiscuous mode [ 230.066950][T11461] wg2: left promiscuous mode [ 230.081727][T11461] wg2: left allmulticast mode [ 230.099672][T11461] batadv_slave_0: left promiscuous mode [ 230.120033][T11461] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 230.132399][T11461] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 230.175673][T11461] bond1: left promiscuous mode [ 230.185278][T11461] wireguard0: left promiscuous mode [ 230.195103][T11461] : left allmulticast mode [ 230.203263][T11461] veth0_vlan: left allmulticast mode [ 230.209410][T11461] : left promiscuous mode [ 230.215370][T11461] macvtap1: left promiscuous mode [ 230.220884][T11461] macvtap1: left allmulticast mode [ 230.244765][T11461] geneve2: left promiscuous mode [ 230.249789][T11461] geneve2: left allmulticast mode [ 230.279213][T11466] __nla_validate_parse: 3 callbacks suppressed [ 230.279239][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 230.314577][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.338215][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1727'. [ 230.348671][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1727'. [ 230.362235][T11468] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1727'. [ 230.374459][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.379559][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 230.394522][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.403470][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.435776][T11470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1727'. [ 230.465017][T11470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1727'. [ 230.494910][T11470] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1727'. [ 230.649970][T11475] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1729'. [ 230.668694][T11475] vxcan1: tx address claim with dlc 0 [ 230.845361][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'. [ 231.129622][T11509] validate_nla: 30 callbacks suppressed [ 231.129648][T11509] netlink: 'syz.6.1739': attribute type 1 has an invalid length. [ 231.150651][T11509] netlink: 'syz.6.1739': attribute type 1 has an invalid length. [ 231.163921][T11509] tipc: Started in network mode [ 231.170212][T11509] tipc: Node identity 46ae7dd5a901, cluster identity 4711 [ 231.178526][T11509] tipc: Enabled bearer , priority 0 [ 231.190081][T11509] syzkaller0: entered promiscuous mode [ 231.196857][T11509] syzkaller0: entered allmulticast mode [ 231.235937][T11509] tipc: Resetting bearer [ 231.242277][T11511] syzkaller1: entered promiscuous mode [ 231.251059][T11511] syzkaller1: entered allmulticast mode [ 231.259781][T11508] tipc: Resetting bearer [ 231.289861][T11508] tipc: Disabling bearer [ 231.789167][T11523] syzkaller0: entered promiscuous mode [ 231.817057][T11523] syzkaller0: entered allmulticast mode [ 231.851347][T11523] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 232.661202][T11560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.876705][T11570] raw_sendmsg: syz.6.1758 forgot to set AF_INET. Fix it! [ 233.003661][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 233.088296][T11584] tipc: Enabled bearer , priority 0 [ 233.262341][T11592] netlink: 'syz.4.1765': attribute type 29 has an invalid length. [ 233.770981][T11573] tipc: Disabling bearer [ 233.809149][ T30] audit: type=1800 audit(1759522178.449:4): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1771" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=209 res=0 errno=0 [ 234.232583][T11617] netlink: 'syz.6.1771': attribute type 11 has an invalid length. [ 234.241235][T11617] netlink: 'syz.6.1771': attribute type 5 has an invalid length. [ 234.472885][T11641] netlink: 'syz.0.1780': attribute type 20 has an invalid length. [ 234.481615][T11641] netlink: 'syz.0.1780': attribute type 20 has an invalid length. [ 234.960116][T11672] netlink: 'syz.4.1790': attribute type 1 has an invalid length. [ 235.670485][T11713] bond4: option lp_interval: invalid value (0) [ 235.677774][T11713] bond4: option lp_interval: allowed values 1 - 2147483647 [ 235.694754][T11713] bond4 (unregistering): Released all slaves [ 235.829045][ T43] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 236.001274][ T43] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 236.039680][T11737] __nla_validate_parse: 14 callbacks suppressed [ 236.039703][T11737] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.1808'. [ 236.061250][T11736] netlink: 'syz.3.1809': attribute type 11 has an invalid length. [ 236.065335][T11737] openvswitch: netlink: Flow actions attr not present in new flow. [ 236.090939][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 236.101169][T11736] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1809'. [ 236.141950][T11738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1808'. [ 236.266195][T11738] geneve2: entered promiscuous mode [ 236.277081][T11738] geneve2: entered allmulticast mode [ 236.343040][T11745] syzkaller1: entered promiscuous mode [ 236.354769][T11745] syzkaller1: entered allmulticast mode [ 236.438992][T11752] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 236.552709][T11759] syzkaller1: entered promiscuous mode [ 236.563475][T11759] syzkaller1: entered allmulticast mode [ 236.710333][T11769] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1816'. [ 236.765174][T11769] gretap0: entered promiscuous mode [ 236.886384][T11774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1819'. [ 236.905459][T11773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1819'. [ 237.123608][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 237.141583][T11794] netlink: 'syz.4.1826': attribute type 1 has an invalid length. [ 237.358592][T11794] bond3: entered promiscuous mode [ 237.375143][T11794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.505463][T11794] bond3: (slave bridge4): making interface the new active one [ 237.523631][T11794] bridge4: entered promiscuous mode [ 237.537631][T11794] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 237.745442][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1833'. [ 237.810570][T11824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1831'. [ 237.919631][T11827] team0: Device gtp0 is up. Set it down before adding it as a team port [ 238.116547][T11826] team0: Device gtp0 is up. Set it down before adding it as a team port [ 238.379916][T11843] IPVS: Scheduler module ip_vs_sip not found [ 238.460240][T11835] wlan0 speed is unknown, defaulting to 1000 [ 238.560739][T11851] xt_socket: unknown flags 0xe4 [ 238.734944][T11858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.910463][T11921] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 240.204662][T11929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.267178][T11924] tipc: Enabled bearer , priority 0 [ 240.274472][T11930] syzkaller0: entered promiscuous mode [ 240.286166][T11930] syzkaller0: entered allmulticast mode [ 240.361533][T11924] tipc: Resetting bearer [ 240.506318][T11923] tipc: Resetting bearer [ 240.542405][T11923] tipc: Disabling bearer [ 240.560458][T11941] netlink: 'syz.3.1867': attribute type 1 has an invalid length. [ 240.867094][ T5928] IPVS: starting estimator thread 0... [ 240.970352][T11959] IPVS: using max 23 ests per chain, 55200 per kthread [ 241.149954][T11971] geneve3: entered promiscuous mode [ 241.243862][T11980] __nla_validate_parse: 12 callbacks suppressed [ 241.243883][T11980] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.1879'. [ 241.709392][T12009] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1884'. [ 241.754205][T12013] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1892'. [ 241.957981][T12020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1890'. [ 241.974172][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 241.992562][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 242.026384][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 242.432830][T12052] tipc: Enabled bearer , priority 0 [ 242.442334][T12052] syzkaller0: entered promiscuous mode [ 242.448506][T12052] syzkaller0: entered allmulticast mode [ 242.460402][T12052] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20001 [ 242.469625][T12052] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 242.516147][T12052] tipc: Resetting bearer [ 242.553579][T12052] tipc: Resetting bearer [ 242.599181][T12052] tipc: Disabling bearer [ 242.769189][T12028] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.936708][T12084] tipc: Enabling of bearer rejected, failed to enable media [ 242.975905][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1911'. [ 243.464392][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1920'. [ 243.504895][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1920'. [ 243.555336][T12116] syzkaller1: entered promiscuous mode [ 243.560923][T12116] syzkaller1: entered allmulticast mode [ 243.792679][T12133] team_slave_0: mtu greater than device maximum [ 244.015521][ T5155] Bluetooth: hci6: command 0x0405 tx timeout [ 244.039698][T12142] syzkaller0: entered promiscuous mode [ 244.065459][T12142] syzkaller0: entered allmulticast mode [ 244.096534][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 244.110616][T12147] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 244.701034][T12177] netlink: 'syz.4.1937': attribute type 10 has an invalid length. [ 246.262650][T12199] __nla_validate_parse: 5 callbacks suppressed [ 246.262674][T12199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1941'. [ 246.399734][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 246.418376][T12211] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.599390][T12225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'. [ 246.634845][T12225] team0: Device ip6gre1 is of different type [ 247.011719][T12255] syz.0.1956 (12255) used obsolete PPPIOCDETACH ioctl [ 247.185519][T12257] netlink: 'syz.4.1957': attribute type 1 has an invalid length. [ 247.393468][T12268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.406756][T12268] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.421336][T12268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.598938][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'. [ 247.701943][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 247.941456][T12285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.071160][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1973'. [ 248.240278][T12325] netlink: 'syz.4.1976': attribute type 2 has an invalid length. [ 248.260138][T12324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1977'. [ 248.274189][T12325] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1976'. [ 248.332737][T12331] netlink: 'syz.2.1978': attribute type 10 has an invalid length. [ 248.355063][T12333] 8021q: VLANs not supported on lo [ 248.374795][T12326] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1976'. [ 248.385574][T12326] openvswitch: netlink: ufid size 200 bytes exceeds the range (1, 16) [ 248.393880][T12326] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 248.406819][T12331] veth0_vlan: left promiscuous mode [ 248.413439][T12331] veth0_vlan: entered promiscuous mode [ 248.435938][T12331] team0: Device veth0_vlan failed to register rx_handler [ 248.470289][T12334] 8021q: VLANs not supported on lo [ 248.730793][T12352] netlink: 'syz.6.1985': attribute type 1 has an invalid length. [ 248.739568][T12352] netlink: 'syz.6.1985': attribute type 3 has an invalid length. [ 248.748286][T12352] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1985'. [ 248.768127][T12347] bond5: option lp_interval: invalid value (0) [ 248.775016][T12347] bond5: option lp_interval: allowed values 1 - 2147483647 [ 248.786998][T12347] bond5 (unregistering): Released all slaves [ 248.991429][T12362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.228099][T12373] netlink: 'syz.2.1991': attribute type 4 has an invalid length. [ 249.539221][T12386] wlan0 speed is unknown, defaulting to 1000 [ 249.688551][T12390] wlan0 speed is unknown, defaulting to 1000 [ 250.009340][ T9] IPVS: starting estimator thread 0... [ 250.022182][T12415] tipc: Enabled bearer , priority 10 [ 250.124362][T12416] IPVS: using max 35 ests per chain, 84000 per kthread [ 251.689139][T12477] __nla_validate_parse: 7 callbacks suppressed [ 251.689163][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 251.887150][T12483] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2022'. [ 251.900910][T12485] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2022'. [ 251.929133][T12489] GUP no longer grows the stack in syz.4.2024 (12489): 200000006000-200000008000 (200000005000) [ 251.942188][T12489] CPU: 1 UID: 0 PID: 12489 Comm: syz.4.2024 Not tainted syzkaller #0 PREEMPT(full) [ 251.942217][T12489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.942245][T12489] Call Trace: [ 251.942254][T12489] [ 251.942262][T12489] dump_stack_lvl+0x189/0x250 [ 251.942299][T12489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.942325][T12489] ? __pfx__printk+0x10/0x10 [ 251.942354][T12489] ? find_vma+0xe7/0x160 [ 251.942395][T12489] __get_user_pages+0x24d0/0x2ce0 [ 251.942416][T12489] ? __lock_acquire+0xab9/0xd20 [ 251.942466][T12489] ? __gup_longterm_locked+0xc63/0x1660 [ 251.942498][T12489] __gup_longterm_locked+0xde4/0x1660 [ 251.942538][T12489] ? sanity_check_pinned_pages+0x123a/0x1300 [ 251.942573][T12489] gup_fast_fallback+0x1e6a/0x2010 [ 251.942635][T12489] ? __pfx_gup_fast_fallback+0x10/0x10 [ 251.942662][T12489] ? __lock_acquire+0xab9/0xd20 [ 251.942690][T12489] ? pin_user_pages_fast+0x4d/0xb0 [ 251.942716][T12489] iov_iter_extract_pages+0x35a/0x5e0 [ 251.942753][T12489] extract_iter_to_sg+0xe46/0x24e0 [ 251.942805][T12489] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 251.942838][T12489] ? __local_bh_enable_ip+0x12d/0x1c0 [ 251.942860][T12489] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.942895][T12489] ? __local_bh_enable_ip+0x12d/0x1c0 [ 251.942926][T12489] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 251.942956][T12489] ? __asan_memset+0x22/0x50 [ 251.942979][T12489] hash_sendmsg+0x4f4/0x11d0 [ 251.943033][T12489] ? __pfx_hash_sendmsg+0x10/0x10 [ 251.943060][T12489] __sock_sendmsg+0x219/0x270 [ 251.943096][T12489] ____sys_sendmsg+0x52d/0x830 [ 251.943129][T12489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.943166][T12489] ? import_iovec+0x74/0xa0 [ 251.943194][T12489] ___sys_sendmsg+0x21f/0x2a0 [ 251.943222][T12489] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.943291][T12489] ? __fget_files+0x2a/0x420 [ 251.943319][T12489] ? __fget_files+0x3a0/0x420 [ 251.943362][T12489] __sys_sendmmsg+0x227/0x430 [ 251.943395][T12489] ? __pfx___sys_sendmmsg+0x10/0x10 [ 251.943419][T12489] ? do_futex+0x395/0x420 [ 251.943460][T12489] ? fd_install+0x97/0x540 [ 251.943514][T12489] ? rcu_is_watching+0x15/0xb0 [ 251.943547][T12489] __x64_sys_sendmmsg+0xa0/0xc0 [ 251.943577][T12489] do_syscall_64+0xfa/0x3b0 [ 251.943598][T12489] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.943631][T12489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.943654][T12489] ? clear_bhb_loop+0x60/0xb0 [ 251.943681][T12489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.943703][T12489] RIP: 0033:0x7fde3938eec9 [ 251.943723][T12489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.943744][T12489] RSP: 002b:00007fde3a251038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 251.943767][T12489] RAX: ffffffffffffffda RBX: 00007fde395e5fa0 RCX: 00007fde3938eec9 [ 251.943783][T12489] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000005 [ 251.943797][T12489] RBP: 00007fde39411f91 R08: 0000000000000000 R09: 0000000000000000 [ 251.943811][T12489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.943824][T12489] R13: 00007fde395e6038 R14: 00007fde395e5fa0 R15: 00007ffea560b428 [ 251.943862][T12489] [ 252.470391][T12502] tipc: Enabling of bearer rejected, failed to enable media [ 252.551350][T12508] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 252.697662][T12515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2033'. [ 252.740426][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 252.790481][T12517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2032'. [ 252.964236][T12533] netlink: 'syz.4.2037': attribute type 12 has an invalid length. [ 252.977066][T12536] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.2038'. [ 253.188221][T12544] veth0_macvtap: left promiscuous mode [ 253.224381][T12544] macvtap0: entered allmulticast mode [ 253.546879][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'. [ 253.691676][T12572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2049'. [ 253.710620][T12570] syzkaller0: entered promiscuous mode [ 253.723214][T12570] syzkaller0: entered allmulticast mode [ 253.732922][T12574] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2049'. [ 254.011682][T12590] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 255.382565][T12601] ip6tnl0: Caught tx_queue_len zero misconfig [ 255.631081][T12616] team0: Device gtp1 is up. Set it down before adding it as a team port [ 256.362303][T12662] netlink: 'syz.3.2083': attribute type 29 has an invalid length. [ 256.372033][T12662] netlink: 'syz.3.2083': attribute type 29 has an invalid length. [ 256.761968][T12679] __nla_validate_parse: 9 callbacks suppressed [ 256.761991][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'. [ 256.802263][T12679] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2089'. [ 256.825116][T12679] netlink: 'syz.2.2089': attribute type 5 has an invalid length. [ 256.918886][T12685] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2092'. [ 256.977027][T12687] vlan0: entered allmulticast mode [ 256.985854][T12687] hsr0: entered allmulticast mode [ 256.992607][T12687] hsr_slave_0: entered allmulticast mode [ 257.000624][T12687] hsr_slave_1: entered allmulticast mode [ 257.292438][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2099'. [ 257.309104][T12708] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2100'. [ 257.335071][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2099'. [ 257.517769][T12719] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2103'. [ 257.549864][T12719] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2103'. [ 257.573554][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2104'. [ 257.589192][T12721] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2104'. [ 257.642505][T12727] netlink: 'syz.3.2106': attribute type 1 has an invalid length. [ 257.757653][T12727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.243689][T12765] netlink: 'syz.4.2113': attribute type 1 has an invalid length. [ 258.375915][T12772] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 258.429763][T12765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.473815][T12776] netlink: 'syz.6.2117': attribute type 1 has an invalid length. [ 258.523929][T12776] netlink: 'syz.6.2117': attribute type 1 has an invalid length. [ 259.365902][T12826] netlink: 'syz.2.2130': attribute type 10 has an invalid length. [ 259.374427][T12826] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 259.489418][T12836] netlink: 'syz.2.2134': attribute type 10 has an invalid length. [ 259.670980][T12844] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 259.703732][T12844] bond4 (unregistering): Released all slaves [ 259.731647][T12849] FAULT_INJECTION: forcing a failure. [ 259.731647][T12849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.788680][T12849] CPU: 1 UID: 0 PID: 12849 Comm: syz.3.2138 Not tainted syzkaller #0 PREEMPT(full) [ 259.788710][T12849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.788725][T12849] Call Trace: [ 259.788733][T12849] [ 259.788743][T12849] dump_stack_lvl+0x189/0x250 [ 259.788777][T12849] ? __pfx____ratelimit+0x10/0x10 [ 259.788813][T12849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.788840][T12849] ? __pfx__printk+0x10/0x10 [ 259.788888][T12849] should_fail_ex+0x414/0x560 [ 259.788926][T12849] _copy_to_user+0x31/0xb0 [ 259.788955][T12849] simple_read_from_buffer+0xe1/0x170 [ 259.788990][T12849] proc_fail_nth_read+0x1b3/0x220 [ 259.789018][T12849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.789045][T12849] ? rw_verify_area+0x2a6/0x4d0 [ 259.789069][T12849] ? __lock_acquire+0xab9/0xd20 [ 259.789087][T12849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.789113][T12849] vfs_read+0x1fd/0xa30 [ 259.789137][T12849] ? fdget_pos+0x247/0x320 [ 259.789171][T12849] ? __pfx___mutex_lock+0x10/0x10 [ 259.789195][T12849] ? __pfx_vfs_read+0x10/0x10 [ 259.789223][T12849] ? __fget_files+0x2a/0x420 [ 259.789258][T12849] ? __fget_files+0x3a0/0x420 [ 259.789285][T12849] ? __fget_files+0x2a/0x420 [ 259.789324][T12849] ksys_read+0x145/0x250 [ 259.789353][T12849] ? __pfx_ksys_read+0x10/0x10 [ 259.789374][T12849] ? rcu_is_watching+0x15/0xb0 [ 259.789405][T12849] ? do_syscall_64+0xbe/0x3b0 [ 259.789441][T12849] do_syscall_64+0xfa/0x3b0 [ 259.789461][T12849] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.789495][T12849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.789517][T12849] ? clear_bhb_loop+0x60/0xb0 [ 259.789544][T12849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.789565][T12849] RIP: 0033:0x7f2f9638d8dc [ 259.789584][T12849] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 259.789604][T12849] RSP: 002b:00007f2f9714f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.789627][T12849] RAX: ffffffffffffffda RBX: 00007f2f965e5fa0 RCX: 00007f2f9638d8dc [ 259.789646][T12849] RDX: 000000000000000f RSI: 00007f2f9714f0a0 RDI: 0000000000000004 [ 259.789660][T12849] RBP: 00007f2f9714f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.789672][T12849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.789685][T12849] R13: 00007f2f965e6038 R14: 00007f2f965e5fa0 R15: 00007ffe3d4c6848 [ 259.789721][T12849] [ 260.458936][T12872] netlink: 'syz.3.2144': attribute type 1 has an invalid length. [ 260.541140][T12872] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.680061][T12882] netlink: 'syz.0.2147': attribute type 1 has an invalid length. [ 260.688863][T12882] netlink: 'syz.0.2147': attribute type 1 has an invalid length. [ 260.896611][T12886] netlink: 'syz.3.2149': attribute type 1 has an invalid length. [ 260.980855][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.034667][T12892] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 261.432682][T12924] netlink: 'syz.2.2161': attribute type 4 has an invalid length. [ 261.787469][T12932] syzkaller1: entered promiscuous mode [ 261.794140][T12932] syzkaller1: entered allmulticast mode [ 261.865427][T12951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.957389][T12955] __nla_validate_parse: 21 callbacks suppressed [ 261.957412][T12955] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2169'. [ 262.160983][T12970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2174'. [ 262.191528][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2172'. [ 262.224343][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2172'. [ 262.330937][T12980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2177'. [ 262.504209][T12989] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2181'. [ 262.688267][T13000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2185'. [ 262.826953][T13010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2187'. [ 262.948569][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 263.087077][T13031] tipc: Enabled bearer , priority 0 [ 263.096202][T13031] syzkaller0: entered promiscuous mode [ 263.101738][T13031] syzkaller0: entered allmulticast mode [ 263.133948][T13031] tipc: Resetting bearer [ 263.147916][T13032] delete_channel: no stack [ 263.167007][T13028] tipc: Resetting bearer [ 263.208848][T13028] tipc: Disabling bearer [ 263.747936][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2204'. [ 264.421077][T13086] gre1: entered promiscuous mode [ 264.435508][T13086] gre1: entered allmulticast mode [ 264.808639][T13110] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 265.002247][T13121] validate_nla: 2 callbacks suppressed [ 265.002267][T13121] netlink: 'syz.4.2223': attribute type 15 has an invalid length. [ 265.490249][T13146] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 265.642870][T13157] tipc: Enabled bearer , priority 0 [ 265.651509][T13157] syzkaller0: entered promiscuous mode [ 265.659553][T13157] syzkaller0: entered allmulticast mode [ 265.708520][T13157] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 265.749434][T13157] tipc: Resetting bearer [ 265.767773][T13156] tipc: Resetting bearer [ 265.794870][T13156] tipc: Disabling bearer [ 265.968137][T13173] netlink: 'syz.3.2240': attribute type 1 has an invalid length. [ 266.056391][T13173] bond6 (unregistering): Released all slaves [ 266.132194][T13179] ip6tnl1: entered promiscuous mode [ 266.150188][T13179] ip6tnl1: entered allmulticast mode [ 266.493503][T13205] netlink: 'syz.3.2251': attribute type 8 has an invalid length. [ 266.497982][T13199] openvswitch: netlink: Message has 5380 unknown bytes. [ 266.522985][T13199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.686656][T13209] netlink: 'syz.6.2252': attribute type 4 has an invalid length. [ 266.745775][T13209] netlink: 'syz.6.2252': attribute type 4 has an invalid length. [ 266.987052][T13235] netlink: 'syz.2.2262': attribute type 21 has an invalid length. [ 266.998858][T13237] netlink: 'syz.0.2264': attribute type 1 has an invalid length. [ 267.023480][T13237] __nla_validate_parse: 15 callbacks suppressed [ 267.023519][T13237] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2264'. [ 267.034194][T13235] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2262'. [ 267.058032][T13237] nbd: couldn't find device at index 1048576 [ 267.094124][T13235] netlink: 'syz.2.2262': attribute type 4 has an invalid length. [ 267.119740][T13235] netlink: 'syz.2.2262': attribute type 5 has an invalid length. [ 267.119855][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2262'. [ 267.138130][T13235] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2262'. [ 267.172224][T13247] tipc: Enabled bearer , priority 0 [ 267.186224][T13243] syzkaller0: entered promiscuous mode [ 267.202043][T13243] syzkaller0: entered allmulticast mode [ 267.280457][T13243] tipc: Resetting bearer [ 267.324946][T13242] tipc: Resetting bearer [ 267.377927][T13242] tipc: Disabling bearer [ 267.577450][T13261] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2271'. [ 267.718952][T13261] bond6 (unregistering): Released all slaves [ 267.956684][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2277'. [ 268.045304][T13279] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2278'. [ 268.062315][T13279] 0{X: renamed from gretap0 (while UP) [ 268.077101][T13279] 0{X: entered allmulticast mode [ 268.088831][T13279] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 268.095904][T13283] IPVS: ip_vs_edit_dest(): server weight less than zero [ 268.120642][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2279'. [ 268.143477][T13286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2278'. [ 268.143896][T13281] netlink: 'syz.2.2279': attribute type 17 has an invalid length. [ 268.161153][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2279'. [ 268.178635][T13281] erspan0: entered promiscuous mode [ 268.187617][T13283] IPVS: ip_vs_edit_dest(): server weight less than zero [ 268.196082][T13281] gretap0: entered promiscuous mode [ 268.211320][T13281] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 268.251179][T13281] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 268.600069][T13308] tipc: New replicast peer: 255.255.255.255 [ 268.626803][T13308] tipc: Enabled bearer , priority 10 [ 268.641797][T13313] pimreg: entered allmulticast mode [ 268.768524][T13317] tipc: Enabled bearer , priority 0 [ 268.939607][T13317] syzkaller0: entered promiscuous mode [ 268.964184][T13317] syzkaller0: entered allmulticast mode [ 269.016251][T13317] tipc: Resetting bearer [ 269.206875][ T49] tipc: Resetting bearer [ 269.261150][T13316] tipc: Resetting bearer [ 269.626285][ T5827] tipc: Node number set to 3066613792 [ 270.333371][T13369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.344401][ T51] Bluetooth: hci6: command 0x0405 tx timeout [ 270.692973][T13316] tipc: Disabling bearer [ 271.491984][T13403] netlink: 'syz.2.2313': attribute type 1 has an invalid length. [ 271.622066][T13416] team0: Device ip6gre1 is of different type [ 271.672783][T13420] IPv6: sit2: Disabled Multicast RS [ 271.696207][T13420] sit2: entered allmulticast mode [ 271.931689][T13432] netlink: 'syz.6.2321': attribute type 1 has an invalid length. [ 271.994006][T13432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.025465][T13438] netlink: 'syz.3.2323': attribute type 1 has an invalid length. [ 272.029294][T13429] syz.2.2320: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 272.033830][T13432] ip6tnl1: entered promiscuous mode [ 272.053134][T13429] CPU: 0 UID: 0 PID: 13429 Comm: syz.2.2320 Not tainted syzkaller #0 PREEMPT(full) [ 272.053166][T13429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.053183][T13429] Call Trace: [ 272.053193][T13429] [ 272.053203][T13429] dump_stack_lvl+0x189/0x250 [ 272.053246][T13429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.053277][T13429] ? __pfx__printk+0x10/0x10 [ 272.053314][T13429] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.053348][T13429] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.053393][T13429] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 272.053430][T13429] warn_alloc+0x214/0x310 [ 272.053472][T13429] ? __pfx_warn_alloc+0x10/0x10 [ 272.053520][T13429] ? __get_vm_area_node+0x28f/0x300 [ 272.053551][T13429] ? xskq_create+0xbf/0x170 [ 272.053595][T13429] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 272.053670][T13429] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.053715][T13429] ? __kasan_kmalloc+0x93/0xb0 [ 272.053750][T13429] vmalloc_user_noprof+0xad/0xf0 [ 272.053784][T13429] ? xskq_create+0xbf/0x170 [ 272.053829][T13429] xskq_create+0xbf/0x170 [ 272.053869][T13429] xsk_init_queue+0xb0/0x110 [ 272.053911][T13429] xsk_setsockopt+0x4dc/0x8d0 [ 272.053950][T13429] ? __pfx_xsk_setsockopt+0x10/0x10 [ 272.053985][T13429] ? __pfx_aa_sk_perm+0x10/0x10 [ 272.054024][T13429] ? aa_sock_opt_perm+0xff/0x1b0 [ 272.054063][T13429] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 272.054100][T13429] ? __pfx_xsk_setsockopt+0x10/0x10 [ 272.054137][T13429] do_sock_setsockopt+0x17c/0x1b0 [ 272.054171][T13429] __x64_sys_setsockopt+0x13f/0x1b0 [ 272.054208][T13429] do_syscall_64+0xfa/0x3b0 [ 272.054233][T13429] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.054270][T13429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.054295][T13429] ? clear_bhb_loop+0x60/0xb0 [ 272.054325][T13429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.054350][T13429] RIP: 0033:0x7fbaf498eec9 [ 272.054381][T13429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.054401][T13429] RSP: 002b:00007fbaf58e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 272.054428][T13429] RAX: ffffffffffffffda RBX: 00007fbaf4be6090 RCX: 00007fbaf498eec9 [ 272.054446][T13429] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000006c [ 272.054461][T13429] RBP: 00007fbaf4a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 272.054475][T13429] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 272.054491][T13429] R13: 00007fbaf4be6128 R14: 00007fbaf4be6090 R15: 00007ffd05345518 [ 272.054531][T13429] [ 272.055068][T13429] Mem-Info: [ 272.058187][T13432] ip6tnl1: entered allmulticast mode [ 272.072968][T13429] active_anon:5633 inactive_anon:0 isolated_anon:0 [ 272.072968][T13429] active_file:3402 inactive_file:39983 isolated_file:0 [ 272.072968][T13429] unevictable:769 dirty:217 writeback:0 [ 272.072968][T13429] slab_reclaimable:12007 slab_unreclaimable:107264 [ 272.072968][T13429] mapped:39770 shmem:1357 pagetables:1199 [ 272.072968][T13429] sec_pagetables:0 bounce:0 [ 272.072968][T13429] kernel_misc_reclaimable:0 [ 272.072968][T13429] free:1289674 free_pcp:14548 free_cma:0 [ 272.384649][T13429] Node 0 active_anon:22532kB inactive_anon:0kB active_file:13608kB inactive_file:159728kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:163080kB dirty:864kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13180kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 272.384816][T13440] bond6 (unregistering): Released all slaves [ 272.458221][T13429] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 272.493445][T13429] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.538768][T13429] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 272.561286][T13429] Node 0 DMA32 free:1249212kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22596kB inactive_anon:0kB active_file:13608kB inactive_file:159400kB unevictable:1540kB writepending:864kB present:3129332kB managed:2566256kB mlocked:4kB bounce:0kB free_pcp:43652kB local_pcp:20400kB free_cma:0kB [ 272.577867][T13435] bond2: (slave gretap1): making interface the new active one [ 272.605108][T13429] lowmem_reserve[]: 0 0 0 0 0 [ 272.616650][T13429] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.651910][T13435] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 272.661920][T13429] lowmem_reserve[]: 0 0 0 0 0 [ 272.661986][T13429] Node 1 Normal free:3893924kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14016kB local_pcp:5536kB free_cma:0kB [ 272.662130][T13429] lowmem_reserve[]: 0 0 0 0 0 [ 272.662183][T13429] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 272.720337][T13443] ip6tnl1: entered promiscuous mode [ 272.737667][T13429] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 272.744797][T13429] Node 0 DMA32: 974*4kB (UM) 871*8kB (UM) 193*16kB (UME) 296*32kB (UME) 140*64kB (UME) 74*128kB (UME) 52*256kB (UM) 16*512kB (UME) 8*1024kB (UME) 5*2048kB (ME) 285*4096kB (UM) = 1249152kB [ 272.765021][T13443] ip6tnl1: entered allmulticast mode [ 272.770673][T13429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 272.783881][T13429] Node 1 Normal: 181*4kB (UME) 36*8kB (UME) 39*16kB (UME) 134*32kB (UME) 36*64kB (UME) 13*128kB (UME) 4*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3893924kB [ 272.806966][T13429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.817245][T13429] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 272.834865][T13429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.845555][T13429] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 272.889414][T13429] 44739 total pagecache pages [ 272.898460][T13429] 0 pages in swap cache [ 272.958947][T13429] Free swap = 124996kB [ 272.963293][T13429] Total swap = 124996kB [ 273.004412][T13429] 2097051 pages RAM [ 273.008295][T13429] 0 pages HighMem/MovableOnly [ 273.013008][T13429] 423781 pages reserved [ 273.063054][T13429] 0 pages cma reserved [ 273.120611][T13470] netlink: 'syz.0.2331': attribute type 10 has an invalid length. [ 273.195880][T13472] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.525298][T13498] __nla_validate_parse: 16 callbacks suppressed [ 273.525319][T13498] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2338'. [ 273.589870][T13504] tipc: Enabled bearer , priority 0 [ 273.597697][T13504] syzkaller0: entered promiscuous mode [ 273.603355][T13504] syzkaller0: entered allmulticast mode [ 273.616565][T13504] tipc: Resetting bearer [ 273.705586][T13506] bond4: option min_links: invalid value (18446744073709551614) [ 273.713393][T13506] bond4: option min_links: allowed values 0 - 2147483647 [ 273.726864][T13506] bond4 (unregistering): Released all slaves [ 273.812551][T13504] "syz.3.2341" (13504) uses obsolete ecb(arc4) skcipher [ 273.893627][T13499] tipc: Resetting bearer [ 273.955001][T13499] tipc: Disabling bearer [ 274.167653][T13520] 0{X: left allmulticast mode [ 274.245005][T13520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.287951][T13520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.343147][T13530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2347'. [ 274.407581][T13520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.515567][T13520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.664246][T13520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.772196][T13520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.066964][T13548] netlink: 'syz.0.2351': attribute type 4 has an invalid length. [ 275.076602][T13547] netlink: 'syz.0.2351': attribute type 4 has an invalid length. [ 275.143596][T13557] netlink: 'syz.6.2355': attribute type 16 has an invalid length. [ 275.154676][T13553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2354'. [ 275.163845][T13557] netlink: 'syz.6.2355': attribute type 17 has an invalid length. [ 275.182147][T13553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2354'. [ 275.240550][T13557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.347534][ T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.369927][ T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.432892][ T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.491039][ T49] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.680232][T13578] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.732622][T13578] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.793641][T13577] syzkaller1: entered promiscuous mode [ 275.800805][T13577] syzkaller1: entered allmulticast mode [ 275.867898][T13578] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.888638][T13578] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.891661][T13601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2365'. [ 276.011551][T13603] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 276.056238][T13578] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.083995][T13578] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.131681][T13613] tipc: Enabling of bearer rejected, media not registered [ 276.279387][T13578] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.303685][T13578] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.377938][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2375'. [ 276.519141][ T1093] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.544728][ T1093] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.566801][T13648] pimreg3: entered allmulticast mode [ 276.615376][ T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.625366][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.637975][T13654] netlink: 'syz.2.2377': attribute type 21 has an invalid length. [ 276.672416][ T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.672806][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2379'. [ 276.681768][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.733615][T13654] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 276.760162][T13654] bond5 (unregistering): Released all slaves [ 276.805169][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.838785][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.119418][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2387'. [ 277.295164][T13689] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2390'. [ 277.370640][T13689] netlink: 'syz.0.2390': attribute type 3 has an invalid length. [ 277.414288][T13689] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2390'. [ 277.447409][T13699] netlink: 'syz.6.2394': attribute type 6 has an invalid length. [ 277.670458][T13710] netlink: 'syz.6.2399': attribute type 11 has an invalid length. [ 277.686092][T13713] netlink: 'syz.2.2400': attribute type 15 has an invalid length. [ 277.819902][T13717] netlink: 'syz.0.2402': attribute type 1 has an invalid length. [ 277.896047][T13717] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.311649][T13753] netlink: 'syz.2.2412': attribute type 1 has an invalid length. [ 278.402264][T13753] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.803206][T13760] bond5 (unregistering): Released all slaves [ 278.876869][T13786] __nla_validate_parse: 9 callbacks suppressed [ 278.876891][T13786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2417'. [ 278.943921][T13777] syzkaller1: entered promiscuous mode [ 278.956766][T13777] syzkaller1: entered allmulticast mode [ 279.164786][T13800] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2424'. [ 279.245701][T13804] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2422'. [ 279.332168][T13806] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2426'. [ 279.426357][T13817] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2429'. [ 279.463794][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2430'. [ 279.489137][T13817] bond0 (unregistering): Released all slaves [ 279.662164][T13827] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 279.695845][T13827] netlink: 'syz.0.2432': attribute type 30 has an invalid length. [ 279.713977][T13831] netlink: 'syz.4.2434': attribute type 10 has an invalid length. [ 279.792887][T13838] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2436'. [ 279.795742][T13827] bond5: option arp_missed_max: invalid value (0) [ 279.809024][T13827] bond5: option arp_missed_max: allowed values 1 - 255 [ 279.871507][T13827] bond5 (unregistering): Released all slaves [ 279.945470][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2438'. [ 279.954876][T13842] netlink: 'syz.6.2438': attribute type 12 has an invalid length. [ 280.026725][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2438'. [ 280.045856][T13851] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 280.222063][T13857] tipc: Enabled bearer , priority 0 [ 280.251424][T13857] syzkaller0: entered promiscuous mode [ 280.261254][T13857] syzkaller0: entered allmulticast mode [ 280.296055][T13861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2443'. [ 280.308126][T13857] tipc: Resetting bearer [ 280.367790][T13856] tipc: Resetting bearer [ 280.770197][T13856] tipc: Disabling bearer [ 280.874789][T13877] IPVS: length: 8 != 1152 [ 281.583923][T13920] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 281.863584][T13941] 8021q: VLANs not supported on ip6gre0 [ 281.878097][T13936] tipc: Enabled bearer , priority 0 [ 281.973049][T13936] syzkaller0: entered promiscuous mode [ 281.984766][T13936] syzkaller0: entered allmulticast mode [ 281.991749][T13936] tipc: Resetting bearer [ 282.024970][T13935] tipc: Resetting bearer [ 282.357624][T13963] sock: sock_set_timeout: `syz.3.2473' (pid 13963) tries to set negative timeout [ 283.556898][T13935] tipc: Disabling bearer [ 283.854891][T13976] bond7 (unregistering): Released all slaves [ 283.902436][T13994] __nla_validate_parse: 18 callbacks suppressed [ 283.902459][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2481'. [ 284.076569][T14000] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2483'. [ 284.098610][T14000] netem: invalid attributes len -24 [ 284.104343][T14000] netem: change failed [ 284.140099][T14002] validate_nla: 4 callbacks suppressed [ 284.140123][T14002] netlink: 'syz.3.2484': attribute type 1 has an invalid length. [ 284.169428][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2485'. [ 284.384278][T14014] netlink: 'syz.6.2488': attribute type 2 has an invalid length. [ 284.405510][T14014] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2488'. [ 284.612548][T14024] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2492'. [ 284.645204][T14024] Unsupported ieee802154 address type: 0 [ 284.898147][T14043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2495'. [ 285.083767][ T1141] tipc: Subscription rejected, illegal request [ 285.229583][T14061] ip6tnl1: left promiscuous mode [ 285.369678][T14070] veth0_virt_wifi: entered promiscuous mode [ 285.551306][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2510'. [ 285.631663][T14090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.639119][T14090] IPv6: NLM_F_CREATE should be set when creating new route [ 285.693029][T14090] batadv_slave_0: entered promiscuous mode [ 285.726971][T14089] batadv_slave_0: left promiscuous mode [ 285.765587][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2514'. [ 285.867669][T14105] IPVS: set_ctl: invalid protocol: 33 172.20.20.53:20003 [ 285.882260][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2515'. [ 285.905937][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2515'. [ 286.221407][T14125] netlink: 'syz.3.2519': attribute type 2 has an invalid length. [ 286.370632][T14125] block nbd2: server does not support multiple connections per device. [ 286.446423][T14125] block nbd2: shutting down sockets [ 286.611815][T14140] IPVS: set_ctl: invalid protocol: 24 127.0.0.1:20002 [ 286.812754][T14155] tipc: Enabled bearer , priority 0 [ 286.887567][T14155] syzkaller0: entered promiscuous mode [ 286.893121][T14155] syzkaller0: entered allmulticast mode [ 286.903122][T14157] netlink: 'syz.0.2529': attribute type 12 has an invalid length. [ 286.930396][T14155] tipc: Resetting bearer [ 286.939245][T14159] tipc: Enabled bearer , priority 0 [ 286.952021][T14154] tipc: Resetting bearer [ 287.022128][T14154] tipc: Disabling bearer [ 287.053319][T14158] tipc: Disabling bearer [ 287.266002][T14182] netlink: 'syz.0.2537': attribute type 2 has an invalid length. [ 287.295114][T14180] syzkaller0: entered promiscuous mode [ 287.300797][T14180] syzkaller0: entered allmulticast mode [ 287.318422][T14182] ip6erspan0: entered promiscuous mode [ 287.324744][T14182] ip6erspan0: entered allmulticast mode [ 287.480522][T14191] netlink: 'syz.0.2539': attribute type 11 has an invalid length. [ 287.489284][T14191] netlink: 'syz.0.2539': attribute type 11 has an invalid length. [ 287.535544][T14192] netlink: 'syz.0.2539': attribute type 5 has an invalid length. [ 289.077499][T14216] __nla_validate_parse: 7 callbacks suppressed [ 289.077523][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2545'. [ 289.170452][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.183645][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2545'. [ 289.193634][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.222193][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.244960][ T1141] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.343330][T14230] tipc: Enabling of bearer rejected, failed to enable media [ 289.381937][T14232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2549'. [ 289.734898][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2559'. [ 289.834004][T14260] block nbd3: NBD_DISCONNECT [ 289.951722][T14270] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 290.120928][T14280] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2566'. [ 290.200058][T14287] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2569'. [ 290.326348][T14297] netlink: 'syz.4.2571': attribute type 1 has an invalid length. [ 290.370066][T14287] bond7 (unregistering): Released all slaves [ 290.435248][T14296] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 290.477285][T14296] bond5 (unregistering): Released all slaves [ 290.515912][T14297] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 290.521633][T14302] tipc: Enabling of bearer rejected, failed to enable media [ 290.881851][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2580'. [ 291.257316][T14343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2585'. [ 291.283659][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2586'. [ 291.406034][T14353] vlan1: entered allmulticast mode [ 291.418276][T14346] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 291.570282][T14346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.648533][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 291.678447][T14346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.763310][T14363] tipc: Enabled bearer , priority 0 [ 291.807243][T14346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.935885][ T5155] Bluetooth: hci0: command tx timeout [ 292.047339][T14363] syzkaller0: entered promiscuous mode [ 292.063542][T14363] syzkaller0: entered allmulticast mode [ 292.074915][T14363] tipc: Resetting bearer [ 292.107875][T14362] tipc: Resetting bearer [ 293.444728][T14395] Bluetooth: MGMT ver 1.23 [ 294.595055][T14362] tipc: Disabling bearer [ 294.818153][T14411] __nla_validate_parse: 3 callbacks suppressed [ 294.818173][T14411] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2608'. [ 294.886011][T14411] netlink: 'syz.2.2608': attribute type 1 has an invalid length. [ 295.045466][T14418] nftables ruleset with unbound set [ 295.061561][T14418] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2611'. [ 295.431557][T14448] netlink: 'syz.2.2621': attribute type 10 has an invalid length. [ 295.537172][ T5155] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 295.540225][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 295.583811][T14454] netlink: 'syz.0.2624': attribute type 10 has an invalid length. [ 295.608795][T14454] openvswitch: netlink: Actions may not be safe on all matching packets [ 295.686137][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2627'. [ 295.698543][T14459] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 295.709337][T14459] bond0: option packets_per_slave: allowed values 0 - 65535 [ 295.720599][T14459] bond0 (unregistering): Released all slaves [ 295.860081][T14474] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2629'. [ 296.543504][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2637'. [ 296.637399][T14510] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 296.715744][T14510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.749304][T14515] bond0: (slave geneve2): making interface the new active one [ 296.760079][T14515] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 296.787487][ T1141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.821095][ T1141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.836886][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2643'. [ 296.847052][ T1141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.882494][ T1141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.083946][T14531] nbd: device at index 6 is going down [ 297.136407][T14531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2648'. [ 297.648511][T14565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2654'. [ 297.819215][T14573] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2656'. [ 297.887763][T14573] bond3 (unregistering): Released all slaves [ 297.939052][T14583] geneve3: entered promiscuous mode [ 297.962206][T14582] tipc: Enabled bearer , priority 0 [ 297.980768][T14580] tipc: Disabling bearer [ 298.036238][T14588] netlink: 'syz.0.2660': attribute type 1 has an invalid length. [ 298.053705][T14573] syzkaller0: entered promiscuous mode [ 298.059964][T14573] syzkaller0: entered allmulticast mode [ 298.235969][T14599] netlink: 'syz.4.2664': attribute type 1 has an invalid length. [ 298.898541][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 299.997045][T14629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2670'. [ 300.014894][T14629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2670'. [ 300.032546][T14637] tipc: Enabled bearer , priority 0 [ 300.071164][T14634] tipc: Disabling bearer [ 300.151524][T14643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.158883][T14643] IPv6: NLM_F_CREATE should be set when creating new route [ 300.294307][T14651] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2676'. [ 300.363870][T14659] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 300.496754][T14665] bond5: option miimon: invalid value (18446744073709551585) [ 300.539471][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2680'. [ 300.543830][T14665] bond5: option miimon: allowed values 0 - 2147483647 [ 300.577776][T14665] bond5 (unregistering): Released all slaves [ 300.879610][T14688] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2684'. [ 300.970979][T14693] tipc: Enabled bearer , priority 0 [ 301.002083][T14691] tipc: Disabling bearer [ 301.199512][T14713] netlink: 'syz.3.2689': attribute type 1 has an invalid length. [ 301.326913][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2691'. [ 301.384486][T14721] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2692'. [ 301.393718][T14721] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2692'. [ 301.466110][T14721] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2692'. [ 301.487531][T14724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2694'. [ 301.660413][T14735] nft_compat: unsupported protocol 0 [ 301.682366][T14742] netlink: 'syz.2.2697': attribute type 1 has an invalid length. [ 301.739460][T14742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.883018][T14752] netlink: 'syz.6.2701': attribute type 10 has an invalid length. [ 301.900489][T14752] netlink: 'syz.6.2701': attribute type 17 has an invalid length. [ 301.966597][T14750] syzkaller0: entered promiscuous mode [ 301.972413][T14750] syzkaller0: entered allmulticast mode [ 301.981181][T14752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.327312][T14770] netlink: 'syz.4.2705': attribute type 1 has an invalid length. [ 303.617573][T14774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.919883][T14799] netlink: 'syz.4.2712': attribute type 11 has an invalid length. [ 303.930445][T14799] netlink: 'syz.4.2712': attribute type 1 has an invalid length. [ 303.940975][T14799] netlink: 'syz.4.2712': attribute type 4 has an invalid length. [ 304.247125][T14817] syzkaller0: entered promiscuous mode [ 304.252909][T14817] syzkaller0: entered allmulticast mode [ 304.472430][T14823] netlink: 'syz.3.2720': attribute type 1 has an invalid length. [ 305.880970][T14834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.900856][T14834] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.925780][T14834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.136729][ T5155] Bluetooth: hci5: command 0x0405 tx timeout [ 322.417748][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.165652][T14865] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 324.537898][T14884] netlink: 'syz.2.2739': attribute type 1 has an invalid length. [ 324.666441][T14882] syzkaller0: entered promiscuous mode [ 324.671752][T14892] __nla_validate_parse: 35 callbacks suppressed [ 324.671777][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2741'. [ 324.671992][T14882] syzkaller0: entered allmulticast mode [ 324.682169][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2741'. [ 325.015402][T14906] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 326.159521][T14894] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 326.175738][ T51] Bluetooth: hci0: command tx timeout [ 326.182976][T14896] tipc: Enabled bearer , priority 0 [ 326.292917][T14896] tipc: Disabling bearer [ 326.384209][T14909] syzkaller0: entered promiscuous mode [ 326.389819][T14909] syzkaller0: entered allmulticast mode [ 326.405822][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2745'. [ 326.435135][T14909] bond0: entered promiscuous mode [ 326.441166][T14909] bond_slave_0: entered promiscuous mode [ 326.448927][T14909] bond_slave_1: entered promiscuous mode [ 326.457654][T14919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2746'. [ 326.470742][T14909] bond0: left promiscuous mode [ 326.484504][T14909] bond_slave_0: left promiscuous mode [ 326.490293][T14909] bond_slave_1: left promiscuous mode [ 326.574357][T14931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2749'. [ 326.583883][T14930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2749'. [ 326.602599][T14931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2749'. [ 326.616401][T14930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2749'. [ 326.695067][T14931] bridge0: port 1(vlan2) entered blocking state [ 326.705106][T14931] bridge0: port 1(vlan2) entered disabled state [ 326.712220][T14931] vlan2: entered allmulticast mode [ 326.717928][T14931] bridge0: entered allmulticast mode [ 326.753872][T14931] vlan2: left allmulticast mode [ 326.762098][T14931] bridge0: left allmulticast mode [ 326.786378][T14930] bridge0: port 1(vlan2) entered blocking state [ 326.792907][T14930] bridge0: port 1(vlan2) entered disabled state [ 326.802620][T14930] vlan2: entered allmulticast mode [ 326.808174][T14930] bridge0: entered allmulticast mode [ 326.817430][T14930] vlan2: left allmulticast mode [ 326.823166][T14930] bridge0: left allmulticast mode [ 326.951052][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2754'. [ 326.961263][T14952] netlink: 'syz.2.2754': attribute type 30 has an invalid length. [ 326.971529][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2754'. [ 327.132037][T14962] macsec2: entered promiscuous mode [ 327.137471][T14962] bridge0: entered promiscuous mode [ 327.143121][T14962] macsec2: entered allmulticast mode [ 327.151585][T14962] bridge0: entered allmulticast mode [ 327.159809][T14962] bridge0: port 1(macsec2) entered blocking state [ 327.167779][T14962] bridge0: port 1(macsec2) entered disabled state [ 327.210159][T14962] bridge0: left allmulticast mode [ 327.216413][T14962] bridge0: left promiscuous mode [ 327.315269][T14963] syzkaller0: entered promiscuous mode [ 327.327348][T14963] syzkaller0: entered allmulticast mode [ 327.336779][T14970] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 327.407970][T14960] tunl0: mtu less than device minimum [ 327.437903][ T30] audit: type=1800 audit(1759522272.069:5): pid=14960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2756" name="memory.events" dev="tmpfs" ino=1134 res=0 errno=0 [ 327.464572][T14967] netlink: 'syz.0.2758': attribute type 1 has an invalid length. [ 328.074825][T14988] wlan0 speed is unknown, defaulting to 1000 [ 328.284634][ T5155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 328.301946][ T5155] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 328.310687][ T5155] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 328.321597][ T5155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 328.331488][ T5155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 328.549448][ T1093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.576508][ T1093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.675076][T14995] wlan0 speed is unknown, defaulting to 1000 [ 328.771690][ T1093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.804233][ T1093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.995407][ T1093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.011562][ T1093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.110203][T15032] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 329.141821][T15028] syzkaller1: entered promiscuous mode [ 329.158776][T15028] syzkaller1: entered allmulticast mode [ 329.207040][ T1093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.237769][ T1093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.252704][T15040] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 329.898297][T15079] __nla_validate_parse: 5 callbacks suppressed [ 329.898318][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2781'. [ 330.094342][T15084] netlink: 'syz.0.2782': attribute type 10 has an invalid length. [ 330.416272][ T51] Bluetooth: hci7: command tx timeout [ 330.630300][ T1093] bond1 (unregistering): (slave geneve2): Releasing active interface [ 330.884952][T15083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.006081][ T1093] bond0 (unregistering): Released all slaves [ 331.107504][ T1093] bond1 (unregistering): Released all slaves [ 331.123349][ T1093] bond2 (unregistering): Released all slaves [ 331.139996][ T1093] bond3 (unregistering): Released all slaves [ 331.238311][ T1093] bond4 (unregistering): Released all slaves [ 331.336649][ T1093] bond5 (unregistering): Released all slaves [ 331.436364][ T1093] bond6 (unregistering): Released all slaves [ 331.491296][T14995] chnl_net:caif_netlink_parms(): no params data found [ 331.719172][ T1093] tipc: Disabling bearer [ 331.763334][ T1093] tipc: Left network mode [ 331.815104][T15126] netlink: 'syz.2.2791': attribute type 1 has an invalid length. [ 332.016906][T15141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2795'. [ 332.081292][T14995] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.082433][T15135] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2794'. [ 332.096770][T14995] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.120651][T14995] bridge_slave_0: entered allmulticast mode [ 332.165503][T14995] bridge_slave_0: entered promiscuous mode [ 332.166941][T15144] netlink: 'syz.0.2796': attribute type 3 has an invalid length. [ 332.436397][T15135] bond0 (unregistering): Released all slaves [ 332.479422][T14995] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.487120][T14995] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.494281][ T51] Bluetooth: hci7: command tx timeout [ 332.501072][T14995] bridge_slave_1: entered allmulticast mode [ 332.511260][T14995] bridge_slave_1: entered promiscuous mode [ 332.519014][T15148] netlink: 'syz.2.2798': attribute type 1 has an invalid length. [ 332.528861][T15148] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2798'. [ 332.801971][T15168] bridge8: entered promiscuous mode [ 332.839385][T15168] bridge8: entered allmulticast mode [ 332.857695][T14995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.941685][T14995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.044965][T15171] netlink: 'syz.2.2807': attribute type 1 has an invalid length. [ 333.091495][ T1093] hsr_slave_1: left promiscuous mode [ 333.151439][T15183] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2810'. [ 333.390616][T15194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2813'. [ 334.025350][T15175] pimreg: left allmulticast mode [ 334.106047][T15190] gretap0: mtu less than device minimum [ 334.216147][T14995] team0: Port device team_slave_0 added [ 334.256619][T14995] team0: Port device team_slave_1 added [ 334.512376][T14995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.540286][T14995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.584249][ T51] Bluetooth: hci7: command tx timeout [ 334.612092][T14995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.626409][T14995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.636348][T14995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.661823][T15218] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2820'. [ 334.664797][T14995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.710367][T15220] netlink: 'syz.4.2821': attribute type 1 has an invalid length. [ 334.881166][T14995] hsr_slave_0: entered promiscuous mode [ 334.888702][T14995] hsr_slave_1: entered promiscuous mode [ 334.973536][ T1093] IPVS: stop unused estimator thread 0... [ 335.171459][T15229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.244380][T15229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.298673][T15234] netlink: 'syz.2.2825': attribute type 1 has an invalid length. [ 335.548824][T15252] netlink: 'syz.4.2829': attribute type 1 has an invalid length. [ 335.582164][T15229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.614320][T15229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.718908][T15252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.770080][T15229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.782419][T15229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.817974][T15256] bond0: (slave veth13): Enslaving as an active interface with a down link [ 335.841873][T15258] veth15: entered promiscuous mode [ 335.850246][T15258] bond0: (slave veth15): Enslaving as an active interface with a down link [ 335.960004][T15229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.972161][T15229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.199037][T15274] netlink: 'syz.2.2833': attribute type 11 has an invalid length. [ 336.286364][T10015] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.314514][T10015] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.333044][T10015] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.352186][T10015] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.448490][T15285] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 336.459433][T15285] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2836'. [ 336.507588][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.519971][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.556587][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.570016][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.654115][ T51] Bluetooth: hci7: command tx timeout [ 336.723174][T15292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2839'. [ 336.732803][T15292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2839'. [ 336.931837][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2844'. [ 336.965582][T15304] netlink: 'syz.6.2842': attribute type 1 has an invalid length. [ 337.257578][T14995] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.317759][T14995] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.369893][T14995] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.391854][T15321] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2849'. [ 337.392003][T14995] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.683677][T15343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.810869][T14995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.884807][T14995] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.921649][T10014] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.929187][T10014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.949295][T15348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2855'. [ 337.966013][T10014] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.973369][T10014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.103410][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2858'. [ 338.133915][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2858'. [ 338.186042][T15360] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 338.237828][T15363] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2859'. [ 338.319673][T15370] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 338.328760][ T5827] IPVS: starting estimator thread 0... [ 338.361771][T15370] netlink: 'syz.2.2862': attribute type 4 has an invalid length. [ 338.457487][T15371] IPVS: using max 22 ests per chain, 52800 per kthread [ 338.473505][T15365] netlink: 'syz.4.2861': attribute type 1 has an invalid length. [ 338.473840][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2863'. [ 338.766539][T14995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.948621][T15395] tls_set_device_offload_rx: netdev not found [ 339.007381][T14995] veth0_vlan: entered promiscuous mode [ 339.105716][T14995] veth1_vlan: entered promiscuous mode [ 339.232685][T14995] veth0_macvtap: entered promiscuous mode [ 339.267439][T14995] veth1_macvtap: entered promiscuous mode [ 339.317294][T14995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.370034][T14995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.446859][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.505063][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.538188][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.574206][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.675835][T15429] nbd: must specify a device to reconfigure [ 339.719513][T15428] tipc: Enabled bearer , priority 0 [ 339.830606][T15428] tipc: Disabling bearer [ 339.920104][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.937405][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.010899][T10014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.047563][T10014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.273649][T15464] netlink: 'syz.3.2760': attribute type 83 has an invalid length. [ 340.653294][T15483] netlink: 'syz.6.2895': attribute type 1 has an invalid length. [ 340.722255][T15488] xt_time: unknown flags 0xf4 [ 341.178241][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.191400][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.201817][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.224295][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.232236][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.280805][ T1141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.309642][ T1141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.387721][T15513] wlan0 speed is unknown, defaulting to 1000 [ 341.461329][ T1141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.476980][T15528] netlink: 'syz.0.2908': attribute type 10 has an invalid length. [ 341.501379][ T1141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.575937][T15527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.613580][T15532] netlink: 'syz.6.2910': attribute type 12 has an invalid length. [ 341.637677][ T1141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.649362][ T1141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.736342][ T1141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.747019][ T1141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.891138][T15546] __nla_validate_parse: 8 callbacks suppressed [ 341.891160][T15546] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2914'. [ 342.138593][T15513] chnl_net:caif_netlink_parms(): no params data found [ 342.404630][T15561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2917'. [ 342.421127][T15561] netlink: 'syz.3.2917': attribute type 7 has an invalid length. [ 342.439624][T15561] netlink: 'syz.3.2917': attribute type 8 has an invalid length. [ 342.450768][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2917'. [ 342.461952][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2919'. [ 342.551126][T15577] netlink: 'syz.4.2920': attribute type 27 has an invalid length. [ 342.808504][ T1141] erspan0 (unregistering): left promiscuous mode [ 342.837693][ T1141] gretap0 (unregistering): left promiscuous mode [ 342.876139][ T1141] bond4 (unregistering): (slave gretap1): Releasing active interface [ 342.958317][ T1141] bond0 (unregistering): (slave geneve2): Releasing active interface [ 343.294548][ T5155] Bluetooth: hci3: command tx timeout [ 343.419001][ T1141] bond1 (unregistering): Released all slaves [ 343.513826][ T1141] bond2 (unregistering): Released all slaves [ 343.530761][ T1141] bond3 (unregistering): Released all slaves [ 343.628672][ T1141] bond4 (unregistering): Released all slaves [ 343.721925][ T1141] bond0 (unregistering): Released all slaves [ 343.819896][ T1141] bond5 (unregistering): Released all slaves [ 343.838497][T15561] erspan0: entered promiscuous mode [ 343.845239][T15561] batadv_slave_1: entered promiscuous mode [ 343.851302][T15561] batadv_slave_1: left promiscuous mode [ 343.861662][T15561] erspan0: left promiscuous mode [ 343.989290][T15513] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.011480][T15513] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.037851][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2923'. [ 344.054288][T15513] bridge_slave_0: entered allmulticast mode [ 344.086718][T15598] netlink: 'syz.3.2925': attribute type 11 has an invalid length. [ 344.098549][T15513] bridge_slave_0: entered promiscuous mode [ 344.113298][T15600] netlink: 'syz.6.2926': attribute type 32 has an invalid length. [ 344.121871][T15598] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2925'. [ 344.133458][T15513] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.141833][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2926'. [ 344.151666][T15513] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.164416][T15513] bridge_slave_1: entered allmulticast mode [ 344.172715][T15513] bridge_slave_1: entered promiscuous mode [ 344.195293][ T1141] tipc: Disabling bearer [ 344.214968][ T1141] tipc: Left network mode [ 344.304277][T15600] bond3: option coupled_control: invalid value (128) [ 344.346717][T15600] bond3 (unregistering): Released all slaves [ 344.515799][T15614] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 344.528907][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2929'. [ 344.565356][T15617] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2929'. [ 344.623843][T15513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.678041][T15513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.751238][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2932'. [ 344.819405][T15513] team0: Port device team_slave_0 added [ 344.920549][T15640] netlink: 'syz.3.2937': attribute type 21 has an invalid length. [ 344.982306][T15513] team0: Port device team_slave_1 added [ 345.098975][T15647] netlink: 'syz.6.2938': attribute type 12 has an invalid length. [ 345.153862][T15652] netlink: 'syz.4.2939': attribute type 1 has an invalid length. [ 345.209839][T15647] bond3: option primary_reselect: invalid value (255) [ 345.221321][T15647] bond3 (unregistering): Released all slaves [ 345.341057][T15513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.362487][T15513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.389355][T15513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.400592][ T5155] Bluetooth: hci3: command tx timeout [ 345.466004][T15661] bond4: (slave gretap5): making interface the new active one [ 345.511365][T15661] bond4: (slave gretap5): Enslaving as an active interface with an up link [ 345.579174][T15513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.599375][T15513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.645283][T15513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.769447][ T1141] macvlan0: left promiscuous mode [ 345.787688][ T1141] batadv0: left promiscuous mode [ 345.822294][ T1141] hsr_slave_0: left promiscuous mode [ 345.840151][ T1141] hsr_slave_1: left promiscuous mode [ 345.859729][T15692] netlink: 'syz.0.2948': attribute type 1 has an invalid length. [ 345.863573][ T1141] vlan0: left allmulticast mode [ 345.957736][ T1141] pimreg3 (unregistering): left allmulticast mode [ 346.009475][ T1141] pim6reg (unregistering): left allmulticast mode [ 346.221304][ T1141] vlan1 (unregistering): left allmulticast mode [ 346.840964][T15692] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 346.889615][T15689] bond3: (slave veth0_to_bond): Releasing active interface [ 346.962209][T15513] hsr_slave_0: entered promiscuous mode [ 346.985958][T15513] hsr_slave_1: entered promiscuous mode [ 347.004575][T15513] debugfs: 'hsr0' already exists in 'hsr' [ 347.010382][T15513] Cannot create hsr debugfs directory [ 347.123455][T15715] __nla_validate_parse: 3 callbacks suppressed [ 347.123476][T15715] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2954'. [ 347.457214][ T5155] Bluetooth: hci3: command tx timeout [ 347.537843][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 347.559850][T15733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.655341][T15730] netlink: 'syz.4.2961': attribute type 1 has an invalid length. [ 347.809229][T15739] bond3 (unregistering): Released all slaves [ 347.892295][T15737] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 348.056544][T15750] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2967'. [ 348.086890][T15750] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2967'. [ 348.191267][T15754] ieee802154 phy0 wpan0: encryption failed: -22 [ 348.200313][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2968'. [ 348.219824][T15513] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.257294][T15513] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.291724][T15757] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2969'. [ 348.302336][T15513] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.341365][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2970'. [ 348.360413][T15513] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.683592][T15513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.687557][T15780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2976'. [ 348.731654][T15784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2979'. [ 348.761523][T15513] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.791649][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.799337][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.836514][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.843815][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.942262][T15794] netlink: 'syz.6.2982': attribute type 10 has an invalid length. [ 348.947661][T15797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2983'. [ 348.978321][T15794] dummy0: entered promiscuous mode [ 348.990081][T15794] bridge0: port 3(dummy0) entered blocking state [ 348.998767][T15794] bridge0: port 3(dummy0) entered disabled state [ 349.008341][T15794] dummy0: entered allmulticast mode [ 349.019657][T15794] bridge0: port 3(dummy0) entered blocking state [ 349.026249][T15794] bridge0: port 3(dummy0) entered forwarding state [ 349.193331][T15513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.245944][T15513] veth0_vlan: entered promiscuous mode [ 349.259373][T15513] veth1_vlan: entered promiscuous mode [ 349.290946][T15513] veth0_macvtap: entered promiscuous mode [ 349.302897][T15513] veth1_macvtap: entered promiscuous mode [ 349.326431][T15513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.343344][T15513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.358176][T10014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.369680][T10014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.382022][T10014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.391169][T10014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.534418][ T5155] Bluetooth: hci3: command tx timeout [ 349.801616][T15813] syzkaller0: entered promiscuous mode [ 349.815938][T15813] syzkaller0: entered allmulticast mode [ 349.840756][T15820] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 349.865217][T15814] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 349.878435][T10014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.904708][T10014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.913088][ T5155] Bluetooth: hci6: link tx timeout [ 349.919971][ T5155] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 350.000972][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.010102][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.160621][T15829] C: renamed from team_slave_0 (while UP) [ 350.193343][T15829] netlink: 'syz.0.2990': attribute type 1 has an invalid length. [ 350.211291][T15829] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 350.247079][T15832] block nbd2: Unsupported socket: should be TCP or UNIX. [ 350.288372][ T926] IPVS: starting estimator thread 0... [ 350.295040][T15834] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyڇv[DwzR' [ 350.344173][T15834] CPU: 1 UID: 0 PID: 15834 Comm: syz.3.2991 Not tainted syzkaller #0 PREEMPT(full) [ 350.344204][T15834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.344219][T15834] Call Trace: [ 350.344228][T15834] [ 350.344237][T15834] dump_stack_lvl+0x189/0x250 [ 350.344274][T15834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.344304][T15834] ? __pfx__printk+0x10/0x10 [ 350.344346][T15834] ? kernfs_path_from_node+0x2f/0x290 [ 350.344369][T15834] ? kernfs_path_from_node+0x250/0x290 [ 350.344390][T15834] ? kernfs_path_from_node+0x2f/0x290 [ 350.344418][T15834] sysfs_warn_dup+0x8e/0xa0 [ 350.344454][T15834] sysfs_do_create_link_sd+0xc0/0x110 [ 350.344492][T15834] device_add_class_symlinks+0x1cf/0x240 [ 350.344531][T15834] device_add+0x475/0xb50 [ 350.344568][T15834] wiphy_register+0x1c81/0x2aa0 [ 350.344616][T15834] ? __pfx_wiphy_register+0x10/0x10 [ 350.344644][T15834] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 350.344688][T15834] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 350.344726][T15834] ieee80211_register_hw+0x3473/0x40d0 [ 350.344780][T15834] ? ieee80211_register_hw+0x14a1/0x40d0 [ 350.344827][T15834] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 350.344859][T15834] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 350.344899][T15834] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 350.344934][T15834] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 350.344979][T15834] ? __hrtimer_setup+0x187/0x210 [ 350.345003][T15834] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 350.345036][T15834] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 350.345100][T15834] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 350.345124][T15834] ? trace_kmalloc+0x1f/0xd0 [ 350.345148][T15834] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 350.345176][T15834] ? kstrndup+0xbf/0x160 [ 350.345224][T15834] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 350.345257][T15834] ? __pfx___nla_validate_parse+0x10/0x10 [ 350.345297][T15834] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 350.345339][T15834] ? __nla_parse+0x40/0x60 [ 350.345369][T15834] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 350.345412][T15834] genl_family_rcv_msg_doit+0x212/0x300 [ 350.345453][T15834] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 350.345507][T15834] ? bpf_lsm_capable+0x9/0x20 [ 350.345533][T15834] ? security_capable+0x7e/0x2e0 [ 350.345573][T15834] genl_rcv_msg+0x60e/0x790 [ 350.345613][T15834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.345643][T15834] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 350.345686][T15834] netlink_rcv_skb+0x205/0x470 [ 350.345707][T15834] ? __lock_acquire+0xab9/0xd20 [ 350.345729][T15834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.345762][T15834] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.345811][T15834] ? down_read+0x1ad/0x2e0 [ 350.345839][T15834] genl_rcv+0x28/0x40 [ 350.345867][T15834] netlink_unicast+0x82c/0x9e0 [ 350.345914][T15834] ? __pfx_netlink_unicast+0x10/0x10 [ 350.345952][T15834] ? netlink_sendmsg+0x642/0xb30 [ 350.345974][T15834] ? skb_put+0x11b/0x210 [ 350.346004][T15834] netlink_sendmsg+0x805/0xb30 [ 350.346040][T15834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.346069][T15834] ? aa_sock_msg_perm+0xf1/0x1d0 [ 350.346104][T15834] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.346138][T15834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.346164][T15834] __sock_sendmsg+0x219/0x270 [ 350.346202][T15834] ____sys_sendmsg+0x505/0x830 [ 350.346237][T15834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.346277][T15834] ? import_iovec+0x74/0xa0 [ 350.346308][T15834] ___sys_sendmsg+0x21f/0x2a0 [ 350.346339][T15834] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.346413][T15834] ? __fget_files+0x2a/0x420 [ 350.346443][T15834] ? __fget_files+0x3a0/0x420 [ 350.346493][T15834] __x64_sys_sendmsg+0x19b/0x260 [ 350.346525][T15834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.346567][T15834] ? rcu_is_watching+0x15/0xb0 [ 350.346599][T15834] ? do_syscall_64+0xbe/0x3b0 [ 350.346628][T15834] do_syscall_64+0xfa/0x3b0 [ 350.346649][T15834] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.346685][T15834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.346708][T15834] ? clear_bhb_loop+0x60/0xb0 [ 350.346737][T15834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.346758][T15834] RIP: 0033:0x7f15e778eec9 [ 350.346781][T15834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.346801][T15834] RSP: 002b:00007f15e86e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.346827][T15834] RAX: ffffffffffffffda RBX: 00007f15e79e5fa0 RCX: 00007f15e778eec9 [ 350.346844][T15834] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 350.346858][T15834] RBP: 00007f15e7811f91 R08: 0000000000000000 R09: 0000000000000000 [ 350.346872][T15834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.346886][T15834] R13: 00007f15e79e6038 R14: 00007f15e79e5fa0 R15: 00007ffd2a3b1238 [ 350.346925][T15834] [ 350.850463][T15842] Bluetooth: MGMT ver 1.23 [ 350.855120][T15842] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 350.925592][T15838] IPVS: using max 23 ests per chain, 55200 per kthread [ 351.000198][T15846] netlink: 'syz.2.2995': attribute type 5 has an invalid length. [ 351.387633][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.404781][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.414453][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.423615][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.432081][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.477694][T15861] nbd: must specify at least one socket [ 351.569604][T15855] wlan0 speed is unknown, defaulting to 1000 [ 351.935582][ T5845] Bluetooth: hci6: command 0x0405 tx timeout [ 351.961415][T15877] IPVS: Error connecting to the multicast addr [ 352.078311][T15855] chnl_net:caif_netlink_parms(): no params data found [ 352.446105][T15897] __nla_validate_parse: 7 callbacks suppressed [ 352.446124][T15897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3013'. [ 352.466027][T15855] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.473469][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.482094][T15855] bridge_slave_0: entered allmulticast mode [ 352.501941][T15855] bridge_slave_0: entered promiscuous mode [ 352.508111][ T31] INFO: task syz.5.1315:10121 blocked for more than 143 seconds. [ 352.518818][ T31] Not tainted syzkaller #0 [ 352.523820][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.533788][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.541822][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.551398][ T31] task:syz.5.1315 state:D stack:26120 pid:10121 tgid:10118 ppid:7951 task_flags:0x400140 flags:0x00080002 [ 352.557789][T15855] bridge_slave_1: entered allmulticast mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 352.599426][ T31] Call Trace: [ 352.602790][ T31] [ 352.630532][ T31] __schedule+0x1798/0x4cc0 [ 352.632883][T15855] bridge_slave_1: entered promiscuous mode [ 352.638920][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.704205][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.709174][ T31] ? __pfx___schedule+0x10/0x10 [ 352.751887][ T31] ? schedule+0x91/0x360 [ 352.759991][ T31] schedule+0x165/0x360 [ 352.768171][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.773707][ T31] __mutex_lock+0x7e6/0x1350 [ 352.810956][ T31] ? __mutex_lock+0x5bb/0x1350 [ 352.824364][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 352.830675][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.844075][ T31] ? stack_trace_save+0x9c/0xe0 [ 352.849028][ T31] ? stack_depot_save_flags+0x40/0x860 [ 352.863811][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 352.876722][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 352.882787][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 352.909289][ T31] ? kmalloc_reserve+0x136/0x290 [ 352.917685][ T31] ? __alloc_skb+0x142/0x2d0 [ 352.922424][ T31] ? netlink_dump+0x1b7/0xe90 [ 352.928039][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 352.933456][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 352.942172][ T31] ? genl_rcv_msg+0x5da/0x790 [ 352.947309][ T31] ? netlink_rcv_skb+0x205/0x470 [ 352.952330][ T31] ? genl_rcv+0x28/0x40 [ 352.956997][ T31] ? netlink_unicast+0x82c/0x9e0 [ 352.961997][ T31] ? netlink_sendmsg+0x805/0xb30 [ 352.971062][ T31] ? __sock_sendmsg+0x219/0x270 [ 352.980972][ T31] ? ____sys_sendmsg+0x505/0x830 [ 352.987998][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 352.992924][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 352.999426][ T31] ? do_syscall_64+0xfa/0x3b0 [ 353.004581][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.010785][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 353.018492][ T31] ? rcu_is_watching+0x15/0xb0 [ 353.023311][ T31] ? trace_kmalloc+0x1f/0xd0 [ 353.028743][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 353.035759][ T31] ? __build_skb_around+0x257/0x3e0 [ 353.041019][ T31] genl_dumpit+0x10b/0x1b0 [ 353.048884][ T31] netlink_dump+0x6e4/0xe90 [ 353.053455][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 353.059419][ T31] ? genl_start+0x499/0x6c0 [ 353.064621][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 353.069920][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 353.076213][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 353.082509][ T31] ? genl_get_cmd+0x496/0x910 [ 353.087730][ T31] ? __pfx_genl_start+0x10/0x10 [ 353.092626][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 353.099859][ T31] ? __pfx_genl_done+0x10/0x10 [ 353.105681][ T31] genl_rcv_msg+0x5da/0x790 [ 353.110286][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.115870][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 353.122523][ T31] ? __asan_memcpy+0x40/0x70 [ 353.128141][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 353.133582][ T31] netlink_rcv_skb+0x205/0x470 [ 353.145618][ T31] ? __lock_acquire+0xab9/0xd20 [ 353.150539][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.158458][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.163861][ T31] ? down_read+0x1ad/0x2e0 [ 353.168836][ T31] genl_rcv+0x28/0x40 [ 353.173302][ T31] netlink_unicast+0x82c/0x9e0 [ 353.178291][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 353.183622][ T31] ? netlink_sendmsg+0x642/0xb30 [ 353.188656][ T31] ? skb_put+0x11b/0x210 [ 353.192938][ T31] netlink_sendmsg+0x805/0xb30 [ 353.197792][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.203341][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 353.208572][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.213902][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.219555][ T31] __sock_sendmsg+0x219/0x270 [ 353.224364][ T31] ____sys_sendmsg+0x505/0x830 [ 353.229156][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.234584][ T31] ? import_iovec+0x74/0xa0 [ 353.239141][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 353.243863][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.249238][ T31] ? __fget_files+0x2a/0x420 [ 353.253940][ T31] ? __fget_files+0x3a0/0x420 [ 353.259199][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 353.264588][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.270103][ T31] ? rcu_is_watching+0x15/0xb0 [ 353.274949][ T31] ? do_syscall_64+0xbe/0x3b0 [ 353.279678][ T31] do_syscall_64+0xfa/0x3b0 [ 353.284237][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.289910][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.296240][ T31] ? clear_bhb_loop+0x60/0xb0 [ 353.300990][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.307222][ T31] RIP: 0033:0x7f403878eec9 [ 353.311751][ T31] RSP: 002b:00007f403959c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.320223][ T31] RAX: ffffffffffffffda RBX: 00007f40389e6090 RCX: 00007f403878eec9 [ 353.328386][ T31] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000008 [ 353.336533][ T31] RBP: 00007f4038811f91 R08: 0000000000000000 R09: 0000000000000000 [ 353.344561][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.352542][ T31] R13: 00007f40389e6128 R14: 00007f40389e6090 R15: 00007ffed65b8008 [ 353.360675][ T31] [ 353.366829][ T31] [ 353.366829][ T31] Showing all locks held in the system: [ 353.434118][ T31] 1 lock held by ksoftirqd/1/23: [ 353.439146][ T31] 1 lock held by khungtaskd/31: [ 353.464125][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 353.504167][ T31] 3 locks held by kworker/u8:6/1141: [ 353.517397][ T31] #0: ffff88801aef6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.534459][ T51] Bluetooth: hci4: command tx timeout [ 353.564157][ T31] #1: ffffc9000422fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.594065][ T31] #2: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 353.603588][ T31] 2 locks held by getty/5596: [ 353.634154][ T31] #0: ffff88814d86b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 353.674054][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 353.694679][ T31] 3 locks held by kworker/0:3/5827: [ 353.706983][ T31] #0: ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 353.719299][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 353.728437][ T31] #2: ffffffff8de3e4a8 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 353.738752][ T31] 2 locks held by syz.1.405/7290: [ 353.743809][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 353.752254][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 353.762843][ T31] 3 locks held by syz.5.1315/10121: [ 353.768237][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 353.777710][ T31] #1: ffff88807b86a6e0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 353.788395][ T31] #2: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 353.799102][ T31] 1 lock held by khidpd_16bf5505/13612: [ 353.804903][ T31] #0: ffff88802bedc0b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_unregister_user+0x6a/0x1b0 [ 353.814859][ T31] 2 locks held by syz-executor/14995: [ 353.821711][ T31] #0: ffffffff8f0c4a88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 353.830920][ T31] #1: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 353.842011][ T31] 2 locks held by syz.4.2981/15799: [ 353.847363][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 353.856162][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 353.866539][ T31] 1 lock held by syz-executor/15855: [ 353.871969][ T31] #0: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 353.882966][ T31] 3 locks held by syz.2.3013/15901: [ 353.888250][ T31] #0: ffff88807c43cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 353.898267][ T31] #1: ffff88807c43c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 353.908068][ T31] #2: ffffffff8f2299e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 353.919583][ T31] 6 locks held by syz.6.3014/15909: [ 353.924951][ T31] #0: ffff88802bedcdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 353.936142][ T31] #1: ffff88802bedc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 353.947646][ T31] #2: ffffffff8f2299e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 353.958117][ T31] #3: ffff888067cde338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 353.967741][ T31] #4: ffffffff8f253090 (hidp_session_sem){++++}-{4:4}, at: hidp_session_remove+0x2c/0x260 [ 353.979492][ T31] #5: ffffffff8eb38a08 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x328/0x640 [ 353.989905][ T31] [ 353.992286][ T31] ============================================= [ 353.992286][ T31] [ 354.001885][ T31] NMI backtrace for cpu 0 [ 354.001908][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 354.001942][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.001956][ T31] Call Trace: [ 354.001964][ T31] [ 354.001973][ T31] dump_stack_lvl+0x189/0x250 [ 354.002010][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.002038][ T31] ? __pfx__printk+0x10/0x10 [ 354.002081][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 354.002112][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 354.002142][ T31] ? __pfx__printk+0x10/0x10 [ 354.002176][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 354.002198][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 354.002227][ T31] watchdog+0xf93/0xfe0 [ 354.002250][ T31] ? watchdog+0x1de/0xfe0 [ 354.002274][ T31] kthread+0x711/0x8a0 [ 354.002302][ T31] ? __pfx_watchdog+0x10/0x10 [ 354.002320][ T31] ? __pfx_kthread+0x10/0x10 [ 354.002346][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.002374][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.002403][ T31] ? __pfx_kthread+0x10/0x10 [ 354.002430][ T31] ret_from_fork+0x436/0x7d0 [ 354.002451][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 354.002474][ T31] ? __switch_to_asm+0x39/0x70 [ 354.002495][ T31] ? __switch_to_asm+0x33/0x70 [ 354.002520][ T31] ? __pfx_kthread+0x10/0x10 [ 354.002548][ T31] ret_from_fork_asm+0x1a/0x30 [ 354.002594][ T31] [ 354.002602][ T31] Sending NMI from CPU 0 to CPUs 1: [ 354.156511][ C1] NMI backtrace for cpu 1 [ 354.156531][ C1] CPU: 1 UID: 0 PID: 15855 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 354.156552][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.156564][ C1] RIP: 0010:__lock_acquire+0x2a/0xd20 [ 354.156588][ C1] Code: 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 48 89 fb 65 48 8b 3c 25 08 50 48 92 45 31 ff 83 3d 8c a4 bf 0d 00 0f 84 7e 0c 00 00 <48> 8b 03 48 3d 40 03 0c 93 0f 84 6f 0c 00 00 41 89 cc 41 89 d6 8b [ 354.156605][ C1] RSP: 0018:ffffc90004db76d8 EFLAGS: 00000002 [ 354.156621][ C1] RAX: 0000000000000001 RBX: ffffffff8dd3a860 RCX: 0000000000000002 [ 354.156634][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807914bc80 [ 354.156646][ C1] RBP: ffffffff822c835e R08: 0000000000000000 R09: 0000000000000000 [ 354.156658][ C1] R10: 000000000000000c R11: ffffffff81aaf070 R12: 0000000000000002 [ 354.156670][ C1] R13: ffffffff8dd3a860 R14: 0000000000000000 R15: 0000000000000000 [ 354.156682][ C1] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 354.156697][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.156710][ C1] CR2: 0000000000000000 CR3: 000000000db36000 CR4: 00000000003526f0 [ 354.156726][ C1] Call Trace: [ 354.156733][ C1] [ 354.156744][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 354.156768][ C1] lock_acquire+0x120/0x360 [ 354.156783][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 354.156807][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 354.156831][ C1] ? vfree+0x25a/0x400 [ 354.156850][ C1] ? kcov_close+0x28/0x50 [ 354.156866][ C1] ? task_work_run+0x1d1/0x260 [ 354.156891][ C1] ? do_exit+0x6b5/0x2300 [ 354.156914][ C1] ? do_group_exit+0x21c/0x2d0 [ 354.156939][ C1] ? get_signal+0x1285/0x1340 [ 354.156957][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 354.156979][ C1] __update_page_owner_free_handle+0x4b/0x470 [ 354.157000][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 354.157027][ C1] __reset_page_owner+0x85/0x1f0 [ 354.157049][ C1] __free_frozen_pages+0xbc4/0xd30 [ 354.157078][ C1] vfree+0x25a/0x400 [ 354.157099][ C1] ? __pfx_kcov_close+0x10/0x10 [ 354.157115][ C1] kcov_close+0x28/0x50 [ 354.157130][ C1] __fput+0x44c/0xa70 [ 354.157152][ C1] task_work_run+0x1d1/0x260 [ 354.157185][ C1] ? __pfx_task_work_run+0x10/0x10 [ 354.157213][ C1] ? kmem_cache_free+0x18f/0x400 [ 354.157238][ C1] do_exit+0x6b5/0x2300 [ 354.157265][ C1] ? do_raw_spin_lock+0x121/0x290 [ 354.157291][ C1] ? __pfx_do_exit+0x10/0x10 [ 354.157314][ C1] ? cgroup_freezing+0x20/0x350 [ 354.157348][ C1] do_group_exit+0x21c/0x2d0 [ 354.157373][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.157404][ C1] get_signal+0x1285/0x1340 [ 354.157433][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 354.157464][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 354.157503][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 354.157534][ C1] exit_to_user_mode_loop+0x72/0x110 [ 354.157563][ C1] do_syscall_64+0x2bd/0x3b0 [ 354.157581][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.157609][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.157628][ C1] ? clear_bhb_loop+0x60/0xb0 [ 354.157648][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.157666][ C1] RIP: 0033:0x7fb2be990d5c [ 354.157681][ C1] Code: Unable to access opcode bytes at 0x7fb2be990d32. [ 354.157691][ C1] RSP: 002b:00007ffd848b5590 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 354.157709][ C1] RAX: 0000000000000068 RBX: 00007fb2bf714620 RCX: 00007fb2be990d5c [ 354.157721][ C1] RDX: 0000000000000068 RSI: 00007fb2bf714670 RDI: 0000000000000003 [ 354.157733][ C1] RBP: 0000000000000000 R08: 00007ffd848b55e4 R09: 000000000000000c [ 354.157745][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 354.157755][ C1] R13: 0000000000000000 R14: 00007fb2bf714670 R15: 0000000000000000 [ 354.157776][ C1] [ 354.159897][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 354.545699][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 354.554824][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.564905][ T31] Call Trace: [ 354.568202][ T31] [ 354.571143][ T31] dump_stack_lvl+0x99/0x250 [ 354.575757][ T31] ? __asan_memcpy+0x40/0x70 [ 354.580453][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.585686][ T31] ? __pfx__printk+0x10/0x10 [ 354.590314][ T31] vpanic+0x281/0x750 [ 354.594348][ T31] ? __pfx_vpanic+0x10/0x10 [ 354.598879][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 354.604453][ T31] ? preempt_schedule+0xae/0xc0 [ 354.609359][ T31] ? preempt_schedule_common+0x83/0xd0 [ 354.614844][ T31] panic+0xb9/0xc0 [ 354.618581][ T31] ? __pfx_panic+0x10/0x10 [ 354.623011][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 354.628400][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 354.634607][ T31] watchdog+0xfd2/0xfe0 [ 354.638903][ T31] ? watchdog+0x1de/0xfe0 [ 354.643259][ T31] kthread+0x711/0x8a0 [ 354.647374][ T31] ? __pfx_watchdog+0x10/0x10 [ 354.652069][ T31] ? __pfx_kthread+0x10/0x10 [ 354.656684][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.661903][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.667115][ T31] ? __pfx_kthread+0x10/0x10 [ 354.671717][ T31] ret_from_fork+0x436/0x7d0 [ 354.676322][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 354.681622][ T31] ? __switch_to_asm+0x39/0x70 [ 354.686398][ T31] ? __switch_to_asm+0x33/0x70 [ 354.691192][ T31] ? __pfx_kthread+0x10/0x10 [ 354.695817][ T31] ret_from_fork_asm+0x1a/0x30 [ 354.700619][ T31] [ 354.704214][ T31] Kernel Offset: disabled [ 354.708556][ T31] Rebooting in 86400 seconds..