last executing test programs: 2m14.51636595s ago: executing program 32 (id=1007): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000001c0)=""/100, 0x64, 0x6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582000000800b00000054c7beef915d564490c200", 0x18) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x88, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@esp={{0x30}, {[0x4d2, 0x4d3], 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x3, 0x1}, {0x4, 0x3}, 0x4, 0x7fff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x338) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000040)={0x18000000, 0x1000, 0x40001003, 0x10002}, 0x10) 2m1.812394782s ago: executing program 33 (id=1142): unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}, 0x3000e0c5) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (rerun: 32) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) (async) close(r0) 1m50.714594514s ago: executing program 34 (id=1214): socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) close(0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000023c0), r5) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002400)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x400c000) (async, rerun: 64) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) (rerun: 64) 1m49.616171806s ago: executing program 4 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0xdc, 0xa}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e3861121", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1m49.49830875s ago: executing program 4 (id=1359): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x100003d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xae3c}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000040000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 1m49.381447636s ago: executing program 4 (id=1360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'macvlan0\x00', @random="34b545afca7c"}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 1m49.243978293s ago: executing program 4 (id=1361): unshare(0x6a040000) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) unshare(0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x3, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x1ff, 0x30}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r4, 0x1ff}, &(0x7f00000000c0)=0x8) 1m48.196197818s ago: executing program 4 (id=1370): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21408, 0x53f}}, 0x20}}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dc60f900f500180600fe800000000000000000000000003569e4e12a936c1700aafe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) 1m47.920450244s ago: executing program 4 (id=1371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) unshare(0x62040200) (async) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r2, &(0x7f0000000800)}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r6, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1m46.125380981s ago: executing program 35 (id=1266): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2404c854) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2404c854) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) (async) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000fe", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="8eabd4c0c48034d70c6006aaf0e953151d41e3aa438ad0f818f3ca6e230aa5b077a897a5165d32bd5407444338d4e74dc23e09008a2002a672aaa2b99549da614d74314e1666d923815da827281bee2de6eda534b2496123977149b4e7a4868d036ec6dc798458742e9c158e0c7d81a62785", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331", 0x377}, {&(0x7f00000003c0)="fb0319e40c5ecd4b07a17171d28baee3657c915af8f87a68f1fab8aba155cd2f3fbf3905e9463e6b3dacb292462497dcc0271444fad6291651f12e0bb8c77600", 0x40}], 0x2}}], 0x2, 0x4048894) (async) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="8eabd4c0c48034d70c6006aaf0e953151d41e3aa438ad0f818f3ca6e230aa5b077a897a5165d32bd5407444338d4e74dc23e09008a2002a672aaa2b99549da614d74314e1666d923815da827281bee2de6eda534b2496123977149b4e7a4868d036ec6dc798458742e9c158e0c7d81a62785", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331", 0x377}, {&(0x7f00000003c0)="fb0319e40c5ecd4b07a17171d28baee3657c915af8f87a68f1fab8aba155cd2f3fbf3905e9463e6b3dacb292462497dcc0271444fad6291651f12e0bb8c77600", 0x40}], 0x2}}], 0x2, 0x4048894) r6 = socket$alg(0x26, 0x5, 0x0) accept$alg(r6, 0x0, 0x0) 1m32.574251044s ago: executing program 36 (id=1371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) unshare(0x62040200) (async) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r2, &(0x7f0000000800)}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r6, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1m31.889027168s ago: executing program 3 (id=1498): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0x1fffb}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newtfilter={0xa00, 0x2c, 0x8, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x2d}, @filter_kind_options=@f_u32={{0x8}, {0x9bc, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'ip6gretap0\x00'}, @TCA_U32_POLICE={0xb0, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x10000, 0x9, 0x3db6cd2e, {0x1, 0x1, 0x9, 0x0, 0x8, 0x3}, {0x5, 0x1, 0x2, 0x4800, 0x5, 0xe0}, 0x8, 0x9, 0xfffffffa}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x20000, 0x8, 0xfffffffc, 0x2, 0x4, {0x3, 0x1, 0xd, 0x9, 0xd5b, 0x6}, {0x6, 0x2, 0xfe1f, 0xc, 0x4, 0x4}, 0x0, 0x2, 0x7}}]}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_POLICE={0x8c8, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x0, 0x813, 0x37, 0x6, {0x0, 0x2, 0x9, 0x2, 0x102d, 0x101}, {0x0, 0x0, 0x6a18, 0x7, 0x0, 0x78}, 0x7, 0x18b7, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd2e}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x204}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0xab, 0x80, 0xab, {0x7, 0x0, 0x1, 0xd23d, 0x0, 0x6}, {0x1, 0x1, 0xfffc, 0x100, 0xff19, 0x3}, 0x8, 0x33467834, 0x42}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0xff, 0x4, 0x1, 0xff, 0x4, 0x4, 0x9, 0x4, 0x5, 0x7, 0x43, 0xfffffff8, 0x2, 0x8, 0x80000001, 0x10001, 0xffffffff, 0x988, 0x94b8, 0x8000, 0x7, 0x7f, 0x2, 0xa, 0x8, 0x5, 0xc64b, 0xfffffff8, 0x7, 0x99, 0x6, 0xdf, 0x5, 0x5, 0x2, 0x3b, 0x0, 0xff, 0x40000000, 0x3, 0x2, 0x1, 0x0, 0x80000000, 0x8, 0xa29f, 0x8001, 0x6, 0x6, 0x4, 0xb, 0x2, 0x2, 0x4b94, 0x4, 0x2, 0x9, 0x8, 0xc0000, 0x2, 0x6, 0x2, 0x2, 0x9, 0x7, 0xfffffff9, 0x1ea937f2, 0x2942, 0x1, 0x3bb7, 0x4, 0x1a0b, 0x1, 0x0, 0x7, 0x0, 0x6, 0x8, 0x200, 0xfffffff9, 0x40, 0x5, 0x3, 0x5, 0x5d, 0x1, 0x2, 0x10000, 0x9cf5, 0x9, 0x9, 0x6, 0x0, 0x2, 0x7, 0x909d, 0x3, 0x3, 0x4c, 0x9, 0x9, 0xd, 0xaf50, 0x8, 0x7f, 0x5, 0xa40, 0x8001, 0x5, 0x80, 0x0, 0x6, 0x2, 0xa1c, 0x1, 0x7, 0xaaac, 0xfffffffb, 0x5, 0x0, 0x7, 0x0, 0x6, 0xe9b, 0x3, 0x5, 0xa16f, 0x2, 0x8, 0x6, 0x9, 0xc, 0x4, 0x3, 0x8, 0xbef4, 0x2008, 0x3, 0x14c, 0x5, 0xe4f, 0x40000000, 0x9, 0x8, 0x4, 0x5, 0x9, 0x52ea, 0x2, 0x8, 0x84e9fe8, 0x86, 0x5, 0x4, 0x3, 0x400, 0x1, 0x9, 0x8, 0xfffffff9, 0x0, 0x9, 0xeeaa, 0x8, 0x9, 0x2, 0x3a, 0x7, 0x8, 0x4, 0xfffffff7, 0x4, 0x0, 0xf9b, 0xff, 0x9, 0x0, 0x8, 0x3, 0x40, 0x7ff, 0xcb, 0xfff, 0x5, 0xffffff7b, 0x4, 0x3, 0x2, 0xbecc, 0xffffffff, 0x8, 0x7, 0x5663, 0x1, 0x0, 0xfffffffb, 0xb13, 0x4, 0x101, 0x3, 0x7, 0x800, 0x9, 0x3, 0x80000000, 0x8, 0x3, 0xb48, 0xd3, 0x2, 0x576, 0x3c8, 0xd446, 0x80, 0x3, 0x9, 0x8a1, 0xfbc, 0x9, 0x9, 0x2, 0x3c5, 0x3, 0x33000, 0x1, 0x200, 0x1, 0x3, 0x6, 0x9, 0x9, 0x5, 0x3, 0x9b, 0x3d6, 0xfc8, 0x7, 0x5, 0xd3e3, 0x5, 0x2, 0x4, 0x10000, 0x81, 0x4, 0x2, 0x81, 0x3, 0x4, 0x3, 0x6, 0xf, 0xd48a, 0x7f, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x152, 0x1b8, 0x1, 0xbd19, 0x1f19, 0x2, 0x1, 0x5ed9, 0x93, 0x1, 0x8, 0x8, 0x8000, 0x2, 0x8, 0x8, 0xfffffff5, 0x7fff, 0x8, 0x7, 0x7, 0x1, 0x1, 0x2fa, 0x80000000, 0x9, 0x1, 0x5, 0xffff, 0x8000, 0x0, 0x5, 0x8a87, 0x3, 0xfff, 0xccca, 0x1bb403bc, 0x6, 0x0, 0x9, 0x0, 0xff, 0x14a, 0x95, 0x4, 0x1, 0x9, 0x80000000, 0x2, 0x4, 0x7c61b62, 0x4, 0x1000000, 0x7fffffff, 0x9, 0x4, 0x10001, 0xfffffffe, 0x3, 0x9, 0x6, 0x40, 0x2, 0x2, 0x80000000, 0x3, 0x2, 0x1, 0x4, 0x80000000, 0x3, 0x31f7, 0x6, 0xac42, 0x4, 0xfffffff8, 0x1, 0x6, 0x5, 0x9, 0xcba9, 0x34cc, 0xa, 0x5, 0x5, 0x99df, 0xdc, 0x2, 0x401, 0xa, 0x68f3c46c, 0x4, 0xfc, 0x76, 0x14b, 0x3b77, 0x7, 0x8, 0x40000000, 0x80000001, 0xfff, 0x7f, 0x3, 0xfc87, 0xa76, 0x2, 0x80000000, 0x6, 0x5, 0xfffffffd, 0x80, 0x8, 0x1ff, 0x0, 0x0, 0x5, 0x9, 0x3, 0x6, 0xb2, 0x80, 0xa1, 0x6, 0x9, 0x10, 0x0, 0xffffffff, 0x0, 0x2, 0x6, 0x7, 0x7, 0x7ff, 0x5, 0xbfc, 0x4, 0xfff, 0xd3, 0x1, 0x6, 0x6, 0x101, 0xfffffff9, 0x1, 0x6, 0x6, 0x1, 0x5, 0x4, 0x3, 0x9bbb, 0xa3d, 0x400, 0xbd4, 0x7ea, 0x80000001, 0x7f, 0x3ff, 0x2, 0x3, 0x9, 0x401, 0x2, 0x587, 0x6, 0x7, 0x31, 0xde33, 0x800, 0x3, 0x2a, 0x8, 0x5173, 0x5, 0x9, 0xa781, 0x8, 0x80000001, 0x2c, 0x8, 0x5, 0x9, 0x6, 0x8, 0x3, 0x10, 0x8, 0x7fff, 0x3e, 0x1, 0xfffffff8, 0x1ff, 0x8, 0x8, 0x9, 0x6, 0x22f74bf7, 0x80000001, 0x7, 0x3ff, 0x62, 0x1, 0x7, 0x1a, 0x3, 0xd43, 0x4, 0x5, 0x5, 0x3, 0x5, 0x100, 0x4, 0x4, 0xf, 0xf, 0x4fd, 0x5, 0x0, 0x0, 0x4, 0x9, 0xc, 0x2, 0x1, 0x9, 0x5, 0x4, 0x6, 0x4, 0x81, 0x0, 0x1, 0x9, 0x2, 0x4, 0x0, 0x0, 0x1ff, 0xfffffffe, 0x80, 0x177b, 0x1ff, 0x1000, 0x9, 0x7, 0x1ff, 0x1000, 0xe38, 0x6, 0x3, 0x3b02, 0x6, 0xa, 0x9, 0x8]}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bond\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xa}}, @TCA_U32_LINK={0x8, 0x3, 0x800}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x80}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1m31.360628072s ago: executing program 3 (id=1500): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="010000002100000000000000000000008580000075220000a500000023000000a9"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000007a80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x338}}], 0x1, 0x20000000) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) write(r2, 0x0, 0x0) close(r4) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r7 = accept4(r5, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x80, 0x80000) accept(r7, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000340)=0x80) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'ip6_vti0\x00', 0x1}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014008000008080002"], 0x1ec}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0xf}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf7, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f96634558fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x48041}, 0x0) 1m30.413437122s ago: executing program 3 (id=1511): recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fddbdf2500000000000000000000000000000000ac1e00010000000000000000000000004e2200004e23000c0a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080009000000008000000000000000f8ffffffffffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000000000000100000000000000fd002ceb3950466f6ff00000000000000700000000000000000002030000000029000000000000000c00150053073500040000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060080350000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m30.247679728s ago: executing program 3 (id=1513): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0xa, 0x80001, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x9, {{0xa, 0x0, 0x0, @remote}}}, 0x88) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x2d4}, {&(0x7f0000002b40)="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", 0x2af}], 0x2}, 0x8400) (async) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae0", 0x61}], 0x1}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0x35}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0xfffffffffffffcfa, 0x2, "547d9ed0effe82c024750032ea49f09c72384049bcc87e42ca7e2c78d6a85178e447e32b5f4e4fabff6fb16a40901dc4221e42eb745b6332c476d0c3aefed8dc95af179570cf8cc43bc29eb93c6e78f5e1153d3d7c1542f77dc4b29877e2002685e850f2969cf2164fbf8db7e1713786899d2a8ab03ca5accb2e9b50e1fb7a4e3681b35f0f68461daa4f4e1583b9a02195dee35ae7c8bca085399157d5f30c2ec691c39267b28c0ce69f11f2db45ee16e2975a80664f687d01bd7444244a25bdb9ec5b0fa8b1afc0254ddbca2e22ca1b189502b74d7ec4665c23804df713183d428f50a0d64e31e110c707eb3fe69f43799200"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x401, 0xffff, 0x2, 0xc, 0xe, 0x24}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000680)="2271e3ec337c6389d0cb919883fb91e8", 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async) close(r8) socket$netlink(0x10, 0x3, 0x4) (async) sendfile(r8, r7, 0x0, 0xf03a0005) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x190) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) 1m30.170235371s ago: executing program 3 (id=1515): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x1000000000008, 0x8000000000, 0x1, 0x200, 0x0, 0x4d}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008051}, 0x800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r8, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) sendfile(r3, r7, 0x0, 0xffffffff004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0x3) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x60}}, 0x0) 1m29.100297441s ago: executing program 3 (id=1523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000"], 0x7c}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfff7, 0xff, 0x81, 0x3}, {0x4, 0xd3, 0x7f, 0xcbd}, {0x0, 0xcd, 0x3, 0x2}]}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1m24.85320378s ago: executing program 6 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x33, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x9, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f00000000c0)="a931", &(0x7f0000000100)=@tcp6=r2, 0x1}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x2, 0x4, 0x48, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x40, 0x20, 0x6, 0x8}}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000340)={r5, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) (async) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) (async) r7 = socket$kcm(0x29, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r9, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x0, 0x0, 0x2d, 0x0, "5110d7f2ca5bc18d171dd68f8faa735062e3624c08ecee9b8fe42f6091ddac909860f1f3e0477cfe96c77786df782935191eded338fe40407626216bfd29ade0d6bd99f676a4289314f9a9654f3adbb4"}, 0xd8) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r11}, 0x18) (async) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000380)={r0, r11}) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_int(r2, 0x0, 0x0, &(0x7f0000000080)=0x400, 0x4) (async) syz_emit_ethernet(0x2e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb080004000020000000000011907800000000000000000703130000004e20000890a74a03000000e89d0beaf7579fa4593e59bb7bff312d8c46864036dfd1aca228f59cfa2a9f49188c2e3284000000000000000000000000000000009018ddf9d8d7881ec933142488e48d81d0d8daffef7e0747f7443aa2eed298deb7f6b08ef819f2079ab6f67432c04a51"], 0x0) (async) recvmmsg(r12, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x9, 0x4, 0x38, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x1, 0x720, 0x3, 0x100}}) bind$packet(r6, &(0x7f0000000140)={0x11, 0x15, r13, 0x1, 0x8, 0x6, @broadcast}, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1m23.800697195s ago: executing program 6 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000040)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0x5d8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc0000000000000000080001000000000008000100ffffffff08000400", @ANYRES32=0x0, @ANYBLOB="08001f00", @ANYRES32=0x0, @ANYBLOB="08000f"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000800000240012800b00010067656e6576650000140002800500080001000000050009"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0xc004) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x2040000) recvmsg$unix(r9, &(0x7f0000000840)={0x0, 0xfffffebb, &(0x7f0000000280), 0x48}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000680)=@assoc_value={r6, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={r6, 0x64, &(0x7f0000001300)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0xae, @dev={0xfe, 0x80, '\x00', 0x41}}, @in6={0xa, 0x4e20, 0x10, @private0={0xfc, 0x0, '\x00', 0xff}, 0xb70}, @in6={0xa, 0x4e22, 0x5, @private1, 0x9e1}]}, &(0x7f0000001040)=0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000180)={0x1, 'wg2\x00', {}, 0x4}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a50000000060a0b040000000000000000020000002400047c200001800700010063740000140002800800024000000014080001400000000f0900010073797a30000000000900020073797a3200000000140000009bf01100010000000000000000000000000a719760739d8d56f09aab481b5f474bd270c188547e35a09b53427a50be55b3a97b7dbf7d722df8586348b1fcb6929b3e7e014aa7a80c993a3f57297ca1dfe8607fb4df3be4e7fe983bb827c5801853c25cb2c9373c54180e20da0263367c1effc41d770221368cc94b93d2d82db36aad65cbf27565"], 0x78}}, 0x40) 1m23.401268286s ago: executing program 6 (id=1562): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r2, 0x4) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}]}, 0x24}, 0x1, 0xfffff000}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) 1m22.414414555s ago: executing program 6 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xd0, 0x2, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0xa8, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @loopback}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xd0}}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00030065787468647200002c000280080003400000000005000200890000000800004000000009080006400000000208000440000000170900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m22.187497337s ago: executing program 6 (id=1573): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x62040200) (async) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x8c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "b0bd9770b624c164691712a44a114a5b"}, @NL80211_ATTR_PMKID={0x14, 0x55, "920308c1b41afbb8c65c1fa8d58e4d7f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0x9, 0x34, @random="da475c0298"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x46}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)) (async) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x18) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1, 0x106}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_PHYS_PORT_ID={0x13, 0x22, "2c09fa1b29f77936e04bb515bf45a5"}]}, 0x58}, 0x1, 0xba01, 0x0, 0xc084}, 0x810) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061186d000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000010851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) recvmsg(r8, &(0x7f0000000580)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/85, 0x55}, {&(0x7f00000002c0)=""/121, 0x79}], 0x3, &(0x7f0000000540)=""/5, 0x5}, 0x21) 1m21.765269119s ago: executing program 6 (id=1574): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg$unix(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0) close(0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000200)=[{0x20, 0x0, 0x0, 0x6d8d}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) unshare(0x6a040000) sendmsg(0xffffffffffffffff, 0x0, 0x844) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 1m18.685026818s ago: executing program 8 (id=1593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e002506000000007700000000000000", @ANYRES32=0x0, @ANYBLOB="0c00ea800800020003000000"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRESDEC=r2], 0x30}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipv4_getaddr={0x0, 0x16, 0x1, 0x70bd2d, 0x25dfdbfd, {0x2, 0x38, 0x0, 0xff}, [@IFA_LABEL={0x0, 0x3, 'vlan1\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x60}}, 0x20000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r7, @ANYBLOB="08000500060000001000790a0000020004000100040002000c00178004000200040006001c001780040004000400030004000600040005"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)=ANY=[@ANYBLOB="1400000010000116000000e3ff0000000000000a3c000000120a09000000000000000000e30000000900020073797a310000000008000440020000000900010073797a30000000000800034000000004140000001100010000000000000000000000000a"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ffffff00"/24], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x46, &(0x7f0000000040)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x3, 0xffffffffffffff37, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x409, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) 1m18.562942761s ago: executing program 8 (id=1595): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040), 0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000140)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000940)={0x28, 0x0, 0xffffd8ee}, 0x10) 1m18.365553107s ago: executing program 8 (id=1598): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x3}, 0x8) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1m18.146626871s ago: executing program 8 (id=1601): socket$kcm(0xa, 0x3, 0x3a) (async) socket$rds(0x15, 0x5, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) (async, rerun: 32) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) (async, rerun: 32) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async, rerun: 64) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x1ad, 0x805, 0x0, 0x0) (rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {0x0}], 0x4}, 0x2}], 0x2, 0x40010142, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) (async, rerun: 64) r2 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 64) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @private}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x40) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x12, 0x23, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x13c0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0xb, 0xff, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)=[0x1], &(0x7f00000007c0)=[{0x1, 0x5, 0xc}, {0x2, 0x4, 0x3, 0x9}, {0x2, 0x3, 0x10, 0x3}, {0x4, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x2, 0x4}, {0x3, 0x4, 0x5, 0x4}, {0x2, 0x1, 0x7, 0x1}, {0x5, 0x1, 0x10, 0xc}], 0x10, 0x200}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r9], 0x3c}}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (async) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) (async) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m18.039015481s ago: executing program 8 (id=1602): unshare(0x2c060000) unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x20, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}}, 0x20}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', r3, 0x29, 0x96, 0xf6, 0x39763720, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8000, 0x1, 0x7, 0xb}}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r7, 0x0) connect$unix(r6, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(r7) 1m17.530166791s ago: executing program 8 (id=1605): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async) unshare(0x68040200) (async) socket$inet(0x2, 0x3, 0x7) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) (async) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) (async) close(0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1m14.044100795s ago: executing program 37 (id=1523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000"], 0x7c}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfff7, 0xff, 0x81, 0x3}, {0x4, 0xd3, 0x7f, 0xcbd}, {0x0, 0xcd, 0x3, 0x2}]}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1m6.736647427s ago: executing program 38 (id=1574): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg$unix(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0) close(0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000200)=[{0x20, 0x0, 0x0, 0x6d8d}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) unshare(0x6a040000) sendmsg(0xffffffffffffffff, 0x0, 0x844) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 1m2.431239253s ago: executing program 39 (id=1605): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async) unshare(0x68040200) (async) socket$inet(0x2, 0x3, 0x7) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) (async) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) (async) close(0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 46.350254784s ago: executing program 5 (id=1829): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x40008, 0x800008}, 0x50) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRESDEC=r0], 0x30}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r3 = socket(0xa, 0x3, 0x2) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x40}}, 0x9, 0x4000}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) (async, rerun: 64) close(r5) (async) setsockopt$inet6_int(r3, 0x29, 0x11, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0xc0b0) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 32) sendto$inet(r8, &(0x7f0000000040)="8932ff0f6d7ff1cec405cc64b12e385dcf2a3cd06cd4aadea45cb2a5cd0ae16461de06c1fe362772371652bfa497bfdd83f17a215328ed11076f8577e8b3df96c38119a4740fa5b6cfa742028555d065e91cda2a8e874fdf4a8bb77cfd9cdc0da81d6a1d91de9ec8c7745c", 0x6b, 0x6000c804, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) (async) unshare(0x2c060000) unshare(0x24020400) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000007c00f60500030005000000100004006c6f616462616c616e636500"/69], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 46.154416673s ago: executing program 5 (id=1833): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000010c0), &(0x7f0000000140)=@tcp, 0x1}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001a240)=ANY=[@ANYBLOB="240000001900010000000000000000121c060000fe000001000000f7070001"], 0x24}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x40, 0x140d, 0x800, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x6, 0x1, '\xfc\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4004) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000000c0)=0xfffffff9, 0x4) accept4(r1, 0x0, 0x0, 0x800) (async) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30}], 0x1, 0x40800) (async) sendmmsg$alg(r5, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101) 45.919356554s ago: executing program 5 (id=1836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xa}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7ff, 0x1fb, 0x1, 0x2}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, 0x0, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) recvmmsg$unix(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r7 = socket(0x22, 0x2, 0x2) setsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) write$nci(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="7105050402050603ac0408025d9ac5613540eda5070406f848a4797d6caf8d7eb7b7ea33376b046eca6f4ee4830638e927f996b33fb99aa7d3b5b7b465581f81859936dfb641c664166ee13091b76c1dc698397e88dc1ac19597d57216dea84e99"], 0x61) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x9e, 0x9}]}, &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) recvmmsg(r6, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0xfffffffffffffda3, 0x10, 0x20, 0x70bd2b, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000040)=0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 45.441484418s ago: executing program 5 (id=1842): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) 45.212817541s ago: executing program 5 (id=1846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000080)={{'\x00', 0x1}, {0x4}, 0x1, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)="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", 0x16f, 0x0, &(0x7f0000000540)={0x2, 0x105, {0x1, 0xc, 0x8, "261d56d078383d57", 0xf0, "87af16a17647a0fa24e8866cf45ef3cef7d99c20a76e18d9727cbf19bef44dcd39647e070df7fd634023968516092fc1de14099eb30d7a9f328dd7c66befc717881851f402a8ffa4af015203b1291e3b63240a437cccf91d04f2d5c8d24484a000494f9fc91f258e4ae4279912b12744242e4f7f897ed30b4ba903fd8f9355afa99bc31ba4c6b1c2a7bf38ebc23bbee65d3ef4a41a5cd329bb0cf5a521fa279b72af8525d0ff7701cb9b38752b0def0e862881bdfe85d81865efa559fee3fa5574e8615d41b1d072ddf86aad89a75b5885bca6f14addf65554ac242e4c92c08af16aa1cfbfd9f15d39efc1bd6d83b485"}, 0x30, "bf3fc8929f6f6253fadc7a7617f64367b1c9bc48673d6682b50f0bff8a7d670f12c5e4e6498090b29ccc5f865005572c"}, 0x141}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2}) sendfile(r1, r0, 0x0, 0xf03a0005) 44.943544335s ago: executing program 5 (id=1850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0803ebf7e5ff0000573d9df820665ca9911261fb2c4606c9a9a710c07a040b327cd85d1446da129ff8750664b2e2be70245ebad05621c2601bf2d2e3d02e3493184ee90ebb30685366772be34df2154b3853f8fa9b6731f417fa02f461b1317e98dab06eb2"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)={0x38, r9, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @fils_params]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e) 29.845027279s ago: executing program 40 (id=1850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0803ebf7e5ff0000573d9df820665ca9911261fb2c4606c9a9a710c07a040b327cd85d1446da129ff8750664b2e2be70245ebad05621c2601bf2d2e3d02e3493184ee90ebb30685366772be34df2154b3853f8fa9b6731f417fa02f461b1317e98dab06eb2"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)={0x38, r9, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @fils_params]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e) 19.586101157s ago: executing program 9 (id=2043): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="8002029abadb02ffffffa6c3100dc3e9de000a00020057"], 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d6ddbc20c43fd012a05da6bc98940000000201030000000000000000000000000a0400018074000d80140004000000000000000000000000000000000108000200e000000254000380060001004e210000060002004e220000060002004e220000060001004e20000006000100fffc0000060002004e240000060001004e200000060002004e220000060002004e230000060002004e2300000600124000010000"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) pipe(0x0) getsockopt$inet6_mreq(r3, 0x29, 0x13, 0x0, &(0x7f0000000100)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in6=@local, 0x4e24, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x20}, {0x0, 0x4, 0x9, 0x4, 0x5, 0x0, 0xf, 0x1}, {0x0, 0xdd98, 0x8, 0xf}, 0x5, 0x6e6bbf, 0x1, 0x0, 0x3, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x1, 0x3, 0x2, 0x7fffffff, 0x2, 0xc}}, 0xe8) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=0x4, 0x4) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000400)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073797a3100000000140007800500150006000200000005000400010000001100030068617368f16e9699c315d64496372a0fe02a8ee7a64c9a517876754bb8904f72d7971c45ebd01f7bdea0cad06206af6c5bc2476e3e64359895fbf76ec2771a39a3fa1415f2034952c57ba70f6a070c51c15ea02b94e26a87e4259f22d3f01ae93bca2cbfa411e4ecd89ca3b95d78a3b1103e829d347cbeffcb740fb96cecb700"/205], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000100"/30], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff99) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) 17.830764403s ago: executing program 9 (id=2059): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4000}, 0x10}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)={0x5c, r2, 0x405, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x2}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 17.429079159s ago: executing program 9 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8058) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0x8, 0x10}, 0xfffffffffffffd4f) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/142, 0x8e}, {&(0x7f0000000580)=""/225, 0xe1}], 0x2, &(0x7f0000000700)=""/35, 0x23}, 0x1}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x140, 0x1e8, 0xfeffffff, 0x1e8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0xa8, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@ip={@remote, @loopback, 0x0, 0x80000080, 'ip6gretap0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x6c, 0x1, 0x40}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x15, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @private=0xa010102, 0x0, 0x0, 'gre0\x00', 'pim6reg0\x00', {}, {}, 0x67}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c000180060001002af300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r5, @ANYRES32=r2, @ANYRES8=r0, @ANYRES32=r7, @ANYBLOB="8c521320e73285fc914bd9e42a32f7a7ac0bb03294c23dbfa6937e762613994d26fcdffe7532a1ae81a4ff48faffd04af315fdd4d9ac753e838e29b390357f87c96e027a38e27cc8d644811b7f54cbc9ffc5f344b0b306f8d14f645125987589aa4dca667b99ec6d69277d775cebd36486dc58c7c5742f09ddbda3bbcc07b390010ca9ce495e95b6120e502f33eb7c393a2f91d15458fe94"], 0x6f4}, 0x1, 0x0, 0x0, 0x26008060}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0x21, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000429bd7000fcdbdf256b00000008000300", @ANYRES32=r7, @ANYBLOB="0c009900810000002b00228ceae300000a00060008021100400100000a00060008021100000100000a001a00ffffffff"], 0x4c}}, 0xd004) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000740)) socket(0x1, 0x5, 0x0) 17.17314235s ago: executing program 9 (id=2066): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000140), 0xfffffdef) accept$nfc_llcp(r0, &(0x7f0000000300), &(0x7f00000000c0)=0x60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, &(0x7f0000000180)="b387041475b653689cff407a6ae696f4349c260559e3d802dfd5cce2b735a95156bf4c3b02e9418dfcdf88bd34d4613ced39dd7b19c57fff74ca06d68666216301446429fdd388df787aab49b825951071299f33a4e61eb30e0e77654ce6ebd08d2d9ee1495e6968596d89bc8e3685f8a98c234e56b371676e830c803b65e6cbc6ae1ed6595163fd21f74f631f5955611266fa80ca9c7a0a9fa65690fcbbf9d0861605818726254d72e593ebadd85ac48cf8c808dbcf3cd241ce21bb4fccc5949a4912c5892c785a12b2620d34978337c7466e47797dc2617949699d78d1dd9f1fdf290b3997b2f0d2b2b314", 0xec, 0x40040801, &(0x7f0000000040)={0xa, 0x0, 0x555b, @loopback, 0xa24, 0x1}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x28, r3, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '#).-!'}]}, 0x28}}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 16.164442679s ago: executing program 9 (id=2073): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000c80)={0x0, 'vlan1\x00', {0x100001}, 0x6}) socketpair(0x27, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x1000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x104408, 0x4) 15.811409666s ago: executing program 9 (id=2077): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @broadcast, 0x0}, &(0x7f0000000400)=0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', r0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) shutdown(0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 10.48095833s ago: executing program 2 (id=2100): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="53f755215783722f877f7c460e6460333296bd9ed1bb834fc47f6e506344134a655b5face8211e60fb7fd5c58901aebc24a3b771e317be95826abfcda16fcbae368e0d7a3bea399ab48f9d5012432987c1b292a2c86f0e4aad32176d2827e7ef26105015e097119947ad00c8bdaae74b116a3d9ffd161f36d00343425a148cb9ec8c6e27f21c255267c79ce4b39015ff920e8bf4ee67bb29955426f61a472259d2cded"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000008000000811175000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f00000000c0)=""/146, &(0x7f0000000040)=0x92) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$isdn(0x22, 0x3, 0x23) 9.522523672s ago: executing program 2 (id=2107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800472e0038006a0000080190780a010102ac1414378303c34404b1f100031790780007000245490002006800074033ffff7f000001ffffffff"], 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r3, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000003d80)=""/183, 0xb7}], 0x1}, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0xdd, 0xa}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r4}, &(0x7f00000004c0), &(0x7f0000000b40)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@remote, @loopback, 0x0}, &(0x7f0000000280)=0xc) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x48, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37daeed337490ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581100000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000400)=@name={0x1e, 0x2, 0x1, {{0x1}, 0xf3}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) 9.094988791s ago: executing program 2 (id=2109): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) (async) 8.840407123s ago: executing program 2 (id=2113): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 8.441277008s ago: executing program 2 (id=2116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xac, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1e}}}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400, {0xa, 0x4, 0x2, 0x1}}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1dc1a81ed6fb"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20000000, {0x1000, 0x9, 0x6, 0x4f}}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x3, 0x2, 0x0, {0x0, 0x1256, 0x0, 0x59, 0x0, 0x0, 0x1, 0x2}, 0x800, 0x95b, 0x2}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200000, {0x3, 0x6, 0x0, 0x3ff}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10000000, {0x8, 0x2, 0x0, 0xe}}}, @NL80211_ATTR_USE_MFP={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x20040010}, 0xc000831) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r5, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2004c890) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 8.130354644s ago: executing program 2 (id=2120): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r2, 0x11, 0x1, 0x0, &(0x7f0000000340)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r3, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1f, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x7e, {0x2, 0x4e25, @empty}}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000a00000000070000008500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}}, 0x4000090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000240), &(0x7f0000000440)=r6}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r9}, 0x38) 4.499238275s ago: executing program 0 (id=2144): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d006", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3, 0x0, 0x800000000000000}, 0x18) bind$llc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @mss={0x2, 0xfffffffa}, @timestamp, @sack_perm], 0x4) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10, r4}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r13, &(0x7f0000000a40)="2f882097837003e378eead2a955e6d3a433926190561a5e4bc24f81dce7da6c5f1bb8d4db86976dd7917cc042fc06e089d490f4cc76030a995869b0c4dfff77acfbb647ced8e9b4a261288cfeeb06fe32f78c8a2f0ef648795105bf677a8909d99381d72479c303d518307885c89dc3a4cceed81624fa277bb78b1d118c8c652133d84a74fa763245fc51954a798a8e34be4349c12bb9aaa96add9746e01ff613c4f7f9634fe62620268fade0ab99e5fe9d6bba2a719115060d1ef1647676b47a19e82eb3e48053d82c2a4d99ea20a24c68935ccd5827c", &(0x7f0000000940)=@buf="eb6cf3de42ed55ca03bdcdf2d8c1985a0a46b5b80f4984c36afea640d45b5dbd171f44ea561de1f833d96a49c7b2e1eaa567618544700661d23c72ca78f19a4025a469f0e17d07447486901c5fce60e53a00f84e23e38d1a43a7388d409eee6c44a8163979fd0421f6c2df5af30b8ff31bcba732c0e81b366e6a5b23a5a53ee54b45695ed249a2fd302d58abf9959c4a89f43fdc6cf0b568756783015d929b97b627b22693ab4dabd5dfc7609b07423bcd3e88f61c78cbd04d0722d887cca9f127c22401267ebfbfa263929f3cd4ee5ac1a894d18250886410ee57f57c6f6b87eb5e39e345b7d6b8a4b56e74e1b8dcd91c6b088eec0ed8", 0xdacc00bce809f709}, 0x20) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x30, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x4040044) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r8, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0x300}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x8000) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) 3.563067575s ago: executing program 0 (id=2146): socket$inet(0xa, 0x801, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x800, 0x659) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) socket$inet(0xa, 0x801, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) socket$netlink(0x10, 0x3, 0xf) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet(0x2, 0x800, 0x659) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) 1.971397607s ago: executing program 7 (id=2147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000007c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110) socket$kcm(0x29, 0x2, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1, 0x2f}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8000000000, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffa}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000380)='k', 0x1, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.857046335s ago: executing program 1 (id=2148): epoll_create(0x7) (async) epoll_create(0x7) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x200400c0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x200400c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) (async) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) sendfile(r2, r1, 0x0, 0x10000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000300b3b1010000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f0000001600)='syz1\x00', 0x200002, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) connect$phonet_pipe(r0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) recvmmsg(r0, &(0x7f00000087c0)=[{{&(0x7f0000000640)=@alg, 0x80, &(0x7f0000000840)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/79, 0x4f}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/214, 0xd6}], 0x4}, 0xffffff05}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/186, 0xba}, {&(0x7f00000009c0)=""/113, 0x71}], 0x3, &(0x7f0000000a80)=""/61, 0x3d}, 0x10}, {{&(0x7f0000000ac0)=@xdp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b40)=""/42, 0x2a}, {&(0x7f0000000b80)=""/154, 0x9a}, {&(0x7f0000000c40)=""/96, 0x60}, {&(0x7f0000008980)=""/23, 0x17}, {&(0x7f0000000dc0)=""/59, 0x3b}], 0x5, &(0x7f0000000e80)=""/3, 0x3}, 0x5}, {{&(0x7f0000000ec0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f40)=""/97, 0x61}, {&(0x7f0000000fc0)=""/176, 0xb0}, {&(0x7f0000001080)=""/55, 0x37}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/37, 0x25}, {&(0x7f0000001100)=""/211, 0xd3}], 0x6, &(0x7f0000001280)=""/165, 0xa5}, 0x6}, {{&(0x7f0000001340)=@sco={0x1f, @none}, 0x80, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/116, 0x74}], 0x1}, 0xb}, {{&(0x7f0000001480)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000008680)=[{&(0x7f0000001500)=""/213, 0xd5}, {&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f0000001600)}, {&(0x7f00000074c0)=""/21, 0x15}, {&(0x7f0000007500)=""/37, 0x25}, {&(0x7f0000007540)=""/4096, 0x1000}, {&(0x7f0000008540)=""/114, 0x72}, {&(0x7f00000085c0)=""/158, 0x9e}], 0x8, &(0x7f0000008700)=""/175, 0xaf}, 0x8}], 0x6, 0x10002, &(0x7f0000008940)) 1.830620014s ago: executing program 0 (id=2149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0xa, 0x1, 0x106) (async) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575", 0xe}, {&(0x7f0000000100)="b70000", 0x3}, {&(0x7f0000000040)='7', 0x1}], 0x3) 1.535845679s ago: executing program 1 (id=2150): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) sendmsg$nl_xfrm(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000010c0)=@updsa={0xf0, 0x1a, 0x1, 0x70bd27, 0x25dfdbfd, {{@in=@local, @in=@private=0xa010101, 0x4e23, 0x20f, 0x4e20, 0x6, 0xa, 0xa0, 0x80, 0x2c}, {@in=@multicast2, 0x4d2, 0x32}, @in=@empty, {0x3e9a, 0x6, 0x7, 0x0, 0x81, 0x8001, 0x4, 0x4}, {0x6, 0x400, 0x7, 0x8}, {0x1, 0x8, 0xfc17}, 0x70bd2c, 0x0, 0x2, 0x2, 0xdb, 0xd44883f830623595}}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x4044814) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="02030003310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x108}}], 0x1, 0xc040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x130, r4, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_DATA={0xfa, 0xc5, "0cda756cf3f739b0402f58af485e124fa98ccdb0aafdbc6841fcb00db94902ae4e50fe627f8df653152a29a2ed2b1c552f8cac3b1eb2d4c012d9967448a13be2867a63dc6022c3c019f88bfcc64c41442f2f9395f0699a1c086da5ebf0373352ec38a620a94fb5c0ba3a2b525434d61340efc4a92a6d17d728c3eabc0fb3005eee7e2e78250f2b618dfc564bdff1d0eea5d69e954017535305edd1a136a702ded72e572288a16bf91d92cd9092ce030eadf7065c5afc1f0e2a57f13dd0b42d69fef50f16e212aa22a603c40baa053f33e1f165ae9b10638fe1c815685e8c3d527b6641d4b0ac3ea65d75671e3469955f471daf14ba65"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x13, 0x7, 0xc, 0x7, 0x9, 0x3800, 0x9, 0x7}, &(0x7f0000000100)=0x20) 1.393429722s ago: executing program 0 (id=2151): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="623b2832175a18b6f92fcce1a6eaf1175de613d3f0308ce58addd33616395d4090e9a916d0337217dbd683ef68832c73836ecaba32d747629200b4c7dbb8831b0ffc1fc8a130a37be30a8efdd30d1e6b56c1ed40533ba874994fafddc17e554153f0d89c0cfee25ad3e820423f3e5024a58d473d5b27323598fbcde55089fd8b5941fa24fcbca5fec952f9b8680814a2f2b7cda259", 0x1d}], 0x1}, 0x20044805) 1.326474056s ago: executing program 1 (id=2152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000240)=""/242, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="24ec825e1b24ab1b9f1d00", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009000000"], 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050005000000fedbdf250f00000008040300e5730fee4865dcd5a191b39237b49722177f4f75a6b49cbf0b4d28a6dfe5c0c5b5fb7b879c582756408c8bfc33b147e42a0afa588ad60e6fbd61aacf8956d8e51c5bf45451502ca29742f0ef60df76192cf13931e133dbe38b16e2272805ff23b6f89e2b5d83b271e378dc951e034809564e613b8d41ae0ab7c8c4", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x240000c4) 1.17727001s ago: executing program 1 (id=2153): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket(0x2, 0x80805, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @rand_addr=0x64010102, 0x0, 0xff, 'batadv_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x21, 0x6, 0x61}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x0, 0x5, 0x2, 0x5, 0x2], 0x6, 0x4}, {0x1, [0x3, 0x4, 0x0, 0x2, 0x1, 0x4], 0x5, 0x4}}}}, {{@ip={@remote, @local, 0xff000000, 0xff000000, 'pim6reg0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x56c, 0xe, [0x1e, 0x35, 0x3, 0x36, 0x5, 0x3a, 0x2f, 0x12, 0x1b, 0x22, 0x3d, 0x1c, 0x25, 0x3d, 0x0, 0x29], 0x0, 0x2086, 0x86ad}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) socket$unix(0x1, 0x1, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80800) bind(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x158}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000000b0000000000000001c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 1.097157726s ago: executing program 0 (id=2154): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000040)={r7, 0x0, 0xe6, 0x6}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x24004090) socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x3, 0xff) sendto(r10, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000100)={0x100, 0x3, 0x0, 0x8000}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="240012800b0001006272696467650000140002800500070006"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 913.838685ms ago: executing program 7 (id=2155): epoll_create(0x7) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 64) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) sendfile(r2, r1, 0x0, 0x10000) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000089c0)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xa, 0x148, 0x0, 0x60, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x150, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0x8000, 0x1, 'snmp\x00', 'syz0\x00', {0x5}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_to_team\x00', {}, {}, 0x73, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3, 0x2}, {0x2, 0x3, 0x5}, 0xb19, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000300b3b1010000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async, rerun: 32) openat$cgroup(r2, &(0x7f0000001600)='syz1\x00', 0x200002, 0x0) (rerun: 32) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r6, r7, 0x0, 0xffffffff000) (async) socket(0xa, 0x3, 0x3a) connect$phonet_pipe(r0, 0x0, 0x0) (async, rerun: 64) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (rerun: 64) recvmmsg(r0, &(0x7f00000087c0)=[{{&(0x7f0000000640)=@alg, 0x80, &(0x7f0000000840)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/79, 0x4f}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/214, 0xd6}], 0x4}, 0xffffff05}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/186, 0xba}, {&(0x7f00000009c0)=""/113, 0x71}], 0x3, &(0x7f0000000a80)=""/61, 0x3d}, 0x10}, {{&(0x7f0000000ac0)=@xdp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b40)=""/42, 0x2a}, {&(0x7f0000000b80)=""/154, 0x9a}, {&(0x7f0000000c40)=""/96, 0x60}, {&(0x7f0000008980)=""/23, 0x17}, {&(0x7f0000000dc0)=""/59, 0x3b}], 0x5, &(0x7f0000000e80)=""/3, 0x3}, 0x2}, {{&(0x7f0000000ec0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f40)=""/97, 0x61}, {&(0x7f0000000fc0)=""/176, 0xb0}, {&(0x7f0000001080)=""/55, 0x37}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/37, 0x25}, {&(0x7f0000001100)=""/211, 0xd3}], 0x6, &(0x7f0000001280)=""/165, 0xa5}, 0x6}, {{&(0x7f0000001340)=@sco={0x1f, @none}, 0x80, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/116, 0x74}], 0x1}, 0xb}, {{&(0x7f0000001480)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000008680)=[{&(0x7f0000001500)=""/213, 0xd5}, {&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f0000001600)}, {&(0x7f00000074c0)=""/21, 0x15}, {&(0x7f0000007500)=""/37, 0x25}, {&(0x7f0000007540)=""/4096, 0x1000}, {&(0x7f0000008540)=""/114, 0x72}, {&(0x7f00000085c0)=""/158, 0x9e}], 0x8, &(0x7f0000008700)=""/175, 0xaf}, 0x8}], 0x6, 0x10002, &(0x7f0000008940)) 754.363095ms ago: executing program 7 (id=2156): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e1e, @multicast2}}, 0x5a4, 0xff}, &(0x7f0000000180)=0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200005752051f00000000040000009500000000000000"], 0x0}, 0x94) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001000)=0xff7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r8, 0x0, 0x0, 0x4a71, 0x5) (async) preadv(r8, 0x0, 0x0, 0x4a71, 0x5) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r9], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200150f"], 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) (async) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200150f"], 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r9, 0x8}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r9, 0x8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 713.723283ms ago: executing program 41 (id=2077): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @broadcast, 0x0}, &(0x7f0000000400)=0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', r0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) shutdown(0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 518.789589ms ago: executing program 7 (id=2158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x80}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x4}]}}}]}, 0x44}}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 436.919058ms ago: executing program 7 (id=2159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000000c0)={0x0, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x6c, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x0, 0x8001, 0x1}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 258.361697ms ago: executing program 7 (id=2160): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002fbd7000bbdbdf2502000000080069b50600000005003d0004000000080040000002000008006200080000000400d10014000200"/70], 0x4c}, 0x1, 0x0, 0x0, 0x894}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x87) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000400)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x1c}}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000000700010007b06d5fa41acfd58a000000"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0x10001, 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cad7000fedbdf251900000006006d000800000005001d0010000000d897ec160500000005001d000500000005001d080800000005001e00080000000500600099000000"], 0x4c}, 0x1, 0x0, 0x0, 0x84000}, 0x0) sendfile(r5, r2, 0x0, 0xf03a0005) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_type(r9, &(0x7f00000000c0), 0x9) sendfile(r9, r8, 0x0, 0x10000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES8, @ANYRES16=r11, @ANYRES8=r9], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r10) 165.346323ms ago: executing program 1 (id=2161): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000006000000000000000000000300000000030000000200000000000000000000000000000a04000000000000000000000300000000030000000200000003000000040000000000000800000000000000005f"], 0x0, 0x66}, 0x28) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x44}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x11c, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x106, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd5, 0x66, 0x0, 0x1, [@nested={0x20, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="2f0bd34f"]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) 164.265842ms ago: executing program 0 (id=2162): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0xea) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x85a, 0x3ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0xb, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0xa, 0x8, 0x100, 0xc0000000, 0x8006, 0x6, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x1, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0x13, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x80000002, 0x0, 0x4e8, 0x1, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003080)="00129a4c7df9faa78fab8cd40dc24691124345e00217c2e16777dd0b3e3f3976ddf8c5565e79861e6b717f91b1accc3e82cd60b9994a914098744aeaceae03f80c1f9a1db7833b41d70c2575d74c51db8befcc739461e37a34191b6c17e1db6cdda74b28c446c2b2f6589a759aabf728bed49347245c53b63ffc419f4b8c7378b63694578f152fc7372d3dc38db6917580739b817111d0c275f4866a02c7f3ef5bf6932e04fa1a663584ba050ac6fabbed43100ccc3f62bbb4f42bd26f2b258887c803a366a4a0a4de6d486ecc39dee01ab68e9ea5bce4ea5e0894bc63a6d88d529212db4fad062e7180acf112c159a239df25ce22951750aafb123a143b00931d344fcbbcc7c4dc5365d38a79849dc73b49053bd142408f18ba54943424cc70c2f04a813306e7a3b89b0d1a83da0c7c4659b6b09bbabaf0952526626702684613e3288937041a7a85ea71b9206d64d0517e50a43b4ce9eefd238860905d65237800587dfe8f47a29ae96d76d26651d6e4fb96ef28518b062b328fccc321f4f60625ad03e67d87cf3bbb086b4c850e2632202cf94418a2feffa7f08f8ec265ae4dc70d8b15df2052106ec042842902fd40a56c357517db9b7111b3437b71cb49772c98f4db2cac5129f0093d7fc13e9dd9fff349200144d76c267c580585a12d2977a8bb1cbfe7fccbf2488ff0366027c5b62772f56c35f8648e87d1ae6812d50db16f82dc1efb65c78571d21afc63a2c0f6501968e1a4b30a1655f3c1f4697a34a80c765258cce87cc67bd6a43ecf1691e64db9feb9763056b577b08388bb516e934b35c177777e00e2b4ae7113fbaedf382bfc63173d23e8254e053b6d8c65e3eccacd9d36f4799989f79523d6ef7866bee05b95c070af1a78f4abb50cdd2ecfaa52f569af70f777abc44179905f77c466df474d78bd1f4385a6d71a4f7e1b46cd3ee37c80597a0a241dc8dce09ef09e193aa2edf859546c2cdbd7236096e0a58bcd307c37c9d1f40b874def7299891e0a74bc512ee2eb4d6a9055caf33af4d46d56835e4fc97b04aae9090f97fb21a0c5f919cded815df1525c4b56e425bb1d59e52b6d0fd26a7d1f939198a92300181dbe3cc23fdaaf5af258e1fe3f84eb6ac399b6bd088683205384222c9fd58331c247b23336422af11182de7d7dcc22a9a4c29c6605e7e8b002a68a71dd2af53194616ecad9c72179131dc8e972a619e22f04e7c428f49189bbb0c889d835c7aee8279c10dec60d33ee1e2cbaef47b169b13f14617d64294a27927885c2882488865aeeaf239f061c9d0e2b43e1d7725aedf0164c68f24209b53ec6447f1fcf9997717930656e569e9385ad26420316f1f6963831359af43edaa2ad3d75367adc3b7af681073df50484d84b6fe3699fafcb0e5a39d8fd1ea756d5dcdad81a6c1501669a9b014dc823f53a78cb744548e8ae510ff9ed4092ccb194e17559e26560898e5a4248ab447c30630e0264f29a2db01299686e90039f6430d8a33cdd5dea5e0cbab802dff3a99cab8aa8cdccfefbd97d64711b330e1d39a07315dda491d8d017b7089cfd4c7637d455f284b237a6a1173d8dc53f8ea7ebe637c44d15661032486cc969dbfea7deae71bdf3536970bb5f79f5ddc642d3afc5c36b8906d997b66a3ecdd8adbadec2d816014114f7b7d3bb1c6526a2a0e8d04c803e3f90b6ab86ea532e898cda6857ba7a34d1e403bb64650eaf25de08e09629a88415bb6ad4d2512cf9a2e4b56c338558b91ba306252e30e4a6f2ffb5a1c8c551dcce5b2d068e125bd2f6f841a34d2df02b59f3613953e5e31af47c58ed40bd16586a65e36122513e075242acbea788b8410b3987f12eb90b910c1aa050047e52819cee10a5a16d64c84b5ade6d2fb9faccde31b2cb41e16b09817de49d93a6bb21a4ef6dc4f4f34b51f37824607a84f7583a98c1ebbdfc84c7db077a6b09c96dfe1584ca5564ddd97c67749981ffcde47749397f2aa9e9067550ecfc512b01da119276842bb76e92b03808b754568e424037abaf7d5953d143b4c05dbc854c49f32c36458b194286f52c481bb3059936f2e55973e6af6eaf7c221a159618204453699893ebe30075ed763212f6fec2e398cbc6241b14e6b3aa5dcc2edcffab0b1a423f2b8c7f1ce00745f81c53aff40933b341b61af6a55ec4c53901f7e213726f4b288df9aacd1648894b1aeb73eee4595c8056d9f85b8373a24680866155c62d788615c36c253b13cf021f242850ed36ea3b9ddcb3fca73cc6690134430b94d2e74a47b432dc7c6c564aa1dad70b722f67ecd71c1504ec38918545d5f55bfa503aa0f94b7a183fcd721f84abcf18ccd1f1b0b17b68fd46470d6a14feb1d8712055a624de3664a10855439699fdb6aaa8de91715ea91bdfade34626f1f5caa320e4c8848095105c6d4100369591da3fcda564dde6a257cf4b35bbf007993d5e83074c69a62e1c37185721c1f4458add37a6d3084e4a5df653b4b806c1bcc12d6d9ea55dda8553b38c5717aaf0b415ac4c2e39f7ff489b8106aae6e1ed9f2f3348c36aec3c044ad3e851a0a159b15d4843534ee4f15eb97d3b27912bb0151c72f914c654282b2555255757b3b30cba0fe2d07eab43f350cb2e1285a4e7ea7a2cbc9117412cef0fcf9e35070d4e623436edc649849a9a15f671e9ae38e197ee64dc944b4efa6d530b3f7a3e44ed5eae9d058ac191270585a94ce7136f882a219968bf025552e8ccc692a1ebd844b8aba44f51077265bfa16d228639e1293fb8d84e974b556651f46cd22607a7a076ec22deb9a6b4427c19d73774bc6c405ffed9545270b941c47bd436c0ce3df0d57db4a7bc8776138f359288055473edf6209b6fae2bffc0bddd0d2e5c6c0d5c4fff0264194d22b72d5696684cb5d4303dfe09d88374c51041ce91ae4fc599e786d52218a137509caab3c6f5026637ba79f6b0b2dce739c8f2d3a7f36e39882a72f9b43ebf39e2690fdecfb3f18634b25f17d45121fc0b2b60d35811272ed853dcf3addffd473137d14ed394d736fff062d5a3811654422e68b05e80bc039aabcf7c47c05ceb254656f0c7ae85fbc5a64225db158c9f84fd4c4199794e063897d8185783a35dde084e90098cfba3201c4f4c7e8b9a99bba4413c0ec46d2713b934b1e83f3b6f676b6a3e2dfe586bdd9cfc703d5c7eb2f22e5abce74a56f8673b582bcfca0503ec213f0bc3e1a1d5cdeec8469e0a4ee066ad77303de7cc9bed71a3a0c879011f89a9db9c8af175825d0327f21fe62d9dceb8c88ac3d869834b650b7cccaf3c605b6767101ac66a3fcd3325e5592a640bdd7fb9e2cc1e16c35b7c45572e5785e5368426e8275bac75fb44eca06652e31d1468bcc26a27cb9c77e9c80b64038b18fb54c6e1da02f7091b78830f3c714aea833681a53624357990b14daa19f7cffb45a0e8e5ec8611e8b3b0c742755c87b114506cab161f0538aed1605107ac9437e3784e176fabfef3ee221205d4e99ae589ce171d2e3e9409f18250863a45d51e3356ba38adf773a609aba7988e7d8a8969d5bf767da83c9c583b4a9a75c71e10daf7b30408ce5dc681915df2938fcc5a56d5ee059d65cc7919859a6c96f011c046254ee453c420aec42d297bef60c55786db9d486fb1f81c23d3ef49d1d98de1df4ad29fc13894d6c4aa64e5d11e20f6a11fe33c47da95a72fa2b1da8d16b2db1e6db44b6bd17289b0519ce0c7dc8285a5f361331783c7b9d24a44ee057fa006d542bf532bb7dc9fcdb4e8d1e4e77850293c23589029c891f0a24ea527dea99a872eea489a398b6c340aa7fe5cf5de09c438748fd95bc0991326a97c8035966a1a232e3b5f08a53aeb0de935a228a8a062444ca62897dad746ca16c0e4d230cc1c5a1debb2067593f95458f3085199174d9c0619b86afb0e51d827ef59ea69afd0c0c5862403a301429b6026af0167a30d26384c7d57d5955e59aab57537ecab63a465f7919808ec9568d119f83089cd6587615da8c1eb3467f9de12ba2acf2dc2f119cb46c71dd6b820432da64f8b7f0f3a06b9ea1830fc111dd533afd6220c18e12aa61de8af6296f7e950e4dbf71888959df232376d5ffa54f2655ac8fc0c2e818fec248c0624bcf93d64d5331d6ebe9dcc822b943b2805d931b4802047d3b7914d3d1efb6996c41588a7d08ce9861a4010b666b1fce7e97961d555e2da148dea209bea85d0bbdeffc70fcf6353aad2d6e698622aa51d23b3194d382e41a4f4292527a920a0f650cada52312fbcb4039eff5410e77f054447ff71ead74cdfb73581f39fca52aebe191a9d4ce09c7dff3c6cdca52a3c52d3a2ec67d244394b1c5b3ea8f87c4ac4b8705f7e9e101c757a7bc2933626a2f96fe5ee0c5fcd4ebd231fc00f551c67f4df0e926d8f45b33902816797738364761103bab9f5c55f6577c33e0e8848deb18e6f0f69c37b3178e106e7c80bea61c9e731647f40f59c3d3dd77af1b653e5328d24cfe2c6201f82e7ccc9ff9d1da829f8ac420e3d6315fdb9903d8dbbc06affd269be02d3a117e9f39bcd9418b3a3983876ef15bd826808f4ce8c7b88d83bad39865a29b1d8677f07ef1e381fb13fa20522eecc8f6f6928ec912a12503fca72d10b84fd34b17e6ae01781b65171b190999e6f0231dbca44e2ede69a8d9c54b310ec455c66c9e110172bc55a4e606365d567959bd2e24ab6a12e77cbe44b642760bcd88f907be49c8f6902673fd354908fce304450cedd39d097667499abb99c4ec7d9f65df9e59c592a397979502ab8cd07feeb57f9f483f9c7078c9b1784a71172296abb5d686d8caf10bb665ede3c0b382485a0af27941d47fe796114d7f631b94b5db0cac301c59f3523b2a2874c2c6b378a0c954de174019710c7bbf3614a3bdae95ec8e32537c04a27a5ebbc7c1ca89d6dd9f5ad2fca1e42eb7cc815399022c6d3f0b49af09e92c0beb3f63836012bebb4f1ade4960097db42c425d6fc9b4386c3ffadde27c6b91456a78b67cf4c03c0051e7c8436fb2d549fb1ba0776a62145408f1b62e484f3a34d4c8a833d2d72c19b3e41dd6ffb38c7b0e01e1b42659c7764fe268c1d8d88c7daf5896887da790911bdd11fd8c6b590ab87dfc9a45a692162730d82e0d7d0eb775c19b1fde34d38c4ceaad99cd2db1dd943ccffe8d2e8a44accf376f4c065a4adb6d769584afedafcaef5a985c9cb580838b02296ac6ab6c395bc24a10fdfdb349f030e46dc20c5aa2bff87e72185ae8a3f1a97675bbed8c7cfc0cf4f63db990b932b31056404f5d0aebe2e5ae875cfd26f849d4bec2c1260e90b6e8f36b2e64ed5dd91fd6af4a107c98cf1d8c8188377129928c55bd10eb1d41130cc62ca9679606d4fcea9de52c42615aa98b80346cf16118b3a390a0693a6366577d1c9c16d53545240ec963603c2f72356b3116e2c268737bcc3879b7374a6c1e55e1970e6621fc02164536907d4674e79aeb89a1719bffc3a935f773ec23c3c00f0476ce11d396f6342ca6c523d3d5165cebe6a7814b1cdc1ea29a99f8db0bbf0c897366b39a732d44f6783772c17aa1822373188f91afec914228e6a78929139eecc3297dc8c41b165ddae079273f5f538765474df589f5c0eb51723a4109be0115afe28da6ad3646f59aa30c0c444c9176a67342318d243778d6eb12d172bba0af93135304dc0a98311b1b210119f8bd6342b4762add4c3b6b55151d18c8db778fd3c36199ae65531925b1b4722f3a4cdfadb5d3553cf990a83c7b08c093ae258022aecbbd38ea8e3d778e08954653095", 0x1000}], 0x1, &(0x7f00000005c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1a2a}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0xa8}, 0x40094) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r13 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="050000000000100000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 0s ago: executing program 1 (id=2163): unshare(0x62040e00) kernel console output (not intermixed with test programs): es in process `syz.3.965'. [ 195.992582][ T9968] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 196.008176][ T9973] xt_hashlimit: invalid rate [ 196.452791][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'. [ 196.618227][T10010] netlink: 104 bytes leftover after parsing attributes in process `syz.2.977'. [ 196.679671][T10012] netlink: 'syz.2.978': attribute type 3 has an invalid length. [ 196.796474][T10016] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 196.922863][T10022] wg1 speed is unknown, defaulting to 1000 [ 197.346144][T10028] --map-set only usable from mangle table [ 197.510783][T10037] wg1 speed is unknown, defaulting to 1000 [ 197.513270][T10041] netlink: 'syz.3.989': attribute type 83 has an invalid length. [ 197.993164][T10055] netlink: 'syz.4.993': attribute type 28 has an invalid length. [ 198.025175][T10057] bridge0: entered allmulticast mode [ 198.372809][ T30] audit: type=1107 audit(1762724034.506:5): pid=10073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ó%‘^D¹ÄQ¯ [ 198.372809][ T30] 4Û®ÏN´– ¸æG' [ 198.458038][T10079] syz_tun: entered promiscuous mode [ 198.563570][T10084] x_tables: duplicate entry at hook 3 [ 198.576417][T10079] syz_tun: left promiscuous mode [ 198.891742][T10095] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 198.957205][T10093] bond6: option packets_per_slave: invalid value (1048582) [ 198.969227][T10093] bond6: option packets_per_slave: allowed values 0 - 65535 [ 199.024821][T10093] bond6 (unregistering): Released all slaves [ 199.083119][T10099] syz.1.1005: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 199.102160][T10099] CPU: 1 UID: 0 PID: 10099 Comm: syz.1.1005 Not tainted syzkaller #0 PREEMPT(full) [ 199.102188][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.102208][T10099] Call Trace: [ 199.102217][T10099] [ 199.102225][T10099] dump_stack_lvl+0x189/0x250 [ 199.102274][T10099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.102303][T10099] ? __pfx__printk+0x10/0x10 [ 199.102324][T10099] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 199.102352][T10099] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 199.102382][T10099] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 199.102413][T10099] warn_alloc+0x214/0x310 [ 199.102450][T10099] ? __pfx_warn_alloc+0x10/0x10 [ 199.102492][T10099] ? __get_vm_area_node+0x28f/0x300 [ 199.102521][T10099] ? xskq_create+0xbf/0x170 [ 199.102555][T10099] __vmalloc_node_range_noprof+0x690/0x12d0 [ 199.102617][T10099] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.102650][T10099] ? __kasan_kmalloc+0x93/0xb0 [ 199.102687][T10099] vmalloc_user_noprof+0xad/0xf0 [ 199.102716][T10099] ? xskq_create+0xbf/0x170 [ 199.102744][T10099] xskq_create+0xbf/0x170 [ 199.102776][T10099] xsk_init_queue+0xb0/0x110 [ 199.102807][T10099] xsk_setsockopt+0x57b/0x8d0 [ 199.102842][T10099] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.102872][T10099] ? __pfx_aa_sk_perm+0x10/0x10 [ 199.102904][T10099] ? aa_sock_opt_perm+0xff/0x1b0 [ 199.102944][T10099] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 199.102964][T10099] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.102992][T10099] do_sock_setsockopt+0x17c/0x1b0 [ 199.103021][T10099] __x64_sys_setsockopt+0x13f/0x1b0 [ 199.103049][T10099] do_syscall_64+0xfa/0xfa0 [ 199.103079][T10099] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.103110][T10099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.103131][T10099] ? clear_bhb_loop+0x60/0xb0 [ 199.103157][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.103177][T10099] RIP: 0033:0x7f492bb8f6c9 [ 199.103205][T10099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.103223][T10099] RSP: 002b:00007f492c967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.103245][T10099] RAX: ffffffffffffffda RBX: 00007f492bde5fa0 RCX: 00007f492bb8f6c9 [ 199.103260][T10099] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009 [ 199.103273][T10099] RBP: 00007f492bc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 199.103286][T10099] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 199.103299][T10099] R13: 00007f492bde6038 R14: 00007f492bde5fa0 R15: 00007ffd613657d8 [ 199.103335][T10099] [ 199.155520][T10099] Mem-Info: [ 199.372244][T10099] active_anon:4718 inactive_anon:0 isolated_anon:0 [ 199.372244][T10099] active_file:3273 inactive_file:39924 isolated_file:0 [ 199.372244][T10099] unevictable:768 dirty:139 writeback:0 [ 199.372244][T10099] slab_reclaimable:11804 slab_unreclaimable:154899 [ 199.372244][T10099] mapped:29151 shmem:1357 pagetables:1128 [ 199.372244][T10099] sec_pagetables:0 bounce:0 [ 199.372244][T10099] kernel_misc_reclaimable:0 [ 199.372244][T10099] free:1262557 free_pcp:21581 free_cma:0 [ 199.437665][T10099] Node 0 active_anon:19472kB inactive_anon:0kB active_file:13092kB inactive_file:159496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116604kB dirty:548kB writeback:0kB shmem:4592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13356kB pagetables:4388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 199.471452][T10099] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 199.525880][T10099] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.571731][T10099] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 199.577785][T10099] Node 0 DMA32 free:1140380kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21872kB inactive_anon:0kB active_file:13092kB inactive_file:159496kB unevictable:1736kB writepending:548kB zspages:0kB present:3129332kB managed:2565132kB mlocked:200kB bounce:0kB free_pcp:66504kB local_pcp:25596kB free_cma:0kB [ 199.611951][T10099] lowmem_reserve[]: 0 0 0 0 0 [ 199.616951][T10099] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.652585][T10099] lowmem_reserve[]: 0 0 0 0 0 [ 199.657549][T10099] Node 1 Normal free:3894488kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17152kB local_pcp:7776kB free_cma:0kB [ 199.666652][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.691232][T10099] lowmem_reserve[]: 0 0 0 0 0 [ 199.700912][T10099] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 199.741365][T10099] Node 0 DMA32: 1341*4kB (UM) 180*8kB (UE) 31*16kB (UE) 285*32kB (UME) 33*64kB (UM) 45*128kB (UME) 30*256kB (UME) 19*512kB (UME) 11*1024kB (UM) 3*2048kB (UM) 264*4096kB (M) = 1140452kB [ 199.762367][T10099] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 199.780786][T10099] Node 1 Normal: 182*4kB (UM) 50*8kB (UME) 41*16kB (UME) 106*32kB (UME) 41*64kB (UME) 7*128kB (UME) 3*256kB (ME) 2*512kB (M) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3894520kB [ 199.811977][T10099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.827438][T10099] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.837135][T10099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.853438][T10099] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.870093][T10099] 44550 total pagecache pages [ 199.880844][T10099] 0 pages in swap cache [ 199.889809][T10099] Free swap = 124996kB [ 199.894729][T10099] Total swap = 124996kB [ 199.899650][T10099] 2097051 pages RAM [ 199.903644][T10099] 0 pages HighMem/MovableOnly [ 199.908717][T10099] 424126 pages reserved [ 199.913062][T10099] 0 pages cma reserved [ 199.918481][T10095] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 199.921157][T10097] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 200.019667][T10096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.048082][T10096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.241458][T10105] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 200.704523][T10147] __nla_validate_parse: 5 callbacks suppressed [ 200.704546][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 200.720239][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1017'. [ 200.825104][T10152] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 200.843997][T10152] syzkaller0: entered promiscuous mode [ 200.849749][T10152] syzkaller0: entered allmulticast mode [ 201.053458][T10163] wg1: entered promiscuous mode [ 201.060008][T10163] wg1: entered allmulticast mode [ 201.852567][T10186] syzkaller1: entered promiscuous mode [ 201.858258][T10186] syzkaller1: entered allmulticast mode [ 202.016572][T10192] netlink: 'syz.2.1031': attribute type 1 has an invalid length. [ 202.031906][T10192] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1031'. [ 202.113257][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 202.175951][T10195] netlink: 'syz.4.1032': attribute type 4 has an invalid length. [ 203.181837][T10226] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 203.323150][T10232] netlink: 187468 bytes leftover after parsing attributes in process `syz.4.1045'. [ 203.658140][T10233] netlink: 'syz.1.1044': attribute type 6 has an invalid length. [ 204.688888][T10292] netlink: 'syz.4.1060': attribute type 13 has an invalid length. [ 205.233110][T10313] gtp1: entered promiscuous mode [ 205.246542][T10313] gtp1: entered allmulticast mode [ 205.413762][T10334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1065'. [ 205.434799][T10331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.552860][T10340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1070'. [ 205.657032][T10341] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 205.835193][T10353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.852814][T10353] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 205.869708][T10357] netlink: 'syz.1.1074': attribute type 39 has an invalid length. [ 205.897869][T10353] bond0: (slave gre0): Error -95 calling set_mac_address [ 205.914495][T10362] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 205.968405][T10362] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 206.136272][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1077'. [ 206.156632][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 206.224932][T10381] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 206.249090][T10381] netlink: 'syz.2.1079': attribute type 3 has an invalid length. [ 206.263978][T10381] netlink: 'syz.2.1079': attribute type 7 has an invalid length. [ 206.287314][T10381] netlink: 'syz.2.1079': attribute type 8 has an invalid length. [ 206.325391][T10381] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1079'. [ 206.365421][T10381] NCSI netlink: No device for ifindex 131092 [ 206.915970][T10414] `: Port device syz_tun added [ 207.059967][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 207.079385][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 207.290427][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 207.594681][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'. [ 207.638959][T10458] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 207.659150][T10458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.331165][T10489] tipc: Enabled bearer , priority 0 [ 208.355582][T10488] syzkaller0: entered promiscuous mode [ 208.365371][T10488] syzkaller0: entered allmulticast mode [ 208.376684][T10487] lo speed is unknown, defaulting to 1000 [ 208.462642][T10487] lo speed is unknown, defaulting to 1000 [ 208.486701][T10487] lo speed is unknown, defaulting to 1000 [ 208.495907][T10488] tipc: Resetting bearer [ 208.545554][T10483] tipc: Resetting bearer [ 208.548764][T10487] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 208.634120][T10483] tipc: Disabling bearer [ 208.651627][T10487] lo speed is unknown, defaulting to 1000 [ 208.668832][T10487] lo speed is unknown, defaulting to 1000 [ 208.717339][T10487] lo speed is unknown, defaulting to 1000 [ 208.725052][T10487] lo speed is unknown, defaulting to 1000 [ 208.765102][T10487] lo speed is unknown, defaulting to 1000 [ 208.781404][T10487] lo speed is unknown, defaulting to 1000 [ 208.789434][T10487] lo speed is unknown, defaulting to 1000 [ 208.809835][T10487] lo speed is unknown, defaulting to 1000 [ 208.829375][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 208.847283][T10487] lo speed is unknown, defaulting to 1000 [ 209.686985][ T6727] IPVS: starting estimator thread 0... [ 209.692855][T10551] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1112'. [ 209.775455][T10553] IPVS: using max 24 ests per chain, 57600 per kthread [ 209.875020][T10558] syzkaller1: entered promiscuous mode [ 209.885199][T10558] syzkaller1: entered allmulticast mode [ 209.894711][T10558] dummy0: mtu less than device minimum [ 210.372937][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1118'. [ 210.586131][T10579] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 210.731851][T10579] tipc: Enabling of bearer rejected, failed to enable media [ 211.007564][T10596] macvtap1: entered allmulticast mode [ 211.019826][T10596] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 211.089289][T10596] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 211.686882][T10616] __nla_validate_parse: 1 callbacks suppressed [ 211.686900][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1129'. [ 211.833222][T10627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1132'. [ 211.893120][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 211.947002][T10630] lo speed is unknown, defaulting to 1000 [ 211.970217][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 211.976479][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 211.976507][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 212.882083][T10662] lo speed is unknown, defaulting to 1000 [ 212.900382][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 213.030601][T10682] wg1: left promiscuous mode [ 213.038132][T10682] veth0_to_team: left promiscuous mode [ 213.054295][T10682] gtp1: left promiscuous mode [ 213.322787][T10692] af_packet: tpacket_rcv: packet too big, clamped from 228 to 4294967272. macoff=96 [ 213.334193][T10692] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1150'. [ 213.672453][T10698] validate_nla: 1 callbacks suppressed [ 213.672474][T10698] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 213.714111][T10698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.746373][T10698] bond1: (slave gretap1): making interface the new active one [ 213.756169][T10698] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 213.992968][T10712] tipc: Enabled bearer , priority 0 [ 214.044727][T10712] syzkaller0: entered promiscuous mode [ 214.050512][T10712] syzkaller0: entered allmulticast mode [ 215.228712][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.237827][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.247810][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.256517][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.264535][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.949793][T10709] tipc: Resetting bearer [ 217.320390][ T5837] Bluetooth: hci5: command tx timeout [ 218.136326][T10709] tipc: Disabling bearer [ 218.165146][T10717] lo speed is unknown, defaulting to 1000 [ 218.275702][T10727] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1161'. [ 218.560040][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'. [ 218.612946][T10750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1166'. [ 218.648804][T10717] chnl_net:caif_netlink_parms(): no params data found [ 218.933608][T10758] lo speed is unknown, defaulting to 1000 [ 218.979622][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.988387][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.997329][T10717] bridge_slave_0: entered allmulticast mode [ 219.007962][T10717] bridge_slave_0: entered promiscuous mode [ 219.018030][T10717] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.033700][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.041706][T10717] bridge_slave_1: entered allmulticast mode [ 219.050380][T10717] bridge_slave_1: entered promiscuous mode [ 219.147844][T10717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.188787][T10717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.264655][T10717] team0: Port device team_slave_0 added [ 219.281524][T10717] team0: Port device team_slave_1 added [ 219.341972][T10717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.349288][T10717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.377000][T10717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.391010][T10717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.398207][ T5837] Bluetooth: hci5: command tx timeout [ 219.404528][T10717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.430754][T10717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.527773][T10717] hsr_slave_0: entered promiscuous mode [ 219.534875][T10717] hsr_slave_1: entered promiscuous mode [ 219.541696][T10717] debugfs: 'hsr0' already exists in 'hsr' [ 219.548177][T10717] Cannot create hsr debugfs directory [ 219.993198][T10717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.026949][T10793] team0: Port device team_slave_0 removed [ 220.036319][T10793] team0: Port device team_slave_1 removed [ 220.042723][T10793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.059810][T10793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.080344][T10793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.097513][T10717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.112896][T10717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.157775][T10717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.341200][T10717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.390074][T10717] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.410826][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.418082][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.460316][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.467579][ T9635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.476004][ T52] Bluetooth: hci5: command tx timeout [ 221.632956][T10717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.812125][T10837] syzkaller1: entered promiscuous mode [ 221.819420][T10837] syzkaller1: entered allmulticast mode [ 221.837135][T10837] netlink: 'syz.2.1187': attribute type 4 has an invalid length. [ 221.844931][T10837] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1187'. [ 222.066314][T10858] netlink: 'syz.2.1191': attribute type 12 has an invalid length. [ 222.075951][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 222.087065][T10858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.099153][T10858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1191'. [ 222.210411][T10717] veth0_vlan: entered promiscuous mode [ 222.234838][T10717] veth1_vlan: entered promiscuous mode [ 222.314007][T10717] veth0_macvtap: entered promiscuous mode [ 222.361954][T10717] veth1_macvtap: entered promiscuous mode [ 222.443304][T10874] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1196'. [ 222.457910][T10717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.473750][T10874] 0ªX¹¦À: renamed from caif0 [ 222.494998][T10874] 0ªX¹¦À: entered allmulticast mode [ 222.502278][T10874] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 222.543424][T10717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.589088][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.605568][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.614360][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.668562][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.804993][T10891] bridge4: entered promiscuous mode [ 222.818895][T10891] bridge4: entered allmulticast mode [ 222.866414][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.896294][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.966529][ T7265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.001492][ T7265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.087524][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 223.188212][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1207'. [ 223.274350][T10918] 8021q: VLANs not supported on nlmon0 [ 223.302657][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 223.315026][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 223.565814][ T5837] Bluetooth: hci5: command tx timeout [ 223.589491][T10930] Bluetooth: MGMT ver 1.23 [ 223.611209][T10930] netlink: 'syz.4.1212': attribute type 1 has an invalid length. [ 223.729043][T10936] bond6: (slave bridge8): making interface the new active one [ 223.743704][T10936] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 223.762592][T10932] lo speed is unknown, defaulting to 1000 [ 223.959610][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 223.992944][T10945] netlink: 'syz.2.1216': attribute type 33 has an invalid length. [ 224.001542][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 224.015013][T10945] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1216'. [ 224.076019][T10945] `: renamed from team0 (while UP) [ 224.313053][T10960] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1220'. [ 224.328704][T10961] ip6t_rpfilter: unknown options [ 224.400987][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 224.454529][T10970] ip6t_rpfilter: unknown options [ 224.531151][T10973] netlink: 'syz.3.1223': attribute type 16 has an invalid length. [ 224.542033][T10973] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1223'. [ 224.971539][T10995] lo speed is unknown, defaulting to 1000 [ 225.231615][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 225.254455][T11005] syz_tun: entered promiscuous mode [ 225.261017][T11005] macsec1: entered promiscuous mode [ 225.267112][T11005] macsec1: entered allmulticast mode [ 225.272455][T11005] syz_tun: entered allmulticast mode [ 225.339308][T11007] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1232'. [ 225.419332][T11009] ªªªªª: renamed from hsr0 (while UP) [ 225.894503][T11038] lo speed is unknown, defaulting to 1000 [ 226.686408][T11065] vlan2: entered promiscuous mode [ 226.691625][T11065] geneve1: entered promiscuous mode [ 226.697877][T11065] vlan2: entered allmulticast mode [ 226.703503][T11065] geneve1: entered allmulticast mode [ 227.108701][T11089] netlink: 'syz.3.1256': attribute type 13 has an invalid length. [ 227.117197][T11089] netlink: 'syz.3.1256': attribute type 17 has an invalid length. [ 227.164909][T11089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.556258][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 227.958150][T11099] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 227.978260][T11099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.026097][T11105] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 228.122872][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.132748][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.143167][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.156912][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.171377][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.229471][T11107] lo speed is unknown, defaulting to 1000 [ 228.281288][T11112] syzkaller0: entered promiscuous mode [ 228.289547][T11112] syzkaller0: entered allmulticast mode [ 228.528118][T11117] lo speed is unknown, defaulting to 1000 [ 228.557821][T11116] lo speed is unknown, defaulting to 1000 [ 228.695959][T11126] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 228.707413][T11126] bond0: (slave gre0): Error -95 calling set_mac_address [ 228.718826][T11126] netlink: 'syz.3.1268': attribute type 39 has an invalid length. [ 228.869457][T11129] tipc: Enabled bearer , priority 0 [ 228.888119][T11130] lo speed is unknown, defaulting to 1000 [ 228.917860][T11107] chnl_net:caif_netlink_parms(): no params data found [ 228.930505][T11129] syzkaller0: entered promiscuous mode [ 228.936607][T11129] syzkaller0: entered allmulticast mode [ 229.014036][T11129] tipc: Resetting bearer [ 229.041977][T11127] tipc: Resetting bearer [ 229.058560][T11127] tipc: Disabling bearer [ 229.134805][T11107] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.144635][T11107] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.152729][T11107] bridge_slave_0: entered allmulticast mode [ 229.161602][T11107] bridge_slave_0: entered promiscuous mode [ 229.177225][T11107] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.184871][T11107] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.193801][T11107] bridge_slave_1: entered allmulticast mode [ 229.203095][T11107] bridge_slave_1: entered promiscuous mode [ 229.274967][T11107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.292358][T11107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.319088][T11144] __nla_validate_parse: 5 callbacks suppressed [ 229.319108][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1272'. [ 229.364955][T11107] team0: Port device team_slave_0 added [ 229.387159][T11107] team0: Port device team_slave_1 added [ 229.446599][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 229.480603][T11107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.488989][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.515872][T11107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.529180][T11107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.529226][T11152] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 229.538292][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.548652][T11152] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1274'. [ 229.571902][T11107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.599667][T11148] bond7: entered promiscuous mode [ 229.605137][T11148] macvlan3: entered promiscuous mode [ 229.611031][T11148] macvlan3: entered allmulticast mode [ 229.616700][T11148] bond7: entered allmulticast mode [ 229.622388][T11148] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 229.678688][T11148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.706778][T11107] hsr_slave_0: entered promiscuous mode [ 229.713771][T11107] hsr_slave_1: entered promiscuous mode [ 229.723868][T11107] debugfs: 'hsr0' already exists in 'hsr' [ 229.730089][T11107] Cannot create hsr debugfs directory [ 230.115842][T11107] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 230.139353][T11107] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 230.154481][T11107] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 230.174426][T11107] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 230.196914][ T52] Bluetooth: hci6: command tx timeout [ 230.401854][T11107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.439119][T11107] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.462972][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.470431][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.707739][ T9633] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.714996][ T9633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.080542][T11107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.624559][T11107] veth0_vlan: entered promiscuous mode [ 231.643799][T11107] veth1_vlan: entered promiscuous mode [ 231.692385][T11107] veth0_macvtap: entered promiscuous mode [ 231.706994][T11107] veth1_macvtap: entered promiscuous mode [ 231.746960][T11107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.758878][T11200] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1284'. [ 231.782059][T11107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.802454][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.812002][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.831574][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.842048][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.949066][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.967618][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.987229][ T7265] tipc: Subscription rejected, illegal request [ 232.011369][T11206] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1285'. [ 232.042732][ T9633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.052813][ T9633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.231890][T11210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.242142][T11214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.278267][ T52] Bluetooth: hci6: command tx timeout [ 232.358498][T11223] netlink: 'syz.6.1288': attribute type 4 has an invalid length. [ 232.367209][T11223] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1288'. [ 232.388490][T11223] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 232.507098][T11226] pim6reg1: entered promiscuous mode [ 232.513401][T11226] pim6reg1: entered allmulticast mode [ 232.557005][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'. [ 232.828622][T11240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1294'. [ 232.840588][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1295'. [ 232.853204][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1295'. [ 233.380757][T11262] debugfs: 'netdev:nicvf0' already exists in 'phy10' [ 233.682711][T11279] xt_connbytes: Forcing CT accounting to be enabled [ 233.716848][T11279] x_tables: ip6_tables: CT.2 target: invalid size 72 (kernel) != (user) 0 [ 233.817943][T11281] syzkaller0: entered promiscuous mode [ 233.831405][T11281] syzkaller0: entered allmulticast mode [ 234.041495][T11285] pim6reg1: entered promiscuous mode [ 234.047883][T11285] pim6reg1: entered allmulticast mode [ 234.181495][T11290] bond5: option lacp_active: invalid value (8) [ 234.199494][T11290] bond5 (unregistering): Released all slaves [ 234.359893][ T5837] Bluetooth: hci6: command tx timeout [ 234.523742][T11310] __nla_validate_parse: 5 callbacks suppressed [ 234.523762][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 235.551503][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1322'. [ 235.582555][T11349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1322'. [ 235.849088][T11359] nbd: must specify at least one socket [ 236.436201][ T5837] Bluetooth: hci6: command tx timeout [ 236.590168][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 236.624536][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1334'. [ 236.764218][T11402] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1337'. [ 237.960105][T11416] lo speed is unknown, defaulting to 1000 [ 237.968938][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'. [ 237.997263][T11421] netlink: 'syz.4.1343': attribute type 8 has an invalid length. [ 238.115835][T11421] lo speed is unknown, defaulting to 1000 [ 238.494473][T11445] netlink: 'syz.4.1347': attribute type 1 has an invalid length. [ 239.058710][T11453] Cannot find add_set index 2 as target [ 239.341938][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.356318][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.364855][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.374211][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.383863][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.462635][T11456] lo speed is unknown, defaulting to 1000 [ 239.664795][T11469] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1356'. [ 239.711337][T11456] chnl_net:caif_netlink_parms(): no params data found [ 239.902681][T11456] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.911809][T11456] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.920475][T11456] bridge_slave_0: entered allmulticast mode [ 239.930627][T11456] bridge_slave_0: entered promiscuous mode [ 239.941718][T11456] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.949747][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.961360][T11456] bridge_slave_1: entered allmulticast mode [ 239.972296][T11456] bridge_slave_1: entered promiscuous mode [ 240.034294][T11456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.044032][T11485] macvlan0: entered promiscuous mode [ 240.053470][T11456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.105715][T11456] team0: Port device team_slave_0 added [ 240.114355][T11456] team0: Port device team_slave_1 added [ 240.178012][T11456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.192807][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.222214][T11456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.241911][T11456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.249478][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.278769][T11456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.439750][T11488] lo speed is unknown, defaulting to 1000 [ 240.481660][T11494] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 240.536541][T11456] hsr_slave_0: entered promiscuous mode [ 240.550648][T11456] hsr_slave_1: entered promiscuous mode [ 240.569208][T11456] debugfs: 'hsr0' already exists in 'hsr' [ 240.569633][T11498] netlink: 'syz.3.1364': attribute type 33 has an invalid length. [ 240.575111][T11456] Cannot create hsr debugfs directory [ 240.612999][T11498] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1364'. [ 240.699098][T11498] `: renamed from team0 (while UP) [ 241.162962][T11456] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 241.196793][T11519] lo speed is unknown, defaulting to 1000 [ 241.232528][T11456] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 241.245818][T11521] nbd3: detected capacity change from 0 to 63 [ 241.254489][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1369'. [ 241.254640][T11456] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 241.277687][T11524] block nbd3: NBD_DISCONNECT [ 241.285828][T11524] block nbd3: Disconnected due to user request. [ 241.297158][T11524] block nbd3: shutting down sockets [ 241.433547][T11521] bond5: entered promiscuous mode [ 241.441004][T11521] bond5: entered allmulticast mode [ 241.447868][T11521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.480352][ T5837] Bluetooth: hci7: command tx timeout [ 241.494982][T11456] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 241.513568][T11528] tipc: Started in network mode [ 241.520225][T11528] tipc: Node identity 4, cluster identity 4711 [ 241.527313][T11528] tipc: Node number set to 4 [ 241.622005][T11540] lo speed is unknown, defaulting to 1000 [ 241.724209][T11546] netlink: 'syz.3.1372': attribute type 2 has an invalid length. [ 241.778112][T11546] !: entered promiscuous mode [ 241.866672][T11456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.913018][T11456] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.938638][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.945931][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.992974][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.000314][ T9634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.217693][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 242.424261][T11561] syzkaller1: entered promiscuous mode [ 242.431869][T11561] syzkaller1: entered allmulticast mode [ 242.509905][T11456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.899783][T11574] batadv_slave_0: entered promiscuous mode [ 242.909584][T11574] batman_adv: batadv0: Adding interface: macvtap1 [ 242.923755][T11574] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.953166][T11574] batman_adv: batadv0: Interface activated: macvtap1 [ 242.963294][T11582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.045006][T11456] veth0_vlan: entered promiscuous mode [ 243.068553][T11456] veth1_vlan: entered promiscuous mode [ 243.163935][T11456] veth0_macvtap: entered promiscuous mode [ 243.164437][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 243.187454][T11456] veth1_macvtap: entered promiscuous mode [ 243.218696][T11456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.299713][T11456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.333729][ T9403] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.360386][ T9403] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.373025][ T9403] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.441156][T11586] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.458148][ T9403] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.555543][ T5837] Bluetooth: hci7: command tx timeout [ 243.709808][ T9634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.740093][ T9634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.753965][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1385'. [ 243.783776][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.794337][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.030485][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 244.048864][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 244.067919][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 244.079413][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 244.091498][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 244.171551][T11608] lo speed is unknown, defaulting to 1000 [ 244.183780][T11614] syzkaller0: entered promiscuous mode [ 244.191247][T11614] syzkaller0: entered allmulticast mode [ 244.581045][T11608] chnl_net:caif_netlink_parms(): no params data found [ 244.777787][T11608] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.785995][T11608] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.793656][T11608] bridge_slave_0: entered allmulticast mode [ 244.808704][T11608] bridge_slave_0: entered promiscuous mode [ 244.820252][T11608] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.831055][T11608] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.839293][T11608] bridge_slave_1: entered allmulticast mode [ 244.852384][T11608] bridge_slave_1: entered promiscuous mode [ 244.920502][T11633] dvmrp0: entered allmulticast mode [ 244.930634][T11608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.949538][T11608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.032261][T11608] team0: Port device team_slave_0 added [ 245.052316][T11608] team0: Port device team_slave_1 added [ 245.171544][T11608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.186171][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.223037][T11608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.238369][T11608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.249398][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.280258][T11608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.299803][T11644] netlink: 'syz.3.1394': attribute type 2 has an invalid length. [ 245.310213][T11644] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1394'. [ 245.447065][T11637] lo speed is unknown, defaulting to 1000 [ 245.460300][T11608] hsr_slave_0: entered promiscuous mode [ 245.470594][T11608] hsr_slave_1: entered promiscuous mode [ 245.479554][T11608] debugfs: 'hsr0' already exists in 'hsr' [ 245.486836][T11608] Cannot create hsr debugfs directory [ 245.636209][ T52] Bluetooth: hci7: command tx timeout [ 245.786623][T11656] netlink: 'syz.6.1397': attribute type 2 has an invalid length. [ 245.819654][T11656] : entered promiscuous mode [ 246.116337][ T52] Bluetooth: hci8: command tx timeout [ 246.158875][T11608] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 246.191514][T11608] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 246.232886][T11608] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 246.284231][T11608] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 246.521794][T11694] xt_hashlimit: size too large, truncated to 1048576 [ 246.643647][T11608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.701290][T11700] netlink: 'syz.3.1405': attribute type 3 has an invalid length. [ 246.713630][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 246.733707][T11608] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.752784][T11698] lo speed is unknown, defaulting to 1000 [ 246.776747][ T9633] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.783984][ T9633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.785086][T11702] netlink: 'syz.7.1406': attribute type 1 has an invalid length. [ 246.831666][T11700] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input5 [ 246.839951][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.849813][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.980860][T11706] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1405'. [ 247.102797][T11707] ip6gre1: entered promiscuous mode [ 247.340422][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1408'. [ 247.435914][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1410'. [ 247.456125][T11727] netem: unknown loss type 0 [ 247.461057][T11727] netem: change failed [ 247.731220][ T52] Bluetooth: hci7: command tx timeout [ 247.872778][T11608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.196976][ T52] Bluetooth: hci8: command tx timeout [ 248.252568][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 248.360011][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 248.420145][T11748] dvmrp0: entered allmulticast mode [ 248.668792][T11760] netlink: 'syz.7.1418': attribute type 21 has an invalid length. [ 248.682055][T11760] netlink: 'syz.7.1418': attribute type 22 has an invalid length. [ 248.699277][T11760] netlink: 'syz.7.1418': attribute type 23 has an invalid length. [ 248.713225][T11760] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1418'. [ 248.772988][T11608] veth0_vlan: entered promiscuous mode [ 248.829903][T11608] veth1_vlan: entered promiscuous mode [ 248.959282][T11608] veth0_macvtap: entered promiscuous mode [ 249.005864][T11608] veth1_macvtap: entered promiscuous mode [ 249.045856][T11775] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1422'. [ 249.058296][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1422'. [ 249.084261][T11608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.143644][T11608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.161285][ T9635] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.183409][ T9635] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.201734][ T9635] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.239750][ T9635] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.254529][T11781] xt_HMARK: spi-set and port-set can't be combined [ 249.485033][ T9634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.504756][ T9634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.578047][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.592735][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.860479][T11800] tipc: Failed to remove unknown binding: 66,1,1/0:2229841326/2229841328 [ 249.878686][T11800] tipc: Failed to remove unknown binding: 66,1,1/0:2229841326/2229841328 [ 249.901041][T11800] tipc: Failed to remove unknown binding: 66,1,1/0:2229841326/2229841328 [ 250.004186][T11807] netlink: 'syz.6.1433': attribute type 49 has an invalid length. [ 250.064327][T11810] bond1: invalid ARP target 0.0.0.0 specified for addition [ 250.072379][T11810] bond1: option arp_ip_target: invalid value (0) [ 250.081957][T11810] bond1 (unregistering): Released all slaves [ 250.139705][T11807] pim6reg1: entered promiscuous mode [ 250.157390][T11807] pim6reg1: entered allmulticast mode [ 250.276688][ T52] Bluetooth: hci8: command tx timeout [ 250.311400][T11818] bond8 (unregistering): Released all slaves [ 250.929682][T11847] netlink: 'syz.6.1442': attribute type 10 has an invalid length. [ 250.966971][T11847] veth1_vlan: entered allmulticast mode [ 250.998511][T11847] team0: Device veth1_vlan failed to register rx_handler [ 251.062849][T11851] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.074724][T11851] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.703202][T11875] __nla_validate_parse: 5 callbacks suppressed [ 251.703223][T11875] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1450'. [ 251.723280][T11875] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1450'. [ 251.767077][T11877] netlink: 'syz.8.1451': attribute type 8 has an invalid length. [ 252.356333][ T52] Bluetooth: hci8: command tx timeout [ 252.461356][T11886] "syz.7.1455" (11886) uses obsolete ecb(arc4) skcipher [ 252.688933][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1458'. [ 252.733033][T11906] lo speed is unknown, defaulting to 1000 [ 253.231898][T11929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.424965][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1464'. [ 253.786601][T11950] netlink: 87 bytes leftover after parsing attributes in process `syz.8.1469'. [ 253.823420][T11951] x_tables: duplicate underflow at hook 1 [ 253.879101][T11953] netlink: 'syz.7.1471': attribute type 1 has an invalid length. [ 253.922991][T11953] bond1: entered promiscuous mode [ 253.929912][T11953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.026436][T11959] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1471'. [ 254.042918][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 254.071666][T11959] bond1: entered allmulticast mode [ 254.092141][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1468'. [ 254.145858][T11961] netlink: 'syz.6.1468': attribute type 5 has an invalid length. [ 254.153652][T11961] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1468'. [ 254.198691][T11959] bond1: (slave bridge1): making interface the new active one [ 254.211807][T11959] bridge1: entered promiscuous mode [ 254.220306][T11959] bridge1: entered allmulticast mode [ 254.231188][T11959] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 254.304024][T11961] geneve2: entered promiscuous mode [ 254.310806][T11961] geneve2: entered allmulticast mode [ 254.340008][ T9409] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 254.365661][ T9409] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 254.393115][ T9409] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 254.402611][ T9409] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 254.436587][ T52] Bluetooth: hci8: command tx timeout [ 254.656464][T11979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.887912][T11983] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 255.023326][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1480'. [ 255.040143][T11985] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 255.219358][T11988] syz_tun: entered promiscuous mode [ 255.305176][T11993] bond8: Removing last arp target with arp_interval on [ 255.369946][T11993] bond8: entered promiscuous mode [ 255.406673][T11993] bond8: entered allmulticast mode [ 255.412710][T11993] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.057692][T12011] netlink: 'syz.7.1486': attribute type 12 has an invalid length. [ 256.071224][T12011] netlink: 'syz.7.1486': attribute type 14 has an invalid length. [ 256.408665][T12025] netlink: 'syz.3.1492': attribute type 1 has an invalid length. [ 256.477381][T12025] 8021q: adding VLAN 0 to HW filter on device bond9 [ 256.538771][T12030] 8021q: adding VLAN 0 to HW filter on device bond9 [ 256.546484][T12030] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 256.567043][T12030] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 256.656976][ T9409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.694501][ T9409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.241039][ T5837] Bluetooth: hci8: command 0x0405 tx timeout [ 257.367961][T12043] Cannot find set identified by id 1 to match [ 257.427008][T12045] __nla_validate_parse: 6 callbacks suppressed [ 257.427029][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1496'. [ 257.466991][T12045] netlink: 'syz.8.1496': attribute type 20 has an invalid length. [ 257.516564][ T9403] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.529025][ T5837] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 257.543071][ T5837] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 257.556964][ T5837] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 257.567325][ T9633] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.580310][ T5837] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 257.590199][ T5837] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 257.628066][ T9633] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.696410][ T9633] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.707120][T12041] lo speed is unknown, defaulting to 1000 [ 257.756826][T12051] netlink: 'syz.3.1498': attribute type 4 has an invalid length. [ 257.784180][T12046] lo speed is unknown, defaulting to 1000 [ 257.819462][T12051] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1498'. [ 258.301632][T12064] nftables ruleset with unbound set [ 258.351248][T12067] netlink: 'syz.8.1503': attribute type 1 has an invalid length. [ 258.371079][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1503'. [ 258.471188][T12073] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1500'. [ 258.482231][T12076] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 258.513125][T12081] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 258.532657][T12081] macsec1: entered promiscuous mode [ 258.539027][T12081] macsec1: entered allmulticast mode [ 258.544969][T12081] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 258.556610][T12080] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1505'. [ 258.574621][T12046] chnl_net:caif_netlink_parms(): no params data found [ 258.607944][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1506'. [ 258.710576][T12090] netlink: 'syz.6.1507': attribute type 11 has an invalid length. [ 259.002664][T12046] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.015972][T12046] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.023309][T12046] bridge_slave_0: entered allmulticast mode [ 259.031695][T12046] bridge_slave_0: entered promiscuous mode [ 259.043124][T12046] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.054874][T12046] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.077867][T12108] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 259.115087][T12046] bridge_slave_1: entered allmulticast mode [ 259.137888][T12046] bridge_slave_1: entered promiscuous mode [ 259.412447][T12046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.458978][T12046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.604435][T12046] team0: Port device team_slave_0 added [ 259.629604][T12046] team0: Port device team_slave_1 added [ 259.636503][ T52] Bluetooth: hci9: command tx timeout [ 259.820122][T12046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.852884][T12046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.915132][T12046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.946818][T12046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.954625][T12046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.000652][T12046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.054494][T12137] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 260.264709][T12046] hsr_slave_0: entered promiscuous mode [ 260.318102][T12046] hsr_slave_1: entered promiscuous mode [ 260.327354][T12046] debugfs: 'hsr0' already exists in 'hsr' [ 260.333495][T12046] Cannot create hsr debugfs directory [ 260.694357][T12167] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1526'. [ 260.823748][T12164] lo speed is unknown, defaulting to 1000 [ 260.936579][T12176] netlink: 'syz.6.1527': attribute type 11 has an invalid length. [ 260.944985][T12176] netlink: 'syz.6.1527': attribute type 11 has an invalid length. [ 260.953864][T12176] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1527'. [ 261.094435][T12183] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1529'. [ 261.520116][ T6729] IPVS: starting estimator thread 0... [ 261.616385][T12202] IPVS: using max 25 ests per chain, 60000 per kthread [ 261.661151][T12173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.719500][ T5837] Bluetooth: hci9: command tx timeout [ 261.764329][T12046] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 261.812372][T12046] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 261.871235][T12207] bond1: option arp_validate: invalid value (18446744073491447809) [ 261.888703][T12207] bond1 (unregistering): Released all slaves [ 261.927592][T12046] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 261.973565][T12046] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 262.000746][T12217] syzkaller1: entered promiscuous mode [ 262.006239][T12219] netlink: 'syz.6.1536': attribute type 13 has an invalid length. [ 262.019201][T12219] netlink: 'syz.6.1536': attribute type 17 has an invalid length. [ 262.019559][T12217] syzkaller1: entered allmulticast mode [ 262.109674][T12219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.288409][T12219] lo speed is unknown, defaulting to 1000 [ 262.429697][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1538'. [ 262.641011][T12046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.683312][T12046] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.719872][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.727183][ T9635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.773074][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.780510][ T9635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.791715][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1541'. [ 262.803416][T12245] openvswitch: netlink: Flow actions attr not present in new flow. [ 262.874279][T12245] lo speed is unknown, defaulting to 1000 [ 263.457445][T12046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.679942][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1543'. [ 263.796430][ T52] Bluetooth: hci9: command tx timeout [ 264.099924][T12046] veth0_vlan: entered promiscuous mode [ 264.125446][T12046] veth1_vlan: entered promiscuous mode [ 264.248673][T12046] veth0_macvtap: entered promiscuous mode [ 264.284718][T12282] netlink: 'syz.8.1547': attribute type 9 has an invalid length. [ 264.288490][T12046] veth1_macvtap: entered promiscuous mode [ 264.296338][T12282] netlink: 'syz.8.1547': attribute type 11 has an invalid length. [ 264.346172][T12282] netlink: 'syz.8.1547': attribute type 12 has an invalid length. [ 264.353667][T12046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.354049][T12282] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.1547'. [ 264.389855][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1547'. [ 264.403664][T12046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.451181][ T9409] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.474209][ T9409] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.513050][T12292] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1549'. [ 264.532359][ T9409] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.566010][ T9409] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.570670][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1550'. [ 264.786298][ T9403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.801792][ T9403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.859947][ T9634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.870300][ T9634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.898717][T12311] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1554'. [ 264.907834][T12313] netlink: 'syz.8.1555': attribute type 1 has an invalid length. [ 264.919888][T12311] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1554'. [ 264.948465][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1554'. [ 265.013368][T12315] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 265.027770][T12315] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 265.112512][T12313] bond1: (slave gretap1): making interface the new active one [ 265.124288][T12313] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 265.144503][T12315] macvlan2: entered promiscuous mode [ 265.150523][T12315] macvlan2: entered allmulticast mode [ 265.158411][T12315] bond1: entered promiscuous mode [ 265.163506][T12315] gretap1: entered promiscuous mode [ 265.170983][T12315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.190693][T12315] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 265.209815][T12315] bond1: left promiscuous mode [ 265.216694][T12315] gretap1: left promiscuous mode [ 265.400841][T12320] nbd: couldn't find device at index 536870912 [ 265.574091][T12326] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1557'. [ 265.751345][T12334] bond0: Error: Cannot enslave bond to itself. [ 265.836544][T12335] bond0: Error: Cannot enslave bond to itself. [ 265.886461][ T52] Bluetooth: hci9: command tx timeout [ 266.044652][T12341] netlink: 'syz.8.1557': attribute type 2 has an invalid length. [ 266.264151][T12348] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 266.311796][T12371] hsr0: entered promiscuous mode [ 266.319073][T12347] delete_channel: no stack [ 266.324122][T12371] hsr0: entered allmulticast mode [ 266.337678][T12371] hsr_slave_0: entered allmulticast mode [ 266.357964][T12371] hsr_slave_1: entered allmulticast mode [ 266.856659][T12382] netlink: 'syz.9.1568': attribute type 11 has an invalid length. [ 267.040658][T12392] netlink: 'syz.6.1571': attribute type 1 has an invalid length. [ 267.074097][T12392] netlink: 'syz.6.1571': attribute type 1 has an invalid length. [ 267.108310][T12392] netlink: 'syz.6.1571': attribute type 1 has an invalid length. [ 267.132752][T12392] netlink: 'syz.6.1571': attribute type 1 has an invalid length. [ 267.143843][T12392] netlink: 'syz.6.1571': attribute type 2 has an invalid length. [ 267.161708][T12392] netlink: 'syz.6.1571': attribute type 1 has an invalid length. [ 267.172981][T12392] netlink: 'syz.6.1571': attribute type 1 has an invalid length. [ 267.315914][T12399] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input6 [ 267.398798][T12398] lo speed is unknown, defaulting to 1000 [ 267.878051][T12415] __nla_validate_parse: 1 callbacks suppressed [ 267.878077][T12415] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1574'. [ 267.939906][T12410] lo speed is unknown, defaulting to 1000 [ 268.479354][T12417] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.487409][T12417] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.181512][T12417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.204578][T12417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.664601][T12363] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.693496][T12363] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.712315][T12363] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.722543][T12363] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.735152][T12440] x_tables: duplicate underflow at hook 2 [ 269.755844][T12363] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.764792][T12363] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.776577][T12363] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.788986][T12363] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.902386][T12444] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1584'. [ 269.912932][T12442] lo speed is unknown, defaulting to 1000 [ 269.924830][T12445] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1584'. [ 270.154752][T12453] netlink: 'syz.7.1586': attribute type 30 has an invalid length. [ 270.593712][T12468] lo speed is unknown, defaulting to 1000 [ 270.740689][T12474] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1593'. [ 270.752516][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1593'. [ 270.823712][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1594'. [ 270.835017][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1594'. [ 271.119773][T12487] bridge0: port 3(syz_tun) entered blocking state [ 271.129893][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1597'. [ 271.140266][T12487] bridge0: port 3(syz_tun) entered disabled state [ 271.147793][T12487] syz_tun: entered allmulticast mode [ 271.156828][T12487] syz_tun: entered promiscuous mode [ 271.814163][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1603'. [ 272.014062][T12519] lo speed is unknown, defaulting to 1000 [ 272.166422][T12525] lo speed is unknown, defaulting to 1000 [ 272.192157][T12516] netlink: 'syz.7.1604': attribute type 10 has an invalid length. [ 272.201439][T12516] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1604'. [ 272.231666][T12516] batadv0: entered promiscuous mode [ 272.237690][T12516] batadv0: entered allmulticast mode [ 272.244214][T12516] bridge0: port 3(batadv0) entered blocking state [ 272.254049][T12516] bridge0: port 3(batadv0) entered disabled state [ 272.267234][T12516] bridge0: port 3(batadv0) entered blocking state [ 272.273898][T12516] bridge0: port 3(batadv0) entered forwarding state [ 272.539696][T12363] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 272.549939][T12363] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 272.831210][T12541] netlink: 'syz.7.1611': attribute type 6 has an invalid length. [ 273.722020][T12573] __nla_validate_parse: 1 callbacks suppressed [ 273.722043][T12573] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1618'. [ 273.742715][T12573] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1618'. [ 273.760750][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1618'. [ 273.770389][T12573] tipc: Enabling of bearer rejected, failed to enable media [ 274.069572][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1622'. [ 274.658162][T12607] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1628'. [ 274.670455][T12607] 8021q: VLANs not supported on ipvlan1 [ 274.793794][ T6716] IPVS: starting estimator thread 0... [ 274.836658][T12613] lo speed is unknown, defaulting to 1000 [ 274.907128][T12617] IPVS: using max 25 ests per chain, 60000 per kthread [ 274.933620][T12622] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1632'. [ 275.280047][T12619] lo speed is unknown, defaulting to 1000 [ 275.289963][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1630'. [ 275.348260][T12635] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1636'. [ 275.669690][T12619] netlink: 'syz.9.1630': attribute type 1 has an invalid length. [ 275.689785][T12619] netlink: 'syz.9.1630': attribute type 1 has an invalid length. [ 275.747792][ T5837] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 275.758022][ T5837] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 275.767746][ T5837] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 275.781025][ T5837] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 275.790327][ T5837] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 275.849338][T12641] lo speed is unknown, defaulting to 1000 [ 276.123210][T12641] chnl_net:caif_netlink_parms(): no params data found [ 276.216576][T12652] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1639'. [ 276.269850][T12652] netlink: 'syz.9.1639': attribute type 21 has an invalid length. [ 276.281109][T12652] netlink: 'syz.9.1639': attribute type 22 has an invalid length. [ 276.293084][T12652] netlink: 'syz.9.1639': attribute type 23 has an invalid length. [ 276.303344][T12652] netlink: 'syz.9.1639': attribute type 25 has an invalid length. [ 276.312317][T12652] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1639'. [ 276.394980][T12641] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.404947][T12641] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.417051][T12641] bridge_slave_0: entered allmulticast mode [ 276.427584][T12641] bridge_slave_0: entered promiscuous mode [ 276.442889][T12641] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.454260][T12641] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.462260][T12641] bridge_slave_1: entered allmulticast mode [ 276.470844][T12641] bridge_slave_1: entered promiscuous mode [ 276.554399][T12641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.599180][T12641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.674421][T12641] team0: Port device team_slave_0 added [ 276.687339][T12641] team0: Port device team_slave_1 added [ 276.777920][T12641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.784921][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.815154][T12641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.830152][T12641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.840237][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.869605][T12641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.029024][T12641] hsr_slave_0: entered promiscuous mode [ 277.040869][T12641] hsr_slave_1: entered promiscuous mode [ 277.051251][T12641] debugfs: 'hsr0' already exists in 'hsr' [ 277.058744][T12641] Cannot create hsr debugfs directory [ 277.270639][T12677] netlink: 'syz.7.1646': attribute type 11 has an invalid length. [ 277.459802][T12686] batadv1: entered promiscuous mode [ 277.750008][T12686] lo speed is unknown, defaulting to 1000 [ 277.876687][ T5837] Bluetooth: hci10: command tx timeout [ 278.110935][T12641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 278.144266][T12641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 278.171976][T12641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 278.203612][T12641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.469139][T12641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.521420][T12641] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.553721][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.561108][T12363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.594712][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.602084][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.909036][T12729] netlink: 'syz.7.1655': attribute type 3 has an invalid length. [ 278.926332][T12729] __nla_validate_parse: 3 callbacks suppressed [ 278.926353][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1655'. [ 279.152981][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1659'. [ 279.171849][T12641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.210656][T12740] hsr0: left promiscuous mode [ 279.218207][T12740] hsr0: left allmulticast mode [ 279.223127][T12740] hsr_slave_0: left allmulticast mode [ 279.233637][T12740] hsr_slave_1: left allmulticast mode [ 279.297884][T12641] veth0_vlan: entered promiscuous mode [ 279.312967][T12641] veth1_vlan: entered promiscuous mode [ 279.361423][T12641] veth0_macvtap: entered promiscuous mode [ 279.392319][T12641] veth1_macvtap: entered promiscuous mode [ 279.463886][T12753] bond1: Unable to set up delay as MII monitoring is disabled [ 279.476926][T12753] bond1 (unregistering): Released all slaves [ 279.522429][T12641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.552443][T12641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.579337][ T9413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.599263][ T9413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.616915][ T9413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.654369][ T2991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.738430][T12761] Bluetooth: MGMT ver 1.23 [ 279.857889][ T9635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.883129][ T9635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.902355][T12760] lo speed is unknown, defaulting to 1000 [ 279.958327][ T5837] Bluetooth: hci10: command tx timeout [ 279.982156][T12367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.012797][T12367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.213920][T12767] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.853164][T12767] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.118983][T12767] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.257303][T12767] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.355073][ T2991] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.387819][T12363] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.414337][ T9414] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.440963][T12363] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.532157][T12797] netlink: 'syz.7.1671': attribute type 6 has an invalid length. [ 281.588590][T12799] lo speed is unknown, defaulting to 1000 [ 281.609990][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1670'. [ 281.625397][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1670'. [ 281.634874][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1670'. [ 282.035835][ T5837] Bluetooth: hci10: command tx timeout [ 282.568232][T12840] netlink: 71 bytes leftover after parsing attributes in process `syz.7.1682'. [ 282.661613][T12845] netlink: 'syz.7.1683': attribute type 13 has an invalid length. [ 282.871739][T12845] bridge0: port 3(batadv0) entered disabled state [ 282.878758][T12845] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.886895][T12845] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.206415][T12845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.257181][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 283.258936][T12845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.270179][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 283.283489][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 283.296483][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 283.306965][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 283.606552][T12367] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.627527][T12367] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.641100][T12367] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.679411][T12367] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.690446][T12863] netlink: 'syz.7.1687': attribute type 4 has an invalid length. [ 283.711492][T12859] lo speed is unknown, defaulting to 1000 [ 283.822900][T12864] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1687'. [ 284.113474][T12859] chnl_net:caif_netlink_parms(): no params data found [ 284.122595][ T52] Bluetooth: hci10: command tx timeout [ 284.339477][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1696'. [ 284.429361][T12859] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.439526][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.448311][T12859] bridge_slave_0: entered allmulticast mode [ 284.457696][T12859] bridge_slave_0: entered promiscuous mode [ 284.468526][T12859] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.477265][T12859] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.484640][T12859] bridge_slave_1: entered allmulticast mode [ 284.493722][T12859] bridge_slave_1: entered promiscuous mode [ 284.543544][T12894] syzkaller0: entered promiscuous mode [ 284.549528][T12894] syzkaller0: entered allmulticast mode [ 284.579799][T12906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1698'. [ 284.643391][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1698'. [ 285.408776][ T5837] Bluetooth: hci11: command tx timeout [ 286.358202][T12859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.374088][T12859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.474299][T12859] team0: Port device team_slave_0 added [ 286.502926][T12859] team0: Port device team_slave_1 added [ 286.510709][T12910] tipc: Started in network mode [ 286.517507][T12910] tipc: Node identity 1a8b020c1fe1, cluster identity 4711 [ 286.525164][T12910] tipc: Enabled bearer , priority 0 [ 286.534324][T12910] syzkaller0: entered promiscuous mode [ 286.541390][T12910] syzkaller0: entered allmulticast mode [ 286.628112][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1701'. [ 286.638787][T12859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.647078][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.675948][T12859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.711069][T12914] tipc: Resetting bearer [ 286.720783][T12859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.728654][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.759985][T12859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.789258][T12909] tipc: Resetting bearer [ 286.842765][T12909] tipc: Disabling bearer [ 286.868418][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 286.879936][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'. [ 286.945973][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'. [ 287.073533][T12859] hsr_slave_0: entered promiscuous mode [ 287.087885][T12859] hsr_slave_1: entered promiscuous mode [ 287.094667][T12859] debugfs: 'hsr0' already exists in 'hsr' [ 287.125607][T12859] Cannot create hsr debugfs directory [ 287.371166][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1707'. [ 287.484590][ T5837] Bluetooth: hci11: command tx timeout [ 287.654946][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 287.672888][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 287.700052][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 287.712739][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 287.729108][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 288.039597][T12933] lo speed is unknown, defaulting to 1000 [ 288.064789][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1708'. [ 289.193919][T12933] chnl_net:caif_netlink_parms(): no params data found [ 289.264248][T12859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.298049][T12859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 289.400812][T12859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 289.477919][T12859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.556567][ T5837] Bluetooth: hci11: command tx timeout [ 289.752173][T12977] gtp0: entered promiscuous mode [ 289.761499][T12977] gtp0: entered allmulticast mode [ 289.778711][T12933] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.788373][T12933] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.796285][ T5837] Bluetooth: hci12: command tx timeout [ 289.810846][T12933] bridge_slave_0: entered allmulticast mode [ 289.830785][T12933] bridge_slave_0: entered promiscuous mode [ 289.854516][T12933] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.884332][T12933] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.903685][T12933] bridge_slave_1: entered allmulticast mode [ 289.924473][T12933] bridge_slave_1: entered promiscuous mode [ 290.181200][T12993] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1721'. [ 290.227795][T12933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.308071][T12933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.423728][T12996] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1722'. [ 290.434270][T12996] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1722'. [ 290.458570][T12999] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1722'. [ 290.461741][T12933] team0: Port device team_slave_0 added [ 290.483916][T12933] team0: Port device team_slave_1 added [ 290.507343][T12999] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1722'. [ 290.540244][T12996] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1722'. [ 290.698209][T12933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.716845][T12933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.784354][T12933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.811045][T12933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.818896][T12933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.846618][T12933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.027504][T12933] hsr_slave_0: entered promiscuous mode [ 291.034610][T12933] hsr_slave_1: entered promiscuous mode [ 291.044846][T12933] debugfs: 'hsr0' already exists in 'hsr' [ 291.052180][T12933] Cannot create hsr debugfs directory [ 291.209756][T12859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.304243][T13020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1728'. [ 291.314393][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1727'. [ 291.374676][T13024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1728'. [ 291.518477][T13025] batadv1: entered promiscuous mode [ 291.635974][ T5837] Bluetooth: hci11: command tx timeout [ 291.733214][T12859] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.755593][T13020] lo speed is unknown, defaulting to 1000 [ 291.866403][T12933] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.872848][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1730'. [ 291.886093][ T5837] Bluetooth: hci12: command tx timeout [ 291.903900][T13032] sctp: [Deprecated]: syz.9.1731 (pid 13032) Use of int in max_burst socket option. [ 291.903900][T13032] Use struct sctp_assoc_value instead [ 291.954588][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.962130][ T9635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.991218][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.998642][ T9635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.132128][T12933] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.234690][T13038] netlink: 'syz.9.1732': attribute type 83 has an invalid length. [ 292.272007][T12933] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.334968][T13048] netlink: 'syz.7.1735': attribute type 13 has an invalid length. [ 292.350760][T13048] netlink: 'syz.7.1735': attribute type 17 has an invalid length. [ 292.401390][T12933] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.568931][T13048] syz_tun: left promiscuous mode [ 292.611172][T13048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.621738][T13048] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.637514][T13048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.960220][T12933] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.991341][T12933] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.027748][T12933] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.081630][T12933] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 293.295003][T12859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.307552][T13076] tipc: Started in network mode [ 293.312493][T13076] tipc: Node identity 4ed236c6f6bb, cluster identity 4711 [ 293.322739][T13076] tipc: Enabled bearer , priority 0 [ 293.334307][T13079] syzkaller0: entered promiscuous mode [ 293.351170][T13078] netlink: 'syz.7.1742': attribute type 4 has an invalid length. [ 293.360476][T13079] syzkaller0: entered allmulticast mode [ 293.500599][T13075] tipc: Resetting bearer [ 293.543471][T13075] tipc: Disabling bearer [ 293.658812][T12933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.721426][T12859] veth0_vlan: entered promiscuous mode [ 293.734380][T12933] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.771838][T12859] veth1_vlan: entered promiscuous mode [ 293.825139][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.832539][ T9635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.880151][T13087] tipc: Enabled bearer , priority 0 [ 293.902848][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.910301][ T9635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.927832][T13087] syzkaller0: entered promiscuous mode [ 293.933373][T13087] syzkaller0: entered allmulticast mode [ 293.966813][ T5837] Bluetooth: hci12: command tx timeout [ 293.997627][T13087] tipc: Resetting bearer [ 294.010114][T12859] veth0_macvtap: entered promiscuous mode [ 294.028982][T13085] tipc: Resetting bearer [ 294.100583][T13085] tipc: Disabling bearer [ 294.209963][T12859] veth1_macvtap: entered promiscuous mode [ 294.390352][T12859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.467618][T12859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.554416][T13115] macvlan2: entered promiscuous mode [ 294.583291][T13122] netlink: 'syz.0.1749': attribute type 1 has an invalid length. [ 294.586612][ T9413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.635167][ T9413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.714004][ T9413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.736441][ T9413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.956863][ T9635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.964855][ T9635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.177786][T12364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.223425][T12933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.233114][T12364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.371080][ T9414] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 295.892689][T12933] veth0_vlan: entered promiscuous mode [ 295.939413][T12933] veth1_vlan: entered promiscuous mode [ 296.010294][T12933] veth0_macvtap: entered promiscuous mode [ 296.025164][T12933] veth1_macvtap: entered promiscuous mode [ 296.036176][ T5837] Bluetooth: hci12: command tx timeout [ 296.076333][T12933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.100075][T12933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.153728][T12367] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.213583][ T2991] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.267258][ T2991] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.290496][ T2991] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.384909][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.402332][T13179] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 296.412308][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.468240][T13179] Cannot find set identified by id 65534 to match [ 296.488337][T12367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.528654][T12367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.683438][T13193] __nla_validate_parse: 8 callbacks suppressed [ 296.683459][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1764'. [ 297.043880][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 297.056111][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 297.297760][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'. [ 297.429585][T13227] vlan2: entered promiscuous mode [ 297.434697][T13227] bond0: entered promiscuous mode [ 297.444000][T13227] bond_slave_0: entered promiscuous mode [ 297.480662][T13227] bond_slave_1: entered promiscuous mode [ 297.544042][T13242] xt_bpf: check failed: parse error [ 297.671531][T13239] bridge0: port 3(vlan2) entered blocking state [ 297.681403][T13239] bridge0: port 3(vlan2) entered disabled state [ 297.728929][T13239] vlan2: entered allmulticast mode [ 297.754839][T13239] bridge0: entered allmulticast mode [ 297.828197][T13239] vlan2: left allmulticast mode [ 297.833131][T13239] bridge0: left allmulticast mode [ 298.328334][T13273] lo speed is unknown, defaulting to 1000 [ 298.894484][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1786'. [ 299.464769][T13308] bridge5: entered promiscuous mode [ 299.503941][T13308] bridge5: entered allmulticast mode [ 299.730725][ T6717] IPVS: starting estimator thread 0... [ 299.848287][T13321] IPVS: using max 25 ests per chain, 60000 per kthread [ 299.886216][T13323] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1797'. [ 300.112543][T13337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.117445][ T52] Bluetooth: hci12: command 0x0405 tx timeout [ 300.228312][T13335] lo speed is unknown, defaulting to 1000 [ 300.243460][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1802'. [ 300.277680][T13346] @ÿ: renamed from veth0_vlan (while UP) [ 300.390505][T13348] netlink: 'syz.1.1803': attribute type 83 has an invalid length. [ 300.450461][T13350] netlink: 'syz.7.1804': attribute type 1 has an invalid length. [ 300.539446][T13350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.572790][T13364] openvswitch: netlink: Key type 93 is out of range max 32 [ 300.596547][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1804'. [ 300.639659][ T5839] IPVS: starting estimator thread 0... [ 300.703309][T13357] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 300.739775][T13357] bond2: (slave batadv1): making interface the new active one [ 300.759318][T13368] IPVS: using max 30 ests per chain, 72000 per kthread [ 300.779187][T13357] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 300.997766][T13367] bond2 (unregistering): (slave batadv1): Releasing active interface [ 301.018662][T13367] bond2 (unregistering): Released all slaves [ 301.133854][ T6716] IPVS: starting estimator thread 0... [ 301.232488][T13392] netlink: 'syz.9.1811': attribute type 12 has an invalid length. [ 301.238935][T13383] IPVS: using max 25 ests per chain, 60000 per kthread [ 301.523256][T13394] lo speed is unknown, defaulting to 1000 [ 301.644600][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1815'. [ 301.664874][T13407] netlink: 'syz.7.1817': attribute type 32 has an invalid length. [ 301.685083][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1817'. [ 301.832025][T13409] bond1: option arp_interval: invalid value (18446744073709551615) [ 301.856226][T13415] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1819'. [ 301.866037][T13409] bond1: option arp_interval: allowed values 0 - 2147483647 [ 301.880072][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1819'. [ 301.891222][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 301.896561][T13409] bond1 (unregistering): Released all slaves [ 302.112152][T13407] bond2: Setting coupled_control to off (0) [ 302.827173][T13442] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci12/hci12:200/input7 [ 303.083387][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1829'. [ 303.197347][T13464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.219429][T13464] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 303.249414][T13464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.281784][T13468] netlink: 'syz.5.1833': attribute type 1 has an invalid length. [ 303.314991][T13473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1831'. [ 303.336279][T13473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1831'. [ 303.449808][T13473] bond1: option primary_reselect: invalid value (255) [ 303.466889][T13473] bond1 (unregistering): Released all slaves [ 303.541742][T13485] pimreg: entered allmulticast mode [ 303.592439][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 303.604884][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1837'. [ 303.615169][T13487] netlink: 'syz.1.1837': attribute type 5 has an invalid length. [ 303.651321][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1836'. [ 303.666310][T13485] pimreg: left allmulticast mode [ 303.668690][T12367] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 303.793495][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1836'. [ 303.969451][T13496] netlink: 'syz.0.1839': attribute type 3 has an invalid length. [ 303.987292][T13496] netlink: 'syz.0.1839': attribute type 3 has an invalid length. [ 304.078894][T13496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.428958][T13526] sch_tbf: burst 43029 is lower than device ip6gre0 mtu (61406) ! [ 304.672951][T13538] netlink: 'syz.5.1850': attribute type 13 has an invalid length. [ 304.726837][T13538] netlink: 'syz.5.1850': attribute type 17 has an invalid length. [ 305.081201][T13546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.204398][T13547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.329592][T13526] ip6gre1: left promiscuous mode [ 305.342297][T13526] bond1: left promiscuous mode [ 305.360969][T13526] bridge1: left promiscuous mode [ 305.387420][T13526] macvlan2: left promiscuous mode [ 305.398061][T13526] bridge5: left promiscuous mode [ 305.550303][T13538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.659558][T13539] lo speed is unknown, defaulting to 1000 [ 306.439051][T13556] lo speed is unknown, defaulting to 1000 [ 307.062474][T13597] __nla_validate_parse: 7 callbacks suppressed [ 307.062492][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1863'. [ 307.081765][T13594] bridge_slave_0: left allmulticast mode [ 307.089517][T13594] bridge_slave_0: left promiscuous mode [ 307.100042][T13594] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.188535][T13594] bridge_slave_1: left allmulticast mode [ 307.213575][T13594] bridge_slave_1: left promiscuous mode [ 307.245954][T13594] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.616148][T13594] bond0: (slave bond_slave_0): Releasing backup interface [ 307.690859][T13594] bond0: (slave bond_slave_1): Releasing backup interface [ 307.760646][T13594] team0: Port device team_slave_0 removed [ 307.813199][T13594] team0: Port device team_slave_1 removed [ 307.822787][T13594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.837189][T13594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.850969][T13594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.859973][T13594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.873355][T13594] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 308.055628][T13628] tipc: Started in network mode [ 308.062424][T13628] tipc: Node identity a67cd193487c, cluster identity 4711 [ 308.071411][T13628] tipc: Enabled bearer , priority 0 [ 308.085152][T13628] syzkaller0: entered promiscuous mode [ 308.095020][T13628] syzkaller0: entered allmulticast mode [ 308.161528][T13628] tipc: Resetting bearer [ 308.365920][T13639] netlink: 260 bytes leftover after parsing attributes in process `syz.9.1875'. [ 308.504881][T13649] tipc: Enabling of bearer rejected, already enabled [ 308.542267][T13649] virt_wifi0: mtu less than device minimum [ 308.720340][T13659] nbd: must specify a device to reconfigure [ 308.754615][T13661] netlink: 'syz.1.1882': attribute type 2 has an invalid length. [ 308.840861][T13662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1882'. [ 309.063884][T13676] netlink: 'syz.0.1884': attribute type 32 has an invalid length. [ 309.169439][ T6724] tipc: Node number set to 3993031059 [ 309.231688][T13680] lo speed is unknown, defaulting to 1000 [ 309.467837][T13685] lo speed is unknown, defaulting to 1000 [ 309.767328][T13708] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 309.813100][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 309.844531][T13708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.858389][T13700] bond_slave_0: entered promiscuous mode [ 309.864457][T13700] bond_slave_1: entered promiscuous mode [ 309.879066][T13700] macvtap1: entered promiscuous mode [ 309.895852][T13700] bond0: entered promiscuous mode [ 309.901895][T13700] macvtap1: entered allmulticast mode [ 309.936292][T13700] bond0: entered allmulticast mode [ 309.941499][T13700] bond_slave_0: entered allmulticast mode [ 309.971205][T13700] bond_slave_1: entered allmulticast mode [ 309.984530][T13700] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 310.067191][T13716] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1899'. [ 310.220027][T13726] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1898'. [ 312.653229][T13750] delete_channel: no stack [ 312.994263][T13759] netlink: 'syz.0.1908': attribute type 12 has an invalid length. [ 313.067464][T13762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.263393][T13768] x_tables: unsorted entry at hook 1 [ 313.284128][T13773] tipc: Enabled bearer , priority 0 [ 313.292428][T13772] tipc: Enabling of bearer rejected, already enabled [ 313.393966][T13773] syzkaller0: entered promiscuous mode [ 313.403168][T13773] syzkaller0: entered allmulticast mode [ 313.418551][T13773] tipc: Resetting bearer [ 313.482142][T13774] tipc: Resetting bearer [ 313.698930][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 313.948064][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056e10800: rx timeout, send abort [ 314.371973][ T5914] tipc: Node number set to 3093903046 [ 314.454426][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056e12c00: rx timeout, send abort [ 314.463204][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056e10800: abort rx timeout. Force session deactivation [ 314.962956][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056e12c00: abort rx timeout. Force session deactivation [ 315.671440][T13774] tipc: Disabling bearer [ 316.071023][T13804] lo speed is unknown, defaulting to 1000 [ 316.088638][T13807] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1921'. [ 316.099309][T13807] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1921'. [ 316.137943][T13811] tipc: Enabling of bearer rejected, failed to enable media [ 316.432712][T13816] netlink: 'syz.1.1922': attribute type 10 has an invalid length. [ 316.495047][T13816] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1922'. [ 316.598455][T13816] bond0: entered promiscuous mode [ 316.623735][T13816] bond_slave_0: entered promiscuous mode [ 316.661978][T13816] bond_slave_1: entered promiscuous mode [ 316.712149][T13816] bridge0: port 3(bond0) entered blocking state [ 316.725863][T13816] bridge0: port 3(bond0) entered disabled state [ 316.749611][T13816] bond0: entered allmulticast mode [ 316.760854][T13816] bond_slave_0: entered allmulticast mode [ 316.767921][T13816] bond_slave_1: entered allmulticast mode [ 316.791044][T13816] bridge0: port 3(bond0) entered blocking state [ 316.797614][T13816] bridge0: port 3(bond0) entered forwarding state [ 316.981054][T13836] bond0: entered promiscuous mode [ 317.024808][T13836] batadv0: entered promiscuous mode [ 317.032540][T13836] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 317.051136][T13836] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 317.074417][T13836] bond0: left promiscuous mode [ 317.090212][T13836] batadv0: left promiscuous mode [ 317.296309][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1929'. [ 318.044871][T13862] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 318.256698][T13880] lo speed is unknown, defaulting to 1000 [ 319.185539][T13918] netlink: 'syz.7.1947': attribute type 4 has an invalid length. [ 319.187385][T13916] syzkaller1: entered promiscuous mode [ 319.201150][T13916] syzkaller1: entered allmulticast mode [ 319.207758][T13918] netlink: 'syz.7.1947': attribute type 1 has an invalid length. [ 319.332212][T13919] bond3: (slave geneve3): making interface the new active one [ 319.341367][T13919] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 319.403285][T13926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1950'. [ 319.484089][ T37] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 319.521670][ T37] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 319.531631][ T37] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 319.565118][ T37] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 320.218790][T13964] lo speed is unknown, defaulting to 1000 [ 320.264975][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 320.280088][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 320.290697][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 320.300354][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 320.310273][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 320.424587][T13974] lo speed is unknown, defaulting to 1000 [ 320.623573][T13984] netlink: 'syz.7.1964': attribute type 12 has an invalid length. [ 320.637579][T13984] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1964'. [ 320.752935][T13974] chnl_net:caif_netlink_parms(): no params data found [ 321.073952][T13974] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.090579][T13974] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.108061][T13974] bridge_slave_0: entered allmulticast mode [ 321.124692][T13974] bridge_slave_0: entered promiscuous mode [ 321.165381][T13974] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.172627][T13974] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.201387][T13974] bridge_slave_1: entered allmulticast mode [ 321.252689][T13974] bridge_slave_1: entered promiscuous mode [ 321.382175][T13974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.420155][T13974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.529013][T13974] team0: Port device team_slave_0 added [ 321.549847][T13974] team0: Port device team_slave_1 added [ 321.586202][T14027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1973'. [ 321.684364][T13974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.693897][T13974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.727147][T13974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.748523][T13974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.775808][T13974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.813936][T13974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.868589][T14032] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1975'. [ 322.214989][T13974] hsr_slave_0: entered promiscuous mode [ 322.240318][T14046] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1979'. [ 322.256963][T13974] hsr_slave_1: entered promiscuous mode [ 322.263738][T13974] debugfs: 'hsr0' already exists in 'hsr' [ 322.276712][T13974] Cannot create hsr debugfs directory [ 322.357548][ T52] Bluetooth: hci13: command tx timeout [ 322.663582][T14062] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.1984'. [ 323.260350][T14067] lo speed is unknown, defaulting to 1000 [ 323.639373][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1993'. [ 324.040123][T14099] netlink: 'syz.1.1995': attribute type 5 has an invalid length. [ 324.169451][T13974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 324.213420][T13974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 324.261707][T13974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.291074][T13974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.322005][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.360174][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.378484][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.422630][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.440601][ T52] Bluetooth: hci13: command tx timeout [ 324.464039][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.477425][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.496157][T14114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.510652][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.536808][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.549547][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.563300][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.579187][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.592673][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 324.630352][T14110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.913635][T13974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.952698][T14131] netlink: 'syz.9.2004': attribute type 1 has an invalid length. [ 325.030853][T13974] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.054962][T14131] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 325.071835][T14131] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 325.176683][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.183886][T12367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.270782][T14133] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 325.357375][T12367] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.364632][T12367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.410505][T14144] netlink: 'syz.7.2007': attribute type 1 has an invalid length. [ 325.502088][T14144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.558263][T14157] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 326.333641][T13974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.509998][T13974] veth0_vlan: entered promiscuous mode [ 326.521306][ T52] Bluetooth: hci13: command tx timeout [ 326.538877][T13974] veth1_vlan: entered promiscuous mode [ 326.602344][T13974] veth0_macvtap: entered promiscuous mode [ 326.642130][T13974] veth1_macvtap: entered promiscuous mode [ 326.766799][T13974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.821798][T13974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.871409][ T2991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.960563][ T2991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.986246][ T2991] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.037917][T12363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.138650][T14194] xt_TPROXY: Can be used only with -p tcp or -p udp [ 327.157096][T14196] xt_TPROXY: Can be used only with -p tcp or -p udp [ 327.266798][T12367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.274688][T12367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.403085][T12363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.437694][T12363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.708530][T14212] tap0: tun_chr_ioctl cmd 1074025681 [ 327.804416][T14232] tipc: Can't bind to reserved service type 0 [ 328.612908][ T52] Bluetooth: hci13: command tx timeout [ 328.793066][T14249] lo speed is unknown, defaulting to 1000 [ 328.993658][T14271] netlink: 'syz.1.2036': attribute type 15 has an invalid length. [ 329.118509][T14272] tipc: Enabling of bearer rejected, already enabled [ 329.227209][T14279] pimreg: tun_chr_ioctl cmd 2147767506 [ 330.027482][T14298] __nla_validate_parse: 11 callbacks suppressed [ 330.027509][T14298] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2043'. [ 330.124560][T14303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2045'. [ 330.372565][T14312] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 330.394711][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'. [ 330.553282][T14315] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2049'. [ 330.776581][T14322] erspan0: entered promiscuous mode [ 330.813757][T14322] bridge0: port 4(erspan0) entered blocking state [ 330.864356][T14322] bridge0: port 4(erspan0) entered disabled state [ 330.874255][T14322] erspan0: entered allmulticast mode [ 330.892534][T14327] erspan0: left allmulticast mode [ 330.901784][T14327] bridge0: port 4(erspan0) entered disabled state [ 331.221369][T14327] erspan0: left promiscuous mode [ 331.646969][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2059'. [ 331.829825][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2059'. [ 332.416945][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2066'. [ 332.443846][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2066'. [ 332.457392][T14382] netlink: 'syz.7.2067': attribute type 22 has an invalid length. [ 332.483173][T14380] netlink: 'syz.9.2066': attribute type 18 has an invalid length. [ 332.494392][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2067'. [ 332.606601][T14384] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2068'. [ 332.954850][T14388] lo speed is unknown, defaulting to 1000 [ 333.839577][T14423] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci13/hci13:200/input8 [ 333.970820][T14416] v: renamed from vlan0 [ 334.496976][T14430] IPVS: Scheduler module ip_vs_ not found [ 334.619845][T14435] netlink: 'syz.7.2080': attribute type 32 has an invalid length. [ 336.106705][T14264] Set syz1 is full, maxelem 65536 reached [ 336.368371][T14451] __nla_validate_parse: 4 callbacks suppressed [ 336.368391][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'. [ 336.433298][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2083'. [ 337.456070][T14421] lo speed is unknown, defaulting to 1000 [ 337.604901][T14454] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 337.638508][T14461] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2085'. [ 337.706766][T14467] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2085'. [ 337.759152][T14470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2085'. [ 337.828040][T14461] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2085'. [ 337.891610][T14467] netlink: 'syz.2.2085': attribute type 50 has an invalid length. [ 337.908076][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 338.040311][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2090'. [ 338.142637][T14480] netlink: 'syz.7.2090': attribute type 2 has an invalid length. [ 338.159582][T14482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2091'. [ 338.189013][T14480] : entered promiscuous mode [ 338.202769][T14482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2091'. [ 338.350322][T14493] pim6reg1: entered promiscuous mode [ 338.359290][T14493] pim6reg1: entered allmulticast mode [ 338.594206][T14499] lo speed is unknown, defaulting to 1000 [ 339.233387][T14527] syzkaller0: entered promiscuous mode [ 339.239945][T14527] syzkaller0: entered allmulticast mode [ 339.621889][T14545] netlink: 'syz.0.2106': attribute type 1 has an invalid length. [ 339.759810][T14545] sctp: [Deprecated]: syz.0.2106 (pid 14545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.759810][T14545] Use struct sctp_sack_info instead [ 339.958322][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 340.714039][T14579] ip6t_rpfilter: unknown options [ 340.814629][T14565] netlink: 'syz.0.2111': attribute type 6 has an invalid length. [ 340.823755][T14565] netlink: 'syz.0.2111': attribute type 4 has an invalid length. [ 340.852499][T14586] xfrm1: entered allmulticast mode [ 340.949630][T14565] lo speed is unknown, defaulting to 1000 [ 341.183973][T14574] lo speed is unknown, defaulting to 1000 [ 341.334608][T14602] lo speed is unknown, defaulting to 1000 [ 341.608626][T14616] __nla_validate_parse: 7 callbacks suppressed [ 341.608649][T14616] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2121'. [ 341.729943][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 341.989077][T14621] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 343.113774][T14650] lo speed is unknown, defaulting to 1000 [ 343.279260][T14653] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2130'. [ 343.333277][T14658] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2131'. [ 343.395814][ T5837] Bluetooth: hci13: command 0x0405 tx timeout [ 344.387098][T14686] netlink: 'syz.0.2138': attribute type 29 has an invalid length. [ 344.413494][T14686] netlink: 'syz.0.2138': attribute type 29 has an invalid length. [ 344.697354][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'. [ 344.741457][T14697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.748915][T14697] IPv6: NLM_F_CREATE should be set when creating new route [ 344.831079][T14700] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2141'. [ 344.870391][T14697] syzkaller0: entered promiscuous mode [ 344.887870][T14697] syzkaller0: entered allmulticast mode [ 344.933290][T14700] bridge0: port 3(bond0) entered disabled state [ 345.127491][T14700] bond0 (unregistering): left allmulticast mode [ 345.135056][T14700] bond_slave_0: left allmulticast mode [ 345.142169][T14700] bond_slave_1: left allmulticast mode [ 345.148645][T14700] bond0 (unregistering): left promiscuous mode [ 345.155125][T14700] bond_slave_0: left promiscuous mode [ 345.167871][T14700] bond_slave_1: left promiscuous mode [ 345.183566][T14700] bridge0: port 3(bond0) entered disabled state [ 345.200759][T14700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.222609][T14700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.243270][T14700] bond0 (unregistering): Released all slaves [ 347.393923][T14712] team_slave_0: entered promiscuous mode [ 347.400161][T14712] team_slave_1: entered promiscuous mode [ 347.409687][T14712] vlan2: entered promiscuous mode [ 347.417458][T14712] team0: entered promiscuous mode [ 347.490317][T14717] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2147'. [ 348.176505][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 348.305024][T14739] netlink: 'syz.0.2154': attribute type 5 has an invalid length. [ 348.359085][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 348.377643][T14741] netlink: 'syz.0.2154': attribute type 1 has an invalid length. [ 348.479229][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2154'. [ 348.512029][T14743] bond2: (slave bridge4): making interface the new active one [ 348.529414][T14743] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 349.064440][T14758] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20000 [ 349.071943][ T6722] IPVS: starting estimator thread 0... [ 349.166032][T14759] IPVS: using max 27 ests per chain, 64800 per kthread [ 349.181353][ T5837] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 349.197651][ T5837] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 349.211173][ T5837] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 349.223416][ T5837] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 349.243668][ T5837] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 349.297506][T14766] netlink: 'syz.1.2161': attribute type 1 has an invalid length. [ 349.300314][T14760] lo speed is unknown, defaulting to 1000 [ 349.396166][ T31] INFO: task kworker/u8:14:9406 blocked for more than 143 seconds. [ 349.410432][ T31] Not tainted syzkaller #0 [ 349.429281][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 349.478830][ T31] task:kworker/u8:14 state:D stack:26312 pid:9406 tgid:9406 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 349.548657][ T31] Workqueue: netns cleanup_net [ 349.561283][T14771] 0: reclassify loop, rule prio 0, protocol 800 [ 349.568146][ T31] Call Trace: [ 349.579601][ T31] [ 349.595962][ T31] __schedule+0x1798/0x4cc0 [ 349.600800][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.625729][ T31] ? __pfx___schedule+0x10/0x10 [ 349.631417][ T31] ? schedule+0x91/0x360 [ 349.637456][ T31] schedule+0x165/0x360 [ 349.651212][ T31] schedule_preempt_disabled+0x13/0x30 [ 349.699957][ T31] __mutex_lock+0x7e6/0x1350 [ 349.768688][ T31] ? __mutex_lock+0x5bb/0x1350 [ 349.825087][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 349.865608][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 349.870715][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 349.926103][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.932180][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 349.965366][ T31] ? _raw_spin_unlock+0x28/0x50 [ 349.970309][ T31] rdma_dev_change_netns+0x39/0x300 [ 350.005817][ T31] rdma_dev_exit_net+0x203/0x340 [ 350.010844][ T31] ? __pfx___might_resched+0x10/0x10 [ 350.026203][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 350.031737][ T31] ? net_generic+0x1e/0x240 [ 350.041120][ T31] ? mutex_is_locked+0x17/0x50 [ 350.047729][ T31] ? rtnl_is_locked+0x15/0x20 [ 350.052477][ T31] ops_undo_list+0x49a/0x990 [ 350.057741][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 350.062903][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 350.068847][ T31] cleanup_net+0x4d8/0x820 [ 350.073313][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 350.079239][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.084489][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 350.090442][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 350.097458][ T31] process_scheduled_works+0xae1/0x17b0 [ 350.103093][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 350.109831][ T31] worker_thread+0x8a0/0xda0 [ 350.114687][ T31] kthread+0x711/0x8a0 [ 350.120497][ T31] ? __pfx_worker_thread+0x10/0x10 [ 350.126141][ T31] ? __pfx_kthread+0x10/0x10 [ 350.130798][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.137863][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.143136][ T31] ? __pfx_kthread+0x10/0x10 [ 350.148734][ T31] ret_from_fork+0x4bc/0x870 [ 350.153380][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 350.159680][ T31] ? __switch_to_asm+0x39/0x70 [ 350.164480][ T31] ? __switch_to_asm+0x33/0x70 [ 350.169372][ T31] ? __pfx_kthread+0x10/0x10 [ 350.174007][ T31] ret_from_fork_asm+0x1a/0x30 [ 350.179612][ T31] [ 350.182858][ T31] INFO: task syz.0.1007:10108 blocked for more than 144 seconds. [ 350.191751][ T31] Not tainted syzkaller #0 [ 350.198622][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.207923][ T31] task:syz.0.1007 state:D stack:22808 pid:10108 tgid:10107 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 350.238544][ T31] Call Trace: [ 350.241894][ T31] [ 350.244852][ T31] __schedule+0x1798/0x4cc0 [ 350.250689][ T31] ? validate_chain+0x897/0x2140 [ 350.257135][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.262030][ T31] ? __pfx___schedule+0x10/0x10 [ 350.267397][ T31] ? schedule+0x91/0x360 [ 350.271707][ T31] schedule+0x165/0x360 [ 350.280642][ T31] schedule_timeout+0x9a/0x270 [ 350.285932][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 350.291369][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.297204][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.302465][ T31] ? wait_for_completion+0x267/0x5d0 [ 350.309175][ T31] wait_for_completion+0x2bf/0x5d0 [ 350.314348][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 350.320702][ T31] ? up_write+0x1c4/0x420 [ 350.325099][ T31] ? remove_client_context+0xc0/0x1e0 [ 350.332026][ T31] disable_device+0x1c6/0x320 [ 350.337010][ T31] ? __pfx_disable_device+0x10/0x10 [ 350.342266][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 350.348252][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 350.354201][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 350.361221][ T31] nldev_dellink+0x2d1/0x320 [ 350.366466][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 350.371881][ T31] ? apparmor_capable+0x137/0x1b0 [ 350.377528][ T31] ? bpf_lsm_capable+0x9/0x20 [ 350.382248][ T31] ? security_capable+0x7e/0x2e0 [ 350.387526][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 350.392653][ T31] rdma_nl_rcv+0x6ae/0x980 [ 350.397492][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 350.402446][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.407794][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.413013][ T31] netlink_unicast+0x82f/0x9e0 [ 350.418190][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 350.423525][ T31] ? netlink_sendmsg+0x642/0xb30 [ 350.429019][ T31] ? skb_put+0x11b/0x210 [ 350.433280][ T31] netlink_sendmsg+0x805/0xb30 [ 350.438806][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.444144][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 350.449620][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.454941][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.461070][ T31] __sock_sendmsg+0x21c/0x270 [ 350.466811][ T31] ____sys_sendmsg+0x505/0x830 [ 350.471615][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.477460][ T31] ? import_iovec+0x74/0xa0 [ 350.482023][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 350.487364][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.492624][ T31] ? __fget_files+0x2a/0x420 [ 350.497822][ T31] ? __fget_files+0x3a0/0x420 [ 350.502519][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 350.507926][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.513414][ T31] ? do_syscall_64+0xbe/0xfa0 [ 350.519188][ T31] do_syscall_64+0xfa/0xfa0 [ 350.523742][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.529671][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.535877][ T31] ? clear_bhb_loop+0x60/0xb0 [ 350.540684][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.546986][ T31] RIP: 0033:0x7fdfeb38f6c9 [ 350.551442][ T31] RSP: 002b:00007fdfec1a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.560189][ T31] RAX: ffffffffffffffda RBX: 00007fdfeb5e5fa0 RCX: 00007fdfeb38f6c9 [ 350.568687][ T31] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 0000000000000007 [ 350.576869][ T31] RBP: 00007fdfeb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 350.584855][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.593353][ T31] R13: 00007fdfeb5e6038 R14: 00007fdfeb5e5fa0 R15: 00007ffedbb96058 [ 350.602032][ T31] [ 350.605357][ T31] [ 350.605357][ T31] Showing all locks held in the system: [ 350.613474][ T31] 1 lock held by khungtaskd/31: [ 350.619963][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 350.631167][ T31] 2 locks held by getty/5593: [ 350.638934][ T31] #0: ffff88802fb640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 350.651788][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 350.668000][ T31] 2 locks held by kworker/1:17/6722: [ 350.673346][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 350.691613][ T31] #1: ffffc9001b7b7ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 350.703084][ T31] 4 locks held by kworker/u8:14/9406: [ 350.709351][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 350.735417][ T31] #1: ffffc9001aad7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 350.765959][ T31] #2: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 350.786124][ T31] #3: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 350.806139][ T31] 2 locks held by syz.0.1007/10108: [ 350.811403][ T31] #0: ffffffff99b65918 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 350.846111][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 350.865780][ T31] 2 locks held by syz.1.1142/10662: [ 350.871050][ T31] #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 350.895917][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 350.926398][ T31] 2 locks held by syz.5.1214/10932: [ 350.931658][ T31] #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 350.955511][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 350.985801][ T31] 2 locks held by syz.2.1266/11116: [ 350.991084][ T31] #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 351.018682][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 351.045842][ T31] 2 locks held by syz.2.1266/11117: [ 351.051540][ T31] #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 351.062187][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 351.073950][ T31] 2 locks held by syz.4.1371/11540: [ 351.079935][ T31] #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 351.090345][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 351.101922][ T31] 2 locks held by syz.3.1523/12164: [ 351.108042][ T31] #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 351.117909][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 351.130183][ T31] 2 locks held by syz.6.1574/12410: [ 351.136288][ T31] #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 351.146640][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 351.158637][ T31] 2 locks held by syz.8.1605/12519: [ 351.163865][ T31] #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 351.175064][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 351.187399][ T31] 5 locks held by syz-executor/12859: [ 351.192807][ T31] #0: ffff888054034dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 351.202946][ T31] #1: ffff8880540340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 351.213260][ T31] #2: ffffffff8f435c68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 351.223452][ T31] #3: ffff88802f343338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 351.233249][ T31] #4: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 351.244823][ T31] 2 locks held by syz.5.1850/13539: [ 351.250348][ T31] #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 351.259878][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 351.271815][ T31] 2 locks held by syz.9.2077/14421: [ 351.277163][ T31] #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 351.287022][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 351.298773][ T31] 2 locks held by syz.2.2120/14602: [ 351.304063][ T31] #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 351.313782][ T31] #1: ffff88807c348700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 351.328682][ T5837] Bluetooth: hci14: command tx timeout [ 351.333151][ T31] 3 locks held by syz-executor/14760: [ 351.340213][ T31] #0: ffff888092240dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 351.351074][ T31] #1: ffff8880922400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 351.361116][ T31] #2: ffffffff8f435c68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 351.371490][ T31] 3 locks held by syz.7.2160/14763: [ 351.377005][ T31] #0: ffff88804edb0dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 351.387610][ T31] #1: ffff88804edb00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 351.397817][ T31] #2: ffffffff8f435c68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 351.408672][ T31] 2 locks held by syz.0.2162/14769: [ 351.413900][ T31] #0: ffffffff8f2cefe8 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 351.426000][ T31] #1: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 351.437986][ T31] [ 351.440356][ T31] ============================================= [ 351.440356][ T31] [ 351.449786][ T31] NMI backtrace for cpu 0 [ 351.449808][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 351.449848][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.449868][ T31] Call Trace: [ 351.449877][ T31] [ 351.449887][ T31] dump_stack_lvl+0x189/0x250 [ 351.449923][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.449958][ T31] ? __pfx__printk+0x10/0x10 [ 351.450001][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 351.450030][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 351.450059][ T31] ? __pfx__printk+0x10/0x10 [ 351.450086][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.450121][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 351.450150][ T31] watchdog+0xf60/0xfa0 [ 351.450177][ T31] ? watchdog+0x1e2/0xfa0 [ 351.450205][ T31] kthread+0x711/0x8a0 [ 351.450236][ T31] ? __pfx_watchdog+0x10/0x10 [ 351.450256][ T31] ? __pfx_kthread+0x10/0x10 [ 351.450286][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.450315][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.450344][ T31] ? __pfx_kthread+0x10/0x10 [ 351.450372][ T31] ret_from_fork+0x4bc/0x870 [ 351.450396][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.450425][ T31] ? __switch_to_asm+0x39/0x70 [ 351.450440][ T31] ? __switch_to_asm+0x33/0x70 [ 351.450456][ T31] ? __pfx_kthread+0x10/0x10 [ 351.450485][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.450522][ T31] [ 351.450531][ T31] Sending NMI from CPU 0 to CPUs 1: [ 351.601668][ C1] NMI backtrace for cpu 1 [ 351.601688][ C1] CPU: 1 UID: 0 PID: 9413 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 351.601708][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.601720][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 351.601749][ C1] RIP: 0010:lock_acquire+0xc9/0x360 [ 351.601768][ C1] Code: d1 10 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 50 6e 92 83 b8 2c 0b 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c <8f> 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 c9 [ 351.601783][ C1] RSP: 0018:ffffc9001ab37350 EFLAGS: 00000246 [ 351.601798][ C1] RAX: ffff8880590f0000 RBX: 0000000000000000 RCX: 25de2cd320612e00 [ 351.601811][ C1] RDX: 0000000000000000 RSI: ffffffff81738d42 RDI: 1ffffffff1be7acc [ 351.601823][ C1] RBP: ffffffff81738d25 R08: 0000000000000000 R09: 0000000000000000 [ 351.601834][ C1] R10: ffffc9001ab37518 R11: ffffffff81ac2f50 R12: 0000000000000002 [ 351.601846][ C1] R13: ffffffff8df3d660 R14: 0000000000000000 R15: 0000000000000000 [ 351.601857][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 351.601872][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.601883][ C1] CR2: 000055fbf9ac3000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 351.601898][ C1] Call Trace: [ 351.601905][ C1] [ 351.601918][ C1] ? unwind_next_frame+0xa5/0x2390 [ 351.601939][ C1] ? kthread+0x711/0x8a0 [ 351.601962][ C1] ? unwind_next_frame+0xa5/0x2390 [ 351.601982][ C1] unwind_next_frame+0xc2/0x2390 [ 351.602001][ C1] ? unwind_next_frame+0xa5/0x2390 [ 351.602023][ C1] ? unwind_next_frame+0xa5/0x2390 [ 351.602043][ C1] ? worker_thread+0x8a0/0xda0 [ 351.602065][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 351.602089][ C1] arch_stack_walk+0x11c/0x150 [ 351.602112][ C1] ? kthread+0x711/0x8a0 [ 351.602137][ C1] stack_trace_save+0x9c/0xe0 [ 351.602159][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 351.602182][ C1] ? chacha_block_generic+0x53/0xc80 [ 351.602210][ C1] kasan_save_track+0x3e/0x80 [ 351.602239][ C1] ? kasan_save_track+0x3e/0x80 [ 351.602261][ C1] ? __kasan_save_free_info+0x46/0x50 [ 351.602280][ C1] ? __kasan_slab_free+0x5c/0x80 [ 351.602304][ C1] ? kfree+0x19a/0x6d0 [ 351.602323][ C1] ? skb_release_data+0x62d/0x7c0 [ 351.602341][ C1] ? consume_skb+0x9e/0xf0 [ 351.602356][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 351.602376][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 351.602392][ C1] ? worker_thread+0x8a0/0xda0 [ 351.602409][ C1] ? kthread+0x711/0x8a0 [ 351.602459][ C1] __kasan_save_free_info+0x46/0x50 [ 351.602479][ C1] __kasan_slab_free+0x5c/0x80 [ 351.602503][ C1] ? skb_release_data+0x62d/0x7c0 [ 351.602521][ C1] kfree+0x19a/0x6d0 [ 351.602546][ C1] skb_release_data+0x62d/0x7c0 [ 351.602570][ C1] consume_skb+0x9e/0xf0 [ 351.602586][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 351.602617][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 351.602637][ C1] process_scheduled_works+0xae1/0x17b0 [ 351.602672][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.602700][ C1] worker_thread+0x8a0/0xda0 [ 351.602734][ C1] kthread+0x711/0x8a0 [ 351.602757][ C1] ? __pfx_worker_thread+0x10/0x10 [ 351.602775][ C1] ? __pfx_kthread+0x10/0x10 [ 351.602798][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.602821][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.602845][ C1] ? __pfx_kthread+0x10/0x10 [ 351.602867][ C1] ret_from_fork+0x4bc/0x870 [ 351.602886][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 351.602906][ C1] ? __switch_to_asm+0x39/0x70 [ 351.602921][ C1] ? __switch_to_asm+0x33/0x70 [ 351.602934][ C1] ? __pfx_kthread+0x10/0x10 [ 351.602956][ C1] ret_from_fork_asm+0x1a/0x30 [ 351.602983][ C1] [ 355.317342][ T5837] Bluetooth: hci6: command 0x0406 tx timeout