last executing test programs: 24.331512697s ago: executing program 3 (id=2836): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x8, 0x7, 0x61, @mcast1, @mcast1, 0x80, 0x1, 0x6, 0xf02c13a}}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x28, 0x26, 0x420, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x14, 0x2}, {0xb, 0x8}, {0x1ffe6, 0x19}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24000885) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="b1ed3a2a919b6f956d8ecb2480a15130a1b7bab56a029a5ba87653634360f33b6544a76a449e3e0e9778b66b49cbd6496dbcc8a94a5fe241e3bcb75e2d9863ac29e9c578116d1f8a8dcc63af6b5edeefe90f2a3bc9e0f1fa7771219b6e0da99877075fa13fbe1daa397e572e83e2a613575ce93d8ac9f7e04d8b843a9cf4557b7d3f82fd8a8bf5125de031632780c52d0870ab56df3e19ebc610b205", 0x9c) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x16}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x860}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x7, 0x614, 0x2, {r3, r4/1000+10000}, {0x77359400}, {0x2}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "72eb60e03f3e8204"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)) r5 = accept4$llc(r0, &(0x7f00000005c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000600)=0x10, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r6, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x66}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4060}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) close(r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r6, 0x11a, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4830}, 0x20006800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a00)="d81ce39b31f4e86e94c9a4f112f278e8a8d174d01f93d032a030aa2aa9b8124cd81dfcd4f35580aaf3e613d7bad0d00479cfa0843e2d59f4e8c0333d1b0a747c18af0d54f9c9b9bad42a6f5cbd980e814d7182916bc6b12b7673c257f4cf0420724c9e8ca956aa00c5ebb44224b84e7bda026a6fcaa86baf60d82b9eed6ce2d1f3c72372eca519713abdb4fe6f3f52fe5c39d480f3bc6e2ac4", 0x99, 0x44, &(0x7f0000000ac0)={0xa, 0x4e23, 0x1a, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@struct={0xd, 0x3, 0x0, 0x4, 0x0, 0xd92, [{0x7, 0x1}, {0x1, 0x2, 0x10000}, {0xe, 0x4, 0x8c09}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x7f}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000d00)=""/114, 0x89, 0x72, 0x0, 0x9}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0x20, &(0x7f0000000fc0)={&(0x7f0000000e40)=""/143, 0x8f, 0x0, &(0x7f0000000f00)=""/152, 0x98}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0x17, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x0, 0x0, 0x7, 0x8, 0x0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001100)='syzkaller\x00', 0x9, 0x28, &(0x7f0000001140)=""/40, 0x41000, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000011c0)={0x3, 0x0, 0x64ea, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000001200)=[0x1], &(0x7f0000001240)=[{0x5, 0x5, 0xe, 0x2}, {0x1, 0x3, 0x0, 0x5}, {0x4, 0x3, 0xe, 0x5}, {0x3, 0x4, 0x9, 0xc}], 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x7, 0x7, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000c00)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x2c, '\x00', r1, @fallback=0x2e, r9, 0x8, &(0x7f0000000dc0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0x3, 0x8, 0x6}, 0x10, r10, r11, 0x4, &(0x7f0000001400)=[r12], &(0x7f0000001440)=[{0x2, 0x2, 0x6, 0x7}, {0x0, 0x1, 0x9, 0x5}, {0x3, 0x5, 0x4, 0x3}, {0x3, 0x1, 0x5, 0x3}], 0x10, 0x9}, 0x94) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001580)={0x13c, r6, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x15}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "18cc21c428"}, @NL80211_ATTR_KEY={0x84, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xf, 0x4, "df1a7bcd8c3a9c819cb5b8"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5cdd636dd89b8a6dfa70255f0c"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bdec81791618949f2dcb840153"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a822dadb01"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2825efda5f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3cf1b87a6362a893a640801cd9"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "49c54e82a1"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6e80}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0xc040) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x15, 0x28, &(0x7f0000001740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x60ee}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x622}, @ldst={0x0, 0x2, 0x3, 0x3, 0xc955d1d777ee1ccd, 0x10}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6}]}, &(0x7f0000001880)='syzkaller\x00', 0x8, 0x84, &(0x7f00000018c0)=""/132, 0x41100, 0x4, '\x00', r1, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001980)={0x0, 0x6, 0x2c02, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000019c0)=[r12], &(0x7f0000001a00)=[{0x3, 0x1, 0xc, 0x3}, {0x1, 0x5, 0xd, 0x2}, {0x0, 0x3, 0x4, 0x2}, {0x3, 0x4, 0x8, 0x2}, {0x3, 0x1, 0x8, 0x6}, {0x5, 0x2, 0xf, 0x4}, {0x1, 0x5, 0x9, 0x9}, {0x1, 0x5, 0x0, 0xb}, {0x3, 0x1, 0x4, 0x1}], 0x10, 0x80}, 0x94) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r13, 0x8008f512, &(0x7f0000001b80)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)=r13}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002180)={0x6, 0x20, &(0x7f0000001d00)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r12}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000001e00)='GPL\x00', 0x7fff, 0xc6, &(0x7f0000001e40)=""/198, 0x40f00, 0x2a, '\x00', r1, 0x25, r9, 0x8, &(0x7f0000001f40)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001f80)={0x5, 0x7, 0xa, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002100)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r12, r9, r12, r8], &(0x7f0000002140)=[{0x0, 0x1, 0xd, 0x2}], 0x10, 0x2}, 0x94) 24.23921436s ago: executing program 3 (id=2838): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd29, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x41}, 0x2040) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffef7}}, @TCA_STAB={0x9a83c187102aa54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x5, 0x7, 0x0, 0x9, 0x2d, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x58}}, 0x0) 24.107523006s ago: executing program 3 (id=2841): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xcc}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000640)={{r3, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1c000000000000, 0xd9, 0x101, 0x4, 0x87, 0x97, 0xa, 0x7, 0x8000000000000001, 0x8}}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f00000003c0)=""/220, &(0x7f00000004c0)=0xdc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002080, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f"], 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r7, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r9}, 0x99) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r7, &(0x7f0000000600), &(0x7f0000000340)=@udp=r8, 0x1}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0xc6e9f000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0xffffe000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x7, 0x0, 0xff, 0x5, 0x8ce, 0x7}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r11, 0x0) pipe(&(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x1a, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x863, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x7, 0xd4, &(0x7f0000001740)=""/212, 0x40f00, 0x2, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000001840)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001880)={0x0, 0x10, 0xbc, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001900)=[r7, r10, r11, r12], &(0x7f0000001940)=[{0x4, 0x1, 0x2, 0xa}, {0x3, 0x5, 0x3, 0x7}, {0x3, 0x3, 0x0, 0xb}, {0x5, 0x5, 0x7, 0x3}], 0x10, 0x1}, 0x94) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) 23.863794627s ago: executing program 3 (id=2842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffd, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0xa, 0x3, 0xff) close(0x3) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) recvmmsg(r5, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000322, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0xe5, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0xff, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x20, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000800)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f00000017c0)={0x12c, 0xd, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x4}, {0x4}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc8c}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x80, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4a}]}, {0x4}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x12c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r12 = socket(0x2b, 0x80801, 0x1) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) 22.914160022s ago: executing program 3 (id=2857): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x9}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x7149bd4d720827d9, 0x0) 22.795316029s ago: executing program 3 (id=2860): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xb, 0x1ff, 0x7}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="fbe2105da323e9b6749c69a5e29af5a0", 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40, 0x0, r0, 0xfffffffa, '\x00', 0x0, r0, 0x4, 0x1}, 0x50) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@loopback, 0x0}, &(0x7f0000000380)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x20, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2c7e6909}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x90}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0xe1, &(0x7f0000000240)=""/225, 0x41100, 0x0, '\x00', r2, 0x0, r0, 0x8, &(0x7f00000003c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x1, 0x96, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000480)=[{0x1, 0x2, 0xc, 0x6}, {0x0, 0x5, 0x10}, {0x4, 0x4, 0x7, 0x7}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@ifindex=r2, 0x2b, 0x0, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0xd3, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map=r3, r0, 0x25, 0x20, r3, @void, @void, @void, @value=r6, r5}, 0x20) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) recvfrom(r0, &(0x7f0000000a80)=""/4096, 0x1000, 0x0, &(0x7f0000001a80)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x80) r8 = openat$cgroup_ro(r0, &(0x7f0000001b00)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x3) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r8) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001f40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001bc0)={0x30c, r9, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff}}}}, [@NL80211_ATTR_TID_CONFIG={0x2ec, 0x11d, 0x0, 0x1, [{0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x230, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfff8, 0x9, 0x0, 0xe, 0x1, 0x400, 0x8]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x5}, {0x7, 0x6}, {0x6, 0x3}, {0x6, 0x3}, {0x2, 0x2}, {0x6, 0x9}, {0x5, 0x8}, {0x0, 0x4}, {0x3, 0x8}, {0x4, 0x1}, {0x4, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x3, 0x5}, {0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x7}, {0x2}, {0x0, 0x8}, {0x6, 0xa}, {0x1, 0x5}, {0x4, 0x6}, {0x2, 0xa}, {0x5, 0x2}, {0x3, 0x6}, {0x5, 0x5}, {0x4, 0x3}, {0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x3}, {0x7, 0x1}, {0x2, 0x4}, {0x3, 0x3}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xd, 0x40, 0x5, 0x1000, 0x7, 0x894e, 0x8000]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{}, {0x2, 0x6}, {0x6, 0x5}, {0x7, 0x6}, {0x7, 0x9}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x6}, {0x0, 0x5}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0xa}, {0x2, 0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x3, 0x7}, {0x0, 0x8}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x401, 0xc, 0x8, 0xff, 0x3, 0x5, 0x6]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x3, 0x6, 0xff64, 0x6, 0x80, 0x3e9, 0xfff7]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x6}, {0x0, 0x9}, {0x1, 0x7}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x6, 0x2, 0x2, 0x33, 0x24, 0x60, 0xb53ee109ffdde660, 0xc, 0x6c, 0x4, 0xb, 0x4, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x7}, {0x1, 0x8}, {0x6, 0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x6, 0x6}, {0x2, 0x7}, {0x7, 0x4}, {0x4}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {}, {0x5, 0x4}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x5}, {0x5}, {0x5, 0x7}, {0x3, 0x9}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x3}, {0x7, 0x8}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0xa}, {0x4, 0x7}, {0x1, 0x2}, {0x7, 0xa}, {0x4, 0x5}, {0x2, 0x2}, {0x6, 0xa}, {0x3, 0x4}, {0x7, 0x1}]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x48, 0x30, 0x9, 0x5, 0x24, 0x6c, 0x1, 0x4, 0x4, 0x18, 0x24, 0x60, 0x9, 0x12, 0x24, 0x4, 0x2, 0x6, 0x60, 0x6, 0x5, 0x16, 0x6, 0x60, 0x12, 0x4, 0x48, 0x9, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x3}, {0x6, 0x5}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x3}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x8}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0x3}, {0x1, 0x5}, {0x1}, {0x1, 0x7}, {0x4, 0x8}, {0x6, 0x2}, {0x6, 0x1}, {0x5, 0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x7}, {0x2, 0x6}, {0x5, 0xa}, {0x6, 0x7}, {0x6, 0x6}, {0x2, 0x3}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0x8}, {}, {0x7, 0x2}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x1}, {0x4, 0x4}, {0x7, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x0, 0x3, 0xc, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x10, 0x2, 0x6, 0x200, 0x14cf, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x1, 0x9}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0xa}, {0x7, 0x4}, {0x5, 0x8}, {0x4}, {0x6}, {0x5, 0x6}, {0x4, 0xa}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0x5}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x4}, {0x5, 0x4}, {0x3, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x2}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x8}, {0x6}, {0x0, 0x6}, {0x1, 0x2}, {0x1}, {0x3, 0x6}, {0x5, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x4}, {0x5, 0x8}, {0x3}, {0x3, 0x2}, {0x7, 0x8}, {0x4, 0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x8}, {0x7, 0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xfff8, 0x3, 0x3ff, 0x9, 0x7, 0x3, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x7, 0x80, 0x4, 0x7, 0x9, 0xcf2, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x14}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x24}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000001f80)={'NETMAP\x00'}, &(0x7f0000001fc0)=0x1e) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) close(r1) socket$xdp(0x2c, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000002040)) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000002080)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r8, 0x111, 0x2, 0x0, 0x4) r11 = accept4(r10, 0x0, &(0x7f00000020c0), 0x80000) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002200)={'syztnl1\x00', &(0x7f0000002180)={'syztnl1\x00', r2, 0x2f, 0x7, 0x1, 0x0, 0x1c, @dev={0xfe, 0x80, '\x00', 0x2b}, @local, 0x10, 0x1, 0xfffffffe, 0xbe}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000002480)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002240)={0x1fc, r12, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4044}, 0x4) sendmsg$NL80211_CMD_DEL_KEY(r11, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x98, r9, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "02091c9196"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5802}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "549c63a53f8257b41927c1752c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x20010000}, 0x60400c0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r10, 0xf505, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r14, &(0x7f00000027c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0x84, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 22.654159163s ago: executing program 4 (id=2863): unshare(0x64000600) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44890) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xfffffffffffffffd, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0x1}, {0xe}, {0xfff1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8020}, 0x4000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000320e0000850000001700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f780000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r11, 0x1, 0xd8, 0x6, @remote}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r13) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 20.631910208s ago: executing program 4 (id=2879): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) socket$alg(0x26, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x88) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 20.629349565s ago: executing program 0 (id=2880): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10"], 0x10}, 0xa00}], 0x1, 0x4000000) 20.556356102s ago: executing program 2 (id=2881): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) unshare(0x60020800) (async) unshare(0x60020800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) (async) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1d, 0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1d, 0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f795e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e2215093420ac13f1ea1890005ddcf053601bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fc"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000200)=0x4) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendto$inet(r6, 0x0, 0x0, 0x40, 0x0, 0x0) 20.408091322s ago: executing program 0 (id=2882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r1, 0x29, 0x3e, 0x0, &(0x7f0000000740)) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000040)="5f7dda211a53842e39a48ea2fec88b8cd5609fbe8fd8b99b60391e58e41d92e32441a2f793c777f4af9604351e3173e3b12a3b3be5018c24f555fecd768df451d2e168391b5ca1a4d8d3ba1d24896f0f97967dcea5") sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) sendto$packet(r2, &(0x7f0000000800)="cf8eb673595d8fbf0693d1c13a32bd944f39ac02ddb577c6f3", 0x19, 0x890, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 20.360846981s ago: executing program 4 (id=2883): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000012c0), &(0x7f0000001300)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0xb, 0x4}, {0x9, 0x2}, {0x8, 0x2}, {0xf, 0x1}, {0xd, 0x4}, {0x1}, {0xb, 0x3}, {0x6, 0x1}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x0, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000ec0)=""/225, 0x75, 0xe1, 0x0, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x5, 0x550, 0x2, 0x3, 0x1, 0x1, 0xffff0000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x9, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, [@exit, @call={0x85, 0x0, 0x0, 0x6a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000e00)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000002380)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001000)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001100)=[r5, r2], &(0x7f00000011c0)=[{0x3, 0x2, 0x7, 0x3}, {0x1, 0x3, 0x9, 0x8}], 0x10, 0x1}, 0x94) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="200000000000000029000000360000003c01000000000000010009000502000418000000000000002900360001001600000000000000400000000000000029000000360000003304000000000000000041c9102001000000000000000000000000000200000000cb5c6095c57dd1aaea2edc4abd4291ba4baa1ee2be97ae8a9e043d6ca77312c677716ccf19cec84e0343f68aec00e5fe6389d87a270c5f38c02ec3d3512afc0bab68fb2a212b1262e765f468c139540b36"], 0x78}}], 0x2, 0x4040005) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000107000004416f1800000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r8, 0x112, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 20.338728839s ago: executing program 2 (id=2884): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f00000005c0)=""/261, 0x105}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000700)=""/232, 0xe8}], 0x4}, 0x10000) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0xd, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x3, 0x0}}}, 0x24) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) getpeername(r1, &(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000100)=0x80) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @dev}, &(0x7f0000000080)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000003080)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000380)="3ab0cce7e5", 0x5}], 0x1, 0x0, 0x0, 0x40001}}, {{&(0x7f0000001c80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001e80)=[{0x0}, {&(0x7f0000001e00)="d6ff25626d23", 0x6}], 0x2}}], 0x2, 0x20008040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1700000056000100000000000000000007"], 0x38}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') unshare(0x6a040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0103000000000071a30353"], 0x14}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40084) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x50}, 0x48) 19.777366273s ago: executing program 4 (id=2887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff0}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@remote, @dev, 0x0}, &(0x7f0000000300)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x1, 0x0}, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000003c0)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xb0}], &(0x7f0000000400)='GPL\x00', 0x2, 0xd8, &(0x7f0000000440)=""/216, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xc, 0x274f, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1]}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x5}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x16, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x9, 0x3, 0x2, 0x7ff, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0x13, &(0x7f0000000280)=""/19, 0x41100, 0x5, '\x00', r3, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x1, 0xfffffffa, 0x80}, 0x10, r4, r5, 0x8, &(0x7f00000007c0)=[0x1, r6, r7, r8], &(0x7f0000000800)=[{0x4, 0x2, 0xb, 0x5}, {0x4, 0x1, 0xc, 0x7}, {0x4, 0x9, 0xc, 0x7}, {0x0, 0x5, 0xc, 0x7}, {0x0, 0x2, 0xb, 0xfccf283dab838f2a}, {0x0, 0x2, 0xa, 0x3}, {0x3, 0x5, 0xd, 0x5}, {0x5, 0x1, 0x9, 0xa}], 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='neigh_create\x00', r9, 0x0, 0xfffffffffffff160}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r10, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r11, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r13}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004891) sendmsg$inet(r13, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000b80)="ca8e647ecdba819c2423115ad67ee4f9bfe47aef6ad1e7c3566aa8be76", 0x1d}, {&(0x7f0000000bc0)="43d50c279d7193db009b4fe24d7ece5c730bfe9bd120acc9f1e71a7af7b03cdebb1391447610d383e7481a78173ea3ee91b17da12c7afa19b772fb533db767fdd165a218dfa4aab10d4e4686dea4dc46227d7bfcb8f353e140de5e796b20c120cea8c51612d2fd1544aa5a05332f883fc2b58495b0eb7b4c7c1eac051f2ab677d610bbcc14b7799c962837943fe2ceebafeadb51ccaff6e6d09e8147bbd1faf4080b78c390890c35df33d023", 0xac}, {&(0x7f0000000c80)="b9001c40dcbc865e54eb4d97accd2b73b063320f3a47b66b6a6a307b0b5780895c176e08798115e520909e35a0ade2568e68eacb29a97197e943b862f283abf617578fad26675a1308b4e4ae036b132e318fd99bb8e13d4147b4f249b0f78f9246efa8498553f158861eeaef40e1df5eb60d2752a2a25cbe7a5fc62485d29c459f6689926444280b01650338c866a487195ac72196dcb5e0325162b1d8c3973e2d65c9eb8917307f2effecb798389550467adf8e866858eb019bcbc8836deb06df42708357025dff2f54c2fc55fdaf30e7b000ed9b529065cab508f7a3e9c28a9248b489f0cb1e", 0xe7}, {&(0x7f0000000d80)="86a624982db2e0f5f2573da651077050b0e356cb800df566734c37906821c18093a57e02d4d174e35b", 0x29}, {&(0x7f0000000dc0)="2974e4d4fec9986693946b55bb5e5c4b97847c2b0e01781e145388a4833019d7b1a0f82d8314cb80afb52e83", 0x2c}, {&(0x7f0000000e00)="e780ba682931279d1cb645b9c0c33a5788a24cc3c74d05a27afebd4051cd69a2ab3a001d80df223a7c12571b8bd85abc815cf85b6ae7406ba39196c2679faad5b67ae2fa1d0ca8985353b90f2dcb08601fc6c42f25765e0e464a9d47fdd4b68b67c479", 0x63}, {&(0x7f0000000e80)="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", 0xfa}, {&(0x7f0000000f80)="7914d47ac922757b2d21998d98c9a90b2d29e6aa18b7d84a322a4cf7447b53312a6ab98fb0e376bc00eba51c1ebc648f81a30e3b185c7949314b8638f92273d846eab037a1b81cb9f889bac47ed0f77ffc7fee891fcc997e2525e474e49914a4cf07ce07451a19bbeeb4ecf757681cface131832983a7d6ce44b21838cbc0abdd22768309687df71c4941804438602722bf9fb24edab4eae541f04005390218c5da14b873a6d0dcef5f5cabd7a4ed03fe92279059650aa7009318532c89a0eb5372e4179560cfe7953a11bb2cc20", 0xce}], 0x8, &(0x7f0000001100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}], 0x30}, 0x4c841) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001280)={@ifindex=r3, 0x1f, 0x1, 0xe5, &(0x7f0000001180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0], 0x0}, 0x40) r16 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000001300)='./file0\x00', 0x0, 0x8, r13}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)={@ifindex, r12, 0x35, 0x0, 0x0, @void, @value=r16, @void, @void, r15}, 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_genetlink_get_family_id$wireguard(&(0x7f0000001380), r10) r17 = openat$cgroup_ro(r12, &(0x7f00000013c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r3, r17, 0x0, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r12, 0xffffffffffffffff}, &(0x7f0000001480), &(0x7f00000014c0)=r9}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_ext={0x1c, 0xf, &(0x7f0000001540)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r19}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f00000015c0)='syzkaller\x00', 0x7914, 0x0, 0x0, 0x40f00, 0x10, '\x00', r14, 0x0, r12, 0x8, &(0x7f0000001600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x2, 0x9, 0x7, 0x5}, 0x10, 0x86c9, r5, 0x5, &(0x7f0000001680)=[r18], &(0x7f00000016c0)=[{0x0, 0x1, 0xc, 0x5}, {0x1, 0x4, 0x6, 0x4}, {0x5, 0x5, 0xf, 0x1}, {0x5, 0x3, 0x2, 0xc}, {0x1, 0x5, 0x1, 0x3}], 0x10, 0x8001}, 0x94) bind$netlink(r17, &(0x7f0000001800)={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc) accept$alg(r12, 0x0, 0x0) setsockopt$MRT_DEL_VIF(r13, 0x0, 0xcb, &(0x7f0000001840)={0x1, 0x8, 0x5, 0x8, @vifc_lcl_addr=@empty, @loopback}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={&(0x7f0000001880)="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", &(0x7f0000001980)=""/245, &(0x7f0000001a80)="3ec5d57fcc8b02e623132fa60239e886e4d3228c11f2ed76f511360308f9072469845db9aa4d56f06171b67d3e407472b0570b4725e84c23d7896d73393dd51ff70b3438f56d55de21a10318ee4f32382303f921dda07f9c46e5c78edb11b1c78d61eaa8fb10ad11dc079f3522f4a8c06701899375f7d4b7253aa8844bc16118c22c9d760ad201181026bc17cd1ee16152b9ae0daec2fbf8b15f680309133648cfa2cd50d7ce96c56bbd165e81beebaf29c854c334", &(0x7f0000001b40)="e55fce3d1b7a38623096e86f2e0daf4d71896020cfbcfc04b56a92dc8a77195469ae8b56051047948e8bd7", 0x800}, 0x38) 19.656006489s ago: executing program 4 (id=2888): bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x4) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r0, 0x0, 0x0, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) (async) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) accept$packet(r2, 0x0, 0x0) (async) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) close(0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000000000000000004e2100000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000000000000000000000000002000d5a4a5be50975ca7307ff235bab009c38d00aca56faeaa049ad2e28e0bb700bbfb13cdf2aa4f076def913486a186925183365c762032e9778b39bd690d114a63a3a78ebeb6de172a98de5d6499719e11b2cf7911204fcf03aa0a48375f964539df7d7e22c5f38b99827e57bba049f28bf70e217e689aae7d11fbd6"], 0xb8}}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000080)="3e99d68b6729ce87f3e6ed4072c334c0a8e0e15da9c3edc671e317c10af79326990ae36d66cb9953f659328c459d63", 0x2f}, {&(0x7f0000000840)="da47c25f87203bc82d0d9bf808ea0ab96b781795b471ab6be132053e3b4d2e49808dabd883c0da8a12da2c942f1c826c2d7be4eda3a79170e037112c4b7621d57308268b536e006d59ef7055d3fd4a28e4c2187aad3d397ecf5d8231d9cdc5b0a4e8350fc56efc17ccf97905e44d104062602cbded42f79940ebf47afd567387467a236044ab6c217fc10f836076137bf54b78583daaf03b4f22e840d283a7", 0x9f}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000600)="7286f58eeb", 0x5}], 0x4, &(0x7f0000001dc0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="64010100ac1414aa000000002c000000000000000000000007000000c503d894040100440c73817f000001000000098608ffffffff050200000000003400000000000000000000000700000007232aac1414bb0a0101017f0000017f000001ac141433000000000a010101000000000000000000140000000000000000000000020000000300000000000000140000000000000000000000010000000700000000000000"], 0x130}, 0x8090) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) 19.574805216s ago: executing program 2 (id=2889): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001340)={r0, r0, 0x5, 0xf1, &(0x7f0000001240)="41a8c9a9d8886aef8c661efd7a331970cf5d091f01f563b037a250eb76ba079d3865443b510bf3fd8097e7de93a4b9c89b6d8a23f49e512db7159ccd55fa3b459a517be3a6dfea1a7a7b6d0ca440a1a1dec9bec52e29bac9666c9b53d902b83c7bdbeac337df1ac367ffe7b00579c63f50c59137121ecba459718a1f80ed66cdde715be641aee6c5baa412b52c55c04ba0475310ae3591bbe6dd4f5af2f5e629366ec873c25b4a7dd45d725cc2ce4b3f2a1512b0a551a4b854fa174524975eb291a1d142dd9054de67a3693327d8715014dc3a4200d646e55e49589df500d89a62af266e21d667b698e9936121a3824918", 0xf, 0x3, 0x5, 0x2, 0xf05c, 0x1, 0x1, 'syz0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmmsg$alg(r3, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e", 0x2}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000041}, 0x200088d0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x107f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x2, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000004, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0xfffffff9, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x3, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0xffff, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda5a, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x3, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x8000399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0x4, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x4, 0xec2, 0x6, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x103, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x365, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x3, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0xfff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r15}, 0x10) 19.514195256s ago: executing program 4 (id=2890): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x3c}}, 0x24004054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 19.46821015s ago: executing program 0 (id=2891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) r6 = epoll_create1(0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000b"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) gettid() syz_emit_ethernet(0x7a, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x80}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) sendmsg$802154_dgram(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000180)={&(0x7f0000000340)="801c31f2c247c7f7bec03dc092844642809287d9d70b61308be535c5fe10ca942189fada2f9706112f8724d530846e6665209f0ca2f65b0ff290a231cd9ac4037a7d2483b218e7a006d8289c5b0a0df64a4f136981a2ffbd6aea3a755de6cab950e7a592fa3c9a30250231bd6931d2b76220fb579196419945bc68579a0d2594888cb75331fd7598f2579b141a24a385bc8cfc6b69775e8391ab248790dbd8f167790cc44e7e59cac02f7bd5254b04e810b782fdcf4d9b974a24aa", 0xbb}, 0x1, 0x0, 0x0, 0x4000054}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000240)={{0x62, @broadcast, 0x4e22, 0x2, 'sh\x00', 0x10, 0xfffffffd, 0x7d}, {@broadcast, 0x4e21, 0x0, 0xf9a, 0x60, 0xffffffff}}, 0x44) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000400)={0x2, 0xf, 0x4}, 0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="850b0100609004002000128009000100766c616efdb7d27b3dd1a631f71a0000000010000280a900"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 19.213219413s ago: executing program 0 (id=2892): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040000000400000002000200000000002a4b7c7ae615a0d8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff0200"/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040000000400000002000200000000002a4b7c7ae615a0d8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff0200"/28], 0x50) 19.158140997s ago: executing program 0 (id=2893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0002000080820000400012800b00010069703667726500003000028008000c000001000008000c000800000008001d000d0000000400120006000e0001000000060010004e21000008000300"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket(0xa, 0x1, 0x0) getsockopt(r3, 0x1, 0x2f, &(0x7f0000001940)=""/8, &(0x7f0000000040)=0x8) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x11d, 0x76, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000006800010025bd7000feffffff0a000100000000000c0008800e00060000000000060007000800000008000500", @ANYRES32=r5, @ANYBLOB], 0x34}}, 0x40040d0) sendmmsg$inet6(r2, &(0x7f00000033c0)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000002900000037"], 0x18}}], 0x1, 0x40052) r8 = accept4(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x80, 0x800) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4300000003200000"], 0x20}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) sendmsg$nl_xfrm(r8, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4e79bb67980df0a5ab05698da90dbcfaa3f1cb4a8220d638a2849da24fedf2500000000000000008000000000000000ac1414aa000900"/64, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="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"], 0x2c0}}, 0x4004000) 19.046955964s ago: executing program 2 (id=2895): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$packet(0x11, 0x2, 0x300) close(0x3) 18.979226598s ago: executing program 0 (id=2896): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x12, {0x2, 0x4e20, @empty}, 'rose0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$igmp(0x2, 0x3, 0x2) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r4, 0x0, &(0x7f0000000200)) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES16=r7, @ANYRESOCT=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$kcm(0x2, 0x200000000000000, 0x106) 18.773274673s ago: executing program 2 (id=2897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 17.550267494s ago: executing program 2 (id=2899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000580)={@dev, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000006a00010027bd7000fddbdf25020000000000000008000500", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="080001000000000004000b0004000b0008000500", @ANYRES32=r3, @ANYBLOB="544682ee38513810c9f96009d1a47bd146ce425cfa9ed6a7920eafc9d14850987561e9c1566327ac841cea275fc593f276befd8138c8bbc1e4f8f54b0d3a8cc5d0b38193"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'hsr0\x00', @multicast}) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r12 = accept4$rose(r11, &(0x7f0000000080)=@short={0xb, @remote, @rose}, &(0x7f00000000c0)=0x1c, 0x800) ioctl$sock_rose_SIOCDELRT(r12, 0x890c, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @default, @netrom={'nr', 0x0}, 0x2, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendto$packet(r10, &(0x7f0000000140)="bad388a8", 0x4, 0x40000, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 17.269574486s ago: executing program 1 (id=2902): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000400)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x15, 0x3, 'rr\x00', 0x1, 0x3, 0x72}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x4, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0x54}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x200, 0x8001, 0x1}}, 0x44) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000340)="5a972adcf36575b294d0a40e97f3aee7c214f01399c278fd5788f71386dfb5cfd76de70b06efc697b712959369bf0a358a1368f6566ecdd02c6507e9182b014320158d18acd9cbed9434de8aac8f46cc44d0f8e24dd4a5673e00f492eaf864f1cb3770ddad0f5f1456290aca352c75347ced456d09e8fa1515d81ae0560de40093c69226f00b22a7", 0x88) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x1168, 0x12, 0x200, 0x70bd2d, 0x25dfdbfb, {0x2b, 0x6, 0x7, 0x3, {0x4e24, 0x4e22, [0xc0, 0x2, 0x8001, 0x401], [0x4b, 0x0, 0x8000, 0x401], 0x0, [0x2]}, 0x4, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "69a25e25ba1d1ce55ac3b6992cdbf94cf45ce487d0a6622ccc99594e1bda9755e45643a9ea18c204eff177d21c872d491cd3f505a0a68610405f31d8b87f9830fd748d9e5a95d52352802d21a58cc962c51b79cb4ab65a764d67ab206a124f899732f8aef5e705a2ca90eb2f41940372c203580b9916a7f17e816f86d3071f12578c5b82402c80cb5293e3bbac5ebd9d94d1772b3c7c66b8cde7a6fdd6ec79d85602dc946ef37e9294d5eca7be4516c0f7aa070d3d43112488ce439bcb46"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "6cf47955394f53ae8ac7b0882bea4c825a0b7a9d3a7d827a97f81dd0483746e2181c8b888f18d4115bda0d6d4012ad73aadc9c5f2a023c5d172c0875173fbfac099fa3e87a27b69f90bcf0b1e7"}]}, 0x1168}, 0x1, 0x0, 0x0, 0x80}, 0x24048050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 17.091172433s ago: executing program 1 (id=2903): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xa68}, @IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x6c}}, 0x884) 16.600309919s ago: executing program 1 (id=2904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdb2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000080)=0x80, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) 16.59636162s ago: executing program 1 (id=2905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c00e5ff", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b009d0cb128"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x400c810) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000010101010400000000000000020000071800018014000180080018007f0000010800d500000000000c001980080001000d030000"], 0x38}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) ioctl$int_in(r6, 0x5452, &(0x7f0000000380)=0x3) unshare(0x22020400) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r7, r8, 0x100000af5, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000000000000851000000200000085000000d00000409500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC=r5], 0x0, 0x5}, 0xfffffffffffffd76) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaa9aaaaae31a2c27b1baa70000001997e2aa0180c20000020800450028da1800000006907864010101ac14220002000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c80fffc90781000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) 15.725207589s ago: executing program 1 (id=2906): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x12000, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x3, 0x10}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x304}, "13e86f088a2b6097", "9096f657875a81f96cc8e4145e18a60f", "6d011aa7", "2ed81e46dc1748c1"}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r6}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x8, [@union={0x6, 0x7, 0x0, 0x5, 0x0, 0x4, [{0x7, 0x1, 0x2}, {0x7, 0x3, 0xfffffffe}, {0xf, 0x1, 0x4}, {0xc, 0x0, 0x2}, {0xa, 0x0, 0x6}, {0x1, 0x1, 0x8}, {0x8, 0x3, 0x3}]}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x65, 0x5}, @enum={0x4, 0x6, 0x0, 0x6, 0x4, [{0x2, 0x9}, {0x7, 0x8}, {0x8, 0x1000}, {0xe, 0xc10}, {0x9, 0x8}, {0x4, 0x2}]}, @var={0xe, 0x0, 0x0, 0xe, 0x3, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffd}}, @float={0x10, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x30, 0xcbbb73636f3ded88, 0x2e, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000840)=""/240, 0x10c, 0xf0, 0x1, 0x7fffffff, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000940)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x1f, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x40000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x78381caf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', r2, 0x0, r7, 0x8, &(0x7f0000000500)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000009c0)=[r8], &(0x7f0000000a00)=[{0x4, 0x3, 0xe, 0x3}, {0x4, 0x4, 0x2, 0x9}, {0x1, 0x2, 0x9, 0xa}, {0x4, 0x1, 0x7}], 0x10, 0xe01}, 0x94) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x8, 0x73}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r14}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) 15.537352269s ago: executing program 1 (id=2907): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xc8, r6, 0x221, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x67}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7f}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0xa}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x63}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xf}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x10}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x25}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xa}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8001}, 0x80) 7.506925758s ago: executing program 32 (id=2860): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xb, 0x1ff, 0x7}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="fbe2105da323e9b6749c69a5e29af5a0", 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40, 0x0, r0, 0xfffffffa, '\x00', 0x0, r0, 0x4, 0x1}, 0x50) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@loopback, 0x0}, &(0x7f0000000380)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x20, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2c7e6909}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x90}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0xe1, &(0x7f0000000240)=""/225, 0x41100, 0x0, '\x00', r2, 0x0, r0, 0x8, &(0x7f00000003c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x1, 0x96, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000480)=[{0x1, 0x2, 0xc, 0x6}, {0x0, 0x5, 0x10}, {0x4, 0x4, 0x7, 0x7}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@ifindex=r2, 0x2b, 0x0, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0xd3, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map=r3, r0, 0x25, 0x20, r3, @void, @void, @void, @value=r6, r5}, 0x20) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) recvfrom(r0, &(0x7f0000000a80)=""/4096, 0x1000, 0x0, &(0x7f0000001a80)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x80) r8 = openat$cgroup_ro(r0, &(0x7f0000001b00)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x3) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r8) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001f40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001bc0)={0x30c, r9, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff}}}}, [@NL80211_ATTR_TID_CONFIG={0x2ec, 0x11d, 0x0, 0x1, [{0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x230, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfff8, 0x9, 0x0, 0xe, 0x1, 0x400, 0x8]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x5}, {0x7, 0x6}, {0x6, 0x3}, {0x6, 0x3}, {0x2, 0x2}, {0x6, 0x9}, {0x5, 0x8}, {0x0, 0x4}, {0x3, 0x8}, {0x4, 0x1}, {0x4, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x3, 0x5}, {0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x7}, {0x2}, {0x0, 0x8}, {0x6, 0xa}, {0x1, 0x5}, {0x4, 0x6}, {0x2, 0xa}, {0x5, 0x2}, {0x3, 0x6}, {0x5, 0x5}, {0x4, 0x3}, {0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x3}, {0x7, 0x1}, {0x2, 0x4}, {0x3, 0x3}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xd, 0x40, 0x5, 0x1000, 0x7, 0x894e, 0x8000]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{}, {0x2, 0x6}, {0x6, 0x5}, {0x7, 0x6}, {0x7, 0x9}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x6}, {0x0, 0x5}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0xa}, {0x2, 0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x3, 0x7}, {0x0, 0x8}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x401, 0xc, 0x8, 0xff, 0x3, 0x5, 0x6]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x3, 0x6, 0xff64, 0x6, 0x80, 0x3e9, 0xfff7]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x6}, {0x0, 0x9}, {0x1, 0x7}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x6, 0x2, 0x2, 0x33, 0x24, 0x60, 0xb53ee109ffdde660, 0xc, 0x6c, 0x4, 0xb, 0x4, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x7}, {0x1, 0x8}, {0x6, 0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x6, 0x6}, {0x2, 0x7}, {0x7, 0x4}, {0x4}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {}, {0x5, 0x4}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x5}, {0x5}, {0x5, 0x7}, {0x3, 0x9}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x3}, {0x7, 0x8}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0xa}, {0x4, 0x7}, {0x1, 0x2}, {0x7, 0xa}, {0x4, 0x5}, {0x2, 0x2}, {0x6, 0xa}, {0x3, 0x4}, {0x7, 0x1}]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x48, 0x30, 0x9, 0x5, 0x24, 0x6c, 0x1, 0x4, 0x4, 0x18, 0x24, 0x60, 0x9, 0x12, 0x24, 0x4, 0x2, 0x6, 0x60, 0x6, 0x5, 0x16, 0x6, 0x60, 0x12, 0x4, 0x48, 0x9, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x3}, {0x6, 0x5}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x3}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x8}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0x3}, {0x1, 0x5}, {0x1}, {0x1, 0x7}, {0x4, 0x8}, {0x6, 0x2}, {0x6, 0x1}, {0x5, 0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x7}, {0x2, 0x6}, {0x5, 0xa}, {0x6, 0x7}, {0x6, 0x6}, {0x2, 0x3}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0x8}, {}, {0x7, 0x2}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x1}, {0x4, 0x4}, {0x7, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x0, 0x3, 0xc, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x10, 0x2, 0x6, 0x200, 0x14cf, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x1, 0x9}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0xa}, {0x7, 0x4}, {0x5, 0x8}, {0x4}, {0x6}, {0x5, 0x6}, {0x4, 0xa}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0x5}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x4}, {0x5, 0x4}, {0x3, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x2}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x8}, {0x6}, {0x0, 0x6}, {0x1, 0x2}, {0x1}, {0x3, 0x6}, {0x5, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x4}, {0x5, 0x8}, {0x3}, {0x3, 0x2}, {0x7, 0x8}, {0x4, 0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x8}, {0x7, 0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xfff8, 0x3, 0x3ff, 0x9, 0x7, 0x3, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x7, 0x80, 0x4, 0x7, 0x9, 0xcf2, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x14}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x24}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000001f80)={'NETMAP\x00'}, &(0x7f0000001fc0)=0x1e) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) close(r1) socket$xdp(0x2c, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000002040)) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000002080)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r8, 0x111, 0x2, 0x0, 0x4) r11 = accept4(r10, 0x0, &(0x7f00000020c0), 0x80000) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002200)={'syztnl1\x00', &(0x7f0000002180)={'syztnl1\x00', r2, 0x2f, 0x7, 0x1, 0x0, 0x1c, @dev={0xfe, 0x80, '\x00', 0x2b}, @local, 0x10, 0x1, 0xfffffffe, 0xbe}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000002480)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002240)={0x1fc, r12, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4044}, 0x4) sendmsg$NL80211_CMD_DEL_KEY(r11, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x98, r9, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "02091c9196"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5802}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "549c63a53f8257b41927c1752c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x20010000}, 0x60400c0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r10, 0xf505, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r14, &(0x7f00000027c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0x84, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 3.503792762s ago: executing program 33 (id=2896): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x12, {0x2, 0x4e20, @empty}, 'rose0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$igmp(0x2, 0x3, 0x2) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r4, 0x0, &(0x7f0000000200)) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES16=r7, @ANYRESOCT=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$kcm(0x2, 0x200000000000000, 0x106) 3.468629901s ago: executing program 34 (id=2890): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x3c}}, 0x24004054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 0s ago: executing program 35 (id=2907): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xc8, r6, 0x221, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x67}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7f}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0xa}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x63}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xf}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x10}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x25}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xa}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8001}, 0x80) kernel console output (not intermixed with test programs): from 0 to 127 [ 212.548967][ T5845] block nbd0: Receive control failed (result -32) [ 213.048043][ T9869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.063583][ T9869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.484595][ T9890] netlink: 'syz.0.977': attribute type 1 has an invalid length. [ 213.524681][ T9892] tipc: Enabling of bearer rejected, already enabled [ 213.560493][ T9892] syzkaller0: Caught tx_queue_len zero misconfig [ 213.668823][ T9900] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 213.745500][ T9905] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 213.784883][ T9905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.795470][ T9905] unsupported nlmsg_type 40 [ 213.808673][ T9911] geneve3: entered promiscuous mode [ 213.814136][ T9911] geneve3: entered allmulticast mode [ 213.856557][ T9905] bond3: (slave gretap1): making interface the new active one [ 213.870046][ T9905] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 213.880221][ T9912] __nla_validate_parse: 9 callbacks suppressed [ 213.880312][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 214.161309][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.989'. [ 214.184654][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 214.211134][ T9928] netlink: 52 bytes leftover after parsing attributes in process `syz.4.988'. [ 214.223770][ T9927] netlink: 31 bytes leftover after parsing attributes in process `syz.3.989'. [ 214.248075][ T9927] netlink: 'syz.3.989': attribute type 3 has an invalid length. [ 214.256465][ T9927] netlink: 'syz.3.989': attribute type 2 has an invalid length. [ 214.264751][ T9927] netlink: 31 bytes leftover after parsing attributes in process `syz.3.989'. [ 214.293335][ T9927] netlink: 'syz.3.989': attribute type 2 has an invalid length. [ 214.527184][ T9951] netlink: 'syz.3.994': attribute type 13 has an invalid length. [ 214.539906][ T9950] syzkaller0: entered promiscuous mode [ 214.546832][ T9950] syzkaller0: entered allmulticast mode [ 214.584811][ T9949] tipc: Enabled bearer , priority 0 [ 214.613181][ T9948] tipc: Resetting bearer [ 214.651116][ T9955] netlink: 180 bytes leftover after parsing attributes in process `syz.0.998'. [ 214.677620][ T9948] tipc: Disabling bearer [ 215.074936][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 215.177991][ T9973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1005'. [ 215.225665][ T9977] wg1 speed is unknown, defaulting to 1000 [ 215.427807][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'. [ 215.695245][ T9998] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 215.748584][ T9999] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 215.790696][ T9999] bond3 (unregistering): Released all slaves [ 215.938232][T10009] xt_CT: No such helper "snmp_trap" [ 216.388705][T10027] No such timeout policy "syz0" [ 216.656701][T10046] netlink: 'syz.0.1021': attribute type 13 has an invalid length. [ 216.693087][T10046] netlink: 'syz.0.1021': attribute type 17 has an invalid length. [ 216.847418][T10050] xt_CT: No such helper "snmp_trap" [ 216.909958][T10046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.943687][T10046] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.967520][T10046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.018838][T10048] wg1 speed is unknown, defaulting to 1000 [ 217.214485][T10068] wg1 speed is unknown, defaulting to 1000 [ 217.214882][T10063] syzkaller0: entered promiscuous mode [ 217.257934][T10063] syzkaller0: entered allmulticast mode [ 217.327410][T10061] wg1 speed is unknown, defaulting to 1000 [ 218.291328][T10110] xt_CT: No such helper "snmp_trap" [ 218.510108][T10132] netlink: 'syz.4.1046': attribute type 83 has an invalid length. [ 218.522757][T10139] netlink: 'syz.4.1046': attribute type 83 has an invalid length. [ 218.652650][T10144] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 218.664884][T10144] syzkaller1: linktype set to 823 [ 218.680311][T10146] wg1 speed is unknown, defaulting to 1000 [ 219.198635][T10155] __nla_validate_parse: 10 callbacks suppressed [ 219.198655][T10155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1051'. [ 219.300387][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'. [ 219.385680][T10160] xt_CT: No such helper "snmp_trap" [ 219.539449][T10176] syzkaller0: left promiscuous mode [ 219.557621][T10176] syzkaller0: left allmulticast mode [ 219.655125][T10171] wg1 speed is unknown, defaulting to 1000 [ 220.071028][T10198] veth1_to_hsr: entered promiscuous mode [ 220.082724][T10198] macvtap1: entered promiscuous mode [ 220.093954][T10198] macvtap1: entered allmulticast mode [ 220.106070][T10198] veth1_to_hsr: entered allmulticast mode [ 220.111930][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 220.201117][T10204] x_tables: duplicate underflow at hook 2 [ 220.208055][T10203] netlink: 'syz.1.1065': attribute type 3 has an invalid length. [ 220.218519][T10203] netlink: 'syz.1.1065': attribute type 3 has an invalid length. [ 220.348108][T10216] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1067'. [ 220.423067][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 220.455930][T10215] xt_CT: No such helper "snmp_trap" [ 220.484479][T10220] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 220.503131][T10216] vxlan0: entered promiscuous mode [ 220.521644][T10216] vxlan0: entered allmulticast mode [ 220.565418][ T8237] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.582461][ T8237] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.605916][ T8237] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.630422][ T8237] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.055293][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 221.069515][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1078'. [ 221.237938][T10260] xt_CT: No such helper "snmp_trap" [ 221.407407][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 221.412010][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 221.492901][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'. [ 221.619144][T10277] netlink: 'syz.4.1086': attribute type 4 has an invalid length. [ 221.858375][T10293] xt_CT: No such helper "snmp_trap" [ 222.059749][T10315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.078647][T10315] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20001 [ 222.649381][T10346] xt_CT: No such helper "snmp_trap" [ 222.901652][ T8237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.931459][ T8237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.807476][T10397] veth1_to_bond: entered allmulticast mode [ 223.856976][T10397] bond0: (slave bond_slave_1): Releasing backup interface [ 223.921559][T10397] veth1_to_bond (unregistering): left allmulticast mode [ 224.599199][T10447] macvlan3: entered promiscuous mode [ 224.619790][T10449] __nla_validate_parse: 8 callbacks suppressed [ 224.619809][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'. [ 224.725205][T10457] sctp: [Deprecated]: syz.2.1138 (pid 10457) Use of int in max_burst socket option deprecated. [ 224.725205][T10457] Use struct sctp_assoc_value instead [ 224.864288][T10458] wg1 speed is unknown, defaulting to 1000 [ 225.032927][T10469] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1141'. [ 225.453097][T10487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.529305][T10493] netlink: 'syz.1.1149': attribute type 29 has an invalid length. [ 225.548034][T10493] netlink: 'syz.1.1149': attribute type 29 has an invalid length. [ 225.575899][T10495] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1149'. [ 225.598035][T10495] unsupported nla_type 58 [ 225.802219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.810793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.877973][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 226.072843][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 226.520483][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 226.686128][T10541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.694134][T10541] bridge0: port 4(bond1) entered blocking state [ 226.700734][T10541] bridge0: port 4(bond1) entered disabled state [ 226.708465][T10541] bond1: entered allmulticast mode [ 226.716807][T10541] bond1: entered promiscuous mode [ 226.725599][T10541] bridge0: port 4(bond1) entered blocking state [ 226.732329][T10541] bridge0: port 4(bond1) entered forwarding state [ 226.756482][ T8237] bridge0: port 4(bond1) entered disabled state [ 226.832170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.840463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.951622][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 227.008789][T10562] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 227.103443][T10559] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1170'. [ 227.247298][T10569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1174'. [ 227.269718][T10569] bridge3: entered promiscuous mode [ 227.354606][T10574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1176'. [ 227.417610][T10572] veth5: entered promiscuous mode [ 227.622745][T10584] netlink: 'syz.1.1180': attribute type 1 has an invalid length. [ 227.726988][T10595] netlink: 'syz.3.1183': attribute type 7 has an invalid length. [ 227.734814][T10593] bond3: (slave geneve2): making interface the new active one [ 227.735540][T10593] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 227.751948][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 227.800251][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 227.814830][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 227.837816][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 227.872270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.937180][T10602] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.127619][T10607] wg1 speed is unknown, defaulting to 1000 [ 228.627132][T10639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.760685][T10651] netlink: 'syz.0.1199': attribute type 11 has an invalid length. [ 228.831049][T10639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.912253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.920475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.990077][T10645] syzkaller1: entered promiscuous mode [ 229.000091][T10645] syzkaller1: entered allmulticast mode [ 229.028396][T10661] syzkaller0: entered promiscuous mode [ 229.046512][T10661] syzkaller0: entered allmulticast mode [ 229.110504][T10639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.143537][T10655] tipc: Enabled bearer , priority 0 [ 229.160726][T10655] syzkaller0: entered promiscuous mode [ 229.166399][T10655] syzkaller0: entered allmulticast mode [ 229.284454][T10639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.331969][T10655] tipc: Resetting bearer [ 229.351948][T10654] tipc: Resetting bearer [ 229.388391][T10654] tipc: Disabling bearer [ 229.507851][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.548526][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.599221][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.645627][ T8231] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.662436][T10686] netlink: 'syz.1.1208': attribute type 27 has an invalid length. [ 229.748873][T10686] bridge3: left promiscuous mode [ 229.751058][T10691] netlink: 'syz.2.1209': attribute type 13 has an invalid length. [ 230.046140][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 230.071007][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 230.101728][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 230.117395][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 230.133859][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 230.150799][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 230.164368][T10705] __nla_validate_parse: 9 callbacks suppressed [ 230.164386][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'. [ 230.180127][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 230.190134][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 230.601025][T10720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.610408][T10720] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.625151][T10720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.665107][T10727] openvswitch: netlink: IP tunnel dst address not specified [ 230.830567][T10738] FAULT_INJECTION: forcing a failure. [ 230.830567][T10738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.848561][T10738] CPU: 0 UID: 0 PID: 10738 Comm: syz.4.1225 Not tainted syzkaller #0 PREEMPT(full) [ 230.848591][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.848604][T10738] Call Trace: [ 230.848613][T10738] [ 230.848622][T10738] dump_stack_lvl+0x189/0x250 [ 230.848657][T10738] ? __pfx____ratelimit+0x10/0x10 [ 230.848690][T10738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.848836][T10738] ? __pfx__printk+0x10/0x10 [ 230.848874][T10738] should_fail_ex+0x414/0x560 [ 230.848912][T10738] _copy_to_user+0x31/0xb0 [ 230.848943][T10738] simple_read_from_buffer+0xe1/0x170 [ 230.848981][T10738] proc_fail_nth_read+0x1b3/0x220 [ 230.849012][T10738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.849043][T10738] ? rw_verify_area+0x2a6/0x4d0 [ 230.849069][T10738] ? __lock_acquire+0xab9/0xd20 [ 230.849088][T10738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.849117][T10738] vfs_read+0x200/0xa30 [ 230.849144][T10738] ? fdget_pos+0x247/0x320 [ 230.849170][T10738] ? __pfx___mutex_lock+0x10/0x10 [ 230.849193][T10738] ? __pfx_vfs_read+0x10/0x10 [ 230.849222][T10738] ? __fget_files+0x2a/0x420 [ 230.849246][T10738] ? __fget_files+0x3a0/0x420 [ 230.849264][T10738] ? __fget_files+0x2a/0x420 [ 230.849292][T10738] ksys_read+0x145/0x250 [ 230.849322][T10738] ? __pfx_ksys_read+0x10/0x10 [ 230.849371][T10738] do_syscall_64+0xfa/0xfa0 [ 230.849390][T10738] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.849410][T10738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.849430][T10738] ? clear_bhb_loop+0x60/0xb0 [ 230.849454][T10738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.849474][T10738] RIP: 0033:0x7f9030f8e0dc [ 230.849493][T10738] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 230.849512][T10738] RSP: 002b:00007f9031eaa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.849533][T10738] RAX: ffffffffffffffda RBX: 00007f90311e5fa0 RCX: 00007f9030f8e0dc [ 230.849546][T10738] RDX: 000000000000000f RSI: 00007f9031eaa0a0 RDI: 0000000000000006 [ 230.849558][T10738] RBP: 00007f9031eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 230.849569][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.849580][T10738] R13: 00007f90311e6038 R14: 00007f90311e5fa0 R15: 00007ffcd55dcf78 [ 230.849615][T10738] [ 231.192953][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 231.455217][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 231.481981][T10763] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 231.522554][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1232'. [ 231.586961][T10778] tipc: Can't bind to reserved service type 1 [ 231.625169][T10779] netlink: 'syz.0.1236': attribute type 39 has an invalid length. [ 231.859444][T10790] wg1 speed is unknown, defaulting to 1000 [ 232.001265][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1240'. [ 232.014084][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1240'. [ 232.223123][T10803] wg1: entered promiscuous mode [ 232.228052][T10803] wg1: entered allmulticast mode [ 232.455166][T10808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1244'. [ 232.573880][T10811] veth5: entered promiscuous mode [ 232.604793][ T8237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.627549][ T8237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.678762][T10815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.824629][T10817] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 232.892556][ T8237] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 232.989379][T10825] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.023320][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 233.035827][T10832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1249'. [ 233.055749][T10832] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 233.081589][T10819] wg1 speed is unknown, defaulting to 1000 [ 233.215566][T10825] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.237425][T10837] syz.2.1252 uses old SIOCAX25GETINFO [ 233.305170][T10825] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.351154][T10840] vxcan1: entered allmulticast mode [ 233.361168][T10825] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.626835][T10846] netlink: 'syz.4.1254': attribute type 1 has an invalid length. [ 233.662459][T10846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.700062][T10846] bond3: (slave veth5): Enslaving as an active interface with a down link [ 233.786760][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 234.006001][T10863] syzkaller0: entered promiscuous mode [ 234.011619][T10863] syzkaller0: entered allmulticast mode [ 234.257248][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 234.450728][T10884] xt_TPROXY: Can be used only with -p tcp or -p udp [ 235.146858][ T8237] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.172977][ T8237] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.195239][ T8237] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.212045][ T8237] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.293878][T10930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.085353][T10941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.155785][T10952] pim6reg1: entered promiscuous mode [ 236.187495][T10952] pim6reg1: entered allmulticast mode [ 236.331237][T10944] wg1 speed is unknown, defaulting to 1000 [ 236.545015][T10969] __nla_validate_parse: 3 callbacks suppressed [ 236.545038][T10969] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1289'. [ 236.726872][T10981] ip6tnl3: entered allmulticast mode [ 236.798462][T10977] wg1 speed is unknown, defaulting to 1000 [ 236.846961][T10969] wg1 speed is unknown, defaulting to 1000 [ 237.221392][T11003] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 237.284514][T11003] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.358204][T11004] bond4: (slave veth9): Enslaving as an active interface with a down link [ 237.491862][T11021] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1302'. [ 237.570113][T11020] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.581305][T11020] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.633839][T11019] batman_adv: batadv0: Adding interface: dummy0 [ 237.634674][T11036] netlink: 'syz.3.1307': attribute type 13 has an invalid length. [ 237.641655][T11019] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.652960][T11036] netlink: 'syz.3.1307': attribute type 17 has an invalid length. [ 237.690796][T11019] batman_adv: batadv0: Interface activated: dummy0 [ 237.719225][T11028] batadv0: mtu less than device minimum [ 237.727545][T11028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.739549][T11028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.751516][T11028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.763532][T11028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.775512][T11028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.846096][T11020] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.877858][T11020] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.957345][T11020] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.994807][T11020] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.028934][T11046] xt_CT: No such helper "snmp_trap" [ 238.360034][T11020] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.374770][T11020] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.464730][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 238.481344][T11050] wg1 speed is unknown, defaulting to 1000 [ 238.504626][T11068] wg1 speed is unknown, defaulting to 1000 [ 238.610686][ T8237] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.627365][ T8237] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.678019][ T8237] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.686767][ T8237] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.716784][ T8237] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.725526][ T8237] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.763772][ T8231] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.772251][ T8231] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.835341][T11086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1317'. [ 238.856211][T11084] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1315'. [ 239.176200][T11102] xt_CT: No such helper "snmp_trap" [ 239.290467][T11108] syz_tun: entered promiscuous mode [ 239.296972][T11108] macvtap2: entered promiscuous mode [ 239.302858][T11108] macvtap2: entered allmulticast mode [ 239.308541][T11108] syz_tun: entered allmulticast mode [ 239.329901][T11108] syz_tun: left allmulticast mode [ 239.332423][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'. [ 239.361879][T11108] syz_tun: left promiscuous mode [ 239.667291][T11136] netlink: 'syz.3.1331': attribute type 15 has an invalid length. [ 239.682012][T11132] netlink: 'syz.3.1331': attribute type 15 has an invalid length. [ 239.704002][T11138] tipc: New replicast peer: 0.0.0.0 [ 239.714460][T11138] tipc: Enabled bearer , priority 10 [ 239.731803][T11139] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 239.751706][T11138] tipc: Enabling not permitted [ 239.764827][T11138] tipc: Enabling of bearer rejected, failed to enable media [ 239.875347][T11147] nbd: device at index 4 is going down [ 239.898688][T11147] 8021q: VLANs not supported on caif0 [ 240.206900][T11167] tipc: Enabling of bearer rejected, already enabled [ 240.358391][T11179] netlink: 1000 bytes leftover after parsing attributes in process `syz.0.1342'. [ 240.380647][T11182] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1343'. [ 240.590179][ T5839] IPVS: starting estimator thread 0... [ 240.641936][T11192] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 240.763710][T11189] IPVS: using max 23 ests per chain, 55200 per kthread [ 241.071795][T11188] bond4: (slave gretap1): making interface the new active one [ 241.081892][T11188] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 241.099740][ T5839] tipc: Node number set to 2537449879 [ 241.106735][T11200] C: renamed from lo (while UP) [ 241.163868][T11200] net_ratelimit: 15 callbacks suppressed [ 241.163889][T11200] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 241.452002][T11221] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1349'. [ 241.674716][T11236] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 241.710530][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'. [ 241.728246][T11239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1354'. [ 241.843120][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'. [ 241.854165][T11239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1354'. [ 241.881173][T11236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.963808][T11241] veth9: entered promiscuous mode [ 241.994493][T11241] bond3: (slave veth9): Enslaving as an active interface with a down link [ 242.049933][T11247] wg1 speed is unknown, defaulting to 1000 [ 242.071683][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'. [ 242.084366][T11244] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1355'. [ 242.435724][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.472949][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.051303][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 243.064255][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 243.121327][T11285] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1365'. [ 243.268000][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 243.298462][T11275] wg1 speed is unknown, defaulting to 1000 [ 243.441799][T11288] wg1 speed is unknown, defaulting to 1000 [ 244.830248][T11354] IPv6: addrconf: prefix option has invalid lifetime [ 245.297920][T11376] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 245.307854][T11376] bridge3: entered allmulticast mode [ 245.478739][T11379] wg1 speed is unknown, defaulting to 1000 [ 245.680555][T11388] netlink: 'syz.1.1394': attribute type 10 has an invalid length. [ 245.713549][T11388] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.733827][T11388] bond0: (slave team0): Enslaving as an active interface with an up link [ 246.165319][T11415] syzkaller0: entered promiscuous mode [ 246.170889][T11415] syzkaller0: entered allmulticast mode [ 246.219801][T11421] batadv_slave_1: entered promiscuous mode [ 246.230333][T11425] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 247.619573][T11421] tipc: Enabled bearer , priority 0 [ 247.698496][T11426] syzkaller0: entered promiscuous mode [ 247.707173][T11426] syzkaller0: entered allmulticast mode [ 247.723010][T11426] tipc: Resetting bearer [ 247.753565][T11444] __nla_validate_parse: 6 callbacks suppressed [ 247.753583][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 247.773705][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1408'. [ 249.106304][ T13] tipc: Resetting bearer [ 249.113725][T11419] batadv_slave_1: left promiscuous mode [ 249.129356][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 249.148363][ T984] tipc: Node number set to 2828781130 [ 249.212752][T11419] tipc: Resetting bearer [ 249.270517][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'. [ 250.603394][T11419] tipc: Disabling bearer [ 250.758681][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1415'. [ 250.770300][T11470] nbd: must specify a size in bytes for the device [ 250.783640][T11469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1415'. [ 250.842897][T11469] nbd: must specify a size in bytes for the device [ 251.333004][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 251.635765][T11514] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1425'. [ 251.712503][T11515] netlink: 'syz.3.1425': attribute type 13 has an invalid length. [ 251.731005][T11515] netlink: 'syz.3.1425': attribute type 17 has an invalid length. [ 252.003530][T11515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.245343][T11515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.315995][T11514] wg1 speed is unknown, defaulting to 1000 [ 252.436601][T11519] xt_bpf: check failed: parse error [ 252.443290][T11519] sctp: [Deprecated]: syz.4.1426 (pid 11519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.443290][T11519] Use struct sctp_sack_info instead [ 252.573993][T11526] netlink: 'syz.4.1429': attribute type 16 has an invalid length. [ 252.598675][T11526] netlink: 'syz.4.1429': attribute type 17 has an invalid length. [ 252.684299][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1429'. [ 252.700551][T11526] geneve0: left promiscuous mode [ 252.866168][T11526] veth1_vlan: left allmulticast mode [ 252.966618][T11526] tipc: Resetting bearer [ 253.081670][T11526] veth1_to_hsr: left allmulticast mode [ 253.215131][ T24] wg1 speed is unknown, defaulting to 1000 [ 253.230054][ T24] syz0: Port: 1 Link DOWN [ 253.247690][ T8224] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.257011][ T8224] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.392181][ T8224] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.415276][ T8224] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.498815][T11559] netlink: 'syz.4.1436': attribute type 2 has an invalid length. [ 253.510350][T11551] bond0: (slave bond_slave_0): Releasing backup interface [ 253.568701][T11551] team0: Port device team_slave_0 removed [ 253.621867][T11551] team0: Port device team_slave_1 removed [ 253.640740][T11551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.668419][T11551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.679464][T11551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.706117][T11551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.727477][T11551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.761365][ T8224] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.787240][ T8224] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.860299][T11559] : entered promiscuous mode [ 253.988961][ T8224] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.030886][ T8224] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.062326][T11579] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1439'. [ 254.087578][T11596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1442'. [ 254.167448][T11574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1439'. [ 254.213088][T11567] syzkaller0: entered promiscuous mode [ 254.218656][T11567] syzkaller0: entered allmulticast mode [ 254.360180][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 254.369399][T11608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1444'. [ 255.884418][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1445'. [ 255.968031][T11626] tipc: Enabled bearer , priority 0 [ 255.984166][T11626] syzkaller0: entered promiscuous mode [ 255.996674][T11626] syzkaller0: entered allmulticast mode [ 256.269064][T11643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1454'. [ 256.574426][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1456'. [ 256.623576][T11652] sctp: [Deprecated]: syz.4.1457 (pid 11652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.623576][T11652] Use struct sctp_sack_info instead [ 256.831948][T11625] tipc: Resetting bearer [ 256.887579][T11625] tipc: Disabling bearer [ 257.240007][T11666] wg1 speed is unknown, defaulting to 1000 [ 257.432499][T11678] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1461'. [ 257.519667][T11673] syzkaller0: entered promiscuous mode [ 257.527056][T11683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1465'. [ 257.538923][T11673] syzkaller0: entered allmulticast mode [ 257.681652][T11693] bond0: (slave rose0): Releasing backup interface [ 257.934255][T11707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.046100][T11715] netlink: 'syz.4.1475': attribute type 10 has an invalid length. [ 258.052924][T11712] netlink: 'syz.4.1475': attribute type 10 has an invalid length. [ 258.057598][T11715] dummy0: entered promiscuous mode [ 258.085163][T11715] bridge0: port 1(dummy0) entered blocking state [ 258.103785][T11715] bridge0: port 1(dummy0) entered disabled state [ 258.143167][T11715] dummy0: entered allmulticast mode [ 258.191873][T11717] syzkaller0: entered promiscuous mode [ 258.211371][T11717] syzkaller0: entered allmulticast mode [ 258.341028][T11717] netlink: 'syz.2.1476': attribute type 12 has an invalid length. [ 258.364902][T11719] wg1 speed is unknown, defaulting to 1000 [ 258.668879][T11744] netlink: 'syz.4.1481': attribute type 5 has an invalid length. [ 259.100667][T11768] __nla_validate_parse: 9 callbacks suppressed [ 259.100690][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 259.158014][T11766] batadv2: entered promiscuous mode [ 259.328269][T11768] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1490'. [ 259.408214][T11779] wg1 speed is unknown, defaulting to 1000 [ 260.052545][T11796] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1496'. [ 260.103220][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 260.193261][T11798] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.273309][T11800] erspan0: entered allmulticast mode [ 260.289781][T11807] netlink: 'syz.0.1499': attribute type 4 has an invalid length. [ 260.317226][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1500'. [ 260.371005][T11800] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 260.417510][T11811] netlink: 'syz.0.1499': attribute type 4 has an invalid length. [ 260.738297][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'. [ 260.738490][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'. [ 260.807356][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'. [ 260.822883][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'. [ 260.832036][T11822] netlink: 'syz.4.1503': attribute type 12 has an invalid length. [ 260.841107][T11822] netlink: 'syz.4.1503': attribute type 11 has an invalid length. [ 260.850641][T11824] netlink: 'syz.4.1503': attribute type 12 has an invalid length. [ 260.906768][T11824] netlink: 'syz.4.1503': attribute type 11 has an invalid length. [ 260.999642][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.095672][T11828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.161423][T11841] wg1 speed is unknown, defaulting to 1000 [ 261.406822][T11850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.420757][T11850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.726954][T11865] pimreg: entered allmulticast mode [ 261.737888][T11865] pimreg: left allmulticast mode [ 262.175038][T11894] xfrm1: entered allmulticast mode [ 262.296742][T11901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1523'. [ 262.319516][T11901] ip6gre2: entered promiscuous mode [ 262.325210][T11901] ip6gre2: entered allmulticast mode [ 262.431831][T11910] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 262.440205][T11910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.453866][T11910] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 263.957571][T11934] tipc: Enabling of bearer rejected, already enabled [ 263.969452][ T8237] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.002224][ T8237] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.051292][ T8237] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.082639][ T8237] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.137310][T11960] validate_nla: 1 callbacks suppressed [ 264.137332][T11960] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 264.164657][T11957] __nla_validate_parse: 2 callbacks suppressed [ 264.164676][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1537'. [ 264.166026][T11964] netlink: 'syz.3.1536': attribute type 7 has an invalid length. [ 264.182218][T11960] netlink: 'syz.2.1538': attribute type 7 has an invalid length. [ 264.201833][T11960] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1538'. [ 264.212427][T11964] netlink: 'syz.3.1536': attribute type 8 has an invalid length. [ 264.243726][T11964] netlink: 'syz.3.1536': attribute type 13 has an invalid length. [ 264.274586][T11966] netlink: 'syz.3.1536': attribute type 7 has an invalid length. [ 264.280450][T11970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1540'. [ 264.294219][T11966] netlink: 'syz.3.1536': attribute type 8 has an invalid length. [ 264.301987][T11966] netlink: 'syz.3.1536': attribute type 13 has an invalid length. [ 264.366439][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1539'. [ 264.396576][T11974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1541'. [ 264.422792][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1539'. [ 264.482379][T11965] wg1 speed is unknown, defaulting to 1000 [ 264.612798][T11980] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1543'. [ 264.840436][T11993] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1550'. [ 264.849901][T11993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 264.859310][T11993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1550'. [ 264.948984][T11997] No such timeout policy "syz1" [ 264.982634][T11995] bridge5: entered promiscuous mode [ 264.987995][T11995] bridge5: entered allmulticast mode [ 265.026231][T11999] bridge6: entered promiscuous mode [ 265.040947][T11999] bridge6: entered allmulticast mode [ 265.379998][T12012] vlan0: entered promiscuous mode [ 265.388665][T12012] gretap0: entered promiscuous mode [ 265.408561][T12012] vlan0: entered allmulticast mode [ 265.416572][T12012] gretap0: entered allmulticast mode [ 265.435277][T12009] tunl0: Caught tx_queue_len zero misconfig [ 265.466180][T12009] netlink: 'syz.4.1552': attribute type 39 has an invalid length. [ 265.798743][T12014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.238248][T12040] wg1 speed is unknown, defaulting to 1000 [ 266.247018][T12039] wg1 speed is unknown, defaulting to 1000 [ 267.497173][T12087] bond0: Caught tx_queue_len zero misconfig [ 267.606070][T12084] xt_CT: No such helper "snmp_trap" [ 268.042891][T12104] netlink: 'syz.3.1577': attribute type 39 has an invalid length. [ 268.698867][T12130] wg1 speed is unknown, defaulting to 1000 [ 268.849318][T12132] xt_CT: No such helper "snmp_trap" [ 269.035582][T12146] bond6 (unregistering): Released all slaves [ 269.894959][T12199] __nla_validate_parse: 13 callbacks suppressed [ 269.894982][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 270.437981][T12216] syzkaller0: entered promiscuous mode [ 270.463706][T12216] syzkaller0: entered allmulticast mode [ 270.967859][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 270.996638][T12240] validate_nla: 2 callbacks suppressed [ 270.996657][T12240] netlink: 'syz.1.1613': attribute type 1 has an invalid length. [ 271.021907][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'. [ 271.125663][T12246] wg1 speed is unknown, defaulting to 1000 [ 271.174437][T12250] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1615'. [ 271.182499][T12257] netlink: 'syz.1.1617': attribute type 1 has an invalid length. [ 271.193652][T12257] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1617'. [ 271.244542][T12257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1617'. [ 271.873550][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 271.904596][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1623'. [ 272.055376][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1626'. [ 272.097320][T12298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1626'. [ 272.135931][ T8224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.172838][ T8224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.766148][T12334] tipc: Enabled bearer , priority 0 [ 272.774242][T12334] syzkaller0: entered promiscuous mode [ 272.779800][T12334] syzkaller0: entered allmulticast mode [ 272.896159][T12343] tipc: Enabled bearer , priority 0 [ 272.903843][T12343] syzkaller0: entered promiscuous mode [ 272.909745][T12343] syzkaller0: entered allmulticast mode [ 272.925665][T12343] netlink: 'syz.0.1642': attribute type 1 has an invalid length. [ 272.967031][T12343] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.014689][T12343] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.027572][T12343] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 273.061554][T12343] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 273.124966][T12349] veth11: entered promiscuous mode [ 273.138000][T12349] bond5: (slave veth11): Enslaving as an active interface with a down link [ 273.159014][T12341] tipc: Resetting bearer [ 273.197019][T12341] tipc: Disabling bearer [ 273.452822][T12366] netlink: 'syz.3.1648': attribute type 5 has an invalid length. [ 273.471515][T12366] ip6erspan0: entered promiscuous mode [ 273.498101][T12326] tipc: Resetting bearer [ 273.567214][T12326] tipc: Disabling bearer [ 274.741520][T12377] vlan0: left allmulticast mode [ 274.746764][T12377] veth0_vlan: left allmulticast mode [ 274.753185][T12377] vlan0: left promiscuous mode [ 274.903003][T12377] __nla_validate_parse: 159 callbacks suppressed [ 274.903026][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1651'. [ 274.920166][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1651'. [ 274.936213][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1651'. [ 274.945564][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1651'. [ 274.954678][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1651'. [ 274.964202][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1651'. [ 274.974239][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1651'. [ 274.983511][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1651'. [ 275.003502][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1651'. [ 275.012704][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1651'. [ 275.063056][T12393] netlink: 'syz.2.1654': attribute type 29 has an invalid length. [ 275.168168][ T8224] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.180063][ T8224] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.189754][T12411] C: Caught tx_queue_len zero misconfig [ 275.208752][T12411] netlink: 'syz.4.1656': attribute type 3 has an invalid length. [ 275.217555][ T8224] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.240267][ T8224] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.431327][T12424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.454121][T12416] "syz.2.1658" (12416) uses obsolete ecb(arc4) skcipher [ 275.804508][T12442] wg1 speed is unknown, defaulting to 1000 [ 276.079118][T12456] : renamed from bond_slave_0 [ 276.210496][T12459] wg1 speed is unknown, defaulting to 1000 [ 276.258050][T12460] veth0: entered promiscuous mode [ 276.416700][T12460] veth0: left promiscuous mode [ 276.604548][T12470] xt_CT: No such helper "snmp_trap" [ 276.620205][T12465] netlink: 'syz.4.1675': attribute type 5 has an invalid length. [ 277.355570][T12464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.570819][T12510] tipc: Enabled bearer , priority 0 [ 277.603348][T12510] syzkaller0: entered promiscuous mode [ 277.610401][T12510] syzkaller0: entered allmulticast mode [ 277.654136][T12508] netlink: 'syz.1.1686': attribute type 11 has an invalid length. [ 277.707834][T12513] xt_CT: No such helper "snmp_trap" [ 277.709871][T12519] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 277.731703][T12516] bridge0: port 2(veth0_to_bridge) entered blocking state [ 277.739726][T12516] bridge0: port 2(veth0_to_bridge) entered disabled state [ 277.747107][T12521] netlink: 'syz.2.1687': attribute type 1 has an invalid length. [ 277.748422][T12516] veth0_to_bridge: entered allmulticast mode [ 277.765715][T12516] veth0_to_bridge: entered promiscuous mode [ 277.799407][T12519] bond6: entered promiscuous mode [ 277.811099][T12519] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.849095][T12521] bond3: entered promiscuous mode [ 277.855035][T12521] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.865964][T12520] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 278.063322][T12543] netlink: 'syz.4.1693': attribute type 13 has an invalid length. [ 278.090241][T12543] netlink: 'syz.4.1693': attribute type 17 has an invalid length. [ 278.134141][T12546] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.338672][T12560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.428657][T12543] bridge0: port 1(dummy0) entered blocking state [ 278.435407][T12543] bridge0: port 1(dummy0) entered listening state [ 278.470391][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.494372][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.511937][T12543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.601223][T12509] tipc: Resetting bearer [ 278.660995][T12509] tipc: Disabling bearer [ 278.790048][T12548] wg1 speed is unknown, defaulting to 1000 [ 279.543672][T12605] wg1 speed is unknown, defaulting to 1000 [ 279.901589][T12612] netlink: 'syz.3.1710': attribute type 1 has an invalid length. [ 280.156285][T12616] can: request_module (can-proto-0) failed. [ 280.335413][T12628] __nla_validate_parse: 35 callbacks suppressed [ 280.335437][T12628] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1717'. [ 280.438629][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'. [ 280.469118][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'. [ 280.493182][T12639] vlan1: entered allmulticast mode [ 280.496247][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'. [ 280.508660][T12639] veth0_vlan: entered allmulticast mode [ 280.516744][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'. [ 280.526350][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'. [ 280.548423][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'. [ 280.582859][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'. [ 280.607362][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'. [ 280.627094][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'. [ 280.959757][T12653] netlink: 'syz.0.1723': attribute type 12 has an invalid length. [ 280.981716][T12653] netlink: 'syz.0.1723': attribute type 4 has an invalid length. [ 281.902305][T12686] netlink: 'syz.1.1732': attribute type 14 has an invalid length. [ 282.301042][T12704] vlan1: left allmulticast mode [ 282.312197][T12704] veth0_vlan: left allmulticast mode [ 282.327169][T12704] bond1: left promiscuous mode [ 282.340292][T12704] macvtap1: left promiscuous mode [ 282.355904][T12704] macvtap1: left allmulticast mode [ 282.370047][T12704] gtp0: left promiscuous mode [ 282.384255][T12704] gtp0: left allmulticast mode [ 282.396578][T12704] bridge0: left promiscuous mode [ 282.401766][T12704] bridge0: left allmulticast mode [ 282.423430][T12704] ip6gretap1: left promiscuous mode [ 282.444117][T12704] ip6gretap1: left allmulticast mode [ 282.457871][T12704] macvlan3: left promiscuous mode [ 282.474386][T12704] veth5: left promiscuous mode [ 282.488204][T12704] ip6erspan0: left promiscuous mode [ 282.532135][ T8224] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 282.540499][ T8224] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 282.570913][ T8224] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 282.593919][ T8224] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 282.602525][T12708] wg1 speed is unknown, defaulting to 1000 [ 282.610818][T12706] wg1 speed is unknown, defaulting to 1000 [ 283.047520][T12736] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 283.470338][T12751] wg1 speed is unknown, defaulting to 1000 [ 283.626838][T12758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.634580][T12758] IPv6: NLM_F_CREATE should be set when creating new route [ 283.913562][T12770] x_tables: duplicate underflow at hook 1 [ 284.235087][T12791] geneve4: entered promiscuous mode [ 284.261326][ T1114] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.280205][T12787] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 284.306369][ T1114] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.342424][ T1114] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.381329][ T1114] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.725149][ T30] audit: type=1804 audit(1763509824.210:5): pid=12825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1770" name="/newroot/347/cgroup.controllers" dev="tmpfs" ino=1790 res=1 errno=0 [ 284.770339][ T30] audit: type=1800 audit(1763509824.210:6): pid=12825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1770" name="cgroup.controllers" dev="tmpfs" ino=1790 res=0 errno=0 [ 284.793462][ T30] audit: type=1800 audit(1763509824.210:7): pid=12825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1770" name="cgroup.controllers" dev="tmpfs" ino=1790 res=0 errno=0 [ 285.009961][T12848] wg1 speed is unknown, defaulting to 1000 [ 285.395722][T12870] syzkaller0: entered promiscuous mode [ 285.404814][T12870] syzkaller0: entered allmulticast mode [ 285.611134][T12884] syzkaller0: entered promiscuous mode [ 285.623611][T12884] syzkaller0: entered allmulticast mode [ 285.755417][T12900] netlink: 'syz.2.1783': attribute type 15 has an invalid length. [ 285.867720][T12906] __nla_validate_parse: 128 callbacks suppressed [ 285.867743][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'. [ 285.990516][T12910] wg1 speed is unknown, defaulting to 1000 [ 286.141162][T12927] netlink: 'syz.1.1789': attribute type 4 has an invalid length. [ 286.217011][T12922] netlink: 'syz.3.1790': attribute type 8 has an invalid length. [ 286.308912][T12935] tc_dump_action: action bad kind [ 286.627735][T12946] wg1 speed is unknown, defaulting to 1000 [ 286.635923][T12949] netlink: 960 bytes leftover after parsing attributes in process `syz.4.1797'. [ 286.857278][T12953] wg1 speed is unknown, defaulting to 1000 [ 287.513769][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 287.641670][T12986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1808'. [ 287.816509][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1812'. [ 287.829465][T13000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1814'. [ 287.869666][T13004] æÿîÿ: entered promiscuous mode [ 288.021803][T13015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1818'. [ 288.608245][T13046] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1826'. [ 288.627562][T13046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1826'. [ 288.631453][T13047] gretap3: entered allmulticast mode [ 288.874555][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1832'. [ 289.059976][T13065] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 289.180502][T13076] wg1 speed is unknown, defaulting to 1000 [ 289.326174][T13088] wg1 speed is unknown, defaulting to 1000 [ 289.520663][T13090] wg1 speed is unknown, defaulting to 1000 [ 289.762986][T13108] wg1 speed is unknown, defaulting to 1000 [ 290.050027][T13118] wg1 speed is unknown, defaulting to 1000 [ 290.096339][T13122] netlink: 'syz.1.1848': attribute type 11 has an invalid length. [ 290.597424][T13136] xt_CT: No such helper "snmp_trap" [ 290.764561][T13149] syzkaller0: entered promiscuous mode [ 290.790233][T13149] syzkaller0: entered allmulticast mode [ 291.114292][T13165] netlink: 'syz.0.1857': attribute type 39 has an invalid length. [ 291.129266][T13161] wg1 speed is unknown, defaulting to 1000 [ 291.493925][T13171] wg1 speed is unknown, defaulting to 1000 [ 291.658419][T13183] __nla_validate_parse: 6 callbacks suppressed [ 291.658440][T13183] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1861'. [ 292.834736][T13215] syzkaller0: entered promiscuous mode [ 292.840270][T13215] syzkaller0: entered allmulticast mode [ 293.172769][T13231] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 293.198792][T13226] wg1 speed is unknown, defaulting to 1000 [ 293.207291][T13231] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 293.423988][T13245] xt_CT: No such helper "snmp_trap" [ 293.927152][T13259] x_tables: duplicate underflow at hook 1 [ 294.482004][T13267] netlink: 'syz.4.1882': attribute type 1 has an invalid length. [ 294.499766][T13267] netlink: 'syz.4.1882': attribute type 2 has an invalid length. [ 294.671607][T13270] netlink: 'syz.4.1883': attribute type 1 has an invalid length. [ 294.795287][T13270] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.817141][T13271] bond6: (slave gretap2): making interface the new active one [ 294.827092][T13271] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 295.110305][T13287] netlink: 'syz.2.1888': attribute type 16 has an invalid length. [ 295.129459][T13287] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1888'. [ 295.243040][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'. [ 295.407396][T13295] xt_CT: No such helper "snmp_trap" [ 295.571146][T13300] wg1 speed is unknown, defaulting to 1000 [ 295.680086][T13308] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1894'. [ 296.089056][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1901'. [ 296.150000][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 296.183309][T13337] siw: device registration error -23 [ 296.204139][T13337] wg1 speed is unknown, defaulting to 1000 [ 296.225745][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 296.369616][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1906'. [ 296.395265][T13346] bond1: left allmulticast mode [ 296.407138][T13346] bond1: left promiscuous mode [ 296.423020][T13346] bridge0: port 4(bond1) entered disabled state [ 296.427806][T13343] xt_CT: No such helper "snmp_trap" [ 296.448366][T13346] bridge0: port 3(batadv0) entered disabled state [ 296.468714][T13346] bridge_slave_1: left allmulticast mode [ 296.507238][T13346] bridge_slave_1: left promiscuous mode [ 296.551061][T13346] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.577142][T13346] bridge_slave_0: left allmulticast mode [ 296.588746][T13346] bridge_slave_0: left promiscuous mode [ 296.603477][T13346] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.888172][T13356] wg1 speed is unknown, defaulting to 1000 [ 296.957184][T13371] netlink: 'syz.2.1912': attribute type 12 has an invalid length. [ 296.985656][T13349] wg1 speed is unknown, defaulting to 1000 [ 296.998253][T13371] netlink: 'syz.2.1912': attribute type 4 has an invalid length. [ 297.151916][T13379] syzkaller1: entered promiscuous mode [ 297.165158][T13379] syzkaller1: entered allmulticast mode [ 297.181055][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 297.267694][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1918'. [ 297.847531][T13416] wg1 speed is unknown, defaulting to 1000 [ 298.288088][T13445] IPVS: Scheduler module ip_vs_sip not found [ 298.316187][T13448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1931'. [ 298.409920][T13445] IPVS: length: 141 != 8 [ 298.569745][T13453] wg1 speed is unknown, defaulting to 1000 [ 298.601146][T13457] wg1 speed is unknown, defaulting to 1000 [ 298.853806][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 298.872187][T13465] netlink: 'syz.1.1936': attribute type 5 has an invalid length. [ 298.890875][T13465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1936'. [ 299.007026][T13469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1938'. [ 299.042928][T13465] geneve4: entered promiscuous mode [ 299.068636][T13465] geneve4: entered allmulticast mode [ 299.145792][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 299.154584][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 299.174466][T13469] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 299.225075][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 299.237923][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 299.299983][T13476] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1939'. [ 299.338075][T13477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1939'. [ 299.738037][T13489] sctp: [Deprecated]: syz.0.1943 (pid 13489) Use of int in max_burst socket option. [ 299.738037][T13489] Use struct sctp_assoc_value instead [ 299.850253][T13492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.869249][T13492] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.916096][T13492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.135482][T13503] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1947'. [ 300.226941][T13508] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1949'. [ 300.434724][T13511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.656819][T13533] tipc: Enabling of bearer rejected, failed to enable media [ 302.579408][T13560] nftables ruleset with unbound chain [ 302.694447][T13557] bridge_slave_1: left allmulticast mode [ 302.700175][T13557] bridge_slave_1: left promiscuous mode [ 302.707848][T13557] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.723506][T13557] bridge_slave_0: left allmulticast mode [ 302.739506][T13557] bridge_slave_0: left promiscuous mode [ 302.746037][T13557] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.908058][T13569] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1966'. [ 302.982588][T13563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'. [ 303.030894][T13563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'. [ 303.053045][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 303.099697][T13566] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1965'. [ 303.171461][T13568] batadv1: entered promiscuous mode [ 303.913208][T13592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1974'. [ 303.924513][T13592] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 304.390560][T13586] bridge_slave_0: entered promiscuous mode [ 304.454779][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'. [ 304.460443][T13586] bridge_slave_0: entered allmulticast mode [ 304.493684][T13616] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 304.559881][T13620] tipc: Enabling of bearer rejected, already enabled [ 304.621257][T13616] syzkaller0: entered promiscuous mode [ 304.633107][T13616] syzkaller0: entered allmulticast mode [ 306.101019][ T8221] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 306.110161][ T8221] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 306.125514][ T984] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 306.374695][T13687] openvswitch: netlink: nsh attr 0 has unexpected len 16381 expected 0 [ 306.392731][T13687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.462698][ T984] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 306.592379][T13693] netlink: 'syz.2.1997': attribute type 11 has an invalid length. [ 306.600257][T13693] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1997'. [ 306.623888][T13702] netlink: 'syz.1.2003': attribute type 3 has an invalid length. [ 306.865086][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'. [ 307.074538][ T984] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 307.145527][T13725] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 307.152279][T13726] wg1 speed is unknown, defaulting to 1000 [ 307.471878][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'. [ 307.509488][T13733] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.604605][T13733] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.665940][T13745] netlink: 'syz.1.2013': attribute type 1 has an invalid length. [ 307.701232][T13733] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.750186][T13749] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 307.935592][T13745] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.017004][T13749] bond6: (slave gretap1): making interface the new active one [ 308.038446][T13749] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 308.057182][T13733] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.266721][ T8221] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.364962][ T1114] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.409103][ T1114] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.436154][T13770] wg1 speed is unknown, defaulting to 1000 [ 308.536823][ T8221] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.723588][T13783] __nla_validate_parse: 1 callbacks suppressed [ 308.723608][T13783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2022'. [ 308.750405][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 308.798806][T13777] macvtap1: entered promiscuous mode [ 308.816364][T13777] veth1: entered promiscuous mode [ 308.829797][T13777] macvtap1: entered allmulticast mode [ 308.835425][T13777] veth1: entered allmulticast mode [ 308.841995][T13790] 8021q: VLANs not supported on ip6gre0 [ 308.858036][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2025'. [ 308.928623][T13799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2026'. [ 308.994026][ C1] bridge0: port 1(dummy0) entered learning state [ 309.169797][T13811] tipc: Enabled bearer , priority 0 [ 309.287207][T13817] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 309.298790][T13795] tipc: Disabling bearer [ 309.308068][T13817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.698793][T13834] bond4: entered promiscuous mode [ 309.705805][T13834] bond4: entered allmulticast mode [ 309.711420][T13834] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.819237][T13844] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2037'. [ 309.920251][T13850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2042'. [ 309.933984][T13850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2042'. [ 309.950029][T13854] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.2041'. [ 309.959848][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 309.968995][T13854] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.2041'. [ 309.980130][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 310.164927][T13854] team0 (unregistering): Port device team_slave_0 removed [ 310.185103][T13854] team0 (unregistering): Port device team_slave_1 removed [ 310.349055][T13858] x_tables: duplicate underflow at hook 2 [ 311.760260][T13922] netlink: 'syz.4.2062': attribute type 1 has an invalid length. [ 311.770108][T13919] syzkaller0: entered promiscuous mode [ 311.782547][T13919] syzkaller0: entered allmulticast mode [ 311.814513][T13919] netlink: 'syz.0.2060': attribute type 10 has an invalid length. [ 311.822619][T13919] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 311.893986][T13924] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 311.914296][T13924] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 312.336341][T13943] bond0: (slave bond_slave_0): Releasing backup interface [ 312.353982][T13943] team0: Port device team_slave_0 removed [ 312.361966][T13945] ip6t_REJECT: ECHOREPLY is not supported [ 312.390740][T13943] team0: Port device team_slave_1 removed [ 312.402147][T13943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 312.500629][T13950] bridge0: port 1(dummy0) entered disabled state [ 312.533844][T13950] wg1: left promiscuous mode [ 312.538521][T13950] wg1: left allmulticast mode [ 312.555630][T13950] macvlan0: left allmulticast mode [ 312.569585][T13950] tipc: Resetting bearer [ 312.577506][T13950] syzkaller0: left promiscuous mode [ 312.583852][T13950] syzkaller0: left allmulticast mode [ 312.592444][T13950] ip6gre1: left promiscuous mode [ 312.605093][T13950] macvtap1: left promiscuous mode [ 312.610498][T13950] macvtap1: left allmulticast mode [ 312.624369][T13950] geneve4: left promiscuous mode [ 312.750890][T13952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.769832][T13953] hsr_slave_0: left promiscuous mode [ 312.806923][T13953] hsr_slave_1: left promiscuous mode [ 312.858982][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.875396][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.892498][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.925538][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.422279][T13994] netlink: 'syz.2.2080': attribute type 13 has an invalid length. [ 313.511630][T13990] block nbd1: not configured, cannot reconfigure [ 313.711046][T14005] xfrm1: entered allmulticast mode [ 313.895188][T14015] __nla_validate_parse: 8 callbacks suppressed [ 313.895208][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'. [ 313.897996][T14014] netlink: 'syz.3.2086': attribute type 3 has an invalid length. [ 314.178321][T14026] macvlan0: entered promiscuous mode [ 314.184230][T14026] netlink: 'syz.3.2088': attribute type 1 has an invalid length. [ 314.196947][T14026] netlink: 'syz.3.2088': attribute type 2 has an invalid length. [ 314.217662][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 314.247254][T14025] dvmrp0: entered allmulticast mode [ 314.707036][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2097'. [ 314.734736][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2097'. [ 314.785908][T14046] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 314.908227][T14046] 8021q: adding VLAN 0 to HW filter on device bond5 [ 314.937414][T14056] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2100'. [ 315.041580][T14050] veth5: entered promiscuous mode [ 315.080762][T14050] bond5: (slave veth5): Enslaving as an active interface with an up link [ 315.131415][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'. [ 315.318309][T14066] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2104'. [ 315.328182][T14066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2104'. [ 315.349188][T14066] syzkaller1: entered promiscuous mode [ 315.362671][T14066] syzkaller1: entered allmulticast mode [ 315.451449][T14077] netlink: 'syz.0.2107': attribute type 13 has an invalid length. [ 315.463350][T14077] netlink: 'syz.0.2107': attribute type 17 has an invalid length. [ 315.593811][T14077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.625900][T14077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.727209][T14081] wg1 speed is unknown, defaulting to 1000 [ 315.753413][T14089] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 315.857262][T14088] wg1 speed is unknown, defaulting to 1000 [ 316.168865][T14102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2114'. [ 316.515195][T14105] dvmrp0: left allmulticast mode [ 316.599947][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2120'. [ 316.706374][ T8222] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.719026][ T8222] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.735763][ T8222] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.744565][ T8222] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.197310][T14155] netlink: 'syz.1.2129': attribute type 4 has an invalid length. [ 317.320320][T14165] netlink: 'syz.4.2131': attribute type 1 has an invalid length. [ 317.338698][T14165] netlink: 'syz.4.2131': attribute type 2 has an invalid length. [ 317.539298][T14171] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 317.905812][T14146] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 317.952240][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 318.041697][T14200] x_tables: duplicate underflow at hook 2 [ 318.586862][T14226] netlink: 'syz.3.2148': attribute type 1 has an invalid length. [ 318.856326][T14229] bond4: entered promiscuous mode [ 318.904197][T14229] bond4: entered allmulticast mode [ 318.990688][T14229] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.436550][T14254] wg1 speed is unknown, defaulting to 1000 [ 320.044784][T14276] netlink: 'syz.3.2161': attribute type 10 has an invalid length. [ 320.068077][T14281] __nla_validate_parse: 6 callbacks suppressed [ 320.068098][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 320.103645][T14276] batman_adv: batadv0: Adding interface: macvtap0 [ 320.137142][T14276] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.189807][T14276] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 320.784987][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 321.134613][T14343] pim6reg1: entered promiscuous mode [ 321.167827][T14343] pim6reg1: entered allmulticast mode [ 321.242602][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 321.277316][T14352] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 321.355142][T14358] netlink: 'syz.0.2179': attribute type 1 has an invalid length. [ 321.546458][T14358] can: request_module (can-proto-0) failed. [ 321.676338][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'. [ 321.688662][T14358] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2179'. [ 321.716516][T14358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'. [ 321.725930][T14358] gre0: entered promiscuous mode [ 321.731186][T14358] gre0: entered allmulticast mode [ 321.744845][T14358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'. [ 321.748568][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2183'. [ 321.827531][T14374] bond8: option packets_per_slave: invalid value (1048582) [ 321.879956][T14374] bond8: option packets_per_slave: allowed values 0 - 65535 [ 321.910666][T14374] bond8 (unregistering): Released all slaves [ 322.437237][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.446576][T14405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2187'. [ 322.814273][T14421] netlink: 'syz.3.2195': attribute type 1 has an invalid length. [ 323.192639][T14440] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 323.204843][T14440] bond6 (unregistering): Released all slaves [ 323.234603][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2203'. [ 323.247116][T14448] netlink: 'syz.0.2203': attribute type 1 has an invalid length. [ 323.380413][T14448] 8021q: adding VLAN 0 to HW filter on device bond7 [ 323.409570][T14448] bond0: (slave bond7): Enslaving as an active interface with an up link [ 323.483857][T14462] netlink: 'syz.1.2206': attribute type 1 has an invalid length. [ 323.492355][T14461] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 323.519873][T14464] netlink: 'syz.4.2207': attribute type 33 has an invalid length. [ 323.532297][T14464] `: renamed from team0 [ 323.591165][T14467] syzkaller0: entered promiscuous mode [ 323.612536][T14467] syzkaller0: entered allmulticast mode [ 323.839423][T14479] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 323.886512][T14479] bond6 (unregistering): Released all slaves [ 324.024534][T14496] x_tables: duplicate entry at hook 1 [ 324.039029][T14488] bond6: option min_links: invalid value (18446744073709551612) [ 324.046896][T14488] bond6: option min_links: allowed values 0 - 2147483647 [ 324.067843][T14488] bond6 (unregistering): Released all slaves [ 324.282544][T14498] wg1 speed is unknown, defaulting to 1000 [ 324.346784][T14509] dummy0: entered promiscuous mode [ 324.369500][T14509] dummy0: entered allmulticast mode [ 324.663554][T14531] netlink: 'syz.4.2222': attribute type 4 has an invalid length. [ 324.819299][T14538] wg1 speed is unknown, defaulting to 1000 [ 325.265358][T14564] __nla_validate_parse: 9 callbacks suppressed [ 325.265378][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2231'. [ 325.328402][T14568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2231'. [ 325.675350][T14584] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2239'. [ 325.746946][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 325.781679][T14588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2240'. [ 325.935703][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 325.994897][T14600] ip6gretap0: entered promiscuous mode [ 326.009723][T14602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2244'. [ 326.036044][T14600] ip6gretap0: left promiscuous mode [ 326.360074][T14619] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 326.490516][T14619] bond8: (slave gretap3): making interface the new active one [ 326.510539][T14619] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 326.554768][T14625] macvlan2: entered promiscuous mode [ 326.570301][T14625] macvlan2: entered allmulticast mode [ 326.716764][T14629] delete_channel: no stack [ 327.165081][T14647] wg1 speed is unknown, defaulting to 1000 [ 327.475736][T14664] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 327.574968][T14664] 8021q: adding VLAN 0 to HW filter on device bond6 [ 327.742969][T14678] nbd: must specify a device to reconfigure [ 327.880605][T14683] xt_hashlimit: max too large, truncated to 1048576 [ 327.905064][T14683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.033888][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2264'. [ 328.050129][T14685] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 328.082873][T14689] netlink: 'syz.3.2266': attribute type 2 has an invalid length. [ 328.109790][T14691] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 328.112506][T14689] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 328.160241][T14689] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 328.263623][T14698] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2269'. [ 328.439076][T14711] netlink: 'syz.0.2273': attribute type 1 has an invalid length. [ 328.541998][T14714] xt_hashlimit: overflow, try lower: 0/0 [ 328.735050][T14719] macsec1: entered promiscuous mode [ 328.762439][T14719] ip6gretap0: entered promiscuous mode [ 328.769024][T14719] macsec1: entered allmulticast mode [ 328.782808][T14719] ip6gretap0: entered allmulticast mode [ 328.783957][T14724] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 329.231946][T14748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2285'. [ 329.295880][T14745] xt_CT: No such helper "snmp_trap" [ 329.869145][T14775] veth13: entered promiscuous mode [ 330.560759][T14799] tipc: Enabled bearer , priority 0 [ 330.592249][T14799] syzkaller0: entered promiscuous mode [ 330.612224][T14799] syzkaller0: entered allmulticast mode [ 330.841495][T14798] tipc: Resetting bearer [ 330.888341][T14812] __nla_validate_parse: 6 callbacks suppressed [ 330.888361][T14812] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2306'. [ 330.926136][T14812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2306'. [ 330.937084][T14798] tipc: Disabling bearer [ 330.945874][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2307'. [ 330.978304][T14807] wg1 speed is unknown, defaulting to 1000 [ 331.035088][T14810] wg1 speed is unknown, defaulting to 1000 [ 331.073637][T14822] syz.3.2308: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.098803][T14822] CPU: 1 UID: 0 PID: 14822 Comm: syz.3.2308 Not tainted syzkaller #0 PREEMPT(full) [ 331.098832][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.098858][T14822] Call Trace: [ 331.098866][T14822] [ 331.098876][T14822] dump_stack_lvl+0x189/0x250 [ 331.098912][T14822] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 331.098957][T14822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.098987][T14822] ? __pfx__printk+0x10/0x10 [ 331.099010][T14822] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 331.099039][T14822] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 331.099075][T14822] warn_alloc+0x214/0x310 [ 331.099107][T14822] ? stack_depot_save_flags+0x40/0x860 [ 331.099145][T14822] ? __pfx_warn_alloc+0x10/0x10 [ 331.099178][T14822] ? kasan_save_track+0x3e/0x80 [ 331.099206][T14822] ? __kasan_kmalloc+0x93/0xb0 [ 331.099224][T14822] ? xsk_setsockopt+0x4dc/0x8d0 [ 331.099253][T14822] ? do_sock_setsockopt+0x17c/0x1b0 [ 331.099274][T14822] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 331.099296][T14822] ? do_syscall_64+0xfa/0xfa0 [ 331.099315][T14822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.099348][T14822] __vmalloc_node_range_noprof+0x125/0x12d0 [ 331.099415][T14822] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.099453][T14822] ? __kasan_kmalloc+0x93/0xb0 [ 331.099479][T14822] vmalloc_user_noprof+0xad/0xf0 [ 331.099509][T14822] ? xskq_create+0xbf/0x170 [ 331.099542][T14822] xskq_create+0xbf/0x170 [ 331.099577][T14822] xsk_init_queue+0xb0/0x110 [ 331.099613][T14822] xsk_setsockopt+0x4dc/0x8d0 [ 331.099647][T14822] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.099681][T14822] ? __pfx_aa_sk_perm+0x10/0x10 [ 331.099717][T14822] ? aa_sock_opt_perm+0xff/0x1b0 [ 331.099754][T14822] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 331.099775][T14822] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.099808][T14822] do_sock_setsockopt+0x17c/0x1b0 [ 331.099838][T14822] __x64_sys_setsockopt+0x13f/0x1b0 [ 331.099869][T14822] do_syscall_64+0xfa/0xfa0 [ 331.099888][T14822] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.099909][T14822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.099937][T14822] ? clear_bhb_loop+0x60/0xb0 [ 331.099964][T14822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.099985][T14822] RIP: 0033:0x7fe62318f6c9 [ 331.100004][T14822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.100023][T14822] RSP: 002b:00007fe6240a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.100045][T14822] RAX: ffffffffffffffda RBX: 00007fe6233e5fa0 RCX: 00007fe62318f6c9 [ 331.100061][T14822] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 331.100074][T14822] RBP: 00007fe623211f91 R08: 0000000000000004 R09: 0000000000000000 [ 331.100087][T14822] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.100099][T14822] R13: 00007fe6233e6038 R14: 00007fe6233e5fa0 R15: 00007ffecbab3ef8 [ 331.100137][T14822] [ 331.100320][T14822] Mem-Info: [ 331.402225][T14822] active_anon:3940 inactive_anon:0 isolated_anon:0 [ 331.402225][T14822] active_file:3426 inactive_file:39979 isolated_file:0 [ 331.402225][T14822] unevictable:768 dirty:272 writeback:0 [ 331.402225][T14822] slab_reclaimable:12179 slab_unreclaimable:214154 [ 331.402225][T14822] mapped:30370 shmem:1355 pagetables:990 [ 331.402225][T14822] sec_pagetables:0 bounce:0 [ 331.402225][T14822] kernel_misc_reclaimable:0 [ 331.402225][T14822] free:1211400 free_pcp:14207 free_cma:0 [ 331.455349][T14822] Node 0 active_anon:15760kB inactive_anon:0kB active_file:13704kB inactive_file:159708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121480kB dirty:1088kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13084kB pagetables:3928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.493153][T14822] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.571901][T14822] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.587190][T14824] wg1 speed is unknown, defaulting to 1000 [ 331.704585][T14822] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 331.713469][T14822] Node 0 DMA32 free:933636kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19160kB inactive_anon:0kB active_file:13704kB inactive_file:159708kB unevictable:1536kB writepending:1088kB zspages:0kB present:3129332kB managed:2565104kB mlocked:0kB bounce:0kB free_pcp:34644kB local_pcp:11324kB free_cma:0kB [ 331.840810][T14840] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2312'. [ 331.855217][T14822] lowmem_reserve[]: 0 0 0 0 0 [ 331.860023][T14822] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.968043][T14842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2313'. [ 331.981277][T14822] lowmem_reserve[]: 0 0 0 0 0 [ 332.010434][T14822] Node 1 Normal free:3896604kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16256kB local_pcp:8544kB free_cma:0kB [ 332.041406][T14842] tipc: Invalid UDP bearer configuration [ 332.045630][T14822] lowmem_reserve[]: 0 0 0 0 0 [ 332.056918][T14822] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 332.065994][T14842] tipc: Enabling of bearer rejected, failed to enable media [ 332.070519][T14822] Node 0 DMA32: 1824*4kB (UME) 721*8kB (UM) 277*16kB (UME) 900*32kB (UME) 337*64kB (UME) 133*128kB (UME) 44*256kB (UM) 16*512kB (UM) 10*1024kB (UME) 8*2048kB (UME) 196*4096kB (UM) = 933784kB [ 332.098852][T14822] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 332.111317][T14822] Node 1 Normal: 199*4kB (UE) 64*8kB (UME) 44*16kB (UME) 102*32kB (UM) 24*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3896604kB [ 332.130622][T14822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.140762][T14822] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.151428][T14822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.162739][T14850] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 332.176560][T14822] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.186730][T14822] 46671 total pagecache pages [ 332.191453][T14822] 0 pages in swap cache [ 332.196880][T14822] Free swap = 124996kB [ 332.201073][T14822] Total swap = 124996kB [ 332.206383][T14822] 2097051 pages RAM [ 332.210345][T14822] 0 pages HighMem/MovableOnly [ 332.217606][T14822] 424133 pages reserved [ 332.221890][T14822] 0 pages cma reserved [ 333.068180][T14875] tipc: Failed to remove unknown binding: 66,1,1/2094438229:1927727794/1927727796 [ 333.081652][T14875] tipc: Failed to remove unknown binding: 66,1,1/2094438229:1927727794/1927727796 [ 333.092602][T14875] tipc: Failed to remove unknown binding: 66,1,1/2094438229:1927727794/1927727796 [ 333.237534][T14871] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2320'. [ 333.393643][T14882] wg1 speed is unknown, defaulting to 1000 [ 333.446928][T14884] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 333.631166][T14884] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 333.668972][T14870] wg1 speed is unknown, defaulting to 1000 [ 333.706778][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2326'. [ 333.754351][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2326'. [ 333.854149][T14884] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 333.952248][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 333.954529][T14884] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 334.005761][T14914] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 334.122759][ T5899] IPVS: starting estimator thread 0... [ 334.253064][T14920] IPVS: using max 27 ests per chain, 64800 per kthread [ 334.352701][ T8151] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 334.361360][ T8151] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 334.452309][ T8151] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 334.468056][T14933] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2334'. [ 334.485369][ T8231] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 334.508773][T14933] 8021q: VLANs not supported on sit0 [ 334.678725][T14943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2338'. [ 334.928762][T14951] xt_hashlimit: max too large, truncated to 1048576 [ 335.286287][T14962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.468973][T14977] netlink: 'syz.1.2347': attribute type 21 has an invalid length. [ 335.509954][T14980] netlink: 'syz.3.2346': attribute type 1 has an invalid length. [ 335.561148][T14980] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.603578][T14985] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.610925][T14985] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 335.624824][T14985] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 335.712924][T14980] veth7: entered promiscuous mode [ 335.722523][T14980] bond6: (slave veth7): Enslaving as an active interface with a down link [ 335.910821][T14999] wg1 speed is unknown, defaulting to 1000 [ 336.137786][T15021] __nla_validate_parse: 6 callbacks suppressed [ 336.137806][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'. [ 336.599491][T15044] xt_CT: No such helper "snmp_trap" [ 336.675740][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2366'. [ 336.849177][T15064] netlink: 1020 bytes leftover after parsing attributes in process `syz.2.2370'. [ 337.056947][T15081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2374'. [ 337.098247][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 337.102923][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 337.144247][T15088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2373'. [ 337.154080][T15077] wg1 speed is unknown, defaulting to 1000 [ 337.191615][T15088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2373'. [ 337.285648][T15089] xt_CT: No such helper "snmp_trap" [ 337.457454][T15101] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 337.642730][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2380'. [ 337.991176][T15122] netlink: 'syz.2.2385': attribute type 13 has an invalid length. [ 337.999502][T15122] netlink: 'syz.2.2385': attribute type 17 has an invalid length. [ 338.298960][T15130] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2387'. [ 338.701308][T15156] bridge0: entered promiscuous mode [ 338.887952][T15167] netlink: 'syz.4.2395': attribute type 2 has an invalid length. [ 339.015646][T15173] netlink: 'syz.1.2398': attribute type 1 has an invalid length. [ 339.031147][T15174] netlink: 'syz.1.2398': attribute type 1 has an invalid length. [ 339.116340][T15177] tipc: Enabling of bearer rejected, failed to enable media [ 339.340696][T15181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.895496][T15228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.104569][T15230] wg1 speed is unknown, defaulting to 1000 [ 340.446920][T15224] lec:lec_atm_close: lec0: Shut down! [ 341.243645][T15283] erspan0: entered promiscuous mode [ 341.306416][T15288] __nla_validate_parse: 104 callbacks suppressed [ 341.306437][T15288] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2429'. [ 341.363799][T15284] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2429'. [ 341.399295][T15291] syzkaller1: entered promiscuous mode [ 341.408418][T15291] syzkaller1: entered allmulticast mode [ 341.430691][T15293] netlink: 'syz.1.2431': attribute type 4 has an invalid length. [ 341.478819][T15295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2432'. [ 341.511297][T15295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2432'. [ 341.581218][T15295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2432'. [ 341.617836][T15308] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2433'. [ 341.792922][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2435'. [ 342.271260][T15333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.461055][T15343] netlink: 'syz.0.2444': attribute type 3 has an invalid length. [ 342.566740][T15351] wg1 speed is unknown, defaulting to 1000 [ 342.761833][T15361] wg1 speed is unknown, defaulting to 1000 [ 343.260965][T15395] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 343.276468][T15381] wg1 speed is unknown, defaulting to 1000 [ 343.282871][T15394] netlink: 'syz.3.2455': attribute type 5 has an invalid length. [ 343.608006][T15389] wg1 speed is unknown, defaulting to 1000 [ 343.997445][T15420] netlink: 'syz.3.2463': attribute type 1 has an invalid length. [ 344.057716][T15420] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.168524][T15425] bond7: (slave geneve3): making interface the new active one [ 344.179033][T15425] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.191516][T15425] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.206422][T15425] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 344.253498][T15420] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.301323][T15420] bond7: entered promiscuous mode [ 344.327873][T15420] geneve3: entered promiscuous mode [ 344.369958][ T37] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 344.386247][ T37] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 344.448746][ T37] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 344.538424][ T37] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 344.863533][T15454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2474'. [ 344.976508][T15458] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.2476'. [ 345.013181][T15458] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 345.039673][T15463] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2477'. [ 345.183420][T15458] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 345.453428][T15484] bond0: (slave bond_slave_0): Releasing backup interface [ 345.543833][T15484] bond0: (slave bond_slave_1): Releasing backup interface [ 345.626503][T15484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.671250][T15484] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 345.745942][T15501] vlan2: entered allmulticast mode [ 345.943563][T15512] vlan2: entered promiscuous mode [ 345.949544][T15512] gretap0: entered promiscuous mode [ 345.975333][T15513] ip6gretap0: entered promiscuous mode [ 345.984926][T15513] ip6gretap0: left promiscuous mode [ 346.295301][T15524] wg1 speed is unknown, defaulting to 1000 [ 346.335179][T15528] __nla_validate_parse: 2 callbacks suppressed [ 346.335199][T15528] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2497'. [ 346.367422][T15528] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2497'. [ 346.369318][T15529] ip6t_rpfilter: unknown options [ 346.386868][T15528] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2497'. [ 346.578835][T15539] dummy0: mtu less than device minimum [ 346.741245][T15542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2502'. [ 347.334678][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2510'. [ 347.840743][T15567] wg1 speed is unknown, defaulting to 1000 [ 348.017965][T15591] wg1 speed is unknown, defaulting to 1000 [ 348.084016][T15593] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 348.092436][T15601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2519'. [ 348.104207][T15593] bond8 (unregistering): Released all slaves [ 348.299647][T15599] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 348.378883][T15614] xt_HMARK: proto mask must be zero with L3 mode [ 348.436943][T15616] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 348.717927][T15626] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 348.748090][T15626] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2525'. [ 349.084044][T15632] tipc: Enabling of bearer rejected, failed to enable media [ 349.232773][T15643] wg1 speed is unknown, defaulting to 1000 [ 349.398605][T15651] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 349.466382][T15653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2533'. [ 349.646453][T15662] netlink: 'syz.1.2532': attribute type 11 has an invalid length. [ 349.706486][T15662] netlink: 'syz.1.2532': attribute type 11 has an invalid length. [ 349.715281][T15662] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2532'. [ 349.766585][T15648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.893912][T15666] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 349.983800][T15670] tipc: New replicast peer: 255.255.255.255 [ 350.002801][T15670] tipc: Enabled bearer , priority 10 [ 350.011618][T15670] netlink: 'syz.1.2536': attribute type 11 has an invalid length. [ 350.025637][T15670] netlink: 'syz.1.2536': attribute type 11 has an invalid length. [ 350.034233][T15670] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2536'. [ 350.203929][T15677] xt_CT: No such helper "snmp_trap" [ 350.273442][T15684] tun0: tun_chr_ioctl cmd 1074025675 [ 350.278977][T15684] tun0: persist enabled [ 350.307280][T15684] tun0: tun_chr_ioctl cmd 1074025675 [ 350.313725][T15684] tun0: persist enabled [ 350.335638][T15670] bridge8: entered promiscuous mode [ 350.341048][T15670] bridge8: entered allmulticast mode [ 350.676128][T15703] ip6tnl3: entered allmulticast mode [ 351.131498][T15726] netlink: 'syz.4.2551': attribute type 11 has an invalid length. [ 351.210818][T15728] xt_CT: No such helper "snmp_trap" [ 351.287134][T15736] netlink: 'syz.3.2555': attribute type 11 has an invalid length. [ 351.287586][T15737] netlink: 'syz.4.2554': attribute type 1 has an invalid length. [ 351.344022][T15746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.351568][T15746] IPv6: NLM_F_CREATE should be set when creating new route [ 351.358275][T15737] bond9: entered promiscuous mode [ 351.358916][T15746] IPv6: NLM_F_CREATE should be set when creating new route [ 351.365711][T15737] 8021q: adding VLAN 0 to HW filter on device bond9 [ 351.387177][T15746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.397620][T15743] tipc: Enabled bearer , priority 0 [ 351.405836][T15743] syzkaller0: entered promiscuous mode [ 351.411361][T15743] syzkaller0: entered allmulticast mode [ 351.508495][T15747] tipc: Resetting bearer [ 351.615262][T15749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.687647][T15761] wg1 speed is unknown, defaulting to 1000 [ 351.950329][T15767] netlink: 'syz.1.2563': attribute type 83 has an invalid length. [ 352.014195][T15760] infiniband syz2: set down [ 352.020507][T15760] infiniband syz2: added ipvlan1 [ 352.143290][T15760] RDS/IB: syz2: added [ 352.148423][T15760] smc: adding ib device syz2 with port count 1 [ 352.155304][T15760] smc: ib device syz2 port 1 has no pnetid [ 352.161715][T15742] tipc: Resetting bearer [ 352.218144][T15742] tipc: Disabling bearer [ 352.609447][T15776] xt_CT: No such helper "snmp_trap" [ 352.826761][T15779] wg1 speed is unknown, defaulting to 1000 [ 352.992663][T15793] __nla_validate_parse: 8 callbacks suppressed [ 352.992683][T15793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2570'. [ 353.218930][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2573'. [ 353.620156][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2578'. [ 353.663419][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 353.753480][T15822] xt_CT: No such helper "snmp_trap" [ 353.926402][T15834] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2582'. [ 353.935707][T15833] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2582'. [ 353.956098][T15836] syzkaller0: entered promiscuous mode [ 353.966645][T15836] syzkaller0: entered allmulticast mode [ 354.052702][T15836] tipc: Enabling of bearer rejected, already enabled [ 354.275768][T15851] tipc: Enabling of bearer rejected, failed to enable media [ 354.311282][T15853] tipc: Enabled bearer , priority 0 [ 354.330684][T15853] syzkaller0: entered promiscuous mode [ 354.337645][T15853] syzkaller0: entered allmulticast mode [ 354.387885][T15853] IPVS: Error joining to the multicast group [ 354.444993][T15853] tipc: Resetting bearer [ 354.513905][T15852] tipc: Resetting bearer [ 354.598202][T15852] tipc: Disabling bearer [ 355.126873][T15898] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.2599'. [ 355.138316][T15898] netlink: 'syz.2.2599': attribute type 1 has an invalid length. [ 355.174262][T15898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.223542][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2600'. [ 355.671579][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 355.683419][T15921] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2606'. [ 356.398132][T15936] hsr_slave_1 (unregistering): left promiscuous mode [ 356.768776][T15938] netlink: 'syz.1.2612': attribute type 1 has an invalid length. [ 356.847417][T15938] 8021q: adding VLAN 0 to HW filter on device bond7 [ 356.865557][T15934] wg1 speed is unknown, defaulting to 1000 [ 356.894646][T15867] wg1 speed is unknown, defaulting to 1000 [ 357.384775][T15945] wg1 speed is unknown, defaulting to 1000 [ 359.284003][T15958] wg1 speed is unknown, defaulting to 1000 [ 360.117325][T15982] __nla_validate_parse: 2 callbacks suppressed [ 360.117344][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2623'. [ 360.155196][T15982] nbd: must specify at least one socket [ 360.200433][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2624'. [ 360.334771][T15985] wg1 speed is unknown, defaulting to 1000 [ 360.424886][T15991] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2626'. [ 360.486921][T15991] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2626'. [ 360.519920][T15998] macvlan1: entered promiscuous mode [ 360.527124][T15998] ipvlan0: entered promiscuous mode [ 360.534163][T15998] ipvlan0: left promiscuous mode [ 360.539470][T15998] macvlan1: left promiscuous mode [ 360.611798][T16002] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 360.637534][T16002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2628'. [ 360.663183][T15994] wg1 speed is unknown, defaulting to 1000 [ 360.805527][T16004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2629'. [ 361.351549][T16016] syzkaller0: left promiscuous mode [ 361.360985][T16016] syzkaller0: left allmulticast mode [ 361.826341][T16031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2630'. [ 361.867298][T16024] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2634'. [ 362.059311][T16034] wg1 speed is unknown, defaulting to 1000 [ 362.337626][T16049] tipc: Enabled bearer , priority 0 [ 362.351477][T16049] syzkaller0: entered promiscuous mode [ 362.363508][T16049] syzkaller0: entered allmulticast mode [ 362.387165][T16050] wg1 speed is unknown, defaulting to 1000 [ 362.397067][T16049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.406940][T16049] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 362.424478][T16049] bond0: (slave sit0): Error -95 calling set_mac_address [ 362.503754][T16049] tipc: Resetting bearer [ 362.561720][T16047] tipc: Resetting bearer [ 362.601870][T16047] tipc: Disabling bearer [ 362.928614][T16061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2643'. [ 363.358430][T16068] wg1 speed is unknown, defaulting to 1000 [ 363.423603][ T9] IPVS: starting estimator thread 0... [ 363.450560][T16078] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 363.476452][T16078] netlink: 'syz.1.2648': attribute type 11 has an invalid length. [ 363.498490][T16078] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2648'. [ 363.530887][T16081] IPVS: using max 34 ests per chain, 81600 per kthread [ 364.125879][T16094] wg1 speed is unknown, defaulting to 1000 [ 364.381332][T16099] syzkaller1: entered promiscuous mode [ 364.389330][T16099] syzkaller1: entered allmulticast mode [ 364.670992][T16111] sctp: [Deprecated]: syz.4.2656 (pid 16111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.670992][T16111] Use struct sctp_sack_info instead [ 364.979496][T16118] wg1 speed is unknown, defaulting to 1000 [ 365.137146][T16128] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.2662'. [ 365.213150][T16131] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 365.280194][T16133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2663'. [ 365.312239][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 365.447603][T16136] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2664'. [ 366.024319][T16164] wg1 speed is unknown, defaulting to 1000 [ 366.327836][T16184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2675'. [ 366.346191][T16184] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2675'. [ 366.406025][T16184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2675'. [ 366.545343][T16201] veth0: entered promiscuous mode [ 366.561936][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2678'. [ 366.724684][T16202] veth0 (unregistering): left promiscuous mode [ 367.093312][T16189] wg1 speed is unknown, defaulting to 1000 [ 367.428607][T16221] wg1 speed is unknown, defaulting to 1000 [ 367.582656][T16227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2684'. [ 368.146632][T16235] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2685'. [ 368.365714][T16242] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.546716][T16237] wg1 speed is unknown, defaulting to 1000 [ 368.571309][T16242] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.703838][T16242] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.879156][T16242] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.312613][ T37] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.454494][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.567422][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.682258][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.915343][T16260] rdma_rxe: rxe_newlink: failed to add lo [ 370.087759][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'. [ 370.353144][T16266] __nla_validate_parse: 1 callbacks suppressed [ 370.353167][T16266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2693'. [ 370.385087][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2693'. [ 370.593278][T16276] tc_dump_action: action bad kind [ 370.658604][T16274] netlink: 'syz.3.2694': attribute type 4 has an invalid length. [ 370.666681][T16274] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2694'. [ 370.678839][T16274] .`: renamed from bond0 (while UP) [ 371.289380][T16296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2701'. [ 371.361484][T16298] wg1 speed is unknown, defaulting to 1000 [ 371.561680][T16307] bond8: entered promiscuous mode [ 371.582635][T16307] 8021q: adding VLAN 0 to HW filter on device bond8 [ 371.711034][T16315] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2707'. [ 371.730011][T16315] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2707'. [ 371.739957][T16315] netlink: 'syz.0.2707': attribute type 4 has an invalid length. [ 371.976569][T16322] netlink: 182 bytes leftover after parsing attributes in process `syz.0.2708'. [ 372.248291][T16330] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2710'. [ 372.248291][T16333] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2710'. [ 372.248332][T16333] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2710'. [ 372.577589][T16335] sctp: [Deprecated]: syz.3.2711 (pid 16335) Use of int in maxseg socket option. [ 372.577589][T16335] Use struct sctp_assoc_value instead [ 372.593207][T16336] sctp: [Deprecated]: syz.3.2711 (pid 16336) Use of int in maxseg socket option. [ 372.593207][T16336] Use struct sctp_assoc_value instead [ 372.736960][T16349] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 372.994725][T16366] ipt_rpfilter: unknown options [ 373.040502][T16366] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 373.069175][T16371] netlink: 'syz.2.2719': attribute type 1 has an invalid length. [ 373.108838][T16371] 8021q: adding VLAN 0 to HW filter on device bond7 [ 373.342688][T16371] bond7 (unregistering): Released all slaves [ 373.373981][T16385] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 373.618573][T16393] wg1 speed is unknown, defaulting to 1000 [ 373.644130][T16395] nbd: socks must be embedded in a SOCK_ITEM attr [ 373.937404][T16400] wg1 speed is unknown, defaulting to 1000 [ 374.633973][T16428] wg1 speed is unknown, defaulting to 1000 [ 375.106549][T16441] netlink: 'syz.0.2737': attribute type 6 has an invalid length. [ 375.315427][T16443] netlink: 'syz.4.2738': attribute type 21 has an invalid length. [ 375.327611][T16443] netlink: 'syz.4.2738': attribute type 5 has an invalid length. [ 375.335628][T16443] netlink: 'syz.4.2738': attribute type 6 has an invalid length. [ 375.588086][T16455] wg1 speed is unknown, defaulting to 1000 [ 375.727037][T16460] __nla_validate_parse: 15 callbacks suppressed [ 375.727060][T16460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2742'. [ 375.756467][T16460] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2742'. [ 375.767275][T16463] netlink: 'syz.3.2744': attribute type 30 has an invalid length. [ 375.777115][T16460] netlink: 'syz.1.2742': attribute type 4 has an invalid length. [ 375.868059][T16466] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 375.898053][T16466] netlink: 'syz.1.2745': attribute type 21 has an invalid length. [ 376.105199][T16475] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 376.125270][T16479] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2747'. [ 376.140918][T16475] bond8 (unregistering): Released all slaves [ 376.187728][T16471] syzkaller0: entered promiscuous mode [ 376.198137][T16471] syzkaller0: entered allmulticast mode [ 376.573838][T16492] netlink: 'syz.1.2751': attribute type 9 has an invalid length. [ 376.848624][T16496] wg1 speed is unknown, defaulting to 1000 [ 376.879685][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2755'. [ 376.929310][T16508] bridge0: entered promiscuous mode [ 376.935343][T16508] macvlan2: entered allmulticast mode [ 376.940891][T16508] bridge0: entered allmulticast mode [ 376.948745][T16508] bridge0: port 1(macvlan2) entered blocking state [ 376.956718][T16508] bridge0: port 1(macvlan2) entered disabled state [ 376.969251][T16508] bridge0: left allmulticast mode [ 376.975278][T16508] bridge0: left promiscuous mode [ 377.079615][T16512] netlink: 'syz.3.2756': attribute type 13 has an invalid length. [ 377.799006][T16532] Cannot find set identified by id 3 to match [ 377.806755][T16518] veth1: entered promiscuous mode [ 377.809276][T16532] netlink: 'syz.1.2760': attribute type 33 has an invalid length. [ 377.827448][T16532] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2760'. [ 377.849344][ T8237] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 377.859497][ T8237] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.873649][ T8237] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 377.899665][ T8237] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.919168][ T8237] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 377.935001][ T8237] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.987274][T16531] pimreg: entered allmulticast mode [ 377.999380][T16534] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 378.011258][ T8237] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 378.021088][ T8237] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.051733][T16531] pimreg: left allmulticast mode [ 378.302574][T16546] netlink: 'syz.1.2764': attribute type 1 has an invalid length. [ 378.553164][T16548] wg1 speed is unknown, defaulting to 1000 [ 378.860995][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2770'. [ 378.968645][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'. [ 378.983072][T16571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2772'. [ 378.998215][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2771'. [ 379.019895][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'. [ 379.078222][T16575] bridge: RTM_NEWNEIGH with invalid ether address [ 379.326548][T16581] ip6gretap0: left allmulticast mode [ 379.331922][T16581] ip6gretap0: left promiscuous mode [ 379.943802][T16603] wg1 speed is unknown, defaulting to 1000 [ 380.002553][T16620] x_tables: duplicate underflow at hook 2 [ 380.665459][T16644] netlink: 'syz.1.2791': attribute type 1 has an invalid length. [ 380.763647][T16648] pim6reg: entered allmulticast mode [ 380.930682][T16659] __nla_validate_parse: 9 callbacks suppressed [ 380.930701][T16659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2795'. [ 381.889328][T16676] wg1 speed is unknown, defaulting to 1000 [ 381.901435][T16686] netlink: 'syz.4.2803': attribute type 23 has an invalid length. [ 381.928682][T16687] set match dimension is over the limit! [ 382.033347][T16690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.088665][T16693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2805'. [ 382.532676][T16712] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2808'. [ 382.817272][T16726] 8021q: VLANs not supported on wg1 [ 383.034987][T16736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2816'. [ 383.108148][T16736] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.414519][T16752] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2820'. [ 383.729691][T16770] syzkaller0: entered promiscuous mode [ 383.742244][T16770] syzkaller0: entered allmulticast mode [ 383.822608][T16777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2826'. [ 383.893146][T16782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2828'. [ 383.902544][T16782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2828'. [ 383.911672][T16782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2828'. [ 383.921940][T16782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2828'. [ 384.130388][T16793] RDS: rds_bind could not find a transport for ::ffff:172.20.20.26, load rds_tcp or rds_rdma? [ 384.158156][T16791] wg1 speed is unknown, defaulting to 1000 [ 384.810532][T16825] netlink: 'syz.3.2841': attribute type 11 has an invalid length. [ 384.898019][T16824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.924784][T16824] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.946330][T16824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.199115][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 385.890071][T16890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.920802][T16885] xt_CT: No such helper "snmp_trap" [ 386.303760][T16918] wg1 speed is unknown, defaulting to 1000 [ 386.371562][T16923] syzkaller0: entered promiscuous mode [ 386.381489][T16923] syzkaller0: entered allmulticast mode [ 386.422936][T16923] tipc: Enabling of bearer rejected, already enabled [ 386.433192][T16923] __nla_validate_parse: 6 callbacks suppressed [ 386.433211][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2863'. [ 386.603801][T16932] netlink: 'syz.2.2866': attribute type 13 has an invalid length. [ 386.840477][T16937] xt_CT: No such helper "snmp_trap" [ 387.849961][T16962] syzkaller1: entered promiscuous mode [ 387.866489][T16962] syzkaller1: entered allmulticast mode [ 387.908004][T16962] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 388.741505][T17012] wg1 speed is unknown, defaulting to 1000 [ 389.397257][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2890'. [ 389.439280][T17031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2891'. [ 389.456423][ T37] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.467315][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2890'. [ 389.478192][ T8237] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.501289][ T8237] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.576754][ T8237] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.743820][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'. [ 389.773460][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'. [ 389.899298][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2895'. [ 389.910229][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2895'. [ 390.055115][T17049] wg1 speed is unknown, defaulting to 1000 [ 390.101048][T17052] wg1 speed is unknown, defaulting to 1000 [ 391.322766][T17068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.333816][T17068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.344802][T17068] hsr0: left promiscuous mode [ 391.349884][T17068] hsr0: entered promiscuous mode [ 391.355707][T17068] hsr0: entered allmulticast mode [ 391.361315][T17068] hsr_slave_0: entered allmulticast mode [ 391.367760][T17068] hsr_slave_1: entered allmulticast mode [ 391.861110][T17077] netlink: 'syz.1.2903': attribute type 1 has an invalid length. [ 391.950742][T17077] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 391.973368][T17077] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 392.130510][T17080] gretap2: entered promiscuous mode [ 392.136179][T17080] gretap2: entered allmulticast mode [ 393.132427][T17089] netlink: 'syz.1.2906': attribute type 1 has an invalid length. [ 393.159315][T17089] 8021q: adding VLAN 0 to HW filter on device bond9 [ 393.184923][T17089] bond9: (slave veth19): Enslaving as an active interface with a down link [ 393.250160][T17089] netlink: 1315 bytes leftover after parsing attributes in process `syz.1.2906'. [ 393.266908][T17089] bond9: entered allmulticast mode [ 429.952279][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 534.272327][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 534.279897][ T31] Not tainted syzkaller #0 [ 534.285403][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.294190][ T31] task:kworker/0:0 state:D stack:23208 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 534.306334][ T31] Workqueue: events rfkill_sync_work [ 534.311684][ T31] Call Trace: [ 534.315377][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 534.318356][ T31] __schedule+0x1798/0x4cc0 [ 534.323016][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 534.328979][ T31] ? __pfx___schedule+0x10/0x10 [ 534.334062][ T31] ? schedule+0x91/0x360 [ 534.338370][ T31] schedule+0x165/0x360 [ 534.342975][ T31] schedule_preempt_disabled+0x13/0x30 [ 534.348496][ T31] __mutex_lock+0x7e6/0x1350 [ 534.353260][ T31] ? __mutex_lock+0x5bb/0x1350 [ 534.359459][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 534.372305][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 534.377834][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.395933][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 534.402504][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 534.408977][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 534.414788][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 534.419936][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 534.435343][ T31] rfkill_set_block+0x1d2/0x440 [ 534.440277][ T31] rfkill_sync_work+0x114/0x200 [ 534.445680][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 534.451472][ T31] process_scheduled_works+0xae1/0x17b0 [ 534.457835][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 534.464224][ T31] worker_thread+0x8a0/0xda0 [ 534.468975][ T31] kthread+0x711/0x8a0 [ 534.473451][ T31] ? __pfx_worker_thread+0x10/0x10 [ 534.478620][ T31] ? __pfx_kthread+0x10/0x10 [ 534.483422][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.488666][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.494229][ T31] ? __pfx_kthread+0x10/0x10 [ 534.498845][ T31] ret_from_fork+0x4bc/0x870 [ 534.503525][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 534.508668][ T31] ? __switch_to_asm+0x39/0x70 [ 534.513540][ T31] ? __switch_to_asm+0x33/0x70 [ 534.518344][ T31] ? __pfx_kthread+0x10/0x10 [ 534.523296][ T31] ret_from_fork_asm+0x1a/0x30 [ 534.528090][ T31] [ 534.531249][ T31] INFO: task kworker/0:7:7475 blocked for more than 143 seconds. [ 534.539026][ T31] Not tainted syzkaller #0 [ 534.544070][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.553152][ T31] task:kworker/0:7 state:D stack:24424 pid:7475 tgid:7475 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 534.565405][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 534.572175][ T31] Call Trace: [ 534.575461][ T31] [ 534.578407][ T31] __schedule+0x1798/0x4cc0 [ 534.583311][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 534.588761][ T31] ? __pfx___schedule+0x10/0x10 [ 534.593797][ T31] ? schedule+0x91/0x360 [ 534.598088][ T31] schedule+0x165/0x360 [ 534.602360][ T31] schedule_preempt_disabled+0x13/0x30 [ 534.607870][ T31] __mutex_lock+0x7e6/0x1350 [ 534.612810][ T31] ? __mutex_lock+0x5bb/0x1350 [ 534.617604][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 534.623934][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 534.628990][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 534.634846][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 534.640612][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 534.647442][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 534.653281][ T31] process_scheduled_works+0xae1/0x17b0 [ 534.658898][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 534.664966][ T31] worker_thread+0x8a0/0xda0 [ 534.669590][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 534.676495][ T31] ? __kthread_parkme+0x7b/0x200 [ 534.681506][ T31] kthread+0x711/0x8a0 [ 534.685667][ T31] ? __pfx_worker_thread+0x10/0x10 [ 534.690906][ T31] ? __pfx_kthread+0x10/0x10 [ 534.695611][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.700868][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.706534][ T31] ? __pfx_kthread+0x10/0x10 [ 534.711318][ T31] ret_from_fork+0x4bc/0x870 [ 534.716036][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 534.721227][ T31] ? __switch_to_asm+0x39/0x70 [ 534.726087][ T31] ? __switch_to_asm+0x33/0x70 [ 534.730879][ T31] ? __pfx_kthread+0x10/0x10 [ 534.735930][ T31] ret_from_fork_asm+0x1a/0x30 [ 534.740736][ T31] [ 534.743883][ T31] INFO: task syz.3.2860:16900 blocked for more than 143 seconds. [ 534.751717][ T31] Not tainted syzkaller #0 [ 534.757203][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.766268][ T31] task:syz.3.2860 state:D stack:25384 pid:16900 tgid:16900 ppid:5824 task_flags:0x400040 flags:0x00080002 [ 534.778303][ T31] Call Trace: [ 534.781628][ T31] [ 534.784627][ T31] __schedule+0x1798/0x4cc0 [ 534.789175][ T31] ? validate_chain+0x897/0x2140 [ 534.794608][ T31] ? __lock_acquire+0xab9/0xd20 [ 534.799586][ T31] ? __pfx___schedule+0x10/0x10 [ 534.804560][ T31] ? schedule+0x91/0x360 [ 534.808844][ T31] schedule+0x165/0x360 [ 534.813084][ T31] schedule_timeout+0x9a/0x270 [ 534.817891][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 534.823639][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.828861][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.834330][ T31] ? wait_for_completion+0x267/0x5d0 [ 534.839649][ T31] wait_for_completion+0x2bf/0x5d0 [ 534.844864][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 534.850529][ T31] ? __flush_work+0xd2/0xbc0 [ 534.855484][ T31] ? __flush_work+0xd2/0xbc0 [ 534.860096][ T31] __flush_work+0x9b9/0xbc0 [ 534.864691][ T31] ? __flush_work+0xd2/0xbc0 [ 534.869431][ T31] ? __pfx___flush_work+0x10/0x10 [ 534.874565][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 534.879893][ T31] ? __pfx___cancel_work+0x10/0x10 [ 534.885359][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 534.891025][ T31] __cancel_work_sync+0xbe/0x110 [ 534.896175][ T31] rfkill_unregister+0x92/0x220 [ 534.901087][ T31] nfc_unregister_device+0x96/0x2a0 [ 534.906840][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 534.913036][ T31] virtual_ncidev_close+0x56/0x90 [ 534.918123][ T31] __fput+0x44c/0xa70 [ 534.922198][ T31] task_work_run+0x1d4/0x260 [ 534.926853][ T31] ? __pfx_task_work_run+0x10/0x10 [ 534.932200][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 534.937691][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 534.943372][ T31] do_syscall_64+0x2bd/0xfa0 [ 534.947980][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.953247][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.959345][ T31] ? clear_bhb_loop+0x60/0xb0 [ 534.964210][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.970147][ T31] RIP: 0033:0x7fe62318f6c9 [ 534.974949][ T31] RSP: 002b:00007ffecbab4058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 534.983476][ T31] RAX: 0000000000000000 RBX: 000000000005e3e6 RCX: 00007fe62318f6c9 [ 534.991498][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 535.000121][ T31] RBP: 00007fe6233e7da0 R08: 0000000000000001 R09: 0000001ecbab434f [ 535.008515][ T31] R10: 0000001b2fe20000 R11: 0000000000000246 R12: 00007fe6233e5fac [ 535.016593][ T31] R13: 00007fe6233e5fa0 R14: ffffffffffffffff R15: 00007ffecbab4170 [ 535.024666][ T31] [ 535.027728][ T31] INFO: task syz.4.2890:17035 blocked for more than 144 seconds. [ 535.042377][ T31] Not tainted syzkaller #0 [ 535.047362][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.056177][ T31] task:syz.4.2890 state:D stack:24584 pid:17035 tgid:17030 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 535.068294][ T31] Call Trace: [ 535.071600][ T31] [ 535.075052][ T31] __schedule+0x1798/0x4cc0 [ 535.079624][ T31] ? __lock_acquire+0xab9/0xd20 [ 535.084610][ T31] ? __lock_acquire+0xab9/0xd20 [ 535.089497][ T31] ? __pfx___schedule+0x10/0x10 [ 535.094884][ T31] ? schedule+0x91/0x360 [ 535.099172][ T31] schedule+0x165/0x360 [ 535.103489][ T31] schedule_preempt_disabled+0x13/0x30 [ 535.108993][ T31] __mutex_lock+0x7e6/0x1350 [ 535.113811][ T31] ? rcu_is_watching+0x15/0xb0 [ 535.118621][ T31] ? __mutex_lock+0x5bb/0x1350 [ 535.123776][ T31] ? rfkill_register+0x37/0x8e0 [ 535.128683][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 535.133872][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 535.138898][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.144178][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 535.149523][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 535.155676][ T31] rfkill_register+0x37/0x8e0 [ 535.160411][ T31] wiphy_register+0x246a/0x2d20 [ 535.165377][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 535.170616][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 535.176005][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 535.181194][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 535.187738][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 535.193326][ T31] ? ieee80211_register_hw+0x13c1/0x40d0 [ 535.198998][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 535.204900][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 535.210838][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 535.217103][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 535.223613][ T31] ? __hrtimer_setup+0x187/0x210 [ 535.228574][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 535.234696][ T31] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 535.240556][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 535.247093][ T31] ? __asan_memset+0x22/0x50 [ 535.251744][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 535.257465][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 535.262700][ T31] ? do_syscall_64+0xfa/0xfa0 [ 535.267516][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.273957][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 535.279126][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 535.284954][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 535.290540][ T31] ? rcu_is_watching+0x15/0xb0 [ 535.295380][ T31] ? __nla_parse+0x40/0x60 [ 535.299867][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 535.306704][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 535.312407][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 535.318546][ T31] ? bpf_lsm_capable+0x9/0x20 [ 535.323503][ T31] ? security_capable+0x7e/0x2e0 [ 535.328493][ T31] genl_rcv_msg+0x60e/0x790 [ 535.333410][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.338551][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 535.344291][ T31] netlink_rcv_skb+0x208/0x470 [ 535.349103][ T31] ? __lock_acquire+0xab9/0xd20 [ 535.354048][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.359122][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.364847][ T31] ? down_read+0x1ad/0x2e0 [ 535.369292][ T31] genl_rcv+0x28/0x40 [ 535.373361][ T31] netlink_unicast+0x82f/0x9e0 [ 535.378203][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 535.383671][ T31] ? netlink_sendmsg+0x642/0xb30 [ 535.388647][ T31] ? skb_put+0x11b/0x210 [ 535.393460][ T31] netlink_sendmsg+0x805/0xb30 [ 535.399135][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.404820][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 535.409810][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 535.415510][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.420822][ T31] __sock_sendmsg+0x21c/0x270 [ 535.425822][ T31] ____sys_sendmsg+0x505/0x830 [ 535.430639][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.436382][ T31] ? import_iovec+0x74/0xa0 [ 535.440923][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 535.445848][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.451116][ T31] ? __fget_files+0x2a/0x420 [ 535.455811][ T31] ? __fget_files+0x3a0/0x420 [ 535.460532][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 535.465916][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.471411][ T31] ? do_syscall_64+0xbe/0xfa0 [ 535.476184][ T31] do_syscall_64+0xfa/0xfa0 [ 535.480715][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.486035][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.492395][ T31] ? clear_bhb_loop+0x60/0xb0 [ 535.497087][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.503151][ T31] RIP: 0033:0x7f9030f8f6c9 [ 535.507638][ T31] RSP: 002b:00007f9031e89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.516211][ T31] RAX: ffffffffffffffda RBX: 00007f90311e6090 RCX: 00007f9030f8f6c9 [ 535.524696][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 535.532784][ T31] RBP: 00007f9031011f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.540804][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.549037][ T31] R13: 00007f90311e6128 R14: 00007f90311e6090 R15: 00007ffcd55dcf78 [ 535.557321][ T31] [ 535.560364][ T31] INFO: task syz.0.2896:17045 blocked for more than 144 seconds. [ 535.568153][ T31] Not tainted syzkaller #0 [ 535.573141][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.582416][ T31] task:syz.0.2896 state:D stack:28264 pid:17045 tgid:17044 ppid:5831 task_flags:0x400140 flags:0x00080002 [ 535.594876][ T31] Call Trace: [ 535.598284][ T31] [ 535.601345][ T31] __schedule+0x1798/0x4cc0 [ 535.605975][ T31] ? __lock_acquire+0xab9/0xd20 [ 535.610866][ T31] ? __lock_acquire+0xab9/0xd20 [ 535.615774][ T31] ? __pfx___schedule+0x10/0x10 [ 535.620692][ T31] ? schedule+0x91/0x360 [ 535.625328][ T31] schedule+0x165/0x360 [ 535.629586][ T31] schedule_preempt_disabled+0x13/0x30 [ 535.635272][ T31] __mutex_lock+0x7e6/0x1350 [ 535.640012][ T31] ? __mutex_lock+0x5bb/0x1350 [ 535.644869][ T31] ? genl_rcv_msg+0x10d/0x790 [ 535.649603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 535.655024][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 535.660521][ T31] ? radix_tree_lookup+0x240/0x290 [ 535.665840][ T31] genl_rcv_msg+0x10d/0x790 [ 535.670390][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.675506][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 535.680561][ T31] ? __asan_memcpy+0x40/0x70 [ 535.685515][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 535.690910][ T31] netlink_rcv_skb+0x208/0x470 [ 535.695790][ T31] ? __lock_acquire+0xab9/0xd20 [ 535.700705][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.705810][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.711144][ T31] ? down_read+0x1ad/0x2e0 [ 535.715915][ T31] genl_rcv+0x28/0x40 [ 535.719928][ T31] netlink_unicast+0x82f/0x9e0 [ 535.724975][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 535.730331][ T31] ? netlink_sendmsg+0x642/0xb30 [ 535.735343][ T31] ? skb_put+0x11b/0x210 [ 535.739616][ T31] netlink_sendmsg+0x805/0xb30 [ 535.744890][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.750228][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 535.755288][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 535.760615][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.765984][ T31] __sock_sendmsg+0x21c/0x270 [ 535.770700][ T31] __sys_sendto+0x3bd/0x520 [ 535.775637][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 535.780813][ T31] ? __lock_acquire+0xab9/0xd20 [ 535.785780][ T31] ? fd_install+0x97/0x540 [ 535.790223][ T31] ? fd_install+0x30d/0x540 [ 535.794824][ T31] __x64_sys_sendto+0xde/0x100 [ 535.799618][ T31] do_syscall_64+0xfa/0xfa0 [ 535.804480][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.809891][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.816178][ T31] ? clear_bhb_loop+0x60/0xb0 [ 535.820891][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.826867][ T31] RIP: 0033:0x7f169cf9155c [ 535.831316][ T31] RSP: 002b:00007f169de47ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 535.840085][ T31] RAX: ffffffffffffffda RBX: 00007f169de47fc0 RCX: 00007f169cf9155c [ 535.848127][ T31] RDX: 0000000000000024 RSI: 00007f169de48010 RDI: 000000000000000c [ 535.856166][ T31] RBP: 0000000000000000 R08: 00007f169de47f14 R09: 000000000000000c [ 535.864498][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 535.872749][ T31] R13: 00007f169de47f68 R14: 00007f169de48010 R15: 0000000000000000 [ 535.880790][ T31] [ 535.883937][ T31] [ 535.883937][ T31] Showing all locks held in the system: [ 535.891785][ T31] 4 locks held by kworker/0:0/9: [ 535.897164][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 535.908371][ T31] #1: ffffc900000e7ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 535.920992][ T31] #2: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 535.931478][ T31] #3: ffff88802776e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 535.941343][ T31] 1 lock held by khungtaskd/31: [ 535.946372][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 535.956702][ T31] 2 locks held by getty/5587: [ 535.961417][ T31] #0: ffff88814d7fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 535.971240][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 535.981545][ T31] 1 lock held by syz-executor/5830: [ 535.987073][ T31] #0: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 535.997391][ T31] 3 locks held by kworker/0:7/7475: [ 536.002649][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 536.014060][ T31] #1: ffffc9001b9efba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 536.027643][ T31] #2: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 536.039591][ T31] 1 lock held by syz.3.2860/16900: [ 536.045047][ T31] #0: ffff88802776e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 536.055078][ T31] 3 locks held by syz.4.2890/17035: [ 536.060303][ T31] #0: ffffffff8f3320f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.068593][ T31] #1: ffffffff8f331f08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 536.077884][ T31] #2: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.087866][ T31] 2 locks held by syz.0.2896/17045: [ 536.093113][ T31] #0: ffffffff8f3320f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.101314][ T31] #1: ffffffff8f331f08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 536.110647][ T31] 2 locks held by syz-executor/17081: [ 536.116106][ T31] #0: ffff888058187118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.126238][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.136684][ T31] 2 locks held by syz.1.2907/17093: [ 536.141899][ T31] #0: ffffffff8f3320f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.150176][ T31] #1: ffffffff8f331f08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 536.159247][ T31] 2 locks held by syz-executor/17098: [ 536.165063][ T31] #0: ffff88807a108118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.175256][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.185258][ T31] 2 locks held by syz-executor/17101: [ 536.190632][ T31] #0: ffff8880791a8118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.200996][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.211124][ T31] 2 locks held by syz-executor/17102: [ 536.216553][ T31] #0: ffff88802647d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.226862][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.236933][ T31] 2 locks held by syz-executor/17104: [ 536.242558][ T31] #0: ffff888051cf3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.253273][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.263410][ T31] 2 locks held by syz-executor/17106: [ 536.268813][ T31] #0: ffff888058210118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.278991][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.289243][ T31] 2 locks held by syz-executor/17108: [ 536.294676][ T31] #0: ffff88802e748118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.304771][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.315143][ T31] 2 locks held by syz-executor/17111: [ 536.320523][ T31] #0: ffff88807bc9a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.330615][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.340637][ T31] 2 locks held by syz-executor/17112: [ 536.346344][ T31] #0: ffff8880780dc918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.356515][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.366551][ T31] 2 locks held by syz-executor/17114: [ 536.372319][ T31] #0: ffff888023ee2918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.382413][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.392443][ T31] 2 locks held by syz-executor/17116: [ 536.397976][ T31] #0: ffff88807b061918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.408483][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.419007][ T31] 2 locks held by syz-executor/17118: [ 536.424470][ T31] #0: ffff888031d0f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.434787][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.444794][ T31] 2 locks held by syz-executor/17121: [ 536.450277][ T31] #0: ffff888024685118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.460371][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.470698][ T31] 2 locks held by syz-executor/17122: [ 536.476150][ T31] #0: ffff88801fae0118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.486301][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.496757][ T31] 2 locks held by syz-executor/17124: [ 536.502308][ T31] #0: ffff88802e420918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 536.512519][ T31] #1: ffffffff8f5acaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 536.522831][ T31] [ 536.525182][ T31] ============================================= [ 536.525182][ T31] [ 536.534693][ T31] NMI backtrace for cpu 1 [ 536.534710][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 536.534726][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.534735][ T31] Call Trace: [ 536.534741][ T31] [ 536.534748][ T31] dump_stack_lvl+0x189/0x250 [ 536.534776][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.534797][ T31] ? __pfx__printk+0x10/0x10 [ 536.534821][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 536.534849][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 536.534871][ T31] ? __pfx__printk+0x10/0x10 [ 536.534890][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 536.534907][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 536.534930][ T31] watchdog+0xf60/0xfa0 [ 536.534949][ T31] ? watchdog+0x1e2/0xfa0 [ 536.534969][ T31] kthread+0x711/0x8a0 [ 536.534991][ T31] ? __pfx_watchdog+0x10/0x10 [ 536.535005][ T31] ? __pfx_kthread+0x10/0x10 [ 536.535026][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.535049][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.535061][ T31] ? __pfx_kthread+0x10/0x10 [ 536.535082][ T31] ret_from_fork+0x4bc/0x870 [ 536.535099][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 536.535120][ T31] ? __switch_to_asm+0x39/0x70 [ 536.535132][ T31] ? __switch_to_asm+0x33/0x70 [ 536.535143][ T31] ? __pfx_kthread+0x10/0x10 [ 536.535164][ T31] ret_from_fork_asm+0x1a/0x30 [ 536.535189][ T31] [ 536.535195][ T31] Sending NMI from CPU 1 to CPUs 0: [ 536.682089][ C0] NMI backtrace for cpu 0 [ 536.682116][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 536.682135][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.682147][ C0] RIP: 0010:unwind_next_frame+0x14b9/0x2390 [ 536.682181][ C0] Code: 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 <4c> 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 [ 536.682195][ C0] RSP: 0018:ffffc90000007678 EFLAGS: 00000046 [ 536.682212][ C0] RAX: 0000000000e021e4 RBX: ffffffff900015e0 RCX: dffffc0000000000 [ 536.682225][ C0] RDX: ffffffff8b687280 RSI: ffffffff8bbf0740 RDI: ffffffff8bbf0700 [ 536.682238][ C0] RBP: ffffffff9000140c R08: 0000000000000000 R09: ffffffff81738c45 [ 536.682249][ C0] R10: ffffc90000007798 R11: ffffffff81ac2ea0 R12: ffffffff90e03373 [ 536.682262][ C0] R13: ffffffff90001408 R14: ffffc90000007748 R15: ffffffff900014f4 [ 536.682275][ C0] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 536.682289][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.682300][ C0] CR2: 0000557eba058000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 536.682315][ C0] Call Trace: [ 536.682321][ C0] [ 536.682332][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 536.682360][ C0] ? unwind_next_frame+0xa5/0x2390 [ 536.682381][ C0] ? x86_64_start_reservations+0x24/0x30 [ 536.682400][ C0] ? kernel_text_address+0xa5/0xe0 [ 536.682428][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.682452][ C0] arch_stack_walk+0x11c/0x150 [ 536.682476][ C0] ? x86_64_start_reservations+0x24/0x30 [ 536.682497][ C0] stack_trace_save+0x9c/0xe0 [ 536.682519][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 536.682548][ C0] kasan_save_stack+0x3e/0x60 [ 536.682572][ C0] ? kasan_save_stack+0x3e/0x60 [ 536.682594][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 536.682615][ C0] ? insert_work+0x3d/0x330 [ 536.682630][ C0] ? __queue_work+0xcd2/0xfb0 [ 536.682648][ C0] ? call_timer_fn+0x17e/0x5f0 [ 536.682664][ C0] ? __run_timer_base+0x646/0x860 [ 536.682687][ C0] ? run_timer_softirq+0xb7/0x180 [ 536.682711][ C0] ? handle_softirqs+0x286/0x870 [ 536.682728][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 536.682745][ C0] ? irq_exit_rcu+0x9/0x30 [ 536.682761][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 536.682788][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.682806][ C0] ? pv_native_safe_halt+0x13/0x20 [ 536.682820][ C0] ? default_idle+0x13/0x20 [ 536.682839][ C0] ? default_idle_call+0x73/0xb0 [ 536.682857][ C0] ? do_idle+0x1e7/0x510 [ 536.682874][ C0] ? cpu_startup_entry+0x44/0x60 [ 536.682891][ C0] ? rest_init+0x2de/0x300 [ 536.682911][ C0] ? start_kernel+0x3ae/0x410 [ 536.682934][ C0] ? x86_64_start_reservations+0x24/0x30 [ 536.682976][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 536.682997][ C0] insert_work+0x3d/0x330 [ 536.683015][ C0] __queue_work+0xcd2/0xfb0 [ 536.683037][ C0] ? __queue_work+0x102/0xfb0 [ 536.683060][ C0] call_timer_fn+0x17e/0x5f0 [ 536.683075][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 536.683095][ C0] ? call_timer_fn+0xbe/0x5f0 [ 536.683111][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 536.683133][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 536.683157][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 536.683186][ C0] __run_timer_base+0x646/0x860 [ 536.683220][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 536.683243][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 536.683277][ C0] run_timer_softirq+0xb7/0x180 [ 536.683303][ C0] handle_softirqs+0x286/0x870 [ 536.683323][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 536.683344][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 536.683365][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 536.683392][ C0] __irq_exit_rcu+0xca/0x1f0 [ 536.683410][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 536.683433][ C0] irq_exit_rcu+0x9/0x30 [ 536.683450][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 536.683476][ C0] [ 536.683482][ C0] [ 536.683488][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.683506][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 536.683522][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 10 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 536.683536][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 536.683549][ C0] RAX: c2b0a3027c0ab400 RBX: ffffffff81967b47 RCX: c2b0a3027c0ab400 [ 536.683562][ C0] RDX: 0000000000000001 RSI: ffffffff8d710347 RDI: ffffffff8bbf0760 [ 536.683573][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 536.683586][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cfe70 [ 536.683598][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 536.683612][ C0] ? do_idle+0x1e7/0x510 [ 536.683636][ C0] default_idle+0x13/0x20 [ 536.683654][ C0] default_idle_call+0x73/0xb0 [ 536.683673][ C0] do_idle+0x1e7/0x510 [ 536.683691][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.683709][ C0] ? __pfx_do_idle+0x10/0x10 [ 536.683732][ C0] ? do_idle+0x4e7/0x510 [ 536.683753][ C0] cpu_startup_entry+0x44/0x60 [ 536.683771][ C0] rest_init+0x2de/0x300 [ 536.683792][ C0] start_kernel+0x3ae/0x410 [ 536.683816][ C0] x86_64_start_reservations+0x24/0x30 [ 536.683834][ C0] x86_64_start_kernel+0x143/0x1c0 [ 536.683852][ C0] common_startup_64+0x13e/0x147 [ 536.683885][ C0]