last executing test programs: 1m40.251957655s ago: executing program 0 (id=902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000003780)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="ccf21da5112e0c309ef1108ab08fcfbef8901701fff7f94e8efdb9b9d06900f134a1b41a636a76edbd754dc9c737e80311dfb11a6c13a05be53388add7105c70f41b9636c3a7f39e3b11360f10efca11dfdc03f4ca93f893701966fa8240bbac00a71c8f9c0152183a66f4a1e1771c535064857598a939e19971ac9eebf819010bf6cdb0c2736101a1093faf0c235db8fb7f7bfd858d711a6556c3eb210a670f6989a7aca052cfe91f369e63a77f30d913804ddc3eb6c4710600a43c5dad58e8e050e628c946ee45186f87b9f957f8ecdc00f161517a85a6be0ee7d036283fa9dbb8db80747a2837348502c26f528446a8019854756e080227f09f3dd4d807e770fb1d2e48397a475bd05733c6c63f984e43b54769288568800f25a186387a3d4b5ee1f5fa1461c3332ad6ca50eeb9e37b58705e25054f9f38bc4c5da41186394627cf12c4da6d385e9ff01c989d0cdcebbc1a953f08157716da90f7589d0c73999319c35659134daf9c55227aa0d6c0d2d7d605d3635da4d4eca0d5936622c4b50db48bf80f0a28df1623c37df3d5b8f1e50d74b9b0e62b335c93c03fc1922110eac13d763b5c98c8934f828ecce777522268e73bf45273327b41acccfc2d396f90e764785e0a5fb232138648cfb5ac78d5467fab240a539a074fed373e46f547946ede71e9fdb1053cf64847afff9acebbf53d9c1cdb7231fa9d3bf67f41042ba441c40e785606a2a2268b87046eebc3d5a384dffce07ca7becb9401e196c2c4e0f3b62f15d00973a8c193065ed3f689afa72a254132d30f65b3a422b44e22db8a5fd265209c0753a55e6eaaa94a2ea73f750d904dbd52505f0680bdce21d8ce08622cc44b39b46926654087275b0403b19419bb50a7a24b6856268b7b910a6186f139704a511b1a22b5680c7b6a34a36727209e996aef5c68c4fbd3d963c9d3881cd01cad4e213d6a6ca4af09d271fd13df8cd16ecfcdb12e8ed2c34978e81e6eb104e98d0d8cd9271d2224e94f7d9ef4067f0eb240a4d15fd1fe7f61d1c0a3458609f20d25ab5ddab75b1195f74174c292f36ce2036207c8271852aebf6924766896906c06faa9d05d45ba2758548479817f7bd3ea5d0747de8439dfed4f3caafd6dcbcd41f8ec2e77c5ebf9ce73c3b6414531b4bc8f185a78f7bb4607aeae652f1ca44d796658122822f7a6fbf62474dfd4416d22c3f7f3e33347b290ba2ac46ebe460a951922a892cd46fd666f1b834fcc544ab4b9c38fc8eb790164a763e4a78e2d1d13dbcd2233a615455e0d63d1e4173ebfe989d8667f5a7993b5b05b737aecfa0bd1c88f4c845c98dfb54e86ee1d5bd9322565fccd62c441bb7d6c0517d736e5e5bc7f6a07510873990a4abff47485684732e2797afcb08947ae048a527ffe8f19db1fbbf5224ef15419c3a6b1ba3fb9d8385808f09af61da4b7082c3600082fc97acbf6574bb6e43926118b8c5ea38ae3df3876eb7d2a41e761c8e56cddfade86339c8f1ace2653ee8c65258229a991d620dc003b1caf0432ef15073195b22e2e66c2cb0fa2bfa7bbe1d66aa4a3cc387fc0ab60f64d1fa238ab279b6538ee4d9874c5661e7f6b37b59d538fce494dba27863dd7ee3d94aedcc02b4f0f3a7fe1255327618522ce494cf8ee560a0fcdd05ff0234081c7565b63683a98c2a44937dac73d2f36d52a03c3c25cf0d1810a39b85d212896cc422bb9b88457e81ae1a712e68e8b610ee9ec9dc0811e993093868d8708e7c02edd8304a46bd1b12ee4cfb9624c042fe2092cf37b526cb2721d97f909378780f0f628551ded4bc381d7ec08fa75c274954a00ef16b51b0bc2d177fe962cfa842a0eff5d2245803c9047319770b860940da1139065ffbdebececac1e2a04fb61184d8825af2fabab8b1cb6b6817eb6b7972e45fb7364d89a24019532916d8af327f56e6624054cd23a33383f7a697cbe3c0846fa8d30a01de5b3c138f57b0c44a2b84b2505d9fe8d3b151afc1f736b4fb3298e7c4f83e291546b349eb46b82d97ddd1451faa6538626b31b4ac6483669a4befd575a8cae7897e5b75a9ebf3112691cdd937ded215e90c814ced180cabb6313409228d408a7b46f2b5bcbaa1d544d87eb51442366c5275eb09a68552a1b664323e211083db5c86da4b9423ab384895c9ce1a4d6c6e69e6d2969c298840cdd88d6dea4a3dc681f5b09126df6432439d6067e5c1bccf341a8b7337d00344c8d9da809a8e139f4c1f98e637ae9335c4597e8c295ef513cea7b05873ee6f91eb00aa1a2e856e066ea45f5ef0f8a6e51aeb4d2fd04a09ad8a254ca10fd88c5d6a90c2f9578af91aa76c5161878f155f9e87eefa7c2729d7e17c339f4d48596da6bf5a7d78b2a5c2737cceb3bd81fae88ffb75b7d9257b57744839a9a60807b25992499f527644bf6535f33dbf5263f848846f7a97ef6f2e666e57e2b1f04ddb07ea1d17ae60dbb6bac4bef9b0ba96f074f12ef00be78e3422696957f832d30402297d3e33f9b2e7592f8bea0bea9d6f171c2a68b1caacbe1ff00486bf7727188ae8c1f5f3e94a847f0d825878aeb2e504f08418e62fb8cf64ac66df0a0f958510e2574c7ff7ab4fd86c8363f3b65c0622910a14d75799368d891b2f1b07e181666718a641401a1c45a82740ebec666ea14d85fbf8f341a623dd74def65d1fe049cafa4e8b220ac5daa1a53613cf80cefe4a86951daf8eb22f1a75d86d1d885629bfc0f54a77f5d896ac4e264f9d0e6af28f41b570736d5e844ed826cb98fd746b644b3cee16af1da79dab52c08eb73a21a088bbdfa733785298b9ead4571e47b8cce4084da1f13d89a281e73a72c497f69c9c7d754e49bf680c6470f0e77f82230de8e3f84a00938ad5a3549eb0507ad1e36e9ce8a92225428ad4284e9f5127ab06f1a0117ca2263c7b65ae72b2985dba48b1f9d4c60f3380f05a7f70755a692648f9a69626aa240667522399abe4da6d8f976b9ea6540dc5c37639f94668027a54cf3b355b22e5bd67d4bf52c6302a27203532e3bdae8403284eb37a742d34372eab603636b9d39bd47e9bbe5a8f638daa22d00047e13ee05614ed1617145998c8db2113314ecad1b800bd76f0435cafa84bea444f8bc4704704c204bf3ee96baca9604aee89dc02d39dc91f628e185fb8941b76f7c43942e44eab3b4cdc11cae4a9d036d8c1ead4a3fa3169e9a6bcdf97c7603f7779d2a9cd41df3f83d07b57511a15201b10cd3c26b02202ebd00f7da8b5c219639184ebb48f595ca662aa1d2b72c1133d58875b45b8938aa29799ac0a81898f70ab1894945e27aec08d9037d760606ab08cb9f84ffa0b3a0765cf6a4539058e246adc9d7fbf5a566cafe703dacdcb55419dad3d51ad821486a58f2ea4cd70f5d20942e5b1ee843679eebb12e916291c3e321d918570b7622d693224cb47819ffef62e7ff2b378ab43df9045d4f692c7bb87c9ab63ca08a3622d36eaa2eda288ac67cc53fcd72bb55881a9b3c84e8d3a6e6bd17ca797f0ae6b1dd036f1a892538c84bdb987b284163f52c7e349f71f4d71bd9edae81a527acc0bda6c5189c78fc58ae1055a7c574ee23fd06ca08d01d83540008ef7e3817c3deed2fa99069a989d79950c044d7bbb00603b73c8e5a3d8b881391287174fd813d0845a95e7527846a5bb2015209cfaa8fa40569012cf2b80ae24cb167b989a6358743cc444d5beb47fe4b66cb0eae2b98998dd4339314f9ec7f5b240c45e0ab6d781da7277a6648776e0380179fc1165be50861044defda7f845ce4b605136cec7a8f3c4e2faff2b61c31debf4f13cbc968f7b2e61edb84a230c85d2264d24902e3d2fed3085491bc95d9d119db34f0b74a78ba9de12fdbb92252428bc29f1e572a8c9e8fb323ad8f26f09bb5b0274db9f550ed261dec91d501092382360eea5a2d072161a07673eb09df4ffc520798f15a4a337829cf8ce906c990607e357923eef78a89ad1516409c04793b9f840ab275a7fa3f9417912698c78a9dd6cee3928bfe407e45c9bacf1c42d5122428cb425ab7904762e2b3a318a6f1a568a769165d9d82df05246a55357e20cf5ab2c7aeebfd556d964f0cf71ac0b668ec3d6b2b90741931542a4e113a3ba319a20f46d60e4bd4d338ad3cd0ec225e0a504aeb90f6a6b1799d44fa8c08cda2c630f11c46eff7064355dab7bd56a0317e72ef8927bf0c4b423f0021326b07c452c8cb9d4872217eda895d6e6c8f6af3a93b249f48aa34c592ad3f506fe77e712bce293e0a08591e01217606cf683f47a72bd3fde1dc4204653f1ddbf3bd01345b0deb4ce35f8a568b8e1c2eef85c01bf086892a6b5f04780ea0b49508ae4697031cd4be93bf2a7c725c53fbd458667df8468636e8b5e5c18365cddfdd023042b3df39c40f10c09db2721de593bdcbc47b3ad0e988e91fd02cbf5e3b62b36d4eb71a57cb671d27a652fd89796a5e24fd59e61e90b5de948ebe162026a648db058e239c436ee2cc02736ee0b262a362ac1816234c4f1bb8a949fabd189783ee7467d9fbd98f955fa7de6c554fdcd8ba345c50d727a48abb3c539e4022b508bc6c3f2d9d8723b5943fde5738eca18d8f140932733915651948f841d1d5dc6f1082936b527f84510b39128288bfd4cccc34763f3b16b89945a84eb0132d230147fe96baf69c65d98f282241c4bf0cbc1a23992d56ee30b55d5e5fe020d8c4c856daf625774174e41aa25a3e7b6db85bf1d15aa33a2be8205db92f950ae221c4f41c2e1f933f2b38a30bdf70f6a2e0e625b278c1ca94f11731223e28e508ee720dc81782d2c143d21c98f9fc4b47412c43cecded937bb95ea7b0536714c9166fd75f9cddf1d0065cd8d423d5a846be6dd279dc5d072ece6d234b473d29afcfa47975d040e265a707ac000b2bae60303e7593dd0f4311372d173fad02d6ab845bf98a8e0e178612a1df29d3a2ab383c76bf25587c98c91897cec59308a54a26dc31a8b618794948603aed81a67da2c1fecd1ad3dd56e2752b0385d6577c14c8a16e9365685b8105b0a088fd2968d083c332c57186441e5c7125d2682362f62a13806deb64cb9f60523437e7bd4e8c672ebcff151bc5c0eba9a9ad4f9a8eeb5536cd1da084e14534423f5edaa59cda4b600c9b47011c751c6d3d094bfd4cea5fe21a80bf630dadf37c6dbcb05a57d58daf8efd4fa0ac3e21484b2a38ae9254f688c347eaa1ab273ae3da1a0da763e8227cedd0a62213d986eb1e5b39f0b58549efb085591621173f8f0bd5bd6423bc6c9a69f4afa02a6a4ec7d7d8bf696710139e8c2cad34daaa2e5ed36a3d367b410aa9585270ac9ecd64a72f9d40f3c95280187c4e49f5c007ace599413473bb08ed898849bfd965c865000a83e83ebe1525b07335f3ceb7e578d5d2e1f22ba659ed82d6cae33d8f000cc1ecf3273d4b1dd9403072f30f0e67d3f1b10429a10f0384ba278a9f5f9de1047a9a2d79b8922afb77b1506b679a4912f6e2bc2fd85963b8216a435cdb9a9adf79ea8d0feed2bfdc925fa3553d9e824fab965f4a0fbc58a77a06b3ae16513e6350dbcd9cd0321b9ee3898522c6e221223beaa569b41c4ab0e7591eea25cd9448989d0ab0188a85ad16991bef39623f1229f7fecc3093966c6ea2284723aa132e70b149fea26d122f7a62807782626e3d6b5fd1d50bb1a83c576d5a1a40b09308d60f26d2510091b0e109f430627da52a3c7b5373e93a88c0539258ab50248e74cf30e17f5d238aac67ff598aa13f0ccf110015af969eef549a43504436e0ee138f1580e3c8d72ab5", @ANYRESOCT=0x0], 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x4, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xea}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1, 0x4b}}]}, 0x78}, 0x1, 0x7}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "5c000002010400", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, '\x00 \x00', "38967a2445914c2e5ab898a7f56a364a", "80020007", "bff5b80e1f6fd131"}, 0x28) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000180)) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x62, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x20040001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x4000040) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r11 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r11, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000040)={r11, r10}) shutdown(r11, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) 1m39.138123164s ago: executing program 0 (id=909): r0 = socket$rds(0x15, 0x5, 0x0) bind(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xb, @mcast2, 0x3, 0x2}, 0x80) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000080)=0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f002000040000b000000000003000000030000000c0002000700000000000000d00201"], 0x2f0}}, 0x48840) 1m38.928859249s ago: executing program 0 (id=911): socket(0x840000000002, 0x3, 0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x500, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b35, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="108c8e47c6d1039486bbff4f152772078a0f8d3bc973404ef4f303a18d3597bfd6f78ec0ec11dfeaa7b8d0f3f5479e187a537f38e4b8ee50deddb3eb002bc3c7ca928b58be55beb8f87b429354edee3d02a2333a2a90", @ANYRES8=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) bind$ax25(r7, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffeb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r9, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x30f, 0x2, 0x6, 0x81, 0x5}, 0x10) connect$llc(r10, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) 1m37.888311267s ago: executing program 0 (id=916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x1000009}, @TCA_CT_LABELS={0x14, 0x7, "2d71dc84871c83bdc06b16dfd848cdaf"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 1m37.6747532s ago: executing program 0 (id=918): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000a40)='3', 0x1}], 0x1, 0x0, 0x0, 0x20004880}, 0x800) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000100)=""/19, 0x13}], 0x1, &(0x7f0000000540)=""/73, 0x49}, 0x1}], 0x1, 0x40010000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000040)={'veth0_macvtap\x00', @remote}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xd50, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1m37.454951889s ago: executing program 0 (id=920): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44890) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000300010000", 0x7) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r6}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) unshare(0x2c020400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311420000000000851020000200000082c600000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r8, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r7, 0x7, '\x00', 0x0, r9, 0x3, 0x1, 0x5}, 0x50) 1m34.933434745s ago: executing program 1 (id=943): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0x2, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x2}]}}]}, 0x44}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 1m34.545319563s ago: executing program 1 (id=946): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x6}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) bind$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) recvfrom$rxrpc(r3, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000000), 0x492492492492673, 0x24040800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r1, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x14, 0x0, 0x8d61ddcfedb48df, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x21, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x10000, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x54, 0x53, 0x3, 0x2, [{@multicast1, 0x6}, {@empty, 0x9}, {@local, 0x7}, {@broadcast, 0x7ff}, {@multicast2, 0x4}, {@local, 0x5}, {@rand_addr=0x64010101, 0xe}, {@multicast1, 0x19}, {@private=0xa010101, 0x6}, {@local, 0x1}]}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "bf7735c0be623ef92738dbce24c624b8"}, @sack_perm={0x4, 0x2}, @generic={0xfe, 0x3, "e7"}]}}}}}}}, 0x0) 1m33.549733483s ago: executing program 1 (id=955): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x3, 0x3}, 0x10) (async) connect$tipc(r0, &(0x7f0000000480)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x6667b9fa4a4fda0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r4 = socket(0x2, 0x5, 0x2) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = socket$netlink(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x20004880) (async) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c5fa112064b41c866761619ff8b51fc9a000000", @ANYRES16=0x0, @ANYBLOB="01000000000008000000030000004800018044000400200001000a00000400000002ff01000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb00000000"], 0x5c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4008001) setsockopt$inet_buf(r5, 0x0, 0x2c, &(0x7f00000000c0)="db653fe59e61f2f06f2b4749ccb89f1dd2979fb8db349f64fbda296a7a3016294cacd3f4ad372ecb51e4cdfe00cbd6c1a8815024c7b0bebe3cd9dddde1fd98ac652e65e23f9f916b78fce6cfe19d48416939688e563104953970147dc9941bd2e425d00639397a27e5d40530c6", 0x6d) (async) socket$netlink(0x10, 0x3, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m33.111946019s ago: executing program 1 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c00003800048031", @ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/133, 0x85}], 0x1}, 0xb}], 0x2, 0x60, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x3a, &(0x7f00000001c0)=""/58, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0x5, 0x78}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0x1, 0x1], 0x0, 0x10, 0xd2c1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='xen_mmu_flush_tlb_one_user\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xfffffffffffff4ff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x9}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2804c002) 1m32.837768151s ago: executing program 1 (id=960): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x140052, r4, 0xe44bc000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008300000000000000000000009500000009000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x3ffffffd}, 0x94) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000280)=""/101, 0x65}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x21, 0x0, &(0x7f00000009c0)) 1m31.750766613s ago: executing program 1 (id=968): syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) unshare(0x28000600) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, r1, &(0x7f00000003c0)=0x7fffffff, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xbc}}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x300, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x41, 0x3}}], 0x18}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1m22.366067135s ago: executing program 32 (id=920): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44890) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000300010000", 0x7) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r6}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) unshare(0x2c020400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311420000000000851020000200000082c600000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r8, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r7, 0x7, '\x00', 0x0, r9, 0x3, 0x1, 0x5}, 0x50) 1m16.648519817s ago: executing program 33 (id=968): syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) unshare(0x28000600) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, r1, &(0x7f00000003c0)=0x7fffffff, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xbc}}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x300, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x41, 0x3}}], 0x18}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 8.146717772s ago: executing program 2 (id=1481): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x154, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x41}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffd}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe94}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x37}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000020000000000000803000000000051002d1b302d21a8977d50ea04a627fa86433f2253a356b1bbc0959218df4e8433e38394777600039d6e4eb4016a9f8a6b471647b0e1c1cd554d9950d5290a08fa47902490e9cb626dabe9eabf5b884ba3937a48197a3b5cb487387e20"], 0x0, 0x40, 0x0, 0x1}, 0x28) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x7f, 0x7, 0x10, @mcast1, @mcast2, 0x80, 0x8, 0x2, 0xfffffff2}}) 5.681380937s ago: executing program 6 (id=1489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@local}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=ANY=[@ANYBLOB="480000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e"], 0x48}}, 0x0) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xd0cda63f8469985f}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20008894) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f0000000ac0)=""/170, 0xaa}, {&(0x7f0000000c80)=""/169, 0xa9}, {&(0x7f0000000d40)=""/130, 0x82}, {&(0x7f0000000980)=""/115, 0x73}, {&(0x7f0000000e00)=""/152, 0x98}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x7}, 0xffff}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4087, 0xff7}, {&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000780)=""/134, 0x86}, {&(0x7f0000000a00)=""/166, 0xa6}, {0x0}], 0x8}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 5.041441038s ago: executing program 2 (id=1496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040804}, 0x20040081) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r2, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="001000000000000000000000000000009500000074000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r8 = accept4(r6, 0x0, 0x0, 0x0) sendto$packet(r8, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee03a879c077", 0x60, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f00000001c0)=0xb000, 0x2) 4.802881623s ago: executing program 6 (id=1497): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x4, 0x0, 0x1, 0x800}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', 0x0}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) writev(r3, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.760032615s ago: executing program 2 (id=1499): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140000001e004909f3ad9900000492c500000000"], 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x51feb9e70230166a) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000040), &(0x7f0000000340)='%pS \x00'}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x6c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x12}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x6c}}, 0x8000) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x800) 4.307532613s ago: executing program 4 (id=1502): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0xfd}, @mcast1={0xff, 0x5}, 0x200004, 0x5, 0x6, 0x500, 0xfc8, 0x20c200a3, r2}) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000010000009f0000000010000010000000", @ANYRES32=r0, @ANYBLOB="1e00"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0400000001000000040000100600000000000000000000e0ff000100233ff6d5b9d195a03ad6719251674d780c9ed9f22929274a5bf1d58985d7356a15ef230bc99a356dc4b75c"], 0x50) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7800, 0x20, 0xfffffff7, 0xfff, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x6f, 0x0, 0x6, [0x4]}, @noop]}}}}}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x21, r6, 0x4}, 0xc) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r10) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r11, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x629}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x4000000) (async) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000014) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000180)="ec3d2ad43eb0f40653006ebdbe8e", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) (async) r14 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r14, &(0x7f00000006c0)={0xa, 0x4e23, 0x4, @mcast1, 0x10000}, 0x1c) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r15, 0x29, 0x2f, &(0x7f0000000300)={0x9, {{0xa, 0x4e24, 0xc0000000, @private2, 0x101}}, {{0xa, 0x4e20, 0x4, @loopback, 0x6d46}}}, 0x108) 4.050654317s ago: executing program 5 (id=1503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000840)="b89a24", &(0x7f00000003c0)=@tcp6, 0x2}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000500)={@local, @multicast1, 0xffffffffffffffff, "f859f61d733eb78b6358cf490d0df6ac0b3e4a5495aafc708783be55ef1af36e", 0x7ff, 0x1, 0x3819, 0x9}, 0x3c) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000240)={@mcast2, 0xf, r3}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000400)=0xffffffc5, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f00000002c0)="5e14ba792326a8ce862f3176ef705b044da1958e2514f0ad9811e7988d4d9bd7785cda79671a169cb617c1615806141e8b71d1e35e6d2c539badd1d7b32080705b96b2168afc6aba1a1182042266adc1c6fb1b490530305118a1ab748da88855b0a7c7fc5b9a1a8bb408d84eebbb29a33725b81568349e6694d9bf5ff95ed15bafcbd88ea490e07743b8a040e224a1f5f3d4b097789739c0bde98d72e462cc288e6bdf96f2982b2b5b4212ae5cae4f", &(0x7f0000000480)=""/18, &(0x7f0000000880)="b9296e66569c86d428a126b9a46df889af4eb432002aa9359843a8c083db6c0e2eaeb69dbfdc21ae0743f0d222631b51e2a47f6f3f9f75735344e4723d1745e3b0bb4294b107b4b70eaaddc6b0e634ad5c06e2a2741e070c075d4af1e776c240b663730f2c2f6475a7e125774b8eff73110abdb7f57b2141263cd05970e0d8bb0ea44fd6366171e0475d9038c4fd49fc70ebff4d542ae13f543c0abd2dce6a95c03e1262b54d79370f7aa22201c6de64915807b1c68373705f7e6accbff4420df6200c690bdf903a88d9b12b3c59d2ecc8e7386dd14c481d7803cc3c6696294ca289aaaf68e92a2a6761fd1161ff2b333b2d8f1c2bfb78b7a0888cf44ff1f85889097d41784fbf933dcb89d27056f6fb1841441a916082ae3dcf706a916558dbc68cd5c1daf3f524cef7630fcc4fffcce6a05d8dae9f06f5ba47b361f85b6f1a1d00f9a39ab3b37239dd494cfa25ca9ef76cab7f190046c94bf0767ab8c761dc7d520e866b4eba036af427d431d35589d365e235a6c2009cda583f4818553c8593ee274eaf936136259f77fc4c7b11b0cafc39a358bd77a1f7f3503ad5a9eb4c78c1af51ce7935d850049a1e77a7f1913d8ec441942b3cea9214c844b890ebf3543ff119995e11c10c36f7c6a6395b5c2493d7242b6c37964fa76523fc20b740191c83e53fa9ff689de85f63ef7d2125b75ca4bb316c0c91d72928f82caa045b638d4531c8a0882040f53934bc4c4c937315bd8619c73a7abce002ae8b85bf2a9a7ed51ddaf15ae080987e3b431f0ae9bb3ed08d621ad61ac6c4eb37c063c79606a65e471a218468c2e3d51e418f4e0845485c3cb5490f61c262305bdc0af583c765d3021b9fd56f6a71aa1ae7b050102a31840fb01483534712b5aab09ee183378902a112c87008dfcb2b62ac33a71e2a135e67ee2406b47b0911b513915fc26c0c91eaab0d75854cd4ba00210a5648535a64236fd6863d359bf582953ae7a7f4b19df071f9a0e3ccb78c14d2b803fdfe12f7e694baa037fddc9068a77ff4690173690d859c4d7ff4dfdf2921461d282b1869d81020e854a5a8a58d315912e264c9bf5908aba41b0b7a4c29bf0b0e96b46a3e0cb43c10e89faac2f829fe5943b37f7fc965a901c3546e0c3f085e718812d2eca769220ed2e44cd5e5d26c6cac7265ee38768c453e7bc3d54d37eb9602c395c38a4293d824f14fd725103ae8d711c389d58b75dc4c2c4b35a0b2d2050dc40b8064639e4e123edadc3b803f8b179d00f25e03a639524baa2181f9b06ac8249517b14018be2b4f932d23bd1b4ec41f23b6f81aa2974092c5560cdade30562e188baaebf2d6c076c34e72c882e6d39a62e1cf722adaf0325c702656ebc3bb0dd7e644b371957a3c0c00a4690f3e97ec2561a679f6f1c6d775d9dce4b82fbe663b17c2cbfc3e44724519b5d20c9395e9da69385245f839583fc71d3422ea4f70280b548445963630d4bf04b9abfe63d5a584d86ac5fd1c1e96716931845b7ed68aa4aa359c40516ab992095fbf9e8aa495b82b51698aacba43afc562f4922408162020a5821d1c67a3bc02f83b47fa9009c68c2acbb3181a2a8394725dcd5beccf49a29cc6f0992d2ffac02672fda08c9a295b55be7ecfabbc161f5b8a2947566d8d5479d9c1ff1636e2e2e5c046716f82dd32d3c581800e25b26eb20b24940d7b5f6c4229035aa3c2203216d061f7bc021ba74ac061403220de3623189311041f7292e4f67d2102e70721c4386ffb451078f80d247a7546676eacd8102e68ab4a8c4fcb80ab6dd0e92aed6e437b9ccbf725c3cf40828b182d463abf2855e7f04dfed80fd8822ed44dc25c571ccadf000e197c4d252962eebce891bcbda8fc76cc8b18920bfdfbf9afff18e825ee5df140982947831b353049e3b34f7de7c9a30e6dc84c39bd2f5460d0e11e75d6f6eec86f29cb499e2997b3cd7b0d07d1fb65ce157bc83bb352c3dc23ac92cba181db6c98af4c9e894408396f021f97fa0f727941927d6490631b80a2e88cc8369bac44a604e1be173cc3eb8419ce7cc30a07330d20c5abe973cfe64bc2a99be335579650ebe11f7630a5d862d3051cde26033d667e4598d3a01b0f5c5e76af303011f77d75381e48c8cc246900d12f0093915cc2b911cb50ca09738b2cc826d54d8c6242a6f163c13d3226f505cb9e99a9b557a211b5a500f94e679f0ebda6fcef49d11d7003e9c9b48b447418471bd7d8b6e753cceee3a0656eee6151a1fa559421d772050f84d2d470d38be3d118e455980902632685c88e7a49ffb5c0e212d1a40c47c00d4573156f1c7d050409c5461ef91cf46e6280cefd56b786260c6aa6a0e9a78041c658d2e934455531ee4a770c7f16ce4b8deff4fe9a42cfc2bd229fa52aa592fc08104ba6cb4504dd1eec3fb1cd644c86feda7fe07fed7c5415775313cdbf37eb78c4039e537abd2076f6d004a139edb2d1b8a360a099894502bd6ac02c98bc3dc4687e5d322eb8e89ff6869e9f4cf64ff91e5effaf074fc117a06f166e8e957e934c5eefbbe23e38ecbae2c9eccf85d0f5bd64ff52590cd52d9656acd0ffecd217e633192c9ec32750b7010ebc630267800bcc9c92653850b6161ce82ee060f06858e6cddd9b3962cf6200deae273d86baf1a2be9ac0fa264cb4b04dbeccd1a3a910e1bbc084bede15c9021ea2e55698907347633179d521cee8c6553875691997c46e8ae5e87344ce08e1722c02398c3ec15182e84d2d7a204c3cb8a4a95d5167c21f3de24e914caa87c5ad13f3f1ccba3865ac77ac647ab314da0821f6309525287232aefafb832611dd22294988739fca88dfc1ff0d89c1f8d13c9d50868b3b16c1dccfa2b8203f122fe401bf1521cd2784feff1aba801f3aa3cb45a32db46736e14a84c8d5cb8521a7a3238e534168071b453b7e8bd91b2212791ad7b0a44625633c62255f29b3539993124f4585a5b70242768a14735781c9f88c329c20af49d7f006933667514aa879aae8f12c4032615a59096460371dee62215419a047f723c8b3a08c99c0f66a07efcf8277a4a25f495bcf4164da0513d43b13e83f6145fe8cd74ac1f0f9a79eada804644dbafd335deb37896e99632ab8e53211be5e1331250ecb1e455f75e445ba07d0e31af63d693d970e745f7b2bd2f4d301363fd0a782297cb06d3ffa33d42416659216f325c9e9352107eeccb2c6c9a98a4ecb72b4bd251731fcd3390451536b9c137a2f155b1f9e657543deb75a8994bb1d3219ce4f4404f8d96d5eec702f922a2c8fe6176038001deb43d93575625b7acc066ba56fc0f99e02d0ec27b4b3078a825cea8603d5eb6a61e61e14c52bcf8c0aee231434702e73b469de2069458381963e0e4986f755544e08c1601607406785799f221d3c9741501b1ae6db31a6240e5eabf77622c075b92f16a23a07dca29a5ed7bc8ce71ef6921cdc13cf383d7a694a2ee291f2109b7707158fcd8d09f5cca6a0cb11f9259959d19a41d8df23b8ccaf00d1cce508f26bfa0fc3a3128caa79f4fbb1fdedfb76233e629aceb84b6b91aa8733d9fbff9d7f56064f6b4a8e30fd57857e0bb15d79f010cf3fdec90336c90f1df49c0a5391514810f1a8fab0bc04d6996df7a9b1eb0ffd098cca4d7b60765598c545fca97eabed48660e6760284f550218c55b338444fc20fc5ebeeace1a978e4b676ecd8260faa228c4043a92c5991ec756a68e0caa731602158440f15a327222134f2baf92ef0ca9660d7338e8cd2058cd4fcd21da70b06484a55b81cf8c95e55e9bc8715d732e9401b2e24a6b34c1e8599c81e9280dc8a9b58a4c62475261193316fc914e14e6d5a001d45e2ab2221ee8242978ecc2af8f3ab67f3636ff08fa241b5d86d176c0fd632df9c4ffc3d3c9856c71a1b3626417b27295044f1c53440ccd2f6051285236d5e1a08bcdd7a9130b24bcef9626f5b3f870aedceafa8be26a423bcb13533b882510dbc294dc404202682999f1c72d55acafcb93d7fa1302aa8fb8254a8b28db819d4fb29f46fd1aefc2ad16bea6211c8b25ccf23e437bcb02fb7c3b7210aee6c60849389a8d4b4b707ea0ca5699fff37b2fa14e0df5af7ae6f40b034f892b718caa405e237400c2671747041cf0db7dd9f837a0c7cfe48190cd6db864b4a525c6df1f27873a3104a55739cb41499ae248093c65a755bac4bd4407e3d046218dd5851657506b66968a618ab0fb2c354f1a23836b9d38fba9163e797780ad23c6967a1d04b0d5222537bc5caea2eb5d9b2f09520722abba4aec46e12bd0c9049f1f8f142f6326d8df2c2bc3c17c2d3c216e135b09d6fbb93a051cbf34f7acb6c24102667b828bc59cdc90db949cad94136848c9a77195ae0d280b5b9494018bd068385a4488d2ab11f0a605db64ac25f693cc09e05c267ad716ef5f2d6dc4f68d661a55ca4ac3c1867d5f746d4c42508db0ca3e1247b882e856c410f213668ba7ee2ceca524a763a72497e01b005915f5bf080ab7b4bc3946be1096f3f26457eae4392087f5c9e8aadcc452b1b584b004e4b1ae3abe1686997373da9ac6e4725ee7829c02ffc51c106a4c51b257e649371215767189c28d7ae5b6101c9f08d59b5c8e5b6c38bd90c9f8e45f53e73011a76bf2fced9145ba80c0002dba22d0805e4d1254bd3ce39314e76d300a389873ba2a6cf15c81c4400bf628bd11d66302dc23437285bcf81aa15e2e94abf6a63bf079c0399c7a8a86eab73a16ad0a5cabf841610dc86b455f337a9aad0ef7f9193d43fd3da960dc17b8de1f065604b6e2fbd83457d7b7063a86fbd2def6546277eefe15f640c4d5a62cc9b82b87c087ca769e8c8cd3ef88fb85507f5d01ba40bc3757b9c0c3a037aa0e36dcbc2aa6293596930ebaaafdb1d629086c2754991480e30fb12c5ecb7095eaa559ffc4c2646b760c2ee949c70961f717133d3134c5d7ee8e89d0a9f8af3f0205754fa13b8257d5e153749ae58a84f5922dbb2d0d7b85ae94942e233b1d3e2197659cc4078d56d8878b198328c34960d8facc6f04bcb3c8688a78fc13f7a85159ee5100505926484041c342c7e85bca6d80d8b93e0bb21d00a6ae0fbdb8a131dfd7a615581a6cd26b96c5e9729dafbea614e9b99968f8da0293692f7326904b7a5bc57dd8fc9838cd582ca0cf39bc43e4a2e1838441d7510f333e2ed370403fa2ba07d5a30a24b9f1649078cb8a7283bca44cc835559b32be6733fe689e962390ac14f10345112470b1fe48964c499ab53cb820d6cc20c9639dee17d17888ec18689a94188fa1e7fe657b76228df7124a1ac64b0712f11c404b4131014af2b7bb27055198bf6cc61b7a2ff5505c56639ae69150fa507816ddec0a28561fd143052921ad91656569e8b41c24ed23c81be5e9165248b8913b8936c5d89aae5cbdd3b2949253761b9b4b048d77c22f08129daaa0a8e79a90395eb6b24c04556341807e9d77c113a60fab5c12e6cd4e819a153f2b8d466ac2d8c46784562e2c1d70bed4cf0b8a19c646ec5651a513073a77b9aa66fe164bb6c3a4bfb4ae651045b36ca2b4b7e6871dfb9481b9fb26ee129e6e3765fe7cdefb9e792a000b03527429bdd3525725e04ddc93cb309f43c8d210bd3dba0bea1c835422ad5a5f24ad0527babc92bcd7b9c7f8fdbb74a61d0bfe84bff75feef6907e9ffcf4a53f4bc8b9c0ca76a287d3d1898fa8cd1e30bafccf42371829bf9154f7c37fdb3dcf2dfb6b8c405610377a2fe70b24989607da2d49daaf2d7dbac11248751a1413e795820e6d75e5aed8b6b42e9e", &(0x7f0000001880)="8de2fba573d011e3c9572b65a9241bae862601320e88ec4bdc2a3e70728cd35198d7894af56e3cabaaf347c23aa4da7f4e030c6f18ffb203331b9c424a63deebac19788cf56a8a44d3c73de22fd06552649cbb5893660aaab7573d94f60467017c97c0dab233445bf2c399a41ea1439177b3c81ff276144cbe18e8b167343f1372a8b3101b3ea68cebbf1dbb4f6ffcfba4c5d4134c6c83bb9207835450ac4f4e2a98e1f1e9ca9c3f17fdae0bd62c3ce948175d4ba03ec6cd02f91b496f038d6d71cabe4b7565173ed8dc6e0348f7dbcb87cf512060ee4b0a2c05a27967757e24d31b769520c8f877e7049af94ba813af687f631a62434ac2964a63f947da958a35758d9558883c31b5eba7d06fe9aaa582d8d4b3609ad6627c88c4f180235311fee37d65ccf4193d462ca2554e5e96fba8b7a8cd501e8fe93c0f58b0abefc0fe6d72cb28550216044cebacd7cb8129b6855a753560a8ff1d984ae3d82d335edc1594a5cef53d07b29151e876f2adb6b406d1fa015b30d1bc1d066aa8507ab4295ec635623532a2a29328dac076ceb896429fc623cfef0db216048663a8a6c0a20eabff4bccf6d281d2ddbe46f80f61fdb43bdd945d8c7e54269e1baaa058e63710362afcbad7a4c449e1f4b9c399049871c43fe70948b76e64b8294a9713277a0f4fa161de9ea957f54888f79b15d0dd4981209e50dc5bb44ea1cb92f7061dbacd747ee7d959a238b827c802f63c80d5d6fe2e4d5fcf2ac304867437783c08db5f7ea717ea79c496f3d07f88715c61223ef94e09a5230551b87614ae7ae6f49ed6d500827d7e9c4aab4e58cdcbbf02a894ef80399d3ab0efba001a4a413f01b79981ffe906718cc874c3af8cfd49e1e50316c6b357e289e3dcd0c25a02c5ff4e8c901cf07097db7baf64c9a54c2afa032d6b354e61e735d5bd306b252454ba65b0ba2cbc8e5a34e07954e6b5340df9253fca0393b1d6a089d90f72b44b6011dd94751690c8a2e77017bf423a4ce3e95debd8561c73cf2463dd32935cee02ad774124d45b25b0d5a22e817479ba940fcb40e363edcd61593b5e789cd8a4ea64fb762a730a68ec1c72b2fdaca2bf33ef65d12ac01f26a026a531d471380683aaf2a0944aa4b3770e02a0728abc2e530890aab09f08063583f09b964ae7fdef80353eb58f6fd29e9bec55526f5f568e965d1e39f062c5c74033940e48a0a86149381d2185d9c2d96b65da62d08a34ebe4838f6d346084ddd3085139b530b0505ae0c8817c93a87020cf107f2510b898c1a706345d6d0f0081188b081474940d296775f9938b5078ec82c16a0836a64d0b40bf25f08c648e77cc2a5d2c13e993ea0eb9e498f8d0b88931dbc2856562021517af8e7671c0995f0476816793b4010d4824203a8b4e1571b78cb7f3092ba799ef160847a34b3362eba7b5e51c1f7b361e763f2e2fe3a0e32b191cbf95e805e8183653bed196e6404211cea84cfba56b009cfb277af6cb647086268e34d10b1c1bb6df7c54ed6ae672bbcabd22d056ce17df4b127da6af8c7838238ee6fdceccc9b65f53df4c2e52ea8d21e56666744863d19c21c9bc68fff95b5d113edc283720374c6fe4a8ec9d70ec4f9a48c73cc6440237841fd94873c7d9d1c2268c117398da178a22b7adc2d845242da0f7ad37977d06b7daebab4a2c66e4d6e03397b5be57f63331c50067a782dcb54975a705a4c1bf0ff7fdf156ec8fdae92a5ccb78ee258098f0db5a9c66029d1d882b6150a1a8cc7ee7099c140f683f26b4beaf043ab35a6e9c7384eb2fe7f7dc175ee50c49aa42c4d6fd7f13db3f8d6a1a2918a076e879d2df068329bc3b8bd10af5f9e37d8d4ce386747e5758015408f42fe40356d8f2189a491b2e41a21a827d377f825e3f8a3aa204c20d14f4304378b6e0210ffa4338dfdfffeaebf1d5fc32d061c943f32a69bbcc68a105e83ac4a49a56da1a8e91bb476ae30d31cdcc9518c2861ad7b482f1225cb6ef3de2770cc99ccfcd71f5a13f8a555d380f5e24b9bf160c46b24d6a875dc05299182ab584842e8d0a55d16d697ca12bdfdf3baf847e417dd0d3dfdcd0f50a3166420a5366ea345a2a9412f61f93d4d1faa825440a9a7bb7ab416fa1134061fb29ace527add621ec0857d505398de78bb4a0177db3bbc1e7177a3447e5bf146006ad9aef2e83656a25cc6f9acf2964744b3e396ca154ad14265a5a8172a39890b5047fc0f0330c0a11930b04bea41fd382cdda69e7bdf53d2c2777137e66b0bbd3baf99523ad25d16e9866872e85d566aeb4cad94c63f3edfe984e28731c80c22b0408b16ae538b97a0096b2fb00a20daab2d39086bf4a05567616b50cb212cf5394585c016723dfa1d1b731d6de8d4229ab07a099dd1f6be6acbc071fe539e2d67133ec0ab68ee3d6fd11a14ad38b133d2739101beaf877f1dcf1f23725e5a0253a3c4ced60a7789d081f4ec179e2a8a15292a49c2e26fb9e2dcb9615f9db4899d379e76b96abee4f8659fac3cbed23d36fd013c8a4845884865e8cdf253932b81b84ed5ee75376a66e706778aabf7c0789894f39a32a6a0fe68b7e91cc1bbb61db182396fe1f26024bdaf3714dfd34f6b7a29c481c955dabb95f8aebc84034e3eb0d011da56cf978e081e6aff2eb9bebbab1d6ad8293311a18db2b5d2c05e842ee4235f4767b9463e71221087aa0a97f6690d9bb60df1b36074c7a386f7efa65ac06db84b6a44d5c2e692e5055cd4111f6aedbd939e6a53de15cf2d3daa19a571ddb4a1850be417ae0f0f5e7fee524cdc846301fdb185826c9287b5d163b2c182561feb5b640d2917f6dac3aa109f2d2f206d165b0e6c250528a10711d2fd2e584c99e6e38fdf36c93ce0b216a571457f7f733a781a2f2a19df0e057841d873bfe245597f6328ead56f3c70980511811f3ca096ca0642349854b415d83db25be11dcf0396dfd55ff21ddab11669e1563861f22bd11b5cb6871edee33d24827e0dbdf4f7269089db481bf9818d353f5d4fb69c1bcdf8d8374ac2766a5c452f14885aadf5912ecb9fe89b3aa55c1a150277b5ae489a18aa2eebe6984c5a10a55aefe27810dc86af1ae420b0b1f584301c73f15ed997af3d074d341e7950011a0fb0a8cd289ff0a553ea4688a77a8414f4f21f728ad0c3dbcd9c909631167c01129d679b11557949258bc7c237bff23e5deecb5e8bdffbb9649a735795f4d705c862a4f0839888f8893078361effe60597dec24637c8ea4e4a0299aeef05b4c2d858be402e9366478f0b23e3bb3e3975aae750e403f906e246b9e482aedee2176534e40b8691318022b69d40cba3f2b7d7850b6781e60699c82cbb8f2a5edae37e9dd6e8bb969000552c16bb1b921f61c96b1eea7f4f6c28d23130e9ebe52050c1059e9c8a90f5533f2e5149f1065405a7ad2d5e383847dfba089074477707c022b3f9ef1e3a9c78cedc8b1dad2c3d5000d519b709da22616ab0ecdf7d35f8c26edd540339305746bb1f5b9f1da809bfc5bade139541c30246d1ad0c5b77d91833e9156eb9e29a0a1a4eceb12ddb1114077b9af3511f473ca99a537b493f9f98992e5c83a9e614c17c4b2d685cf2c8e8153350629411f2ecd69eff9563c9098b77659373db33acf1fc5901e82ecd6801af5ccbb04dd028e8a42182e9b51ef0fb0801073c4f67f6300a4d94b83ccf6e1f4695920a56850d56954b679452aea11110142ef24b11c54d52f51d6d95cfc01062fe110160c5c5ba1a343a2c335d7a9311abb07869e27856fe317da181f0f6b17ffda6255680d339fb93d267123ec8bff6c57c20e5181d97c1c7d3519aa1585df894b625b03997530fedbb6e5ad1beab6dceda00edaa640db986aa6e5cb275461225797fd122189e818d85b5fb62c72e482068d3a4c40d52fad20c4258658cdb8fe9876e08d28cb8e5f0d70b0b3e707c03f9f3abdfd7be5220ca5b0560cd6fbc1c9a7d261b59232c0eb069a6b86e1cd8a8cdf078f284b746d72d17a71ff7de0e8d96e81e549f1f7a9e9cef430e9ade7a9f06f7dd05c7194e647be3ca99b75d5ee9c36f830c3b216aca7d953aad03c53681fb861592ef8d86870d71869448a438ffe26a66bb25600f5ffca3fc735a82a879113e3fa4c70d54c54e27e56a6cd3158a729fc46160d4bf10e2c42c8064085be654093cc68810f5e098e4ae0b14e69034f22cfe16fba1d5c47d46fda07594d6fbdf7d61bc4049ec7f2698c7007a3378168cb9595059c3364eea6096438d03365bb0b1f400c68547bcd2c786cc4f787ecb657ea11bfc93c76b8b5653c96035bf8f89d8a598954b5b95711e8437489e71511da0fd76024929130d99d84b699fde8970adb666629fde4b6a5f874eb21de29386d185bac5970e287429731ee91001e792f5a200fea929b95d4e0d1e2faed5f629fa48ec5cf3c2e8b7e73cfa395ff67d36470979210c9db5e7d5f22d75ebea69d25e2a3795dc64258692e55f9dd42bae9356359a68275c5861e4c2c9db5c220534c18c0fcdafb1864827ed045b67db1681aedf2c67a0defca5aaf0ebfe835ee1886e6fc1c3eea631582d374cac25f6b463f4781fdc3904dae1eaecbd7095f7c50ce0ee27820a6420a942cc247b0d5523d6f5134bd8b0b177bc9be2874a3e8333f1e60874d3f080eb9f39d9c594ff6f34479653b93984558f3eecf10521ce3e4445bf88df2fe85b3950df7955e5f40c402b2e9e97da0ff2afbd7bf68ac0afa1f3f2e07ed87f01116bd1204afa15d066030c5a8659c82881d034c681d8abb4affb7ef10e748db78f2a9068594b8e9bb2cfe9c5da20aabf249d43cd580a69e57c80ea6c52629c5d0b4e1f9e9e504a5e94b85a5b40aefeecb3814d2db2ed2dac51b286a1bad4b9d2c5e947a4e36d9855fb28fd11d743290c042d7a02c1a461aa41ae7614bb1a4dc26b5c91d04804b125054a77adf15f5f5a65a3b2eeb18ff0e525d91ecaaf9d7fdb98f17eee5e3740290f09033c85a534d6dfa2488ebd38f79087c7b39b66841087c1a43bd92c569f9614e74d3eac9085d9e119c04d44feac3534615145ad5f6b1f58d2d62c9d6699f8ba0dc1a76bd9191c5771d217efe3995e1a88f9747ee86b005eed0043cf739df6fb62b5e6f1455dc6cdf42357ec9a6284abdb71ad7682ed8f841d36889fe21e5b4439c4148993cfe94cf039149fa1da0ffcc060e74bdc69c3c232372c18b19a486efd2e90d2c4f27a9875ada6dd407e2cf21b99e0161635fd0537aab04c9c0d3f83e4b828a2a97dd39c233754c3130c6e4c152345fe3446ebf4cc14a70cfaf4582787e58f8dec16eb785332940dcdf09b8ee79891d5973bb38fec46a83e5f542c83b93f546517c4dc33fad641a83993722e43da8f4c5344e65d17da35930890d2b7197692c7de24ef84774f3cc51ad9ee879d45acf0707f3c1b49470799f114a2e9a855c95579886fea3abdc2ea1dfc81cdb6eeafdeede37d3d00b4ae3c5ae0fe81e18e1cc047a92c880b88f2cb09a2212afd48be6bd545dea25d2e0d1d8199d1b8e361d556a007431eb2fa278db1a04caf99e95cf3b98c1b229ddfb27a8595d64017eeff7f15ec6c637fbe2da6d9614c4c61edad7941c613d66995e890e310e43ffe762039ee3ec7dd39fe3c98e850ad3b02e5b6ad30510cfe3c9b909041becf2e35eb0d6698e36b7938997cb166e070e901f447e21a39223997e1c0e4481c8553e932e930c473ef34cd19f9956bfba5df1a6afa391eea9ac57bafc9af309f9eab2b55b1c2656f5913c72aabd9f4b2e2712d2e21bd0590904c26479", 0xf, r1, 0x4}, 0x38) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$packet(r7, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee03a879c0779591813076fe8893e54bae6115825fd42b9c850ae09a0c9138676ef04e8706ec6057fc878302be3a1b9f7bf9805a3eac79cf2fcc0637e8b799b59439dae06bbca57a1254d8f17267776053f23801b92d20f12402acde62c60df22c4cf3bc5d7318e17650b88abedef3dcea88d3", 0x2a, 0x0, 0x0, 0x0) recvfrom$l2tp(r7, &(0x7f0000000040)=""/252, 0xfc, 0x20, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x200cc800}, 0x2000c050) 3.883753041s ago: executing program 4 (id=1505): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(aegis128))\x00'}, 0x58) (async) close(0x3) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r2, 0x29, 0xb, 0x0, &(0x7f0000000080)=0x15) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002e00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280)=r4, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r7, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:tmpfs_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mouse_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tun_tap_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x37}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x78, r5, 0x120, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xd, 0x55}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xaa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x20000010) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) splice(r12, &(0x7f0000000400)=0xa, r11, 0x0, 0x1, 0x6) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xffff}}, @TCA_MATCHALL_ACT={0xfffffffffffffeff}]}}]}, 0x48}}, 0x20040054) 3.74660822s ago: executing program 2 (id=1506): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff2, 0xc}, {0xa, 0x2}, {0xfff2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044001}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x401, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x182d0, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="341bef47f55e37bb7a8d656400020600", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350064756d6d793000"/28], 0x34}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r7], 0x40}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff2, 0xc}, {0xa, 0x2}, {0xfff2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044001}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x401, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x182d0, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) socket$inet(0x2, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="341bef47f55e37bb7a8d656400020600", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350064756d6d793000"/28], 0x34}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r7], 0x40}}, 0x44) (async) 3.684689106s ago: executing program 5 (id=1507): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r0, 0x7, 0x1, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="8500000089000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) 3.630214499s ago: executing program 3 (id=1508): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x2, 0x4) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109002, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000000c0)=""/105) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000180)=0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x90101, 0x0) (async) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000200)=0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, r6) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000240)) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xd1, 0x2, 0x3, 0x8, 0x9, 0x6}, 0x20) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, @in6={0xa, 0x4e20, 0x80000000, @remote, 0x4}, @in={0x2, 0x4e23, @rand_addr=0x9}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e21, @loopback}], 0xa8) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f00000003c0)=@netrom={'nr', 0x0}, 0x10) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000400)={0x0, 0x8, 0xb1}) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xc0, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc7b}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x12642d51}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3002}, @CTA_LABELS_MASK={0x24, 0x17, [0x7, 0x8, 0x7ff, 0x80000000, 0x8, 0x1, 0x0, 0x97]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x934, 0xffffff81, 0x8, 0x9]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) r9 = accept$nfc_llcp(r2, &(0x7f00000005c0), &(0x7f0000000640)=0x60) getsockopt$nfc_llcp(r9, 0x118, 0x0, &(0x7f0000000680)=""/219, 0xdb) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) (async) r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000880)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r11, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r12}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000041}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000980)={'vxcan1\x00'}) (async) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000009c0)=""/246, &(0x7f0000000ac0)=0xf6) 3.537123611s ago: executing program 4 (id=1509): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x100) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x44}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES64=r5, @ANYBLOB="42ff3f4e11dc1f609736d054e015bc5cd37ecb9d9ead7c60a14743144b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(r10, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) close(0x4) 3.354472911s ago: executing program 5 (id=1510): r0 = socket$kcm(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x9, 0x3, 0x3, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x8010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) socket$kcm(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x9, 0x3, 0x3, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x8010) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) (async) 3.349799234s ago: executing program 3 (id=1511): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, r3, 0x60b, 0x70bd2e, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000006, 0x4132, 0xffffffffffffffff, 0xab7ee000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r7, 0x1, 0xdfb4132834fb8419, 0x0, &(0x7f0000000000)) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 3.293245168s ago: executing program 6 (id=1512): socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="3df9", 0x2}], 0x1}}], 0x1, 0x4008000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)="eb", 0x1}], 0x1, &(0x7f0000001940)=ANY=[@ANYBLOB="2800000000000000170100000200000010"], 0x28}], 0x1, 0x40800) (async, rerun: 64) socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000200)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24008080) 3.16275159s ago: executing program 5 (id=1513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001a00010029bd7000fbdbdf251c00", @ANYRES32=0x0, @ANYBLOB="0200800008000f00010000000a0001"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 2.958942575s ago: executing program 3 (id=1514): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300) 2.863318832s ago: executing program 6 (id=1515): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/144, &(0x7f0000000040)=0x90) close(r1) 2.84522117s ago: executing program 5 (id=1516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a010400000000000000000200000018000480140001800c000100626974776973650004000280140000001100544723b5db010000000000000000000000000a"], 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000002000000fffffffffedbdf2595968bb3d830501c00d4e2ee093ce262e574ae39166139aebac5a2e5c82c0f78968dd51e473bc29fad3e5d05df8d38318a10ebab3da7b983554cfc26460b760ee96f831aa678983107ea6ab845e9e6fd103eb0ec6c891248fd8c48a129a61693255c10b15b"], 0x10}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r5, 0x1) recvfrom(r5, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x8050) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05"], 0x1c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYRES64=r6, @ANYRES64=r2], 0x44}, 0x1, 0x1000000, 0x0, 0x40}, 0x4000) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.750500168s ago: executing program 2 (id=1517): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xc, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007100000085000000a000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="a24e00000000000000000000000040000d00000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000200)="a268c9fc095859a487322bb3447fee446f278ce8cf199b750ceb313cffce0f9efd60d93debd04f93836137408ccd26f791f3075230f98d90d6e7c1a5747bc0d5a9cd9bcec2d3ebdeb8f7", 0x4a}, {&(0x7f0000000280)="7724158ed39f7fdc7ea28307a401954d0193b83e72c37c221a4c4248f9dedf78aafe300dccd734e51805f586b1eee55d75c660a486885f8a91ee986312ad85c6edfa059a332a6b536c1be06c38cdec418d91e9cd8c35640774cde89084d8889fc4f9ee18ea05652f7ddbd760a611729e437161f5685fbdc2a0ed049e9307157524", 0x81}, {&(0x7f00000003c0)="1f", 0x1}, {&(0x7f0000000400)="9e6ad94e4220162bfa932e0abc55469a63bd6fb865466212793ae432c7632221c4c4803037e006e98d42d2e580e20489e9ad87692cafcc5e06342fcc4cad71b17e82763e5dfcaf6c34182e629247917265f11e1d09bac50c289f2bc765026b3f68c2abf04df56fd6bc5c104128fe2b63b4a81d29ab7e0da342e00963f45c20a45bc8fe656bf4dc97297e4c2a149db2c903bb76d94dcf", 0x96}, {&(0x7f00000004c0)="ba84856b8b8a4979751fd52e07e35082d6228bf0cbd05fc3", 0x18}], 0x5) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$SO_COOKIE(r6, 0x1, 0x39, 0x0, &(0x7f0000000600)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.71895033s ago: executing program 3 (id=1518): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000f8b147f7f8f76ac971aabd6331358b8108253d43992bf1885d756ad469fee91738df60f6e92842498b8ab90ba2509abe661dfa11179c969b896e61b0fa3b11017b8d0499e2e9cadc25ffd9295a87e401a4d5cc923e729abd3748d627563b36423112c956c100a139866b67dfbda438955f45503cd422c46dafeca0de5e6253a3cc0269d6b3ec0cd8a58af4b767d9d0d5ea2af3d6fc762380cf029d8e43da", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000008500000050000000bf91000000000000b70200000300000085000000ae000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0xaa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000f8b147f7f8f76ac971aabd6331358b8108253d43992bf1885d756ad469fee91738df60f6e92842498b8ab90ba2509abe661dfa11179c969b896e61b0fa3b11017b8d0499e2e9cadc25ffd9295a87e401a4d5cc923e729abd3748d627563b36423112c956c100a139866b67dfbda438955f45503cd422c46dafeca0de5e6253a3cc0269d6b3ec0cd8a58af4b767d9d0d5ea2af3d6fc762380cf029d8e43da", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000008500000050000000bf91000000000000b70200000300000085000000ae000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0xaa) (async) 2.495895384s ago: executing program 4 (id=1519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000900000087"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000440)=""/53}, 0x20) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x1, 0x3, 0xfffffffe, 0x2000004}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000500)="f96edc208e3eb9e003dc9a92c30b4e2a0251b7baf349f3772a9be72518870dc35cfdbf937db8fd885fc38d33bf0ed6b389a9795113528090dc0cfcaac1352f8841047a8a460771c0255b05c1ad483950f3253fa955202b5df8c0063fe3d4f21c4a603a6d001ab005936176e3a7d278caedd34ebc6ab3d29c7132724abaeaf40fc73082870482ab0700a1b2de74112cb941875ff9ab670e44f741a05967755db0ca540cb569939ee18e39bed8ff", &(0x7f00000001c0)=@tcp6=r3}, 0x20) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r4}, 0x38) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x9, 0x2, 0x1, 0x8, 0x9}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x43, "eccac293fa8393be080a8e1c84a2352013a7e475f90be3a222c1c10f11ac1ad922deb7145773a1a9c88ae28917dd00e7b7b259e9ec6c0dd67ffb7e0828a81fa126eab0"}, &(0x7f0000000240)=0x4b) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) 2.213487772s ago: executing program 6 (id=1520): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x200, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8b}]}]}, 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x1b, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x668}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.212893715s ago: executing program 4 (id=1521): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x7, 0x202}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x9, 0x9, {{0x8, 0x4, 0x1, 0x5, 0x20, 0x65, 0x0, 0x57, 0x29, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x7, 0x5e, [@dev={0xac, 0x14, 0x14, 0x11}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xf96}, 0x94) listen(0xffffffffffffffff, 0x7) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000200"], 0x1c}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071104d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32, @ANYBLOB="00eeff0000002300000000000000000008000000ea11c5b29ccea87d665fa8b32f2158cde981d1fed22e0ae02aaf596f2572193c6a5e8584c1b90f6a7d81173babecec897fb1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xa6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.528293267s ago: executing program 3 (id=1522): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000040)="10574d29c303cd5d65bcbe2ba29b8cef5d0b3014f1df16deeaa34fd8da396da9711c9cf54ad2f2fa3680c5e873472c312394bfc374565b8469e6d8d39fc159eb85e0184deac4df96d7ba3c4e9d9792499cf44d09dd9f33f588cebce5a3047a2d", &(0x7f00000000c0)=""/23, &(0x7f0000000140)="1422b028a26fbb02dd6ff69bc63cb63449190003d0b598b78b7257fe766f1c5c628879e5395fab863f600cf3feca8d03d99a44c7dd01", &(0x7f0000000180)="abf575b313f48c5a3300154560978e881210a5e7442376ed185f2aea73cb5a62795fe25aca7c1c62555d93fdd17c9144844e8d61310682d2cca9134ff3560bdf5f31c2a5e15c7826c120742890bde5719fdf3e70a2f2f50978ced72f7e16c65dcff3e8286095ceb732f96bdcfeec8a0ea97e7507c8cedb096456fa62d1a08cf1599ffe88b8871d2f868b19dd1b9b0b6b8037b024fec2b9797e4f6a72adfc7892911906282f3239be10fb39a9da8b54ea4fb7f028b7c7916a0af0ce48755545ae91fc94", 0x8001}, 0x38) r2 = accept4(r0, 0x0, 0x0, 0x80000) accept4$alg(r2, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) close(r2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000004020000000000000000", @ANYRES32=0x0, @ANYBLOB="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"/435, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) 62.434433ms ago: executing program 3 (id=1523): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) r1 = socket(0x25, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r1, &(0x7f0000000600)={&(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) recvfrom$phonet(r1, &(0x7f0000000800)=""/4096, 0x1000, 0x40000022, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000001800)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000001880)=""/245, 0xf5}], 0x1}, 0x1f01) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="a2", 0x1}], 0x1}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="04002d801c002d80050001000300000005000400010000310800020012"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r4], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100003040400"/20, @ANYRES8=r9, @ANYBLOB="0101020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r13, @ANYRES16=r9, @ANYRES8=r10], 0x44}, 0x1, 0xba01}, 0x6000095) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 59.841735ms ago: executing program 6 (id=1524): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x80800) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x300, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @broadcast}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x140c, 0x20, 0x70bd2d, 0x6}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x2000c800) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000340)=0x200, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000380)={r2}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x11c, r5, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x8}, @void, @val={0xc, 0x99, {0x7, 0x5b}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xb8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @local}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x99, 0xa, "f5240e48764c65dadf507b2c3f91dfcd7899d651e9ea62571146dc88cf0ad37bee5cedc07e6d2e8f0f511641a8aa70e50ff2953815d8284ef0a8d44f1136c291fd17cdc512521a0bfd603e5725dc922124de5590368b3dd841ff667c52ea3ba20b7014904a77ca4e4876b797cc2a46c847b0f27046d71118b8e12537726ed622b47af26f14afd3c9c05e4b514b4b7e0327d147937a"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x401}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0xa}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x40084) socket$kcm(0x29, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000740)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000780)=0x28) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r3) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xe0, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x562d64d7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x21b0}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3039}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff1957}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r5, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "76d54a40afbcd26735e6cdd28ac83c8e"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000081) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)=@can_delroute={0x78, 0x19, 0x200, 0x70bd2b, 0x25dfdbff, {0x1d, 0x1, 0x3}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0xeb}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1}, {0x0, 0x1, 0x0, 0x1}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "687919614c61c1a0"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x6, 0x3, 0x0, 0x0, "fde02a7c89bbec90"}, 0x4}}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "08a17ebef32b6ff4"}, 0x6}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x68, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x41800}, 0xc001) write$bt_hci(r0, &(0x7f0000000ec0)={0x1, @accept_conn_req={{0x409, 0x7}, {@none, 0x2b}}}, 0xb) socket$l2tp6(0xa, 0x2, 0x73) connect$inet(r0, &(0x7f0000000f00)={0x2, 0x4e23, @remote}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000f40)=0xe, 0x4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r5, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4048010) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000001080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001280)={{r3}, r9, 0x2, @unused=[0x6, 0x80000000, 0x5b3, 0x5], @devid}) 3.990227ms ago: executing program 4 (id=1525): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@newchain={0x1fd4, 0x64, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x2}, {0x7, 0xffe0}, {0xe, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xf5, 0x3}}, @TCA_RATE={0x6, 0x5, {0x5, 0x81}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0x1c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x1}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xfff1}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0x9}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_cgroup={{0xb}, {0x1f3c, 0x2, [@TCA_CGROUP_EMATCHES={0x140, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x2, 0xf827}, {0x1, 0xa, 0x1, "9edcf0894b05def917ca"}}}, @TCF_EM_CONTAINER={0x2c, 0x3, 0x0, 0x0, {{0x81, 0x0, 0x3}, "e8146e14383f08647dd42f71fe9aa497bc5719f052050981ec17c21e70"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3ff, 0x1, 0x40}, {0x0, 0x8, 0x2, 0x3, 0x9}}}]}, @TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x6}, {0x6, 0x4, 0x1, "893745d1"}}}, @TCF_EM_META={0xa8, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="43b3b639a4"]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="d0a88bdc", @TCF_META_TYPE_VAR="8127894c4e272610feeb", @TCF_META_TYPE_VAR='6v0', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="ae32a71255"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf4, 0x8}, {0x7, 0x9f, 0x1}}}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ae9c13ef", @TCF_META_TYPE_VAR="1bd18fa9", @TCF_META_TYPE_VAR="9fa7", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="4d8ae41ebd46a0b983", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="9f3dc88fba5f9a822c"]}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_VAR="73034417d7bc4a842c51", @TCF_META_TYPE_VAR="d5ef6d9633aa52", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="a18f"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_CGROUP_ACT={0x38c, 0x1, [@m_csum={0x1ec, 0x1a, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9f, 0x1, 0x400, 0x8}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x5, 0x4, 0x8}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x20000000, 0x8, 0x159}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x220, 0x5, 0x6, 0xfffffffb}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x20000000, 0x5, 0xc4, 0x3}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x8, 0xb6}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffe, 0x5, 0x5, 0x0, 0xffffff7f}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x10000000, 0x1, 0x1}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x50000, 0xffffffffffffffff, 0x1000, 0xd8a6}, 0x38}}]}, {0xc2, 0x6, "bee3a2b781024631b0c9304f31d5631801044e52e8aa74ef244f36ce8a203009be07b7456dc863cec50daf09211ed286ed8e920bba17d7b44126a652812860f8d5dcecd1383db0a5e0896313b84aa31388549a835d09107a7845dfda14705847bdfbb4aad8c396eb65eaac68a815468b159005a8ca68e11e473d357a2cfaaf9088ad0c6ecaa44534cc53f899fbad645b987b04554da17113d04e03ebf8b312f569d95cc7d15f4f132721b5166d6886666543d7764fa42736f70197679e02"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x108, 0x18, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0xffffff06, 0x8f7e4a26353730ab, 0x2fa, 0x7}, 0x8}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffa}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10, 0x8e6, 0xffffffffffffffff, 0xfffffff7, 0x5}, 0xc}}]}, {0x63, 0x6, "581e1dac3827fb80d9e40d317465ebb0c1d73157eb3e2c315921680db9bd897624d14c02f56fd65b606079cb7dfa323721009715d72e5ba468d2b526b0a91476e70eaf80ce246d6fa158912f854d84367a93b602d00deed374775b7ab9435f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x94, 0x8, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xfffffffe}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_ZONE={0x6, 0x4, 0x5}]}, {0x43, 0x6, "37d5e1244895b70f4331547aca82e941fb3b05673f8ed351940fd8e64a7d8196b4f5fa83dcc4adc4b8339fa7c72f3b94ea122363614a989a3c007a0ee79f24"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x78, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x75}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdec1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xaef}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x6}, {0x6, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x4, 0x2, 0xd2}, {0x6, 0x7, 0x1, "e91554b176e897"}}}, @TCF_EM_IPT={0x20, 0x3, 0x0, 0x0, {{0x5, 0x9, 0xf03f}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_CGROUP_POLICE={0x24, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffff4c6}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3ab6}]}, @TCA_CGROUP_EMATCHES={0x29c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x248, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x148, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xae, 0x5, "21e3e3caa230179ab1acb6651ad063e6cb5c6217f3182bdf1c8d182d76a0ac639cb6f29c5651f494dd2d9143253ed930c206409516e195ec1378e49777a419c06eda89973ec125bc343102c79a5995306b96294d99b958798247bf8407cb86779a95acdf61f2543cfe854a750aadc6b6e24907ece6619f4a5d0e49a578db875d1daa22466581d330ab6df4cbc24eb278bae92421deefb3e44fb39a6062b4ed769e5b438425852759a22d"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x74, 0x5, "9a516f11d46905c0bdd8966eef4e63dd4bc506bfa9dcfefa34830a0eb85f50e5330950097887f15383bcf6663df6176946cee79f7db6c2492c9485aa882504102d062a41073b8ad18b3857a3391f8db0477e0688208c1ad952e9131e5f8c423bfe12f74eff57d0def4b2fb8781fe22af"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xffff, 0x8, 0xfffd}, {0x2, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3ff, 0x1, 0x1}, {0x2, 0x7, 0x4, 0x1, 0x1, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x8}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="2fd319fdf85254", @TCF_META_TYPE_VAR="e90b54c7", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR="817d9e2c91", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="474ae570f0acd869d4", @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x8b}, {0x7ff, 0x2, 0x1, "09d3"}}}, @TCF_EM_META={0x60, 0x3, 0x0, 0x0, {{0x7, 0x4, 0xfffd}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="d6bb7024ad", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="138759da02", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xafdf, 0x1, 0x1}, {0x6, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xbc, 0x2}, {0x17, 0x5, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xf1}, {0xc, 0x5, 0x1}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="4e9424adfed3833c132a", @TCF_META_TYPE_INT=0x92]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x1ff}, {{0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_CGROUP_ACT={0x238, 0x1, [@m_nat={0x134, 0x12, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xb, 0x3, 0x10001, 0x7}, @broadcast, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1ff, 0x10000000, 0x4, 0xf53a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x1}}]}, {0xbb, 0x6, "b1749c98c4525ab349f12b49c572e696ebd850aefdc9bc84f5ba47dad081ba490f49f007119a5b21801b829390fe287900443a7ff4f34f9a58f6016daa516c5a4a1ee2cde558acdb83de863093060e8f4ce4b738f61db645092c7bafeb1fd270cac3e5a31d39dd6fe09248b11269198394036a6cd774a5f3f7528eb06116f01b1992f2256161448f424e65b5c92083cfcd2840476ce4fe0530c2fa1d8883633502e71599e9aff0cf98bbda71187b92c7dd3966bd80f9fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x100, 0x0, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4f8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x3, 0x3, 0x4, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x9f, 0x6, "56ded95a62740ca989dd7d3bce5358379a5a5b31e0c2c107fa351d989435a9649b9e2bd49763c76806cc1bcab5198d698fd9b885ec8cb8d787acea0e832ce0383b85c46748772ff5078f3c8850c2b44318139bb70e85fcf6cd32115321aa8c6ea34bb4f70d79783639d06aa34510ef01418524dd1802bec393aaed79ef43d5a98997a5879be22502969599e65833d34ba87087b81ba31e5e499002"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xffff, 0x8, 0x6}, {0x1, 0x5, 0x1}}}]}]}, @TCA_CGROUP_ACT={0x14e4, 0x1, [@m_skbmod={0x108, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x78, 0x5, 0x3, 0xa84}, 0x8}}]}, {0xb7, 0x6, "7665cf899fc07060673911940194357cc0e821070b8f9eaf74c93aad3d688cb1afe9fbded7e146c422ed6a80f5022c68cadb25dfedd6ff30bd01a9594443f230b02d5687b0ad728b9eec615894a7dce761e1cd875d5a828c86bcf3b0281c9e4d92d90a3a8cddabc283acbf61a2d1ae9643c0abd492700f12b5b9631c5bfe29daa31d06afbf675bad0d16f6041deac284e7bf7c5d274694754fb72ac3c7f82a0d89e5af3e0eb846e13701a23ae34b46c2bee4ed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x1c8, 0x1b, 0x0, 0x0, {{0x7}, {0xec, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb8, 0x6, {0xde6, 'filter\x00', 0x2, 0x7, "421b0f55f01b06912d46182d40d67d8c87ed64bc1213b5008ad3b2b0b53e390652a3940fb274353a8c6737ac2b3a7e5e7d489b61b8c3346200f9be74228063cb5c2d7df1a70b5a367d48213cc93adb1b77a4e6442160b36f0ecbdb0b893bbac80b805af89f4c94542115938b4f92eeda9747776f28cea56376d1fef63cfd7eb5006d5a2ad5765f147488a9f5cf56"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xa}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xc684}, @TCA_IPT_HOOK={0x8, 0x2, 0xee633b897001235f}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0xb7, 0x6, "553a5f4bbc5750237462d6c441b205fdb06853450cbe78cadcf5b8623d375fadac675cadd3007cb74bf9f1ba215c53486415521f153cfd4866f9af914e468244cfd8da9ff20e696c7df96236ac652869f9275786af7ded55263e8362749ca66d0eff2c170cc55b64dc7398d905d6e5d629f619de9b5b7eb6161e00af90c9a0fa83738ed9e1ef3d615b82c00607e7e1ac2aa2152d0ca57b7a9e209c9015d76aa938af8402b9bec38451fb7d50ffed74d113b5dc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0xc4, 0x0, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x47a4, 0x6, 0x4, 0x2}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0x2, 0x0, 0xffff}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x25a, 0x5, 0x6, 0x81, 0x8915}, 0x2, r2}}]}, {0x37, 0x6, "f90dd38c7d58461405a050ff532c5e8f3e7d137f5400d7aec03fd13d8c7b47a1c0b9adcf13840d2a69146417e37b11b6a9e836"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x114, 0x1f, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xf2ad, 0x5, 0x1, 0x8001}, @multicast1, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xee22, 0x7fffffff, 0x1, 0x1, 0x2}, @rand_addr=0x64010101, @broadcast, 0xffffff00}}]}, {0x9c, 0x6, "bfeecf496fd514d871e57c2f687ed4cf7b8559fd378e7c36188cf2583e3cb5688658c4fa8aa9ac801abd094866da983817db5e98070300698fc46ba064caaa574d9a2319680ce85a60533fb8869d697311a9523dfffeabbb890b623ef9caca4df191d01c9319a2a2cd66b6fcb6f5350d349e78af97a8e7bb55b1a8b852a35c52ca225c6c469e21df803cd9807e1edecdb3011f0ce9349ba8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x1038, 0xc, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4, 0x80}}]}, 0x1fd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) 684.571µs ago: executing program 2 (id=1526): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) pipe(&(0x7f00000041c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x9e, &(0x7f0000000100)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b, 0x0, 0x2}, @srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}}}, 0x0) unshare(0x22020600) tee(r2, 0xffffffffffffffff, 0x80000001, 0x0) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) r4 = accept(0xffffffffffffffff, &(0x7f0000000040)=@l2={0x1f, 0x0, @none}, &(0x7f0000000200)=0x80) syz_genetlink_get_family_id$wireguard(&(0x7f0000004200), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg(r5, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)="36acca66aaa9ed1042f3360478655351b2c1e4c6529482869e34ffe63c447aab8f2a8121869b725fde32cb93ab718290f56909277244ac3d80e5bacbdc7b355af11517314bac040f7a735db0ddfa3c2d81dcf7a2693f2d778c78178e629e75aade2a", 0x62}, {&(0x7f0000000540)="d94f7e9b7781715e5258797544171144fc19402629020c02048efd232647be054379235a5d35bf8a26c5b5cf1a8ded25c5c8d821b168d36f6368f7ba4c1ecdc4a5de200847cdf90f58a9d26595f79e72c0eec5fdae", 0x55}, {&(0x7f00000005c0)="b5f5ba4989d5308efacdd3b29cc8767da51cfab8a703ee3be7b417726bd8a713488e2a86624c46d21af8127e9082d08a7bce22648d1b95a27189c9aa4ecc2d3fae19f109496b9eb63f6d273a7c0a28e2315f25b548a906efcb82cd87ceb46c6bc2764d1d97", 0x65}, {&(0x7f0000000640)="34f0bc201d9465ecdf7c0b8ca84a91249b7b433db88dc92dcb7ffc5e22edd97793c182a1f3ad76f89f3a284c435efd7c5f9d7fa586cd7b110b8e1096e382f7280f3e603baa9afaea6ba59c3fcaa3b693044e4ffdb18fb83e97c37f127f04929448a1e0f1dc1890eebe8db9777779ea7e7fe6d08cde611a4db157774730a853de9bc2f4aac26bd03acdc4f1d6a0fb26f76db51e988055e4740886d46afeaf699efdc980a590b97d83eba7ea1361e0a39226fd37c6132f7d3b3a0aea6684188994d4e364785bede2c6ac64a789665d6976942f6f082e523ca065480c73733415e7189d80a4a7f4b9c1c923cd5cbece85e4cf20c1d5e238683154d469a19f0e", 0xfe}, {&(0x7f0000000740)="780ad2ccc8970447b17bb05f4726985c061071df1f029f10240350f94146d0aba28e76a6966d83da293dfb0804eb4ceed255d6475dda5fdc0271d416a908a66970df73dc8b45e1655d41d27aa9d48baa96dc953b91d73f641635c7c0ec2a5205642d81c8453a29c128b8e81ba777d6408522c6aba7f40b24197fcf8fa9c496828f6044e98f3e148adfd9543ed212930c124f6cc151ce6eb078a21ba9c750", 0x9e}, {&(0x7f0000000900)="50961af2b437cc81fc18820ff465b83df0a9a89dbc8111e9ca105b20e5e60b4a5894fcd2b9a400f0da05f4723d4f5cac0415e02f5d462fa41ff4a833210f54b538b6d62761944937aea26b11a7d5d5dd9b2f3880596fb7846c5632ef5c7fb1a3d25d9d59b60e4e4e8c11a48e4917b5b6eb76aa74dbdf927137defda61a41906f85a1f3b0aa7d6d3289906c8ee3b85a754cdc42d3d51b9dcc328766a6bb2ab9160dd2e170400bbe02b7b97d1d98d32937f7ad2748f60757b27ad86511a8097b67b6fa29a17db7bc70a2de115110c5cd49a1e50f927305a9bd86dbd6f51f0a97c327157322a094464c65c22d8c", 0xec}], 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1c0}}, {{&(0x7f0000000c40)=@l2tp={0x2, 0x0, @remote, 0x2}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000cc0)="7064a9b74edb55c49947751d110d6c574bd8ff035274296a4c22abc15be0b16b3c2e52866aebc158f0e26c3a48e511c4d4ee38aab538519edfaef1b260803acd3b74952dcb466daaaec0644f2d2a03107c31b538011b5097b31a616e20359aecfa24eabf7ae0b35a407f4e709f99030a5dc78cc09d", 0x75}, {&(0x7f0000000d40)="9db821bcd2010eb53c0c6ea72b2a0895b711f22725ca69af80aa5a622744bc66a5affb8e0ba4429f82a7ea3fd3fc134b8bfefa50c87c12730e2429163225677dcd45c092a3acd8e2abc93a5ac5d5548932665b1afc84e2951f0865182f3adc", 0x5f}, {&(0x7f0000000dc0)="7f9354385f824202115cc263562047e28f233d378c818969a40d737cd8b2bb0d18fdecf0d54190d122c6b1c0dfecde8aa6231e72fced3ae3b361c40977bfe0b7e9226ee6be11f6a25b1ef208796e81eeba7af8306135e925980364a4deb27029977d6476082ebfee1d7e0e4273d9e219a98fedc79ce93e3bec4820fb97d37128666014afa0ff66574ba909fdb0efd61e4352c40cc02537740fdbcac582473a6922a6384cb83b5691d151365ca5a619711cfcdb5eac", 0xb5}, {&(0x7f0000000e80)="e405c1576b957076d28f467dec2518dc6aa1dda35a0a958d698a6dcde6507d6f4159b2217e91e3421f77bcffb0a208219a3a89896b6c24b1b2b0f84e6c7d9a59cbc3e5a3d0f4d97b79d373e637434e9c2017619037cd839fea2fb6e92343446b61ebcf79a807b5d67d7f0f8c13ae76b88964d4a8a783fd91d98edaadca322df18f3bdf01e0f9908bc6caaa5f426e6950ed1b0d85fbe0abf8ee0edeb42127f386a285e89740909c62a0ac6814ecee02bfa3fdbcab64739363674001cdf488f9be1e2ef4cf16dc0546", 0xc8}, {&(0x7f0000000f80)="4b3d0d4ee7f23a2376bf301ae645786e8106ecd758619e1e3268fc1281df9f327678fd53554c99248b1d732aa6a46b8c49108d298e3b878a87fa84550a237c7c162be7875af5b04b85021955d5c5ffba4a8e6857cd146bbd2e3b0e25f6fc89bf07", 0x61}], 0x5, &(0x7f0000001080)=[{0xc8, 0x3a, 0x0, "be11bf090d6a95e23793f2e80925466d85b10604a98a0901f7eeed398705cca29f9ddd95b8eda9fe485c1ef6dc7d7f2df6d4f888a5ea2eab34e7e3c53305b02746fb220022d29fcebb8a3b2574c8bd237d3ab28f75fc674c5410338a135feba5c24e8cf46276ce691c56e994e7952a8b42473e36642904e265e93eb888722b85dee4f5967657a7cd177a945d2080ab605430d60e84591b85d0efd4bcf466ab6967c05e3878f00149b6439b369fe80308b45f2c"}, {0x100, 0x1, 0x6, "eaccfbd8cf93ab6123eb59b13d023d8e9dc12408e19478cf7c470d4ac9fd60dd9eff9a114419ff692273a216abe2587341bc36daae5a49f4bfa2761d696d1d112c6948c096802cf1558343f881bdadb62833d8eb0ac9fb5f9f3ce718943999017a414249e35d1ac9716f0ec34e5983aafdd75be91d8903ad94574bdcecb6298b69e70a9bc3ba4805152c885d556574a8762427e345acc409436cd95745f5a84a267b6d1ccca7302acfc72b32f8e028638ed8be19a886cf43ff97e6cbac8db71787805a412b6a817bd08af0b2df91466d5ef0aa946af7a30c2ee10ba1c021185ab1593a3a01fa083c75"}, {0xd8, 0x107, 0x1200000, "02cca2c8de1d563c3e7be197d612e6688153868431b85febe7273d4b8b7864edbc82ae20c7e9155da275d0f2040125d6d51d718e9a750219dfda6623e64cfc5c81264e5015adc68d6b13735a8734a45bb547204d20409450d26a2f930c087b360e7d8047a21c68849e30d75dcc9e64351b5724eedac3719f8ebeee0c9ebebe5f0f45a123671f5a485172d97fc3d71533abf25a7ba9c3080b27c54e816570caa27e9abc6d44e8c2c3d12485da29e338a34eba2e9e25a36d492effcd9193011f23d051ba33d0be"}, {0x50, 0x104, 0x8, "bcecfedf42e9a26a3497b4762e3ab4106caa7bbed796a5c54b1d8636a6b76a1975acfd9d95dde596e118d5d675ed917004a3c13d67985be22c3724f0c49fbb"}, {0x38, 0x110, 0x100, "1959249fe57d8b6696a29ea36f9a68d16a5d5a8433d955eddf63a9bbc3f67c525832fc"}, {0xe8, 0x101, 0x5, "41118c4e0c5a95f9174f9accf061c30bfc77623b94d1eeb3d654c474e72cf1bb55fc8fe4d80fe26fa06ba0545a6ac22ccd9881d580f9adebd36cfc248c6e006b5ceea7af02d85f786815c67ecb3da1c4b495b59e86707ca0b2fcf1c72d762839f1b8ca26064acf70f040b13d698070884cb9b315ed029eae596a863d38a6e32f7a0ed3dde47d3d99c32942930d73a3db65058a1b95e6f9ecd41437dacbf9122ed41ca14f3ae882ba269832d8143d0b4d3c7045697c527b735de18654e28b8530bc5c86f1a31d1dbb3fcccff43548c1bf7105f6"}], 0x410}}, {{&(0x7f00000014c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000001540)=[{0x28, 0x117, 0xe0, "744fb68d5a2c0421cf60e4793c33a322536e879f150f"}, {0x60, 0x10d, 0xfffffb6b, "a315257537070d2360cf542f07e175f4d2959190906755b5b1fde0921ed29aa7ab55171f796ee2fe3e6c48668e433ba30c84feadc97dc38c0b3651141e3bca5afa3cb79dedd33d8618"}, {0xc8, 0x3a, 0x7fff, "925d19c107b047e51857184a0959c39d342ef7ddc664d13c18cc923cf4c2dfbc2a499cdc5ee67d5a29dda04f40d853687dd840e5f2be61af3a8c6bf2b9833f286a80f59ce561902865537d0dca0daa128285f39e108b52c1505ea514736ed8ef108be91466b1eeeea37d5234d88a2beb63b999e74a6d2b806209949ffad413c430c652af1af92f2e54c0b91d3f6d733d5f58f76c851ba32e4a262c7beb9d09c5919d4c119816d05a775e4b3ed07569a8f5f0e22fda55ee"}, {0xc0, 0x112, 0x4d, "c1043fee98d84bd24e56c86be67e46b95f6cc0d60f712bcca390af8eac8dd946d5144089781b9148fda17d15fd644ab3eece414d8b81765e2be8ef8df1b14725b309bb36555ce29a543f8468bc57e6b88483347ee067eed711f8f42c309959ba65de32c0c0e3c8ce6a9b6d2af482a914da7d239a1210c76410cbe08a50594506b60e2caf19796093b5c2297380d9a7e9750c6ead49dc7b4180ab79661598c0bd9981400561952e4322510c310231a3"}, {0x48, 0x101, 0x8, "2ec45e3f233e8492f978424721b2447d22b4fbacf709da8fba6835a074be3d0c98b3cb55c3b43b82f1b5d800b43bc94999a6ddd69485d295"}, {0xe0, 0x3a, 0x5, "da43fff397e525c20380172b33a7145db0aa7bb713e3a5150d79ab3e1f264be72a26470de53e21833526c5ff85f9a8b17fee9106167a793793f8ffbaa65724d9400b6a5453e3cb73e42115ca1a73515d2695fed4a8f40738c217ca50b42fe6cf14d0110c98b5641653517b0e992d29176e9a12979727ae44c104fb86d552684937a8b70fb44a2b9242d6dc6ac1a0c869ce5d8ee05d059767f8addabfbea97d12e006ddf269f1265453c6a1f4c64bda6f169a43909e84fd537c1e2d276a37e430c85c4bce7ff844349c40d2190d5311"}], 0x338}}, {{&(0x7f0000001880)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000001900)="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", 0x1000}], 0x1}}, {{&(0x7f0000002900)=@llc={0x1a, 0xf, 0xb4, 0x8, 0x1, 0x8}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002980)="9e81dfeb19dfd7d3da", 0x9}], 0x1, &(0x7f0000002a00)=[{0xd0, 0x0, 0x800, "d212b13b63c11148ef5ebdac128f1389788b41f86cb99faab5372da4eb83dbe49dbeb7d1e6cdf1e2fc6df846097778701509f6d57dd5ccc853e448a93b33ca3e8feb772ad2bcdeb7241ed8c5e5f3dbc6cd70248611b662997e2bf0ef71c2272e43bf17e17f4155d5e04756582e117a772375195f20e04a971f79d67fa532777ff571ed9b229afba696699b17a68182c26c805b9de8a40dcb66756431095aba269b72c50628d8c541f71b92e42d50d26c4922c4689b40bf1c4242"}, {0x10, 0x104, 0x9}], 0xe0}}], 0x5, 0x60044001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) getsockopt$inet6_opts(r6, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffcba) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000500)={&(0x7f0000002c40)=@ax25={{}, [@null, @remote, @rose, @bcast, @remote, @null, @remote, @rose]}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000002cc0)=""/198, 0xc6}, {&(0x7f0000002dc0)=""/131, 0x83}, {&(0x7f0000002e80)=""/66, 0x42}, {&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000002f00)=""/79, 0x4f}, {&(0x7f0000002f80)=""/124, 0x7c}, {&(0x7f0000003000)=""/135, 0x87}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x8, &(0x7f0000004140)=""/86, 0x56}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1a, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000070000000000000008000000186a000007000020000000000600000085100000ffffffff18100000", @ANYRES32=r0, @ANYBLOB="00000000000000006d42e0ff10000000850000000900000018480096feffffff0000000000000000185b00000f000000000000000000000085100000070000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x38, 0x0, 0x100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) 0s ago: executing program 5 (id=1527): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x2, 0x3, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0xf7, 0xfffffffffffffff7, 0x2}}]}, 0x154}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x2, 0x3, 0x0, 0xff, "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", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0xf7, 0xfffffffffffffff7, 0x2}}]}, 0x154}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (async) kernel console output (not intermixed with test programs): . [ 114.406678][ T6297] wg1 speed is unknown, defaulting to 1000 [ 114.416446][ T6297] wg1 speed is unknown, defaulting to 1000 [ 114.426398][ T6297] wg1 speed is unknown, defaulting to 1000 [ 114.429721][ T6319] netlink: 'syz.4.102': attribute type 2 has an invalid length. [ 114.435814][ T6297] wg1 speed is unknown, defaulting to 1000 [ 114.448918][ T6297] wg1 speed is unknown, defaulting to 1000 [ 114.786978][ T6331] ipvlan0: entered promiscuous mode [ 114.807378][ T6331] ipvlan0: left promiscuous mode [ 114.928354][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 115.213951][ T6354] netlink: 388 bytes leftover after parsing attributes in process `syz.0.112'. [ 115.283796][ T6357] wg1 speed is unknown, defaulting to 1000 [ 115.668125][ T6362] Cannot find del_set index 0 as target [ 115.706234][ T6366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.257882][ T6380] syzkaller0: entered promiscuous mode [ 116.286871][ T6380] syzkaller0: entered allmulticast mode [ 116.493684][ T6383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.119'. [ 116.512177][ T6383] tipc: Started in network mode [ 116.531755][ T6383] tipc: Node identity b630f2318972, cluster identity 4711 [ 116.550466][ T6383] tipc: Enabled bearer , priority 0 [ 116.591900][ T6383] syzkaller0: entered promiscuous mode [ 116.597444][ T6383] syzkaller0: entered allmulticast mode [ 116.649545][ T6383] tipc: Resetting bearer [ 116.679559][ T6382] tipc: Resetting bearer [ 116.732806][ T6392] netlink: 'syz.0.120': attribute type 1 has an invalid length. [ 116.776233][ T6392] netlink: 236 bytes leftover after parsing attributes in process `syz.0.120'. [ 116.786995][ T6382] tipc: Disabling bearer [ 117.016500][ T6407] wg1 speed is unknown, defaulting to 1000 [ 117.093394][ T6398] netlink: 496 bytes leftover after parsing attributes in process `syz.2.123'. [ 117.151912][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.3.124'. [ 117.181720][ T6398] netlink: 496 bytes leftover after parsing attributes in process `syz.2.123'. [ 117.191322][ T6411] netlink: 'syz.3.124': attribute type 3 has an invalid length. [ 118.253465][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 118.396021][ T30] audit: type=1800 audit(1759937527.529:2): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.131" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=142 res=0 errno=0 [ 118.474750][ T6443] tipc: Enabling of bearer rejected, failed to enable media [ 118.530402][ T6448] syz_tun: entered allmulticast mode [ 118.603989][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 118.652985][ T6448] syz_tun (unregistering): left allmulticast mode [ 119.081738][ T6465] wg1 speed is unknown, defaulting to 1000 [ 120.035243][ T6500] syz.3.147: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 120.062619][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz.3.147 Not tainted syzkaller #0 PREEMPT(full) [ 120.062649][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.062673][ T6500] Call Trace: [ 120.062682][ T6500] [ 120.062692][ T6500] dump_stack_lvl+0x189/0x250 [ 120.062736][ T6500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.062758][ T6500] ? __pfx__printk+0x10/0x10 [ 120.062780][ T6500] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 120.062806][ T6500] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 120.062833][ T6500] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 120.062861][ T6500] warn_alloc+0x214/0x310 [ 120.062895][ T6500] ? __pfx_warn_alloc+0x10/0x10 [ 120.062931][ T6500] ? __get_vm_area_node+0x28f/0x300 [ 120.062956][ T6500] ? hash_net_create+0x358/0xfe0 [ 120.062988][ T6500] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 120.063012][ T6500] ? do_syscall_64+0xfa/0xfa0 [ 120.063077][ T6500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.063109][ T6500] ? rcu_is_watching+0x15/0xb0 [ 120.063130][ T6500] ? hash_net_create+0x358/0xfe0 [ 120.063157][ T6500] ? hash_net_create+0x358/0xfe0 [ 120.063182][ T6500] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 120.063207][ T6500] ? hash_net_create+0x358/0xfe0 [ 120.063235][ T6500] ? hash_net_create+0x2fe/0xfe0 [ 120.063268][ T6500] hash_net_create+0x358/0xfe0 [ 120.063306][ T6500] ? __nla_parse+0x40/0x60 [ 120.063332][ T6500] ? __pfx_hash_net_create+0x10/0x10 [ 120.063362][ T6500] ip_set_create+0xa97/0x1940 [ 120.063387][ T6500] ? ip_set_create+0x4a2/0x1940 [ 120.063424][ T6500] ? __pfx_ip_set_create+0x10/0x10 [ 120.063491][ T6500] nfnetlink_rcv_msg+0xb4d/0x1130 [ 120.063518][ T6500] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 120.063564][ T6500] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 120.063654][ T6500] netlink_rcv_skb+0x208/0x470 [ 120.063683][ T6500] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 120.063710][ T6500] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.063750][ T6500] ? bpf_lsm_capable+0x9/0x20 [ 120.063772][ T6500] ? security_capable+0x7e/0x2e0 [ 120.063806][ T6500] nfnetlink_rcv+0x282/0x2590 [ 120.063834][ T6500] ? __dev_queue_xmit+0x27b/0x3b50 [ 120.063856][ T6500] ? __dev_queue_xmit+0x1d79/0x3b50 [ 120.063888][ T6500] ? __dev_queue_xmit+0x27b/0x3b50 [ 120.063923][ T6500] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 120.063947][ T6500] ? __pfx___dev_queue_xmit+0x10/0x10 [ 120.063984][ T6500] ? ref_tracker_free+0x63a/0x7d0 [ 120.064008][ T6500] ? __asan_memcpy+0x40/0x70 [ 120.064040][ T6500] ? __pfx_ref_tracker_free+0x10/0x10 [ 120.064061][ T6500] ? __skb_clone+0x63/0x7a0 [ 120.064097][ T6500] ? __skb_clone+0x483/0x7a0 [ 120.064137][ T6500] ? skb_clone+0x246/0x3a0 [ 120.064172][ T6500] ? __netlink_deliver_tap+0x807/0x850 [ 120.064200][ T6500] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.064235][ T6500] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.064277][ T6500] netlink_unicast+0x82f/0x9e0 [ 120.064313][ T6500] ? __pfx_netlink_unicast+0x10/0x10 [ 120.064341][ T6500] ? netlink_sendmsg+0x642/0xb30 [ 120.064367][ T6500] ? skb_put+0x11b/0x210 [ 120.064400][ T6500] netlink_sendmsg+0x805/0xb30 [ 120.064440][ T6500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.064473][ T6500] ? aa_sock_msg_perm+0xf1/0x1d0 [ 120.064503][ T6500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.064531][ T6500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.064562][ T6500] __sock_sendmsg+0x21c/0x270 [ 120.064590][ T6500] ____sys_sendmsg+0x505/0x830 [ 120.064634][ T6500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.064676][ T6500] ? import_iovec+0x74/0xa0 [ 120.064711][ T6500] ___sys_sendmsg+0x21f/0x2a0 [ 120.064745][ T6500] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.064818][ T6500] ? __fget_files+0x2a/0x420 [ 120.064842][ T6500] ? __fget_files+0x3a0/0x420 [ 120.064881][ T6500] __x64_sys_sendmsg+0x19b/0x260 [ 120.064916][ T6500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.064967][ T6500] ? do_syscall_64+0xbe/0xfa0 [ 120.065004][ T6500] do_syscall_64+0xfa/0xfa0 [ 120.065034][ T6500] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.065066][ T6500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.065087][ T6500] ? clear_bhb_loop+0x60/0xb0 [ 120.065113][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.065134][ T6500] RIP: 0033:0x7f99da58eec9 [ 120.065160][ T6500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.065178][ T6500] RSP: 002b:00007f99db412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.065201][ T6500] RAX: ffffffffffffffda RBX: 00007f99da7e5fa0 RCX: 00007f99da58eec9 [ 120.065216][ T6500] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 120.065229][ T6500] RBP: 00007f99da611f91 R08: 0000000000000000 R09: 0000000000000000 [ 120.065242][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.065254][ T6500] R13: 00007f99da7e6038 R14: 00007f99da7e5fa0 R15: 00007fffc821c968 [ 120.065290][ T6500] [ 120.065404][ T6500] Mem-Info: [ 120.100817][ T6494] __nla_validate_parse: 2 callbacks suppressed [ 120.100841][ T6494] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.145'. [ 120.104344][ T6500] active_anon:6896 inactive_anon:0 isolated_anon:0 [ 120.104344][ T6500] active_file:3081 inactive_file:39881 isolated_file:0 [ 120.104344][ T6500] unevictable:768 dirty:234 writeback:0 [ 120.104344][ T6500] slab_reclaimable:10448 slab_unreclaimable:94703 [ 120.104344][ T6500] mapped:29242 shmem:2526 pagetables:1226 [ 120.104344][ T6500] sec_pagetables:0 bounce:0 [ 120.104344][ T6500] kernel_misc_reclaimable:0 [ 120.104344][ T6500] free:1331309 free_pcp:16632 free_cma:0 [ 120.127695][ T6494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.140878][ T6500] Node 0 active_anon:25884kB inactive_anon:0kB active_file:12324kB inactive_file:159316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116968kB dirty:936kB writeback:0kB shmem:6868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11852kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.693720][ T6500] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.781541][ T6500] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.819142][ T6500] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 120.825340][ T6500] Node 0 DMA32 free:1430692kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23060kB inactive_anon:0kB active_file:12324kB inactive_file:157476kB unevictable:1536kB writepending:936kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:45344kB local_pcp:21296kB free_cma:0kB [ 120.951929][ T6500] lowmem_reserve[]: 0 0 1 1 1 [ 120.973873][ T6500] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 121.023990][ T6500] lowmem_reserve[]: 0 0 0 0 0 [ 121.028806][ T6500] Node 1 Normal free:3884244kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22912kB local_pcp:12224kB free_cma:0kB [ 121.114499][ T6500] lowmem_reserve[]: 0 0 0 0 0 [ 121.142491][ T6500] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 121.201958][ T6500] Node 0 DMA32: 44*4kB (UE) 310*8kB (U) 87*16kB (U) 100*32kB (UE) 17*64kB (UE) 11*128kB (UM) 19*256kB (M) 11*512kB (M) 8*1024kB (ME) 1*2048kB (U) 338*4096kB (M) = 1414928kB [ 121.268266][ T6527] wg1 speed is unknown, defaulting to 1000 [ 121.292721][ T6531] netlink: 788 bytes leftover after parsing attributes in process `syz.2.155'. [ 121.302105][ T6500] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 121.335139][ T6500] Node 1 Normal: 221*4kB (UE) 54*8kB (UME) 45*16kB (UME) 93*32kB (UME) 27*64kB (UME) 5*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (UM) = 3884244kB [ 121.382040][ T6500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.415141][ T6500] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 121.439136][ T6500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.448755][ T6500] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.465153][ T6500] 44339 total pagecache pages [ 121.470608][ T6500] 0 pages in swap cache [ 121.474949][ T6500] Free swap = 124996kB [ 121.479694][ T6500] Total swap = 124996kB [ 121.483901][ T6500] 2097051 pages RAM [ 121.487735][ T6500] 0 pages HighMem/MovableOnly [ 121.494619][ T6500] 424452 pages reserved [ 121.498846][ T6500] 0 pages cma reserved [ 121.901036][ T6548] wg1 speed is unknown, defaulting to 1000 [ 122.992625][ T6568] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.127929][ T6597] vlan2: entered allmulticast mode [ 123.192962][ T6568] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.286698][ T6599] netlink: 'syz.1.170': attribute type 2 has an invalid length. [ 123.411243][ T6568] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.440213][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 123.618086][ T6568] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.710117][ T6609] wg1 speed is unknown, defaulting to 1000 [ 123.745140][ T6616] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 123.818391][ T6617] wg1 speed is unknown, defaulting to 1000 [ 124.075963][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.105837][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.375034][ T6638] bond2: Removing last ns target with arp_interval on [ 124.382487][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.420172][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.748926][ T6653] netlink: 'syz.4.184': attribute type 39 has an invalid length. [ 125.085704][ T6663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.187'. [ 125.277455][ T6673] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 125.328889][ T6679] netlink: 64 bytes leftover after parsing attributes in process `syz.0.189'. [ 125.335719][ T6678] bridge1: entered promiscuous mode [ 125.343873][ T6678] bridge1: entered allmulticast mode [ 125.353281][ T6679] block nbd0: not configured, cannot reconfigure [ 125.485089][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 125.690676][ T6687] netlink: 'syz.0.193': attribute type 21 has an invalid length. [ 125.724606][ T6687] netlink: 152 bytes leftover after parsing attributes in process `syz.0.193'. [ 125.955636][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 126.213204][ T6711] netlink: 'syz.0.202': attribute type 2 has an invalid length. [ 126.268177][ T6715] Cannot find add_set index 4 as target [ 126.274073][ T6711] k›*·: entered promiscuous mode [ 126.275316][ T6714] ªªªªªª: renamed from wg2 (while UP) [ 126.365723][ T6717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.450904][ T6722] xt_hashlimit: size too large, truncated to 1048576 [ 126.467107][ T6711] tipc: Enabling of bearer rejected, failed to enable media [ 126.605789][ T6727] netlink: 48 bytes leftover after parsing attributes in process `syz.1.201'. [ 127.082363][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 127.204771][ T6746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.211'. [ 127.302566][ T6747] wg1 speed is unknown, defaulting to 1000 [ 127.546873][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 127.659207][ T6772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'. [ 127.683982][ T6774] FAULT_INJECTION: forcing a failure. [ 127.683982][ T6774] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.713270][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz.0.218 Not tainted syzkaller #0 PREEMPT(full) [ 127.713299][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.713311][ T6774] Call Trace: [ 127.713320][ T6774] [ 127.713328][ T6774] dump_stack_lvl+0x189/0x250 [ 127.713356][ T6774] ? __pfx____ratelimit+0x10/0x10 [ 127.713386][ T6774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.713408][ T6774] ? __pfx__printk+0x10/0x10 [ 127.713429][ T6774] ? __might_fault+0xb0/0x130 [ 127.713464][ T6774] should_fail_ex+0x414/0x560 [ 127.713491][ T6774] _copy_from_iter+0x1de/0x1790 [ 127.713519][ T6774] ? skb_set_owner_w+0x25b/0x3a0 [ 127.713554][ T6774] ? sock_alloc_send_pskb+0x86b/0x980 [ 127.713592][ T6774] ? __pfx__copy_from_iter+0x10/0x10 [ 127.713629][ T6774] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 127.713666][ T6774] skb_copy_datagram_from_iter+0xf5/0x720 [ 127.713689][ T6774] ? dev_get_by_index+0x22/0x2e0 [ 127.713709][ T6774] ? skb_put+0x11b/0x210 [ 127.713742][ T6774] packet_sendmsg+0x3797/0x5080 [ 127.713775][ T6774] ? aa_unix_file_perm+0x216/0x1250 [ 127.713824][ T6774] ? __pfx___might_resched+0x10/0x10 [ 127.713854][ T6774] ? __lock_acquire+0xab9/0xd20 [ 127.713898][ T6774] ? __pfx_packet_sendmsg+0x10/0x10 [ 127.713919][ T6774] ? aa_sk_perm+0x81e/0x950 [ 127.713946][ T6774] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 127.713981][ T6774] ? aa_sock_msg_perm+0xf1/0x1d0 [ 127.714009][ T6774] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.714038][ T6774] ? __pfx_packet_sendmsg+0x10/0x10 [ 127.714062][ T6774] __sock_sendmsg+0x21c/0x270 [ 127.714088][ T6774] __sys_sendto+0x3bd/0x520 [ 127.714119][ T6774] ? __pfx___sys_sendto+0x10/0x10 [ 127.714141][ T6774] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 127.714181][ T6774] ? __fget_files+0x3a0/0x420 [ 127.714210][ T6774] ? ksys_write+0x22a/0x250 [ 127.714235][ T6774] ? __pfx_ksys_write+0x10/0x10 [ 127.714261][ T6774] __x64_sys_sendto+0xde/0x100 [ 127.714293][ T6774] do_syscall_64+0xfa/0xfa0 [ 127.714322][ T6774] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.714349][ T6774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.714366][ T6774] ? clear_bhb_loop+0x60/0xb0 [ 127.714391][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.714411][ T6774] RIP: 0033:0x7fdb77d8eec9 [ 127.714429][ T6774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.714447][ T6774] RSP: 002b:00007fdb78b90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 127.714470][ T6774] RAX: ffffffffffffffda RBX: 00007fdb77fe5fa0 RCX: 00007fdb77d8eec9 [ 127.714484][ T6774] RDX: 0000000000000019 RSI: 0000200000000300 RDI: 0000000000000003 [ 127.714497][ T6774] RBP: 00007fdb78b90090 R08: 0000200000000000 R09: 0000000000000014 [ 127.714510][ T6774] R10: 0000000004044000 R11: 0000000000000246 R12: 0000000000000001 [ 127.714522][ T6774] R13: 00007fdb77fe6038 R14: 00007fdb77fe5fa0 R15: 00007ffe41097918 [ 127.714557][ T6774] [ 127.717591][ T6772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'. [ 127.922691][ T6780] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20002 [ 128.397506][ T6794] wg1 speed is unknown, defaulting to 1000 [ 129.262513][ T6832] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 129.534019][ T6847] trusted_key: syz.3.240 sent an empty control message without MSG_MORE. [ 129.663219][ T6832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.725494][ T6825] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 129.738733][ T6825] bond1: (slave batadv1): making interface the new active one [ 129.750928][ T6825] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 129.805293][ T6841] wg1 speed is unknown, defaulting to 1000 [ 130.216114][ T6867] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.239875][ T6868] tipc: Enabled bearer , priority 0 [ 130.402404][ T6859] syzkaller0: entered promiscuous mode [ 130.408081][ T6859] syzkaller0: entered allmulticast mode [ 130.510873][ T6859] tipc: Resetting bearer [ 130.604445][ T6889] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 130.691653][ T6892] Bluetooth: MGMT ver 1.23 [ 130.701044][ T6858] tipc: Resetting bearer [ 130.725452][ T6858] tipc: Disabling bearer [ 130.742887][ T6882] wg1 speed is unknown, defaulting to 1000 [ 130.742923][ T6894] hsr0: entered allmulticast mode [ 130.770667][ T6894] hsr_slave_0: entered allmulticast mode [ 130.776385][ T6894] hsr_slave_1: entered allmulticast mode [ 130.850917][ T6889] hsr_slave_0: left promiscuous mode [ 130.899864][ T6889] hsr_slave_1: left promiscuous mode [ 130.949926][ T6889] hsr0 (unregistering): left allmulticast mode [ 131.006170][ T6885] wg1 speed is unknown, defaulting to 1000 [ 131.521815][ T6911] __nla_validate_parse: 6 callbacks suppressed [ 131.521836][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 131.613191][ T6911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.257'. [ 131.948181][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'. [ 131.993288][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.260'. [ 132.008034][ T6924] nbd: must specify an index to disconnect [ 132.022065][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 132.315156][ T10] IPVS: starting estimator thread 0... [ 132.340405][ T6938] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 132.439797][ T6939] IPVS: using max 29 ests per chain, 69600 per kthread [ 132.556456][ T6947] netlink: 104 bytes leftover after parsing attributes in process `syz.3.268'. [ 132.834456][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 133.008595][ T6962] wg1 speed is unknown, defaulting to 1000 [ 133.053697][ T6959] wg1 speed is unknown, defaulting to 1000 [ 133.437888][ T6987] !: renamed from dummy0 (while UP) [ 133.639728][ T6996] sctp: [Deprecated]: syz.2.278 (pid 6996) Use of int in max_burst socket option. [ 133.639728][ T6996] Use struct sctp_assoc_value instead [ 133.760603][ T6991] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 133.790322][ T6991] macsec1: entered promiscuous mode [ 133.795839][ T6991] macsec1: entered allmulticast mode [ 133.839274][ T6991] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 134.223000][ T7008] netlink: 56 bytes leftover after parsing attributes in process `syz.4.282'. [ 134.537114][ T7015] wg1 speed is unknown, defaulting to 1000 [ 134.788606][ T7019] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.948541][ T7019] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.200201][ T7019] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.385100][ T7039] netlink: 200 bytes leftover after parsing attributes in process `syz.0.290'. [ 135.399617][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 135.415022][ T7019] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.613448][ T7051] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.724481][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.732543][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.807101][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.823736][ T7055] syzkaller0: entered promiscuous mode [ 135.849115][ T7055] syzkaller0: entered allmulticast mode [ 135.955544][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.052544][ T1152] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.075826][ T7075] tipc: Enabled bearer , priority 0 [ 136.084140][ T7071] syzkaller0: entered promiscuous mode [ 136.090162][ T7071] syzkaller0: entered allmulticast mode [ 136.109145][ T78] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.124953][ T7071] tipc: Resetting bearer [ 136.258801][ T7068] tipc: Resetting bearer [ 136.294530][ T7080] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 136.312991][ T7068] tipc: Disabling bearer [ 136.461827][ T7080] bond2: entered promiscuous mode [ 136.494666][ T7080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.552843][ T7077] wg1 speed is unknown, defaulting to 1000 [ 136.656849][ T7087] bond2: (slave bridge1): making interface the new active one [ 136.720387][ T7087] bridge1: entered promiscuous mode [ 136.727809][ T7087] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 136.816565][ T7089] __nla_validate_parse: 4 callbacks suppressed [ 136.816587][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 137.673719][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.315'. [ 137.712509][ T7131] dvmrp0: entered allmulticast mode [ 137.881094][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 137.898145][ T7140] netlink: 'syz.2.317': attribute type 13 has an invalid length. [ 137.927339][ T7139] hsr_slave_0: left promiscuous mode [ 137.955004][ T7140] netlink: 'syz.2.317': attribute type 17 has an invalid length. [ 137.975506][ T7139] hsr_slave_1: left promiscuous mode [ 138.593513][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.619126][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.719691][ T7182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.850675][ T7140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.025853][ T7191] netlink: 1 bytes leftover after parsing attributes in process `syz.0.320'. [ 139.050059][ T7193] pim6reg1: entered promiscuous mode [ 139.057656][ T7193] pim6reg1: entered allmulticast mode [ 139.081458][ T7141] wg1 speed is unknown, defaulting to 1000 [ 139.248450][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 139.265930][ T7208] netlink: 3 bytes leftover after parsing attributes in process `syz.0.324'. [ 139.301197][ T7208] 0ªX¹¦À: renamed from caif0 [ 139.327902][ T7208] 0ªX¹¦À: entered allmulticast mode [ 139.339247][ T7208] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 139.420523][ T7212] team0: Cannot enslave team device to itself [ 139.426769][ T7212] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 139.533522][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 139.834798][ T7221] netlink: 92 bytes leftover after parsing attributes in process `syz.1.325'. [ 139.834998][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 139.876443][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 139.904447][ T7218] netlink: 'syz.2.327': attribute type 12 has an invalid length. [ 139.996212][ T1331] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.019881][ T7218] netlink: 'syz.2.327': attribute type 12 has an invalid length. [ 140.035724][ T1331] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.049726][ T7226] tipc: Enabled bearer , priority 0 [ 140.059988][ T7226] syzkaller0: entered promiscuous mode [ 140.077516][ T7226] syzkaller0: entered allmulticast mode [ 140.111697][ T1331] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.126758][ T1331] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.204470][ T7226] tipc: Resetting bearer [ 140.272752][ T7225] tipc: Resetting bearer [ 140.338661][ T7225] tipc: Disabling bearer [ 140.565334][ T7246] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 140.981394][ T7256] netlink: 'syz.4.337': attribute type 1 has an invalid length. [ 141.033851][ T7256] netlink: 'syz.4.337': attribute type 1 has an invalid length. [ 141.164777][ T7272] netlink: 'syz.1.342': attribute type 13 has an invalid length. [ 141.219307][ T7272] netlink: 'syz.1.342': attribute type 17 has an invalid length. [ 141.505170][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.526537][ T7272] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.541064][ T7272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.608633][ T7283] pim6reg1: entered promiscuous mode [ 141.650787][ T7283] pim6reg1: entered allmulticast mode [ 141.815300][ T7272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.957434][ T7280] wg1 speed is unknown, defaulting to 1000 [ 142.025967][ T7301] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 143.155751][ T7344] __nla_validate_parse: 12 callbacks suppressed [ 143.155773][ T7344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.359'. [ 143.207285][ T7344] tipc: Started in network mode [ 143.212998][ T7344] tipc: Node identity 080211000001, cluster identity 4711 [ 143.224492][ T7344] tipc: Enabled bearer , priority 0 [ 143.247439][ T7344] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 143.259350][ T7344] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 143.335700][ T7344] tipc: Resetting bearer [ 143.401359][ T7348] wg1 speed is unknown, defaulting to 1000 [ 143.509506][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 143.637645][ T7351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.694700][ T7361] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 143.708676][ T7360] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 143.834080][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'. [ 143.844362][ T7368] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.882467][ T7368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.890170][ T7368] IPv6: NLM_F_CREATE should be set when creating new route [ 143.894564][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.367'. [ 143.897460][ T7368] IPv6: NLM_F_CREATE should be set when creating new route [ 143.910988][ T7360] bond3: entered promiscuous mode [ 143.928020][ T7360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.937868][ T7368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.947323][ T7365] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 144.244369][ T7383] netlink: 56 bytes leftover after parsing attributes in process `syz.3.371'. [ 144.320938][ T9] tipc: Node number set to 134418688 [ 144.524264][ T7395] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 144.706954][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 145.182884][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 145.196496][ T7426] wg1 speed is unknown, defaulting to 1000 [ 145.229655][ T7429] bond1: entered promiscuous mode [ 145.235129][ T7429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.512784][ T7439] syzkaller0: entered promiscuous mode [ 145.518422][ T7439] syzkaller0: entered allmulticast mode [ 145.554555][ T7439] syzkaller1: entered promiscuous mode [ 145.562403][ T7439] syzkaller1: entered allmulticast mode [ 145.801630][ T7172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.812370][ T7172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.547594][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 147.571892][ T7460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.389'. [ 147.894692][ T7474] syzkaller0: entered promiscuous mode [ 147.900876][ T7474] syzkaller0: entered allmulticast mode [ 147.908781][ T7478] syzkaller1: entered promiscuous mode [ 147.915443][ T7478] syzkaller1: entered allmulticast mode [ 147.926543][ T7485] bridge_slave_1: left allmulticast mode [ 147.941301][ T7485] bridge_slave_1: left promiscuous mode [ 147.947943][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.982742][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 148.002980][ T7485] bridge_slave_0: left allmulticast mode [ 148.008702][ T7485] bridge_slave_0: left promiscuous mode [ 148.029277][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.807716][ T7540] wg1 speed is unknown, defaulting to 1000 [ 149.827841][ T7535] netlink: 'syz.0.400': attribute type 11 has an invalid length. [ 149.847145][ T7535] netlink: 'syz.0.400': attribute type 4 has an invalid length. [ 149.906306][ T7535] netlink: 224 bytes leftover after parsing attributes in process `syz.0.400'. [ 149.971382][ T7541] netlink: 'syz.0.400': attribute type 11 has an invalid length. [ 149.985924][ T5822] wg1 speed is unknown, defaulting to 1000 [ 150.005945][ T7541] netlink: 'syz.0.400': attribute type 4 has an invalid length. [ 150.043930][ T7541] netlink: 224 bytes leftover after parsing attributes in process `syz.0.400'. [ 150.105562][ T7551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.403'. [ 150.457309][ T7562] netlink: 80 bytes leftover after parsing attributes in process `syz.4.406'. [ 150.614678][ T7574] netlink: 252 bytes leftover after parsing attributes in process `syz.0.408'. [ 150.649512][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 150.775521][ T7583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.409'. [ 150.790937][ T7579] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 150.820310][ T7584] netlink: 'syz.4.409': attribute type 18 has an invalid length. [ 150.901204][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.409'. [ 150.942633][ T1136] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.982336][ T1136] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.014021][ T7589] netlink: 277 bytes leftover after parsing attributes in process `syz.3.411'. [ 151.060765][ T7170] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.082425][ T7170] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.211192][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 151.277630][ T7601] bond4: entered promiscuous mode [ 151.283703][ T7601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.321916][ T7602] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 151.335015][ T7602] bond5 (unregistering): Released all slaves [ 151.363974][ T7610] netlink: 'syz.4.414': attribute type 49 has an invalid length. [ 151.394234][ T7612] netlink: 'syz.4.414': attribute type 49 has an invalid length. [ 151.532115][ T7615] sctp: [Deprecated]: syz.0.417 (pid 7615) Use of int in maxseg socket option. [ 151.532115][ T7615] Use struct sctp_assoc_value instead [ 152.064687][ T7642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.683958][ T7656] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 152.797497][ T7656] tc_dump_action: action bad kind [ 153.000163][ T7673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.044950][ T7673] tipc: Enabling of bearer rejected, failed to enable media [ 154.389942][ T7724] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 154.663942][ T7732] bridge_slave_1: left allmulticast mode [ 154.681927][ T7732] bridge_slave_1: left promiscuous mode [ 154.699333][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.824023][ T7732] bridge_slave_0: left allmulticast mode [ 154.842536][ T7732] bridge_slave_0: left promiscuous mode [ 154.861677][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.185596][ T7760] x_tables: duplicate underflow at hook 2 [ 155.211697][ T7761] netlink: 'syz.0.454': attribute type 2 has an invalid length. [ 155.261237][ T7761] : entered promiscuous mode [ 156.049645][ T7792] gretap0: entered promiscuous mode [ 156.055313][ T7792] vlan2: entered promiscuous mode [ 156.103554][ T7798] __nla_validate_parse: 7 callbacks suppressed [ 156.103575][ T7798] netlink: 788 bytes leftover after parsing attributes in process `syz.2.466'. [ 156.331043][ T7801] ieee802154 phy1 wpan1: encryption failed: -90 [ 156.718860][ T7793] tipc: Resetting bearer [ 157.386738][ T7841] veth1_macvtap: left promiscuous mode [ 157.404879][ T7841] macsec0: entered allmulticast mode [ 157.460925][ T7830] wg1 speed is unknown, defaulting to 1000 [ 157.642472][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 157.743159][ T7848] bond1: entered promiscuous mode [ 157.748300][ T7848] bond1: entered allmulticast mode [ 157.757198][ T7848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.096395][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 158.458649][ T7882] netlink: 64 bytes leftover after parsing attributes in process `syz.2.480'. [ 158.494454][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 158.614331][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 158.695040][ T7883] vlan2: entered allmulticast mode [ 158.808491][ T7892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'. [ 158.932522][ T7900] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 159.058671][ T7892] bond4 (unregistering): Released all slaves [ 159.250860][ T7906] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 159.259709][ T7906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.655108][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 159.664217][ T7926] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 159.850909][ T7934] netlink: 104 bytes leftover after parsing attributes in process `syz.0.491'. [ 159.872942][ T7931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.033608][ T7937] macvlan2: entered promiscuous mode [ 160.059437][ T7937] macvlan2: entered allmulticast mode [ 160.083490][ T7937] bond2: entered promiscuous mode [ 160.105399][ T7937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.165567][ T7937] bond2: left promiscuous mode [ 160.710422][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'. [ 161.536726][ T8007] raw_sendmsg: syz.0.508 forgot to set AF_INET. Fix it! [ 161.793433][ T8016] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 161.991585][ T8032] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 162.496379][ T8054] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 163.156658][ T8091] bond0: Error: Cannot enslave bond to itself. [ 163.462623][ T8102] __nla_validate_parse: 1 callbacks suppressed [ 163.462644][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 163.600534][ T8107] netlink: 1 bytes leftover after parsing attributes in process `syz.4.530'. [ 163.655796][ T8102] veth1: entered promiscuous mode [ 163.696966][ T8102] veth1: left promiscuous mode [ 164.066402][ T8126] Bluetooth: MGMT ver 1.23 [ 164.267954][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'. [ 164.321443][ T8139] tipc: Started in network mode [ 164.326456][ T8139] tipc: Node identity 52a69e557b99, cluster identity 4711 [ 164.359294][ T8139] tipc: Enabled bearer , priority 0 [ 164.370258][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 164.376644][ T8139] syzkaller0: entered promiscuous mode [ 164.403046][ T8139] syzkaller0: entered allmulticast mode [ 164.519677][ T8139] tipc: Resetting bearer [ 164.542907][ T8138] tipc: Resetting bearer [ 164.592211][ T8138] tipc: Disabling bearer [ 164.858365][ T8162] netlink: 'syz.4.540': attribute type 3 has an invalid length. [ 164.920211][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 165.085394][ T8178] netlink: 'syz.0.543': attribute type 1 has an invalid length. [ 165.107699][ T8178] netlink: 172 bytes leftover after parsing attributes in process `syz.0.543'. [ 165.139325][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 165.354360][ T8188] pim6reg: entered allmulticast mode [ 165.425378][ T8188] pim6reg: left allmulticast mode [ 165.433439][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.548'. [ 165.703665][ T8208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.551'. [ 165.751041][ T8208] tipc: Enabled bearer , priority 0 [ 165.773500][ T8208] syzkaller0: entered promiscuous mode [ 165.793066][ T8208] syzkaller0: entered allmulticast mode [ 165.884767][ T8208] tipc: Resetting bearer [ 165.966410][ T8206] tipc: Resetting bearer [ 166.013785][ T8206] tipc: Disabling bearer [ 166.288523][ T8245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 166.354238][ T8245] veth3: entered promiscuous mode [ 166.599344][ T8262] dvmrp1: tun_chr_ioctl cmd 1074025688 [ 166.605461][ T8262] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 166.611924][ T8262] dvmrp1: linktype set to 1 [ 166.626639][ T8263] dvmrp12: entered allmulticast mode [ 166.709582][ T8261] dvmrp12: left allmulticast mode [ 168.403829][ T8310] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.509681][ T8320] __nla_validate_parse: 3 callbacks suppressed [ 168.509702][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 168.545708][ T8313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.577'. [ 168.559842][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 168.621725][ T8326] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 168.652803][ T8328] netlink: 44 bytes leftover after parsing attributes in process `syz.3.581'. [ 168.768418][ T8328] team0: Port device team_slave_0 removed [ 168.803628][ T8331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.582'. [ 168.900295][ T8331] tipc: Enabling of bearer rejected, already enabled [ 168.967824][ T8337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.172198][ T8351] batadv_slave_1: entered promiscuous mode [ 169.232755][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 169.245579][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 169.259643][ T8351] bridge_slave_1: left allmulticast mode [ 169.265353][ T8351] bridge_slave_1: left promiscuous mode [ 169.339673][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.358701][ T8351] bridge_slave_0: left promiscuous mode [ 169.369469][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.614951][ T8367] syz.1.589 uses old SIOCAX25GETINFO [ 169.650609][ T8370] wg1 speed is unknown, defaulting to 1000 [ 169.652399][ T8351] batadv_slave_1: left promiscuous mode [ 169.725086][ T8378] netlink: 60 bytes leftover after parsing attributes in process `syz.4.593'. [ 169.744701][ T8379] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 170.005392][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 170.082626][ T8394] syzkaller0: create flow: hash 769363353 index 2 [ 170.135586][ T7174] syzkaller0: tun_net_xmit 76 [ 170.147277][ T7174] syzkaller0: tun_net_xmit 48 [ 170.160011][ T5885] syzkaller0: tun_net_xmit 76 [ 170.165625][ T7160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 170.174660][ T7160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 170.184961][ T7160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 170.219353][ T10] syzkaller0: tun_net_xmit 76 [ 170.251794][ T8396] netlink: 'syz.3.597': attribute type 1 has an invalid length. [ 170.279554][ T10] syzkaller0: tun_net_xmit 76 [ 170.288328][ T7160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 170.321130][ T8386] syzkaller0: delete flow: hash 769363353 index 2 [ 170.344019][ T8387] wg1 speed is unknown, defaulting to 1000 [ 171.557394][ T8404] tipc: Enabling of bearer rejected, failed to enable media [ 171.910849][ T8416] wg1 speed is unknown, defaulting to 1000 [ 172.328796][ T8437] wg1 speed is unknown, defaulting to 1000 [ 172.757935][ T8417] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 173.073659][ T5822] IPVS: starting estimator thread 0... [ 173.179122][ T8476] IPVS: using max 27 ests per chain, 64800 per kthread [ 173.199419][ T8480] netlink: 48 bytes leftover after parsing attributes in process `syz.0.608'. [ 174.082351][ T8525] __nla_validate_parse: 1 callbacks suppressed [ 174.082372][ T8525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.621'. [ 174.131855][ T8525] tun0: tun_chr_ioctl cmd 2148045848 [ 174.151980][ T8525] tun0: tun_chr_ioctl cmd 21731 [ 174.267636][ T8534] netlink: 'syz.3.623': attribute type 1 has an invalid length. [ 174.390753][ T8534] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 174.431387][ T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 174.432934][ T8537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.599952][ T8532] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.622'. [ 174.851329][ T8534] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 174.864093][ T8534] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 174.888632][ T8534] bond3 (unregistering): Released all slaves [ 175.006668][ T8553] wg1 speed is unknown, defaulting to 1000 [ 175.802647][ T8586] macsec2: entered promiscuous mode [ 175.807942][ T8586] macsec2: entered allmulticast mode [ 175.969402][ T8592] IPVS: set_ctl: invalid protocol: 184 172.20.20.187:20001 [ 176.291024][ T8602] ip6gretap0: entered promiscuous mode [ 176.309497][ T8602] macsec1: entered promiscuous mode [ 176.379947][ T8602] ip6gretap0: left promiscuous mode [ 176.703362][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 176.763733][ T8631] netlink: 'syz.3.644': attribute type 2 has an invalid length. [ 176.811141][ T8630] netlink: 'syz.3.644': attribute type 2 has an invalid length. [ 177.225818][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 177.300718][ T8641] vlan0: entered promiscuous mode [ 177.326251][ T8641] bond0: entered promiscuous mode [ 177.349768][ T8641] bond_slave_0: entered promiscuous mode [ 177.386111][ T8641] bond_slave_1: entered promiscuous mode [ 177.756074][ T8655] netlink: 732 bytes leftover after parsing attributes in process `syz.1.651'. [ 177.780487][ T8651] wg1 speed is unknown, defaulting to 1000 [ 177.807525][ T8649] wg1 speed is unknown, defaulting to 1000 [ 178.049956][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 178.156420][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.230342][ T8672] netlink: 'syz.4.655': attribute type 13 has an invalid length. [ 178.384410][ T8663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.903810][ T8672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.947744][ T8672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.228361][ T8680] netlink: 56 bytes leftover after parsing attributes in process `syz.3.656'. [ 179.251437][ T8672] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 179.437520][ T8684] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.658'. [ 179.456808][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.466487][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.525891][ T7172] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.590024][ T7172] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.626090][ T7172] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.676467][ T8691] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 179.696143][ T7172] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.728205][ T7172] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.750002][ T7172] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.800401][ T8691] bond2: entered promiscuous mode [ 179.806308][ T8691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.833126][ T8695] dummy0: entered promiscuous mode [ 179.856887][ T8695] batadv_slave_0: entered promiscuous mode [ 179.867904][ T8695] batadv_slave_0: left promiscuous mode [ 179.884779][ T8695] dummy0: left promiscuous mode [ 180.189845][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 180.216973][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 180.240443][ T8712] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 180.414110][ T8720] netlink: 'syz.3.669': attribute type 21 has an invalid length. [ 180.424356][ T8720] netlink: 128 bytes leftover after parsing attributes in process `syz.3.669'. [ 180.437761][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.445584][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.585846][ T8728] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.671'. [ 180.626234][ T8715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.644365][ T8715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.782763][ T8712] team0: Port device netdevsim0 added [ 180.799261][ T8720] netlink: 3 bytes leftover after parsing attributes in process `syz.3.669'. [ 180.834631][ T5885] wg1 speed is unknown, defaulting to 1000 [ 180.841147][ T1152] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.869476][ T5885] syz2: Port: 1 Link DOWN [ 180.879145][ T1152] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.887614][ T1152] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.902703][ T1152] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.035992][ T1152] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.068351][ T1152] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.187165][ T8737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.195964][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 181.246379][ T8738] ip6erspan0: entered promiscuous mode [ 181.279531][ T1152] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.297064][ T1152] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.736465][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.817471][ T8758] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 181.962756][ T8753] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 182.467015][ T8798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.687'. [ 182.538309][ T8793] tipc: Enabled bearer , priority 0 [ 182.546679][ T8802] netlink: 68 bytes leftover after parsing attributes in process `syz.3.690'. [ 182.574207][ T8793] syzkaller0: entered promiscuous mode [ 182.598834][ T8793] syzkaller0: entered allmulticast mode [ 182.716641][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 183.032808][ T5899] IPVS: starting estimator thread 0... [ 183.055889][ T8824] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002 [ 183.209118][ T8825] IPVS: using max 26 ests per chain, 62400 per kthread [ 183.384535][ T8818] tipc: Resetting bearer [ 183.423901][ T8788] tipc: Resetting bearer [ 183.487726][ T8788] tipc: Disabling bearer [ 184.060139][ T8866] netlink: 'syz.0.704': attribute type 16 has an invalid length. [ 184.089757][ T8866] netlink: 'syz.0.704': attribute type 17 has an invalid length. [ 184.212301][ T8866] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 184.320060][ T8873] netlink: 'syz.4.707': attribute type 83 has an invalid length. [ 184.442319][ T8887] x_tables: duplicate underflow at hook 1 [ 184.575312][ T8873] wg1 speed is unknown, defaulting to 1000 [ 184.644232][ T8894] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 185.489929][ T8921] __nla_validate_parse: 2 callbacks suppressed [ 185.489950][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 186.417305][ T8951] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 186.429932][ T8955] netlink: 'syz.2.730': attribute type 9 has an invalid length. [ 186.928620][ T8974] netlink: 52 bytes leftover after parsing attributes in process `syz.0.734'. [ 186.938466][ T8974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.734'. [ 187.154096][ T8977] erspan0: entered promiscuous mode [ 187.199640][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'. [ 187.214035][ T8977] erspan0: left promiscuous mode [ 187.283275][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 187.327533][ T8979] team0: Cannot enslave team device to itself [ 187.376364][ T8979] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 187.443314][ T8985] netlink: 92 bytes leftover after parsing attributes in process `syz.0.736'. [ 187.686391][ T8982] wg1 speed is unknown, defaulting to 1000 [ 187.821475][ T8988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.738'. [ 187.879385][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.738'. [ 188.057379][ T8988] tipc: Enabled bearer , priority 10 [ 188.070756][ T9001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.176049][ T9004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.740'. [ 188.332519][ T9010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.742'. [ 188.511511][ T9006] syz.2.742 (9006) used greatest stack depth: 17864 bytes left [ 189.170307][ T843] tipc: Node number set to 692035157 [ 189.233553][ T9041] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 190.529907][ T9080] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 190.582941][ T9081] __nla_validate_parse: 3 callbacks suppressed [ 190.582959][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 190.616688][ T9081] geneve2: entered promiscuous mode [ 190.649779][ T9081] geneve2: entered allmulticast mode [ 190.671991][ T7172] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.696840][ T7172] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.728223][ T7172] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.768224][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 190.900382][ T7172] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.917188][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 190.957902][ T9086] netlink: 'syz.1.766': attribute type 13 has an invalid length. [ 190.965972][ T9086] netlink: 'syz.1.766': attribute type 17 has an invalid length. [ 190.999969][ T9086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.265070][ T9086] wg1 speed is unknown, defaulting to 1000 [ 191.330549][ T9097] nicvf0: entered promiscuous mode [ 191.629182][ C0] syz_tun: tun_net_xmit 86 [ 191.839506][ T9105] wg1 speed is unknown, defaulting to 1000 [ 192.213267][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 192.935142][ T9148] netlink: 52 bytes leftover after parsing attributes in process `syz.1.782'. [ 192.961357][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 192.971893][ T9149] netlink: 52 bytes leftover after parsing attributes in process `syz.1.782'. [ 193.212283][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.785'. [ 193.290575][ T9166] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 193.374234][ T9166] bond3: entered promiscuous mode [ 193.379430][ T9166] bond3: entered allmulticast mode [ 193.395442][ T9172] bridge0: entered promiscuous mode [ 193.403336][ T9172] bridge0: entered allmulticast mode [ 193.412370][ T9172] bond3: (slave bridge0): making interface the new active one [ 193.420695][ T9172] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 193.657693][ T9179] netlink: 56 bytes leftover after parsing attributes in process `syz.0.789'. [ 193.925442][ T9185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.932633][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 193.976686][ T9193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.224749][ T9197] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 194.276825][ T9200] netlink: 'syz.3.795': attribute type 4 has an invalid length. [ 194.428880][ T9208] netlink: 'syz.1.796': attribute type 1 has an invalid length. [ 194.456299][ T9208] x_tables: duplicate underflow at hook 3 [ 194.604233][ T9219] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 194.627419][ T9219] team0: Port device dummy0 added [ 194.635413][ T9219] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 194.653651][ T9219] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 194.696739][ T9219] team0: Failed to send options change via netlink (err -105) [ 194.711682][ T9219] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 194.722991][ T9219] team0: Port device dummy0 removed [ 194.736635][ T9226] netlink: 'syz.1.800': attribute type 3 has an invalid length. [ 194.756400][ T9219] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 195.239553][ T9244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.265249][ T9244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.773663][ T9268] __nla_validate_parse: 5 callbacks suppressed [ 195.773684][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 195.979517][ T9278] netlink: 256 bytes leftover after parsing attributes in process `syz.3.814'. [ 196.197494][ T9281] syzkaller0: entered promiscuous mode [ 196.210809][ T9281] syzkaller0: entered allmulticast mode [ 196.247977][ T9286] dvmrp0: entered allmulticast mode [ 196.739909][ T9296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.818'. [ 197.311457][ T9323] sctp: [Deprecated]: syz.0.826 (pid 9323) Use of int in maxseg socket option. [ 197.311457][ T9323] Use struct sctp_assoc_value instead [ 197.525506][ T9328] netlink: 'syz.0.830': attribute type 11 has an invalid length. [ 197.723530][ T9334] bond6 (unregistering): Released all slaves [ 197.751419][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.832'. [ 197.876676][ T9348] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.176774][ T9348] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.226867][ T9357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.321226][ T9348] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.521457][ T9348] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.533420][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 198.544081][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 198.603462][ T9375] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 198.756462][ T9373] wg1 speed is unknown, defaulting to 1000 [ 198.763136][ T1136] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.856392][ T1136] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.886516][ T1136] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.099892][ T1136] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.024466][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 200.034435][ T9398] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 200.049780][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.170808][ T9407] netlink: 'syz.4.848': attribute type 4 has an invalid length. [ 200.562115][ T9417] wg1 speed is unknown, defaulting to 1000 [ 200.833493][ T9429] netlink: 'syz.2.852': attribute type 3 has an invalid length. [ 200.849194][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 200.873951][ T9435] netlink: 48 bytes leftover after parsing attributes in process `syz.0.854'. [ 201.197478][ T9443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.857'. [ 201.313521][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 201.481500][ T9450] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 201.510180][ T9447] openvswitch: netlink: Missing valid actions attribute. [ 201.539154][ T9447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.722481][ T9453] netlink: 'syz.4.860': attribute type 1 has an invalid length. [ 202.492955][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.867'. [ 202.587925][ T9487] netlink: 'syz.4.869': attribute type 4 has an invalid length. [ 202.615893][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 202.639113][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 202.700780][ T9479] netlink: 288 bytes leftover after parsing attributes in process `syz.2.867'. [ 202.722998][ T9483] netlink: 288 bytes leftover after parsing attributes in process `syz.2.867'. [ 202.883588][ T9493] netlink: 240 bytes leftover after parsing attributes in process `syz.4.870'. [ 202.897742][ T9499] wg1 speed is unknown, defaulting to 1000 [ 203.528893][ T9523] tipc: Enabled bearer , priority 0 [ 203.548729][ T9523] syzkaller0: entered promiscuous mode [ 203.564671][ T9523] syzkaller0: entered allmulticast mode [ 203.759899][ T9523] tipc: Resetting bearer [ 203.809634][ T9536] tipc: Enabling of bearer rejected, failed to enable media [ 203.888692][ T9522] tipc: Resetting bearer [ 203.941908][ T9522] tipc: Disabling bearer [ 204.113709][ T9548] wg1 speed is unknown, defaulting to 1000 [ 206.568066][ T9640] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.790917][ T9656] netlink: 'syz.1.908': attribute type 13 has an invalid length. [ 206.814026][ T9658] netlink: 'syz.0.909': attribute type 1 has an invalid length. [ 206.829916][ T9656] netlink: 'syz.1.908': attribute type 17 has an invalid length. [ 206.956481][ T9640] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.024300][ T9656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.163504][ T9640] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.262833][ T9661] wg1 speed is unknown, defaulting to 1000 [ 207.337203][ T9640] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.796141][ T9678] __nla_validate_parse: 3 callbacks suppressed [ 207.796161][ T9678] netlink: 32 bytes leftover after parsing attributes in process `syz.4.915'. [ 208.021542][ T1152] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.047848][ T1152] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.156537][ T7165] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.206190][ T1152] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.438073][ T9691] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 209.660381][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 209.810642][ T9727] netlink: 'syz.1.927': attribute type 21 has an invalid length. [ 209.818442][ T9727] netlink: 'syz.1.927': attribute type 22 has an invalid length. [ 209.875738][ T9727] netlink: 'syz.1.927': attribute type 23 has an invalid length. [ 209.900760][ T9727] netlink: 'syz.1.927': attribute type 25 has an invalid length. [ 209.910242][ T9727] netlink: 'syz.1.927': attribute type 26 has an invalid length. [ 209.918144][ T9727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.927'. [ 210.059222][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.930'. [ 210.644380][ T9770] tipc: Enabled bearer , priority 0 [ 210.687279][ T9770] syzkaller0: entered promiscuous mode [ 210.703068][ T9770] syzkaller0: entered allmulticast mode [ 210.773246][ T9770] tipc: Resetting bearer [ 210.815207][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 210.834599][ T9769] tipc: Resetting bearer [ 210.895901][ T9769] tipc: Disabling bearer [ 211.500330][ T9799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.947'. [ 211.543974][ T9799] tipc: Enabled bearer , priority 0 [ 211.551962][ T9799] syzkaller0: entered promiscuous mode [ 211.557687][ T9799] syzkaller0: entered allmulticast mode [ 211.590389][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.948'. [ 211.643584][ T9799] tipc: Resetting bearer [ 211.708832][ T9797] tipc: Resetting bearer [ 211.803882][ T9797] tipc: Disabling bearer [ 212.000169][ T9826] netlink: 40 bytes leftover after parsing attributes in process `syz.4.952'. [ 212.773471][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 212.832188][ T9846] tipc: Enabled bearer , priority 0 [ 212.839982][ T9846] syzkaller0: entered promiscuous mode [ 212.845498][ T9846] syzkaller0: entered allmulticast mode [ 212.932017][ T9846] tipc: Resetting bearer [ 213.370743][ T9865] wg1: entered promiscuous mode [ 213.375890][ T9865] wg1: entered allmulticast mode [ 213.529090][ T9843] tipc: Resetting bearer [ 213.579062][ T9843] tipc: Disabling bearer [ 214.028817][ T9883] netlink: 'syz.4.967': attribute type 1 has an invalid length. [ 214.042472][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'. [ 214.067536][ T9880] wg1 speed is unknown, defaulting to 1000 [ 214.120213][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'. [ 214.378637][ T9887] wg1 speed is unknown, defaulting to 1000 [ 215.331175][ T9911] wg1 speed is unknown, defaulting to 1000 [ 215.362584][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'. [ 215.440460][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'. [ 215.872605][ T9921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.978'. [ 215.900099][ T9921] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 216.097161][ T9930] netlink: 'syz.3.984': attribute type 16 has an invalid length. [ 216.354989][ T9939] netlink: 'syz.2.986': attribute type 14 has an invalid length. [ 216.502421][ T9937] syzkaller0: entered promiscuous mode [ 216.508182][ T9937] syzkaller0: entered allmulticast mode [ 217.484738][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 217.490975][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 217.491182][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 218.681808][ T9969] netlink: 'syz.4.993': attribute type 41 has an invalid length. [ 218.701373][ T9972] netlink: 'syz.4.993': attribute type 41 has an invalid length. [ 218.815490][ T9969] syz.4.993: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 218.834190][ T9969] CPU: 0 UID: 0 PID: 9969 Comm: syz.4.993 Not tainted syzkaller #0 PREEMPT(full) [ 218.834216][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 218.834229][ T9969] Call Trace: [ 218.834237][ T9969] [ 218.834247][ T9969] dump_stack_lvl+0x189/0x250 [ 218.834278][ T9969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.834338][ T9969] ? __pfx__printk+0x10/0x10 [ 218.834361][ T9969] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 218.834386][ T9969] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 218.834413][ T9969] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 218.834441][ T9969] warn_alloc+0x214/0x310 [ 218.834475][ T9969] ? __pfx_warn_alloc+0x10/0x10 [ 218.834512][ T9969] ? __get_vm_area_node+0x28f/0x300 [ 218.834535][ T9969] ? xskq_create+0xbf/0x170 [ 218.834569][ T9969] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 218.834627][ T9969] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 218.834660][ T9969] ? __kasan_kmalloc+0x93/0xb0 [ 218.834686][ T9969] vmalloc_user_noprof+0xad/0xf0 [ 218.834710][ T9969] ? xskq_create+0xbf/0x170 [ 218.834740][ T9969] xskq_create+0xbf/0x170 [ 218.834772][ T9969] xsk_init_queue+0xb0/0x110 [ 218.834803][ T9969] xsk_setsockopt+0x57b/0x8d0 [ 218.834833][ T9969] ? __pfx_xsk_setsockopt+0x10/0x10 [ 218.834864][ T9969] ? __pfx_aa_sk_perm+0x10/0x10 [ 218.834893][ T9969] ? aa_sock_opt_perm+0xff/0x1b0 [ 218.834924][ T9969] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 218.834953][ T9969] ? __pfx_xsk_setsockopt+0x10/0x10 [ 218.834982][ T9969] do_sock_setsockopt+0x179/0x1b0 [ 218.835017][ T9969] __x64_sys_setsockopt+0x13f/0x1b0 [ 218.835053][ T9969] do_syscall_64+0xfa/0xfa0 [ 218.835084][ T9969] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.835115][ T9969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.835136][ T9969] ? clear_bhb_loop+0x60/0xb0 [ 218.835161][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.835182][ T9969] RIP: 0033:0x7fcba2b8eec9 [ 218.835201][ T9969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.835218][ T9969] RSP: 002b:00007fcba3a55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.835240][ T9969] RAX: ffffffffffffffda RBX: 00007fcba2de5fa0 RCX: 00007fcba2b8eec9 [ 218.835255][ T9969] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 218.835267][ T9969] RBP: 00007fcba2c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 218.835279][ T9969] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 218.835300][ T9969] R13: 00007fcba2de6038 R14: 00007fcba2de5fa0 R15: 00007ffe36fb7dc8 [ 218.835337][ T9969] [ 218.835346][ T9969] Mem-Info: [ 219.109031][ T9969] active_anon:5892 inactive_anon:0 isolated_anon:0 [ 219.109031][ T9969] active_file:3081 inactive_file:39928 isolated_file:0 [ 219.109031][ T9969] unevictable:768 dirty:116 writeback:0 [ 219.109031][ T9969] slab_reclaimable:12935 slab_unreclaimable:131554 [ 219.109031][ T9969] mapped:29587 shmem:1409 pagetables:1292 [ 219.109031][ T9969] sec_pagetables:0 bounce:0 [ 219.109031][ T9969] kernel_misc_reclaimable:0 [ 219.109031][ T9969] free:1295620 free_pcp:13909 free_cma:0 [ 219.164656][ T9969] Node 0 active_anon:23668kB inactive_anon:0kB active_file:12324kB inactive_file:159504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118348kB dirty:460kB writeback:0kB shmem:4100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12588kB pagetables:4856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 219.197485][ T9969] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 219.255045][ T9982] netlink: 68 bytes leftover after parsing attributes in process `syz.3.997'. [ 219.301608][ T9969] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 219.341926][ T9969] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 219.347781][ T9969] Node 0 DMA32 free:1282048kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23420kB inactive_anon:0kB active_file:12324kB inactive_file:157664kB unevictable:1536kB writepending:460kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:33656kB local_pcp:18704kB free_cma:0kB [ 219.446184][ T9969] lowmem_reserve[]: 0 0 1 1 1 [ 219.452132][ T9969] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 219.483804][ T9969] lowmem_reserve[]: 0 0 0 0 0 [ 219.488678][ T9969] Node 1 Normal free:3884764kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22960kB local_pcp:10400kB free_cma:0kB [ 219.508128][ T9991] netlink: 76 bytes leftover after parsing attributes in process `syz.3.999'. [ 219.525529][ T9969] lowmem_reserve[]: 0 0 0 0 0 [ 219.543926][ T9969] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 219.557241][ T9991] nbd: illegal input index 65508 [ 219.557415][ T9969] Node 0 DMA32: 390*4kB (UME) 541*8kB (UM) 207*16kB (UM) 787*32kB (UME) 213*64kB (UME) 41*128kB (UM) 25*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 5*2048kB (ME) 295*4096kB (M) = 1281808kB [ 219.586076][ T9969] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 219.599521][ T9994] netlink: 'syz.2.998': attribute type 1 has an invalid length. [ 219.607324][ T9994] netlink: 232 bytes leftover after parsing attributes in process `syz.2.998'. [ 219.619148][ T9969] Node 1 Normal: 223*4kB (UE) 54*8kB (UME) 45*16kB (UME) 109*32kB (UME) 27*64kB (UME) 5*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (UM) = 3884764kB [ 219.637922][ T9969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.682218][ T9969] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.693974][ T9989] syzkaller1: entered promiscuous mode [ 219.702553][ T9989] syzkaller1: entered allmulticast mode [ 219.736549][ T9969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.751978][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.999'. [ 219.769147][ T9969] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.820902][ T9969] 44414 total pagecache pages [ 219.825654][ T9969] 0 pages in swap cache [ 219.841967][ T9969] Free swap = 124996kB [ 219.882146][ T9969] Total swap = 124996kB [ 219.894585][ T9969] 2097051 pages RAM [ 219.898609][ T9969] 0 pages HighMem/MovableOnly [ 219.906552][ T9969] 424452 pages reserved [ 219.914527][ T9969] 0 pages cma reserved [ 219.945141][T10000] tap0: tun_chr_ioctl cmd 1074025676 [ 219.950631][T10000] tap0: owner set to 0 [ 220.202284][T10004] : option downdelay: invalid value (18446744073709551615) [ 220.209855][T10004] : option downdelay: allowed values 0 - 2147483647 [ 220.228263][T10004]  (unregistering): Released all slaves [ 220.295385][T10008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.330464][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 220.332797][T10008] bond0: (slave rose0): Enslaving as an active interface with an up link [ 220.372687][T10011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'. [ 220.887471][T10033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1007'. [ 220.905887][T10033] tipc: Enabling of bearer rejected, already enabled [ 221.068029][T10040] veth0: entered promiscuous mode [ 221.086858][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 221.471182][T10040] veth0 (unregistering): left promiscuous mode [ 221.542829][T10041] netem: incorrect gi model size [ 222.490208][T10075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1018'. [ 222.513991][T10075] tc_dump_action: action bad kind [ 222.575580][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 222.607799][T10077] tipc: Enabled bearer , priority 0 [ 222.618527][T10077] syzkaller0: entered promiscuous mode [ 222.626724][T10077] syzkaller0: entered allmulticast mode [ 222.683723][T10077] tipc: Resetting bearer [ 222.731877][T10076] tipc: Resetting bearer [ 222.851365][T10076] tipc: Disabling bearer [ 222.878125][T10083] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 222.926032][T10086] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 223.351649][T10107] netlink: 'syz.4.1025': attribute type 10 has an invalid length. [ 223.408633][T10107] bridge0: port 3(macsec0) entered blocking state [ 223.435748][T10107] bridge0: port 3(macsec0) entered disabled state [ 223.467440][T10107] macsec0: entered allmulticast mode [ 223.477633][T10107] veth1_macvtap: entered allmulticast mode [ 223.540627][T10107] macsec0: entered promiscuous mode [ 223.594360][T10109] netlink: 'syz.3.1026': attribute type 4 has an invalid length. [ 223.825350][T10123] wg1 speed is unknown, defaulting to 1000 [ 224.172871][T10128] batadv0: mtu less than device minimum [ 224.180934][T10129] batadv0: mtu less than device minimum [ 224.851467][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.862901][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.872148][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.881122][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.889488][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.984126][T10139] __nla_validate_parse: 4 callbacks suppressed [ 224.984148][T10139] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1030'. [ 225.117047][T10145] bond2: entered promiscuous mode [ 225.122508][T10145] bond2: entered allmulticast mode [ 225.128164][T10145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.314688][T10145] bond2 (unregistering): Released all slaves [ 225.514017][T10146] wg1 speed is unknown, defaulting to 1000 [ 225.536368][T10160] batadv_slave_0: entered promiscuous mode [ 225.551201][T10160] netlink: 'syz.4.1036': attribute type 3 has an invalid length. [ 225.564401][T10161] netlink: 'syz.4.1036': attribute type 3 has an invalid length. [ 225.772506][T10168] netem: change failed [ 225.894203][T10168] wg1 speed is unknown, defaulting to 1000 [ 226.277774][T10146] chnl_net:caif_netlink_parms(): no params data found [ 226.296139][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 226.299315][T10175] wg1 speed is unknown, defaulting to 1000 [ 226.492151][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 226.637180][T10199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1045'. [ 226.662324][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 226.938027][T10199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.959706][T10199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.973189][T10199] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 226.987842][T10199] bond0 (unregistering): Released all slaves [ 226.994260][ T5827] Bluetooth: hci5: command tx timeout [ 227.231409][T10146] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.241886][T10146] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.254091][T10146] bridge_slave_0: entered allmulticast mode [ 227.264518][T10146] bridge_slave_0: entered promiscuous mode [ 227.289144][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.296542][T10146] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.312350][T10146] bridge_slave_1: entered allmulticast mode [ 227.330805][T10146] bridge_slave_1: entered promiscuous mode [ 227.430249][T10146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.521499][T10146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.682150][T10146] team0: Port device team_slave_0 added [ 227.691498][T10146] team0: Port device team_slave_1 added [ 227.901987][T10146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.931964][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.969311][T10224] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1051'. [ 228.048979][T10146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.053009][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 228.093047][T10230] vlan0: entered promiscuous mode [ 228.141534][T10146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.154958][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.184169][T10146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.366189][T10239] netem: change failed [ 228.392163][T10237] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1054'. [ 228.404438][T10146] hsr_slave_0: entered promiscuous mode [ 228.416316][T10146] hsr_slave_1: entered promiscuous mode [ 228.436476][T10146] debugfs: 'hsr0' already exists in 'hsr' [ 228.458078][T10146] Cannot create hsr debugfs directory [ 228.933549][T10250] netlink: 87 bytes leftover after parsing attributes in process `syz.3.1058'. [ 228.972404][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 229.069094][ T5827] Bluetooth: hci5: command tx timeout [ 229.402686][T10146] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.493300][T10146] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.528498][T10146] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.566962][T10263] tun0: tun_chr_ioctl cmd 1074025675 [ 229.589716][T10263] tun0: persist enabled [ 229.595744][T10146] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.615004][T10268] tun0: tun_chr_ioctl cmd 1074025675 [ 229.626463][T10268] tun0: persist disabled [ 229.791855][T10266] netlink: 'syz.2.1063': attribute type 1 has an invalid length. [ 229.881041][T10279] wg1 speed is unknown, defaulting to 1000 [ 229.981218][ T8811] syz_tun: tun_net_xmit 110 [ 230.071491][ T8811] syz_tun: tun_net_xmit 110 [ 230.071824][T10281] wg1 speed is unknown, defaulting to 1000 [ 230.107187][T10285] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 230.131166][T10287] __nla_validate_parse: 5 callbacks suppressed [ 230.131184][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 230.211881][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1068'. [ 230.252587][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 230.263004][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 230.283005][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 230.316229][T10290] gretap1: entered promiscuous mode [ 230.322473][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 230.340570][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 230.470790][T10146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.541325][T10146] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.577756][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.585061][ T7165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.586627][T10297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1069'. [ 230.648404][T10291] wg1 speed is unknown, defaulting to 1000 [ 230.868696][T10302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1070'. [ 230.983205][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.990490][ T7165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.019315][T10304] tipc: Enabling of bearer rejected, already enabled [ 231.163011][ T5827] Bluetooth: hci5: command tx timeout [ 231.703677][T10322] tipc: Enabled bearer , priority 0 [ 231.839521][T10320] syzkaller0: entered promiscuous mode [ 231.845145][T10320] syzkaller0: entered allmulticast mode [ 231.851779][T10320] tipc: Resetting bearer [ 231.918026][T10319] tipc: Resetting bearer [ 232.035520][T10332] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1079'. [ 232.432040][ T5827] Bluetooth: hci6: command tx timeout [ 232.789039][ T8811] tipc: Node number set to 4092459132 [ 233.231690][ T5827] Bluetooth: hci5: command tx timeout [ 233.805597][T10319] tipc: Disabling bearer [ 233.844102][T10291] chnl_net:caif_netlink_parms(): no params data found [ 233.875583][T10146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.441538][T10291] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.461942][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.503865][T10291] bridge_slave_0: entered allmulticast mode [ 234.510360][ T5827] Bluetooth: hci6: command tx timeout [ 234.512706][T10291] bridge_slave_0: entered promiscuous mode [ 234.593743][T10291] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.609482][T10291] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.627363][T10291] bridge_slave_1: entered allmulticast mode [ 234.646900][T10291] bridge_slave_1: entered promiscuous mode [ 234.675441][T10368] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 234.720524][T10372] bridge_slave_0: left allmulticast mode [ 234.732437][T10368] netlink: 'syz.4.1085': attribute type 10 has an invalid length. [ 234.751741][T10372] bridge_slave_0: left promiscuous mode [ 234.770473][T10372] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.792324][T10372] bridge_slave_1: left allmulticast mode [ 234.798029][T10372] bridge_slave_1: left promiscuous mode [ 234.820516][T10372] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.845044][T10372] bond0: (slave bond_slave_0): Releasing backup interface [ 234.873556][T10372] bond_slave_0: left promiscuous mode [ 234.883618][T10372] bond0: (slave bond_slave_1): Releasing backup interface [ 234.897137][T10372] bond_slave_1: left promiscuous mode [ 234.906023][T10372] team0: Port device team_slave_0 removed [ 234.914901][T10372] team0: Port device team_slave_1 removed [ 234.922023][T10372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.930966][T10372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.940836][T10372] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.974767][T10377] netlink: 'syz.2.1088': attribute type 3 has an invalid length. [ 234.983199][T10368] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 234.995925][T10368] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 235.005095][T10368] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 235.110754][T10291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.193493][T10291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.342110][T10394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1090'. [ 235.402654][T10291] team0: Port device team_slave_0 added [ 235.414418][T10397] netlink: 'syz.3.1092': attribute type 15 has an invalid length. [ 235.431707][T10395] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1091'. [ 235.443903][T10389] tipc: Enabling of bearer rejected, already enabled [ 235.456153][T10291] team0: Port device team_slave_1 added [ 235.643832][T10146] veth0_vlan: entered promiscuous mode [ 235.782891][T10291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.790359][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.820628][T10291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.837071][T10146] veth1_vlan: entered promiscuous mode [ 235.851427][T10291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.858433][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.893091][T10291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.044821][T10291] hsr_slave_0: entered promiscuous mode [ 236.053052][T10291] hsr_slave_1: entered promiscuous mode [ 236.060310][T10291] debugfs: 'hsr0' already exists in 'hsr' [ 236.062441][T10416] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 236.076534][T10291] Cannot create hsr debugfs directory [ 236.093926][T10416] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 236.180012][T10146] veth0_macvtap: entered promiscuous mode [ 236.282045][T10146] veth1_macvtap: entered promiscuous mode [ 236.512524][T10146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.555664][T10146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.583126][T10431] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1099'. [ 236.590406][ T5827] Bluetooth: hci6: command tx timeout [ 236.603448][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.623550][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.702269][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.729103][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.861349][T10291] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 236.888519][T10291] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.937836][T10291] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.009809][T10439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.087560][T10291] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.258215][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'. [ 237.329779][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.337668][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.380093][T10449] netlink: 'syz.2.1101': attribute type 2 has an invalid length. [ 237.590836][T10449] : entered promiscuous mode [ 237.821843][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.849988][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.027793][T10291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.103476][T10291] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.157847][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.165181][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.236776][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.244065][ T7165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.301134][T10476] netlink: 'syz.2.1102': attribute type 11 has an invalid length. [ 238.439716][T10477] wg1 speed is unknown, defaulting to 1000 [ 238.670113][ T5827] Bluetooth: hci6: command tx timeout [ 239.641185][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 239.827827][T10524] geneve0: entered promiscuous mode [ 239.909220][T10291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.092047][T10532] netlink: 'syz.3.1115': attribute type 3 has an invalid length. [ 240.145332][T10534] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1116'. [ 240.173500][T10534] netlink: 'syz.4.1116': attribute type 1 has an invalid length. [ 240.386563][T10545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1119'. [ 240.723578][T10570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1122'. [ 240.862348][ T7172] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.890197][ T7172] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.927263][ T7172] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.953075][ T7172] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.061508][T10291] veth0_vlan: entered promiscuous mode [ 241.119772][T10291] veth1_vlan: entered promiscuous mode [ 241.203328][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 241.231983][T10291] veth0_macvtap: entered promiscuous mode [ 241.552964][T10594] netlink: 'syz.4.1125': attribute type 4 has an invalid length. [ 241.646035][T10598] netlink: 'syz.3.1128': attribute type 10 has an invalid length. [ 241.693825][T10291] veth1_macvtap: entered promiscuous mode [ 241.725220][T10602] netlink: 'syz.4.1125': attribute type 4 has an invalid length. [ 241.850874][T10598] team0: Failed to send options change via netlink (err -105) [ 241.875091][T10598] team0: Port device dummy0 added [ 241.987310][T10608] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 243.976173][T10615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1130'. [ 244.054852][T10291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.108755][T10291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.223038][ T7165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.250082][ T7165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.260773][T10620] netlink: 'syz.5.1132': attribute type 3 has an invalid length. [ 244.278998][ T7165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.287950][T10620] netlink: 'syz.5.1132': attribute type 1 has an invalid length. [ 244.311532][T10620] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1132'. [ 244.329705][T10622] geneve0: entered promiscuous mode [ 244.398820][T10620] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1132'. [ 244.401938][ T7165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.467362][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 244.548195][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1134'. [ 244.592801][T10618] tipc: Enabled bearer , priority 0 [ 244.674059][T10625] syzkaller0: entered promiscuous mode [ 244.700516][T10625] syzkaller0: entered allmulticast mode [ 244.759866][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.785998][T10618] tipc: Resetting bearer [ 244.789062][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.910253][T10617] tipc: Resetting bearer [ 245.060177][T10617] tipc: Disabling bearer [ 245.270907][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.285652][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.591950][T10644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1138'. [ 246.339537][T10678] tipc: Started in network mode [ 246.344483][T10678] tipc: Node identity 8ae889324246, cluster identity 4711 [ 246.369332][T10678] tipc: Enabled bearer , priority 0 [ 246.410433][T10678] syzkaller0: entered promiscuous mode [ 246.415976][T10678] syzkaller0: entered allmulticast mode [ 246.605693][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 246.645290][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1144'. [ 246.721054][T10696] netlink: 'syz.2.1148': attribute type 7 has an invalid length. [ 246.795476][T10690] tipc: Resetting bearer [ 246.812409][T10679] wg1 speed is unknown, defaulting to 1000 [ 246.879255][T10675] tipc: Resetting bearer [ 246.953202][T10675] tipc: Disabling bearer [ 246.991092][T10698] pim6reg: entered allmulticast mode [ 247.024654][T10707] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1151'. [ 247.059777][T10699] pim6reg: left allmulticast mode [ 247.261572][T10702] team0: Port device team_slave_0 removed [ 247.406124][T10708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.624008][T10712] wg1 speed is unknown, defaulting to 1000 [ 248.385140][T10738] wg1 speed is unknown, defaulting to 1000 [ 248.559398][T10743] tipc: Enabled bearer , priority 0 [ 248.654385][T10743] syzkaller0: entered promiscuous mode [ 248.688868][T10743] syzkaller0: entered allmulticast mode [ 248.714460][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1165'. [ 248.780114][T10743] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 248.803644][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 248.896737][T10747] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1164'. [ 248.911164][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 248.924190][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'. [ 249.073885][T10762] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 249.090119][T10762] bond4 (unregistering): Released all slaves [ 249.124102][T10757] tipc: Resetting bearer [ 249.160220][T10755] wg1 speed is unknown, defaulting to 1000 [ 249.274451][T10741] tipc: Resetting bearer [ 249.351786][T10741] tipc: Disabling bearer [ 249.421696][T10766] wg1 speed is unknown, defaulting to 1000 [ 249.514387][T10780] netlink: 'syz.3.1171': attribute type 21 has an invalid length. [ 249.606042][T10780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1171'. [ 250.632633][T10806] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 250.680779][T10808] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 250.743129][T10806] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 250.751795][T10806] syzkaller0: entered promiscuous mode [ 250.774701][T10806] syzkaller0: entered allmulticast mode [ 251.165447][T10820] netlink: 'syz.2.1183': attribute type 1 has an invalid length. [ 251.185897][T10822] netlink: 'syz.3.1182': attribute type 8 has an invalid length. [ 251.196874][T10820] netlink: 'syz.2.1183': attribute type 3 has an invalid length. [ 251.208109][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 251.219055][T10820] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1183'. [ 251.249262][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1184'. [ 251.268138][T10822] bond0: entered promiscuous mode [ 251.328317][T10822] bond_slave_0: entered promiscuous mode [ 251.361274][T10822] bond_slave_1: entered promiscuous mode [ 251.392529][T10822] veth1_to_bridge: entered promiscuous mode [ 251.414679][T10822] ip6gretap0: entered promiscuous mode [ 251.447772][T10822] debugfs: 'hsr0' already exists in 'hsr' [ 251.464752][T10822] Cannot create hsr debugfs directory [ 251.477091][T10822] hsr0: entered promiscuous mode [ 251.495954][T10826] tipc: Enabling of bearer rejected, failed to enable media [ 251.851349][T10842] netlink: 'syz.2.1187': attribute type 3 has an invalid length. [ 252.575755][T10863] tipc: Enabled bearer , priority 0 [ 252.594770][T10863] syzkaller0: entered promiscuous mode [ 252.629476][T10863] syzkaller0: entered allmulticast mode [ 252.756005][T10863] tipc: Resetting bearer [ 252.908373][T10872] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.241486][T10855] tipc: Resetting bearer [ 253.291144][T10855] tipc: Disabling bearer [ 253.773617][T10893] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1201'. [ 255.563997][T10924] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1209'. [ 255.745417][T10924] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1209'. [ 256.000257][T10919] tc_dump_action: action bad kind [ 256.206592][T10923] bond1: entered promiscuous mode [ 256.299448][T10923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.154293][T10939] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1212'. [ 257.374402][T10929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1210'. [ 257.389545][T10929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1210'. [ 257.439645][T10933] syzkaller1: entered promiscuous mode [ 257.445307][T10933] syzkaller1: entered allmulticast mode [ 257.978695][T10952] netlink: 'syz.4.1216': attribute type 1 has an invalid length. [ 258.016389][T10952] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 258.077893][T10956] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1217'. [ 259.389879][T10995] geneve0: entered promiscuous mode [ 259.413828][ T7172] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.449103][ T7172] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.480168][ T7172] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.539416][ T7172] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.603800][T10995] netlink: 'syz.4.1228': attribute type 1 has an invalid length. [ 259.713644][T10995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.724247][T11006] tipc: Enabling of bearer rejected, already enabled [ 260.204000][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 260.246623][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 260.290783][T11026] netlink: 'syz.2.1237': attribute type 12 has an invalid length. [ 260.352019][T11026] netlink: 'syz.2.1237': attribute type 11 has an invalid length. [ 260.421874][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 260.916480][T11039] wg1 speed is unknown, defaulting to 1000 [ 261.275911][T11045] netlink: 'syz.4.1241': attribute type 6 has an invalid length. [ 261.473517][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 261.482756][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.752291][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'. [ 261.777284][T11053] wg1 speed is unknown, defaulting to 1000 [ 262.236220][T11079] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1248'. [ 262.613427][T11091] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1249'. [ 263.296609][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1253'. [ 263.789475][T11118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.796813][T11118] IPv6: NLM_F_CREATE should be set when creating new route [ 263.804129][T11118] IPv6: NLM_F_CREATE should be set when creating new route [ 263.838478][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1255'. [ 263.910831][T11119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1255'. [ 263.965088][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1255'. [ 264.320327][T11130] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1257'. [ 264.409763][T11130] netlink: 'syz.3.1257': attribute type 1 has an invalid length. [ 264.459780][T11137] netlink: 'syz.5.1260': attribute type 6 has an invalid length. [ 264.790813][T11150] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1262'. [ 264.835216][T11150] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1262'. [ 264.929862][T11128] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1258'. [ 266.148133][T11174] macsec1: entered promiscuous mode [ 266.209191][T11174] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 266.239262][T11174] macsec1: entered allmulticast mode [ 266.259532][T11174] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 266.390859][T11179] netlink: 'syz.3.1270': attribute type 4 has an invalid length. [ 266.763186][T11191] netlink: 'syz.5.1273': attribute type 6 has an invalid length. [ 267.333817][T11216] __nla_validate_parse: 3 callbacks suppressed [ 267.333839][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1277'. [ 268.148073][T11236] netlink: 'syz.4.1284': attribute type 16 has an invalid length. [ 268.181601][T11236] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1284'. [ 269.250190][T11279] netlink: 'syz.5.1296': attribute type 1 has an invalid length. [ 269.436688][T11279] bond1: entered promiscuous mode [ 269.469606][T11279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.510961][T11285] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1296'. [ 269.541963][T11282] gtp1: entered promiscuous mode [ 269.646438][T11292] pimreg: entered allmulticast mode [ 269.665501][T11296] pimreg: left allmulticast mode [ 269.909507][T11299] bridge0: port 3(erspan0) entered blocking state [ 269.953096][T11305] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1301'. [ 269.967659][T11306] netlink: 'syz.5.1302': attribute type 9 has an invalid length. [ 269.999225][T11299] bridge0: port 3(erspan0) entered disabled state [ 270.006284][T11299] erspan0: entered allmulticast mode [ 270.032663][T11309] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1304'. [ 270.044470][T11301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1301'. [ 270.061054][T11299] erspan0: entered promiscuous mode [ 270.076416][T11299] bridge0: port 3(erspan0) entered blocking state [ 270.083436][T11299] bridge0: port 3(erspan0) entered forwarding state [ 270.207619][T11313] lo: entered allmulticast mode [ 270.246008][T11305] hsr_slave_0: left promiscuous mode [ 270.254814][T11305] hsr_slave_1: left promiscuous mode [ 270.692738][T11328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.730282][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1311'. [ 270.820499][T11333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1312'. [ 270.881711][T11333] tipc: Enabled bearer , priority 0 [ 270.889611][T11338] netlink: zone id is out of range [ 270.904693][T11338] netlink: zone id is out of range [ 270.919103][T11338] netlink: zone id is out of range [ 270.937268][T11338] netlink: zone id is out of range [ 270.951809][T11341] tipc: Resetting bearer [ 270.986581][T11333] syzkaller0: entered promiscuous mode [ 270.990418][T11338] netlink: zone id is out of range [ 271.008078][T11338] netlink: zone id is out of range [ 271.018034][T11338] netlink: zone id is out of range [ 271.028522][T11332] tipc: Resetting bearer [ 271.040739][T11338] netlink: zone id is out of range [ 271.057113][T11338] netlink: zone id is out of range [ 271.075334][T11332] tipc: Disabling bearer [ 271.313031][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 271.742092][T11363] netlink: 'syz.5.1320': attribute type 10 has an invalid length. [ 271.819680][T11363] bridge0: port 3(erspan0) entered disabled state [ 271.826498][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.834348][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.930043][T11363] bridge0: port 3(erspan0) entered blocking state [ 271.936708][T11363] bridge0: port 3(erspan0) entered forwarding state [ 271.943805][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.951066][T11363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.958642][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.965931][T11363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.012238][T11363] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 272.284102][T11378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1324'. [ 273.116907][T11402] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 273.199061][T11402] bridge1: entered allmulticast mode [ 273.405575][T11402] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 273.467806][T11402] bridge2: entered allmulticast mode [ 273.902752][T11438] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1337'. [ 273.921198][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 275.936005][T11439] xfrm1: entered allmulticast mode [ 276.118768][T11448] macsec3: entered promiscuous mode [ 276.191692][T11448] ip6gretap0: entered promiscuous mode [ 276.390383][T11448] ip6gretap0: left promiscuous mode [ 276.651383][T11464] wg1 speed is unknown, defaulting to 1000 [ 277.305117][T11480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1347'. [ 277.328982][T11484] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 277.358382][T11479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1347'. [ 277.399563][ T5193] udevd[5193]: worker [5821] terminated by signal 33 (Unknown signal 33) [ 278.021584][T11495] wg1 speed is unknown, defaulting to 1000 [ 278.940213][T11508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1355'. [ 279.040571][T11508] tipc: Enabled bearer , priority 0 [ 279.095810][T11508] syzkaller0: entered promiscuous mode [ 279.125542][T11508] syzkaller0: entered allmulticast mode [ 279.240364][T11508] tipc: Resetting bearer [ 279.306260][T11507] tipc: Resetting bearer [ 279.389104][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 279.403804][T11507] tipc: Disabling bearer [ 279.959969][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 280.220667][T11540] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1361'. [ 280.306607][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1361'. [ 280.409527][T11546] erspan0: left allmulticast mode [ 280.417802][T11546] erspan0: left promiscuous mode [ 280.439574][T11546] bridge0: port 3(erspan0) entered disabled state [ 280.512002][T11546] bridge_slave_1: left allmulticast mode [ 280.517746][T11546] bridge_slave_1: left promiscuous mode [ 280.603520][T11546] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.705186][T11546] bridge_slave_0: left allmulticast mode [ 280.745327][T11546] bridge_slave_0: left promiscuous mode [ 280.773903][T11546] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.122287][T11546] bond0: (slave bridge0): Releasing backup interface [ 281.264849][T11564] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1363'. [ 281.299626][T11565] netlink: 'syz.3.1363': attribute type 3 has an invalid length. [ 281.881418][T11592] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.1370'. [ 282.583513][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 282.698479][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 282.922841][T11624] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.960256][T11629] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 283.000349][T11628] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 283.064332][T11611] wg1 speed is unknown, defaulting to 1000 [ 283.819921][T11652] x_tables: duplicate underflow at hook 2 [ 283.972525][T11657] tipc: Enabling of bearer rejected, failed to enable media [ 284.532780][T11669] net_ratelimit: 10 callbacks suppressed [ 284.532796][T11669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.565520][T11670] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1391'. [ 284.579736][T11672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1392'. [ 284.660453][T11666] wg1 speed is unknown, defaulting to 1000 [ 284.666997][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 284.717250][T11672] dvmrp1: entered allmulticast mode [ 284.733271][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 284.820391][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 284.886880][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 285.345039][T11699] wg1 speed is unknown, defaulting to 1000 [ 285.638093][T11708] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1400'. [ 285.670554][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1399'. [ 285.751684][T11716] ip6t_REJECT: ECHOREPLY is not supported [ 285.840549][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1399'. [ 285.934893][T11722] nbd: socks must be embedded in a SOCK_ITEM attr [ 286.461626][T11739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1405'. [ 286.678774][T11745] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.735098][T11755] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 286.756545][T11753] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 287.000557][T11753] wg1 speed is unknown, defaulting to 1000 [ 287.107322][T11745] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.192178][T11750] wg1 speed is unknown, defaulting to 1000 [ 287.275254][T11759] wg1 speed is unknown, defaulting to 1000 [ 287.363056][T11745] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.582267][T11745] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.795514][T11772] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 288.137799][ T7165] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.211730][ T7167] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.273556][ T1152] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.329517][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.481069][T11811] netlink: 'syz.3.1425': attribute type 11 has an invalid length. [ 289.775683][T11815] __nla_validate_parse: 7 callbacks suppressed [ 289.775703][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 290.154807][T11828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1432'. [ 290.196325][T11828] tipc: Enabled bearer , priority 0 [ 290.232077][T11828] syzkaller0: entered promiscuous mode [ 290.237633][T11828] syzkaller0: entered allmulticast mode [ 290.399496][T11828] tipc: Resetting bearer [ 290.511465][T11826] tipc: Resetting bearer [ 290.517656][T11846] netlink: 'syz.2.1437': attribute type 4 has an invalid length. [ 290.754989][T11826] tipc: Disabling bearer [ 291.312998][T11861] veth0_to_bond: entered allmulticast mode [ 292.020471][T11887] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1450'. [ 292.034670][T11887] tipc: Enabled bearer , priority 0 [ 292.042724][T11887] syzkaller0: entered promiscuous mode [ 292.048366][T11887] syzkaller0: entered allmulticast mode [ 292.116533][T11887] tipc: Resetting bearer [ 292.193989][T11885] tipc: Resetting bearer [ 292.316810][T11885] tipc: Disabling bearer [ 292.402643][T11896] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 292.411658][T11891] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1452'. [ 292.740698][T11905] bridge3: entered promiscuous mode [ 292.762258][T11906] nbd: must specify a device to reconfigure [ 292.780026][T11905] bridge3: entered allmulticast mode [ 292.863538][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 293.183294][T11919] netlink: 'syz.4.1460': attribute type 5 has an invalid length. [ 293.206693][T11916] wg1 speed is unknown, defaulting to 1000 [ 294.035460][T11929] wg1 speed is unknown, defaulting to 1000 [ 294.139241][T11928] wg1 speed is unknown, defaulting to 1000 [ 294.281932][T11937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1466'. [ 294.292687][T11937] tipc: Enabling of bearer rejected, already enabled [ 295.682989][T11963] netlink: 'syz.2.1471': attribute type 13 has an invalid length. [ 295.700344][T11963] netlink: 'syz.2.1471': attribute type 17 has an invalid length. [ 295.719565][T11957] wg1 speed is unknown, defaulting to 1000 [ 295.998094][T11963] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.091874][T11963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.146139][T11956] wg1 speed is unknown, defaulting to 1000 [ 296.340639][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 296.381597][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1472'. [ 296.426091][T11964] wg1 speed is unknown, defaulting to 1000 [ 296.636000][T11970] netlink: 5248 bytes leftover after parsing attributes in process `syz.4.1473'. [ 297.240952][T11980] netlink: 'syz.6.1477': attribute type 10 has an invalid length. [ 297.295293][T11980] netlink: 'syz.6.1477': attribute type 10 has an invalid length. [ 297.337675][T11985] team0: Device ipip0 is of different type [ 297.868790][T11998] wg1 speed is unknown, defaulting to 1000 [ 298.292885][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'. [ 298.350437][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'. [ 298.488645][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'. [ 298.613001][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'. [ 298.708509][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'. [ 298.846219][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'. [ 298.889947][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'. [ 299.167156][T12013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.347085][T12016] wg1 speed is unknown, defaulting to 1000 [ 300.460506][T12047] tipc: Enabled bearer , priority 0 [ 300.511792][T12047] syzkaller0: entered promiscuous mode [ 300.536859][T12047] syzkaller0: entered allmulticast mode [ 300.645829][T12047] tipc: Resetting bearer [ 300.816185][T12046] tipc: Resetting bearer [ 300.894266][T12046] tipc: Disabling bearer [ 300.961043][T12068] IPVS: persistence engine module ip_vs_pe_ not found [ 301.161991][T12073] wg1 speed is unknown, defaulting to 1000 [ 301.355117][T12081] netlink: 'syz.4.1500': attribute type 4 has an invalid length. [ 301.364343][T12076] netlink: 'syz.5.1498': attribute type 1 has an invalid length. [ 302.507033][T12115] __nla_validate_parse: 13 callbacks suppressed [ 302.507054][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 302.781649][T12130] dummy0: entered promiscuous mode [ 302.788692][T12128] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1512'. [ 302.810883][T12130] batadv_slave_0: entered promiscuous mode [ 302.836921][T12130] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.852526][T12130] hsr1: entered allmulticast mode [ 302.857768][T12130] dummy0: entered allmulticast mode [ 302.863239][T12130] batadv_slave_0: entered allmulticast mode [ 302.872620][T12132] netlink: 'syz.5.1513': attribute type 1 has an invalid length. [ 302.932983][T12132] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1513'. [ 303.152186][T12139] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1516'. [ 304.373133][T12169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1522'. [ 306.026197][T12178] veth1_to_team: entered promiscuous mode [ 306.058331][T12178] debugfs: 'hsr1' already exists in 'hsr' [ 306.079068][T12178] Cannot create hsr debugfs directory [ 306.086075][T12178] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 306.109048][T12178] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 306.131871][T12178] hsr1: entered allmulticast mode [ 306.147306][T12178] veth1_to_team: entered allmulticast mode [ 306.203786][T12178] bond0: entered allmulticast mode [ 306.230822][T12178] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 306.263762][T12195] IPVS: length: 219 != 8 [ 306.386195][T12197] Cannot find set identified by id 3 to match [ 306.477287][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1530'. [ 306.528833][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1530'. [ 306.571111][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1532'. [ 306.585113][T12209] sctp: [Deprecated]: syz.4.1531 (pid 12209) Use of int in maxseg socket option. [ 306.585113][T12209] Use struct sctp_assoc_value instead [ 306.878312][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1533'. [ 307.012830][T12227] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 307.042792][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1535'. [ 322.922779][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 322.933316][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 350.592522][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 376.669253][ T31] INFO: task syz.1.968:9888 blocked for more than 143 seconds. [ 376.676885][ T31] Not tainted syzkaller #0 [ 376.682024][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.692085][ T31] task:syz.1.968 state:D stack:25896 pid:9888 tgid:9886 ppid:5820 task_flags:0x400140 flags:0x00080002 [ 376.704198][ T31] Call Trace: [ 376.707520][ T31] [ 376.712348][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 376.716945][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.722447][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.727372][ T31] ? __pfx___schedule+0x10/0x10 [ 376.750092][ T31] ? schedule+0x91/0x360 [ 376.754446][ T31] schedule+0x165/0x360 [ 376.758669][ T31] schedule_preempt_disabled+0x13/0x30 [ 376.809248][ T31] __mutex_lock+0x7e6/0x1350 [ 376.849140][ T31] ? __mutex_lock+0x5bb/0x1350 [ 376.854000][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 376.906606][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 376.940585][ T31] ? stack_trace_save+0x9c/0xe0 [ 376.945538][ T31] ? stack_depot_save_flags+0x40/0x860 [ 376.969364][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 376.974841][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 377.008956][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 377.015635][ T31] ? kmalloc_reserve+0x136/0x290 [ 377.058982][ T31] ? __alloc_skb+0x142/0x2d0 [ 377.063670][ T31] ? netlink_dump+0x1b7/0xe90 [ 377.068385][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 377.128902][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 377.134881][ T31] ? genl_rcv_msg+0x5da/0x790 [ 377.168896][ T31] ? netlink_rcv_skb+0x208/0x470 [ 377.174013][ T31] ? genl_rcv+0x28/0x40 [ 377.178200][ T31] ? netlink_unicast+0x82f/0x9e0 [ 377.249076][ T31] ? netlink_sendmsg+0x805/0xb30 [ 377.254109][ T31] ? __sock_sendmsg+0x21c/0x270 [ 377.289127][ T31] ? ____sys_sendmsg+0x505/0x830 [ 377.294164][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 377.326498][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 377.358934][ T31] ? do_syscall_64+0xfa/0xfa0 [ 377.363721][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.398945][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 377.405592][ T31] ? rcu_is_watching+0x15/0xb0 [ 377.448980][ T31] ? trace_kmalloc+0x1f/0xd0 [ 377.453658][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 377.499203][ T31] ? __build_skb_around+0x257/0x3e0 [ 377.504530][ T31] genl_dumpit+0x108/0x1b0 [ 377.538966][ T31] netlink_dump+0x6e1/0xe90 [ 377.543589][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 377.548694][ T31] ? genl_start+0x499/0x6c0 [ 377.598986][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 377.604286][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 377.678904][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 377.685239][ T31] ? genl_get_cmd+0x496/0x910 [ 377.718920][ T31] ? __pfx_genl_start+0x10/0x10 [ 377.723864][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 377.743071][ T31] ? __pfx_genl_done+0x10/0x10 [ 377.747947][ T31] genl_rcv_msg+0x5da/0x790 [ 377.764823][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.770043][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 377.776597][ T31] ? __asan_memcpy+0x40/0x70 [ 377.781338][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 377.786770][ T31] netlink_rcv_skb+0x208/0x470 [ 377.791772][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.796685][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.801812][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.807182][ T31] ? down_read+0x1ad/0x2e0 [ 377.811750][ T31] genl_rcv+0x28/0x40 [ 377.815776][ T31] netlink_unicast+0x82f/0x9e0 [ 377.820677][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 377.826027][ T31] ? netlink_sendmsg+0x642/0xb30 [ 377.831090][ T31] ? skb_put+0x11b/0x210 [ 377.835389][ T31] netlink_sendmsg+0x805/0xb30 [ 377.841164][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.846527][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 377.851969][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.857324][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.862754][ T31] __sock_sendmsg+0x21c/0x270 [ 377.867482][ T31] ____sys_sendmsg+0x505/0x830 [ 377.872990][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.878355][ T31] ? import_iovec+0x74/0xa0 [ 377.883173][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 377.887917][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.893306][ T31] ? futex_wake+0x4b2/0x560 [ 377.897923][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 377.902981][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.908518][ T31] ? do_syscall_64+0xbe/0xfa0 [ 377.913405][ T31] do_syscall_64+0xfa/0xfa0 [ 377.917974][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.923484][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.929704][ T31] ? clear_bhb_loop+0x60/0xb0 [ 377.934507][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.941106][ T31] RIP: 0033:0x7fd14138eec9 [ 377.945643][ T31] RSP: 002b:00007fd14220e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.961935][ T31] RAX: ffffffffffffffda RBX: 00007fd1415e5fa0 RCX: 00007fd14138eec9 [ 377.970135][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 377.983015][ T31] RBP: 00007fd141411f91 R08: 0000000000000000 R09: 0000000000000000 [ 377.991218][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.999328][ T31] R13: 00007fd1415e6038 R14: 00007fd1415e5fa0 R15: 00007ffcf761f818 [ 378.007377][ T31] [ 378.010601][ T31] [ 378.010601][ T31] Showing all locks held in the system: [ 378.019984][ T31] 1 lock held by ksoftirqd/1/23: [ 378.024974][ T31] #0: ffff8880b873a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 378.048233][ T31] 1 lock held by khungtaskd/31: [ 378.053239][ T31] #0: ffffffff8e13a960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 378.063279][ T31] 2 locks held by getty/5580: [ 378.067996][ T31] #0: ffff88814e0fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 378.078319][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 378.088728][ T31] 4 locks held by syz-executor/5825: [ 378.094359][ T31] #0: ffff888031aa4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 378.105925][ T31] #1: ffff888031aa40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 378.116370][ T31] #2: ffffffff8f63ce08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 378.127031][ T31] #3: ffff88802736a338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 378.136856][ T31] 3 locks held by kworker/0:5/5916: [ 378.143402][ T31] #0: ffff88801a481148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.155824][ T31] #1: ffffc9000ab8fba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.166366][ T31] #2: ffffffff8e1403f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 378.177486][ T31] 2 locks held by syz.0.920/9695: [ 378.182596][ T31] #0: ffffffff8f539750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.191044][ T31] #1: ffffffff8e41f788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 378.201482][ T31] 3 locks held by syz.1.968/9888: [ 378.206555][ T31] #0: ffffffff8f539750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.215087][ T31] #1: ffff8880764df6e0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 378.225710][ T31] #2: ffffffff8e41f788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 378.236464][ T31] 1 lock held by syz-executor/10146: [ 378.241922][ T31] #0: ffffffff8e1403f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 378.279111][ T31] [ 378.281505][ T31] ============================================= [ 378.281505][ T31] [ 378.299606][ T31] NMI backtrace for cpu 1 [ 378.299634][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 378.299658][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.299677][ T31] Call Trace: [ 378.299686][ T31] [ 378.299696][ T31] dump_stack_lvl+0x189/0x250 [ 378.299728][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.299750][ T31] ? __pfx__printk+0x10/0x10 [ 378.299788][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 378.299818][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 378.299847][ T31] ? __pfx__printk+0x10/0x10 [ 378.299875][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.299908][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 378.299938][ T31] watchdog+0xf93/0xfe0 [ 378.299975][ T31] ? watchdog+0x1de/0xfe0 [ 378.300013][ T31] kthread+0x711/0x8a0 [ 378.300042][ T31] ? __pfx_watchdog+0x10/0x10 [ 378.300071][ T31] ? __pfx_kthread+0x10/0x10 [ 378.300098][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.300128][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.300158][ T31] ? __pfx_kthread+0x10/0x10 [ 378.300183][ T31] ret_from_fork+0x4b9/0x870 [ 378.300219][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 378.300261][ T31] ? __switch_to_asm+0x39/0x70 [ 378.300284][ T31] ? __switch_to_asm+0x33/0x70 [ 378.300307][ T31] ? __pfx_kthread+0x10/0x10 [ 378.300333][ T31] ret_from_fork_asm+0x1a/0x30 [ 378.300378][ T31] [ 378.300385][ T31] Sending NMI from CPU 1 to CPUs 0: [ 378.449506][ C0] NMI backtrace for cpu 0 [ 378.449525][ C0] CPU: 0 UID: 0 PID: 7167 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 378.449554][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.449566][ C0] Workqueue: krdsd rds_connect_worker [ 378.449591][ C0] RIP: 0010:__kernel_text_address+0xd/0x40 [ 378.449618][ C0] Code: e8 18 59 98 00 eb b3 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 53 48 89 fb e8 43 00 00 00 <85> c0 0f 95 c0 48 81 fb 00 50 ff 90 0f 93 c1 48 81 fb 70 c6 15 91 [ 378.449634][ C0] RSP: 0018:ffffc9001a276ef8 EFLAGS: 00000002 [ 378.449648][ C0] RAX: 0000000000000001 RBX: ffffffff89bb58eb RCX: e88cccfc4b327e01 [ 378.449661][ C0] RDX: 0000000000000008 RSI: ffffffff8d9c68ab RDI: ffffffff89bb58eb [ 378.449674][ C0] RBP: ffffc9001a276fb0 R08: ffffc9001a2774f0 R09: 0000000000000000 [ 378.449686][ C0] R10: ffffc9001a276f78 R11: fffff5200344edf1 R12: ffff8880338d8000 [ 378.449699][ C0] R13: ffff88802f72e000 R14: dffffc0000000000 R15: 1ffff9200344edee [ 378.449712][ C0] FS: 0000000000000000(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 378.449727][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.449738][ C0] CR2: 0000564bdd13af70 CR3: 000000000df36000 CR4: 00000000003526f0 [ 378.449755][ C0] Call Trace: [ 378.449761][ C0] [ 378.449770][ C0] unwind_get_return_address+0x4d/0x90 [ 378.449790][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 378.449811][ C0] arch_stack_walk+0xfc/0x150 [ 378.449834][ C0] ? tcp_rcv_state_process+0x2a0b/0x44d0 [ 378.449858][ C0] stack_trace_save+0x9c/0xe0 [ 378.449877][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 378.449910][ C0] ? __lock_acquire+0xab9/0xd20 [ 378.449937][ C0] kasan_save_stack+0x3e/0x60 [ 378.449953][ C0] ? kasan_save_stack+0x3e/0x60 [ 378.449968][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 378.449992][ C0] ? insert_work+0x3d/0x330 [ 378.450015][ C0] ? __queue_work+0xbaf/0xfb0 [ 378.450029][ C0] ? queue_delayed_work_on+0x18b/0x280 [ 378.450046][ C0] ? rds_connect_path_complete+0x276/0x400 [ 378.450064][ C0] ? rds_tcp_state_change+0x1b8/0x200 [ 378.450117][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 378.450142][ C0] insert_work+0x3d/0x330 [ 378.450169][ C0] __queue_work+0xbaf/0xfb0 [ 378.450193][ C0] ? __queue_work+0x102/0xfb0 [ 378.450213][ C0] queue_delayed_work_on+0x18b/0x280 [ 378.450234][ C0] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 378.450260][ C0] rds_connect_path_complete+0x276/0x400 [ 378.450279][ C0] ? rds_connect_path_complete+0xc5/0x400 [ 378.450298][ C0] ? __pfx_sock_def_wakeup+0x10/0x10 [ 378.450318][ C0] rds_tcp_state_change+0x1b8/0x200 [ 378.450351][ C0] tcp_rcv_state_process+0x2a0b/0x44d0 [ 378.450379][ C0] ? __pfx_do_softirq+0x10/0x10 [ 378.450405][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 378.450430][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 378.450456][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.450491][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 378.450519][ C0] tcp_v4_do_rcv+0x3f2/0xce0 [ 378.450548][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 378.450572][ C0] __release_sock+0x265/0x3a0 [ 378.450593][ C0] release_sock+0x5f/0x1f0 [ 378.450617][ C0] inet_stream_connect+0x89/0xa0 [ 378.450641][ C0] kernel_connect+0x116/0x180 [ 378.450660][ C0] ? __pfx_kernel_connect+0x10/0x10 [ 378.450685][ C0] ? rds_tcp_conn_path_connect+0x4fe/0x680 [ 378.450714][ C0] rds_tcp_conn_path_connect+0x512/0x680 [ 378.450742][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 378.450773][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 378.450805][ C0] rds_connect_worker+0x1d8/0x290 [ 378.450823][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 378.450851][ C0] process_scheduled_works+0xade/0x17b0 [ 378.450895][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.450932][ C0] worker_thread+0x8a0/0xda0 [ 378.450975][ C0] kthread+0x711/0x8a0 [ 378.450996][ C0] ? __pfx_worker_thread+0x10/0x10 [ 378.451023][ C0] ? __pfx_kthread+0x10/0x10 [ 378.451050][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.451074][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.451099][ C0] ? __pfx_kthread+0x10/0x10 [ 378.451119][ C0] ret_from_fork+0x4b9/0x870 [ 378.451147][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 378.451178][ C0] ? __switch_to_asm+0x39/0x70 [ 378.451198][ C0] ? __switch_to_asm+0x33/0x70 [ 378.451246][ C0] ? __pfx_kthread+0x10/0x10 [ 378.451266][ C0] ret_from_fork_asm+0x1a/0x30 [ 378.451297][ C0] [ 379.055961][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 379.062910][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 379.072054][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 379.082152][ T31] Call Trace: [ 379.085460][ T31] [ 379.088426][ T31] dump_stack_lvl+0x99/0x250 [ 379.093051][ T31] ? __asan_memcpy+0x40/0x70 [ 379.097690][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.102923][ T31] ? __pfx__printk+0x10/0x10 [ 379.107572][ T31] vpanic+0x281/0x750 [ 379.111605][ T31] ? __pfx_vpanic+0x10/0x10 [ 379.116150][ T31] ? preempt_schedule+0xae/0xc0 [ 379.121053][ T31] ? preempt_schedule_common+0x83/0xd0 [ 379.126573][ T31] panic+0xb9/0xc0 [ 379.130361][ T31] ? __pfx_panic+0x10/0x10 [ 379.134828][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 379.140255][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 379.146461][ T31] watchdog+0xfd2/0xfe0 [ 379.150674][ T31] ? watchdog+0x1de/0xfe0 [ 379.155060][ T31] kthread+0x711/0x8a0 [ 379.159257][ T31] ? __pfx_watchdog+0x10/0x10 [ 379.163973][ T31] ? __pfx_kthread+0x10/0x10 [ 379.168629][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.173873][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.179121][ T31] ? __pfx_kthread+0x10/0x10 [ 379.183757][ T31] ret_from_fork+0x4b9/0x870 [ 379.188401][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 379.193577][ T31] ? __switch_to_asm+0x39/0x70 [ 379.198443][ T31] ? __switch_to_asm+0x33/0x70 [ 379.203249][ T31] ? __pfx_kthread+0x10/0x10 [ 379.207883][ T31] ret_from_fork_asm+0x1a/0x30 [ 379.212706][ T31] [ 379.216057][ T31] Kernel Offset: disabled [ 379.220410][ T31] Rebooting in 86400 seconds..