last executing test programs: 4m5.116484291s ago: executing program 0 (id=1752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000640), 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffebc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804001a0804001c002b800800030011000000080001"], 0x3c}}, 0x4000000) 4m4.961635328s ago: executing program 0 (id=1756): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, 0x0, 0x0}, 0x20) listen(r0, 0x6) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @local, 0x8, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='l', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x7, 0x84, 0x1}], 0x10}}], 0x2, 0x40000050) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240)="b96be40b55c7131d6156a1fc0f0fe42caf735f64351d8b1962226f84562c6df6e503da0db13ef04cf2a024d5781e7ef11e9416c9110561066d31e0ae7f61ffc146622b63eaf18c6a102d4d8c170b7cef0cc917679797a2bdb07887a35471037df45ffee1206b87ba54a0e85f8a535d8beed674b57ad1c390ab096f"}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x1}]}]}, {0x0, [0x61, 0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x8}, 0x28) 4m4.686378227s ago: executing program 0 (id=1761): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390004001300034700bb5be1c3e4feff060000000000190004000400ad0002000000000000060488627df400f93132", 0x2f}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf25030000000c0006000200000000000000080001"], 0xc0}}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r7, &(0x7f0000000340)="44f5", &(0x7f0000000500)=""/201, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 4m4.502664284s ago: executing program 0 (id=1767): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000000)=0x7fffffff, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0xc0) close(0x3) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x90}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2439}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40094}, 0x24000000) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000300)={'ip6gretap0\x00', 0xe71}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000340)={0x1f, @any, 0x2}, 0xa) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={&(0x7f0000000400), 0xc, &(0x7f0000000680)={&(0x7f0000000440)=@ipv6_newaddrlabel={0x8c, 0x48, 0x20, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, r2, 0xe7}, [@IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x8c}}, 0x40) recvfrom$unix(r6, &(0x7f0000000740)=""/263, 0xfffffffffffffe47, 0x40000022, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa300002800400010000000004000000000000000800000000000000080000000000000068000280140001801100000000000000080000000000000018000a8014000700ff020000000000000000000000000001000007e7ff02000000000000000000000000000100000700fe8000000000000000000000000000002800028024000180080000000000000008000000000000000800000000000000080000000000000004001c0000000a8000000700200100000000000000000000000000000000080000000000000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fc0100000000000000000000000000000000080000000000000008000000000004001c00"/356], 0xec}}, 0x0) 4m4.36848374s ago: executing program 0 (id=1769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000180)={0x3d8, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "d17738bbb1a434b911497cccb3b62a572f2eabff4832e5c4139ba5db6c4cd273bd23a8e326a171ac7b9d9920112b6e51ba0e41f74f7fcc6bf91d348e5ea286fe3b7978fb658f8c1c5cd5eab45f60026b079cb213517c28224f8eeca1ff794faff53e719ff50fe735c4abb87f210c8ee2cc300022c8ca5d1c8c49aeff8173e3d70a9407017aa05557adea"}, @NL80211_ATTR_FRAME_MATCH={0x100, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0xcb, 0x5b, "b06d6028c0a7ba41c12c177c0d32e139ee6eb1189702bac96fbafa8c424e9d805cf38930f69129f557f1e7df77c93ec5d3e660b35692c876b57af21662c43eb692339d3dad9c8dfc0e2f3beb35c73e1d15dbc1660e37750ec872c8b32ddcc0873743c11106a635353562ddfd7ec96dae670ad43e1b09a5fe25d03e0bfc0184a74cc1685848b3ddf33e8fad9f19810497036f9b868ecec5f7d4c08f517ac77bbf5d61511831184320b228a8fba3bbddbe9c76cae01bc561e7fd634851dd315782edb24e8dc32f81"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "853816afeb1828decb68bd28f562564dabdeb21f3ab0a887e4a086f2c9af3b04a10076d60f386b0ff2951ca069c8622c82ec9ea5f4d88af0e11ac216fded451c7ca5f5218d19e815cf934d3febda3be791a66a6f344a3c378c0e1f51037165bb3de27579fd75c243f93fe89cb1bdd0e2db777637eed5ee6d5946b70cd4f2945a8776102b0e16e7e3ef0a"}, @NL80211_ATTR_FRAME_MATCH={0xc2, 0x5b, "5ff24d90df4857ec2392f4b1a11cd0d313867f9575772bd80b3749bae1836a3f9fb4f33da9e1f7bf3088865bbf41fc13dbd53f0f6c7682cde5f4c925fb32e5edffe87b81a0bcd687c09300202160193e6b01b3ac38238a5864c3eb2f71adfddf40123f2e0f4b29f1045ab1b18f86e727dd8a9f26c5cfa5b2ace73ff340299fa1d4126a597be52d9ea484b572baa907da8a3ea5cf607562e0a4ad7e9849a09b87e73cb8dce0e326f89e8d7fe2ac731a3177764a03b29b06a1089562352a76"}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'veth0_virt_wifi\x00', &(0x7f0000000600)=@ethtool_wolinfo={0x5, 0x1, 0x9, "5a16684a29e4"}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000680)={0x2, 0x80000000, 0xf8, 0x9, 0x5}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x0, 0x6b, 0x64, &(0x7f0000000740)="776674ec40699edf1ea96e381632b6542fe5540ca63575c3bb24996cde890fe9057afaa13ec1ebfbd08a8c0a695bfbc75a4334cd99960ff7d7c13128074f73a16490aab7ecf806cccdc06d8cb7a2dd65e37e3a0b4dae98501b1a0ad739c41a1c1a4cc5df50aa4ab056da79", &(0x7f00000007c0)=""/100, 0x7fffffff, 0x0, 0x5d, 0xab, &(0x7f0000000840)="02e5078bebc24afb3c664dcb03303f9f402449796465fc6ee5a0002ebd157d7a8b3fce706fa39bef5b027d514914abf0dbfb4dddf700af397d27c5fc1a19820e90d74b2c287295527162cff84c86eed6614a000d1d9116ce89d9d577ff", &(0x7f00000008c0)="85eb92acf511a67592c8bc9f4d931eaaf620b1057ab117f4916a30419032185c6a1d6456f668bdf7f23ee192595924038dd189ef4754ebdc3ee475dc363039a9867bcf673f1bf1aa2c8c1dba4279ff7b2dcf90162ec765001f151490e1852dccb69db9b423c8c94d4958398b8cbabc2803a978de02fb1ad5f236d908d58ff7305087af43d8cc5657d0a38c5f31cb7e371fabda5b06eb149a592b86c248ad369e13d6510d5fbcf64c142973", 0x2, 0x0, 0x1971}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1}, &(0x7f0000000a80), &(0x7f0000000ac0)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r2}, 0x20) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0xffffffffffffffff, 0x1, 0x10}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'ip6tnl0\x00', 0x0, 0x29, 0xa2, 0x2, 0x7fff, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x700, 0x1, 0x8000, 0x8001}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e80)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r2, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0], 0x0, 0x56, &(0x7f0000001000)=[{}, {}], 0x10, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0xe4, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xb, 0x1c, &(0x7f0000000b80)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7364c942}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x37}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ldst={0x1, 0x0, 0x0, 0x5, 0xa, 0x70, 0x1}], &(0x7f0000000c80)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000cc0)=""/212, 0x41000, 0x4ff0b9317b1eb20b, '\x00', r6, @fallback=0x2d, r7, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, r2, 0x3, 0x0, &(0x7f0000001240)=[{0x3, 0x1, 0x1, 0xc}, {0x2, 0x1, 0xe, 0x5}, {0x0, 0x4, 0x1, 0x1}]}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xb, 0x1c, &(0x7f0000000b80)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7364c942}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x37}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ldst={0x1, 0x0, 0x0, 0x5, 0xa, 0x70, 0x1}], &(0x7f0000000c80)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000cc0)=""/212, 0x41000, 0x4ff0b9317b1eb20b, '\x00', r6, @fallback=0x2d, r7, 0x8, &(0x7f0000000ec0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, r2, 0x3, 0x0, &(0x7f0000001240)=[{0x3, 0x1, 0x1, 0xc}, {0x2, 0x1, 0xe, 0x5}, {0x0, 0x4, 0x1, 0x1}]}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8a, 0x8a, 0x5, [@var={0x6, 0x0, 0x0, 0xe, 0x4}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @typedef={0xe, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0xffff}}, @datasec={0x7, 0x5, 0x0, 0xf, 0x2, [{0x4, 0xe, 0x4}, {0x5, 0x30000, 0x1}, {0x3, 0x2bcc, 0xf}, {0x5, 0x10001, 0x6}, {0x3, 0x4, 0xfff}], "88d1"}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000001400)=""/64, 0xa9, 0x40, 0x1, 0x54}, 0x28) epoll_create1(0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000001480)=0x4) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000001480)=0x4) r11 = accept(r0, &(0x7f00000014c0)=@tipc=@id, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r11, &(0x7f0000002ac0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a80)={&(0x7f00000015c0)=@newtfilter={0x1490, 0x2c, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xb}, {0x8, 0xd}, {0xc, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_FD={0x8, 0x6, r10}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1420, 0x2, [@TCA_FLOW_ACT={0x10d4, 0x9, 0x0, 0x1, [@m_ife={0x10d0, 0xe, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x10, 0xe, 0x5, 0x6, 0x9}, 0x1}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xc86}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6f}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}]}, @TCA_IFE_DMAC={0xa, 0x3, @random="f2ff977dd463"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2c46, 0x6b1, 0x1000000a, 0x401, 0xffff}, 0x1}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7fff}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}, @TCA_IFE_TYPE={0x6}]}, {0x1004, 0x6, "5b7dbce660095c5693dbc753bdb2441122c87fda41edeb908dfa48f066c3d81beba38183636e8dad3ecce69655c0fada246d7cad67b462952cf80bf26b13741e0c7ad2988baf344a28482b382bf63e44b8757e0ee6d33b05141e3211ac2708c9e34e4c347e8a1691e46b35ea92df6eb2a9491237b0fa7a936c2ca4cedd4b6aa3b1ed759d79fbd32ecf6f6133679f78badb12ae7817765551cf66a9735d668ac0d61949e8e2befb107f939ec16e0082efeaa8dcec825c10bd95cba40a86f285a8ed068cbcfb3b7b2c2fa66e17c5f4895d66f94c44d2511ddf3f3d09be6953c5c52a96fce4365a1831daf66af80f3b0b28aedf657cc3cc6540b0235c3a7e82bdd6d4fc6c55939dbf9644c66cf62685ef0eaf86a3511c83ad849c4756b409eec7f49690382094bb30edee459f35b0c630cd873e8a6796f34cdafc05976643e7e578dfc439953a60f3caa5a62d02e260aae26511e7a8c03a5d46645a2c261c1a0e686db65fd6103ab5828c92e122fca328b8ab9cc76c928d9e59d215d96c07acd4f81f10c3f512692ad245f13c7aa8cb14656cb047303ea92b72a43073b7e34fc5c47e5a9da612a86aa51b8a939de8b71d7ae8849069204855194a33cff5f694b9017950e3cfec1ad9e420fa33aff4a53bb762496753c671424b94e6554fce21e7d84e3e5075c53d551f0c32b8e4dcfb9ad854f316e8f34bc74ca8f9dd0611f265a4f2e64b198190f0e2af58d86880741f8a4610d0439ec5588e00c7ff237917c9a06ae3bf56e4a8d3db7571015ae927043123cee82951042477603eadc4aef1acb5015aa841f0f716cdde58952a847fcddd363ead3fc76e229760fcc76a4ed56c056021f747b21c91f0222baeead9602b3030ec91a0c4fcca437cd48248e5d5bf135b2c202ada203adc26b8ab2f2c0186f9669bbd2ba975ff57ca50e4a78d1de921df3f48d2e073f454bbcf689fae22947d3afc69847a4ead7ec44d9c3fc5f18100c835b90ef337d93a857f1d61d56547624b8b8794c966ad4610c5c911fb5f48eda5d7e7e04e999f12bbf61abcef46dcc2eafcb768eb1a8f2486b5a6154a67bb70f29edcf8a7ef5b46e046ba4c0794e2504ccfd2cd76914e85ae54625f5b051d0c90d3cdcb7f1af288346edec51803753099b72792a7028812187f2f6baeafec2fc720b31f836936ff6dcb36bd00b91a5b9566d66c0d5637c7f03b9313ad4155a2daa29441dc8705665dccf3eef03de31c8c037214ca5fa02d3878e0b7d9a055c2c1690d255cf4eab9891c09330f15a34752e694b61e27fa37e1be1eee16127a66be9f30f88b9c3fa5fdf852c60738ff4e32c6e7080d3db958aee8f684b9bc8a013499d37abe2fd03910a66f99e3eda92d9c90a14b9b9290ab4f5feb240daa5e66730f809afdf338f2374c3f71dc0fc4b49ded07258a7a0c44422fadfd0cb50b5a1d88a3ca1156bfaaaf19538ecd67e2a4f58208fc40fc09a57aaf3cb0e1c1965ba0309ebee74f756e80e104570596bd7f56f826933cc165876e89beace6ffdbc36fea2cecd0fd219445d0630c6648884123de08a76a4ab6def84bd248af665e0d42e08058fdfd39e71fc9a41388cdcc9cb2abe633073515062e5cf06c06bade4e004c5957bc9e3a169f39d3cadeded17990aa925e2a816c4bf736e0b725bccba4a1fa2784ae35f4d98f76e9a26ee4efb0a46bdff867ae33a0a1c563a09b743d5f702a0d99259e2ddb845cd3cfe5e5edbbeec53a987688724c0e93ef546ea3010559bdba7c6cd66eb763fb8e182694a3c401313a290ffd4a03421bf3cc8ec530a4f3e5bfe8997ecec714abcf5b20a0334557860c1d18bfd484f74c5918804e67abd9af91fb331a368f24971011162824e1e628c467249596863349f2ffb74d8362573ed8752ddcd3217d8946aef3c3c2c6c0265318075f22a749ebe6ad7422b97ae0ffd6b096c6919624b297dadd91b6aadd14adf6e94b83e73c8228ff18a5da5c6f8076654df9bd49750d2108707bea770627df015945b05395cea58179cb0d999944c916c86080d9162ef3e0713f17600b786734dae6fce514228a97e4c386c95239adbc7f6c15906d95b353de7f91ca62e23ed8f9c6cc65546514ac6f3ba7af25fbeb978c6042fb6817c6fe6a11ea54ebee73d9a3660d507582eaa42aa1fa61643229c6c54fa248fb95e2fb048e14626adbeecd2552d67daf0a308917aba167df2b00ca4de8f9e52a67e53c062a7b043b7afb2d8ec4c586ee10bc1dbb748e98f066c2c25b5d88cdd272bbcf0e7b02214f5f6362ef392015502b875263fe1edf4f63f0656ec70ad1c19c7ab31556c6affde8fc17aca06c0b456163799b74ed57db7bd295465fb903c940da2d95d62430549513b327b3802cd333ba08084b3f59623214affe7bd9f624f8db0cca010d3177a2eb34617e3e7925e977a346cf4d59408bd0643214ce1caeb9361264b05f3974386cb4f1947244ed5d02ba0dbccd9117bc3afb7634dd6b9f272ff28a41b43859b85a1519f8ab3a3248cfebba35b68c4f1272220e98409dc75f2558891a519fcd432a9074f9ef440d5e367d6f42ed848d7874146b522e5bd983d9166e0466902d1ac37753c035077919bc54e0072fd5c1f6f66703fc7b29817c29e3b25f388fc92b90d2bfa560cbe9c63f4a943e20f6060f47fde1be0034c11f87a7f3964376665b810924434b021e1ab4fb027d019f5e8ee42f32e32f91a3557279a1c055d37fa0e3f72bdce5ed4cbc40927b19397b6e2d0b4090fad4feb519e1adcbca12ff80b64a1b0f212323e20aa64f2e837cee304e5282faf314632bbcc35535fd7a2a6eee81baafb5fb0b9fd7b84eb73e0dceb9eb9eb9aeafdee7520f667235f834d3b8f6bd94402787723945a9a9be98db4e7d23ce22759ad2c2692629412ad295c104b6474d090b7d55c051f6091b10e4a4d87a00aafd8a895dd9c1b214fd000d5067cb516edb37b883c0ee2f495116b38b8b18b150d895bc9e1f3f172666ca5c1bc335d09ace114cf1ab6b215484acc09cc1f2f1562162ee5c60ccc244d8a9a18bd1f5dc6c4fb73bb03ff1a89e5295fe23a16726cff21d2975690357bb257e813d1a5abb72f3f76a1da260732eee3058463a42623e54b3aab860078b4e0e7e3a88dbd290fb7ab11024293c6c45abe9a96162711bb8e219f2e4bf5dbdbba5f53379d72c66ff2266ff59c48f365fc9225456a54184c81969b8c54c7a054e25dc6f6264cd9fc56c2edbb21b0c176ebd75529606cda5bc101a1eab6b155173aaccc953f1685730a0b413f7ace0c96f11782cd54cd51a7a61d7272b0ef6645aba7b4a59dd442ff13e6fce77badb7bc0d0ca91240ca1c6c8a2b8a258abf0e1b98a064f0d43e62ecb4984cfeee6ef2ad25b1c57ab2d3658de320eae1350d1c4aa6fd64b8de0ec83654f11a6fbbb964a3287c52e2e03460a48bf7e131533180717a3b9252b3d65de7a8f2724a28f255837c35553433411c1be6f6f21eb9acb43258d26bf2271cb1422e4b47e947fa052208d2e74419822cf71b97be6d144b0e35fdbef5f0fbde47a3ffc2e1b11ff7458c038a7959107bc5c98e351f7a2af3709d7201ff6d4f68938afa4fe5705818c0c80685e58de90700e2fc0402c91cbfdbae339cf74d24c51e9b4dd333d01b6126480f727bafaa143eb5123b5173fb46f36ff6d8ca29ac4ce8fc92f5de2c702c7451c99c84a04447bfddda11d572086214db1b8049e4a1ac93607f02a2bdc9d54999f516555cc301208a4651c473815103055a5f0de5c61758461e9b0636e6547dbe0bb537a2308e09680efd96e7fbd6daa4732951695fa55b5e5807801d4036361592e5744b044efb6b7104bc544e1a74bbe021f70177804ab8fd0bc61cd57bb20c7d24ec3811462213684d211de6041e42ac92fb94637758e1f29f42b25c3ed4f36f4da120177e4b36c5d25a38515562f7e3ebae4afebc22f50904d6f99022366f7077866311658c78c624fb7b70d0cda1afea2e733b1206b88e0d06555cd374366cde231d743680acbced018fc5e73cd09762aa0912708430db8220fdccfeacf0021c1e248db4897a833e8222f4107156af8082aafd1e4416a0c7dcf732d9e900b260a9ba418bf8546210fd596f1efc8446c1bb846358842a9587813f319de7f41cdd1c62a317befe63811db7164caa2955b05ac576738d2d5f0be50295b392e7b11c4b92237c11e579d23d0acc4e41dec5f7d65889772ba003be03aac330c79a6db59ca9e4ed1e2de9d7fd0b29e1b668f9d1ddca36e98c870482acecc75aa736cf0f85ebd8d41be4e9e3d0a5f3dca05f3ef19055067555e429482c732ab6d8df2d491fd18c0ad819ec0b23809654648f31ec79ad8fc2b7bac41e0e336575f2d684873e37f5581922403c6a2aa06b1971f562df2eebbbda706faeae11771b73305b10bbca74e83a0265fb0c5be13d8c2ef201896d8d114f73ca78aeea4bb4d887dc851e7ba1fe01301ab380e9b71e882c9db9bdde8f60174627a5e108ba85670bf6b26155a8a21d9665e70b8c86250deecce6f6c8af9c1451f431bd8de38a9e63b5ea609f1d3651673f348dfd74aa8eae680b00fd4eb6dc80e82c8006e015d846f52b54a959b9f17201c82194fbc63611e97b9b52c14d232cc8e01ed35f979fb22e21840e5830419b84ab7aa8b3a20f1a601068d581343263ec69f110dc29f24334a34ca4a3f1e0c6f8e5ac6a8d9f62c8f1244a9761c6c3c525a217f90c5860d1a42e149af3b1e62ff7e53bf43773c8af79701ba1bf5e4a0bc192feb669855e78bf9682f6ad26e2a052b9d6ff66ea13572bf95bba86a7dd43073cf4ac7e17ad0ca688649ac3198a15a8b5f41fbb196678720af8498db8b69f3d2108edcd3b44e4fac0c72205000cd4332935b6eff7660e6ea0bb83c62cd2f92886e4c87b33250ffaeb0b748d2916a7908664b19e64e14df448856dbd514cf22f0c2bb0c75dbb411f11b55279471b4ea1d575ff25ec9a2f08a0afb801dde4970993075332e3ca52ff05de4e7a803b96bde6a7352009b0f57278f6fa81d55da09779be005c4689b036bba29c51a319ac462974cd5f2df8b83b1b0bd61bdfa1e484fc806f9b4539d07e8dde3f747ff4bdad12ad31eac2c15ab381e84b748038eab2a4d1f34edeba87aeff6bf485cb3333ef9238f29309d48d6a4ffb896bf31b1be87f2d01a64fb940a04bdae7c55ec1b94e2acd8af0d2a6eee91035e46d8ac45e33a6e95995bdefeaffb042fda196eaf6cba74bb948e6ad3a57c9ffa2eddf807c72d14abcd25337c11f2a6b306bf03f48e424e2c6060752270184488895ccacd1203f60a06676fccdc302b4375bbe8167a5aff5e2cf5f7a48fadce044b2908d42e482de30848ce880d179f6585a1f744a8e051f8d8830c29739f5ce7dea8ee23fd87b649acfce6d66dfd3080430e33c9cd5156722baeaf4f1bb37b8e1433e2401c8d62054d33764fdd38fc455801d41a3aca6917c35d167134c19e09f7ca79ccdadcbf60cc98a74ef8c3790308bb61bcd962d4d95955df91a9817d4fd28b83f2f9de0a3152c855d1930b6e49f8b4cca03f184d9ba911908aa64fad34cae8923e75b5623d9d351b45b0d0dab299643babc436fab20dd5e5d596b1b51f24bfba2ac99ca5da53e975f5cc0eab09cd9d08fd32659d0a196e5ba53ca6ad4e1d839334675e8c150eda303f8af761f1ba21fd24587145f2bb9ccef6ec8cb5c31f0124dce88be8db31e14447509b20ee554bf64b07c1a49ce37ea8b57219cfdbc853d08acd162dd9ac0ad40bd82457a4ba"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0xc15e}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xa}, @TCA_FLOW_XOR={0x8, 0x7, 0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x7f}, @TCA_FLOW_EMATCHES={0x310, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0xfff7}, {0x0, 0x4, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0xfe}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x400, 0x7, 0xfffc}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1e98, 0x8, 0xf800}, {0x0, 0x2, 0xed78be6c9ae69ff3}}}, @TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x140}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}, @TCF_EM_IPSET={0x10, 0x4, 0x0, 0x0, {{0x1, 0x8, 0xa}, {0x2, 0x0, 0x8}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x8}, {0x6, 0x4, 0x2, "2e3c389b"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x400}, {0x80, 0x800, 0x4, 0x1, 0x0, 0x1}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0xb}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}, @TCA_EMATCH_TREE_LIST={0x1b8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x2, 0x0, 0x0, {{0xa, 0x4, 0xd17}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x617f, 0xeb, 0x1}, {0x7, 0xb, 0x1}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="88727562", @TCF_META_TYPE_VAR='EF', @TCF_META_TYPE_VAR="020e41b0ea39470920d8", @TCF_META_TYPE_VAR="8f", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="9ebd06fbc7", @TCF_META_TYPE_VAR="00ebe83c", @TCF_META_TYPE_VAR="319335c0", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR=',*L']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x6f, 0x1}, {0xc, 0xd, 0x1}}}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_VAR="c4118488", @TCF_META_TYPE_VAR="e77b7eb0b32c16", @TCF_META_TYPE_VAR="ebeb", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="536e0090", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1831503b8120481c64", @TCF_META_TYPE_VAR]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0xfff}, {0x3, 0x0, 0x7, 0x9}}}, @TCF_EM_CONTAINER={0xec, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x8}, "447447a1e194eea8fbd68d34d4344747e346841727fa0dd68381f7ff7f4afb9189f21cd6147b22db311b4bc79241a9f6bfd789e9b6e1bf764b5cf024bb116c9e7f55ee26b6bb14cbb70190f199a18a98e6cc3493261d0c9a965974779ce32e8a832e670a84d8a2a5505f8433617da95802c97aa36a379793398d38be5dd592433c0e359015c9089509ab77dd87823bdee094f762d7b043963444b430b2148a7d9ff5acedecc77edf4b517d5be588c9a02a78a306a3ca0b0810a560e594b47d20e1060c0d979f4881920878072fb01f6363c5fb23827d8d6ff46f84afa8a0e6"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x400}, {0x3, 0xe86b, 0x4}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xe}, {0x4, 0x0, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8d}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa12}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0x8, 0x0, 0xf6a2}, "4cbb20bb07bed9e894c49b8b4f67c69b0472bb1ac30e3bc9c8d065ebf1bc7529690455d63ecdcc0c7b5c"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x80, 0x3, 0xb10}, {0x2, 0x1, 0x8b7e}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}]}}]}, 0x1490}, 0x1, 0x0, 0x0, 0x40040}, 0x4) (async) sendmsg$nl_route_sched(r11, &(0x7f0000002ac0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a80)={&(0x7f00000015c0)=@newtfilter={0x1490, 0x2c, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xb}, {0x8, 0xd}, {0xc, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_FD={0x8, 0x6, r10}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1420, 0x2, [@TCA_FLOW_ACT={0x10d4, 0x9, 0x0, 0x1, [@m_ife={0x10d0, 0xe, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x10, 0xe, 0x5, 0x6, 0x9}, 0x1}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xc86}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6f}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}]}, @TCA_IFE_DMAC={0xa, 0x3, @random="f2ff977dd463"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2c46, 0x6b1, 0x1000000a, 0x401, 0xffff}, 0x1}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7fff}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}, @TCA_IFE_TYPE={0x6}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0xc15e}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xa}, @TCA_FLOW_XOR={0x8, 0x7, 0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x7f}, @TCA_FLOW_EMATCHES={0x310, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0xfff7}, {0x0, 0x4, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0xfe}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x400, 0x7, 0xfffc}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1e98, 0x8, 0xf800}, {0x0, 0x2, 0xed78be6c9ae69ff3}}}, @TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x140}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}, @TCF_EM_IPSET={0x10, 0x4, 0x0, 0x0, {{0x1, 0x8, 0xa}, {0x2, 0x0, 0x8}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x8}, {0x6, 0x4, 0x2, "2e3c389b"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x400}, {0x80, 0x800, 0x4, 0x1, 0x0, 0x1}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0xb}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}, @TCA_EMATCH_TREE_LIST={0x1b8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x2, 0x0, 0x0, {{0xa, 0x4, 0xd17}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x617f, 0xeb, 0x1}, {0x7, 0xb, 0x1}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="88727562", @TCF_META_TYPE_VAR='EF', @TCF_META_TYPE_VAR="020e41b0ea39470920d8", @TCF_META_TYPE_VAR="8f", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="9ebd06fbc7", @TCF_META_TYPE_VAR="00ebe83c", @TCF_META_TYPE_VAR="319335c0", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR=',*L']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x6f, 0x1}, {0xc, 0xd, 0x1}}}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_VAR="c4118488", @TCF_META_TYPE_VAR="e77b7eb0b32c16", @TCF_META_TYPE_VAR="ebeb", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="536e0090", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1831503b8120481c64", @TCF_META_TYPE_VAR]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0xfff}, {0x3, 0x0, 0x7, 0x9}}}, @TCF_EM_CONTAINER={0xec, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x8}, "447447a1e194eea8fbd68d34d4344747e346841727fa0dd68381f7ff7f4afb9189f21cd6147b22db311b4bc79241a9f6bfd789e9b6e1bf764b5cf024bb116c9e7f55ee26b6bb14cbb70190f199a18a98e6cc3493261d0c9a965974779ce32e8a832e670a84d8a2a5505f8433617da95802c97aa36a379793398d38be5dd592433c0e359015c9089509ab77dd87823bdee094f762d7b043963444b430b2148a7d9ff5acedecc77edf4b517d5be588c9a02a78a306a3ca0b0810a560e594b47d20e1060c0d979f4881920878072fb01f6363c5fb23827d8d6ff46f84afa8a0e6"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x400}, {0x3, 0xe86b, 0x4}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xe}, {0x4, 0x0, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8d}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa12}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0x8, 0x0, 0xf6a2}, "4cbb20bb07bed9e894c49b8b4f67c69b0472bb1ac30e3bc9c8d065ebf1bc7529690455d63ecdcc0c7b5c"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x80, 0x3, 0xb10}, {0x2, 0x1, 0x8b7e}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}]}}]}, 0x1490}, 0x1, 0x0, 0x0, 0x40040}, 0x4) connect$bt_l2cap(r11, &(0x7f0000002b00)={0x1f, 0xfc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002d40)={r10, 0x0, 0x5a, 0x1b, &(0x7f0000002b40)="5f9a93e1c86dd55a472cdff7d1d389b2acc17282d97cd5c1608a1cf5c174ace97aa28251d340b4e48a34ba25851303f41c644af772b3d0ef79c0e53ba1b9a92a5ffce6b673ef4a8b7c17597df05f6b1a71763228a53e2ed6bb7b", &(0x7f0000002bc0)=""/27, 0xe, 0x0, 0xf5, 0x12, &(0x7f0000002c00)="07fd5bf782f88c52ce9ee0a03904c850fb7485e1de9bd5a47790aaffb9b8ffeeceb69d8d336ccb9e7cc43633ecf7e4e485ae88dfcaac8234a682a2d68d71e65e1d3bcefa48f57c76e4a8adc5cd760c27589154333e880f0643e71ded17b5cd19fccfb1235a1d48b13e4f8c04496d3a3f6b67ee1c06bf40b0b4c09d60b509bb406d687c802a2caaf2b79d699dcae0c883d3073f921b762f7aac4071995719ad913318bead07c078547fa6258717a2ecf78ceff0ed183a04e5e4457f9ee5e988c10c2f47332aa70277c98fc861d385a6c505ee348f2a2a1e6ae9c98a37fada501cde7ace5ad0f0487d45ddbc247c7f7c886f9a335c32", &(0x7f0000002d00)="7b3d0a2d7169891ffed75ec293d074766496", 0x0, 0x0, 0x40}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002d40)={r10, 0x0, 0x5a, 0x1b, &(0x7f0000002b40)="5f9a93e1c86dd55a472cdff7d1d389b2acc17282d97cd5c1608a1cf5c174ace97aa28251d340b4e48a34ba25851303f41c644af772b3d0ef79c0e53ba1b9a92a5ffce6b673ef4a8b7c17597df05f6b1a71763228a53e2ed6bb7b", &(0x7f0000002bc0)=""/27, 0xe, 0x0, 0xf5, 0x12, &(0x7f0000002c00)="07fd5bf782f88c52ce9ee0a03904c850fb7485e1de9bd5a47790aaffb9b8ffeeceb69d8d336ccb9e7cc43633ecf7e4e485ae88dfcaac8234a682a2d68d71e65e1d3bcefa48f57c76e4a8adc5cd760c27589154333e880f0643e71ded17b5cd19fccfb1235a1d48b13e4f8c04496d3a3f6b67ee1c06bf40b0b4c09d60b509bb406d687c802a2caaf2b79d699dcae0c883d3073f921b762f7aac4071995719ad913318bead07c078547fa6258717a2ecf78ceff0ed183a04e5e4457f9ee5e988c10c2f47332aa70277c98fc861d385a6c505ee348f2a2a1e6ae9c98a37fada501cde7ace5ad0f0487d45ddbc247c7f7c886f9a335c32", &(0x7f0000002d00)="7b3d0a2d7169891ffed75ec293d074766496", 0x0, 0x0, 0x40}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20410600}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20410600}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendto$inet6(r11, &(0x7f0000002f00)="b3a8d0eca85966faee3c15a1750747d9105667ac36e64c7b154b69f6c390f51a09dbe66e28ef1b31beb8c2c3a1c56311670989dbcebaf4ce220f123a", 0x3c, 0x845, &(0x7f0000002f40)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffeffff}, 0x1c) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000002fc0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x1c, r13, 0x808, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000086) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x1c, r13, 0x808, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000086) r14 = openat$cgroup(0xffffffffffffffff, &(0x7f00000030c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r14, &(0x7f0000003100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) openat$cgroup_ro(r14, &(0x7f0000003100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) 4m4.048172474s ago: executing program 0 (id=1776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x9) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000140)=[{0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x1, 0x2}, 0xfe}, {0x2, 0x2, {0x2, 0xf0, 0x1}, {0x1, 0xff, 0x1}, 0xfe, 0x2}, {0x1, 0x2, {0x1, 0x1, 0x2}, {0x1, 0xf0, 0x1}, 0xfe, 0x3}, {0x0, 0x0, {0x2, 0xf0, 0x4}, {0x1, 0xff, 0x2}, 0x0, 0xff}], 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000001c0)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_skbedit={0x80, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x39, 0x6, "4109a9226863091ebabe1b4208b9a71d9ea381e602df8c418458cb9b31d55566eed75e5c5f875431975ffa05f9673d057327cb6f8f"}, {0xc, 0xa, {0x0, 0x1}}, {0xc, 0x9, {0x3b, 0x2}}}}]}]}, 0x98}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0xfd90, &(0x7f0000000080)={0x0, 0x4c}, 0x7, 0x0, 0x0, 0x98a594acf120b0d4}, 0x40) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010065bd7000fedbdf250100000008000700e00000010e0101006e6574186c326361700000000800020005e5fffff0a2c851d26c587802000000"], 0x48}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x398, 0x0, 0x0, 0x148, 0x1b0, 0x148, 0x300, 0x240, 0x240, 0x300, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1b0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {}, 0x84, 0x0, 0x60}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x6, [0x4e23, 0x4e22, 0x4e23, 0x4e23, 0x4e22, 0x4e31, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e20, 0x4e22, 0x4ea0, 0x4622, 0x4e23], [0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@inet=@udp={{0x30}, {[0x4e20, 0x4e21], [0x4e24, 0x4e22], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x1, 0x5, 0x1], 0x3}, {0x1, [0x1, 0x2, 0x7, 0x1, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073087a31000000010900030073797a320000988114000000110001bb5a397f52fd575e8403d83f8fed4adcc300000000453e3e31e6537f651d4664b330a152ea1c4d70b85b921395d2b03bd88da538c03d3af94bfd0b6ece245ef5ee52ba15cee3b3e5030000002b6c1ab53031fd094c4286e6879751a5a5eec49bc93bc98cccc3459a2636099d35a67a06e589dc8c4a8837c65bad5581db000459ec22a4ed"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt(r7, 0xfffffffb, 0x30, &(0x7f0000000200)=""/117, &(0x7f0000000000)=0x75) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="07ad000000000000003a9efee600000000000232ef721fe24100000000001375050000000000"], 0x2c}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r11}, &(0x7f0000000080), &(0x7f0000000300)}, 0x20) 4m3.768239647s ago: executing program 32 (id=1776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x9) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000140)=[{0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x1, 0x2}, 0xfe}, {0x2, 0x2, {0x2, 0xf0, 0x1}, {0x1, 0xff, 0x1}, 0xfe, 0x2}, {0x1, 0x2, {0x1, 0x1, 0x2}, {0x1, 0xf0, 0x1}, 0xfe, 0x3}, {0x0, 0x0, {0x2, 0xf0, 0x4}, {0x1, 0xff, 0x2}, 0x0, 0xff}], 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000001c0)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_skbedit={0x80, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x39, 0x6, "4109a9226863091ebabe1b4208b9a71d9ea381e602df8c418458cb9b31d55566eed75e5c5f875431975ffa05f9673d057327cb6f8f"}, {0xc, 0xa, {0x0, 0x1}}, {0xc, 0x9, {0x3b, 0x2}}}}]}]}, 0x98}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0xfd90, &(0x7f0000000080)={0x0, 0x4c}, 0x7, 0x0, 0x0, 0x98a594acf120b0d4}, 0x40) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010065bd7000fedbdf250100000008000700e00000010e0101006e6574186c326361700000000800020005e5fffff0a2c851d26c587802000000"], 0x48}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x398, 0x0, 0x0, 0x148, 0x1b0, 0x148, 0x300, 0x240, 0x240, 0x300, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1b0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {}, 0x84, 0x0, 0x60}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x6, [0x4e23, 0x4e22, 0x4e23, 0x4e23, 0x4e22, 0x4e31, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e20, 0x4e22, 0x4ea0, 0x4622, 0x4e23], [0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@inet=@udp={{0x30}, {[0x4e20, 0x4e21], [0x4e24, 0x4e22], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x1, 0x5, 0x1], 0x3}, {0x1, [0x1, 0x2, 0x7, 0x1, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073087a31000000010900030073797a320000988114000000110001bb5a397f52fd575e8403d83f8fed4adcc300000000453e3e31e6537f651d4664b330a152ea1c4d70b85b921395d2b03bd88da538c03d3af94bfd0b6ece245ef5ee52ba15cee3b3e5030000002b6c1ab53031fd094c4286e6879751a5a5eec49bc93bc98cccc3459a2636099d35a67a06e589dc8c4a8837c65bad5581db000459ec22a4ed"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt(r7, 0xfffffffb, 0x30, &(0x7f0000000200)=""/117, &(0x7f0000000000)=0x75) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="07ad000000000000003a9efee600000000000232ef721fe24100000000001375050000000000"], 0x2c}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r11}, &(0x7f0000000080), &(0x7f0000000300)}, 0x20) 3.259660835s ago: executing program 3 (id=4116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a10000040000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0106000000000000000009248a00000004000480a120e3b1aaad52943d21e92af67df37eb5a60cd5fbf1eeda466a79e7b19fa93d312fead95af714b170141c0c1d73e4d48e0cc2831a2a78a4c683c8810d551a6fc5c3"], 0x18}}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b~', 0x2}], 0x1, 0x0) (async) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b~', 0x2}], 0x1, 0x0) mmap(&(0x7f00003f4000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x8fb8a000) (async) mmap(&(0x7f00003f4000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x8fb8a000) vmsplice(r3, &(0x7f00000007c0)=[{&(0x7f0000000340)="b7e7ed", 0x3}], 0x1, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94020000", @ANYRES16=0x0, @ANYBLOB="120026bd7000fedbdf251200000008000600010000800800070004000000080007000000000a08000700ff000000080009008574000008000800ffff000038000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000140002006e6574706369300000000000000000000800070005000000080006000800000008000700ffffffff"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94020000", @ANYRES16=0x0, @ANYBLOB="120026bd7000fedbdf251200000008000600010000800800070004000000080007000000000a08000700ff000000080009008574000008000800ffff000038000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000140002006e6574706369300000000000000000000800070005000000080006000800000008000700ffffffff"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='Iuxx', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) (async) setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='xen_mmu_release_ptpage\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) 3.029562798s ago: executing program 3 (id=4119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='7\x00\x00\x00) \x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="d2f779744623926a4936afa6b80019d784e125a70e45573b89f9a16156f26ed528c2a1d24a366073febda211438ad357f2d1e5936141052f39a6f07ed9aff77b993e12a01f82e09c0a8f5a48f2bf3c6da049e5fc1bad0b8e00a007336c7996c30a31d4a05848ba680d00ef390f5b8f76fda2ece12a01da164c7d974d3c4eaacc41cb95ae5557eb888cdca0", @ANYRES64=0x0], 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) syz_emit_ethernet(0xf8, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xc2, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0xa, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d12980"}]}}}}}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="10080400000000002c002b80080003001100000008000100", @ANYRES32, @ANYBLOB='\b\x00\b'], 0x4c}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 2.804354739s ago: executing program 3 (id=4120): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r3 = accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r3) write(r0, &(0x7f00000002c0), 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r7, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2ccead6826e600e7ff", @ANYRES16=r9, @ANYBLOB="07ad0000000000000000010000000000000002410000001000137564703a73797a3000000000"], 0x2c}}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r12, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000100)="e6", 0x1}], 0x10000000000000d4) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c800000", @ANYRES16=r10, @ANYBLOB="010d0000000000000000030000002800018014000280080003000f00000008000400060000000d0001007564703a73797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 2.573672617s ago: executing program 2 (id=4126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) 2.412349933s ago: executing program 2 (id=4130): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES64=0x0], 0xfc}}, 0x4000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800a400", @ANYRES16=r7, @ANYRES64], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 2.345207552s ago: executing program 4 (id=4131): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbdfedbdf253503000008000300d1265f3e87574cd5b6066f9ab5e0cb71851f5bf1300e27e31ec1bd24a0b783153d7a0f", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00'], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 2.005545712s ago: executing program 2 (id=4132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0x7}], 0x3}, 0x8001) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) (async) r6 = accept4(r2, 0x0, &(0x7f00000000c0), 0x400) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0xe0, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x81}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1ec2}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xe0}}, 0x40000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, r5, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x336, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x11) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b88fcff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1.872354152s ago: executing program 1 (id=4133): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) (async) r6 = socket(0x8000000010, 0x2, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000200)=0x44c3af32, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r4, 0x2, 0x1, 0x8000ff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) sendmsg$nl_route(r5, 0x0, 0x400c0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, 0x0, 0xff00) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.80752406s ago: executing program 1 (id=4134): ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000200)={'pim6reg0\x00', {0x2, 0x0, @broadcast}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000b1c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x4c}}, 0x8000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) socketpair(0x1e, 0x0, 0x1, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x30, 0x0, &(0x7f0000000240)="6ebca58ce6ffffffffc9252388f74c818387fe2a8d4ca77531639bd6b80074fda1a93dea20ed52ab9b69dd560cd8d20c", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.72505764s ago: executing program 2 (id=4135): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="6aaad7b4a566e0ef49ea6cb0cdf8c7927061ff19f953ae968c69dfcba81aa4a1d0665790351f71ca14ef0728a828c5926b87e11342eaaf7be8e6bb433ea9b06f6361dd2d317a381fdaa7ddebb45ba9f6220b5e", @ANYBLOB="01002dbd7000fedbdf2531000000180001"], 0x2c}}, 0x2000c800) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000003"], 0x114}], 0x1}, 0x0) 1.715214454s ago: executing program 3 (id=4136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES64=r0], 0x60}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2, 0x14, 0x1, 0x5, 0x20, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in=@loopback, 0x22, 0x0, 0x14}, @sadb_lifetime={0x4, 0x3, 0x5, 0x10, 0xfffffffffffffffb, 0x81}, @sadb_key={0x10, 0x9, 0x390, 0x0, "4232cbbac5f047f03ad194fc869cbf19662c0b6e9665716cedf17fec9d027afa5b9aa56753b9d70dea58648a3cd0808021a51c74a614fb2efce188c721ca0dd44da1f3e8ee73e4836e493c6723794f9d9da311cb86120a5d98aabe62d53a581c21a8617d1305f5999d12a4e67ce071b7a2cb"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_lifetime={0x4, 0x2, 0x4338, 0x9, 0xb0f, 0x2}]}, 0x100}}, 0x20000050) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r5, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$sock_cred(r6, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000100)=""/208, 0x8000, 0x800, 0x7f, 0x3}, 0x20) 1.600386815s ago: executing program 3 (id=4138): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200)=0x7, 0x12) (async) syz_genetlink_get_family_id$devlink(0x0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000aa9232f43b6e7be41b0b004a5aedb2237ecf7ee3ac1093670c337f49ddf3a3f54e5b1ff49dffb5830ffe3ea79db62da877c16bfacde11b40129a8b999648149b31e20102dceceebfe2", @ANYRES16=r4, @ANYBLOB="000200000000fcdbdf2501000000080001000000000004000480080002000100000004000880"], 0x2c}}, 0x0) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x7ca8e000) (async) writev(r2, &(0x7f0000000080)=[{0x0}], 0x1) (async) write(0xffffffffffffffff, 0x0, 0x0) 1.504492978s ago: executing program 4 (id=4139): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xe365e39d0c265083}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000845}, 0x280040c1) syz_emit_ethernet(0x9e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @private1}}}}}}, 0x0) (async) syz_emit_ethernet(0x9e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @private1}}}}}}, 0x0) 1.504089076s ago: executing program 2 (id=4140): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030000000000080006000001000005000d00010000000800060009f300000800080009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000500)={0x0, 0xb}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000700)={r3, 0x3dbf}, 0x8) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe8000000000000000000000000000bbc9100000000000000000000000000000000107200000000006000000bb2c0000000000000000000000000000000000000000000000001800000000000000290000000400000000000000000000000801"], 0x180}, 0x20000814) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x7, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x61, 0x0, 0x3, 0x1}, @const={0x7, 0x0, 0x0, 0xa, 0x2}, @const={0x1, 0x0, 0x0, 0xa, 0x3}, @const={0x6}, @const={0x3, 0x0, 0x0, 0xa, 0x4}, @struct={0xd, 0x8, 0x0, 0x4, 0x0, 0x8, [{0x4, 0x4, 0xffff1b76}, {0x6, 0x3, 0xa}, {0x9, 0x3, 0x2}, {0x5, 0x1}, {0x3, 0x1, 0x5}, {0x10, 0x2, 0x10}, {0x9, 0x4, 0x5}, {0x5, 0x5, 0x3619}]}, @const={0xd}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0xd, 0x2}, {0xc, 0x2}, {0x3}, {0xd}, {0x2}, {0x3, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x0, 0x0, 0x61]}}, &(0x7f0000000280)=""/119, 0x12f, 0x77, 0x1, 0x7c4}, 0x28) syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="ca1141fd8d017ea358a18c23a670e8163f88afe23dd52998b299169e9d1ebc95b76e96b21c52c02e861723777b24b7262e9fd6ac4580e13a96eaafd2a92ef951d432d296513c561d89febfceb602aeb05c844bfdeb4125b535223b1673a79e5fa787d10a2efee54d12394fd82d01fac6daf6210487a62905b2960a9eb28a6465df21e2a39eaaf250c9688fe0b320a3673f54251383ad08943037a2a9d79638ed13464b4a074af39abf5ae4d59d55a0d9f45afdd10c6ee7fde3003e568f94970bf7e1aff61370765a541da811b1471a6a36c4007092d18e324891ab657fcb0f7926c80f812658"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, r4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000740)={'vlan0\x00'}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000d5b31088454d1d9b69a565134dd778ba1b41d5318c2edbfaf21c4b9dca7dc8b6f5a487df4a5e93", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060003000000"], 0x30}}, 0x0) 1.503397353s ago: executing program 3 (id=4141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x20004880) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) (async) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x114, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0xd8, 0x16, 0x0, 0x1, [{0xd4, 0x14, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0xfffffffffffffeea}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x4, 0x7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x400, 0x401, 0x800, 0x88a8}}, {0x14, 0x1, {0x2, 0x55c, 0x4, 0x88a8}}, {0x14, 0x1, {0x4f, 0xe6, 0x2, 0x88a8}}, {0x14, 0x1, {0x7, 0xe48, 0x6, 0x88a8}}, {0x14, 0x1, {0x80, 0x6db, 0x2, 0x8100}}, {0x14, 0x1, {0x28d, 0xb67, 0x10001, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x99}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x3ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x1}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x114, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0xd8, 0x16, 0x0, 0x1, [{0xd4, 0x14, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0xfffffffffffffeea}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x4, 0x7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x400, 0x401, 0x800, 0x88a8}}, {0x14, 0x1, {0x2, 0x55c, 0x4, 0x88a8}}, {0x14, 0x1, {0x4f, 0xe6, 0x2, 0x88a8}}, {0x14, 0x1, {0x7, 0xe48, 0x6, 0x88a8}}, {0x14, 0x1, {0x80, 0x6db, 0x2, 0x8100}}, {0x14, 0x1, {0x28d, 0xb67, 0x10001, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x99}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x3ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x1}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) 1.444503304s ago: executing program 4 (id=4142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$packet(0x11, 0xa, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r4, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000000a00)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void, {0x8100, 0x2, 0x1}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x8, 0x8b, 0x64, 0x0, 0x86, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x0, 0x85, 0x0, 0x7, [0xc26a000, 0x3]}, @lsrr={0x83, 0x0, 0xc3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @broadcast, @rand_addr=0x64010102, @private=0xa010101, @broadcast]}, @ra={0x94, 0x0, 0x1}, @rr={0x7, 0x0, 0x38, [@local]}, @timestamp={0x44, 0x0, 0xab, 0x0, 0xf, [0xffff]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3, [], "b0d9a177e95e12981cec09dffaa227f3d73aa80f7b637d090eddb398b6e105a57990b66956e25470fe331b634a84cca10f9b26b5e0ffd55fa0445199840a2be3997ffd2554ed8dd280b93e2691315f9c8d"}, {0x1}, {0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7f, 0x0, 0x1, 0x1, 0x7, 0xc}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x2, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x2, {0x203, 0x3, 0x3, 0x5, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 1.254989378s ago: executing program 4 (id=4143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b0500030000000000090001"], 0x80}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000500)={0x0, 0x2f4}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000005c0)={r4, @in6={{0xa, 0x4e23, 0x8001, @local, 0x4}}, 0x8, 0x200}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x38}, 0x10001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x3b, 0x8, 0x4, 0x8, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8000, 0x4, 0x3000}}) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=@bridge_setlink={0x30, 0x13, 0x800, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x8000, 0x28300}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7df6}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="97020000000000005c00128009000100626f6e64000000004c00028008000a00000000001800088000000000e00000017f00000164010102000000000500010000000000080007"], 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="016f08004500004000000000008490783fffffffaca9c438131988e8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba00000090780018090300050a00000000000000000008d58838068b91000000"], 0x44) 1.188389543s ago: executing program 1 (id=4144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002cbd7000ffdbdf253000000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000700000048000000060036001ab100000600360032000000060036000c0000000600360020000000060036001d01000006003600230000000600360008000000"], 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x44000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x5, @local, 0x8}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f00000004c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x40}, 0x6008045) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x12}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0bac0f00"}, @typed={0x4, 0x1d}]}}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.1849178s ago: executing program 5 (id=4145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) unshare(0x2020600) ppoll(&(0x7f0000000640)=[{r0, 0x8009}], 0x1, &(0x7f0000000700)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x198, 0xfeffffff, 0x268, 0x268, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2b, @rand_addr=0x64010100, @loopback, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3a, @private, @rand_addr, @gre_key, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f0000000280)="6dc20bd94a2682194afdc730859f7140f44df97a80fd1570794ba1d94348d2ada80bb246b1f7e69fbc57436583581cd5407a27f8f77a42270849fe6535cee45d7a136a130b376980db72bd99da0900c2eccfb96ca71e4a6e9d0cca1472817a19672eb1b2e1af8d65164e8ecf19ba48d1281a40645cb013fed845a5e867ca27e76703bc25623fc354a2b286d839470f39ad5476b7a90ab47866a5773c9343a6d7b8d1d363002f6ea7ba7def15f2be867cbc5f0897e94fdb") sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 1.019264869s ago: executing program 1 (id=4146): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = socket(0x1, 0x5, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x48850}, 0x400c0e4) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0), 0x0, &(0x7f0000001200)=""/97, 0x61}, 0xffffffff}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001280), 0x0, &(0x7f00000014c0)=""/45, 0x2d}, 0x5}], 0x3, 0x12000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000004180)={0x4}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x3e8, 0x0, 0x70bd2b, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0) unshare(0x28000600) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ppoll(&(0x7f00000001c0)=[{r1, 0x2609}], 0x47, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYBLOB="6400000010003704000000000000000000f9e3000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='./file0\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 847.520903ms ago: executing program 4 (id=4147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x50, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2281, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x7017}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4cc4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 756.368406ms ago: executing program 5 (id=4148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x80000001}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfffffffd}]}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000014000000090a010200000000000000000700000064000000200a01080000000000000000070000010900010073797a31000000000900010073797a30000000000c0005"], 0xc0}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xb4, 0x1, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x84}, 0x1) 740.02537ms ago: executing program 1 (id=4149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) 658.909811ms ago: executing program 4 (id=4150): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x7b8, 0x3a8, 0x0, 0x1b0, 0x0, 0x1b0, 0x6e8, 0x6e8, 0x6e8, 0x6e8, 0x6e8, 0x6, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x0, 0xffffffff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2={0xfc, 0x2, '\x00', 0x80}, [], [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x7fffffff], 0x8b5d8323c1cc404}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffffc, 0xc, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x4}, {}, {}, 0x0, 0x18}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff], 'nicvf0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4218, 0x80000000, 0x1, 0x3, 0x9, 0x8000, 0x8, 0x3ff]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x17}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x4, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x44}, @ipv6=@remote, 0x2f, 0x1f, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x818) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 592.544837ms ago: executing program 5 (id=4151): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 588.155331ms ago: executing program 2 (id=4152): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r4, 0x0, 0xffffffff000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f00000000c0)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) splice(r7, 0x0, r8, &(0x7f00000002c0), 0x6, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x0, 0x0) 469.282452ms ago: executing program 5 (id=4153): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) r1 = socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000080), 0x4) r3 = socket$netlink(0x10, 0x3, 0x2) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000100)={r0, r1, 0x2, 0x1c, &(0x7f00000000c0)="d85b9539fc892cebc38114f25a9c8048b44e389747617b2710ae12ab", 0xb, 0xd, 0x2, 0x9, 0x50, 0x0, 0xffff, 'syz1\x00'}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='pimreg1\x00', 0x10) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x7, 0x14}, 0xc) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8, 0x9, 0x26be, 0xa88, r5, 0x6, '\x00', 0x0, r6, 0x2, 0x2, 0x2, 0x4}, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000340)) (async) r8 = accept4$nfc_llcp(r6, &(0x7f0000000540), &(0x7f00000005c0)=0x60, 0x80000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000640)={0x0, 0x3c, "ef7c38eecbb6e84ada8c5b9640ae7bb32487e19403ec63a304e679277b3d6d4a1eddd3d275e49a123e8017bda432dd1a7ec4bbc63650307e8effc148"}, &(0x7f00000006c0)=0x44) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000700)={r9, 0x15, 0x22, "93e82087a5bf56beafea7846df8925fca3b6d79a2e2924a43e3d5be74ec1b25f7d7c"}, 0x2a) (async) socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000740)={0x2, 0x70, "fd24aad771b42cc7dfa92f562eda46d9be0052b07d72b4875a9f04bc844d22aa8f350ffff4dbfe1166a430b07269e2fa1198be79d588630edb21e08699c4941bd8cf6d0a653ffbabfd52cd25b8ec413fb5409c2fefe54d30c827b456a00d65451cbe53c21a8524d72dff8d1636e0cc4d"}) (async) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000800)={'filter\x00', 0x0, 0x0, 0x0, [0xf, 0xc1a, 0x5, 0x3, 0x9, 0x4], 0x4, &(0x7f00000007c0)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000008c0)={'wg0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000900)={0x0, 0xc4eb, 0x0, [0x10001, 0xfffffffffffffffb, 0x7, 0xfffffffffffffbd9, 0x2], [0x100000001, 0x5, 0x9, 0x0, 0xffffffff, 0x1, 0x7, 0xffffffffffffa47a, 0x8, 0x8, 0x6, 0x9, 0x7c, 0x8, 0x40, 0xc, 0x8369, 0x5, 0x6, 0x200, 0x3610, 0x4, 0x7, 0x3a, 0x8, 0xcc, 0x0, 0x1c3c, 0x6, 0x8, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x8, 0x8000000000000001, 0x3, 0x4, 0x3, 0x2, 0x8, 0x4, 0x4, 0xffffffff, 0x7, 0xf, 0x9cb, 0x9b, 0xf, 0x8e4c, 0x0, 0x800, 0x7f, 0xe37, 0x9, 0x10001, 0x4, 0x8, 0x2, 0x86, 0x3, 0x3ff, 0x12b4, 0x3, 0xff5, 0x5, 0xfffffffffffffff9, 0x8, 0x0, 0x0, 0x1, 0xffff, 0xffffffffffff906e, 0x200, 0xfff, 0xb994, 0x0, 0xfffffffffffffff8, 0x9, 0x1e6, 0x5, 0x0, 0x9, 0x7, 0x3, 0x40, 0x0, 0x400, 0x8, 0x8, 0x80000001, 0x8, 0x7, 0x6, 0x2, 0x545, 0x400, 0xd, 0x3, 0x4, 0x4000000000000, 0x8, 0x1b, 0x9252, 0x7, 0x4, 0x81, 0x8, 0x4, 0x10001, 0x81, 0x8, 0x7b33, 0xb, 0xfffffffffffff5ca, 0x7ed, 0x1a60000000, 0x6, 0x0, 0x36c, 0xbf]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000d40)={r10, "73f87aabbd66392623699bf2627f2d1a"}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x24, r11, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x4810) (async) r13 = socket(0x1, 0x2, 0x1) shutdown(r13, 0x1) 468.848748ms ago: executing program 1 (id=4154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdf9, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd30, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x40804) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) (rerun: 32) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x40010) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) (async, rerun: 64) close(0x3) (rerun: 64) 144.354778ms ago: executing program 5 (id=4155): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f00000000c0), {[{{@arp={@multicast2, @local, 0xff, 0xff000000, 0xc, 0xf, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0x7f]}}, 0x2, 0x0, 0x4f0f, 0x7f, 0x5, 0x1, 'syzkaller1\x00', 'pim6reg\x00', {0x80}, {0xff}, 0x0, 0x8c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0xffffffff}}}, {{@arp={@rand_addr=0x64010102, @loopback, 0xffffffff, 0xff, 0x0, 0x1, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff]}}, 0xfffd, 0x3, 0x401, 0x10, 0x0, 0x80, 'veth0_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@remote, @empty, @loopback, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x19}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000006000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 0s ago: executing program 5 (id=4156): sendmsg$rds(0xffffffffffffffff, &(0x7f00000037c0)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000002240)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/34, 0x22}, {&(0x7f0000001080)=""/167, 0xa7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/243, 0xf3}], 0x5, &(0x7f0000003600)=[@rdma_args={0x48, 0x114, 0x1, {{0x487}, {&(0x7f00000022c0)=""/11, 0xb}, &(0x7f0000002400)=[{&(0x7f0000002300)=""/129, 0x81}, {&(0x7f00000023c0)=""/42, 0x2a}], 0x2, 0x2a, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x6}, &(0x7f0000002440)=0x2, &(0x7f0000002480)=0x8001, 0x8, 0x6, 0x0, 0xc5, 0x4, 0x3b}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x68}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000024c0)=""/4096, 0x1000}, &(0x7f00000034c0), 0x10}}, @fadd={0x58, 0x114, 0x6, {{0x7e10, 0xff}, &(0x7f0000003500)=0x4afb, &(0x7f0000003540)=0x4, 0x4906723a, 0x6161, 0xd, 0x4, 0xc803f7c31e3b090b, 0x466}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x5}}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0xa3}, &(0x7f0000003580)=0x6, &(0x7f00000035c0)=0x7fff, 0x6, 0x8, 0xd9, 0x4000000000, 0x41, 0x3ca}}], 0x1b0, 0x44}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x14, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000003a40)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003a00)={&(0x7f0000003980)={0x7c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:apt_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x26040081}, 0x4000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000003b80)={&(0x7f0000003a80), 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x17}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x4000080) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000003bc0), 0x2, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003c40), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000003dc0)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003d80)={&(0x7f0000003c80)={0xf8, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd46f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cfb50a9}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e61ae14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x756a0baf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69da}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc36}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b834e60}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fc5fe6a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x50bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12ed6088}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3063be6e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e5d5811}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0xf8}}, 0x1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003e40), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x1c, r5, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffffb}]}, 0x1c}}, 0x45) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003f80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000003fc0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000004000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000041c0)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004180)={&(0x7f0000004040)={0x120, r7, 0x324, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8e}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d2d8ddefe70b326e6fe2d707b10de0a69f57db65d22432b43582250b17534e54"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e49e1b99fc21b99818fe5ae65ff09b58"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c22e7d36d8edd8cdada9b7603baa0652"}]}, @NL802154_ATTR_SEC_KEY={0xa4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a84ad3b73accc643e071cd6ed2af8890"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f58354458e132ef26dfb1e4a9ff12ce009a0773c9f53ca6c997bed3d0fe2119c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ac4aab6ab71c33dea54a06897947fafb"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b7c2ae94f1d868554887596f8894bc9a5309eb4ed0f03c298248495f8da71ffb"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1964fece9d6cc592bca39ebe82c1069e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0881db3d7c4cbc3ab4d78336082c2525"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x80) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004200), &(0x7f0000004240)=0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000042c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f00000044c0)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004480)={&(0x7f0000004300)={0x170, r3, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEYS={0xa8, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0x4}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x13, 0x4, "a851e93168b17f09dd9ce959a0a957"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f4a1efa5f23e89f118a05567b4"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x7, 0x4, "fb7b02"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e1cd42d9c"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ff09011fdf"}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffad}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xfa}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x251}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xb75a}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffffffffffffffe}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x7e}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}]}, 0x170}, 0x1, 0x0, 0x0, 0xc054}, 0xc004) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000004500), &(0x7f0000004540)=0x8) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000004940)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004900)={&(0x7f00000045c0)={0x320, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "0d4a27b8df113723aa2e0ec9567d3b994181c1d830dc0e04866e"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "a1d1ef2d28ea0cfc5a6cc5735886dd04a9d781fc1f3cca14ec7df78261d53e5893"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "30480b2a8f54f5f66c3728db0235171623dd21236402ecba3c7c70d88bba"}}, @TIPC_NLA_NODE_ID={0x48, 0x3, "d187d1b94bb5f16c8b0246e418f3f0c1636c852783f674177df926398432224f59d82c1e2252868f9804090a78eee00eea23521d06aafae7f4c5cfc31b025a24425695eb"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbec}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1242}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x2000c050}, 0x48001) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000049c0), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000004ac0)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a00)={0x6c, r11, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x47, 0xa8, @random="1184ef00e597b27b4776417c5439c7de5e2f85cbd733246e5f4a8901b2dd5ea32fdea920c8d68904253b0ffb84be5d6348629f5b9f19ce437f6a664a83808b4850977a"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4804}, 0xc0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000004bc0)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b40)={0x34, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) socket$netlink(0x10, 0x3, 0x14) r12 = socket(0x21, 0x800, 0x1bf6) bind$alg(r12, &(0x7f0000004c00)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(rfc4106(morus1280-generic))\x00'}, 0x58) kernel console output (not intermixed with test programs): to 1000 [ 391.167795][T16690] lo speed is unknown, defaulting to 1000 [ 391.521711][T16718] __nla_validate_parse: 2 callbacks suppressed [ 391.521729][T16718] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2774'. [ 391.552898][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2775'. [ 391.577310][T16720] netlink: 'syz.2.2775': attribute type 1 has an invalid length. [ 391.630915][T16718] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 391.653278][T16718] x_tables: duplicate underflow at hook 3 [ 391.682977][ T30] audit: type=1800 audit(1763425010.140:7): pid=16725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2776" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2909 res=0 errno=0 [ 391.750515][T16727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2778'. [ 391.850303][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'. [ 391.902099][T16733] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.961185][T16736] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2780'. [ 391.980656][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 391.985802][T16740] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2783'. [ 392.002000][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 392.030674][T16738] netlink: 'syz.3.2782': attribute type 1 has an invalid length. [ 392.054361][T16733] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.155275][T16733] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.224888][T16751] wg1 speed is unknown, defaulting to 1000 [ 392.245106][T16733] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.270778][T16751] lo speed is unknown, defaulting to 1000 [ 392.315234][T16753] wg1 speed is unknown, defaulting to 1000 [ 392.336732][T16760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2784'. [ 392.358129][T16760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2784'. [ 392.409057][T16760] syz_tun: entered promiscuous mode [ 392.416730][T16760] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 392.437356][T16760] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 392.471399][T16753] lo speed is unknown, defaulting to 1000 [ 392.598602][ T9661] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.684870][T16744] mpoa:mpoad_close: () going down [ 392.715899][ T9655] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.067944][T16772] batman_adv: batadv0: Adding interface: ipvlan0 [ 393.074330][T16772] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.144444][T16772] batman_adv: batadv0: Interface activated: ipvlan0 [ 393.173399][ T9742] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.197835][T16775] syzkaller0: entered promiscuous mode [ 393.230115][ T9655] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.423128][T16778] 8021q: adding VLAN 0 to HW filter on device bond12 [ 393.915747][T16773] syzkaller0: left promiscuous mode [ 394.105572][T16808] vlan0: entered allmulticast mode [ 394.111829][T16808] bridge_slave_0: entered allmulticast mode [ 394.285674][T16823] geneve2: entered promiscuous mode [ 394.313792][ T9744] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.347611][ T9744] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.398001][ T9744] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.426887][ T9744] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.589733][T16831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.647838][T16837] netlink: 'syz.1.2807': attribute type 11 has an invalid length. [ 394.662160][T16837] netlink: 'syz.1.2807': attribute type 11 has an invalid length. [ 394.942257][T16845] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.037040][T16845] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.099526][T16851] nft_compat: unsupported protocol 0 [ 395.128835][T16845] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.227608][T16845] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.305075][T16855] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 395.313718][T16855] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 395.327420][T16855] tipc: Resetting bearer [ 395.423545][T16860] bond8: (slave erspan0): Releasing backup interface [ 395.447996][T16860] veth0_to_bond: left allmulticast mode [ 395.455416][T16860] veth0_to_bond: left promiscuous mode [ 395.463990][T16860] bridge5: port 2(veth0_to_bond) entered disabled state [ 395.482078][T16860] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.638810][ T9655] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.667845][ T9744] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.716440][ T9655] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.741444][T16876] netlink: 'syz.2.2818': attribute type 10 has an invalid length. [ 395.766570][ T9655] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.792622][T16844] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.144395][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.154085][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.165683][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.176988][T16844] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.188086][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.195761][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.455934][T16844] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.537028][T16881] wg1 speed is unknown, defaulting to 1000 [ 396.556863][T16881] lo speed is unknown, defaulting to 1000 [ 396.625030][T16895] __nla_validate_parse: 9 callbacks suppressed [ 396.625046][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2825'. [ 396.705410][T16844] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.155924][T16881] chnl_net:caif_netlink_parms(): no params data found [ 397.357224][T16881] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.364510][T16881] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.373462][T16881] bridge_slave_0: entered allmulticast mode [ 397.382134][T16881] bridge_slave_0: entered promiscuous mode [ 397.393807][T16881] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.402264][T16881] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.410516][T16881] bridge_slave_1: entered allmulticast mode [ 397.411421][T16931] netlink: 'syz.2.2830': attribute type 1 has an invalid length. [ 397.418969][T16881] bridge_slave_1: entered promiscuous mode [ 397.456053][T16931] netlink: 'syz.2.2830': attribute type 3 has an invalid length. [ 397.467388][T16931] netlink: 'syz.2.2830': attribute type 3 has an invalid length. [ 397.487757][T16931] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2830'. [ 397.511111][T16931] netlink: 'syz.2.2830': attribute type 1 has an invalid length. [ 397.520303][T16931] netlink: 'syz.2.2830': attribute type 3 has an invalid length. [ 397.528668][T16931] netlink: 'syz.2.2830': attribute type 1 has an invalid length. [ 397.532978][T16881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.547301][T16931] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2830'. [ 397.557405][T16931] NCSI netlink: No device for ifindex 162445830 [ 397.571344][T16881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.621596][T16881] team0: Port device team_slave_0 added [ 397.635278][T16881] team0: Port device team_slave_1 added [ 397.672923][T16881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.680159][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.707264][T16881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.728265][T16881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.735234][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.762482][T16881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.779320][T16934] syzkaller0: entered promiscuous mode [ 397.784813][T16934] syzkaller0: entered allmulticast mode [ 397.793094][T16934] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2831'. [ 397.805231][T16934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 397.853538][T16881] hsr_slave_0: entered promiscuous mode [ 397.861362][T16881] hsr_slave_1: entered promiscuous mode [ 397.868767][T16881] debugfs: 'hsr0' already exists in 'hsr' [ 397.874662][T16881] Cannot create hsr debugfs directory [ 398.045233][T16881] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.092602][T16881] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.143794][T16881] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.191787][T16881] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.222531][T16943] netlink: 684 bytes leftover after parsing attributes in process `syz.2.2834'. [ 398.232283][ T5832] Bluetooth: hci5: command tx timeout [ 398.232817][T16943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2834'. [ 398.333418][T16881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 398.343089][T16881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 398.352833][T16881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 398.363317][T16881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 398.429508][T16881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.452515][T16881] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.468715][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.475880][ T9742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.491668][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.498849][ T9742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.663093][T16881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.895552][T16961] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2835'. [ 398.937436][T16961] macvtap1: entered promiscuous mode [ 398.942763][T16961] veth1_to_hsr: entered promiscuous mode [ 398.950181][T16961] macvtap1: entered allmulticast mode [ 398.955570][T16961] veth1_to_hsr: entered allmulticast mode [ 398.983943][T16881] veth0_vlan: entered promiscuous mode [ 399.002466][ T9748] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.052068][ T9744] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.073693][T16881] veth1_vlan: entered promiscuous mode [ 399.100159][ T9744] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.130884][ T9661] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.197188][T16881] veth0_macvtap: entered promiscuous mode [ 399.223451][T16881] veth1_macvtap: entered promiscuous mode [ 399.308256][T16966] wg1 speed is unknown, defaulting to 1000 [ 399.344784][T16881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.380170][T16966] lo speed is unknown, defaulting to 1000 [ 399.423337][T16881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.501974][ T9744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.519342][ T9744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.561535][ T9744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.579976][T17000] smc: net device veth1_to_bond applied user defined pnetid SYZ0 [ 399.602137][T16999] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 399.626466][T16999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.667579][T17007] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2846'. [ 399.683526][ T9744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.701812][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2846'. [ 399.774406][T17014] batadv_slave_0: entered promiscuous mode [ 399.806743][T17011] batadv_slave_0: left promiscuous mode [ 399.895919][ T9744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.932587][ T9744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.960606][T17018] can: request_module (can-proto-4) failed. [ 399.981350][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2851'. [ 400.030797][ T9744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.031517][T17028] syzkaller1: entered promiscuous mode [ 400.039237][ T9744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.055159][T17028] syzkaller1: entered allmulticast mode [ 400.308871][ T5832] Bluetooth: hci5: command tx timeout [ 400.573191][T17058] netlink: 'syz.3.2859': attribute type 13 has an invalid length. [ 400.581744][T17058] netlink: 'syz.3.2859': attribute type 17 has an invalid length. [ 400.715939][T17048] geneve3: entered promiscuous mode [ 400.753078][T17048] geneve3: entered allmulticast mode [ 400.878246][T17058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.979053][T17069] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.020251][T17060] wg1 speed is unknown, defaulting to 1000 [ 401.032468][T17067] tipc: Enabled bearer , priority 0 [ 401.050400][T17058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.082087][T17069] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.113539][T17058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.198852][T17060] lo speed is unknown, defaulting to 1000 [ 401.212104][T17065] tipc: Disabling bearer [ 401.270925][T17069] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.307394][T17097] syzkaller1: entered promiscuous mode [ 401.313644][T17097] syzkaller1: entered allmulticast mode [ 401.340900][T17069] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.494017][ T9661] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.541023][ T9744] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.588578][ T9661] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.612171][ T9748] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.729125][T17119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.810366][T17124] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 402.060372][T17135] veth0_vlan: left allmulticast mode [ 402.079055][T17135] veth1_vlan: left allmulticast mode [ 402.110646][T17135] macvlan0: left allmulticast mode [ 402.121610][T17135] ip6gre1: left allmulticast mode [ 402.152801][T17135] bond4: left promiscuous mode [ 402.170933][T17135] bond4: left allmulticast mode [ 402.199410][T17135] syzkaller0: left promiscuous mode [ 402.219913][T17135] syzkaller0: left allmulticast mode [ 402.235148][T17135] geneve2: left promiscuous mode [ 402.344508][T17135] veth1_to_hsr: left allmulticast mode [ 402.384492][T17135] veth1_to_hsr: left promiscuous mode [ 402.390745][ T5832] Bluetooth: hci5: command tx timeout [ 402.416698][T17135] macvtap1: left promiscuous mode [ 402.431963][T17135] macvtap1: left allmulticast mode [ 402.470855][T17143] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 402.541517][ T9739] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.552407][ T9739] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.567425][T17154] tipc: Resetting bearer [ 402.598218][T17154] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 402.664406][ T9739] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.676887][T17166] __nla_validate_parse: 3 callbacks suppressed [ 402.676903][T17166] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2876'. [ 402.683290][ T9739] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.702949][T14204] syz2: Port: 1 Link DOWN [ 402.719041][T17166] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2876'. [ 402.759681][T17166] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2876'. [ 402.917278][T17176] tipc: Started in network mode [ 402.926365][T17176] tipc: Node identity bf67, cluster identity 4711 [ 402.935306][T17176] tipc: Enabling of bearer rejected, failed to enable media [ 402.944878][T17176] netlink: 'syz.4.2880': attribute type 4 has an invalid length. [ 402.963307][T17176] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2880'. [ 403.084348][T17186] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 403.112596][T17176] .`: renamed from bond0 (while UP) [ 403.438026][T17210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2888'. [ 403.599182][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 403.609809][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'. [ 403.611401][T17218] x_tables: duplicate underflow at hook 2 [ 403.624941][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'. [ 403.636809][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'. [ 403.645696][T17226] netlink: 'syz.4.2892': attribute type 18 has an invalid length. [ 403.676623][T17227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'. [ 403.698225][T17227] netlink: 'syz.4.2892': attribute type 18 has an invalid length. [ 404.119889][T17255] syzkaller1: entered promiscuous mode [ 404.125401][T17255] syzkaller1: entered allmulticast mode [ 404.175769][T17255] syzkaller1: left promiscuous mode [ 404.227187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.237224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.246006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.254196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.264237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.272934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.466615][ T5832] Bluetooth: hci5: command tx timeout [ 405.494344][T17304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.504865][T17304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.532387][T17307] macvtap0: entered promiscuous mode [ 405.569657][T17307] veth1_to_hsr: entered promiscuous mode [ 405.584792][T17307] macvtap0: entered allmulticast mode [ 405.602527][T17307] veth1_to_hsr: entered allmulticast mode [ 405.633242][T17310] macvtap1: entered promiscuous mode [ 405.638865][T17310] macvtap1: entered allmulticast mode [ 405.793800][T17324] xfrm1: entered allmulticast mode [ 406.032063][T17338] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.089651][T17343] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 406.110238][T17338] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.166736][T17338] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.224749][T17338] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.325822][T17315] net_ratelimit: 36 callbacks suppressed [ 406.325839][T17315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.347682][ T9661] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.355920][ T9661] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.401133][ T9661] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.439173][ T9661] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.537251][T17361] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 406.891056][T17390] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20001 [ 407.035445][T17397] wg1 speed is unknown, defaulting to 1000 [ 407.072275][T17397] lo speed is unknown, defaulting to 1000 [ 407.955333][T17437] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 408.068382][T17443] __nla_validate_parse: 16 callbacks suppressed [ 408.068400][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2961'. [ 408.089659][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2960'. [ 408.104771][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2961'. [ 408.180956][T17448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.367183][T17451] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 408.500159][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.511114][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.518925][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.542573][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.554259][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.639618][T17462] wg1 speed is unknown, defaulting to 1000 [ 408.679230][T17462] lo speed is unknown, defaulting to 1000 [ 408.840575][T17470] tipc: Resetting bearer [ 408.909167][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2970'. [ 409.025473][T17490] netlink: 'syz.4.2972': attribute type 3 has an invalid length. [ 409.075264][T17490] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2972'. [ 409.088698][T17495] tipc: Enabled bearer , priority 0 [ 409.096160][T17495] syzkaller0: entered promiscuous mode [ 409.101629][T17495] syzkaller0: entered allmulticast mode [ 409.130718][T17495] tipc: Resetting bearer [ 409.159636][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2973'. [ 409.230317][T17494] tipc: Resetting bearer [ 409.239432][T17503] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 409.248331][T17503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 409.258115][T17504] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 409.265922][T17504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 409.280658][T17494] tipc: Disabling bearer [ 409.353470][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 409.377427][T17508] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2977'. [ 409.387584][T17508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.474773][T17462] chnl_net:caif_netlink_parms(): no params data found [ 409.606947][T17514] hsr_slave_0: left promiscuous mode [ 409.613674][T17514] hsr_slave_1: left promiscuous mode [ 409.674503][T17516] delete_channel: no stack [ 409.676689][T17528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.735239][T17462] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.745043][T17462] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.753224][T17462] bridge_slave_0: entered allmulticast mode [ 409.761408][T17462] bridge_slave_0: entered promiscuous mode [ 409.771381][T17530] tipc: Invalid UDP bearer configuration [ 409.771433][T17530] tipc: Enabling of bearer rejected, failed to enable media [ 409.788713][T17462] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.796801][T17462] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.821457][T17462] bridge_slave_1: entered allmulticast mode [ 409.830019][T17462] bridge_slave_1: entered promiscuous mode [ 409.931100][T17462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.952284][T17462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.055607][T17462] team0: Port device team_slave_0 added [ 410.081494][T17462] team0: Port device team_slave_1 added [ 410.158471][T17549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.176513][T14204] lo speed is unknown, defaulting to 1000 [ 410.182266][T14204] syz1: Port: 1 Link ACTIVE [ 410.235435][T17549] ip6gretap1: entered promiscuous mode [ 410.266829][T17549] ip6gretap1: entered allmulticast mode [ 410.294879][T17462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.331057][T17462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.378632][T17462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.418914][T17462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.437435][T17462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.466971][T17566] netlink: 'syz.5.2993': attribute type 1 has an invalid length. [ 410.474738][T17462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.507300][T17556] wg1 speed is unknown, defaulting to 1000 [ 410.580827][T17566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 410.626994][ T5832] Bluetooth: hci3: command tx timeout [ 410.635540][T17462] hsr_slave_0: entered promiscuous mode [ 410.653325][T17462] hsr_slave_1: entered promiscuous mode [ 410.661261][T17462] debugfs: 'hsr0' already exists in 'hsr' [ 410.667705][T17462] Cannot create hsr debugfs directory [ 410.749039][T17556] lo speed is unknown, defaulting to 1000 [ 410.992397][T17573] wg1 speed is unknown, defaulting to 1000 [ 411.036652][T17589] bridge6: entered promiscuous mode [ 411.041891][T17589] bridge6: entered allmulticast mode [ 411.059298][T17589] team0: Port device bridge6 added [ 411.143004][T17589] bridge0: port 1(team0) entered blocking state [ 411.150039][T17589] bridge0: port 1(team0) entered disabled state [ 411.156769][T17589] team0: entered allmulticast mode [ 411.164286][T17589] team0: left allmulticast mode [ 411.177015][T17591] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 411.196156][T17573] lo speed is unknown, defaulting to 1000 [ 411.450748][T17597] netlink: 'syz.1.3002': attribute type 2 has an invalid length. [ 411.661664][T17599] wg1 speed is unknown, defaulting to 1000 [ 411.761198][T17599] lo speed is unknown, defaulting to 1000 [ 412.149617][T17462] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 412.208026][T17462] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 412.279042][T17462] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 412.317397][T17462] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 412.557656][T17620] tipc: New replicast peer: 255.255.255.255 [ 412.565111][T17620] tipc: Enabled bearer , priority 26 [ 412.706483][ T5832] Bluetooth: hci3: command tx timeout [ 412.839207][T17462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.893034][T17462] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.900482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.924203][T17634] netlink: 'syz.1.3010': attribute type 4 has an invalid length. [ 412.972347][ T9748] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.972711][ T5832] block nbd4: Receive control failed (result -32) [ 412.979537][ T9748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.041354][ T9748] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.048584][ T9748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.622980][T17660] __nla_validate_parse: 13 callbacks suppressed [ 413.622997][T17660] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3018'. [ 413.645462][T17462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.660676][T17658] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 413.683528][ T5885] tipc: Node number set to 3211198464 [ 413.825043][T17462] veth0_vlan: entered promiscuous mode [ 413.874094][T17462] veth1_vlan: entered promiscuous mode [ 413.989228][T17462] veth0_macvtap: entered promiscuous mode [ 414.019446][T17462] veth1_macvtap: entered promiscuous mode [ 414.062183][T17667] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3020'. [ 414.080103][T17462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.118906][T17462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.150560][ T9745] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.171569][ T9745] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.200487][ T9745] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.228762][ T9745] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.361127][T17681] tipc: Enabled bearer , priority 0 [ 414.369444][T17681] syzkaller0: entered promiscuous mode [ 414.374968][T17681] syzkaller0: entered allmulticast mode [ 414.411984][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 414.459386][T17682] tipc: Resetting bearer [ 414.481359][T17675] tipc: Resetting bearer [ 414.497282][T17665] netlink: 'syz.5.3019': attribute type 1 has an invalid length. [ 414.510320][T17665] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3019'. [ 414.520516][T17675] tipc: Disabling bearer [ 414.554746][ T9741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.565721][ T9741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.683340][ T9744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.692509][ T9744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.719849][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3029'. [ 414.789773][T17703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.792330][ T5832] Bluetooth: hci3: command tx timeout [ 414.797057][T17703] IPv6: NLM_F_CREATE should be set when creating new route [ 414.797127][T17703] IPv6: NLM_F_CREATE should be set when creating new route [ 414.823315][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3029'. [ 414.835081][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3029'. [ 414.846720][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3029'. [ 414.888476][T17705] 8021q: adding VLAN 0 to HW filter on device .` [ 414.899625][T17705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.923767][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3029'. [ 414.942799][T17709] netlink: 'syz.2.3030': attribute type 21 has an invalid length. [ 414.952777][T17709] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3030'. [ 415.687941][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805572b400: rx timeout, send abort [ 415.760520][T17741] syzkaller0: entered promiscuous mode [ 415.767656][T17741] syzkaller0: entered allmulticast mode [ 415.893061][T17745] !: renamed from dummy0 [ 416.083997][T17753] tipc: Enabling of bearer rejected, failed to enable media [ 416.196591][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805572b400: abort rx timeout. Force session deactivation [ 416.454055][T17766] wg1 speed is unknown, defaulting to 1000 [ 416.495483][T17766] lo speed is unknown, defaulting to 1000 [ 416.503631][T17770] netlink: 'syz.5.3046': attribute type 1 has an invalid length. [ 416.867699][ T5832] Bluetooth: hci3: command tx timeout [ 417.079811][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.090390][ T5834] syz_tun (unregistering): left allmulticast mode [ 417.104586][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.114287][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 417.125054][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.133669][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.328201][T17785] wg1 speed is unknown, defaulting to 1000 [ 417.339238][T17785] lo speed is unknown, defaulting to 1000 [ 417.378860][T17782] wg1 speed is unknown, defaulting to 1000 [ 417.413208][T17782] lo speed is unknown, defaulting to 1000 [ 417.479160][T17798] bridge_slave_0: left allmulticast mode [ 417.485331][T17798] bridge_slave_0: left promiscuous mode [ 417.495017][T17798] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.514049][T17798] bridge_slave_1: left allmulticast mode [ 417.520978][T17798] bridge_slave_1: left promiscuous mode [ 417.527167][T17798] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.551730][T17798] bond0: (slave bond_slave_0): Releasing backup interface [ 417.581550][T17798] bond0: (slave bond_slave_1): Releasing backup interface [ 417.628489][T17798] team0: Port device team_slave_0 removed [ 417.650086][T17798] team0: Port device team_slave_1 removed [ 417.680512][T17798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.689145][T17798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.702099][T17798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.713258][T17798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.727674][T17798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 418.317500][T17782] chnl_net:caif_netlink_parms(): no params data found [ 418.512288][T17840] netlink: 'syz.5.3065': attribute type 20 has an invalid length. [ 418.608380][T17782] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.615676][T17782] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.625505][T17782] bridge_slave_0: entered allmulticast mode [ 418.634893][T17782] bridge_slave_0: entered promiscuous mode [ 418.644547][T17782] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.652322][T17782] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.660465][T17782] bridge_slave_1: entered allmulticast mode [ 418.668812][T17782] bridge_slave_1: entered promiscuous mode [ 418.680144][T17850] __nla_validate_parse: 4 callbacks suppressed [ 418.680161][T17850] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3066'. [ 418.750378][T17782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.767739][T17782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.947127][T17848] wg1 speed is unknown, defaulting to 1000 [ 418.971227][T17782] team0: Port device team_slave_0 added [ 418.999986][T17782] team0: Port device team_slave_1 added [ 419.077609][T17848] lo speed is unknown, defaulting to 1000 [ 419.138846][T17782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.147085][T17782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.195564][ T5832] Bluetooth: hci1: command tx timeout [ 419.219643][T17868] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3071'. [ 419.224384][T17782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.273318][T17782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.282394][T17782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.309336][T17782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.424579][T17881] wg1 speed is unknown, defaulting to 1000 [ 419.437772][T17782] hsr_slave_0: entered promiscuous mode [ 419.444368][T17782] hsr_slave_1: entered promiscuous mode [ 419.451365][T17782] debugfs: 'hsr0' already exists in 'hsr' [ 419.457230][T17782] Cannot create hsr debugfs directory [ 419.500663][T17881] lo speed is unknown, defaulting to 1000 [ 419.695205][T17782] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.865913][T17782] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.928331][T17782] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.037367][T17893] siw: device registration error -23 [ 420.059462][T17782] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.084821][T17893] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 420.215149][T17896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3078'. [ 420.400674][T17782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 420.424757][T17782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 420.434830][T17782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 420.435724][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3080'. [ 420.478739][T17912] bond6: option downdelay: invalid value (18446744073709547007) [ 420.487521][T17912] bond6: option downdelay: allowed values 0 - 2147483647 [ 420.495856][T17912] bond6 (unregistering): Released all slaves [ 420.524091][T17782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 420.808889][T17782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.844292][T17782] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.861295][ T9745] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.868461][ T9745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.901830][ T9748] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.909007][ T9748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.980412][T17937] wg1 speed is unknown, defaulting to 1000 [ 421.020015][T17937] lo speed is unknown, defaulting to 1000 [ 421.069582][T17948] pim6reg99999999: entered allmulticast mode [ 421.233124][T17955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.245035][T17955] netlink: 'syz.4.3089': attribute type 1 has an invalid length. [ 421.253907][T17955] netlink: 'syz.4.3089': attribute type 7 has an invalid length. [ 421.265210][T17955] netlink: 'syz.4.3089': attribute type 8 has an invalid length. [ 421.266644][ T5832] Bluetooth: hci1: command tx timeout [ 421.273153][T17955] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3089'. [ 421.299299][T17955] NCSI netlink: No device for ifindex 65584 [ 421.434405][T17782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.593428][T17782] veth0_vlan: entered promiscuous mode [ 421.632899][T17782] veth1_vlan: entered promiscuous mode [ 421.728891][T17782] veth0_macvtap: entered promiscuous mode [ 421.762438][T17782] veth1_macvtap: entered promiscuous mode [ 421.819591][T17782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.843588][T17782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.865454][ T9744] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.900165][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 421.941080][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 421.963060][ T9744] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.982160][ T9744] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.047143][ T9744] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.189519][T17980] bridge0: port 1(erspan0) entered blocking state [ 422.197293][T17980] bridge0: port 1(erspan0) entered disabled state [ 422.203981][T17980] erspan0: entered allmulticast mode [ 422.211925][T17980] erspan0: entered promiscuous mode [ 422.221591][T17980] bridge0: port 1(erspan0) entered blocking state [ 422.228325][T17980] bridge0: port 1(erspan0) entered forwarding state [ 422.239910][T17980] erspan0: left allmulticast mode [ 422.264141][T17980] erspan0: left promiscuous mode [ 422.271696][T17980] bridge0: port 1(erspan0) entered disabled state [ 422.331136][ T9748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.370529][ T9748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.471538][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.488747][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.952480][T18019] wg1 speed is unknown, defaulting to 1000 [ 423.013993][T18019] lo speed is unknown, defaulting to 1000 [ 423.307997][T18028] netlink: 'syz.1.3111': attribute type 1 has an invalid length. [ 423.316564][T18028] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3111'. [ 423.347300][ T5843] Bluetooth: hci1: command tx timeout [ 423.617292][T18035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3113'. [ 423.655541][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.667543][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.676564][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.685002][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.702720][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.785099][ T9745] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.808363][T18038] wg1 speed is unknown, defaulting to 1000 [ 423.826148][T18038] lo speed is unknown, defaulting to 1000 [ 423.889396][ T9745] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.968776][ T9745] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.060542][ T9745] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.129801][T18050] wg1 speed is unknown, defaulting to 1000 [ 424.184733][T18050] lo speed is unknown, defaulting to 1000 [ 424.670178][ T9745] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 424.772204][T18089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.900946][ T9745] bond3 (unregistering): (slave gretap1): Releasing active interface [ 424.910980][ T9745] gretap1 (unregistering): left allmulticast mode [ 424.994420][T18095] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3127'. [ 425.341132][ T9745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.351544][ T9745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.361016][ T9745] bond0 (unregistering): Released all slaves [ 425.426803][ T5843] Bluetooth: hci1: command 0x0419 tx timeout [ 425.461144][ T9745] bond1 (unregistering): Released all slaves [ 425.473617][ T9745] bond2 (unregistering): Released all slaves [ 425.486495][ T9745] bond3 (unregistering): Released all slaves [ 425.499593][ T9745] bond4 (unregistering): Released all slaves [ 425.600636][ T9745] bond5 (unregistering): Released all slaves [ 425.613193][ T9745] bond6 (unregistering): Released all slaves [ 425.707385][ T9745] bond7 (unregistering): Released all slaves [ 425.746522][ T5832] Bluetooth: hci2: command tx timeout [ 425.808060][ T9745] bond8 (unregistering): Released all slaves [ 425.899608][ T9745] bond9 (unregistering): Released all slaves [ 425.997690][ T9745] bond10 (unregistering): Released all slaves [ 426.012074][ T9745] bond11 (unregistering): Released all slaves [ 426.034632][T18038] chnl_net:caif_netlink_parms(): no params data found [ 426.150677][T18101] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3129'. [ 426.231418][T18106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.262230][T18099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3128'. [ 426.320400][ T9745] : left promiscuous mode [ 426.399397][T18038] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.408132][T18038] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.418778][T18038] bridge_slave_0: entered allmulticast mode [ 426.430070][T18038] bridge_slave_0: entered promiscuous mode [ 426.441096][T18038] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.450982][T18038] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.458518][T18038] bridge_slave_1: entered allmulticast mode [ 426.469629][T18038] bridge_slave_1: entered promiscuous mode [ 426.478199][ T9745] tipc: Left network mode [ 426.504375][T18118] tap0: tun_chr_ioctl cmd 1074025677 [ 426.510357][T18118] tap0: linktype set to 1 [ 426.567275][T18038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.581236][T18038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.684192][T18038] team0: Port device team_slave_0 added [ 426.704624][T18038] team0: Port device team_slave_1 added [ 426.789221][T18125] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!!bíÓÙ.˜>„nS‡#^‘§' [ 426.804045][T18125] CPU: 0 UID: 0 PID: 18125 Comm: syz.4.3134 Not tainted syzkaller #0 PREEMPT(full) [ 426.804068][T18125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.804082][T18125] Call Trace: [ 426.804089][T18125] [ 426.804097][T18125] dump_stack_lvl+0x189/0x250 [ 426.804128][T18125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.804151][T18125] ? __pfx__printk+0x10/0x10 [ 426.804176][T18125] ? kernfs_path_from_node+0x2f/0x290 [ 426.804196][T18125] ? kernfs_path_from_node+0x250/0x290 [ 426.804220][T18125] ? kernfs_path_from_node+0x2f/0x290 [ 426.804245][T18125] sysfs_warn_dup+0x8e/0xa0 [ 426.804265][T18125] sysfs_do_create_link_sd+0xc0/0x110 [ 426.804289][T18125] device_add_class_symlinks+0x1cf/0x240 [ 426.804315][T18125] device_add+0x475/0xb50 [ 426.804339][T18125] wiphy_register+0x1d2e/0x2d20 [ 426.804383][T18125] ? __pfx_wiphy_register+0x10/0x10 [ 426.804407][T18125] ? __pfx_netdev_run_todo+0x10/0x10 [ 426.804428][T18125] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 426.804458][T18125] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 426.804484][T18125] ieee80211_register_hw+0x3473/0x40d0 [ 426.804526][T18125] ? ieee80211_register_hw+0x14b1/0x40d0 [ 426.804558][T18125] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 426.804577][T18125] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 426.804606][T18125] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 426.804629][T18125] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 426.804661][T18125] ? __hrtimer_setup+0x187/0x210 [ 426.804679][T18125] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 426.804702][T18125] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 426.804762][T18125] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 426.804784][T18125] ? trace_kmalloc+0x1f/0xd0 [ 426.804804][T18125] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 426.804828][T18125] ? kstrndup+0xbf/0x160 [ 426.804858][T18125] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 426.804882][T18125] ? __pfx___nla_validate_parse+0x10/0x10 [ 426.804918][T18125] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 426.804943][T18125] ? rcu_is_watching+0x15/0xb0 [ 426.804967][T18125] ? __nla_parse+0x40/0x60 [ 426.804989][T18125] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 426.805021][T18125] genl_family_rcv_msg_doit+0x215/0x300 [ 426.805052][T18125] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 426.805089][T18125] ? bpf_lsm_capable+0x9/0x20 [ 426.805109][T18125] ? security_capable+0x7e/0x2e0 [ 426.805139][T18125] genl_rcv_msg+0x60e/0x790 [ 426.805169][T18125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.805190][T18125] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 426.805229][T18125] netlink_rcv_skb+0x208/0x470 [ 426.805244][T18125] ? __lock_acquire+0xab9/0xd20 [ 426.805262][T18125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.805286][T18125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.805327][T18125] ? down_read+0x1ad/0x2e0 [ 426.805348][T18125] genl_rcv+0x28/0x40 [ 426.805368][T18125] netlink_unicast+0x82f/0x9e0 [ 426.805403][T18125] ? __pfx_netlink_unicast+0x10/0x10 [ 426.805430][T18125] ? netlink_sendmsg+0x642/0xb30 [ 426.805447][T18125] ? skb_put+0x11b/0x210 [ 426.805469][T18125] netlink_sendmsg+0x805/0xb30 [ 426.805498][T18125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.805522][T18125] ? aa_sock_msg_perm+0xf1/0x1d0 [ 426.805547][T18125] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.805565][T18125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.805584][T18125] __sock_sendmsg+0x21c/0x270 [ 426.805611][T18125] ____sys_sendmsg+0x505/0x830 [ 426.805638][T18125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.805668][T18125] ? import_iovec+0x74/0xa0 [ 426.805694][T18125] ___sys_sendmsg+0x21f/0x2a0 [ 426.805716][T18125] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.805778][T18125] ? __fget_files+0x2a/0x420 [ 426.805794][T18125] ? __fget_files+0x3a0/0x420 [ 426.805823][T18125] __x64_sys_sendmsg+0x19b/0x260 [ 426.805846][T18125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.805877][T18125] ? do_user_addr_fault+0xc85/0x1380 [ 426.805901][T18125] ? do_syscall_64+0xbe/0xfa0 [ 426.805922][T18125] do_syscall_64+0xfa/0xfa0 [ 426.805937][T18125] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.805953][T18125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.805969][T18125] ? clear_bhb_loop+0x60/0xb0 [ 426.805989][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.806009][T18125] RIP: 0033:0x7f8f3098f6c9 [ 426.806025][T18125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.806040][T18125] RSP: 002b:00007f8f2ebd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.806058][T18125] RAX: ffffffffffffffda RBX: 00007f8f30be6090 RCX: 00007f8f3098f6c9 [ 426.806071][T18125] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 426.806082][T18125] RBP: 00007f8f30a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 426.806093][T18125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.806103][T18125] R13: 00007f8f30be6128 R14: 00007f8f30be6090 R15: 00007fffc94fb538 [ 426.806137][T18125] [ 427.299297][T18038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.307254][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.337955][T18038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.352249][T18038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.359980][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.389031][T18038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.506931][ T5832] Bluetooth: hci1: command 0x0419 tx timeout [ 427.646517][T18145] ipt_rpfilter: unknown options [ 427.675423][ T9745] hsr_slave_0: left promiscuous mode [ 427.689485][ T9745] hsr_slave_1: left promiscuous mode [ 427.702377][ T9745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.720750][T18148] x_tables: duplicate underflow at hook 1 [ 427.742155][ T9745] veth1_to_hsr: left allmulticast mode [ 427.749551][ T9745] veth1_to_hsr: left promiscuous mode [ 427.801597][ T9745] pim6reg99999999 (unregistering): left allmulticast mode [ 427.826759][ T5832] Bluetooth: hci2: command tx timeout [ 427.928198][T18158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3141'. [ 427.954965][T18158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3141'. [ 428.006941][T18160] openvswitch: netlink: IP tunnel dst address not specified [ 428.212076][ T9745] team0 (unregistering): Port device team_slave_1 removed [ 428.250879][ T9745] team0 (unregistering): Port device team_slave_0 removed [ 428.514606][T18135] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3137'. [ 428.529378][T18135] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3137'. [ 428.564121][T18038] hsr_slave_0: entered promiscuous mode [ 428.574275][T18038] hsr_slave_1: entered promiscuous mode [ 428.582073][T18038] debugfs: 'hsr0' already exists in 'hsr' [ 428.588388][T18038] Cannot create hsr debugfs directory [ 428.612875][T18167] ÿ: renamed from bond_slave_0 (while UP) [ 428.704368][T18175] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 428.711166][T18174] IPVS: set_ctl: invalid protocol: 0 172.20.20.14:20001 [ 428.993918][ T9745] IPVS: stop unused estimator thread 0... [ 429.454953][T18212] lo speed is unknown, defaulting to 1000 [ 429.460515][T18214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3159'. [ 429.544333][T18038] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.584451][T18038] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.600401][T18220] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 429.611119][T18220] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 429.618585][T18220] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 429.634932][T18038] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.677872][T18038] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.753849][T18222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3162'. [ 429.787397][T18226] veth0_virt_wifi: mtu less than device minimum [ 429.829677][T18235] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3164'. [ 429.908277][ T5832] Bluetooth: hci2: command tx timeout [ 430.069818][T18038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.112387][T18038] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.148322][ T9739] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.155530][ T9739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.212544][T18038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.227060][T18038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.259424][ T9739] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.266596][ T9739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.595420][T18038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.715746][T18038] veth0_vlan: entered promiscuous mode [ 430.761727][T18275] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3175'. [ 430.780833][T18038] veth1_vlan: entered promiscuous mode [ 430.847993][T18285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.864171][T18038] veth0_macvtap: entered promiscuous mode [ 430.885588][T18038] veth1_macvtap: entered promiscuous mode [ 430.949008][T18038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.983208][T18038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.025047][ T9745] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.035519][ T9745] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.049261][T18292] netlink: 'syz.4.3181': attribute type 1 has an invalid length. [ 431.066572][ T9745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.075429][ T9745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.175611][T18292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.240339][T18298] bond0: option lacp_rate: unable to set because the bond device is up [ 431.242674][T18306] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3182'. [ 431.270492][T18307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3184'. [ 431.298710][T18305] netlink: 'syz.1.3184': attribute type 16 has an invalid length. [ 431.329631][T18305] netlink: 55946 bytes leftover after parsing attributes in process `syz.1.3184'. [ 431.435832][ T9741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.452010][ T9741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.516498][T18302] lo speed is unknown, defaulting to 1000 [ 431.523829][ T9655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.569838][ T9655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.628612][T18318] xt_CT: No such helper "syz0" [ 431.783905][T18326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3109'. [ 431.989262][ T5832] Bluetooth: hci2: command tx timeout [ 432.009434][T18335] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!!bíÓÙ.˜>„nS‡#^‘§' [ 432.027200][T18335] CPU: 1 UID: 0 PID: 18335 Comm: syz.5.3193 Not tainted syzkaller #0 PREEMPT(full) [ 432.027223][T18335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.027233][T18335] Call Trace: [ 432.027241][T18335] [ 432.027250][T18335] dump_stack_lvl+0x189/0x250 [ 432.027296][T18335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.027322][T18335] ? __pfx__printk+0x10/0x10 [ 432.027347][T18335] ? kernfs_path_from_node+0x2f/0x290 [ 432.027369][T18335] ? kernfs_path_from_node+0x250/0x290 [ 432.027389][T18335] ? kernfs_path_from_node+0x2f/0x290 [ 432.027415][T18335] sysfs_warn_dup+0x8e/0xa0 [ 432.027441][T18335] sysfs_do_create_link_sd+0xc0/0x110 [ 432.027465][T18335] device_add_class_symlinks+0x1cf/0x240 [ 432.027491][T18335] device_add+0x475/0xb50 [ 432.027515][T18335] wiphy_register+0x1d2e/0x2d20 [ 432.027558][T18335] ? __pfx_wiphy_register+0x10/0x10 [ 432.027582][T18335] ? __pfx_netdev_run_todo+0x10/0x10 [ 432.027606][T18335] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 432.027636][T18335] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 432.027662][T18335] ieee80211_register_hw+0x3473/0x40d0 [ 432.027701][T18335] ? ieee80211_register_hw+0x14b1/0x40d0 [ 432.027734][T18335] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 432.027754][T18335] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 432.027784][T18335] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 432.027809][T18335] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 432.027842][T18335] ? __hrtimer_setup+0x187/0x210 [ 432.027861][T18335] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 432.027884][T18335] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 432.027941][T18335] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 432.027964][T18335] ? trace_kmalloc+0x1f/0xd0 [ 432.027984][T18335] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 432.028008][T18335] ? kstrndup+0xbf/0x160 [ 432.028039][T18335] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 432.028063][T18335] ? __pfx___nla_validate_parse+0x10/0x10 [ 432.028099][T18335] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 432.028125][T18335] ? rcu_is_watching+0x15/0xb0 [ 432.028157][T18335] ? __nla_parse+0x40/0x60 [ 432.028181][T18335] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 432.028215][T18335] genl_family_rcv_msg_doit+0x215/0x300 [ 432.028247][T18335] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 432.028286][T18335] ? bpf_lsm_capable+0x9/0x20 [ 432.028307][T18335] ? security_capable+0x7e/0x2e0 [ 432.028338][T18335] genl_rcv_msg+0x60e/0x790 [ 432.028369][T18335] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.028392][T18335] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 432.028426][T18335] netlink_rcv_skb+0x208/0x470 [ 432.028443][T18335] ? __lock_acquire+0xab9/0xd20 [ 432.028461][T18335] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.028485][T18335] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.028525][T18335] ? down_read+0x1ad/0x2e0 [ 432.028548][T18335] genl_rcv+0x28/0x40 [ 432.028568][T18335] netlink_unicast+0x82f/0x9e0 [ 432.028603][T18335] ? __pfx_netlink_unicast+0x10/0x10 [ 432.028631][T18335] ? netlink_sendmsg+0x642/0xb30 [ 432.028648][T18335] ? skb_put+0x11b/0x210 [ 432.028671][T18335] netlink_sendmsg+0x805/0xb30 [ 432.028701][T18335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.028725][T18335] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.028751][T18335] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.028768][T18335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.028788][T18335] __sock_sendmsg+0x21c/0x270 [ 432.028816][T18335] ____sys_sendmsg+0x505/0x830 [ 432.028843][T18335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.028874][T18335] ? import_iovec+0x74/0xa0 [ 432.028901][T18335] ___sys_sendmsg+0x21f/0x2a0 [ 432.028924][T18335] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.028985][T18335] ? __fget_files+0x2a/0x420 [ 432.029001][T18335] ? __fget_files+0x3a0/0x420 [ 432.029031][T18335] __x64_sys_sendmsg+0x19b/0x260 [ 432.029055][T18335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.029095][T18335] ? do_syscall_64+0xbe/0xfa0 [ 432.029117][T18335] do_syscall_64+0xfa/0xfa0 [ 432.029139][T18335] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.029156][T18335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.029174][T18335] ? clear_bhb_loop+0x60/0xb0 [ 432.029196][T18335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.029213][T18335] RIP: 0033:0x7ff19ef8f6c9 [ 432.029230][T18335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.029244][T18335] RSP: 002b:00007ff19fe73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.029264][T18335] RAX: ffffffffffffffda RBX: 00007ff19f1e5fa0 RCX: 00007ff19ef8f6c9 [ 432.029277][T18335] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 432.029289][T18335] RBP: 00007ff19f011f91 R08: 0000000000000000 R09: 0000000000000000 [ 432.029300][T18335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.029311][T18335] R13: 00007ff19f1e6038 R14: 00007ff19f1e5fa0 R15: 00007fff7de468a8 [ 432.029345][T18335] [ 432.649394][T18341] tipc: Started in network mode [ 432.654898][T18341] tipc: Node identity c26b16cb9fe7, cluster identity 4711 [ 432.668701][T18341] tipc: Enabled bearer , priority 0 [ 432.691331][T18353] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 432.715931][T18349] lo speed is unknown, defaulting to 1000 [ 432.725420][T18341] tipc: Disabling bearer [ 432.809072][T18356] netlink: 'syz.4.3200': attribute type 25 has an invalid length. [ 432.860732][T18356] netlink: 'syz.4.3200': attribute type 25 has an invalid length. [ 433.246485][ T1209] IPVS: starting estimator thread 0... [ 433.336920][T18373] IPVS: using max 40 ests per chain, 96000 per kthread [ 433.598353][T18382] netlink: 'syz.4.3205': attribute type 4 has an invalid length. [ 437.043099][T18385] dummy0: mtu less than device minimum [ 437.193723][T18393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3212'. [ 437.205301][T18393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3212'. [ 437.225765][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'. [ 437.260606][T18393] ip6gretap1: entered promiscuous mode [ 437.267322][T18393] ip6gretap1: entered allmulticast mode [ 437.406662][T18398] netlink: 'syz.1.3210': attribute type 1 has an invalid length. [ 437.422817][T18389] lo speed is unknown, defaulting to 1000 [ 437.610200][T18414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3214'. [ 437.726573][T18424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.896784][T18427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.382218][T18453] netlink: 'syz.2.3226': attribute type 3 has an invalid length. [ 438.525045][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3227'. [ 438.538863][T18458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3225'. [ 438.556075][T18458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3225'. [ 438.692664][T18468] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3230'. [ 438.777324][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 438.787940][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3230'. [ 438.802080][T18468] netlink: 'syz.1.3230': attribute type 14 has an invalid length. [ 438.811984][T18468] netlink: 'syz.1.3230': attribute type 11 has an invalid length. [ 439.084248][T18496] netlink: 'syz.2.3238': attribute type 11 has an invalid length. [ 439.227183][T18506] openvswitch: netlink: EtherType 0 is less than min 600 [ 439.725073][T18526] bond1: option lp_interval: invalid value (0) [ 439.746094][T18526] bond1: option lp_interval: allowed values 1 - 2147483647 [ 439.767956][T18526] bond1 (unregistering): Released all slaves [ 440.402193][T18578] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 440.534120][T18581] tipc: Enabling of bearer rejected, failed to enable media [ 440.822371][T18595] veth1_to_hsr: entered promiscuous mode [ 440.832876][T18595] macvtap1: entered promiscuous mode [ 440.839044][T18595] macvtap1: entered allmulticast mode [ 440.844757][T18595] veth1_to_hsr: entered allmulticast mode [ 440.861373][T18592] geneve2: entered promiscuous mode [ 440.868019][T18592] geneve2: entered allmulticast mode [ 440.892881][ T9748] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 50665 - 0 [ 440.906522][ T9748] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 40760 - 0 [ 440.925277][ T9748] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 50665 - 0 [ 440.934258][ T9748] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 40760 - 0 [ 440.963568][ T9748] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 50665 - 0 [ 440.983106][ T9748] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 40760 - 0 [ 441.030906][ T9748] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 50665 - 0 [ 441.046045][ T9748] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 40760 - 0 [ 441.462720][T18628] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 441.654353][T18624] nbd: device at index 64 is going down [ 441.880240][T18648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.949034][T18648] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.981264][T18648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.162529][ T30] audit: type=1107 audit(1763425060.630:8): pid=18670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 442.209348][T18668] lo speed is unknown, defaulting to 1000 [ 442.276842][T18665] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 442.294777][T18676] TCP: TCP_TX_DELAY enabled [ 442.302171][T18665] bond1 (unregistering): Released all slaves [ 442.559888][T18683] __nla_validate_parse: 16 callbacks suppressed [ 442.559928][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3291'. [ 442.641916][T18683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.825647][T18692] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3294'. [ 442.864459][T18692] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3294'. [ 442.980167][T18689] lo speed is unknown, defaulting to 1000 [ 442.998231][T18702] ip6tnl7: entered promiscuous mode [ 443.017232][T18702] ip6tnl7: entered allmulticast mode [ 443.031107][T18706] tipc: Started in network mode [ 443.041575][T18706] tipc: Node identity 000000000000000001, cluster identity 4711 [ 443.066556][T18691] lo speed is unknown, defaulting to 1000 [ 443.198581][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3300'. [ 443.216595][T18711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3300'. [ 443.422731][T18727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3304'. [ 443.444701][T18713] lo speed is unknown, defaulting to 1000 [ 443.532521][T18730] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3305'. [ 443.681509][T18733] netlink: 'syz.3.3301': attribute type 13 has an invalid length. [ 443.691976][T18733] netlink: 'syz.3.3301': attribute type 17 has an invalid length. [ 443.791604][T18737] IPVS: persistence engine module ip_vs_pe_ not found [ 443.800516][T18739] netlink: 'syz.1.3306': attribute type 11 has an invalid length. [ 443.811664][T18739] netlink: 'syz.1.3306': attribute type 11 has an invalid length. [ 443.825861][T18739] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3306'. [ 443.965375][T18733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.008888][T18742] bond1: option lacp_rate: invalid value (255) [ 444.018480][T18742] bond1 (unregistering): Released all slaves [ 444.115013][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3310'. [ 444.251630][T18753] netlink: 'syz.4.3313': attribute type 3 has an invalid length. [ 444.296960][T18753] netlink: 'syz.4.3313': attribute type 1 has an invalid length. [ 444.304862][T18753] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3313'. [ 445.057264][T18778] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20001 [ 445.219939][T18785] IPv6: Can't replace route, no match found [ 445.260251][T18785] netlink: 'syz.3.3322': attribute type 1 has an invalid length. [ 445.385658][T18792] pim6reg1: entered allmulticast mode [ 445.612357][T18808] lo speed is unknown, defaulting to 1000 [ 446.531821][T18828] syzkaller1: entered promiscuous mode [ 446.540877][T18828] syzkaller1: entered allmulticast mode [ 446.559221][T18844] tipc: Started in network mode [ 446.568258][T18844] tipc: Node identity ac14140f, cluster identity 4711 [ 446.586770][T18844] tipc: New replicast peer: 255.255.255.255 [ 446.593354][T18844] tipc: Enabled bearer , priority 26 [ 446.631730][T18842] netlink: 'syz.1.3337': attribute type 11 has an invalid length. [ 446.660146][T18842] netlink: 'syz.1.3337': attribute type 11 has an invalid length. [ 446.751026][T18848] netlink: 'syz.4.3338': attribute type 3 has an invalid length. [ 447.596597][T14211] tipc: Node number set to 2886997007 [ 447.612778][ T43] IPVS: starting estimator thread 0... [ 447.623590][T18890] __nla_validate_parse: 11 callbacks suppressed [ 447.623607][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 447.737521][T18889] IPVS: using max 27 ests per chain, 64800 per kthread [ 447.871515][T18892] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3351'. [ 448.068928][ T9661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.086967][ T9661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.345870][T18915] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3360'. [ 448.405006][T18918] veth0_to_team: entered promiscuous mode [ 448.717693][T18933] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3364'. [ 448.738260][T18933] netem: unknown loss type 13 [ 448.743605][T18933] netem: change failed [ 448.796664][T18937] bond1: option lacp_rate: invalid value (128) [ 448.812313][T18937] bond1 (unregistering): Released all slaves [ 448.988021][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 449.032742][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 449.052532][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 449.075795][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 449.090972][T18945] lo speed is unknown, defaulting to 1000 [ 449.219649][T18955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3369'. [ 449.348421][ T5832] Bluetooth: hci3: command tx timeout [ 449.420061][T18962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3372'. [ 449.876657][T18985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.022846][T18998] netlink: 'syz.4.3382': attribute type 1 has an invalid length. [ 450.129875][T19001] netlink: 'syz.5.3383': attribute type 1 has an invalid length. [ 450.154222][T19001] syzkaller0: entered promiscuous mode [ 450.169613][T19001] syzkaller0: entered allmulticast mode [ 450.337927][T19010] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 450.448724][T19020] siw: device registration error -23 [ 451.014310][T19047] mac80211_hwsim hwsim66 wlan1: entered allmulticast mode [ 451.071590][T19047] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 451.113591][T19047] netlink: 'syz.2.3395': attribute type 10 has an invalid length. [ 451.132178][T19047] mac80211_hwsim hwsim66 wlan1: left allmulticast mode [ 451.391869][T19067] macvlan0: entered allmulticast mode [ 451.408305][T19067] veth1_vlan: entered allmulticast mode [ 451.425681][T19068] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 451.499597][T19068] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 451.634103][T19080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.852434][T19090] netlink: 'syz.4.3407': attribute type 9 has an invalid length. [ 452.214596][T19090] can: request_module (can-proto-0) failed. [ 452.541239][T19120] netlink: 'syz.3.3414': attribute type 1 has an invalid length. [ 452.663001][T19120] __nla_validate_parse: 15 callbacks suppressed [ 452.663019][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'. [ 452.742360][T19128] netlink: 'syz.4.3415': attribute type 3 has an invalid length. [ 452.750486][T19128] netlink: 'syz.4.3415': attribute type 1 has an invalid length. [ 452.758779][T19128] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3415'. [ 452.899913][T19131] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3414'. [ 453.180453][T19105] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 453.432194][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3417'. [ 453.496528][T19149] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 453.642193][T14204] hid-generic 0005:16C0:05DF.0002: item fetching failed at offset 0/1 [ 453.677148][T14204] hid-generic 0005:16C0:05DF.0002: probe with driver hid-generic failed with error -22 [ 453.866668][T19170] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3428'. [ 454.127255][T19188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3432'. [ 454.265556][T14209] IPVS: starting estimator thread 0... [ 454.303326][T19196] lo speed is unknown, defaulting to 1000 [ 454.365418][T19199] tc_dump_action: action bad kind [ 454.371056][T19197] IPVS: using max 27 ests per chain, 64800 per kthread [ 454.402312][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3433'. [ 454.437580][T19199] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3433'. [ 455.104893][T19222] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3440'. [ 455.480205][T19243] netlink: 'syz.5.3446': attribute type 12 has an invalid length. [ 455.491812][T19242] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3448'. [ 455.548299][T19243] netlink: 'syz.5.3446': attribute type 4 has an invalid length. [ 455.594990][ T1209] lo speed is unknown, defaulting to 1000 [ 455.625549][ T1209] syz1: Port: 1 Link DOWN [ 455.944961][T19259] syzkaller0: entered promiscuous mode [ 455.950630][T19259] syzkaller0: entered allmulticast mode [ 456.027570][T19259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.522359][T19284] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 456.541211][T19284] bond6 (unregistering): Released all slaves [ 456.711356][T19294] netlink: 'syz.2.3464': attribute type 1 has an invalid length. [ 457.810281][T19335] veth0_to_bridge: entered promiscuous mode [ 457.833247][T19334] veth0_to_bridge: left promiscuous mode [ 458.089769][T19352] __nla_validate_parse: 4 callbacks suppressed [ 458.089787][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 458.154194][T19352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3483'. [ 458.189273][T19357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3485'. [ 458.215725][T19356] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 458.251962][T19357] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 458.252042][T19357] block (null): Could not allocate knbd recv work queue. [ 458.340857][T19357] nbd: failed to add new device [ 458.419204][T19371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3488'. [ 458.521778][T19376] syzkaller1: entered promiscuous mode [ 458.527914][T19376] syzkaller1: entered allmulticast mode [ 458.545259][T19377] sctp: [Deprecated]: syz.5.3489 (pid 19377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.545259][T19377] Use struct sctp_sack_info instead [ 458.805618][T19385] netlink: 'syz.1.3494': attribute type 21 has an invalid length. [ 458.820692][T19385] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3494'. [ 458.834581][T19385] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3494'. [ 458.878630][T19391] netlink: 'syz.3.3491': attribute type 11 has an invalid length. [ 458.891721][T19392] siw: device registration error -23 [ 458.896751][T19391] netlink: 'syz.3.3491': attribute type 11 has an invalid length. [ 458.904824][T19391] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3491'. [ 458.955456][T19387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3494'. [ 459.051769][T19378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.053774][T19399] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3496'. [ 459.159685][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 459.698582][T19431] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.706299][T19431] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.742153][T19454] netlink: 'syz.1.3511': attribute type 39 has an invalid length. [ 459.942064][T19431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.994289][T19431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.343452][T19450] gretap0: mtu less than device minimum [ 460.409544][ T9748] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.421074][ T9748] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 50665 - 0 [ 460.430464][ T9748] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 40760 - 0 [ 460.484467][ T9748] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.511753][ T9748] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 50665 - 0 [ 460.521854][ T9748] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 40760 - 0 [ 460.535619][ T30] audit: type=1800 audit(1763425079.000:9): pid=19465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3515" name="blkio.bfq.time_recursive" dev="tmpfs" ino=600 res=0 errno=0 [ 460.559408][ T9748] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.559442][ T9748] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 50665 - 0 [ 460.559467][ T9748] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 40760 - 0 [ 460.559516][ T9748] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.559541][ T9748] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 50665 - 0 [ 460.559564][ T9748] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 40760 - 0 [ 460.591762][T19467] bridge_slave_1: left allmulticast mode [ 460.638201][T19467] bridge_slave_1: left promiscuous mode [ 460.644666][T19467] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.659453][T19467] bridge_slave_0: left allmulticast mode [ 460.665109][T19467] bridge_slave_0: left promiscuous mode [ 460.683212][T19475] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.683849][T19467] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.880413][T19480] netlink: 'syz.2.3521': attribute type 1 has an invalid length. [ 460.895059][T19480] netlink: 'syz.2.3521': attribute type 4 has an invalid length. [ 460.903933][T19480] netlink: 'syz.2.3521': attribute type 1 has an invalid length. [ 460.912263][T19480] netlink: 'syz.2.3521': attribute type 4 has an invalid length. [ 461.072587][T19495] netlink: 'syz.2.3524': attribute type 10 has an invalid length. [ 461.087775][T19494] team_slave_0: entered promiscuous mode [ 461.093779][T19494] team_slave_1: entered promiscuous mode [ 461.107277][T19494] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 461.118790][T19498] netlink: 'syz.4.3525': attribute type 9 has an invalid length. [ 461.204201][T19484] lo speed is unknown, defaulting to 1000 [ 461.840850][T19479] lo speed is unknown, defaulting to 1000 [ 462.232244][T19541] gtp0: entered promiscuous mode [ 462.270493][T19541] siw: device registration error -23 [ 463.367753][T19574] lo speed is unknown, defaulting to 1000 [ 463.524574][T19593] __nla_validate_parse: 155 callbacks suppressed [ 463.524592][T19593] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3544'. [ 463.569633][T19596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3543'. [ 463.821708][T19610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3547'. [ 464.047848][T19618] macsec1: entered promiscuous mode [ 464.053093][T19618] ip6gretap0: entered promiscuous mode [ 464.060160][T19618] macsec1: entered allmulticast mode [ 464.065469][T19618] ip6gretap0: entered allmulticast mode [ 464.140459][T19620] .`: (slave 77ÿ): Releasing backup interface [ 464.294864][T19643] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3553'. [ 464.419849][T19645] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3553'. [ 464.432146][T19645] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3553'. [ 464.795068][T19620] .`: (slave bond_slave_1): Releasing backup interface [ 464.894340][T19620] team_slave_0: left promiscuous mode [ 464.906255][T19620] team0: Port device team_slave_0 removed [ 464.913143][T19620] team_slave_1: left promiscuous mode [ 464.923137][T19620] team0: Port device team_slave_1 removed [ 464.931464][T19620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.939793][T19620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.949285][T19620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.957402][T19620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.030325][T19648] macsec2: entered promiscuous mode [ 465.035688][T19648] macsec2: entered allmulticast mode [ 465.142373][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3555'. [ 465.142373][T19651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3555'. [ 465.167805][T19650] syz_tun: left promiscuous mode [ 465.285123][T19665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3559'. [ 465.292439][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3560'. [ 465.622976][T19689] netlink: 'syz.2.3566': attribute type 1 has an invalid length. [ 465.678367][T19689] gretap1: entered allmulticast mode [ 465.845546][T19698] lo speed is unknown, defaulting to 1000 [ 466.088325][T19715] netlink: 'syz.1.3573': attribute type 2 has an invalid length. [ 466.213335][T19718] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 466.213733][T19723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.381028][T19730] syzkaller0: entered promiscuous mode [ 466.408830][T19730] syzkaller0: entered allmulticast mode [ 466.701459][T19748] lo speed is unknown, defaulting to 1000 [ 466.861218][T19750] netlink: 'syz.2.3582': attribute type 298 has an invalid length. [ 467.323254][T19788] IPVS: set_ctl: invalid protocol: 8 172.30.1.5:20001 [ 467.540572][T19803] bond6: option updelay: invalid value (18446744071562067969) [ 467.551272][T19803] bond6: option updelay: allowed values 0 - 2147483647 [ 467.560905][T19803] bond6 (unregistering): Released all slaves [ 467.595689][T19806] tipc: Enabled bearer , priority 0 [ 467.617376][T19806] syzkaller0: entered promiscuous mode [ 467.628829][T19806] syzkaller0: entered allmulticast mode [ 467.699309][T19806] tipc: Resetting bearer [ 467.728257][T19806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.742296][T19805] tipc: Resetting bearer [ 467.788744][T19805] tipc: Disabling bearer [ 467.939856][T19821] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 467.949948][T19821] bridge0: entered allmulticast mode [ 468.062237][T19825] lo speed is unknown, defaulting to 1000 [ 468.510473][T19832] lo speed is unknown, defaulting to 1000 [ 468.835523][T19858] __nla_validate_parse: 9 callbacks suppressed [ 468.835539][T19858] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3615'. [ 468.856622][T19858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3615'. [ 469.020629][T19861] lo speed is unknown, defaulting to 1000 [ 469.428459][T19892] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3626'. [ 469.597312][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3628'. [ 469.786422][T19909] netlink: 1020 bytes leftover after parsing attributes in process `syz.1.3632'. [ 469.856854][T19894] lo speed is unknown, defaulting to 1000 [ 469.941957][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3632'. [ 469.952435][T19911] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3632'. [ 469.962325][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3632'. [ 469.992817][T19901] lo speed is unknown, defaulting to 1000 [ 470.313884][T19925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3635'. [ 470.408464][T19918] lo speed is unknown, defaulting to 1000 [ 470.471908][T19927] lo speed is unknown, defaulting to 1000 [ 470.764942][T19940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3638'. [ 471.667439][T19963] team0: No ports can be present during mode change [ 472.291492][T19998] lo speed is unknown, defaulting to 1000 [ 472.485397][T20010] netlink: 'syz.3.3657': attribute type 8 has an invalid length. [ 472.523469][T20001] lo speed is unknown, defaulting to 1000 [ 472.535905][T20005] lo speed is unknown, defaulting to 1000 [ 472.725536][T20010] lo speed is unknown, defaulting to 1000 [ 473.153473][T20022] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 473.974548][T20085] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 474.002117][T20091] xt_TCPMSS: Only works on TCP SYN packets [ 474.224474][T20107] __nla_validate_parse: 8 callbacks suppressed [ 474.224491][T20107] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3681'. [ 474.246523][T20099] syzkaller0: left promiscuous mode [ 474.253250][T20099] syzkaller0: left allmulticast mode [ 474.270534][T20109] netlink: 'syz.1.3682': attribute type 13 has an invalid length. [ 474.275886][T20093] lo speed is unknown, defaulting to 1000 [ 474.512992][T20109] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.520670][T20109] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.758788][T20109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.787950][T20109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.223913][ T9748] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.248015][ T9748] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.328831][ T9748] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.358263][ T9748] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.380607][T20117] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3685'. [ 475.459841][T20117] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3685'. [ 475.632055][T20135] syzkaller0: entered promiscuous mode [ 475.648461][T20135] syzkaller0: entered allmulticast mode [ 475.678537][T20135] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 475.693467][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'. [ 475.731895][T20135] tipc: Enabled bearer , priority 0 [ 475.744384][T20134] tipc: Resetting bearer [ 475.800363][T20134] tipc: Disabling bearer [ 475.824071][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3694'. [ 475.850464][T20146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3694'. [ 475.851085][T20139] lo speed is unknown, defaulting to 1000 [ 476.189005][T20174] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3701'. [ 476.217074][T20167] syz_tun: entered promiscuous mode [ 476.253090][T20176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3701'. [ 476.304528][T20180] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.3703'. [ 476.334775][T20182] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3704'. [ 476.435707][T20184] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 476.527654][T20183] tipc: Enabled bearer , priority 0 [ 476.565405][T20183] syzkaller0: entered promiscuous mode [ 476.586967][T20183] syzkaller0: entered allmulticast mode [ 476.631924][T20178] tipc: Resetting bearer [ 476.751011][T20197] netlink: 'syz.1.3705': attribute type 12 has an invalid length. [ 476.773131][T20197] netlink: 'syz.1.3705': attribute type 4 has an invalid length. [ 476.831306][T20201] netlink: 'syz.2.3707': attribute type 4 has an invalid length. [ 477.117300][T20177] tipc: Resetting bearer [ 477.144883][T20215] netlink: 'syz.2.3711': attribute type 1 has an invalid length. [ 477.145855][T20177] tipc: Disabling bearer [ 477.161504][T20215] netlink: 'syz.2.3711': attribute type 2 has an invalid length. [ 477.187167][T20215] netlink: 'syz.2.3711': attribute type 1 has an invalid length. [ 477.194985][T20215] netlink: 'syz.2.3711': attribute type 2 has an invalid length. [ 477.398044][T20225] tipc: Enabled bearer , priority 0 [ 477.452805][T20225] syzkaller0: entered promiscuous mode [ 477.469448][T20225] syzkaller0: entered allmulticast mode [ 477.531374][T20225] tipc: Resetting bearer [ 477.543709][T20224] tipc: Resetting bearer [ 477.583479][T20224] tipc: Disabling bearer [ 477.791775][T20235] netlink: 'syz.2.3717': attribute type 6 has an invalid length. [ 478.817303][T20247] netlink: 'syz.4.3721': attribute type 29 has an invalid length. [ 478.825825][T20247] netlink: 'syz.4.3721': attribute type 29 has an invalid length. [ 479.194679][T20256] lo speed is unknown, defaulting to 1000 [ 479.284235][T20266] __nla_validate_parse: 13 callbacks suppressed [ 479.284253][T20266] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3724'. [ 479.297367][T20267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3728'. [ 479.437754][T20264] lo speed is unknown, defaulting to 1000 [ 479.561966][T20275] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 479.582395][T20275] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 479.619385][T20275] veth1_virt_wifi: entered allmulticast mode [ 479.630193][T20278] netlink: 'syz.1.3731': attribute type 1 has an invalid length. [ 479.656515][T20275] veth1_virt_wifi: left allmulticast mode [ 479.957084][T20288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3733'. [ 480.340568][T20293] lo speed is unknown, defaulting to 1000 [ 480.583946][T20312] wg1 speed is unknown, defaulting to 1000 [ 480.590942][T20312] wg1 speed is unknown, defaulting to 1000 [ 480.623158][T20312] wg1 speed is unknown, defaulting to 1000 [ 480.624417][T20308] syz.2.3734: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 480.647454][T20308] CPU: 1 UID: 0 PID: 20308 Comm: syz.2.3734 Not tainted syzkaller #0 PREEMPT(full) [ 480.647477][T20308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.647488][T20308] Call Trace: [ 480.647495][T20308] [ 480.647502][T20308] dump_stack_lvl+0x189/0x250 [ 480.647531][T20308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.647553][T20308] ? __pfx__printk+0x10/0x10 [ 480.647571][T20308] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 480.647591][T20308] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 480.647612][T20308] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 480.647635][T20308] warn_alloc+0x214/0x310 [ 480.647664][T20308] ? __pfx_warn_alloc+0x10/0x10 [ 480.647694][T20308] ? __get_vm_area_node+0x28f/0x300 [ 480.647716][T20308] ? xskq_create+0xbf/0x170 [ 480.647742][T20308] __vmalloc_node_range_noprof+0x690/0x12d0 [ 480.647789][T20308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 480.647815][T20308] ? __kasan_kmalloc+0x93/0xb0 [ 480.647836][T20308] vmalloc_user_noprof+0xad/0xf0 [ 480.647859][T20308] ? xskq_create+0xbf/0x170 [ 480.647882][T20308] xskq_create+0xbf/0x170 [ 480.647908][T20308] xsk_init_queue+0xb0/0x110 [ 480.647934][T20308] xsk_setsockopt+0x57b/0x8d0 [ 480.647958][T20308] ? __pfx_xsk_setsockopt+0x10/0x10 [ 480.647984][T20308] ? __pfx_aa_sk_perm+0x10/0x10 [ 480.648008][T20308] ? aa_sock_opt_perm+0xff/0x1b0 [ 480.648035][T20308] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 480.648052][T20308] ? __pfx_xsk_setsockopt+0x10/0x10 [ 480.648076][T20308] do_sock_setsockopt+0x17c/0x1b0 [ 480.648101][T20308] __x64_sys_setsockopt+0x13f/0x1b0 [ 480.648125][T20308] do_syscall_64+0xfa/0xfa0 [ 480.648140][T20308] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.648158][T20308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.648174][T20308] ? clear_bhb_loop+0x60/0xb0 [ 480.648195][T20308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.648212][T20308] RIP: 0033:0x7f9e55f8f6c9 [ 480.648228][T20308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.648243][T20308] RSP: 002b:00007f9e56d90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 480.648268][T20308] RAX: ffffffffffffffda RBX: 00007f9e561e6090 RCX: 00007f9e55f8f6c9 [ 480.648281][T20308] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006 [ 480.648291][T20308] RBP: 00007f9e56011f91 R08: 0000000000000004 R09: 0000000000000000 [ 480.648302][T20308] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 480.648313][T20308] R13: 00007f9e561e6128 R14: 00007f9e561e6090 R15: 00007ffff62d0208 [ 480.648346][T20308] [ 480.907096][T20308] Mem-Info: [ 480.910237][T20308] active_anon:12929 inactive_anon:0 isolated_anon:0 [ 480.910237][T20308] active_file:3558 inactive_file:40048 isolated_file:0 [ 480.910237][T20308] unevictable:768 dirty:154 writeback:0 [ 480.910237][T20308] slab_reclaimable:13404 slab_unreclaimable:240876 [ 480.910237][T20308] mapped:29220 shmem:3279 pagetables:999 [ 480.910237][T20308] sec_pagetables:0 bounce:0 [ 480.910237][T20308] kernel_misc_reclaimable:0 [ 480.910237][T20308] free:1173817 free_pcp:12953 free_cma:0 [ 480.941277][T20312] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 480.992003][T20312] wg1 speed is unknown, defaulting to 1000 [ 480.999722][T20312] wg1 speed is unknown, defaulting to 1000 [ 481.007916][T20312] wg1 speed is unknown, defaulting to 1000 [ 481.019221][T20312] wg1 speed is unknown, defaulting to 1000 [ 481.028695][T20308] Node 0 active_anon:43816kB inactive_anon:0kB active_file:14232kB inactive_file:159988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116884kB dirty:616kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14480kB pagetables:3884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 481.066141][T20308] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 481.098079][T20315] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3737'. [ 481.108203][T20308] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.127523][T20312] wg1 speed is unknown, defaulting to 1000 [ 481.141769][T20308] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 481.150628][T20308] Node 0 DMA32 free:787112kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43816kB inactive_anon:0kB active_file:14232kB inactive_file:159988kB unevictable:1536kB writepending:616kB zspages:0kB present:3129332kB managed:2565108kB mlocked:0kB bounce:0kB free_pcp:35768kB local_pcp:16056kB free_cma:0kB [ 481.199584][T20312] wg1 speed is unknown, defaulting to 1000 [ 481.221379][T20324] xt_TCPMSS: Only works on TCP SYN packets [ 481.236513][T20308] lowmem_reserve[]: 0 0 0 0 0 [ 481.242323][T20308] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.273952][T20308] lowmem_reserve[]: 0 0 0 0 0 [ 481.278606][T20326] nbd: must specify at least one socket [ 481.281476][T20308] Node 1 Normal free:3900768kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15416kB local_pcp:9900kB free_cma:0kB [ 481.308771][T20326] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 481.330993][T20308] lowmem_reserve[]: 0 0 0 0 0 [ 481.349253][T20326] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 481.360115][T20308] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 481.360242][T20308] Node 0 DMA32: 230*4kB (M) 701*8kB (UME) 372*16kB (UME) 198*32kB (UME) 84*64kB (UME) 58*128kB (UME) 39*256kB (UM) 48*512kB (UME) 52*1024kB (UM) 6*2048kB (UM) 160*4096kB (UM) = 787072kB [ 481.360412][T20308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 481.360515][T20308] Node 1 Normal: 184*4kB (UME) 48*8kB (UME) 42*16kB (UME) 103*32kB (UME) 36*64kB (UME) [ 481.407028][T20312] wg1 speed is unknown, defaulting to 1000 [ 481.410414][T20308] 11*128kB (UME) 7*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3900768kB [ 481.436557][T20308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.450856][T20308] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 481.460787][T20312] wg1 speed is unknown, defaulting to 1000 [ 481.462275][T20326] sctp: [Deprecated]: syz.3.3740 (pid 20326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.462275][T20326] Use struct sctp_sack_info instead [ 481.469595][T20312] wg1 speed is unknown, defaulting to 1000 [ 481.492019][T20326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3740'. [ 481.502404][T20308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.514348][T20312] wg1 speed is unknown, defaulting to 1000 [ 481.556425][T20308] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 481.565741][T20308] 44986 total pagecache pages [ 481.570617][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3740'. [ 481.571034][T20331] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3741'. [ 481.586039][T20308] 0 pages in swap cache [ 481.593694][T20308] Free swap = 124996kB [ 481.605386][T20326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 481.619969][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3740'. [ 481.631137][T20308] Total swap = 124996kB [ 481.640938][T20308] 2097051 pages RAM [ 481.654931][T20308] 0 pages HighMem/MovableOnly [ 481.660057][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3740'. [ 481.669100][T20308] 424132 pages reserved [ 481.676146][T20308] 0 pages cma reserved [ 482.342709][T20360] atm:sigd_send: bad message type 68 [ 482.398795][T20363] lo speed is unknown, defaulting to 1000 [ 482.434581][T20363] wg1 speed is unknown, defaulting to 1000 [ 482.489621][T20370] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 482.559043][T20370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.807756][T20377] tipc: Enabled bearer , priority 26 [ 482.850727][T20377] tipc: Enabled bearer , priority 0 [ 483.004126][T20385] bond1: option xmit_hash_policy: invalid value (34) [ 483.062492][T20385] bond1 (unregistering): Released all slaves [ 483.207587][T20384] bond1: option xmit_hash_policy: invalid value (34) [ 483.233269][T20384] bond1 (unregistering): Released all slaves [ 483.650237][T20412] netlink: 'syz.5.3761': attribute type 1 has an invalid length. [ 483.835537][T20431] netlink: 'syz.5.3768': attribute type 1 has an invalid length. [ 483.932811][T20426] netlink: 'syz.4.3766': attribute type 1 has an invalid length. [ 483.978109][T20444] netlink: 'syz.2.3770': attribute type 13 has an invalid length. [ 484.013618][ T24] tipc: Node number set to 4047849796 [ 484.044732][T20434] bond1: (slave bridge3): making interface the new active one [ 484.055005][T20434] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 484.299006][T20464] x_tables: ip_tables: ah match: only valid for protocol 51 [ 484.348547][T20469] __nla_validate_parse: 7 callbacks suppressed [ 484.348564][T20469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3777'. [ 484.639609][T20444] veth1_to_hsr: left allmulticast mode [ 484.732315][ T9661] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.756609][ T9661] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.841432][ T9661] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.851181][ T9661] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.217619][T20508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3787'. [ 485.231866][T20510] IPVS: ip_vs_edit_dest(): server weight less than zero [ 485.342679][T20506] lo speed is unknown, defaulting to 1000 [ 485.351656][T20506] wg1 speed is unknown, defaulting to 1000 [ 486.074512][T20547] pim6reg1: entered promiscuous mode [ 486.118673][T20547] pim6reg1: entered allmulticast mode [ 486.125712][T20544] netlink: 584 bytes leftover after parsing attributes in process `syz.1.3796'. [ 486.435216][T20566] netlink: 'syz.2.3803': attribute type 33 has an invalid length. [ 486.444212][T20566] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3803'. [ 486.538842][T20578] netlink: 'syz.2.3807': attribute type 12 has an invalid length. [ 486.613447][T20580] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3808'. [ 486.624262][T20580] netlink: 'syz.5.3808': attribute type 1 has an invalid length. [ 486.710710][T20587] netlink: 'syz.4.3809': attribute type 23 has an invalid length. [ 486.834210][T20595] IPVS: set_ctl: invalid protocol: 94 172.20.20.45:20004 [ 486.855238][T20595] x_tables: duplicate underflow at hook 1 [ 487.094922][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3817'. [ 487.236674][T20609] lo speed is unknown, defaulting to 1000 [ 487.244164][T20609] wg1 speed is unknown, defaulting to 1000 [ 487.438684][T20625] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 487.443353][T20629] netlink: 'syz.5.3822': attribute type 1 has an invalid length. [ 487.555360][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 487.571404][T20636] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3823'. [ 487.580999][T20635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3824'. [ 487.615877][T20629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 487.684073][T20633] bond6: (slave veth3): Enslaving as an active interface with a down link [ 487.708406][T20637] bond6: entered allmulticast mode [ 487.714513][T20649] netlink: 'syz.3.3824': attribute type 1 has an invalid length. [ 487.847962][T20655] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3829'. [ 488.051338][T20667] syzkaller1: entered promiscuous mode [ 488.075107][T20668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.082416][T20668] IPv6: NLM_F_CREATE should be set when creating new route [ 488.089771][T20668] IPv6: NLM_F_CREATE should be set when creating new route [ 488.096297][T20667] syzkaller1: entered allmulticast mode [ 488.735894][T20697] xt_HMARK: proto mask must be zero with L3 mode [ 489.176738][T20724] ip6gretap0: entered promiscuous mode [ 489.182882][T20724] vlan4: entered promiscuous mode [ 489.436960][T20758] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 489.536141][T20763] __nla_validate_parse: 32 callbacks suppressed [ 489.536158][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3862'. [ 489.574020][T20766] validate_nla: 1 callbacks suppressed [ 489.574037][T20766] netlink: 'syz.2.3864': attribute type 1 has an invalid length. [ 489.686563][T20775] netlink: 'syz.5.3866': attribute type 4 has an invalid length. [ 489.713519][T20771] bond2: (slave vxcan7): The slave device specified does not support setting the MAC address [ 489.725060][T20771] bond2: (slave vxcan7): Error -95 calling set_mac_address [ 489.755143][T20775] netlink: 'syz.5.3866': attribute type 5 has an invalid length. [ 489.765286][T20766] bond2: (slave gretap1): making interface the new active one [ 489.783616][T20766] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 489.806555][T20768] IPVS: length: 141 != 8 [ 489.811467][T20775] netlink: 'syz.5.3866': attribute type 3 has an invalid length. [ 489.917835][T20784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3869'. [ 489.969619][T20787] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3870'. [ 490.369979][T20815] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 490.411169][T20815] x_tables: duplicate underflow at hook 1 [ 490.421094][T20815] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002 [ 490.488453][T20818] netlink: 'syz.3.3879': attribute type 11 has an invalid length. [ 490.502765][T20818] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3879'. [ 490.613920][T20827] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3880'. [ 490.888975][T20849] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:34 to non-existent VLAN 2560 [ 490.890582][T20846] tipc: Enabled bearer , priority 0 [ 490.985198][T20852] netlink: 576 bytes leftover after parsing attributes in process `syz.5.3888'. [ 491.015773][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3891'. [ 491.592829][T20892] netlink: 'syz.2.3901': attribute type 21 has an invalid length. [ 491.604251][T20892] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3901'. [ 491.634523][T20892] netlink: 'syz.2.3901': attribute type 5 has an invalid length. [ 491.646854][T20892] netlink: 'syz.2.3901': attribute type 6 has an invalid length. [ 491.656546][T20892] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3901'. [ 491.733548][T20898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3904'. [ 491.774656][T20900] lo speed is unknown, defaulting to 1000 [ 491.783836][T20900] wg1 speed is unknown, defaulting to 1000 [ 491.891436][T20908] tipc: Enabling of bearer rejected, failed to enable media [ 491.918938][T20908] syzkaller0: entered promiscuous mode [ 491.930047][T20908] syzkaller0: entered allmulticast mode [ 492.053764][T20919] batadv0: entered promiscuous mode [ 492.060470][T20919] batadv0: left promiscuous mode [ 492.334781][T20926] netlink: 'syz.5.3910': attribute type 1 has an invalid length. [ 493.337848][T20983] netlink: 'syz.3.3924': attribute type 13 has an invalid length. [ 493.382785][T20983] netlink: 'syz.3.3924': attribute type 17 has an invalid length. [ 493.560573][T20983] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.571510][T20983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.612903][T21008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.654251][T20999] tipc: Enabling of bearer rejected, failed to enable media [ 493.689649][T20997] lo speed is unknown, defaulting to 1000 [ 493.701752][T20997] wg1 speed is unknown, defaulting to 1000 [ 493.944273][T21022] lo speed is unknown, defaulting to 1000 [ 493.966932][T21022] wg1 speed is unknown, defaulting to 1000 [ 494.240707][T21035] geneve3: entered promiscuous mode [ 494.251597][T21035] geneve3: entered allmulticast mode [ 494.268046][ T9655] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 494.277851][ T9655] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 494.289932][ T9655] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 494.302318][ T9655] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 494.443046][T21051] nftables ruleset with unbound chain [ 494.598972][T21059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.607211][T21059] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 494.769859][T21057] lo speed is unknown, defaulting to 1000 [ 494.772637][T21069] validate_nla: 1 callbacks suppressed [ 494.772651][T21069] netlink: 'syz.5.3947': attribute type 1 has an invalid length. [ 494.848647][T21069] bond7: entered promiscuous mode [ 494.854196][T21069] 8021q: adding VLAN 0 to HW filter on device bond7 [ 494.861551][T21057] wg1 speed is unknown, defaulting to 1000 [ 494.910478][T21069] 8021q: adding VLAN 0 to HW filter on device bond8 [ 494.921955][T21069] bond7: (slave bond8): making interface the new active one [ 494.929583][T21069] bond8: entered promiscuous mode [ 494.935431][T21069] bond7: (slave bond8): Enslaving as an active interface with an up link [ 494.944554][T21060] lo speed is unknown, defaulting to 1000 [ 494.991686][T21076] pim6reg: entered allmulticast mode [ 495.024435][T21080] syzkaller0: entered promiscuous mode [ 495.028998][T21060] wg1 speed is unknown, defaulting to 1000 [ 495.034432][T21080] syzkaller0: entered allmulticast mode [ 495.058301][T21076] pim6reg: left allmulticast mode [ 495.065178][T21082] __nla_validate_parse: 13 callbacks suppressed [ 495.065192][T21082] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3951'. [ 495.081559][T21082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3951'. [ 495.122350][T21082] IPv6: sit1: Disabled Multicast RS [ 495.128969][T21082] sit1: entered allmulticast mode [ 495.235060][T21086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3952'. [ 495.273941][T21080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3950'. [ 495.577528][T21111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3956'. [ 495.645462][T21114] bond2: (slave bond_slave_1): Device is not bonding slave [ 495.653460][T21114] bond2: option active_slave: invalid value (bond_slave_1) [ 495.664185][T21114] bond2 (unregistering): Released all slaves [ 495.683788][T21108] lo speed is unknown, defaulting to 1000 [ 495.691459][T21108] wg1 speed is unknown, defaulting to 1000 [ 496.007748][T21126] netlink: 'syz.4.3961': attribute type 4 has an invalid length. [ 496.025323][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3962'. [ 496.037226][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3962'. [ 496.051060][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3962'. [ 496.804565][T21169] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3972'. [ 496.952167][ T5988] IPVS: starting estimator thread 0... [ 496.955056][T21175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3973'. [ 496.963179][T21178] netlink: 'syz.3.3975': attribute type 1 has an invalid length. [ 497.011458][T21177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 497.020076][T21178] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 497.057741][T21179] IPVS: using max 41 ests per chain, 98400 per kthread [ 497.123423][T21186] lo speed is unknown, defaulting to 1000 [ 497.339406][T21186] wg1 speed is unknown, defaulting to 1000 [ 497.371906][T21199] vlan2: entered promiscuous mode [ 497.389257][T21199] erspan0: entered promiscuous mode [ 497.394630][T21199] vlan2: entered allmulticast mode [ 497.428805][T21199] erspan0: entered allmulticast mode [ 497.683650][T21218] netlink: 'syz.1.3983': attribute type 1 has an invalid length. [ 497.932246][T21237] netlink: 'syz.4.3986': attribute type 3 has an invalid length. [ 498.374210][T21278] pimreg1: tun_chr_ioctl cmd 1074025677 [ 498.386512][T21278] pimreg1: linktype set to 776 [ 498.393172][ T9661] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 498.479108][T21287] ip_vti0: entered promiscuous mode [ 498.491545][T21290] syzkaller0: entered promiscuous mode [ 498.497311][T21290] syzkaller0: entered allmulticast mode [ 498.679282][T21304] ip_vti0: left promiscuous mode [ 498.687997][T21304] syz_tun: left promiscuous mode [ 498.711971][T21304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.751060][ T5988] lo speed is unknown, defaulting to 1000 [ 498.761157][ T5988] syz1: Port: 1 Link ACTIVE [ 498.770129][T21311] openvswitch: netlink: Flow key attr not present in new flow. [ 499.022529][T21297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.100722][T21327] netlink: 'syz.3.4006': attribute type 13 has an invalid length. [ 499.414980][T21327] ip6gretap0: left allmulticast mode [ 499.789504][T21365] lo speed is unknown, defaulting to 1000 [ 499.802926][T21365] wg1 speed is unknown, defaulting to 1000 [ 500.355413][T21385] __nla_validate_parse: 11 callbacks suppressed [ 500.355432][T21385] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4022'. [ 500.409404][T21385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4022'. [ 500.447544][T21385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4022'. [ 500.467029][T21391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4024'. [ 500.476216][T21385] macvlan0: entered allmulticast mode [ 500.476236][T21385] veth1_vlan: entered allmulticast mode [ 500.665416][ T30] audit: type=1804 audit(1763425119.130:10): pid=21402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4027" name="/newroot/269/cgroup.controllers" dev="tmpfs" ino=1390 res=1 errno=0 [ 500.669700][T21404] netlink: 'syz.5.4026': attribute type 15 has an invalid length. [ 500.710928][ T30] audit: type=1800 audit(1763425119.130:11): pid=21402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4027" name="cgroup.controllers" dev="tmpfs" ino=1390 res=0 errno=0 [ 501.555134][T21417] netlink: 'syz.3.4029': attribute type 21 has an invalid length. [ 502.819001][T21417] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4029'. [ 510.156258][T21430] netlink: 'syz.5.4032': attribute type 2 has an invalid length. [ 510.444303][T21454] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4038'. [ 510.522635][T21442] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4037'. [ 510.572784][T21458] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4042'. [ 510.657220][T21462] lo speed is unknown, defaulting to 1000 [ 510.664929][T21462] wg1 speed is unknown, defaulting to 1000 [ 511.062441][T21482] SET target dimension over the limit! [ 511.518246][T21490] lo speed is unknown, defaulting to 1000 [ 511.533213][T21490] wg1 speed is unknown, defaulting to 1000 [ 511.553751][T21494] netem: incorrect ge model size [ 511.566117][T21494] netem: change failed [ 511.659016][T21497] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4050'. [ 511.696648][T21497] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 512.047542][T21513] ipt_REJECT: TCP_RESET invalid for non-tcp [ 512.174521][T21520] lo speed is unknown, defaulting to 1000 [ 512.184188][T21522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.195558][T21520] wg1 speed is unknown, defaulting to 1000 [ 512.301954][T21524] lo speed is unknown, defaulting to 1000 [ 512.351847][T21528] macsec0: entered promiscuous mode [ 512.357925][T21528] mac80211_hwsim hwsim72 wlan1: entered promiscuous mode [ 512.378312][T21528] macvlan2: entered promiscuous mode [ 512.406043][T21524] wg1 speed is unknown, defaulting to 1000 [ 513.410617][T21556] netlink: 'syz.4.4070': attribute type 1 has an invalid length. [ 513.446587][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4070'. [ 513.455476][T21556] netlink: 364 bytes leftover after parsing attributes in process `syz.4.4070'. [ 513.462487][T21559] sctp: [Deprecated]: syz.3.4071 (pid 21559) Use of int in maxseg socket option. [ 513.462487][T21559] Use struct sctp_assoc_value instead [ 513.505364][T21556] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4070'. [ 513.516854][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4070'. [ 513.654829][T21573] tipc: Enabled bearer , priority 0 [ 513.662990][T21577] syzkaller0: entered promiscuous mode [ 513.673570][T21577] syzkaller0: entered allmulticast mode [ 513.742248][T21577] tipc: Resetting bearer [ 513.812589][T21577] tipc: Disabling bearer [ 513.864210][T21591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4080'. [ 513.939386][T21591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.951830][T21597] bridge_slave_0: left allmulticast mode [ 513.963196][T21597] bridge_slave_0: left promiscuous mode [ 513.970468][T21597] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.984160][T21597] bridge_slave_1: left allmulticast mode [ 513.991411][T21597] bridge_slave_1: left promiscuous mode [ 513.997696][T21597] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.025680][T21597] bond0: (slave bond_slave_0): Releasing backup interface [ 514.055651][T21597] bond0: (slave bond_slave_1): Releasing backup interface [ 514.096600][T21597] team0: Port device team_slave_0 removed [ 514.104315][T21613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4082'. [ 514.169939][T21597] team0: Port device team_slave_1 removed [ 514.180080][T21597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.190484][T21597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.198947][T21597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 514.309846][T21599] bond2 (unregistering): Released all slaves [ 514.335877][T21605] netlink: 'syz.3.4082': attribute type 4 has an invalid length. [ 514.562211][T21631] ip6tnl2: entered allmulticast mode [ 514.600015][T21631] netlink: 'syz.1.4091': attribute type 3 has an invalid length. [ 514.734132][T21643] netlink: 'syz.4.4095': attribute type 10 has an invalid length. [ 514.775900][T21643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.790118][T21643] .`: (slave batadv0): Enslaving as an active interface with an up link [ 514.978944][T21653] lo speed is unknown, defaulting to 1000 [ 514.994445][T21653] wg1 speed is unknown, defaulting to 1000 [ 515.244174][T21681] delete_channel: no stack [ 515.272991][T21681] syzkaller1: entered promiscuous mode [ 515.280817][T21681] syzkaller1: entered allmulticast mode [ 515.291683][T21681] syzkaller0: Caught tx_queue_len zero misconfig [ 515.487289][T21690] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 515.500481][T21690] bond1 (unregistering): Released all slaves [ 516.312877][T21719] bond4 (unregistering): Released all slaves [ 516.757976][T21751] : entered promiscuous mode [ 516.794616][T21753] lo speed is unknown, defaulting to 1000 [ 516.804884][T21753] wg1 speed is unknown, defaulting to 1000 [ 517.563686][T21784] __nla_validate_parse: 10 callbacks suppressed [ 517.563705][T21784] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4135'. [ 517.973747][T21795] lo speed is unknown, defaulting to 1000 [ 517.996384][T21808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4143'. [ 518.009311][T21795] wg1 speed is unknown, defaulting to 1000 [ 518.029883][T21799] lo speed is unknown, defaulting to 1000 [ 518.059363][T21799] wg1 speed is unknown, defaulting to 1000 [ 518.342353][T21821] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4146'. [ 518.494302][T21827] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4148'. [ 518.601550][T21832] ip6t_srh: unknown srh match flags C404 [ 518.681623][T21836] netlink: 'syz.4.4150': attribute type 10 has an invalid length. [ 518.706784][T21836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4150'. [ 518.856682][T21836] geneve0: entered promiscuous mode [ 518.883359][T21836] team0: Port device geneve0 added [ 519.104053][T21850] x_tables: duplicate underflow at hook 1 [ 624.085939][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 624.092564][ C0] rcu: 0-...!: (1 GPs behind) idle=7cf4/1/0x4000000000000000 softirq=90291/90302 fqs=14 [ 624.103267][ C0] rcu: (t=10500 jiffies g=83969 q=742 ncpus=2) [ 624.109491][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10467 jiffies! g83969 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 624.121785][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=40253 [ 624.129646][ C0] rcu: rcu_preempt kthread starved for 10468 jiffies! g83969 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 624.140982][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 624.150923][ C0] rcu: RCU grace-period kthread stack dump: [ 624.156830][ C0] task:rcu_preempt state:I stack:27288 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 624.168710][ C0] Call Trace: [ 624.171967][ C0] [ 624.174880][ C0] __schedule+0x1798/0x4cc0 [ 624.179378][ C0] ? __lock_acquire+0xab9/0xd20 [ 624.184205][ C0] ? __pfx___schedule+0x10/0x10 [ 624.189086][ C0] ? schedule+0x91/0x360 [ 624.193319][ C0] schedule+0x165/0x360 [ 624.197459][ C0] schedule_timeout+0x12b/0x270 [ 624.202285][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 624.207630][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 624.213501][ C0] ? __pfx_process_timeout+0x10/0x10 [ 624.218765][ C0] ? prepare_to_swait_event+0x341/0x380 [ 624.224297][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 624.229130][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 624.235257][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 624.240515][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 624.245694][ C0] ? finish_swait+0xcd/0x1f0 [ 624.250262][ C0] rcu_gp_kthread+0x99/0x390 [ 624.254829][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 624.260011][ C0] ? __kthread_parkme+0x7b/0x200 [ 624.264921][ C0] ? __kthread_parkme+0x1a1/0x200 [ 624.269921][ C0] kthread+0x711/0x8a0 [ 624.273966][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 624.279135][ C0] ? __pfx_kthread+0x10/0x10 [ 624.283700][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.288873][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.294042][ C0] ? __pfx_kthread+0x10/0x10 [ 624.298605][ C0] ret_from_fork+0x4bc/0x870 [ 624.303172][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 624.308261][ C0] ? __switch_to_asm+0x39/0x70 [ 624.312998][ C0] ? __switch_to_asm+0x33/0x70 [ 624.317730][ C0] ? __pfx_kthread+0x10/0x10 [ 624.322297][ C0] ret_from_fork_asm+0x1a/0x30 [ 624.327045][ C0] [ 624.330042][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 624.336348][ C0] Sending NMI from CPU 0 to CPUs 1: [ 624.341542][ C1] NMI backtrace for cpu 1 [ 624.341562][ C1] CPU: 1 UID: 0 PID: 21860 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 624.341596][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.341613][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 624.341631][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 20 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 624.341644][ C1] RSP: 0018:ffffc90000a07c58 EFLAGS: 00000246 [ 624.341658][ C1] RAX: ffffffff8172bd9d RBX: 0000000000000003 RCX: ffff88806e869e40 [ 624.341669][ C1] RDX: 0000000000000100 RSI: ffffffff8d7102db RDI: ffffffff8bbf0760 [ 624.341679][ C1] RBP: ffffc90000a07d30 R08: ffffffff8f7cfd77 R09: 1ffffffff1ef9fae [ 624.341690][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9faf R12: dffffc0000000000 [ 624.341701][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000140f90 [ 624.341711][ C1] FS: 00007f16ca0e0c80(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 624.341724][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.341734][ C1] CR2: 00007f16ca2b4a90 CR3: 0000000057dee000 CR4: 00000000003526f0 [ 624.341747][ C1] Call Trace: [ 624.341754][ C1] [ 624.341759][ C1] kvm_wait+0x232/0x290 [ 624.341776][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.341791][ C1] ? __pfx_kvm_wait+0x10/0x10 [ 624.341813][ C1] __pv_queued_spin_lock_slowpath+0x7bf/0xb60 [ 624.341833][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 624.341850][ C1] ? __lock_acquire+0xab9/0xd20 [ 624.341868][ C1] queued_spin_lock_slowpath+0x43/0x50 [ 624.341887][ C1] do_raw_spin_lock+0x21f/0x290 [ 624.341903][ C1] ? __dev_queue_xmit+0xeba/0x3740 [ 624.341922][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 624.341940][ C1] ? __pfx_team_select_queue+0x10/0x10 [ 624.341961][ C1] __dev_queue_xmit+0xeba/0x3740 [ 624.341985][ C1] ? __dev_queue_xmit+0x284/0x3740 [ 624.342004][ C1] ? __lock_acquire+0xab9/0xd20 [ 624.342018][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 624.342037][ C1] ? skb_network_protocol+0x508/0x760 [ 624.342053][ C1] ? __lock_acquire+0xab9/0xd20 [ 624.342068][ C1] ? __pfx_skb_network_protocol+0x10/0x10 [ 624.342084][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 624.342107][ C1] ? __lock_acquire+0xab9/0xd20 [ 624.342121][ C1] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 624.342135][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 624.342153][ C1] macvlan_start_xmit+0x46d/0x6e0 [ 624.342174][ C1] ? __pfx_macvlan_start_xmit+0x10/0x10 [ 624.342196][ C1] ? validate_xmit_skb+0xd78/0x1500 [ 624.342217][ C1] dev_hard_start_xmit+0x2d7/0x830 [ 624.342240][ C1] __dev_queue_xmit+0x172a/0x3740 [ 624.342264][ C1] ? __dev_queue_xmit+0x284/0x3740 [ 624.342282][ C1] ? ip6t_do_table+0x1db/0x1560 [ 624.342297][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 624.342310][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 624.342327][ C1] ? ip6t_do_table+0x1376/0x1560 [ 624.342342][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 624.342361][ C1] ? __lock_acquire+0xab9/0xd20 [ 624.342383][ C1] ? ip6_finish_output2+0xd4c/0x1480 [ 624.342400][ C1] ip6_finish_output2+0xf70/0x1480 [ 624.342420][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 624.342435][ C1] ? ip6_mtu+0x7d/0x490 [ 624.342453][ C1] ? ip6_mtu+0x38c/0x490 [ 624.342471][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 624.342490][ C1] ? ip6_output+0x126/0x550 [ 624.342508][ C1] ip6_output+0x340/0x550 [ 624.342529][ C1] ndisc_send_skb+0xbce/0x1510 [ 624.342546][ C1] ? ndisc_send_skb+0x1e4/0x1510 [ 624.342566][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 624.342582][ C1] ? __pfx_dst_output+0x10/0x10 [ 624.342609][ C1] addrconf_rs_timer+0x369/0x670 [ 624.342626][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 624.342645][ C1] call_timer_fn+0x17e/0x5f0 [ 624.342659][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 624.342672][ C1] ? call_timer_fn+0xbe/0x5f0 [ 624.342685][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 624.342703][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.342721][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.342734][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 624.342748][ C1] __run_timer_base+0x61a/0x860 [ 624.342774][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 624.342791][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 624.342817][ C1] run_timer_softirq+0xb7/0x180 [ 624.342836][ C1] handle_softirqs+0x286/0x870 [ 624.342853][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 624.342870][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 624.342887][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 624.342907][ C1] __irq_exit_rcu+0xca/0x1f0 [ 624.342921][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 624.342940][ C1] irq_exit_rcu+0x9/0x30 [ 624.342953][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 624.342973][ C1] [ 624.342978][ C1] [ 624.342984][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 624.342999][ C1] RIP: 0010:down_read+0x16d/0x2e0 [ 624.343014][ C1] Code: 00 fc ff df 65 4c 8b 34 25 08 80 6e 92 48 83 c3 08 48 89 df be 08 00 00 00 e8 4f ec dc f6 49 89 dc 49 c1 ec 03 43 80 3c 3c 00 <74> 08 48 89 df e8 c9 e9 dc f6 48 8b 03 83 e0 02 49 09 c6 49 83 ce [ 624.343026][ C1] RSP: 0018:ffffc9000b88f6a8 EFLAGS: 00000246 [ 624.343038][ C1] RAX: 8000000000000001 RBX: ffff88802dc0d450 RCX: ffffffff8b48db61 [ 624.343049][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802dc0d450 [ 624.343058][ C1] RBP: ffffc9000b88f810 R08: ffff88802dc0d457 R09: 1ffff11005b81a8a [ 624.343068][ C1] R10: dffffc0000000000 R11: ffffed1005b81a8b R12: 1ffff11005b81a8a [ 624.343079][ C1] R13: 0000000000000017 R14: ffff88806e869e40 R15: dffffc0000000000 [ 624.343094][ C1] ? down_read+0x161/0x2e0 [ 624.343113][ C1] ? down_read+0x161/0x2e0 [ 624.343129][ C1] validate_mm+0x1cc/0x4a0 [ 624.343146][ C1] ? __pfx_validate_mm+0x10/0x10 [ 624.343164][ C1] ? vma_complete+0x9e7/0xae0 [ 624.343179][ C1] ? vma_prepare+0x485/0x4b0 [ 624.343197][ C1] ? vma_adjust_trans_huge+0x286/0x370 [ 624.343213][ C1] __split_vma+0x8bd/0xa00 [ 624.343234][ C1] ? __pfx___split_vma+0x10/0x10 [ 624.343255][ C1] ? can_vma_merge_left+0x195/0x6b0 [ 624.343273][ C1] vma_modify+0x13b3/0x1970 [ 624.343297][ C1] vma_modify_flags+0x1e8/0x230 [ 624.343314][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 624.343338][ C1] ? mas_next_slot+0xc20/0xcf0 [ 624.343358][ C1] mprotect_fixup+0x407/0x9c0 [ 624.343377][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 624.343390][ C1] ? common_file_perm+0x1b5/0x230 [ 624.343413][ C1] do_mprotect_pkey+0x8c5/0xcd0 [ 624.343435][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 624.343462][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 624.343480][ C1] __x64_sys_mprotect+0x80/0x90 [ 624.343495][ C1] do_syscall_64+0xfa/0xfa0 [ 624.343508][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.343522][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.343535][ C1] ? clear_bhb_loop+0x60/0xb0 [ 624.343551][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.343565][ C1] RIP: 0033:0x7f16ca4772c7 [ 624.343579][ C1] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 624.343591][ C1] RSP: 002b:00007ffe3a5f9fd8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 624.343604][ C1] RAX: ffffffffffffffda RBX: 00007f16ca14e6b0 RCX: 00007f16ca4772c7 [ 624.343615][ C1] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f16ca142000 [ 624.343624][ C1] RBP: 00007ffe3a5fa2a0 R08: 0000000000000000 R09: 00007f16ca1e12e0 [ 624.343633][ C1] R10: 00007f16ca14e6b0 R11: 0000000000000206 R12: 0000000000000038 [ 624.343643][ C1] R13: 0000010c7642cb82 R14: 0000000000000000 R15: 00007f16ca48b310 [ 624.343661][ C1] [ 624.344557][ C0] CPU: 0 UID: 0 PID: 14205 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT(full) [ 624.344568][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.344574][ C0] Workqueue: mld mld_ifc_work [ 624.344584][ C0] RIP: 0010:find_entry_to_transmit+0x205/0x8d0 [ 624.344595][ C0] Code: 4c 89 ef e8 2d 8a c5 f8 48 8b 44 24 50 49 2b 45 00 49 63 f7 48 89 c1 48 09 f1 48 c1 e9 20 4c 89 7c 24 28 74 16 48 99 48 f7 fe <49> 89 d7 eb 14 e8 91 c8 5f f8 31 ed e9 e9 05 00 00 31 d2 41 f7 f7 [ 624.344603][ C0] RSP: 0018:ffffc9001af0eab8 EFLAGS: 00000207 [ 624.344610][ C0] RAX: 000030f237d709e3 RBX: 0000000000119400 RCX: 0000000018794cdd [ 624.344616][ C0] RDX: 000000000000193e RSI: 0000000000008001 RDI: ffff8880264ab260 [ 624.344622][ C0] RBP: ffff88806d7dc130 R08: ffff8880264ab267 R09: 1ffff11004c9564c [ 624.344628][ C0] R10: dffffc0000000000 R11: ffffed1004c9564d R12: ffff88806d7dc000 [ 624.344634][ C0] R13: ffff88806d7dc140 R14: dffffc0000000000 R15: 0000000000008001 [ 624.344640][ C0] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 624.344647][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.344652][ C0] CR2: 00007f099e0ebf98 CR3: 0000000063c9c000 CR4: 00000000003526f0 [ 624.344661][ C0] Call Trace: [ 624.344664][ C0] [ 624.344680][ C0] taprio_enqueue_one+0xb66/0x1650 [ 624.344695][ C0] ? taprio_enqueue_one+0x5f8/0x1650 [ 624.344707][ C0] ? __pfx_taprio_enqueue_one+0x10/0x10 [ 624.344716][ C0] ? taprio_skb_exceeds_queue_max_sdu+0x2c6/0x3a0 [ 624.344727][ C0] ? taprio_enqueue+0x234/0x680 [ 624.344736][ C0] ? __dev_queue_xmit+0xeba/0x3740 [ 624.344747][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 624.344761][ C0] dev_qdisc_enqueue+0x4e/0x260 [ 624.344776][ C0] __dev_queue_xmit+0x1ad8/0x3740 [ 624.344794][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 624.344807][ C0] ? ring_buffer_unlock_commit+0x476/0x5f0 [ 624.344820][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 624.344832][ C0] ? skb_network_protocol+0x508/0x760 [ 624.344843][ C0] ? trace_event_buffer_commit+0x264/0x7b0 [ 624.344855][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 624.344877][ C0] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 624.344886][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 624.344898][ C0] macvlan_start_xmit+0x46d/0x6e0 [ 624.344911][ C0] ? __pfx_macvlan_start_xmit+0x10/0x10 [ 624.344921][ C0] ? validate_xmit_skb+0xd78/0x1500 [ 624.344936][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 624.344955][ C0] __dev_queue_xmit+0x172a/0x3740 [ 624.344973][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 624.344986][ C0] ? fib_rules_lookup+0x96/0xe90 [ 624.344997][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 624.345007][ C0] ? l3mdev_update_flow+0x29/0x640 [ 624.345017][ C0] ? l3mdev_update_flow+0x4d1/0x640 [ 624.345028][ C0] ? __lock_acquire+0xab9/0xd20 [ 624.345040][ C0] ? __lock_acquire+0xab9/0xd20 [ 624.345058][ C0] ? ip6_finish_output2+0xd4c/0x1480 [ 624.345070][ C0] ip6_finish_output2+0xf70/0x1480 [ 624.345085][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 624.345094][ C0] ? ip6_mtu+0x7d/0x490 [ 624.345105][ C0] ? ip6_mtu+0x38c/0x490 [ 624.345117][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 624.345129][ C0] ? ip6_output+0x126/0x550 [ 624.345140][ C0] ip6_output+0x340/0x550 [ 624.345154][ C0] NF_HOOK+0x9e/0x380 [ 624.345163][ C0] ? NF_HOOK+0x101/0x380 [ 624.345171][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 624.345180][ C0] ? __pfx_dst_output+0x10/0x10 [ 624.345190][ C0] ? icmp6_dst_alloc+0x3a5/0x420 [ 624.345203][ C0] ? icmp6_dst_alloc+0x3a5/0x420 [ 624.345217][ C0] mld_sendpack+0x8d4/0xe60 [ 624.345233][ C0] ? mld_sendpack+0x1e7/0xe60 [ 624.345242][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 624.345260][ C0] mld_ifc_work+0x83e/0xd60 [ 624.345269][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.345281][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 624.345292][ C0] process_scheduled_works+0xae1/0x17b0 [ 624.345315][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.345333][ C0] worker_thread+0x8a0/0xda0 [ 624.345355][ C0] kthread+0x711/0x8a0 [ 624.345368][ C0] ? __pfx_worker_thread+0x10/0x10 [ 624.345377][ C0] ? __pfx_kthread+0x10/0x10 [ 624.345389][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.345400][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.345407][ C0] ? __pfx_kthread+0x10/0x10 [ 624.345418][ C0] ret_from_fork+0x4bc/0x870 [ 624.345429][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 624.345447][ C0] ? __switch_to_asm+0x39/0x70 [ 624.345454][ C0] ? __switch_to_asm+0x33/0x70 [ 624.345461][ C0] ? __pfx_kthread+0x10/0x10 [ 624.345472][ C0] ret_from_fork_asm+0x1a/0x30 [ 624.345488][ C0]