last executing test programs: 17m31.533832512s ago: executing program 1 (id=2752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17m31.297784286s ago: executing program 1 (id=2757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) (async) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000072009fb3000000000000000007"], 0x18}}, 0x0) (async) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, 0x0, &(0x7f0000000480)) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002c0007012bbd7000ffdbdf25067c0000080001800400dd8014000380100005"], 0x30}}, 0xc010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000500000000003eadbc7312daca6bc5c038c6eeaab344dc744442f71e0f5412d7b3078c99aebd6cee259ffbd4935b9703432ede0c9de86d7415097c7211c57c380c4605d48c8762f42fa59911b6eb065eb7cd", @ANYRES32=r7, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) (async) recvmsg(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/180, 0xb4}, 0x2) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003d80)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1e}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20001091}, 0x40) 17m31.03956563s ago: executing program 1 (id=2763): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'pim6reg\x00', @local}) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, 0x0, &(0x7f0000001680)=""/227}, 0x20) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) 17m30.892302327s ago: executing program 1 (id=2766): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r3 = accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r3) write(r0, &(0x7f00000002c0), 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r8, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r10, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r12 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c800000", @ANYRES16=r11, @ANYBLOB="010d0000000000000000030000002800018014000280080003000f00000008000400060000000d0001007564703a73797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 17m29.833020774s ago: executing program 1 (id=2777): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), r3) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf25230000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004081}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r7, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r6}, 0x20) recvmmsg(r6, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10051, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000600000914000200000000000000000000000000000000010f000700756e636f6e66696e65640000"], 0x38}, 0x2, 0x34005}, 0x0) r9 = accept4(r2, &(0x7f0000000100)=@ieee802154={0x24, @short}, &(0x7f0000000180)=0x80, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x234, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff7, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @local, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x877}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r11 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x10f8, 0x8}}}}}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_end\x00', r12}, 0x18) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r13, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="0104000090532f200c6cb52b00000000002512000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$kcm(r11, 0x0, 0x20040000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) 17m29.575747361s ago: executing program 1 (id=2782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[0x401], 0x0, 0x2000000026fe, 0x100000, 0x1}}, 0x40) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r2, 0x0, 0x15, &(0x7f0000000140)='mm_page_free_batched\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) 17m14.487342497s ago: executing program 32 (id=2782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[0x401], 0x0, 0x2000000026fe, 0x100000, 0x1}}, 0x40) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r2, 0x0, 0x15, &(0x7f0000000140)='mm_page_free_batched\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) 2m41.520682082s ago: executing program 0 (id=9205): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x24}}, 0x4000010) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000200), 0x4) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x200, 0x8, [@default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m41.273079195s ago: executing program 0 (id=9207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x268, r1, 0x100, 0xfb4, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bdaf597262b02b94f392f14481237a4778d353e345f7e5908d5725d8d5ce7a98"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "43bc0b72bb7a69b4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6b2386525ecd66ab558d5ca0a3ec8231"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a275f22bac7ef092ab0f667d24ac2735196cc8d0d337113b4d38acdbafee743d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fffffff}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8e540d07519e0979f7da4e3537309dd34891902e1219c9d9769de6c1053eec73"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "426d2bb9453086ce"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e649d959d31ec23f282f3c56d7f23cddcf61d2947b5277112004e7add5ea0f9b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="28eda9675d58d6d9e66b18749c9af6d87334d2a0f4b0bac8e7174b141c993503"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4058edabe8ff037e85d2dd51faa413861c5ae44fc73c2774f9803bf89c07f061"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="782fbd7986a04f942bd3914b0831e3ef"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "112627af6eabae5a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dc8a6050cf63fe8a808f9047742eae828b8a4b4a8f3b2f9e89f0e96ef1be243a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0aadced174a8730a"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="784bad4fe616ae473d93bd50739cb1b4ad9fe013be20db69b85eccad72d23a76"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e5151b7c63835b9b65a61a76068b87c779f3289da0b96b28"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "473416f101c3a2f3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="dd357c4caa3b3c814241b4b743f67896"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="13893684a27ed9942d48917843f0ff25e8357b580f7f5444e6f30d6e414d376d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ac0167cf4b0fafacaf849ae6f835a16f2741fe929f0def7d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d5b905ea432be8611cd553ab07b76d158d8d6bef9c3ffb4d"}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000400)={0x4c0, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x21d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb466}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1fd}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd6c}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}]}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76b2}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xa, @private2, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf, @local, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9e0}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x287ec961}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1faf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f4c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8080) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xf4, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004804}, 0x2800) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, r1, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x100}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x15, 0x2a, [@cf={0x4, 0x6, {0xe, 0x6, 0x4, 0x95d}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x61}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0xd0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000f40)={0x0, 0x1421, 0x1, [0x928a]}, &(0x7f0000000f80)=0xa) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000fc0)={r7, 0x9, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000001000)={r7, 0x7}, 0x8) socket$netlink(0x10, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000001040)="1947234f3472942b4991ebbb09733e39da8d1198bb4fb61fcb01288762ce3810ee9fb14a2a105cb9a008ecd644747f2c088f487f64ae3d8834b51ec568a709bba9ada5dcd94adfc8760e85bc89ccc36be571c6471ed560225f92883d615e29b7630971e38231685fdbeb510384ce59", 0x6f, 0x3d57f31cae1c00a6, &(0x7f00000010c0)={0xa, 0x4e22, 0x9, @mcast2, 0x1}, 0x1c) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001380)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000001140)={0x1e0, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x12}, 0x20000000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'syztnl1\x00', &(0x7f00000013c0)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x4, 0x0, 0x4b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x8000, 0x8000, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001500)={'syztnl2\x00', &(0x7f0000001480)={'ip6_vti0\x00', r10, 0x2f, 0xf7, 0x9, 0x7, 0x42, @mcast1, @empty, 0x7800, 0x10, 0x6, 0x101}}) accept4$inet6(r9, &(0x7f0000001540)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001580)=0x1c, 0x80000) close(r2) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f00000015c0), 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x11, 0xffffffffffffffff, 0x81e05000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'ip6_vti0\x00', r11, 0x4, 0x6, 0xc2, 0x101, 0x4e, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x7800, 0x751d, 0x3}}) accept4$netrom(0xffffffffffffffff, &(0x7f00000016c0)={{0x3, @netrom}, [@rose, @default, @default, @remote, @bcast, @netrom, @null, @null]}, &(0x7f0000001740)=0x48, 0x80800) 2m40.913218547s ago: executing program 0 (id=9209): unshare(0x20000000) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000feffffff000000000000000018010000514f72f600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000808500000006000000b7080000000000007baaf8ff00000000b5080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001100)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)="e9be0d1a6e6dca638c6d9507c301a471b5d77a85d6eef5d566c391a4d9748f019181dd0e554ddc2ef94373e89df2e70bb1609114d7065cadca8b17130f4e4a72d33218ca3bea85adfcf713cf51da554588fd4b1ddd85897400811bcb6480493c7437635caaf8eed3f32de7e5bac1da18c5278e7aabb583b8e5d7", 0x7a}, 0x1, 0x0, 0x0, 0x24040001}, 0x20044806) 2m40.561540713s ago: executing program 4 (id=9212): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x100006, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x1000, 0xb4}, &(0x7f0000000600)=0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x228, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba"}]}, @nested={0x1c4, 0x6, 0x0, 0x1, [@nested={0x1c0, 0x75, 0x0, 0x1, [@nested={0x1bc, 0x105, 0x0, 0x1, [@nested={0x1b5, 0xce, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r3}, @generic="9db6859cccae2434ff2e8f93db2df78257b0170f04b50b3be1e4c913ca056fe917b18f5222ac3d3541f98865f03144d0b08bebc32edca5884fdd79091323071734155332e8388f50ece0c5f03a29b281c639e10effac78129089df5ef6cfc31b315f5d873171723ff22203aab3e5053649597853a74ba2af1ee6beec35caed1a3ac803501167580d1c3d3c71cbe7b7d46bf41688a56358a6e631a860ce019d10f0b3d70c28acb57ccb7b8f82b6", @nested={0x4, 0x28}, @nested={0xf5, 0x34, 0x0, 0x1, [@nested={0xe9, 0x18, 0x0, 0x1, [@generic="477da7854029cf6ffd3e3bdf7b8820a9b48433660d054d0c413ec0ac479dfa7e33c6f768531d5502121af018fcbadeb1536fab127f69b89fee0c497425cc930e16cf8a80069aa075e98ca8903143f46c22c9aee3a530276a33fbb2eab53bae8602117f84cd1613d05a5a2b45aca730683609454f8ab239c341efd81e40869235461f048746945b29ff2be0a17600fe56263973aaec77e673e87f5d41ead7f008fbb989929d2131c6e5dea41b1ac19951f69b9f3bb2d961239716d348cc7708340661c65556667331dd809c6edec2cd1d4898c7a53b3da674b5fe9a3f9668442c8f2f4b235b"]}, @generic="7a431e14b1"]}]}]}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x9, 0x5, 0x4, r5}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd60e4d70000383a00fe880000000000000000000000000001ff0200000000000000000000000000010200907800dbb3f9b1fd906300003a0000000000000000000000000000000000fec0ffff000000000000ffffac1414aaef9edaaa64947bfe"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000000000015000400000014001680100008800c00038005000300da000000"], 0x38}}, 0x0) 2m40.281215433s ago: executing program 4 (id=9214): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x24044000) (async) r2 = accept4(r1, &(0x7f00000000c0), &(0x7f0000000040)=0x80, 0x80000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000306010100000000000000000a0000070900020073797a32ea97ec0000000005000100070000000900020073797a32000000000900020073797a30000000000500010007c77b9e"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 2m40.235631523s ago: executing program 4 (id=9215): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x3) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x3ff) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000080)=0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200", @ANYRESOCT, @ANYRESDEC=r1, @ANYBLOB="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", @ANYRES8=r2, @ANYRES8=r2, @ANYRES64=r4], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x89, 0x1, 0x1, 0x8f}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r5}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x10, &(0x7f00000009c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)={0x0}) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x9, 0x46bd, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x8, 0xb}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES32=r7, @ANYBLOB="040079c0159958bb0fba00"/20, @ANYBLOB="3cc3b487aa819b38cb0132df5ce3ebbc283ad1b65fd1c1bfc4f512f2a6cf6a2bf7a6db44acf0cece46aa3c045e14b8", @ANYRES32=r6, @ANYBLOB="05000000040000000100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="4fb92f38821bcdb5ee75bd482003d4f4e094f5d50f69a972f41b282a1585907c7e5827925810abbc075380dcc09e32920ffebd92d73776de40076227e1c3cf85ea993d277b74dde949c2ce758cd995a712a190b8da1a40f7db58fe8aecf3f0ea6231e7f8e643c9f99c96f47ef8f7441717116aedc6026b", @ANYRES64=0x0], 0x20) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={'macsec0\x00', {0x2, 0x4e21, @loopback}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newtclass={0x34, 0x28, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0xffff}, {0xe, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0x81}}, @TCA_RATE={0x6, 0x5, {0x9e, 0x2}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 2m39.96763264s ago: executing program 0 (id=9218): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000001500)={0x0, @in6={{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0xfff}}, 0x0, 0x200}, 0x90) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11) (async) vmsplice(r2, &(0x7f0000003680)=[{&(0x7f0000001400)="eb", 0x1}], 0x2000000000000138, 0xe) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, r2}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltclass={0x3c, 0x29, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {0x1, 0xfff3}, {0xfff1, 0x3}}, [@c_atm={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x10, 0x6d, &(0x7f0000000140)=""/109, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x3, 0xc, 0x6, 0x4}, 0x10, 0x1bb2c, r4, 0x7, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0x1], &(0x7f0000000240)=[{0x0, 0x1, 0x4, 0x8}, {0x2, 0x45, 0xd, 0xa}, {0x0, 0x3, 0x6, 0x8}, {0x4, 0x4, 0x8}, {0x0, 0x1, 0x10, 0xc}, {0x1, 0x4, 0x5, 0x4}, {0x4, 0x1, 0x7, 0x5}], 0x10, 0x81}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb3, 0x0, &(0x7f0000000040)="2535deb5476e1546d99f80892fe7f8bfe77400086b5653c1cdc808a58f1c0d7842b42e71cfcf48e259e244685ca724ed0300c16c230fe2153dadf901e9f082dd6e76c2c83b74a12a566f2dcd712f1e67241ff6cda01fa75fcce57d746bd28966f18c564a654fc7f94a7818e1a9ce37fd5dc96a3e77b2ba9869f6c232d8", 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket(0x2, 0xa, 0x300) (async, rerun: 32) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) socket(0x400000000010, 0x3, 0x0) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000780)={0x0, 0xc, 0x1, 0x7, 0x7f, 0xc, 0x0, "e23f883dcb2d4972f2b7add0f3adebd85e9dec2f", "b8dd9cfeb04211719a053f5b41f2b2a9eda5224a"}) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x6, 0x6}]}, 0x10) 2m39.72779736s ago: executing program 0 (id=9220): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @tail_call]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000100)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001100)={0x5, 0xb, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001140)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001180)=[{0x3, 0x3, 0x7, 0x4}, {0x5, 0x3, 0x8, 0x1}, {0x3, 0x2, 0x5, 0x4}], 0x10, 0x80}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001280)=r1, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x8000005}, 0x1}) 2m39.418243304s ago: executing program 0 (id=9222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 2m39.016960483s ago: executing program 5 (id=9223): setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$kcm(0x29, 0x2, 0x0) close(r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r10 = socket$kcm(0x2b, 0x1, 0x0) close(r10) (async) socket$kcm(0xa, 0x2, 0x88) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x2cb) (async) close(r10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3, 0x3}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 2m38.671174741s ago: executing program 5 (id=9225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x3}, 0x3, 0x0, 0x3, 0x3, 0xb, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r7, r3, 0x4, r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001240)=ANY=[@ANYBLOB="ef6f0e44", @ANYRES16=r8, @ANYBLOB="c7fe38444d5c8fbc7870bb245b17a9fb005f4342d4dc585fbaf52f8dbcd8f413991067ed0ee931ef5b74304cfa6235d459a350115389e33ea8583f2d72308d448751c51d08c85c87541944dd8cd4b255f94a73851aa94443e8a467a5e44470d982c91be34a3f18ad4a33b4cfebc98b983a2a50ad51f03e901b16dd0136e1bb9aec0b6ab756c87ed4c6c58c7551dd6eb5566b541cd8505ae33306a3a4ee4f02571d78d57535b0b7c523d220409767f277450fd459a2961ca5db93b99e92131fa335c66c0a43313e632d3dc77017127522a5087c6994336b6d7cfcb06ebb2892ca7c3f0647f2c435eaec3e6271deeed7", @ANYBLOB="07e982165114bde75f754dccfae6d1df6de1745beb2353e4ca6f9442cdf30384359fe293469b9a1d04722a761175a232b92cde25523734362841650e9814492cc76dd38d46561eea60891a65dc854dc80bfeeda8452e4ef077112f051967e7bf35b2b485d833f362d133f2a00d077808785c84930b91ef6a6a3cdd2aeb3b137b82c590a332cbfde61104a77523c2d2b2ff95da3d76ecf5900b90c26e4b47ae6dc80135762d65a0471c50b642489b55cc94d80dad0d4d5e7479", @ANYBLOB="2578b5004da300000802970000010802110000dfe972e2d15a68505050"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2m35.569013949s ago: executing program 4 (id=9229): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) unshare(0x2040400) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x8000}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @local, 0x8, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='l', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x84, 0xffff394c}], 0x10}}], 0x2, 0x40000050) 2m35.421041352s ago: executing program 5 (id=9230): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x1c, r0}, 0x18) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000040000000400"/20, @ANYRES32=r1, @ANYBLOB="1e719e7c00"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0400000002000000040000000000"], 0x50) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000100), 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x8927, &(0x7f0000000140)={0x23a, 0xfffffffe, 0x0, 0x0, 0x3, [0x0, 0xffffffff, 0x4000097]}) (async, rerun: 32) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) (async, rerun: 32) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000002680)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x20, 0x3fa, 0x1, 0x70bd28, 0x25dfdbfe, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x60000804}, 0x4000000) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e21, @private=0xa010100}, 0x10) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0xfffffffd, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async, rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r9, 0x0) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRESHEX, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (async) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m35.321362556s ago: executing program 4 (id=9231): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) socket$inet(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x6}}}, 0x24}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x20, r6, 0x1, 0x70bd30, 0x35dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x220}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000008000000000000000500000063119800000000009510"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x1e, 0xa01, 0x3, 0x0, {0x7}, [@generic="ce642a8e32e88d096d156f58f85197d1efbc64"]}, 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9ea, 0x3d}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb3}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x28014) 2m34.744422766s ago: executing program 5 (id=9233): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0xffffffffffffff3d) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x6, 0x201, 0x0, 0xfffffff9, 0x4, 0x3, 0x4}, &(0x7f00000001c0)=0x20) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r9, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xf}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd}]}}]}, 0x4c}, 0x1, 0x7a00}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 64) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r15) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r16, 0x731, 0x0, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x0) socket(0x1f, 0x2, 0xffffffff) (async) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async, rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xfc, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x424cef31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c9f4414}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x198c2364}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16fa999b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ad3c352}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16fb5925}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x537d3e02}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73c4472f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12631a98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74b7b010}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3350f424}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x667e6ced}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e1edcf7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xfc}}, 0x3000c000) (rerun: 64) 2m34.697949382s ago: executing program 4 (id=9235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="8fe30000", @ANYRES16=r1, @ANYBLOB="050000001000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="43000e0080000000ffffffffffffffffffffffff080211000000000000000000000000000400210004060e2d0400050006027a0f3c0401016803710701000101000a080008000c0064000000040008010800490002ac0f000400440018004c0010ac0f0014ac0f000fac0f0003ac0f0010ac0f00"], 0x90}}, 0x40000) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x50, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP={0x28, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x35, 0x0, 0x4, 0x0, 0x7b, 0x10, 0x6fb5}}, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 2m34.570276361s ago: executing program 5 (id=9236): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000540), 0x10) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000002c0), &(0x7f0000000300)) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000280)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x100720}], 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r2, &(0x7f0000000540), 0x10) (async) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000002c0), &(0x7f0000000300)) (async) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) (async) sendto$inet6(r0, &(0x7f0000000280)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x100720}], 0x1, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) 2m34.341226527s ago: executing program 5 (id=9237): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) (fail_nth: 5) 2m24.192753034s ago: executing program 33 (id=9222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 2m19.490999595s ago: executing program 34 (id=9235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="8fe30000", @ANYRES16=r1, @ANYBLOB="050000001000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="43000e0080000000ffffffffffffffffffffffff080211000000000000000000000000000400210004060e2d0400050006027a0f3c0401016803710701000101000a080008000c0064000000040008010800490002ac0f000400440018004c0010ac0f0014ac0f000fac0f0003ac0f0010ac0f00"], 0x90}}, 0x40000) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x50, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP={0x28, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x35, 0x0, 0x4, 0x0, 0x7b, 0x10, 0x6fb5}}, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80003, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 2m19.273177202s ago: executing program 35 (id=9237): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) (fail_nth: 5) 5.892779099s ago: executing program 2 (id=10117): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r1, 0x10, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40049c0}, 0x40) 5.747445743s ago: executing program 2 (id=10120): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$key(0xf, 0x3, 0x2) accept$inet(r0, 0x0, &(0x7f0000000b80)) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020310090e00000004ec1d0f9fcf9f1edc7a6d1266c5c6eb000000230000000500060000800e000a004e24fffffffdfe8000000000000000000000000000bbffffff7f0000000002000100000000000000000040050005006c0000000a004e2400000008ff010000000000000000000000006b0001ff070000000000005f8fdc85abcb68783f04899270b47668fdb73b16ab94fce51aee41e9c92b37faa0a6a95fe20385df712bd7a165f617c4703cf9eebc7c5ab1c2fe315da9bb89e791ecf6b4fb0a0eaa2f286509aaf8"], 0x70}}, 0x4000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x11}, {0x10, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYRES64=r7, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESHEX=r4, @ANYRESOCT=r1, @ANYRESDEC=r8, @ANYRESHEX=r5, @ANYBLOB="a96c920f8cf814924079e6840ca9622a10c7b5c6dedd1bac9c1280a42a0ff6a669e8152721f112d763f20cd8f1896d30373d85d1136ab7e361fd866fce0196041b8745707a88ea1cac2c42fc1c49ecb320024495cb751034ffcde0fa7ab73df8430e7eeb7c57829b61fb6e9eedf5fd169d8a24a82c6b60312fd90ba05d0cf72c46df1420ef598e051a170a3670e60b23aa0f05e2751fb36d14a3e35830a922a44933edad641da1be56ccebe524779e6d478f2872ee18d53eb8dea278e91ee69eb7f9c7dad6", @ANYBLOB="c4c998ce70a6a4691caa092e88d2c84a7167a2b27e19e6682b602236cc3a23d411be94693d54ede670bb0ee19617e6b159976ef418fb8cf419ba8583cf8951d90b27ba0924f8793b25394818ba57618cd1450378f4c11fca27c802cc7272da00c78b54696d5646f146109275092477f1498ecaad3ee8a031a17337748e8fc568a55f2ee4198a8b7e95087efa6c8597944bd5924ba715b4c1042996975645f68f81525a89c86445c3b5d9ae3d76dd5c76113161680d5af66a8d30848d3092f91738006a6aa03fb00cf7a921f15b2b577593f3f394330a0f4bc18cc16abc9cc2d1cb3c466bc12b07", @ANYRESDEC=r9], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r4], 0x50) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r12, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r12}) getpid() ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f0000000200)=0x0) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r4) sendmsg$TIPC_NL_NAME_TABLE_GET(r13, &(0x7f0000000e40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2001000064ff889a5559b82ba4c224326641191958816f84565bf9d825d2ddf2161b7571a774d6cb0a7b5e20ac6ae0a16aa06d79cabd241e7d6f2723cec3e5ac3b3e12f67bf1a22a4d696a2d99fdf59e141d5b307e81f3bb613f133fe53b8a8c94ea9f848b391967666819ae7b66f9465c5bc4a5ad09bd7aa3c8de1b0f81941105ec94d354c918eeebdb0cbf71d81b23628c18056646585535265cc4df7e1d5b4f35ea27170af28018d80e325a9ff5093fc588baef757471f293a202f78499be0aafabcb00cf2f88b5bf681e0a52f27a8a", @ANYRES16=r15, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x40004}, 0xc000) sendmsg$nl_netfilter(r13, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000022c0)=ANY=[@ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="d63f031505004a007122000006007e005b00000000000086003d80f7a810753ddad8871c8a4e0adeb06c56fc0b4444545d086f3c165743cc0ef1bf4747abe6c5eea10fd0ebefb2111edc883ffe04004180096d8488cc6ad233c58709dbeb66208f1d2e010000007d5d6a9035038aafb283d24b2ee2a1c44d0800e000a4ffffff140000000000000000000000000800c50000000000000000", @ANYRES32=r3, @ANYBLOB="050015000000000000000c00bb006b000000000000000800cc800400c580000000"], 0x2604}, 0x1, 0x0, 0x0, 0x4000080}, 0x51) recvmmsg(r12, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xde}], 0x1, 0x400022e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.620855221s ago: executing program 3 (id=10122): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x8) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r3, 0x4004743c, &(0x7f0000000100)) shutdown(r0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000020601010007000000050005000a0011000900020073797a3200000000050004000200"/56], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd700000400000130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b0091"], 0x4c}}, 0x4040000) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2.260321583s ago: executing program 2 (id=10128): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(r4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xfff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0xf82a}}, 0xf, 0x1}, 0x90) write$tun(r4, 0x0, 0xfd1) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 2.161727984s ago: executing program 6 (id=10129): socket$nl_netfilter(0x10, 0x3, 0xc) 2.143364537s ago: executing program 3 (id=10132): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x118, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x0, 0xdd9, 0x6, 0x80200}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb5111132c32e4187}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x10) 1.999403176s ago: executing program 6 (id=10133): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e14", 0xfffffffffffffe4c, 0x20004811, 0x0, 0xffffffffffffffbd) (async) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r1, &(0x7f0000000200), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) pipe(0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r9) (async) r10 = socket(0x1, 0x803, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) 1.924793697s ago: executing program 3 (id=10134): r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xf, 'dummy0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={0x1d, r5, 0x1, {0x0, 0x1, 0x6}, 0xfe}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f00000005c0)={0xa, 0x4e21, 0x1, @remote}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000600)="2e62f28921403f0084f5c7c270ae5696aa307611fa16b48366018eeac35cf1722470e64ff16bebabf0a4a65e193cb449c3c47333ab3ac53b4a372a88afa64046b473a38989e395848aa1e3ff2a9c86502f07250adb34d338cbb37409ffeae18c48395492151bd43bc1d15636fd7f7722457609647dad301ffcfa2dd2cfe1eb2554b41e11960c1d968b66e483cb58cefc559171510be1a9426f5e54d06b4c2903ea61ebcc75d20f2855ab9a6192e1bba3560b697c22f04590ad6c2681c6ff9d496a1e8c5ddcf2ec1e75e45a6c9d8a98b97188", 0xd2}, {&(0x7f0000000700)="92d2ae6b273fb951b095d67e3edf8af93bd3764a6940585918e6767185cd5f3e678a29c2f88e3d614b1cd8c56219a5b53b604ea5834c54c8dbbc403ba72abb5073ab7b5c200d7768e61d5c815be342c0e014f673c337b374", 0x58}, {&(0x7f0000000780)="9a95cf5c9a4113e6c185e3d87fe958f2dbeb0efa3a62b6f22dabf0e468f549301da37b26464430ecb485a600562cc5e216a02af952f4fe814436fdc425d8670e603a970be004ea69dd7320f6412168c44c19bb35b4b3907d7d9be72e41e5f8101a625725c88d0b7a9174912f34791894767060bbf7ce7977f24c807bb475153c1701f016a8be295717b06b49b19f", 0x8e}, {&(0x7f0000000840)="a9c62a4517cf1b0d6ecb2d457ed3f56e955ab66e4ea41fff795eba900bbbfa10f0c90d01d8678b8096e8fb51eda25129cc1d95fce20bb098c66d9410edd100ddb6e606a5fb7c15ead7c6d350da94658b4c93df6da52680ea2060f7a27bbd47852e281ae9e8cfff23b78ff69fc3cf404a8a15b025efa4829ba2794edec6007b0d9eb7e496c04b134f42e03fc3a53906adde65cdaec4bb622e67b88f73a6c77893102d9d668544b4e27b4716aeacc270138cb1251007786483d221c0", 0xbb}, {&(0x7f0000000900)="8b7f47898977ccb0db0d83d13933f66b2c88c04d666f79efdbb5a82397d4822cac83beece0085d11951b7474bbccbbc9489b9b7b3cefcb06442a66567f6695025d756b9405327cfaea296e", 0x4b}, {&(0x7f0000000980)="28c1d90dc50d43d77537cb153b419b0f30a327a98ca6f1c38be53086e4fd29135f07108c8142d4efaa1ad6ead56753477bf08cb2159892680c0b615b32280075cb90270b463309f6eb8c2a8110588cd3ed24fe8418aa70d259c39b65448cfe813b342fd0f76981adbb973a276371e1a7349a4d7f2a140fecf965eeecdcfad366c43c7201dafef54b21ea0d0bdd80418ae07eff68c7841a090f1360e67bbc816a30e6031fbdcb7e101200a1d5f0f2b0fccb0943ccf6ce720624fdeb28ba86957b09a5e6214ea324ca", 0xc8}, {&(0x7f0000000a80)="60f05c51238be9461897ba88c9266c1d86a58c8c8d1eb34950ffe53224394ac51bc174cbe7929ddfe9c695ce30ee4d4b7b272a7c58cda463970c76740a1de5d75d4965298931ed0ef3c9fac1f768f3b467fd6982810840be8900b16f7fcf0676a4171332a32bf37d81ec3c3aa368210c23", 0x71}, {&(0x7f0000000b00)="c95cb7078ea32c405191632211c67bd99f09634cd0d1717820c506", 0x1b}], 0x8, &(0x7f0000000bc0)=[@tclass={{0x14, 0x29, 0x43, 0xa}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x6c, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0xe9, 0xe, [0x5, 0x1000, 0xffff, 0x55800000000]}}, @pad1]}}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c40)="d01c1f45094cfca7f1bf308ffe8146735efd28776c3248d8b566df12245965e79174cc0c53cee1a6f461aaa7998da208645c7b85b285d8323ae4159e02b3413020f75c9196247d64694d84899a843f340032559646597e9d4cb769ee2d4163d82377a902b06c9aeba5d6a853d01d9de84a93a35923aa2196ee41baf8f25b2f83981ff55d75cf40306a3be644a85c8a943d04adb4c47c76e1bacd906522eb19d2e0ed6c748e19fd282c05aaad4c7279eab7", 0xb1}, {&(0x7f0000000d00)="2d7322a95ebc4b7c8c90f82f440261e27111dd1549ee58911cd5d9e94dcdafce8c1e3bd092a4a5a7ffa812ed127c114ec2c6626df41574eb32ec3964a63ec0d538dab22f271dfc580530dc5ae5d7515fcf605cf1d78e7df2b8e43d5d85be411ec921f66d794a83cbf5430e45f599325748649cc98671fd1a3a87ca478ec60e1a8c7de3f192edc698947688756f2898ee868d83cd7d5bce23a9e03483bb00755cfa5ea9986e7861e56f1641c19f311958b60425fcad5eb80ac4", 0xb9}, {&(0x7f0000000dc0)="d5ef81edcea63a0df2cad4937b8ba433635438", 0x13}, {&(0x7f0000000e00)}], 0x4, &(0x7f0000000e80)=[@dstopts_2292={{0x130, 0x29, 0x4, {0x6, 0x22, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @enc_lim={0x4, 0x1, 0xaf}, @pad1, @generic={0xdc, 0xe4, "b9728a4c5d54aecc591a53f529739df54284562e513aea97b37ba122dad5f621b975ef70d63b0c9f0cb1e10df8193e5c6a550e6d588cd0aa5062aa1b4c16bc45903e6f8ed0ae039d115d37800f9d3d542e02f6c864dc06f280b9801f6accacb6faee3b9d2fa1d2d4129c95178b0523da692ca1d4b2a9f10e2df1c347e0b8422b4e32cf7778e16907229ab815eb4ae58d16d84bd334283df5e38a97c44deee69435a7edb3176e6d27be4592a2087b91049fda457fa8f6059a589e085f67b5899fbec7a9868afeddda628d71dc642905c688a1fbd5bcb04d2e6e9c726e211e93088fded9eb"}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x130}}], 0x2, 0x4000080) sendto$packet(0xffffffffffffffff, &(0x7f0000001040)="fe518461ad606ee24598e4bc825c63753bb8f84054a2016e2313c65be788e6dd7ad972d0d8d86e74947e09588e41aed3653f166b77daf3f6896a83ae7c60170ad2eace6e8a78e0c7cc0665e89c32fcb3fea8cdd730a3bb0b84f38887f406f9bc233b868564afcb350cb063fbf0b85cd1adaf0db61bc26a2eb1ec64ee70a818fa2df2ee7a84b3d298c3eff3a555a76081913eda4f5e1d9686eb0224af8bccd6ae84ade6586512e0e29cf42949cc6c8606bd13745f44b53c384a8745d917c3e1f80fa19f647fe5db6afda275fb7e38f01ff1ea26c7634b60a8ab632e70938c97bb8753a0a2df1c343506e4a993033128cd5f78", 0xf2, 0x20000845, &(0x7f0000001140)={0x11, 0x1b, r5, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r6 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001180)=r6, 0x12) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000011c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000001200), 0x9) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000001240)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000001280)={'wlan1\x00', 0x4}) r8 = socket$caif_seqpacket(0x25, 0x5, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f00000012c0)=""/4096, &(0x7f00000022c0)=0x1000) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000002300)={r5, 0x1, 0x6}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400880d}, 0x84) r10 = accept4$packet(r9, &(0x7f0000002440), &(0x7f0000002480)=0x14, 0x0) getsockopt$packet_buf(r10, 0x107, 0x5, &(0x7f00000024c0)=""/6, &(0x7f0000002500)=0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000002540)) 1.902320677s ago: executing program 8 (id=10135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000002c0)={'b', ' *:* ', 'r\x00'}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006400602843b0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x613f, 0xe}}}}]}, 0x44}}, 0x4010804) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.855203216s ago: executing program 2 (id=10136): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r9) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r10, 0x0, 0x2f, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1800000, 0x22051, r4, 0x10000000) 1.773600055s ago: executing program 6 (id=10137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0), 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 1.744068827s ago: executing program 3 (id=10138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtclass={0x68, 0x28, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xa, 0xe}, {0xfff1, 0xd}, {0xffe0, 0x4}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0xa0, 0x5}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x7a, 0xa3}}, @tclass_kind_options=@c_mq={0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x8848}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xfffffffffffffe7c, &(0x7f00000003c0)={&(0x7f0000000200)={0x20, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r6, 0x1, 0x6, 0x0, &(0x7f0000002740)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) r7 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="030500007e95fbdbdf25021f56d8", @ANYRES32=r11], 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x4040086) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff08000300cf"], 0x44}}, 0x0) 1.488756029s ago: executing program 7 (id=10140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) unshare(0x2c020400) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x32, 0xffffffffffffffff, 0xeacd8000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYBLOB="aac8658cbed5a6cf44b546b00fb08c33b93b28ce9a7ab3cafd1214f5f9c8c29eafbf3ca61a1b678bd7055aee9402dd38e577890e7447b58f1a51b11b4e30ce040b67762860f6060fc71cf4b9ed292c512f0b9b818472e9b92735492ec91b41bd3bec7ae2204722ec0fa7ceb4cac6c8914d101e55b83b4c13d66f534d9c41290c7ab110f260af9c22d90ff9ed07f01fba091a5df8814771ee70addfff890490f57b7da13e54f8359749d1994afb5c8dbc46974448bdff2090476ef86a70def92023e2e519b652bba8c1bbeff983e59ba56ddd79a7c14e4a203945ecb04154b1c32a648d9d362fef1d151fec09f3e5a2f0", @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000140)=0x80001, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) 1.435265744s ago: executing program 8 (id=10141): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 1.333954245s ago: executing program 7 (id=10142): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000900)={'veth1_macvtap\x00', 0x8000}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000580)={0x1, 0xa, [@local, @remote, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @multicast, @multicast]}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/89, 0x59}], 0x1, &(0x7f0000000340)=""/209, 0xd1}, 0x3) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x18}}], 0x1, 0x4000040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x101, 0xfffffffd, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}]}, 0x20}}, 0x0) 1.220834524s ago: executing program 8 (id=10143): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newlink={0x274, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x60}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_VFINFO_LIST={0x21c, 0x16, 0x0, 0x1, [{0xb4, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x72, @local}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xff, 0x62}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x4000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x800, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x9c38}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @multicast}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0xd8a}}]}, {0xf4, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x81, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x7fffffff, @link_local}}, @IFLA_VF_MAC={0x28, 0x1, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x3dff}}, @IFLA_VF_TRUST={0xc, 0x9, {0xc, 0x1}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7fff, 0xab7, 0x5, 0x8100}}, {0x14, 0x1, {0x8, 0x106, 0x2, 0x88a8}}, {0x14, 0x1, {0x1, 0xc97, 0xffff0001, 0x8100}}, {0x14, 0x1, {0x4d21, 0xf3c, 0x1}}, {0x14, 0x1, {0x80, 0xe48, 0x10001, 0x8100}}]}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xf5, 0x58f}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x400, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x13}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf8b, 0x1000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1ff, 0xf73, 0x8}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x5, 0xfffffc00, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0xfff}}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x404c085}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r9], 0x54}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r11, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x68, r12, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="00000000011200000a000100aa0200aaaaff2d58"], 0x2c}}, 0x0) 1.107810273s ago: executing program 7 (id=10144): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014101000700036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES64], 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES64], 0x10c}}, 0x0) 944.476769ms ago: executing program 7 (id=10145): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x80000000, 0x0, r0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x50be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 687.546201ms ago: executing program 7 (id=10146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000090000000000000000000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff75, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd24, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @pid=r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 663.628427ms ago: executing program 8 (id=10147): r0 = socket(0x400000000010, 0x80000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'batadv_slave_0\x00', @remote}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r1, 0x339b2000) write(r0, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c", 0x1c) 517.592431ms ago: executing program 6 (id=10148): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYBLOB="9c4f2d5a7c112964f2a8773ef924072ea4937dc97da84289faf01a82a4a7e961c3a36a3f360f48572a28025e59a4371cd7c0b06432ef33fbeecb5ebf9d9e7e7ba073104f4380d1bb6a1f076e5fc52ad1e203c606455dca5d513e877f48aff8fe", @ANYRES32=r0]) 517.059343ms ago: executing program 7 (id=10149): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003800000000020000100010000000000000004000200040001"], 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x80, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20004049) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) unshare(0x68040200) 516.630661ms ago: executing program 2 (id=10150): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e0000001000000000000000000000000ac1414bb000080ffffffffffffff000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0) 516.046732ms ago: executing program 3 (id=10151): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @multicast2}], 0x20) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffb, @rand_addr=' \x01\x00'}, 0xfffffffffffffe6c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) 433.419694ms ago: executing program 8 (id=10152): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1c, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x2, 0x4, 0x3, 0x0, r2, 0x20000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000a000000000800040001000000", 0x24) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xffffffe4}], 0x3}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 321.485774ms ago: executing program 6 (id=10153): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'vlan0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/120, 0x78}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000006c0)=""/21, 0x15}], 0x63}, 0x4}], 0x2, 0x60, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008012}, 0x800) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x8000042, 0x1, 0x2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000710000000000000095007400000000000389c0dc1b1e8fcc938d01cf519bb9961bd83651f709c94ff5ae1b8970b266a297035d797181deb467614fe3"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xca, &(0x7f0000000a40)=""/202, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3, 0x3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r12, @ANYRESDEC=r11, @ANYRES64=r2, @ANYRES32=r12, @ANYRESHEX=r7], 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000600), 0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r15, 0x4) sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES16=r3], 0x40}}, 0x4008054) 321.167206ms ago: executing program 3 (id=10154): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = socket(0x28, 0x5, 0x0) (rerun: 64) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async, rerun: 32) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) (rerun: 32) recvfrom$unix(r2, &(0x7f0000000740)=""/263, 0xfffffffffffffe47, 0x40000022, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00c8c4410000ac5a575b27bd70000000000004000000050018000a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 318.080522ms ago: executing program 2 (id=10155): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000740)={0x98, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000885}, 0x44084) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x10, 0x7807, 0x6, 0x9, {{0x2f, 0x4, 0x0, 0x7, 0xbc, 0x8, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @local, {[@generic={0x83, 0x11, "7ede00651c58770e58ea51d07a1f70"}, @ssrr={0x89, 0x13, 0xb8, [@multicast2, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x1b}]}, @end, @cipso={0x86, 0x6e, 0xffffffffffffffff, [{0x1, 0x4, "86af"}, {0x6, 0x12, "0fa55f978889fc675ac8f4f6733f158d"}, {0x7, 0x5, "64d28e"}, {0x4, 0x12, "074ec9ed2000399c16b7a32342b5cd14"}, {0x1, 0x6, "b7702eeb"}, {0x4, 0x12, "ae9b9b076a4a08666e935331216ce1b3"}, {0x0, 0x7, "7cee84693a"}, {0x5, 0xf, "f1157c9651db29c5585242c472"}, {0x5, 0xd, "8e36482879d647b4deefbf"}]}, @timestamp_prespec={0x44, 0x14, 0xf, 0x3, 0x0, [{@local, 0x401}, {@broadcast, 0xfffffff7}]}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000300)={@dev, @multicast1, 0x0}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2e8, r2, 0x4, 0xfffffffb, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xac, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xffff, 0xf7, 0x3, 0xc8d2}, {0x7, 0x8, 0x1, 0x9}, {0x4, 0x7f, 0x18, 0x2}, {0x8, 0x5, 0xbd, 0x7}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1ff, 0xa, 0x40, 0x9}, {0x5, 0x57, 0x3, 0x80000000}, {0x7, 0x3, 0x4, 0x4}, {0x8, 0x2, 0x2, 0x6}]}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1457}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x159f8665}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 180.807172ms ago: executing program 8 (id=10156): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010000100000000000000200000000000009000000000600150006000000200016801c000280170002006e65745f7072696f2e69667072696f6d77230000"], 0x44}}, 0x44890) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(0x0, r2) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYRES8=r4, @ANYRES8, @ANYRESHEX=0x0, @ANYRES16=r4], &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x4f}, 0x18) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x3, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) 0s ago: executing program 6 (id=10157): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0x0, 0x5, 0x2}]}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001280)={@loopback, 0x0}, &(0x7f00000012c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf7}, [@exit, @map_fd={0x18, 0x8, 0x1, 0x0, r1}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x28, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000001300)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001340)={0x4, 0x4, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001380)=[{0x5, 0x2, 0x2}, {0x0, 0x5, 0xb, 0x9}, {0x0, 0x2, 0x0, 0x3}], 0x10, 0x100}, 0x94) r3 = socket(0x6, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000001480), r3) kernel console output (not intermixed with test programs): 1279.045567][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.052927][ T547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.100533][ T530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.107829][ T530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.117856][ T6202] Bluetooth: hci1: command tx timeout [ 1279.215989][ T7998] wg1 speed is unknown, defaulting to 1000 [ 1279.759955][ T7825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.885199][ T7825] veth0_vlan: entered promiscuous mode [ 1279.927540][ T7825] veth1_vlan: entered promiscuous mode [ 1280.009550][ T7825] veth0_macvtap: entered promiscuous mode [ 1280.040038][ T7825] veth1_macvtap: entered promiscuous mode [ 1280.118218][ T7825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.141627][ T7825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1280.173934][ T546] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.195094][ T546] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.220807][ T546] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.248481][ T546] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.441080][ T547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.457137][ T547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.505284][ T7998] vxcan1 speed is unknown, defaulting to 1000 [ 1280.547854][ T7242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.556013][ T7242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.837059][ T8032] __nla_validate_parse: 1 callbacks suppressed [ 1280.837081][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9035'. [ 1280.853025][ T8028] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1280.866497][ T8028] bond1 (unregistering): Released all slaves [ 1281.101123][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9036'. [ 1281.174721][ T8000] vxcan1 speed is unknown, defaulting to 1000 [ 1281.198375][ T6202] Bluetooth: hci1: command tx timeout [ 1281.282670][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9036'. [ 1281.296161][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9036'. [ 1283.001494][ T8056] netlink: 'syz.2.9041': attribute type 15 has an invalid length. [ 1283.041885][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9041'. [ 1283.202875][ T8054] wg1 speed is unknown, defaulting to 1000 [ 1283.233846][ T8047] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1283.942348][ T8075] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1283.996480][ T8075] syzkaller0: entered promiscuous mode [ 1284.023511][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9047'. [ 1284.038169][ T8075] syzkaller0: entered allmulticast mode [ 1284.059746][ T8054] vxcan1 speed is unknown, defaulting to 1000 [ 1284.105631][ T8084] team0: entered promiscuous mode [ 1284.121876][ T8084] team_slave_0: entered promiscuous mode [ 1284.167954][ T8084] team_slave_1: entered promiscuous mode [ 1284.196109][ T8084] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1284.220029][ T8084] team0: left promiscuous mode [ 1284.224877][ T8084] team_slave_0: left promiscuous mode [ 1284.247934][ T8084] team_slave_1: left promiscuous mode [ 1284.535098][ T8097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1288.005987][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1288.350470][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9062'. [ 1288.374493][ T8136] siw: device registration error -23 [ 1288.537797][ T8140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1289.121241][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9072'. [ 1289.913265][ T8184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1289.982585][ T8186] batman_adv: batadv0: Removing interface: dummy0 [ 1290.061793][ T8186] x9: left allmulticast mode [ 1290.064417][ T8197] netlink: 'syz.2.9082': attribute type 1 has an invalid length. [ 1290.098489][ T8186] x9: left promiscuous mode [ 1290.115828][ T8186] bridge0: port 1(1x9) entered disabled state [ 1290.136556][ T8186] bridge_slave_1: left allmulticast mode [ 1290.144114][ T8186] bridge_slave_1: left promiscuous mode [ 1290.150151][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.165776][ T8186] bond0: (slave bond_slave_0): Releasing backup interface [ 1290.204647][ T8186] bond0: (slave bond_slave_1): Releasing backup interface [ 1290.296147][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9083'. [ 1290.312125][ T8186] team0: Port device team_slave_0 removed [ 1290.360920][ T8186] team0: Port device team_slave_1 removed [ 1290.371263][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1290.379980][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.390036][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1290.398532][ T8186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.409181][ T8186] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1290.440234][ T8188] batadv1: entered promiscuous mode [ 1290.457893][ T8197] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 1290.681145][ T8209] wg1 speed is unknown, defaulting to 1000 [ 1290.882877][ T8230] netlink: 'syz.3.9089': attribute type 2 has an invalid length. [ 1291.088992][ T8237] netlink: 'syz.4.9090': attribute type 1 has an invalid length. [ 1291.251576][ T8209] vxcan1 speed is unknown, defaulting to 1000 [ 1291.303114][ T8244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1291.341901][ T8241] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1291.390965][ T8241] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1291.459599][ T8241] bond7: (slave xfrm1): making interface the new active one [ 1291.489053][ T8241] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 1291.751876][T28702] IPVS: starting estimator thread 0... [ 1291.768070][ T8254] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1291.852817][ T8263] IPVS: using max 23 ests per chain, 55200 per kthread [ 1291.913402][ T8267] netlink: 'syz.5.9097': attribute type 1 has an invalid length. [ 1292.019729][ T8267] bond1: entered promiscuous mode [ 1292.025372][ T8267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1292.145183][ T8282] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20003 [ 1292.191702][ T8284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1292.233641][ T8280] wg1 speed is unknown, defaulting to 1000 [ 1292.604743][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9106'. [ 1292.707340][ T8292] vlan3: entered allmulticast mode [ 1292.732022][ T8292] veth1: entered allmulticast mode [ 1292.784634][ T8280] vxcan1 speed is unknown, defaulting to 1000 [ 1293.428639][ T8307] wg1 speed is unknown, defaulting to 1000 [ 1294.126430][ T8334] netlink: 112 bytes leftover after parsing attributes in process `syz.5.9115'. [ 1294.138100][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9115'. [ 1294.148888][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9115'. [ 1294.372726][ T8307] vxcan1 speed is unknown, defaulting to 1000 [ 1294.560994][ T8343] Cannot find add_set index 0 as target [ 1294.729369][ T8353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9121'. [ 1294.781435][ T8345] wg1 speed is unknown, defaulting to 1000 [ 1294.829256][ T8346] wg1 speed is unknown, defaulting to 1000 [ 1294.948237][ T8350] wg1 speed is unknown, defaulting to 1000 [ 1295.450540][ T8358] tipc: Enabled bearer , priority 0 [ 1295.464447][ T8358] syzkaller0: entered promiscuous mode [ 1295.485549][ T8358] syzkaller0: entered allmulticast mode [ 1295.700727][ T8358] tipc: Resetting bearer [ 1295.778910][ T8358] tipc: Disabling bearer [ 1295.868148][ T8364] geneve3: entered promiscuous mode [ 1295.907457][ T547] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.941844][ T547] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.971197][ T547] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.004779][ T547] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.013540][ T8369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1296.654369][ T8345] vxcan1 speed is unknown, defaulting to 1000 [ 1296.661837][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9128'. [ 1297.287368][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9130'. [ 1297.299277][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9130'. [ 1297.312295][ T8346] vxcan1 speed is unknown, defaulting to 1000 [ 1297.706404][ T8395] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1297.708941][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9135'. [ 1297.782057][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9135'. [ 1298.073275][ T8350] vxcan1 speed is unknown, defaulting to 1000 [ 1298.219419][ T8413] "syz.3.9137" (8413) uses obsolete ecb(arc4) skcipher [ 1298.427459][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9136'. [ 1298.555059][ T8428] netlink: 'syz.4.9139': attribute type 6 has an invalid length. [ 1298.841505][ T8433] netlink: 'syz.4.9141': attribute type 1 has an invalid length. [ 1298.906154][ T8433] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1298.932625][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1298.945332][ T8437] bond9: (slave batadv3): making interface the new active one [ 1298.973827][ T8437] bond9: (slave batadv3): Enslaving as an active interface with an up link [ 1299.808499][ T8437] bond9 (unregistering): (slave batadv3): Releasing active interface [ 1299.928233][ T8437] bond9 (unregistering): Released all slaves [ 1299.953664][ T8443] __nla_validate_parse: 2 callbacks suppressed [ 1299.953687][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9143'. [ 1300.471569][ T8451] netlink: 'syz.2.9145': attribute type 13 has an invalid length. [ 1300.490660][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9145'. [ 1300.503070][ T8454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9146'. [ 1300.584255][ T8458] netlink: 'syz.2.9147': attribute type 1 has an invalid length. [ 1300.961469][ T8470] tipc: Started in network mode [ 1300.966401][ T8470] tipc: Node identity , cluster identity 4711 [ 1300.988014][ T8470] tipc: Failed to obtain node identity [ 1300.993569][ T8470] tipc: Enabling of bearer rejected, failed to enable media [ 1301.008681][ T8470] syzkaller0: entered promiscuous mode [ 1301.014383][ T8470] syzkaller0: entered allmulticast mode [ 1301.271554][ T8482] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 1301.320781][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9153'. [ 1301.494232][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9155'. [ 1301.775731][ T8494] macvlan3: entered promiscuous mode [ 1301.794105][ T8494] vlan0: entered promiscuous mode [ 1301.891717][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9158'. [ 1301.965100][ T8502] netlink: 'syz.5.9159': attribute type 1 has an invalid length. [ 1301.995340][ T8502] netlink: 'syz.5.9159': attribute type 1 has an invalid length. [ 1302.020324][ T8502] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.9159'. [ 1302.106155][ T8494] vlan0 (unregistering): left promiscuous mode [ 1302.317868][ T8513] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1302.775958][ T8525] wg1 speed is unknown, defaulting to 1000 [ 1302.862269][ T8531] netlink: 'syz.0.9168': attribute type 1 has an invalid length. [ 1302.924541][ T8527] syzkaller0: entered promiscuous mode [ 1302.931121][ T8527] syzkaller0: entered allmulticast mode [ 1302.996614][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9168'. [ 1303.082070][ T8536] netlink: set zone limit has 4 unknown bytes [ 1303.462037][ T8547] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9171'. [ 1306.629566][ T8525] vxcan1 speed is unknown, defaulting to 1000 [ 1306.668942][ T8529] wg1 speed is unknown, defaulting to 1000 [ 1307.427545][ T8529] vxcan1 speed is unknown, defaulting to 1000 [ 1307.559009][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9179'. [ 1307.706617][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1307.723169][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1307.733315][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1307.743574][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1307.753377][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1307.896527][ T8577] wg1 speed is unknown, defaulting to 1000 [ 1307.966082][ T8585] netlink: 'syz.3.9180': attribute type 8 has an invalid length. [ 1307.987720][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9180'. [ 1308.229486][ T8577] vxcan1 speed is unknown, defaulting to 1000 [ 1308.612490][ T8603] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9185'. [ 1308.637361][ T8603] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1309.130196][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9188'. [ 1309.168047][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9188'. [ 1309.355586][ T8620] wg1 speed is unknown, defaulting to 1000 [ 1309.654344][ T8577] chnl_net:caif_netlink_parms(): no params data found [ 1309.841529][ T6202] Bluetooth: hci3: command tx timeout [ 1309.900298][ T8637] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1309.959680][ T8640] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9193'. [ 1310.009958][ T8637] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1310.118636][ T8637] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1310.140413][ T8645] xfrm0: entered promiscuous mode [ 1310.145659][ T8645] xfrm0: entered allmulticast mode [ 1310.181384][ T8620] vxcan1 speed is unknown, defaulting to 1000 [ 1310.210413][ T8637] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1310.238999][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.272375][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.288170][ T8577] bridge_slave_0: entered allmulticast mode [ 1310.301380][ T8577] bridge_slave_0: entered promiscuous mode [ 1310.314835][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.323786][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.332055][ T8577] bridge_slave_1: entered allmulticast mode [ 1310.341127][ T8577] bridge_slave_1: entered promiscuous mode [ 1310.521588][ T8577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.541577][ T8577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.695832][ T8655] pim6reg: entered allmulticast mode [ 1310.731199][ T8657] pim6reg: left allmulticast mode [ 1310.781173][ T527] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1310.790404][ T8650] wg1 speed is unknown, defaulting to 1000 [ 1310.793650][ T8577] team0: Port device team_slave_0 added [ 1310.893767][ T8577] team0: Port device team_slave_1 added [ 1310.939117][ T527] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1310.991868][ T527] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1311.017064][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.033035][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.067327][ T8577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.082956][ T527] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1311.158775][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.169239][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.241492][ T8577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.319590][ T8650] vxcan1 speed is unknown, defaulting to 1000 [ 1311.380138][ T8664] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9198'. [ 1311.400530][ T8664] netlink: 'syz.3.9198': attribute type 15 has an invalid length. [ 1311.403750][ T8577] hsr_slave_0: entered promiscuous mode [ 1311.410847][ T8664] netlink: 1372 bytes leftover after parsing attributes in process `syz.3.9198'. [ 1311.418582][ T8577] hsr_slave_1: entered promiscuous mode [ 1311.432672][ T8577] debugfs: 'hsr0' already exists in 'hsr' [ 1311.439274][ T8577] Cannot create hsr debugfs directory [ 1311.727738][ T8577] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.879423][ T8577] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.918833][ T6202] Bluetooth: hci3: command tx timeout [ 1312.137081][ T8680] netlink: 'syz.4.9202': attribute type 83 has an invalid length. [ 1312.139133][ T8577] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.223007][ T8577] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.352166][ T8675] wg1 speed is unknown, defaulting to 1000 [ 1312.685725][ T8577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1312.698883][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9204'. [ 1312.703049][ T8577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1312.752038][ T8577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1312.796032][ T8577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1313.141169][ T8577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.238443][ T8577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1313.289644][ T530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.297084][ T530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.351346][ T527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.358608][ T527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.376279][ T8675] vxcan1 speed is unknown, defaulting to 1000 [ 1313.911477][ T8577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.997406][ T6202] Bluetooth: hci3: command tx timeout [ 1314.083836][ T8577] veth0_vlan: entered promiscuous mode [ 1314.139205][ T8577] veth1_vlan: entered promiscuous mode [ 1314.309678][ T8728] wg1 speed is unknown, defaulting to 1000 [ 1314.333916][ T8577] veth0_macvtap: entered promiscuous mode [ 1314.362168][ T8577] veth1_macvtap: entered promiscuous mode [ 1314.421570][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.472301][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.496195][ T530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.513017][ T530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.535112][ T530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.578359][ T530] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.619401][ T8741] dvmrp1: entered allmulticast mode [ 1314.631828][ T8741] netlink: 5380 bytes leftover after parsing attributes in process `syz.5.9219'. [ 1314.644021][ T8741] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1314.701947][ T8741] x_tables: duplicate underflow at hook 3 [ 1314.735928][ T8728] vxcan1 speed is unknown, defaulting to 1000 [ 1314.860015][ T547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.886576][ T547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.940569][ T519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.963600][ T519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.364192][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9173'. [ 1315.454959][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9173'. [ 1315.516039][ T527] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1315.550151][ T527] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1315.575605][ T527] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1315.592126][ T527] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.087850][ T6202] Bluetooth: hci3: command tx timeout [ 1316.996207][ T519] bond12 (unregistering): (slave gretap1): Releasing active interface [ 1317.288690][ T519] nr0 (unregistering): Released all slaves [ 1317.304238][ T519] bond1 (unregistering): Released all slaves [ 1317.453301][ T519] bond2 (unregistering): Released all slaves [ 1317.604388][ T519] bond3 (unregistering): Released all slaves [ 1317.758562][ T519] bond4 (unregistering): Released all slaves [ 1317.774091][ T519] bond5 (unregistering): Released all slaves [ 1317.918786][ T519] bond6 (unregistering): Released all slaves [ 1317.936037][ T519] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1317.945362][ T519] bond7 (unregistering): Released all slaves [ 1318.098531][ T519] bond8 (unregistering): Released all slaves [ 1318.113694][ T519] bond9 (unregistering): Released all slaves [ 1318.129325][ T519] bond10 (unregistering): Released all slaves [ 1318.290119][ T519] bond11 (unregistering): Released all slaves [ 1318.441470][ T519] bond12 (unregistering): Released all slaves [ 1318.475697][ T8773] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9226'. [ 1318.489440][ T8773] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1318.512300][ T8776] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9226'. [ 1318.523733][ T8776] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1318.635963][ T519] 9: left promiscuous mode [ 1318.690630][ T8782] netlink: 'syz.2.9227': attribute type 4 has an invalid length. [ 1318.749928][ T8783] netlink: 'syz.2.9227': attribute type 4 has an invalid length. [ 1318.781992][ T519] : left promiscuous mode [ 1318.917567][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9228'. [ 1319.023097][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.030954][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.311377][ T8782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1319.334102][ T8782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.512013][ T519] tipc: Disabling bearer [ 1319.518245][ T519] tipc: Left network mode [ 1319.587879][ T527] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.616813][ T527] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.626328][ T527] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.658114][ T527] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.708840][ T527] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.734529][ T527] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.767044][ T527] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.778887][ T527] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.003540][ T8820] wg1 speed is unknown, defaulting to 1000 [ 1320.103977][ T8827] FAULT_INJECTION: forcing a failure. [ 1320.103977][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.140991][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.5.9237 Not tainted syzkaller #0 PREEMPT(full) [ 1320.141025][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1320.141040][ T8827] Call Trace: [ 1320.141049][ T8827] [ 1320.141060][ T8827] dump_stack_lvl+0x189/0x250 [ 1320.141099][ T8827] ? __pfx____ratelimit+0x10/0x10 [ 1320.141125][ T8827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1320.141161][ T8827] ? __pfx__printk+0x10/0x10 [ 1320.141181][ T8827] ? kmalloc_reserve+0xbd/0x290 [ 1320.141213][ T8827] ? __lock_acquire+0xab9/0xd20 [ 1320.141244][ T8827] should_fail_ex+0x414/0x560 [ 1320.141286][ T8827] should_failslab+0xa8/0x100 [ 1320.141311][ T8827] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1320.141343][ T8827] ? skb_clone+0x212/0x3a0 [ 1320.141379][ T8827] skb_clone+0x212/0x3a0 [ 1320.141413][ T8827] __netlink_deliver_tap+0x404/0x850 [ 1320.141459][ T8827] ? netlink_deliver_tap+0x2e/0x1b0 [ 1320.141489][ T8827] netlink_deliver_tap+0x19c/0x1b0 [ 1320.141520][ T8827] netlink_unicast+0x7fa/0x9e0 [ 1320.141557][ T8827] ? __pfx_netlink_unicast+0x10/0x10 [ 1320.141585][ T8827] ? netlink_sendmsg+0x642/0xb30 [ 1320.141619][ T8827] ? skb_put+0x11b/0x210 [ 1320.141649][ T8827] netlink_sendmsg+0x805/0xb30 [ 1320.141690][ T8827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1320.141724][ T8827] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1320.141760][ T8827] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1320.141783][ T8827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1320.141813][ T8827] __sock_sendmsg+0x21c/0x270 [ 1320.141852][ T8827] ____sys_sendmsg+0x505/0x830 [ 1320.141888][ T8827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1320.141928][ T8827] ? import_iovec+0x74/0xa0 [ 1320.141961][ T8827] ___sys_sendmsg+0x21f/0x2a0 [ 1320.141999][ T8827] ? __pfx____sys_sendmsg+0x10/0x10 [ 1320.142073][ T8827] ? __fget_files+0x2a/0x420 [ 1320.142094][ T8827] ? __fget_files+0x3a0/0x420 [ 1320.142129][ T8827] __x64_sys_sendmsg+0x19b/0x260 [ 1320.142162][ T8827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1320.142203][ T8827] ? __pfx_ksys_write+0x10/0x10 [ 1320.142241][ T8827] ? do_syscall_64+0xbe/0xfa0 [ 1320.142272][ T8827] do_syscall_64+0xfa/0xfa0 [ 1320.142297][ T8827] ? lockdep_hardirqs_on+0x9c/0x150 [ 1320.142323][ T8827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.142344][ T8827] ? clear_bhb_loop+0x60/0xb0 [ 1320.142372][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.142394][ T8827] RIP: 0033:0x7f983ed8f749 [ 1320.142414][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.142434][ T8827] RSP: 002b:00007f983fb70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1320.142459][ T8827] RAX: ffffffffffffffda RBX: 00007f983efe5fa0 RCX: 00007f983ed8f749 [ 1320.142493][ T8827] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1320.142508][ T8827] RBP: 00007f983fb70090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.142522][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.142535][ T8827] R13: 00007f983efe6038 R14: 00007f983efe5fa0 R15: 00007fff1ae7f3e8 [ 1320.142576][ T8827] [ 1320.594908][ T8828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1320.635940][ T8828] team0: Port device bond1 added [ 1320.664659][ T8820] vxcan1 speed is unknown, defaulting to 1000 [ 1321.046413][ T8835] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9239'. [ 1321.175894][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9240'. [ 1321.314773][ T8837] syzkaller1: entered promiscuous mode [ 1321.321239][ T8837] syzkaller1: entered allmulticast mode [ 1321.709892][ T519] hsr_slave_0: left promiscuous mode [ 1321.720296][ T519] hsr_slave_1: left promiscuous mode [ 1321.732495][ T519] batman_adv: batadv0: Removing interface: macsec2 [ 1322.045997][ T8848] netlink: 996 bytes leftover after parsing attributes in process `syz.2.9241'. [ 1323.402324][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9242'. [ 1323.443626][ T8850] siw: device registration error -23 [ 1323.593805][ T519] IPVS: stop unused estimator thread 0... [ 1323.684211][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9244'. [ 1323.726627][ T8855] block nbd4: Unsupported socket: should be TCP or UNIX. [ 1324.432666][ T8867] wg1 speed is unknown, defaulting to 1000 [ 1324.596162][ T8867] vxcan1 speed is unknown, defaulting to 1000 [ 1324.783195][ T8871] netlink: 'syz.2.9249': attribute type 3 has an invalid length. [ 1324.791376][ T8871] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9249'. [ 1325.000448][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9251'. [ 1325.208930][ T8883] pim6reg1: entered promiscuous mode [ 1325.217475][ T8883] pim6reg1: entered allmulticast mode [ 1325.478642][ T8881] delete_channel: no stack [ 1325.941040][ T8895] netlink: 'syz.3.9255': attribute type 4 has an invalid length. [ 1325.954162][ T8895] netlink: 'syz.3.9255': attribute type 4 has an invalid length. [ 1327.268298][ T8914] xt_hashlimit: size too large, truncated to 1048576 [ 1327.328684][ T8916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.338494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.263557][ T8922] wg1 speed is unknown, defaulting to 1000 [ 1328.464728][ T8922] vxcan1 speed is unknown, defaulting to 1000 [ 1329.132921][ T8931] vxcan3: entered promiscuous mode [ 1329.385540][ T8935] netlink: 'syz.3.9266': attribute type 4 has an invalid length. [ 1329.434306][ T8935] netlink: 'syz.3.9266': attribute type 14 has an invalid length. [ 1329.454864][ T8935] netlink: 'syz.3.9266': attribute type 4 has an invalid length. [ 1330.523077][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1330.536468][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1330.545663][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1330.554056][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1330.562963][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1330.621332][ T8947] wg1 speed is unknown, defaulting to 1000 [ 1330.744829][ T8955] bond3: Unable to set up delay as MII monitoring is disabled [ 1330.763291][ T8955] bond3 (unregistering): Released all slaves [ 1330.853055][ T8947] vxcan1 speed is unknown, defaulting to 1000 [ 1330.946111][ T8958] netlink: 'syz.3.9272': attribute type 1 has an invalid length. [ 1330.955016][ T8958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1331.075511][ T8960] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9273'. [ 1331.192858][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9273'. [ 1331.320942][ T8947] chnl_net:caif_netlink_parms(): no params data found [ 1331.493864][ T8947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.502365][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.509915][ T8947] bridge_slave_0: entered allmulticast mode [ 1331.518602][ T8947] bridge_slave_0: entered promiscuous mode [ 1331.532763][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.541434][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.554287][ T8947] bridge_slave_1: entered allmulticast mode [ 1331.562880][ T8947] bridge_slave_1: entered promiscuous mode [ 1331.615891][ T8947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.631400][ T8947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.640701][ T8980] netlink: 'syz.3.9275': attribute type 2 has an invalid length. [ 1331.640727][ T8980] netlink: 'syz.3.9275': attribute type 1 has an invalid length. [ 1331.640743][ T8980] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9275'. [ 1331.669613][ T8980] tipc: Enabling of bearer rejected, failed to enable media [ 1331.714481][ T8947] team0: Port device team_slave_0 added [ 1331.723791][ T8947] team0: Port device team_slave_1 added [ 1331.762241][ T8947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.771669][ T8947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.799736][ T8947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.819154][ T8947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.826210][ T8947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.852968][ T8947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.912879][ T8947] hsr_slave_0: entered promiscuous mode [ 1331.921056][ T8947] hsr_slave_1: entered promiscuous mode [ 1331.927897][ T8947] debugfs: 'hsr0' already exists in 'hsr' [ 1331.933649][ T8947] Cannot create hsr debugfs directory [ 1332.132963][ T8947] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1332.144753][ T8947] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1332.157693][ T8947] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1332.170824][ T8947] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1332.283598][ T8947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.313311][ T8947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.330368][ T527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.337638][ T527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.356441][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.363635][ T7242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.636664][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9277'. [ 1332.645875][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9277'. [ 1332.645899][ T5843] Bluetooth: hci4: command tx timeout [ 1332.678483][ T8947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.983517][ T9008] wg1 speed is unknown, defaulting to 1000 [ 1333.022571][ T8947] veth0_vlan: entered promiscuous mode [ 1333.032604][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9279'. [ 1333.051321][ T8947] veth1_vlan: entered promiscuous mode [ 1333.092452][ T9009] bond0: (slave bond_slave_1): Releasing backup interface [ 1333.102139][ T9009] bond_slave_1 (unregistering): left promiscuous mode [ 1333.200196][ T8947] veth0_macvtap: entered promiscuous mode [ 1333.211510][ T8947] veth1_macvtap: entered promiscuous mode [ 1333.235600][ T8947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1333.254497][ T8947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1333.274998][ T546] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.288774][ T546] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.307482][ T546] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.318452][ T546] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.344903][ T9008] vxcan1 speed is unknown, defaulting to 1000 [ 1333.422629][ T546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.435404][ T546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.487353][ T6289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.495278][ T6289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.433644][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9283'. [ 1334.670725][ T9034] xt_policy: too many policy elements [ 1334.682629][ T9034] xt_hashlimit: size too large, truncated to 1048576 [ 1334.718143][ T6202] Bluetooth: hci4: command tx timeout [ 1335.044636][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1335.054791][ T6202] Bluetooth: hci0: command 0x0c1a tx timeout [ 1335.549156][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1335.560817][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1335.572801][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1335.584113][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1335.592983][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1335.654992][ T9061] bond3 (unregistering): Released all slaves [ 1335.773185][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1335.794983][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1335.804316][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1335.814458][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1335.822379][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1335.850954][ T9063] wg1 speed is unknown, defaulting to 1000 [ 1335.891661][ T9073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9297'. [ 1336.021629][ T9070] wg1 speed is unknown, defaulting to 1000 [ 1336.040570][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9299'. [ 1336.068852][ T9082] netlink: 'syz.6.9299': attribute type 22 has an invalid length. [ 1336.124740][ T9086] Cannot find del_set index 2 as target [ 1336.138789][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9299'. [ 1336.178376][ T9063] vxcan1 speed is unknown, defaulting to 1000 [ 1336.797865][ T6202] Bluetooth: hci4: command tx timeout [ 1336.825691][ T9070] vxcan1 speed is unknown, defaulting to 1000 [ 1336.874897][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9306'. [ 1336.923828][ T9106] hsr_slave_0: left promiscuous mode [ 1336.954395][ T9106] hsr_slave_1: left promiscuous mode [ 1337.245719][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9304'. [ 1337.364033][ T9113] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9307'. [ 1337.455479][ T9063] chnl_net:caif_netlink_parms(): no params data found [ 1337.542710][ T9115] netlink: 312 bytes leftover after parsing attributes in process `syz.6.9307'. [ 1337.680395][ T6202] Bluetooth: hci6: command tx timeout [ 1337.882878][ T9128] bond1 (unregistering): Released all slaves [ 1337.918946][ T6202] Bluetooth: hci7: command tx timeout [ 1337.970315][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.982039][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.999844][ T9063] bridge_slave_0: entered allmulticast mode [ 1338.026573][ T9063] bridge_slave_0: entered promiscuous mode [ 1338.058439][ T9128] pim6reg: entered allmulticast mode [ 1338.076510][ T9063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.090084][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.098206][ T9063] bridge_slave_1: entered allmulticast mode [ 1338.105900][ T9063] bridge_slave_1: entered promiscuous mode [ 1338.148525][ T9128] pim6reg: left allmulticast mode [ 1338.234881][ T9063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.264099][ T9063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.381748][ T9063] team0: Port device team_slave_0 added [ 1338.429024][ T9063] team0: Port device team_slave_1 added [ 1338.553554][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.566914][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.593511][ T9063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.628913][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.635939][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.664343][ T9063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.682127][ T9070] chnl_net:caif_netlink_parms(): no params data found [ 1338.886433][ T6202] Bluetooth: hci4: command tx timeout [ 1338.950658][ T9063] hsr_slave_0: entered promiscuous mode [ 1338.962203][ T9063] hsr_slave_1: entered promiscuous mode [ 1338.969411][ T9063] debugfs: 'hsr0' already exists in 'hsr' [ 1338.975251][ T9063] Cannot create hsr debugfs directory [ 1339.215347][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.223869][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.232051][ T9070] bridge_slave_0: entered allmulticast mode [ 1339.241500][ T9070] bridge_slave_0: entered promiscuous mode [ 1339.302318][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.311011][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.311565][ T9166] netlink: 'syz.3.9317': attribute type 1 has an invalid length. [ 1339.318476][ T9070] bridge_slave_1: entered allmulticast mode [ 1339.320776][ T9070] bridge_slave_1: entered promiscuous mode [ 1339.358245][ T9164] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9316'. [ 1339.405437][ T9163] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.421064][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9317'. [ 1339.460376][ T9166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1339.513327][ T9168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1339.523352][ T9168] bond3: (slave batadv0): making interface the new active one [ 1339.532706][ T9168] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 1339.713025][ T9169] bond3 (unregistering): (slave batadv0): Releasing active interface [ 1339.726142][ T9169] bond3 (unregistering): Released all slaves [ 1339.770294][ T6202] Bluetooth: hci6: command tx timeout [ 1339.789056][ T9070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.809523][ T9070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.851941][ T9163] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.933738][ T9173] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1339.958570][ T9163] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.979911][ T9070] team0: Port device team_slave_0 added [ 1339.991855][ T9070] team0: Port device team_slave_1 added [ 1340.009933][ T6202] Bluetooth: hci7: command tx timeout [ 1340.013218][ T9174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9318'. [ 1340.083339][ T9163] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.125371][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.133545][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.168602][ T9070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.202988][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.210605][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.242618][ T9070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.460543][ T9070] hsr_slave_0: entered promiscuous mode [ 1340.468555][ T9070] hsr_slave_1: entered promiscuous mode [ 1340.475135][ T9186] netlink: 'syz.3.9322': attribute type 10 has an invalid length. [ 1340.484823][ T9070] debugfs: 'hsr0' already exists in 'hsr' [ 1340.490853][ T9070] Cannot create hsr debugfs directory [ 1340.498697][ T546] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.507445][ T9186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9322'. [ 1340.539778][ T507] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.661356][ T546] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.706167][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9323'. [ 1340.721499][ T9192] bridge_slave_1: left allmulticast mode [ 1340.731576][ T9192] bridge_slave_1: left promiscuous mode [ 1340.737607][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.748640][ T9192] bridge_slave_0: left allmulticast mode [ 1340.754468][ T9192] bridge_slave_0: left promiscuous mode [ 1340.761515][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.860575][ T507] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.871761][ T9063] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1340.946401][ T9063] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1341.000027][ T9063] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1341.028685][ T9063] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1341.216304][ T9218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1341.456248][ T9070] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1341.551505][ T9070] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1341.593412][ T9070] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1341.651829][ T9070] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1341.752891][ T9063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.837552][ T6202] Bluetooth: hci6: command tx timeout [ 1341.951461][ T9063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.005852][ T546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.013120][ T546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.025639][ T9250] syzkaller0: entered promiscuous mode [ 1342.031402][ T9250] syzkaller0: entered allmulticast mode [ 1342.078826][ T6202] Bluetooth: hci7: command tx timeout [ 1342.085109][ T507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.092323][ T507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.291740][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.372471][ T9070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.418291][ T546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.425578][ T546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.462344][ T546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.469927][ T546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.662727][ T9063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.674056][ T9274] openvswitch: netlink: IP tunnel dst address not specified [ 1343.174067][ T9070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.214615][ T9295] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1343.345406][ T9063] veth0_vlan: entered promiscuous mode [ 1343.380070][ T9063] veth1_vlan: entered promiscuous mode [ 1343.415990][ T9303] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9344'. [ 1343.492054][ T9063] veth0_macvtap: entered promiscuous mode [ 1343.524096][ T9063] veth1_macvtap: entered promiscuous mode [ 1343.583446][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.616557][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.668394][ T7242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.688772][ T7242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.738380][ T9311] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9346'. [ 1343.752426][ T7242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.787934][ T9309] IPVS: Scheduler module ip_vs_sip not found [ 1343.803851][ T7242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.813860][ T7242] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.830478][ T7242] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.839907][ T9309] IPVS: length: 141 != 8 [ 1343.841054][ T7242] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.854383][ T9309] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1343.864220][ T7242] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.917793][ T6202] Bluetooth: hci6: command tx timeout [ 1344.041177][ T9070] veth0_vlan: entered promiscuous mode [ 1344.047462][ T6289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.062322][ T6289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.136418][ T9070] veth1_vlan: entered promiscuous mode [ 1344.157502][ T6202] Bluetooth: hci7: command tx timeout [ 1344.169756][ T519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.191644][ T519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.216083][ T9070] veth0_macvtap: entered promiscuous mode [ 1344.243620][ T9070] veth1_macvtap: entered promiscuous mode [ 1344.270810][ T9323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1344.281751][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.339614][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.497067][ T534] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.510556][ T534] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.588555][ T534] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.606387][ T534] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.645137][ T9346] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1344.663258][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9352'. [ 1344.702355][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9352'. [ 1344.845983][ T530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.873551][ T530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.035887][ T534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.074190][ T534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.423275][ T9372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9356'. [ 1345.436481][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9356'. [ 1345.522108][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.530090][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.818809][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.855164][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.082545][ T519] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.154290][ T9384] dummy0: entered promiscuous mode [ 1346.167104][ T9384] macsec1: entered promiscuous mode [ 1346.188416][ T9384] macsec1: entered allmulticast mode [ 1346.196851][ T9384] dummy0: entered allmulticast mode [ 1346.228341][ T9386] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20003 [ 1346.235585][ T519] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.236329][ T519] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.295513][ T519] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.320280][ T9386] 8021q: VLANs not supported on ip6_vti0 [ 1346.447871][ T9395] wg1 speed is unknown, defaulting to 1000 [ 1346.575911][ T9407] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:0 [ 1346.578877][ T9405] netlink: 'syz.8.9366': attribute type 29 has an invalid length. [ 1346.593792][ T9405] netlink: 'syz.8.9366': attribute type 29 has an invalid length. [ 1346.602758][ T9405] netlink: 500 bytes leftover after parsing attributes in process `syz.8.9366'. [ 1346.613734][ T9405] sctp: [Deprecated]: syz.8.9366 (pid 9405) Use of int in max_burst socket option. [ 1346.613734][ T9405] Use struct sctp_assoc_value instead [ 1346.701133][ T9407] wg1 speed is unknown, defaulting to 1000 [ 1346.738964][ T9408] wg1 speed is unknown, defaulting to 1000 [ 1347.702689][ T9395] vxcan1 speed is unknown, defaulting to 1000 [ 1347.914907][ T9445] netlink: 'syz.3.9379': attribute type 1 has an invalid length. [ 1348.060087][ T9445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9379'. [ 1348.289942][ T9453] netlink: 428 bytes leftover after parsing attributes in process `syz.3.9382'. [ 1348.300237][ T9453] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9382'. [ 1348.529671][ T9458] netlink: 'syz.3.9383': attribute type 10 has an invalid length. [ 1348.557850][ T9457] netlink: 'syz.3.9383': attribute type 10 has an invalid length. [ 1348.571648][ T9458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.605173][ T9458] team0: entered promiscuous mode [ 1348.644691][ T9458] team_slave_0: entered promiscuous mode [ 1348.660558][ T9458] team_slave_1: entered promiscuous mode [ 1348.673035][ T9458] bond0: (slave team0): Enslaving as an active interface with an up link [ 1348.764624][ T9407] vxcan1 speed is unknown, defaulting to 1000 [ 1349.190485][ T9472] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9385'. [ 1349.401714][ T9472] nbd: socks must be embedded in a SOCK_ITEM attr [ 1349.415227][ T9473] wg1 speed is unknown, defaulting to 1000 [ 1349.878628][ T9408] vxcan1 speed is unknown, defaulting to 1000 [ 1350.317758][ T9473] vxcan1 speed is unknown, defaulting to 1000 [ 1350.385046][ T9482] wg1 speed is unknown, defaulting to 1000 [ 1350.877568][ T6202] Bluetooth: hci7: command tx timeout [ 1350.960451][ T9497] batadv0: mtu less than device minimum [ 1351.039689][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9390'. [ 1351.078948][ T9498] bridge_slave_1: left allmulticast mode [ 1351.084756][ T9498] bridge_slave_1: left promiscuous mode [ 1351.093061][ T9498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.116141][ T9498] bridge_slave_0: left allmulticast mode [ 1351.138172][ T9498] bridge_slave_0: left promiscuous mode [ 1351.169736][ T9498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.421535][ T9482] vxcan1 speed is unknown, defaulting to 1000 [ 1351.661949][ T9500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1352.201689][ T9510] tipc: Started in network mode [ 1352.251363][ T9510] tipc: Node identity ba630c855e46, cluster identity 4711 [ 1352.289303][ T9510] tipc: Enabled bearer , priority 0 [ 1352.352247][ T9511] syzkaller0: entered promiscuous mode [ 1352.361687][ T9511] syzkaller0: entered allmulticast mode [ 1352.656010][ T9510] tipc: Resetting bearer [ 1352.732188][ T9501] tipc: Resetting bearer [ 1352.792188][ T9501] tipc: Disabling bearer [ 1352.874291][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9399'. [ 1353.015248][ T9534] netlink: 'syz.2.9399': attribute type 1 has an invalid length. [ 1353.028642][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9397'. [ 1353.065427][ T9530] tap0: tun_chr_ioctl cmd 1074812118 [ 1353.072000][ T9533] netlink: 'syz.3.9397': attribute type 29 has an invalid length. [ 1353.087766][ T9526] netlink: 'syz.3.9397': attribute type 29 has an invalid length. [ 1353.138657][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9399'. [ 1353.212435][ T9532] : entered promiscuous mode [ 1353.240470][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9399'. [ 1353.365299][ T9534] bond2: entered promiscuous mode [ 1353.375655][ T9534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1353.621286][ T9546] netlink: 'syz.2.9401': attribute type 1 has an invalid length. [ 1353.701117][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9402'. [ 1353.759409][ T9546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1353.878308][ T9550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1353.885662][ T9550] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1353.988943][ T9550] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1354.070995][ T9549] macvlan0: entered promiscuous mode [ 1354.076491][ T9549] macvlan0: entered allmulticast mode [ 1354.094407][ T9549] mac80211_hwsim hwsim100 wlan0: entered allmulticast mode [ 1354.158955][ T9555] gretap2: entered promiscuous mode [ 1354.172626][ T9555] bond3: (slave gretap2): making interface the new active one [ 1354.182415][ T9555] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1354.201687][ T9559] macvlan2: entered promiscuous mode [ 1354.207940][ T9559] macvlan2: entered allmulticast mode [ 1354.214497][ T9559] bond3: entered promiscuous mode [ 1354.225666][ T9559] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1354.243010][ T9559] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 1354.258948][ T9559] bond3: left promiscuous mode [ 1354.560001][ T9568] Cannot find set identified by id 65534 to match [ 1354.585555][ T9566] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9404'. [ 1354.888322][ T9579] netlink: 'syz.6.9409': attribute type 2 has an invalid length. [ 1355.254307][ T9590] mac80211_hwsim hwsim122 wlan1: entered allmulticast mode [ 1355.304906][ T9594] netlink: 'syz.7.9415': attribute type 10 has an invalid length. [ 1355.326032][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1355.347290][ T9600] nbd: must specify a size in bytes for the device [ 1355.369390][ T9600] nbd: couldn't find device at index 3 [ 1355.382677][ T9594] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.394401][ T9594] bond0: (slave team0): Enslaving as an active interface with an up link [ 1356.166518][ T9634] 0: reclassify loop, rule prio 0, protocol 800 [ 1356.271375][ T9638] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9427'. [ 1356.454108][ T9641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1356.533557][ T9645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9429'. [ 1356.598341][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9429'. [ 1356.608410][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9429'. [ 1356.635967][ T9640] wg1 speed is unknown, defaulting to 1000 [ 1356.650998][ T9645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9429'. [ 1356.669226][ T9644] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1356.698845][T28701] IPVS: starting estimator thread 0... [ 1356.796183][ T9653] mac80211_hwsim hwsim121 wlan0: entered promiscuous mode [ 1356.811491][ T9652] IPVS: using max 25 ests per chain, 60000 per kthread [ 1356.914703][ T9653] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1357.124252][ T9657] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9431'. [ 1357.140778][ T9640] vxcan1 speed is unknown, defaulting to 1000 [ 1357.165347][ T9657] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9431'. [ 1357.258804][ T9661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9432'. [ 1357.919254][ T9675] x_tables: duplicate underflow at hook 2 [ 1358.036222][ T9675] wg1 speed is unknown, defaulting to 1000 [ 1358.649140][ T6202] Bluetooth: hci2: command 0x0406 tx timeout [ 1358.791587][ T9684] wg1 speed is unknown, defaulting to 1000 [ 1359.218087][ T9675] vxcan1 speed is unknown, defaulting to 1000 [ 1360.618626][ T9684] vxcan1 speed is unknown, defaulting to 1000 [ 1361.407554][ T9708] __nla_validate_parse: 9 callbacks suppressed [ 1361.407576][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9443'. [ 1361.676991][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1361.749160][ T9711] wg1 speed is unknown, defaulting to 1000 [ 1362.451728][ T9711] vxcan1 speed is unknown, defaulting to 1000 [ 1362.493133][ T9740] bond4: entered promiscuous mode [ 1362.511850][ T9740] bond4: entered allmulticast mode [ 1362.533428][ T9740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1363.101345][ T9769] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9455'. [ 1363.180649][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9456'. [ 1363.225369][ T9767] IPVS: Scheduler module ip_vs_sip not found [ 1363.294790][ T9776] netlink: 148 bytes leftover after parsing attributes in process `syz.6.9457'. [ 1363.626109][ T9789] netlink: 'syz.3.9460': attribute type 1 has an invalid length. [ 1363.665190][ T9784] tipc: Started in network mode [ 1363.671261][ T9784] tipc: Node identity 9e19dfea12d, cluster identity 4711 [ 1363.710078][ T9784] tipc: Enabled bearer , priority 0 [ 1363.728243][ T9785] syzkaller0: entered promiscuous mode [ 1363.733797][ T9785] syzkaller0: entered allmulticast mode [ 1364.003515][ T9794] tipc: Resetting bearer [ 1364.095344][ T9783] tipc: Resetting bearer [ 1364.154519][ T9783] tipc: Disabling bearer [ 1364.541900][ T9816] netlink: 596 bytes leftover after parsing attributes in process `syz.6.9468'. [ 1364.573265][ T9816] netlink: 596 bytes leftover after parsing attributes in process `syz.6.9468'. [ 1364.710342][ T9829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9470'. [ 1364.861914][ T9838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1364.881457][ T9831] wg1 speed is unknown, defaulting to 1000 [ 1364.967965][ T9838] nbd4: detected capacity change from 0 to 127 [ 1365.047704][ T9839] nbd5: detected capacity change from 0 to 127 [ 1365.055859][ T5843] block nbd4: Receive control failed (result -32) [ 1365.057709][ T6202] block nbd5: Receive control failed (result -32) [ 1365.306371][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1365.339410][ T9856] warn_alloc: 1 callbacks suppressed [ 1365.339430][ T9856] syz.3.9478: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1365.392795][ T9856] CPU: 1 UID: 0 PID: 9856 Comm: syz.3.9478 Not tainted syzkaller #0 PREEMPT(full) [ 1365.392829][ T9856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1365.392844][ T9856] Call Trace: [ 1365.392855][ T9856] [ 1365.392866][ T9856] dump_stack_lvl+0x189/0x250 [ 1365.392908][ T9856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1365.392939][ T9856] ? __pfx__printk+0x10/0x10 [ 1365.392963][ T9856] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1365.392993][ T9856] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1365.393025][ T9856] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1365.393058][ T9856] warn_alloc+0x214/0x310 [ 1365.393101][ T9856] ? stack_depot_save_flags+0x40/0x860 [ 1365.393145][ T9856] ? __pfx_warn_alloc+0x10/0x10 [ 1365.393195][ T9856] ? kasan_save_track+0x3e/0x80 [ 1365.393224][ T9856] ? __kasan_kmalloc+0x93/0xb0 [ 1365.393254][ T9856] ? xsk_setsockopt+0x4dc/0x8d0 [ 1365.393280][ T9856] ? do_sock_setsockopt+0x17c/0x1b0 [ 1365.393305][ T9856] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1365.393329][ T9856] ? do_syscall_64+0xfa/0xfa0 [ 1365.393354][ T9856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.393389][ T9856] __vmalloc_node_range_noprof+0x125/0x12d0 [ 1365.393460][ T9856] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1365.393498][ T9856] ? __kasan_kmalloc+0x93/0xb0 [ 1365.393525][ T9856] vmalloc_user_noprof+0xad/0xf0 [ 1365.393557][ T9856] ? xskq_create+0xbf/0x170 [ 1365.393582][ T9856] xskq_create+0xbf/0x170 [ 1365.393610][ T9856] xsk_init_queue+0xb0/0x110 [ 1365.393636][ T9856] xsk_setsockopt+0x4dc/0x8d0 [ 1365.393663][ T9856] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1365.393689][ T9856] ? __pfx_aa_sk_perm+0x10/0x10 [ 1365.393724][ T9856] ? aa_sock_opt_perm+0xff/0x1b0 [ 1365.393762][ T9856] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1365.393785][ T9856] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1365.393809][ T9856] do_sock_setsockopt+0x17c/0x1b0 [ 1365.393841][ T9856] __x64_sys_setsockopt+0x13f/0x1b0 [ 1365.393877][ T9856] do_syscall_64+0xfa/0xfa0 [ 1365.393901][ T9856] ? lockdep_hardirqs_on+0x9c/0x150 [ 1365.393928][ T9856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.393950][ T9856] ? clear_bhb_loop+0x60/0xb0 [ 1365.393978][ T9856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.394000][ T9856] RIP: 0033:0x7fce5598f749 [ 1365.394022][ T9856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.394042][ T9856] RSP: 002b:00007fce56831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1365.394066][ T9856] RAX: ffffffffffffffda RBX: 00007fce55be5fa0 RCX: 00007fce5598f749 [ 1365.394083][ T9856] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1365.394103][ T9856] RBP: 00007fce55a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 1365.394117][ T9856] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1365.394130][ T9856] R13: 00007fce55be6038 R14: 00007fce55be5fa0 R15: 00007fffbb56bb38 [ 1365.394167][ T9856] [ 1365.394177][ T9856] Mem-Info: [ 1365.686346][ T9867] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9482'. [ 1365.732329][ T9867] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9482'. [ 1365.739795][ T9856] active_anon:15013 inactive_anon:0 isolated_anon:0 [ 1365.739795][ T9856] active_file:3878 inactive_file:40408 isolated_file:0 [ 1365.739795][ T9856] unevictable:768 dirty:176 writeback:0 [ 1365.739795][ T9856] slab_reclaimable:14519 slab_unreclaimable:171911 [ 1365.739795][ T9856] mapped:47023 shmem:3435 pagetables:1436 [ 1365.739795][ T9856] sec_pagetables:0 bounce:0 [ 1365.739795][ T9856] kernel_misc_reclaimable:0 [ 1365.739795][ T9856] free:1194146 free_pcp:16031 free_cma:0 [ 1365.837771][ T9856] Node 0 active_anon:61152kB inactive_anon:0kB active_file:15512kB inactive_file:161428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:189292kB dirty:704kB writeback:0kB shmem:13504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18328kB pagetables:5624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1365.908307][ T9856] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1365.953424][ T9831] vxcan1 speed is unknown, defaulting to 1000 [ 1365.985497][ T9856] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1366.034433][ T9856] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 1366.048945][ T9856] Node 0 DMA32 free:858292kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62996kB inactive_anon:0kB active_file:15512kB inactive_file:161428kB unevictable:1536kB writepending:760kB zspages:0kB present:3129332kB managed:2565032kB mlocked:0kB bounce:0kB free_pcp:47288kB local_pcp:24248kB free_cma:0kB [ 1366.117397][ T9856] lowmem_reserve[]: 0 0 0 0 0 [ 1366.122212][ T9856] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1366.196271][ T9856] lowmem_reserve[]: 0 0 0 0 0 [ 1366.203303][ T9856] Node 1 Normal free:3903260kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13728kB local_pcp:4608kB free_cma:0kB [ 1366.238299][ T9856] lowmem_reserve[]: 0 0 0 0 0 [ 1366.243482][ T9856] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1366.260536][ T9856] Node 0 DMA32: 213*4kB (UME) 427*8kB (UME) 298*16kB (UME) 237*32kB (UME) 112*64kB (UM) 99*128kB (UME) 521*256kB (UME) 401*512kB (UME) 201*1024kB (UM) 9*2048kB (UM) 63*4096kB (UM) = 857452kB [ 1366.264078][ T9881] tipc: New replicast peer: 0.0.0.0 [ 1366.279749][ T9856] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1366.279897][ T9856] Node 1 Normal: 135*4kB (U) 38*8kB (UME) 31*16kB (UME) 167*32kB (UME) 46*64kB (UME) 9*128kB (UME) 3*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3903260kB [ 1366.280117][ T9856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1366.280138][ T9856] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1366.280157][ T9856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1366.280177][ T9856] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1366.280196][ T9856] 48631 total pagecache pages [ 1366.280207][ T9856] 0 pages in swap cache [ 1366.280218][ T9856] Free swap = 124996kB [ 1366.280228][ T9856] Total swap = 124996kB [ 1366.280239][ T9856] 2097051 pages RAM [ 1366.280250][ T9856] 0 pages HighMem/MovableOnly [ 1366.280259][ T9856] 424151 pages reserved [ 1366.280269][ T9856] 0 pages cma reserved [ 1366.418472][ T9881] tipc: Enabled bearer , priority 26 [ 1366.448216][ T9882] tipc: New replicast peer: 172.30.1.8 [ 1366.816191][ T9872] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1367.145480][ T9910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9491'. [ 1367.372324][ T9914] syzkaller0: entered promiscuous mode [ 1367.379321][ T9914] syzkaller0: entered allmulticast mode [ 1367.595527][ T9929] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input11 [ 1367.938253][T28702] tipc: Node number set to 3827633285 [ 1368.135456][ T9934] syzkaller0: entered promiscuous mode [ 1368.178353][ T9934] syzkaller0: entered allmulticast mode [ 1368.409185][ T9962] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9502'. [ 1371.269656][ T9967] tipc: Started in network mode [ 1371.274621][ T9967] tipc: Node identity 923fb783222d, cluster identity 4711 [ 1371.298153][ T9967] tipc: Enabled bearer , priority 0 [ 1371.352859][ T9976] netlink: 'syz.8.9505': attribute type 3 has an invalid length. [ 1371.365682][ T9976] netlink: 'syz.8.9505': attribute type 1 has an invalid length. [ 1371.374188][ T9976] netlink: 224 bytes leftover after parsing attributes in process `syz.8.9505'. [ 1371.384855][ T9968] syzkaller0: entered allmulticast mode [ 1371.390779][ T9978] netlink: 'syz.8.9505': attribute type 3 has an invalid length. [ 1371.390806][ T9978] netlink: 'syz.8.9505': attribute type 1 has an invalid length. [ 1371.390822][ T9978] netlink: 224 bytes leftover after parsing attributes in process `syz.8.9505'. [ 1371.454253][ T9965] tipc: Disabling bearer [ 1371.545338][ T9984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.561056][ T9989] netlink: 'syz.8.9507': attribute type 4 has an invalid length. [ 1371.600847][ T9984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1371.878433][T10001] xt_CT: No such helper "pptp" [ 1372.931792][T10033] syzkaller0: entered promiscuous mode [ 1372.943127][T10033] syzkaller0: entered allmulticast mode [ 1373.281257][T10057] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9525'. [ 1373.525217][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9529'. [ 1373.548638][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9523'. [ 1376.152017][T10049] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1376.188059][T10067] batadv_slave_0: entered promiscuous mode [ 1376.220391][T10077] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1376.242297][T10077] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1376.254531][T10077] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1376.263340][T10080] bridge1: entered promiscuous mode [ 1376.351707][T10086] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9531'. [ 1376.391372][T10087] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9531'. [ 1376.490757][T10099] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1376.539102][T10094] wg1 speed is unknown, defaulting to 1000 [ 1376.610693][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9536'. [ 1376.868249][T10121] pim6reg1: entered promiscuous mode [ 1376.873722][T10121] pim6reg1: entered allmulticast mode [ 1378.107787][ T547] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1378.244362][ T547] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1378.595079][ T547] bond0 (unregistering): left promiscuous mode [ 1378.628137][ T547] bond0 (unregistering): Released all slaves [ 1378.791396][ T547] bond1 (unregistering): Released all slaves [ 1378.963782][ T547] bond2 (unregistering): Released all slaves [ 1379.135279][ T547] bond3 (unregistering): Released all slaves [ 1379.300678][ T547] bond4 (unregistering): Released all slaves [ 1379.471683][ T547] bond5 (unregistering): Released all slaves [ 1379.487603][ T547] bond6 (unregistering): Released all slaves [ 1379.503048][ T547] bond7 (unregistering): Released all slaves [ 1379.684741][ T547] bond8 (unregistering): Released all slaves [ 1379.862172][ T547] bond9 (unregistering): (slave veth7): Releasing backup interface [ 1379.870776][ T547] veth7: left promiscuous mode [ 1379.878817][ T547] bond9 (unregistering): Released all slaves [ 1380.044165][ T547] bond10 (unregistering): Released all slaves [ 1380.208930][ T547] bond11 (unregistering): Released all slaves [ 1380.379772][ T547] bond12 (unregistering): Released all slaves [ 1380.398343][ T547] bond13 (unregistering): Released all slaves [ 1380.569404][ T547] bond14 (unregistering): Released all slaves [ 1380.733569][ T547] bond15 (unregistering): Released all slaves [ 1380.906065][ T547] bond16 (unregistering): Released all slaves [ 1380.921242][ T547] bond17 (unregistering): Released all slaves [ 1380.964225][T10094] vxcan1 speed is unknown, defaulting to 1000 [ 1381.457144][ T6289] smc: removing ib device syz1 [ 1381.504705][T10159] wg1 speed is unknown, defaulting to 1000 [ 1381.572169][T10159] vxcan1 speed is unknown, defaulting to 1000 [ 1381.682827][T10166] wg1 speed is unknown, defaulting to 1000 [ 1382.850592][T10166] vxcan1 speed is unknown, defaulting to 1000 [ 1383.859647][T10176] wg1 speed is unknown, defaulting to 1000 [ 1383.890504][T10176] vxcan1 speed is unknown, defaulting to 1000 [ 1383.941296][T10170] wg1 speed is unknown, defaulting to 1000 [ 1384.814171][T10170] vxcan1 speed is unknown, defaulting to 1000 [ 1385.210734][ T547] tipc: Left network mode [ 1385.247407][ T547] IPVS: stopping backup sync thread 30007 ... [ 1386.110715][T10184] bridge_slave_0: left allmulticast mode [ 1386.123590][T10184] bridge_slave_0: left promiscuous mode [ 1386.137863][T10184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.163362][T10184] bridge_slave_1: left allmulticast mode [ 1386.172848][T10184] bridge_slave_1: left promiscuous mode [ 1386.183493][T10184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.201041][T10184] bond0: (slave bond_slave_0): Releasing backup interface [ 1386.224127][T10184] bond0: (slave bond_slave_1): Releasing backup interface [ 1386.262776][T10184] team0: Port device team_slave_0 removed [ 1386.300810][T10184] team0: Port device team_slave_1 removed [ 1386.311230][T10184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.319651][T10184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.375143][T10184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1386.384971][T10184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.535026][T10186] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1386.843657][ T547] hsr_slave_0: left promiscuous mode [ 1386.879223][ T547] veth0_to_bond: left promiscuous mode [ 1387.066182][T10208] IPVS: length: 153 != 24 [ 1387.365966][T10209] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9558'. [ 1387.376012][T10209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1387.383319][T10209] IPv6: NLM_F_CREATE should be set when creating new route [ 1387.572761][T10225] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9560'. [ 1387.765328][ T547] pimreg3 (unregistering): left allmulticast mode [ 1388.071544][T10233] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9561'. [ 1388.862933][T10220] syz_tun: entered allmulticast mode [ 1388.899762][T10220] syz_tun: left allmulticast mode [ 1388.915360][T10229] vxcan1 speed is unknown, defaulting to 1000 [ 1389.199260][T10239] netlink: 'syz.3.9563': attribute type 1 has an invalid length. [ 1389.208280][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9563'. [ 1389.222437][T10239] Bluetooth: MGMT ver 1.23 [ 1389.251981][T10243] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9564'. [ 1389.351160][ T547] IPVS: stop unused estimator thread 0... [ 1389.567317][T10244] vxcan1 speed is unknown, defaulting to 1000 [ 1389.733466][T10259] netlink: 'syz.6.9569': attribute type 3 has an invalid length. [ 1389.793066][T10259] netlink: 'syz.6.9569': attribute type 1 has an invalid length. [ 1389.855342][T10259] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9569'. [ 1390.526488][ T547] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1390.564366][ T547] bond2 (unregistering): (slave gretap2): Releasing active interface [ 1390.575392][ T547] gretap2 (unregistering): left allmulticast mode [ 1390.606516][ T547] bond6 (unregistering): (slave gretap3): Releasing active interface [ 1390.639846][ T547] bond8 (unregistering): (slave gretap4): Releasing active interface [ 1390.738090][ T547] dvmrp0 (unregistering): left allmulticast mode [ 1390.790077][ T547] bond7 (unregistering): (slave geneve3): Releasing active interface [ 1391.306023][ T547] bond0 (unregistering): Released all slaves [ 1391.323969][ T547] bond1 (unregistering): Released all slaves [ 1391.502162][ T547] bond2 (unregistering): Released all slaves [ 1391.675939][ T547] bond3 (unregistering): Released all slaves [ 1391.849506][ T547] bond4 (unregistering): Released all slaves [ 1392.021837][ T547] bond5 (unregistering): Released all slaves [ 1392.036969][ T547] bond6 (unregistering): Released all slaves [ 1392.196543][ T547] bond7 (unregistering): Released all slaves [ 1392.354838][ T547] bond8 (unregistering): Released all slaves [ 1392.452322][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9574'. [ 1392.642981][ T547] : left promiscuous mode [ 1392.766387][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9577'. [ 1392.887600][T10294] netlink: 'syz.8.9575': attribute type 13 has an invalid length. [ 1393.001792][ T547] 9: left promiscuous mode [ 1393.155025][T10294] gretap0: refused to change device tx_queue_len [ 1393.178706][T10294] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1393.231339][ T547] tipc: Left network mode [ 1393.328084][T10287] vxcan1 speed is unknown, defaulting to 1000 [ 1393.893658][T10296] netlink: 'syz.6.9576': attribute type 6 has an invalid length. [ 1394.030981][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9581'. [ 1394.036058][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9580'. [ 1394.173980][T10314] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9580'. [ 1394.323583][T10323] Bluetooth: MGMT ver 1.23 [ 1394.349631][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9585'. [ 1394.369936][T10323] geneve2: entered promiscuous mode [ 1394.468068][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9584'. [ 1394.496423][T10300] vxcan1 speed is unknown, defaulting to 1000 [ 1394.572091][T10333] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9586'. [ 1395.154917][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9589'. [ 1395.262401][T10349] netlink: 'syz.8.9591': attribute type 4 has an invalid length. [ 1395.270924][T10349] netlink: 17 bytes leftover after parsing attributes in process `syz.8.9591'. [ 1395.389140][T10349] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1395.604421][T10354] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1395.854791][ T547] hsr_slave_0: left promiscuous mode [ 1395.884556][ T547] macsec0: left allmulticast mode [ 1395.890346][ T547] veth1_macvtap: left allmulticast mode [ 1395.897379][ T547] veth1_macvtap: left promiscuous mode [ 1395.903703][ T547] veth0_macvtap: left promiscuous mode [ 1395.913283][ T547] veth1_vlan: left promiscuous mode [ 1396.020298][T10366] xt_ecn: cannot match TCP bits for non-tcp packets [ 1397.099572][ T507] smc: removing ib device syz2 [ 1397.502520][ T5897] vxcan1 speed is unknown, defaulting to 1000 [ 1397.509900][T10373] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1397.519995][ T5897] syz2: Port: 1 Link DOWN [ 1397.780947][T10380] sctp: [Deprecated]: syz.8.9600 (pid 10380) Use of int in max_burst socket option. [ 1397.780947][T10380] Use struct sctp_assoc_value instead [ 1398.207592][T10388] __nla_validate_parse: 3 callbacks suppressed [ 1398.207613][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9603'. [ 1398.236277][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9603'. [ 1399.130183][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9605'. [ 1399.167482][T10399] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9605'. [ 1399.301141][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9605'. [ 1399.450769][T10410] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9608'. [ 1400.381929][T10429] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9613'. [ 1400.515762][T10434] syzkaller0: entered promiscuous mode [ 1400.537426][T10434] syzkaller0: entered allmulticast mode [ 1400.721671][T10437] tipc: Enabling of bearer rejected, already enabled [ 1400.945158][T10441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1400.977714][T10441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1401.008533][T10441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1401.045356][T10446] tipc: Enabled bearer , priority 0 [ 1401.051441][T10441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1401.063180][T10446] syzkaller0: entered promiscuous mode [ 1401.065510][T10441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1401.070960][T10446] syzkaller0: entered allmulticast mode [ 1401.082368][T10441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1401.102475][T10441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1401.114806][T10441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1401.161622][T10441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1401.173967][T10441] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1401.240974][T10446] tipc: Resetting bearer [ 1401.384449][T10446] tipc: Disabling bearer [ 1401.401658][ T30] audit: type=1800 audit(1764415859.682:33): pid=10454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9621" name="memory.events" dev="tmpfs" ino=1257 res=0 errno=0 [ 1401.401965][T10457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9621'. [ 1401.484610][T10459] xt_policy: output policy not valid in PREROUTING and INPUT [ 1401.497735][ T547] IPVS: stop unused estimator thread 0... [ 1401.544102][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9624'. [ 1402.276755][T10495] dvmrp0: entered allmulticast mode [ 1402.645502][T10505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1402.702380][T10506] netlink: 'syz.7.9638': attribute type 11 has an invalid length. [ 1402.737711][T10506] netlink: 'syz.7.9638': attribute type 11 has an invalid length. [ 1402.758647][T10509] bridge0: port 1(netdevsim2) entered blocking state [ 1402.759860][T10506] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9638'. [ 1402.765743][T10509] bridge0: port 1(netdevsim2) entered disabled state [ 1402.813790][T10509] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 1402.863924][T10509] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 1402.907970][T10515] syzkaller1: entered promiscuous mode [ 1402.952494][T10515] syzkaller1: entered allmulticast mode [ 1402.991065][T10517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1403.822223][T10549] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1403.997680][ T6202] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1404.065734][T10555] sctp: [Deprecated]: syz.7.9650 (pid 10555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1404.065734][T10555] Use struct sctp_sack_info instead [ 1404.125297][T10555] x_tables: duplicate underflow at hook 1 [ 1404.196485][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9651'. [ 1404.259043][T10553] syzkaller0: entered promiscuous mode [ 1404.276604][T10553] syzkaller0: entered allmulticast mode [ 1404.318504][T10557] ipt_REJECT: ECHOREPLY no longer supported. [ 1404.761897][T10584] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9652'. [ 1407.429180][T10587] geneve3: entered promiscuous mode [ 1407.440978][T10588] syz.2.9656: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1407.514909][T10588] CPU: 0 UID: 0 PID: 10588 Comm: syz.2.9656 Not tainted syzkaller #0 PREEMPT(full) [ 1407.514944][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1407.514960][T10588] Call Trace: [ 1407.514969][T10588] [ 1407.514981][T10588] dump_stack_lvl+0x189/0x250 [ 1407.515023][T10588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1407.515056][T10588] ? __pfx__printk+0x10/0x10 [ 1407.515082][T10588] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1407.515124][T10588] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1407.515158][T10588] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1407.515194][T10588] warn_alloc+0x214/0x310 [ 1407.515236][T10588] ? __pfx_warn_alloc+0x10/0x10 [ 1407.515282][T10588] ? __get_vm_area_node+0x28f/0x300 [ 1407.515316][T10588] ? fq_pie_init+0x435/0x840 [ 1407.515344][T10588] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1407.515380][T10588] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 1407.515435][T10588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1407.515469][T10588] ? fq_pie_init+0x435/0x840 [ 1407.515495][T10588] ? rcu_is_watching+0x15/0xb0 [ 1407.515523][T10588] ? fq_pie_init+0x435/0x840 [ 1407.515545][T10588] __kvmalloc_node_noprof+0x674/0x910 [ 1407.515582][T10588] ? fq_pie_init+0x435/0x840 [ 1407.515607][T10588] ? tcf_block_get+0x67/0xa0 [ 1407.515630][T10588] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1407.515672][T10588] fq_pie_init+0x435/0x840 [ 1407.515700][T10588] ? __pfx_fq_pie_init+0x10/0x10 [ 1407.515723][T10588] qdisc_create+0x7ac/0xea0 [ 1407.515756][T10588] tc_modify_qdisc+0x1547/0x2020 [ 1407.515808][T10588] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1407.515881][T10588] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1407.515916][T10588] rtnetlink_rcv_msg+0x77c/0xb70 [ 1407.515941][T10588] ? __lock_acquire+0xab9/0xd20 [ 1407.515966][T10588] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1407.515989][T10588] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1407.516033][T10588] netlink_rcv_skb+0x208/0x470 [ 1407.516060][T10588] ? __lock_acquire+0xab9/0xd20 [ 1407.516080][T10588] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1407.516108][T10588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1407.516150][T10588] ? netlink_deliver_tap+0x2e/0x1b0 [ 1407.516187][T10588] netlink_unicast+0x82f/0x9e0 [ 1407.516222][T10588] ? __pfx_netlink_unicast+0x10/0x10 [ 1407.516250][T10588] ? netlink_sendmsg+0x642/0xb30 [ 1407.516277][T10588] ? skb_put+0x11b/0x210 [ 1407.516308][T10588] netlink_sendmsg+0x805/0xb30 [ 1407.516346][T10588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1407.516379][T10588] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1407.516417][T10588] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1407.516439][T10588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1407.516471][T10588] __sock_sendmsg+0x21c/0x270 [ 1407.516510][T10588] ____sys_sendmsg+0x505/0x830 [ 1407.516547][T10588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1407.516587][T10588] ? import_iovec+0x74/0xa0 [ 1407.516622][T10588] ___sys_sendmsg+0x21f/0x2a0 [ 1407.516665][T10588] ? __pfx____sys_sendmsg+0x10/0x10 [ 1407.516737][T10588] ? __fget_files+0x2a/0x420 [ 1407.516759][T10588] ? __fget_files+0x3a0/0x420 [ 1407.516792][T10588] __x64_sys_sendmsg+0x19b/0x260 [ 1407.516826][T10588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1407.516874][T10588] ? do_syscall_64+0xbe/0xfa0 [ 1407.516906][T10588] do_syscall_64+0xfa/0xfa0 [ 1407.516930][T10588] ? lockdep_hardirqs_on+0x9c/0x150 [ 1407.516954][T10588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.516975][T10588] ? clear_bhb_loop+0x60/0xb0 [ 1407.517001][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.517024][T10588] RIP: 0033:0x7f317bd8f749 [ 1407.517045][T10588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1407.517067][T10588] RSP: 002b:00007f317cc6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1407.517092][T10588] RAX: ffffffffffffffda RBX: 00007f317bfe6090 RCX: 00007f317bd8f749 [ 1407.517108][T10588] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 000000000000000d [ 1407.517123][T10588] RBP: 00007f317be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1407.517138][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1407.517150][T10588] R13: 00007f317bfe6128 R14: 00007f317bfe6090 R15: 00007ffd3d841d58 [ 1407.517189][T10588] [ 1407.958962][T10604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1407.969126][T10588] Mem-Info: [ 1407.972294][T10588] active_anon:13036 inactive_anon:0 isolated_anon:0 [ 1407.972294][T10588] active_file:3878 inactive_file:40422 isolated_file:0 [ 1407.972294][T10588] unevictable:768 dirty:152 writeback:0 [ 1407.972294][T10588] slab_reclaimable:14219 slab_unreclaimable:157830 [ 1407.972294][T10588] mapped:44997 shmem:1485 pagetables:1416 [ 1407.972294][T10588] sec_pagetables:0 bounce:0 [ 1407.972294][T10588] kernel_misc_reclaimable:0 [ 1407.972294][T10588] free:1212736 free_pcp:15167 free_cma:0 [ 1408.032791][T10588] Node 0 active_anon:52144kB inactive_anon:0kB active_file:15512kB inactive_file:161484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:179988kB dirty:608kB writeback:0kB shmem:4404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16840kB pagetables:5544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1408.090101][T10588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1408.123795][T10588] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1408.156974][T10588] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 1408.162903][T10588] Node 0 DMA32 free:922244kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52144kB inactive_anon:0kB active_file:15512kB inactive_file:161484kB unevictable:1536kB writepending:608kB zspages:0kB present:3129332kB managed:2565032kB mlocked:0kB bounce:0kB free_pcp:47132kB local_pcp:25720kB free_cma:0kB [ 1408.198752][T10588] lowmem_reserve[]: 0 0 0 0 0 [ 1408.203631][T10588] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1408.233795][T10588] lowmem_reserve[]: 0 0 0 0 0 [ 1408.239598][T10588] Node 1 Normal free:3903260kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13728kB local_pcp:4608kB free_cma:0kB [ 1408.272754][T10588] lowmem_reserve[]: 0 0 0 0 0 [ 1408.277681][T10588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1408.291967][T10588] Node 0 DMA32: 2857*4kB (UME) 800*8kB (UME) 450*16kB (UME) 831*32kB (UME) 196*64kB (UME) 102*128kB (UME) 542*256kB (UM) 413*512kB (UM) 207*1024kB (UME) 10*2048kB (UM) 64*4096kB (UM) = 922020kB [ 1408.312971][T10588] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1408.324975][T10588] Node 1 Normal: 135*4kB (U) 38*8kB (UME) 31*16kB (UME) 167*32kB (UME) 46*64kB (UME) 9*128kB (UME) 3*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3903260kB [ 1408.343884][T10588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.353771][T10588] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1408.364054][T10588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.374256][T10588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1408.383965][T10588] 45782 total pagecache pages [ 1408.389599][T10588] 0 pages in swap cache [ 1408.393897][T10588] Free swap = 124996kB [ 1408.399519][T10588] Total swap = 124996kB [ 1408.403855][T10588] 2097051 pages RAM [ 1408.407904][T10588] 0 pages HighMem/MovableOnly [ 1408.425328][T10588] 424151 pages reserved [ 1408.440246][T10588] 0 pages cma reserved [ 1408.445362][T10613] netlink: 'syz.7.9665': attribute type 3 has an invalid length. [ 1408.469592][T10601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1408.491150][ T507] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1408.511072][ T507] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1408.523389][T10618] sctp: [Deprecated]: syz.8.9667 (pid 10618) Use of int in max_burst socket option. [ 1408.523389][T10618] Use struct sctp_assoc_value instead [ 1408.615986][ T507] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1408.709038][ T507] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1408.989808][T10631] x9: renamed from bridge_slave_0 (while UP) [ 1409.085414][T10638] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1409.240360][T10645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1409.570095][T10660] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9678'. [ 1409.818222][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9681'. [ 1409.852083][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9682'. [ 1409.902219][T10668] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9682'. [ 1410.155780][T10681] syzkaller0: entered promiscuous mode [ 1410.177810][T10681] syzkaller0: entered allmulticast mode [ 1410.501440][T10690] xt_policy: neither incoming nor outgoing policy selected [ 1410.587354][T10691] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9690'. [ 1410.776020][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9693'. [ 1411.283838][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9700'. [ 1411.313199][T10722] netlink: 'syz.8.9701': attribute type 3 has an invalid length. [ 1411.332281][T10722] netlink: 'syz.8.9701': attribute type 3 has an invalid length. [ 1411.353362][T10721] 8021q: VLANs not supported on gre0 [ 1411.491311][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9704'. [ 1411.509952][T10725] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9704'. [ 1411.531966][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9705'. [ 1411.618007][T10730] macsec1: entered promiscuous mode [ 1411.623307][T10730] gretap0: entered promiscuous mode [ 1411.656119][T10730] macsec1: entered allmulticast mode [ 1411.673364][T10730] gretap0: entered allmulticast mode [ 1411.704415][T10730] gretap0: left allmulticast mode [ 1411.737470][T10730] gretap0: left promiscuous mode [ 1412.834899][T10803] sctp: [Deprecated]: syz.3.9725 (pid 10803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1412.834899][T10803] Use struct sctp_sack_info instead [ 1412.854146][T10803] netlink: 'syz.3.9725': attribute type 3 has an invalid length. [ 1412.894847][T10803] netlink: 'syz.3.9725': attribute type 2 has an invalid length. [ 1412.915990][T10803] netlink: 'syz.3.9725': attribute type 9 has an invalid length. [ 1414.580351][T10875] __nla_validate_parse: 8 callbacks suppressed [ 1414.580373][T10875] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9741'. [ 1414.702536][T10875] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9741'. [ 1414.975452][T10886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1415.594154][T10899] syzkaller0: entered promiscuous mode [ 1415.601725][T10899] syzkaller0: entered allmulticast mode [ 1415.609289][T10900] netlink: 'syz.6.9748': attribute type 3 has an invalid length. [ 1415.621928][T10900] netlink: 'syz.6.9748': attribute type 3 has an invalid length. [ 1415.748975][T10912] netlink: 'syz.8.9750': attribute type 21 has an invalid length. [ 1418.145348][T10927] netlink: 'syz.7.9754': attribute type 10 has an invalid length. [ 1418.154224][T10927] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9754'. [ 1419.832599][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9750'. [ 1419.849035][T10914] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1419.913362][T10927] team0: Port device geneve0 added [ 1420.034670][ T7242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.045174][ T7242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.075653][ T7242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.116396][ T7242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.217748][T10943] netlink: 'syz.3.9756': attribute type 12 has an invalid length. [ 1420.743524][ T30] audit: type=1107 audit(1764415879.022:34): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''خ k$m 9zQ7,OKRExIEz|q N,vL' [ 1420.769724][T10958] sctp: [Deprecated]: syz.6.9762 (pid 10958) Use of int in maxseg socket option. [ 1420.769724][T10958] Use struct sctp_assoc_value instead [ 1420.892421][T10965] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9764'. [ 1421.011042][T10965] netlink: 148 bytes leftover after parsing attributes in process `syz.6.9764'. [ 1421.025257][T10965] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1421.060374][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9766'. [ 1421.080215][T10970] macvtap1: entered promiscuous mode [ 1421.086370][T10970] mac80211_hwsim hwsim101 wlan1: entered promiscuous mode [ 1421.190037][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9766'. [ 1421.581245][T10983] netlink: 'syz.3.9772': attribute type 6 has an invalid length. [ 1421.612688][T10986] Cannot find add_set index 2 as target [ 1421.721986][T10994] netlink: 'syz.2.9771': attribute type 30 has an invalid length. [ 1422.139150][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9777'. [ 1422.562533][T11037] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9781'. [ 1423.014235][T11055] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9782'. [ 1423.046635][T11057] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9786'. [ 1423.466462][T11063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9788'. [ 1423.828465][T11080] netlink: 'syz.7.9791': attribute type 13 has an invalid length. [ 1423.869979][T11080] netlink: 'syz.7.9791': attribute type 17 has an invalid length. [ 1423.998424][ T5843] Bluetooth: hci7: command 0x0405 tx timeout [ 1424.907135][T11104] xt_CT: No such helper "pptp" [ 1425.091349][T11112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1425.111346][T11083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.131991][T11083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.165772][T11083] bond0 (unregistering): Released all slaves [ 1425.264072][T11080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1425.508201][T11120] netlink: 'syz.3.9801': attribute type 1 has an invalid length. [ 1425.725430][T11120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1425.804313][T11124] bond3: entered allmulticast mode [ 1426.439686][T11137] __nla_validate_parse: 1 callbacks suppressed [ 1426.439707][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9804'. [ 1426.937660][T11143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9806'. [ 1427.130917][T11153] netlink: 'syz.7.9808': attribute type 22 has an invalid length. [ 1427.169766][T11153] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9808'. [ 1427.234629][T11156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1427.575318][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9811'. [ 1427.920339][T11171] netlink: 'syz.3.9813': attribute type 13 has an invalid length. [ 1428.279328][T11178] netlink: 'syz.8.9816': attribute type 3 has an invalid length. [ 1428.307860][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9816'. [ 1428.397013][T11182] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9814'. [ 1428.406353][T11182] nbd: couldn't find a device at index 0 [ 1428.420059][T11182] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9814'. [ 1428.496611][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9814'. [ 1428.935189][T11199] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9818'. [ 1428.949014][T11199] netlink: 'syz.7.9818': attribute type 7 has an invalid length. [ 1429.008524][T11199] netlink: 'syz.7.9818': attribute type 8 has an invalid length. [ 1429.073671][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9818'. [ 1429.115559][T11199] team0: entered promiscuous mode [ 1429.146910][T11199] team_slave_0: entered promiscuous mode [ 1429.152880][T11199] team_slave_1: entered promiscuous mode [ 1429.185535][T11199] geneve0: entered promiscuous mode [ 1429.202605][T11199] team0: left promiscuous mode [ 1429.229701][T11199] team_slave_0: left promiscuous mode [ 1429.243392][T11199] team_slave_1: left promiscuous mode [ 1429.257971][T11199] geneve0: left promiscuous mode [ 1430.318702][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 1430.610844][T11243] netlink: 'syz.3.9827': attribute type 3 has an invalid length. [ 1430.709324][T11243] geneve4: entered promiscuous mode [ 1431.767994][T11251] netlink: 'syz.6.9829': attribute type 5 has an invalid length. [ 1433.286515][T11244] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1433.300700][T11244] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1433.352175][T11245] bond4: option xmit_hash_policy: invalid value (10) [ 1433.363817][T11245] bond4 (unregistering): Released all slaves [ 1433.403564][T11262] tipc: Enabling of bearer rejected, failed to enable media [ 1433.479306][T11262] __nla_validate_parse: 3 callbacks suppressed [ 1433.479330][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9832'. [ 1433.513062][T11244] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1433.567495][T11244] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1433.600773][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9833'. [ 1433.710919][T11244] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1433.721748][T11273] openvswitch: netlink: Actions may not be safe on all matching packets [ 1433.734051][T11273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9835'. [ 1433.782231][T11244] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1434.003374][T11244] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1434.014636][T11244] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1434.369719][ T6291] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.391469][ T6291] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1434.443309][ T6291] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.452901][ T6291] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1434.516780][ T6291] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.525235][ T6291] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1434.604990][T11300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9844'. [ 1434.622796][ T6291] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.632272][ T6291] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1434.645406][T11300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9844'. [ 1434.678064][T11300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9844'. [ 1434.718620][ T6291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.745660][ T6291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.808212][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9845'. [ 1434.832869][T11306] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9845'. [ 1434.857496][T11305] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9845'. [ 1434.886027][T11308] netlink: 'syz.3.9846': attribute type 4 has an invalid length. [ 1435.022331][T11314] netlink: 'syz.2.9847': attribute type 11 has an invalid length. [ 1435.082623][T11316] netlink: 'syz.7.9848': attribute type 2 has an invalid length. [ 1435.126319][T11316] !: entered promiscuous mode [ 1435.916186][T11333] netlink: 'syz.6.9852': attribute type 29 has an invalid length. [ 1436.095739][T11372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1436.450624][T11338] dummy0: left allmulticast mode [ 1436.585396][T11373] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1436.621182][T11382] lo: Caught tx_queue_len zero misconfig [ 1436.658782][ T546] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.689285][ T546] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.704579][T11394] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9863'. [ 1436.743908][ T546] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.936011][ T546] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.498052][T11425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1438.341548][T11462] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.632053][T11478] __nla_validate_parse: 4 callbacks suppressed [ 1438.632076][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9885'. [ 1438.779013][T11462] netdevsim netdevsim7 netdevsim2 (unregistering): left allmulticast mode [ 1438.797580][T11462] netdevsim netdevsim7 netdevsim2 (unregistering): left promiscuous mode [ 1438.815250][T11462] bridge0: port 1(netdevsim2) entered disabled state [ 1438.869368][T11462] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.057747][T11462] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.104825][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9889'. [ 1439.116482][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9889'. [ 1439.216031][T11462] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.449925][ T534] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.501125][ T534] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.543691][ T546] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.570342][T11501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9892'. [ 1439.574742][ T546] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.032067][T11517] syzkaller0: entered promiscuous mode [ 1440.053684][T11525] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1440.057418][T11517] syzkaller0: entered allmulticast mode [ 1440.091011][T11527] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1440.214144][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9901'. [ 1443.307922][T11556] netlink: 'syz.8.9908': attribute type 4 has an invalid length. [ 1443.320144][T11563] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9908'. [ 1443.881428][T11594] veth1_to_batadv: entered promiscuous mode [ 1443.930686][T11601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9919'. [ 1444.030489][T11607] netlink: 732 bytes leftover after parsing attributes in process `syz.7.9923'. [ 1444.049722][T11607] netlink: 732 bytes leftover after parsing attributes in process `syz.7.9923'. [ 1444.248526][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9927'. [ 1444.328011][ T7242] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 1445.342106][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9933'. [ 1445.383337][T11652] bridge_slave_0: left allmulticast mode [ 1445.399153][T11652] bridge_slave_0: left promiscuous mode [ 1445.415824][T11652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.595888][T11652] bridge_slave_1: left allmulticast mode [ 1445.618266][T11660] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9936'. [ 1445.623427][T11652] bridge_slave_1: left promiscuous mode [ 1445.680350][T11652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.788792][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9939'. [ 1445.860831][T11652] bond0: (slave bond_slave_0): Releasing backup interface [ 1445.891400][T11652] bond0: (slave bond_slave_1): Releasing backup interface [ 1445.931928][T11652] team0: Port device team_slave_0 removed [ 1445.963234][T11652] team0: Port device team_slave_1 removed [ 1445.971332][T11652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.980513][T11652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.990355][T11652] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1446.017903][T11672] netlink: 112 bytes leftover after parsing attributes in process `syz.7.9941'. [ 1446.298728][T11683] netlink: 'syz.3.9942': attribute type 20 has an invalid length. [ 1446.755918][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9947'. [ 1446.765562][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9947'. [ 1446.845906][T11712] netlink: 'syz.6.9949': attribute type 12 has an invalid length. [ 1447.011461][T11714] netlink: 'syz.7.9950': attribute type 10 has an invalid length. [ 1447.045311][T11714] team0: Port device dummy0 added [ 1447.098462][T11714] netlink: 'syz.7.9950': attribute type 10 has an invalid length. [ 1447.112186][T11714] team0: Port device dummy0 removed [ 1447.132765][T11714] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1447.392666][T11719] bond4: option arp_validate: invalid value (18446744073491447809) [ 1447.440905][T11719] bond4 (unregistering): Released all slaves [ 1447.543346][T11727] dvmrp0: entered allmulticast mode [ 1447.589960][T11727] xt_hashlimit: max too large, truncated to 1048576 [ 1447.699810][T11732] mac80211_hwsim hwsim126 wlan1: entered allmulticast mode [ 1447.955914][T11742] tap0: tun_chr_ioctl cmd 1074025677 [ 1447.973023][T11742] tap0: linktype set to 825 [ 1449.094020][T11779] syzkaller0: entered promiscuous mode [ 1449.115526][T11779] syzkaller0: entered allmulticast mode [ 1449.549765][ T507] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.598910][ T507] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.617859][ T507] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.626554][T11790] netlink: 'syz.7.9970': attribute type 2 has an invalid length. [ 1449.640439][ T507] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.978907][T11802] netlink: 'syz.7.9973': attribute type 1 has an invalid length. [ 1450.009006][T11802] __nla_validate_parse: 13 callbacks suppressed [ 1450.009030][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9973'. [ 1450.071038][T11802] netlink: 364 bytes leftover after parsing attributes in process `syz.7.9973'. [ 1450.121523][T11806] --map-set only usable from mangle table [ 1450.129789][T11802] netlink: 88 bytes leftover after parsing attributes in process `syz.7.9973'. [ 1450.202165][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9973'. [ 1450.401788][T11819] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9977'. [ 1450.621783][T11819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1450.631670][T11820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1451.395557][T11865] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9985'. [ 1451.487378][T11867] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9985'. [ 1451.582617][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9985'. [ 1451.627832][T11871] netlink: 'syz.3.9986': attribute type 30 has an invalid length. [ 1452.031849][T11873] syzkaller0: entered promiscuous mode [ 1452.038260][T11873] syzkaller0: entered allmulticast mode [ 1452.325070][T11889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9991'. [ 1452.450014][T11889] nbd: socks must be embedded in a SOCK_ITEM attr [ 1453.011859][T11904] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1455.295261][T11908] netlink: 'syz.8.9994': attribute type 1 has an invalid length. [ 1455.366235][T11908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.465975][T11913] bond0: (slave geneve3): making interface the new active one [ 1455.477499][T11913] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 1455.928679][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 1456.300807][ T30] audit: type=1800 audit(1764415914.572:35): pid=11924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9995" name="memory.events" dev="tmpfs" ino=878 res=0 errno=0 [ 1456.682191][ T534] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.694531][ T534] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.716505][ T534] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.749737][ T534] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.956180][T11974] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10006'. [ 1456.971943][T11974] netlink: 'syz.2.10006': attribute type 1 has an invalid length. [ 1456.981551][T11974] netlink: 'syz.2.10006': attribute type 1 has an invalid length. [ 1456.991955][T11974] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.10006'. [ 1457.003146][T11970] netdevsim0: mtu less than device minimum [ 1457.012142][T11977] xt_NFQUEUE: number of total queues is 0 [ 1457.281671][T11988] !: renamed from dummy0 [ 1457.594970][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10014'. [ 1457.763635][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10018'. [ 1457.829065][T12017] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10018'. [ 1458.173525][T12040] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10023'. [ 1458.453852][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10025'. [ 1458.987449][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10032'. [ 1458.996552][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10032'. [ 1459.024252][T12071] netlink: 'syz.6.10032': attribute type 18 has an invalid length. [ 1459.469845][T12091] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1459.708413][T12099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1459.953975][T12111] netlink: 144 bytes leftover after parsing attributes in process `syz.8.10043'. [ 1460.534078][T12145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1460.954728][T12157] wireguard0: entered promiscuous mode [ 1460.976220][T12157] wireguard0: entered allmulticast mode [ 1461.037967][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 1461.270618][T12169] dvmrp12: entered allmulticast mode [ 1461.286244][T12168] dvmrp12: left allmulticast mode [ 1461.508655][T12183] netlink: 'syz.6.10063': attribute type 1 has an invalid length. [ 1461.599218][T12186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1462.102845][T12213] __nla_validate_parse: 67 callbacks suppressed [ 1462.102868][T12213] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10069'. [ 1464.315155][T12183] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1464.517095][T12221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10073'. [ 1464.556097][T12220] netlink: 'syz.3.10072': attribute type 4 has an invalid length. [ 1464.610822][T12220] netlink: 'syz.3.10072': attribute type 4 has an invalid length. [ 1464.661870][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10073'. [ 1464.691975][T12220] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1464.821049][T12229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1464.911280][T12230] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.10076'. [ 1464.998335][T12234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1465.031862][T12237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10079'. [ 1465.130880][T12245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1465.333040][T12259] sctp: [Deprecated]: syz.3.10086 (pid 12259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1465.333040][T12259] Use struct sctp_sack_info instead [ 1465.376093][T12263] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1465.652241][T12277] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10090'. [ 1465.662180][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10090'. [ 1465.841511][T12282] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10092'. [ 1465.853426][T12282] syzkaller0: entered promiscuous mode [ 1465.859087][T12282] syzkaller0: entered allmulticast mode [ 1465.872011][T12282] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10092'. [ 1466.196480][T12293] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10094'. [ 1466.309618][T12297] tipc: Started in network mode [ 1466.315232][T12297] tipc: Node identity d235245a7dd, cluster identity 4711 [ 1466.323838][T12297] tipc: Enabled bearer , priority 0 [ 1466.352766][T12297] syzkaller0: entered promiscuous mode [ 1466.361519][T12297] syzkaller0: entered allmulticast mode [ 1466.409357][T12297] tipc: Resetting bearer [ 1466.536398][T12307] syzkaller1: entered promiscuous mode [ 1466.543921][T12307] syzkaller1: entered allmulticast mode [ 1466.663768][T12314] netlink: 'syz.8.10101': attribute type 8 has an invalid length. [ 1467.406942][T11843] tipc: Node number set to 2951029850 [ 1468.712766][T12367] tipc: Enabled bearer , priority 0 [ 1468.860981][T12367] syzkaller0: entered promiscuous mode [ 1468.883790][T12367] syzkaller0: entered allmulticast mode [ 1468.894585][T12367] tipc: Resetting bearer [ 1468.942050][T12366] tipc: Resetting bearer [ 1468.975567][T12376] __nla_validate_parse: 4 callbacks suppressed [ 1468.975590][T12376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10122'. [ 1472.001462][T12366] tipc: Disabling bearer [ 1472.018438][T12382] netlink: 'syz.6.10123': attribute type 15 has an invalid length. [ 1472.032364][T12387] pimreg: entered allmulticast mode [ 1472.038129][T12387] pimreg: left allmulticast mode [ 1472.084613][T11843] tipc: Node number set to 2954016643 [ 1472.094484][T12400] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1472.315210][T12417] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10132'. [ 1472.509856][T12422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1472.659439][T12430] tipc: Enabling of bearer rejected, already enabled [ 1472.909285][T12428] netlink: 'syz.6.10137': attribute type 6 has an invalid length. [ 1472.995975][T12449] : option downdelay: invalid value (18446744073709547007) [ 1473.027709][T12449] : option downdelay: allowed values 0 - 2147483647 [ 1473.063041][T12449] (unregistering): Released all slaves [ 1473.289578][T12461] netlink: 'syz.7.10144': attribute type 21 has an invalid length. [ 1473.351929][T12462] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1473.361901][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10144'. [ 1473.404916][T12458] bond1: (slave ip6gretap1): making interface the new active one [ 1473.419116][T12458] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1474.328973][ T31] INFO: task syz.4.9235:8813 blocked for more than 143 seconds. [ 1474.337503][ T31] Not tainted syzkaller #0 [ 1474.349336][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1474.367843][ T31] task:syz.4.9235 state:D stack:25896 pid:8813 tgid:8811 ppid:2184 task_flags:0x400140 flags:0x00080002 [ 1474.380948][ T31] Call Trace: [ 1474.384468][ T31] [ 1474.387865][ T31] __schedule+0x1798/0x4cc0 [ 1474.392652][ T31] ? __lock_acquire+0xab9/0xd20 [ 1474.400534][ T31] ? __lock_acquire+0xab9/0xd20 [ 1474.407865][ T31] ? __pfx___schedule+0x10/0x10 [ 1474.415744][ T31] ? schedule+0x91/0x360 [ 1474.424087][ T31] schedule+0x165/0x360 [ 1474.432090][ T31] schedule_preempt_disabled+0x13/0x30 [ 1474.438364][ T31] __mutex_lock+0x7e6/0x1350 [ 1474.443186][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1474.448409][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 1474.454506][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1474.460279][ T31] ? __asan_memset+0x22/0x50 [ 1474.465074][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 1474.470530][ T31] ? do_syscall_64+0xfa/0xfa0 [ 1474.475684][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.483375][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 1474.489693][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1474.495511][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1474.502096][ T31] ? rcu_is_watching+0x15/0xb0 [ 1474.507310][ T31] ? __nla_parse+0x40/0x60 [ 1474.511833][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1474.518565][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 1474.524194][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1474.530667][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1474.535811][ T31] ? security_capable+0x7e/0x2e0 [ 1474.543005][ T31] genl_rcv_msg+0x60e/0x790 [ 1474.549218][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1474.554870][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1474.566810][ T31] ? __asan_memcpy+0x40/0x70 [ 1474.571594][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1474.579233][ T31] netlink_rcv_skb+0x208/0x470 [ 1474.584263][ T31] ? __lock_acquire+0xab9/0xd20 [ 1474.590228][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1474.595447][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1474.601365][ T31] ? down_read+0x1ad/0x2e0 [ 1474.623773][ T31] genl_rcv+0x28/0x40 [ 1474.634605][ T31] netlink_unicast+0x82f/0x9e0 [ 1474.648618][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1474.659612][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1474.664858][ T31] ? skb_put+0x11b/0x210 [ 1474.670969][ T31] netlink_sendmsg+0x805/0xb30 [ 1474.676065][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1474.682985][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1474.688932][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1474.694582][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1474.702063][ T31] __sock_sendmsg+0x21c/0x270 [ 1474.707214][ T31] ____sys_sendmsg+0x505/0x830 [ 1474.712295][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1474.721716][ T31] ? import_iovec+0x74/0xa0 [ 1474.726496][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1474.731473][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1474.737128][ T31] ? __fget_files+0x2a/0x420 [ 1474.741854][ T31] ? __fget_files+0x3a0/0x420 [ 1474.747754][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1474.752776][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1474.758548][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1474.763378][ T31] do_syscall_64+0xfa/0xfa0 [ 1474.768808][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1474.774068][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.781131][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1474.785978][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.792422][ T31] RIP: 0033:0x7f48f178f749 [ 1474.798003][ T31] RSP: 002b:00007f48f2667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1474.807190][ T31] RAX: ffffffffffffffda RBX: 00007f48f19e5fa0 RCX: 00007f48f178f749 [ 1474.815216][ T31] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1474.823856][ T31] RBP: 00007f48f1813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1474.832051][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1474.840612][ T31] R13: 00007f48f19e6038 R14: 00007f48f19e5fa0 R15: 00007ffed5061568 [ 1474.849493][ T31] [ 1474.872986][ T31] INFO: task syz.5.9237:8827 blocked for more than 143 seconds. [ 1474.887901][ T31] Not tainted syzkaller #0 [ 1474.919165][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1474.937461][ T31] task:syz.5.9237 state:D stack:25768 pid:8827 tgid:8824 ppid:7527 task_flags:0x400140 flags:0x00080002 [ 1474.964334][ T31] Call Trace: [ 1474.976883][ T31] [ 1474.979899][ T31] __schedule+0x1798/0x4cc0 [ 1474.988858][ T31] ? __lock_acquire+0xab9/0xd20 [ 1474.993805][ T31] ? __lock_acquire+0xab9/0xd20 [ 1475.005004][ T31] ? __pfx___schedule+0x10/0x10 [ 1475.010230][ T31] ? schedule+0x91/0x360 [ 1475.014538][ T31] schedule+0x165/0x360 [ 1475.019293][ T31] schedule_preempt_disabled+0x13/0x30 [ 1475.024946][ T31] __mutex_lock+0x7e6/0x1350 [ 1475.029785][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1475.034709][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 1475.041200][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1475.046309][ T31] ? __asan_memset+0x22/0x50 [ 1475.052096][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 1475.057601][ T31] ? do_syscall_64+0xfa/0xfa0 [ 1475.062377][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.068861][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 1475.074664][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1475.080750][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1475.087175][ T31] ? rcu_is_watching+0x15/0xb0 [ 1475.092006][ T31] ? __nla_parse+0x40/0x60 [ 1475.096485][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1475.103729][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 1475.110186][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1475.116333][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1475.121241][ T31] ? security_capable+0x7e/0x2e0 [ 1475.126255][ T31] genl_rcv_msg+0x60e/0x790 [ 1475.130938][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1475.136100][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1475.142886][ T31] netlink_rcv_skb+0x208/0x470 [ 1475.147944][ T31] ? __lock_acquire+0xab9/0xd20 [ 1475.153404][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1475.158537][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1475.164001][ T31] ? down_read+0x1ad/0x2e0 [ 1475.168853][ T31] genl_rcv+0x28/0x40 [ 1475.172879][ T31] netlink_unicast+0x82f/0x9e0 [ 1475.178086][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1475.183584][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1475.188792][ T31] ? skb_put+0x11b/0x210 [ 1475.193080][ T31] netlink_sendmsg+0x805/0xb30 [ 1475.198863][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.204300][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1475.209494][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1475.214909][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.220345][ T31] __sock_sendmsg+0x21c/0x270 [ 1475.225169][ T31] ____sys_sendmsg+0x505/0x830 [ 1475.230358][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1475.235740][ T31] ? import_iovec+0x74/0xa0 [ 1475.240387][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1475.245344][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1475.250726][ T31] ? __fget_files+0x2a/0x420 [ 1475.255861][ T31] ? __fget_files+0x3a0/0x420 [ 1475.261093][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1475.266080][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1475.271692][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1475.276584][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1475.281360][ T31] do_syscall_64+0xfa/0xfa0 [ 1475.285886][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1475.292004][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.298247][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1475.302955][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.309076][ T31] RIP: 0033:0x7f983ed8f749 [ 1475.313667][ T31] RSP: 002b:00007f983fb70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1475.322491][ T31] RAX: ffffffffffffffda RBX: 00007f983efe5fa0 RCX: 00007f983ed8f749 [ 1475.330603][ T31] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1475.338679][ T31] RBP: 00007f983fb70090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.347192][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.355252][ T31] R13: 00007f983efe6038 R14: 00007f983efe5fa0 R15: 00007fff1ae7f3e8 [ 1475.363818][ T31] [ 1475.367396][ T31] [ 1475.367396][ T31] Showing all locks held in the system: [ 1475.375147][ T31] 1 lock held by khungtaskd/31: [ 1475.380425][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1475.390566][ T31] 2 locks held by getty/5587: [ 1475.395261][ T31] #0: ffff888033de60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1475.405277][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1475.415810][ T31] 4 locks held by kworker/u8:25/534: [ 1475.421294][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1475.432558][ T31] #1: ffffc9000e01fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1475.444567][ T31] #2: ffffffff8f2c0990 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1475.454575][ T31] #3: ffffffff8df43040 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1475.466227][ T31] 4 locks held by kworker/u8:43/6291: [ 1475.472423][ T31] #0: ffff8880b883a218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1475.483059][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1475.492503][ T31] #2: ffff888034038788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1475.503116][ T31] #3: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xc3/0x330 [ 1475.514073][ T31] 2 locks held by syz.0.9222/8748: [ 1475.519985][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1475.528897][ T31] #1: ffffffff8e227168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 1475.539876][ T31] 2 locks held by syz.4.9235/8813: [ 1475.545034][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1475.553946][ T31] #1: ffffffff8e227168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 1475.565607][ T31] 2 locks held by syz.5.9237/8827: [ 1475.571434][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1475.580446][ T31] #1: ffffffff8e227168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 1475.591255][ T31] [ 1475.593624][ T31] ============================================= [ 1475.593624][ T31] [ 1475.606140][ T31] NMI backtrace for cpu 0 [ 1475.606166][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1475.606192][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1475.606206][ T31] Call Trace: [ 1475.606215][ T31] [ 1475.606226][ T31] dump_stack_lvl+0x189/0x250 [ 1475.606265][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1475.606297][ T31] ? __pfx__printk+0x10/0x10 [ 1475.606335][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1475.606372][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1475.606417][ T31] ? __pfx__printk+0x10/0x10 [ 1475.606446][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1475.606484][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1475.606521][ T31] watchdog+0xf60/0xfa0 [ 1475.606548][ T31] ? watchdog+0x1e2/0xfa0 [ 1475.606577][ T31] kthread+0x711/0x8a0 [ 1475.606612][ T31] ? __pfx_watchdog+0x10/0x10 [ 1475.606632][ T31] ? __pfx_kthread+0x10/0x10 [ 1475.606669][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1475.606692][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1475.606714][ T31] ? __pfx_kthread+0x10/0x10 [ 1475.606745][ T31] ret_from_fork+0x4bc/0x870 [ 1475.606771][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1475.606801][ T31] ? __switch_to_asm+0x39/0x70 [ 1475.606819][ T31] ? __switch_to_asm+0x33/0x70 [ 1475.606836][ T31] ? __pfx_kthread+0x10/0x10 [ 1475.606867][ T31] ret_from_fork_asm+0x1a/0x30 [ 1475.606906][ T31] [ 1475.749333][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1475.755186][ C1] NMI backtrace for cpu 1 [ 1475.755220][ C1] CPU: 1 UID: 0 PID: 546 Comm: kworker/u8:34 Not tainted syzkaller #0 PREEMPT(full) [ 1475.755243][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1475.755257][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1475.755289][ C1] RIP: 0010:unwind_next_frame+0xc9c/0x2390 [ 1475.755323][ C1] Code: 4c 8b 6c 24 50 4c 8b 64 24 10 74 08 48 89 df e8 2a 30 b2 00 4c 89 23 ba 10 00 00 00 4c 89 ef 31 f6 e8 f8 31 b2 00 48 8b 14 24 c5 04 00 00 4c 89 7c 24 28 48 89 5c 24 78 4d 8d 66 08 4d 89 e5 [ 1475.755341][ C1] RSP: 0018:ffffc9000fa57378 EFLAGS: 00000246 [ 1475.755357][ C1] RAX: ffffc9000fa57498 RBX: ffffc9000fa57480 RCX: 0000000000000000 [ 1475.755371][ C1] RDX: ffffffff908f0df8 RSI: 0000000000000000 RDI: ffffc9000fa574a8 [ 1475.755384][ C1] RBP: dffffc0000000000 R08: ffffc9000fa574a7 R09: 0000000000000000 [ 1475.755398][ C1] R10: ffffc9000fa57498 R11: fffff52001f4ae95 R12: ffffc9000fa57970 [ 1475.755412][ C1] R13: ffffc9000fa57498 R14: ffffc9000fa57448 R15: ffffc9000fa57490 [ 1475.755427][ C1] FS: 0000000000000000(0000) GS:ffff888126231000(0000) knlGS:0000000000000000 [ 1475.755443][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1475.755456][ C1] CR2: 00007fd4a11b7198 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 1475.755473][ C1] Call Trace: [ 1475.755480][ C1] [ 1475.755493][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1475.755517][ C1] ? __alloc_skb+0x27e/0x430 [ 1475.755541][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1475.755576][ C1] arch_stack_walk+0x11c/0x150 [ 1475.755603][ C1] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 1475.755631][ C1] stack_trace_save+0x9c/0xe0 [ 1475.755656][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1475.755682][ C1] ? stack_trace_save+0x9c/0xe0 [ 1475.755706][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1475.755732][ C1] ? stack_depot_save_flags+0x40/0x860 [ 1475.755763][ C1] kasan_save_track+0x3e/0x80 [ 1475.755794][ C1] ? kasan_save_track+0x3e/0x80 [ 1475.755819][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1475.755834][ C1] ? __kmalloc_node_track_caller_noprof+0x568/0x800 [ 1475.755862][ C1] ? kmalloc_reserve+0x136/0x290 [ 1475.755881][ C1] ? __alloc_skb+0x27e/0x430 [ 1475.755933][ C1] __kasan_kmalloc+0x93/0xb0 [ 1475.755950][ C1] __kmalloc_node_track_caller_noprof+0x568/0x800 [ 1475.755979][ C1] ? __alloc_skb+0x27e/0x430 [ 1475.755997][ C1] ? rcu_is_watching+0x15/0xb0 [ 1475.756021][ C1] ? __alloc_skb+0x27e/0x430 [ 1475.756041][ C1] kmalloc_reserve+0x136/0x290 [ 1475.756064][ C1] __alloc_skb+0x27e/0x430 [ 1475.756085][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1475.756107][ C1] ? kmem_cache_free+0x19b/0x690 [ 1475.756139][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 1475.756175][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1475.756197][ C1] process_scheduled_works+0xae1/0x17b0 [ 1475.756235][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1475.756266][ C1] worker_thread+0x8a0/0xda0 [ 1475.756303][ C1] kthread+0x711/0x8a0 [ 1475.756330][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1475.756351][ C1] ? __pfx_kthread+0x10/0x10 [ 1475.756376][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1475.756397][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1475.756418][ C1] ? __pfx_kthread+0x10/0x10 [ 1475.756444][ C1] ret_from_fork+0x4bc/0x870 [ 1475.756465][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1475.756488][ C1] ? __switch_to_asm+0x39/0x70 [ 1475.756504][ C1] ? __switch_to_asm+0x33/0x70 [ 1475.756519][ C1] ? __pfx_kthread+0x10/0x10 [ 1475.756545][ C1] ret_from_fork_asm+0x1a/0x30 [ 1475.756578][ C1]