last executing test programs: 2m37.916155746s ago: executing program 0 (id=1391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000300), &(0x7f00000003c0)=""/174}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x4, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 2m37.688885564s ago: executing program 0 (id=1396): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x8940, &(0x7f000000a640)={0x0, 0x0}) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000014060000400012800b00010067656e6576650000300002801400070000000000000000000000ffffac14140005000a0002000000050009"], 0x68}, 0x9}, 0x20010881) 2m37.512290343s ago: executing program 0 (id=1399): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003900010329bd7000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x4004097}, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f0000000000080001000000000008004b00130080000800150000000000080003"], 0x38}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'bridge0\x00', 0x7101}) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2ad}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x68}}, 0x4008845) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x83f7}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) (async) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, 0x400}) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}}, 0x50}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 32) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) (async, rerun: 32) listen(r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) shutdown(r11, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="40010000100001000000000000000000fc000000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000010000000000000000480002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050019006c08b2d9"], 0x140}}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x850, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_POLICE={0x820, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0xffff, 0xc, 0x7, 0x1000, 0x7, 0xe731, 0x10, 0x27, 0x0, 0x4, 0xd, 0xbd, 0x10, 0x4, 0x5, 0x4, 0x9, 0x10000, 0x7ff, 0x22, 0xd, 0xffffff80, 0x0, 0xfffffffa, 0x7ffffffc, 0x8, 0xd, 0x4, 0x80000000, 0xc0a, 0x8, 0xfffff04a, 0x2, 0x9, 0x5, 0x59be, 0x90, 0x0, 0xf1, 0x40, 0xca20, 0x9, 0xfffffff8, 0x33f, 0xcf, 0x3, 0x1fe3, 0x9, 0x0, 0x3, 0xf78, 0x1ff, 0x8001, 0x3, 0x7, 0x3, 0x9, 0x0, 0x4000101, 0xfffffffd, 0x900, 0x4, 0x3, 0x1, 0xcec101e, 0x101, 0x5, 0x3, 0x101, 0x6, 0x3, 0x8, 0x2, 0x1000, 0xd, 0x82, 0x10, 0x3, 0x4000000, 0x1fc, 0x7, 0x8, 0x3, 0x9, 0x21, 0xb, 0xffffffff, 0x0, 0x1, 0x8, 0x80000000, 0x9, 0xef, 0x7f, 0x0, 0x8, 0x8, 0xd2, 0x9, 0x3, 0x703c47b4, 0x6, 0xfff, 0x6, 0x6, 0x3, 0x5, 0x6, 0x100, 0x8000, 0x77, 0x0, 0x8, 0x5, 0x101, 0x8, 0x5, 0x7, 0x1ff, 0x0, 0x8bb7, 0xff, 0xffff, 0xfffffc01, 0x5, 0x7, 0x2, 0x5, 0x5, 0xa3b4, 0x3, 0xf, 0x2, 0x10000, 0x795, 0xc4, 0x96ba81bb, 0x272, 0x3, 0x3ff, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x6, 0xfffffffc, 0x196b4eb5, 0x6c, 0x2, 0x0, 0x8001, 0x0, 0x6, 0x8001, 0x7, 0x5, 0x1, 0x2, 0x80, 0x1, 0x2, 0x8001, 0xffffffff, 0x5, 0x1, 0x3, 0x0, 0xa, 0x42, 0x834, 0x101, 0xab1, 0x9, 0x1c7, 0x35f3, 0x7, 0x4, 0x9, 0x6, 0x8, 0x80000000, 0x3, 0x9, 0x1, 0x4, 0x9cdf070, 0x12001, 0xf2f, 0x0, 0x3, 0x7fff, 0xa4, 0x3, 0xdfa, 0xe, 0x5, 0x1, 0x3, 0x8, 0x2, 0x6, 0xfffff000, 0x3b84, 0x7, 0x8001, 0x5, 0x1000, 0x1c00, 0x0, 0x8, 0x8, 0x9, 0x5, 0x9, 0x283a, 0xffffff48, 0xd0fa, 0x1, 0x5, 0xfffffffc, 0x4, 0x2bc3, 0x6, 0x9, 0x2, 0xff, 0x5, 0x3, 0x8, 0x0, 0x3, 0xd, 0x0, 0x9, 0x40, 0x6, 0xfffffffc, 0x4, 0x2, 0x5, 0xfffffff9, 0x9, 0xffff0001, 0xfffffffb, 0x1, 0x2, 0x6f7, 0x400, 0xa, 0x100, 0x6, 0x4, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x7, 0x80000000, 0x5, 0x5, 0x7, 0x6, 0x7, 0x7, 0x1, 0x7, 0x1ed4, 0x3, 0x9, 0x400, 0xd, 0x3, 0xa4ed00, 0x7b, 0x7, 0x3be, 0xfb57, 0x40, 0xffffffff, 0x8000, 0x5, 0x8, 0x2, 0x401, 0x5c, 0x9, 0x10000, 0x9, 0x1, 0x0, 0x8, 0x355, 0x0, 0x9, 0x5, 0x100, 0x8003, 0xf, 0xf, 0x0, 0x0, 0xfffffffb, 0x7, 0xc, 0x7ff, 0x10001, 0x5, 0x0, 0x5, 0xaa9, 0xfffffe00, 0x1c, 0x10, 0xd, 0x5, 0x2, 0xcda, 0x0, 0x9, 0x1, 0x800, 0x7, 0x1, 0x4, 0x5, 0x1a5b809d, 0x4e, 0x6, 0x48000, 0x3, 0x8, 0x3, 0x2, 0x6, 0x2, 0x1, 0x10000, 0x3, 0x4, 0x8, 0x5, 0x7, 0x7, 0xa6, 0x0, 0x0, 0x0, 0x35b33ced, 0x0, 0x9, 0x80, 0xf, 0x50fc, 0x2, 0x3, 0xfa37, 0x8, 0x3, 0x3, 0x7b, 0x3, 0x4, 0x1f63, 0xfffffe00, 0x0, 0x5, 0x40, 0x1, 0x1, 0x0, 0x6, 0x71, 0x7, 0xfffff8a7, 0x0, 0xc, 0x1, 0x7, 0x3b, 0x2, 0x8, 0x81, 0xfff, 0x101, 0x4, 0xfffffff7, 0x1, 0x2, 0x1000, 0x3, 0xffff, 0x6, 0x7, 0xe, 0x2, 0x80000001, 0x3, 0x8, 0x6461, 0x80000001, 0x6, 0xc456, 0x0, 0x0, 0x2, 0x80, 0x510e, 0x2, 0x7, 0xffffffff, 0x775, 0x2, 0xfffff9c3, 0x5, 0x80, 0x8, 0x2, 0xd7, 0x7f, 0x8, 0x2, 0x2b86, 0x9, 0x0, 0x5, 0x1f, 0x5, 0x53c, 0xc, 0x3c, 0xb4, 0x7, 0x0, 0xfffffffb, 0xc, 0xffffff00, 0x1, 0x2, 0x0, 0xaef, 0xf969, 0x3, 0x8, 0x9, 0x8, 0x401, 0x80, 0x1, 0xfffff89a, 0xd5f4, 0x8000, 0x400, 0x3, 0x3, 0x4, 0x1, 0x6, 0x3, 0x7, 0x8, 0x6, 0x1, 0x8, 0x3ff, 0x6, 0x8fc, 0x5, 0xa3, 0x10000ff, 0xffffffff, 0x9, 0x57c, 0x14, 0x1, 0x3, 0x3, 0x1, 0x72, 0xfffffff7, 0xffffffff, 0xffff, 0x4, 0x2, 0x2, 0x5, 0x0, 0x6, 0x1, 0x8, 0x11a, 0x7fff, 0x8, 0xfffffffc, 0xc9, 0x8, 0x5, 0x2, 0x8, 0x2, 0xcb, 0x0, 0x7, 0x6, 0x7, 0x5, 0x5, 0x6, 0x80000000, 0x80, 0x101, 0x80]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x24008050}, 0x0) 2m37.232327384s ago: executing program 0 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}}, 0x88890) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000)="b4224de75530059079601a12fa997be6edbbbc2650a62236f958e37e423b19529ea9a329ae3ebcd3686abffa294febb265", &(0x7f0000000180)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) getuid() (async) r3 = getuid() socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in=@loopback, @in6=@private1, 0x4e24, 0x0, 0x4e20, 0x0, 0x8, 0xa0, 0xc0, 0xce, 0x0, r3}, {0x2cf, 0x3, 0x0, 0xa3, 0x8, 0x8, 0x2}, {0x800, 0x0, 0xd0, 0x3}, 0x8c, 0x6e6bb3, 0x2, 0x1, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x6c}, 0xa, @in=@multicast1, 0x3500, 0x0, 0x0, 0x4, 0x0, 0x6, 0x3}}, 0xe8) 2m37.039969053s ago: executing program 0 (id=1408): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x7c}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) pipe(&(0x7f00000055c0)={0xffffffffffffffff}) shutdown(r2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20084) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (async) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x804) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x7c}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) (async) pipe(&(0x7f00000055c0)) (async) shutdown(r2, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20084) (async) 2m36.848529139s ago: executing program 0 (id=1411): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$CAIFSO_REQ_PARAM(r8, 0x116, 0x80, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000300)={'ah\x00'}, &(0x7f0000000440)=0x1e) r9 = accept$alg(r7, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmmsg$alg(r9, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000f70f00850600"/20, @ANYRES8=0x0, @ANYBLOB="eed0ad05d5afc9bcd801000000000000001c0012c312000c0001fe616f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c4}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r13}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x800}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m29.701302113s ago: executing program 1 (id=1519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip6gre0\x00', 0x800}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)={0x14, 0x56, 0x601, 0x0, 0x0, "", [@generic="f4"]}, 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x1c, r5, 0x105, 0x0, 0x8000, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r8, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x34}}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2m29.500635695s ago: executing program 1 (id=1523): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) 2m29.468906039s ago: executing program 1 (id=1525): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801480018032000100e000000108000200ac0414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000004000680e87a19f50c98af995a9946"], 0x68}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801480018032000100e000000108000200ac0414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000004000680e87a19f50c98af995a9946"], 0x68}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) sendto$inet6(r1, 0x0, 0xffffffffffffffde, 0x4080, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8c3}, 0x60) syz_emit_ethernet(0x63, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x41, 0x0, @opaque="af9d787f6e00d4c6503de993ad48b01c953c27f471b064b65bdbea1f027209e148a09e615170195bee90e9f0b89a6b4fbdd3c651f1b8e66988"}}}}}, 0x0) socket(0x22, 0x3, 0x6) (async) socket(0x22, 0x3, 0x6) 2m29.339768128s ago: executing program 1 (id=1527): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x0, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x0, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x40000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 2m29.300901011s ago: executing program 1 (id=1529): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x77359400}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0) 2m29.214499768s ago: executing program 1 (id=1531): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x21}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34090000c8ad980a90dbdd94d80c2d5630d718395b130e46f7f9a36fe1612b324138e08645c237cf50edd6cdbc8391ff9b1bca8bc93b4c15b053e27a14ad66307afed1c7a6c762e2510102e4eb459e3d962149e496c8542230f5742a64ba1a222d973d983b37a9b5197a48bc8c2ec09a64ed30e931f93bb4428c38820a388be7049966953de7e3685ebe82cb76993e20885d987aa0b50e3da169419ea91c05a544d7cf0db9734797", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fddbdf25010000000000000002410000001800136574683a76657468315f746f5f62726964676500"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x1}, 0x18) r3 = socket(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIONCLEX(r5, 0x5450) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r6, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, @dev, 0x0, 0x0, 0x0, 0xfffffffe}}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100fdffffff0000000003020000c98fb6b6f0576900552af872309e1e7397f9bdb3fad2211c6eafc97555e81c4b2744b9153956b81ca819a46697d63e7b1dab66f32bd920c0c124d9a8ab27bf28f23cc9fe02264b7e8dcbc1869caa6bdaa9d0946c663ac8"], 0x14}}, 0x0) 2m21.801267956s ago: executing program 32 (id=1411): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$CAIFSO_REQ_PARAM(r8, 0x116, 0x80, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000300)={'ah\x00'}, &(0x7f0000000440)=0x1e) r9 = accept$alg(r7, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmmsg$alg(r9, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000f70f00850600"/20, @ANYRES8=0x0, @ANYBLOB="eed0ad05d5afc9bcd801000000000000001c0012c312000c0001fe616f6e640000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c4}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r13}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x800}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m15.791973286s ago: executing program 4 (id=1692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x40}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="0c2100002d000b0000800000000000000200000008000300050000000c0001000000000000000000d11005"], 0x210c}}, 0x8000) 2m15.680851577s ago: executing program 4 (id=1693): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000fd1fc00000000000000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r0, r0}, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000280)="8f2a0a65bd8c2c2b0304000e0580a7b6070d", 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000006000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/87, 0x57}}, 0x10) 2m14.884246563s ago: executing program 4 (id=1700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000005000000000000000000711232000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x20, 0x20, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'pimreg1\x00', 0x1}, 0x18) 2m14.628859765s ago: executing program 4 (id=1704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000005140)={r0}) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0089dd60daba6979305ec24b00000000000000000000000000ccd3c92046bbbf2f000000004e210018907804000000e0ff00000000060000000000"], 0x0) 2m14.501113696s ago: executing program 4 (id=1705): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000019"], 0x60}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "eac3", 0x1}}, @common=@frag={{0x30}, {[0x2, 0x7], 0xfff, 0x4, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x6a, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c20000000000000000b80e0045000024000000000073907800000300e000000000000000001090780200000000000000"], 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c040008", @ANYRES16=r9, @ANYBLOB="0908fdffffff000000000100000008000100", @ANYRES32=r10, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 2m14.260455923s ago: executing program 4 (id=1708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000003c0)=""/245, 0xf5}], 0x2}, 0x7}], 0x1, 0x100, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x11, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff40f1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000780)=""/195, 0x41100, 0x71, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0xf, 0x7fffffff, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r4, r5, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in=@private}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x18, 0x23, 0x800, 0x70bd29, 0x25dfdbfe, {0xd}, [@nested={0x4, 0x2d}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40086) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) 2m14.156809342s ago: executing program 33 (id=1531): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x21}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34090000c8ad980a90dbdd94d80c2d5630d718395b130e46f7f9a36fe1612b324138e08645c237cf50edd6cdbc8391ff9b1bca8bc93b4c15b053e27a14ad66307afed1c7a6c762e2510102e4eb459e3d962149e496c8542230f5742a64ba1a222d973d983b37a9b5197a48bc8c2ec09a64ed30e931f93bb4428c38820a388be7049966953de7e3685ebe82cb76993e20885d987aa0b50e3da169419ea91c05a544d7cf0db9734797", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fddbdf25010000000000000002410000001800136574683a76657468315f746f5f62726964676500"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x1}, 0x18) r3 = socket(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIONCLEX(r5, 0x5450) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r6, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, @dev, 0x0, 0x0, 0x0, 0xfffffffe}}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100fdffffff0000000003020000c98fb6b6f0576900552af872309e1e7397f9bdb3fad2211c6eafc97555e81c4b2744b9153956b81ca819a46697d63e7b1dab66f32bd920c0c124d9a8ab27bf28f23cc9fe02264b7e8dcbc1869caa6bdaa9d0946c663ac8"], 0x14}}, 0x0) 58.75381053s ago: executing program 34 (id=1708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000003c0)=""/245, 0xf5}], 0x2}, 0x7}], 0x1, 0x100, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x11, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff40f1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000780)=""/195, 0x41100, 0x71, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0xf, 0x7fffffff, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r4, r5, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in=@private}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x18, 0x23, 0x800, 0x70bd29, 0x25dfdbfe, {0xd}, [@nested={0x4, 0x2d}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40086) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) 43.128603215s ago: executing program 7 (id=2041): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000200)=0xb, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x26, 0x1, 0x0, 0x0, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r10, 0x400448c9, &(0x7f0000000080)={@any, 0x9}) sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r9}]}, 0x30}}, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 42.882450125s ago: executing program 7 (id=2044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1}, &(0x7f0000000140), &(0x7f0000000100)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x4ae1, 0x7}, {0xcda6, 0x3}]}}) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x4}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 42.591985523s ago: executing program 7 (id=2050): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0b1205005924000018001280090001006970697000"], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0xd4b, 0x1, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x68, 0x0, 0x7, 0x4, 0x0, @local, @multicast2, {[@ssrr={0x89, 0xf, 0x33, [@multicast2, @rand_addr=0x64010100, @local]}, @generic={0x94, 0xc, "7a4ee0081740f5d36a33"}]}}}}}) sendmsg$nl_route_sched_retired(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@delqdisc={0x110, 0x25, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffff, 0xfff8}, {0x0, 0x9}, {0xf, 0x65ace007924ef230}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x100}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x90}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000040000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00007b6a"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x32}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0b1205005924000018001280090001006970697000"], 0x38}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0xd4b, 0x1, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x68, 0x0, 0x7, 0x4, 0x0, @local, @multicast2, {[@ssrr={0x89, 0xf, 0x33, [@multicast2, @rand_addr=0x64010100, @local]}, @generic={0x94, 0xc, "7a4ee0081740f5d36a33"}]}}}}}) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@delqdisc={0x110, 0x25, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffff, 0xfff8}, {0x0, 0x9}, {0xf, 0x65ace007924ef230}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x100}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x90}, 0x40000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000040000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00007b6a"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x32}, 0x94) (async) 42.374983435s ago: executing program 7 (id=2055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) r4 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x4d, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000000008000540000002"], 0x94}}, 0x0) 42.252366967s ago: executing program 7 (id=2057): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = accept(r0, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0, @exit, @jmp={0x5, 0x0, 0x0, 0x7, 0xe, 0xffffffffffffffff, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x35}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 42.049910653s ago: executing program 7 (id=2062): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b5a2cbd7000ffdbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="40007a810c000300f2033cf5e4a563341a7a29e0e1e563140001000fadb7e27e7b3edb4ff77100000000b608000400080000001400020019a8624f4637e89a09"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fecbdf000008006edc0b5694f2355b000008000300", @ANYRES64=r7, @ANYBLOB="050074000100000005eb1201000000002000118004000300040002000400040004000400040003000400010004000c404300280e0000f400000008001400", @ANYRES32=r7, @ANYBLOB="06001000bf050000"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x8008040) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000200"], 0x31) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001c01000020646c2500000000002020207b1af80000000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000085000000500000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000000000018010000756c6c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = accept$ax25(r8, &(0x7f0000000340)={{}, [@null, @rose, @rose, @bcast, @bcast, @rose, @remote, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_ax25_SIOCADDRT(r11, 0x890b, &(0x7f00000003c0)={@default, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r13, 0x0, 0xf69}, 0x18) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 33.864773057s ago: executing program 2 (id=2198): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eb6404074c369780d3df843c4e5e039f"}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) connect$802154_dgram(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3103000000000000200012800b00010067656e657665"], 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000685b6c5617ad066276a881fb623f809321d994e14deca4f6f9ba3ab88eef6a61"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000040)=r6, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x7}}}}}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet6(r8, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000002f40)={'veth0_vlan\x00', {0x2, 0x0, @broadcast}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000280)=r5, 0x4) sendmsg$alg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)="7add2f60213c7935df47b4d1bd6b56e5b3df6ba12f413247c449fe7cbde0aeefe3e26af1ab8da025", 0x28}, {&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000300)="899b01dab231b38c69c2bc5dcbc4422bdc610fd616c64b4af1bda61716a71561a8dce705b2dbe4b318b77affe744d2e960da179ee9153b49ccaf30b4ba0b6b58c94bfabc7622b621d0884c6c89", 0x4d}, {&(0x7f0000000380)="5316b7cd209a7581d8b248eb06c33e926d9a0de71e5a45fb895e2d51ff6578bcb37f4e0584ec710cd6d00db62ff15e37edf6aec450eb6875ac369e0f65bafa6df6f0b9dc00054447fd34ec808a58996b0ce2714de3241b3a974f3d5d1e07c6f0a4a5deaa566ed3439b92c7a74dbe0aacdaf450637a5ee1917c66775c90c6852a", 0x80}, {&(0x7f0000003a80)="e1ae41bba65d580865ff3e55ba3184ccf1421cd2c79ce63e2b90a4d7c2ae0cef4afd8e10ae261d235ede3154abb207ff06312faf10974437bb01a97825f2847cd7d3c9c16e69bc4111535e2129a0948fa5c226e1c541db0d5d33dca9dbb48a0461e3e23b06f091ed", 0x68}, {&(0x7f0000000540)="168f55b7c0ca7d54b66b8afef7f4fdb9872839773bdd9fe01362af71adac1288af442eab05e2d5700dd77cab55207417faf4ee6920fd370629aa28aca1c8a53e7c36c5cdb6fa7227385e14d0f2aac3cf9b636f68b0cb509cae0f35016a373146f8a756dc8bec2c262ab1cfc16d9cff50ce4680358cf7e597d2681aa2741613a780ea79d66e73126209263bf465c8ef0808a9f97068f919d9a7ea7f66", 0x9c}, {&(0x7f0000000600)="e4070cbd2108a3aabad7f847578ae5451b13ee379d1ab25b6df22d77e5ff60e79406a92354849a4ae75435c2b9f3718bb945b7fcf25d189f8055cb595c63c8a42cb6567c488d6935da7e0b100c3cd132a939470ea4855232872be3224bce5eb18011cbb92e980f0d9f8c3693a519d222c6ab68d57c90d4be1bc549132bffd1228b0711c33a51ed0f526c7d24", 0xe1}, {&(0x7f00000006c0)="7155b38ba53d811ca921bafe9423c36bc88a79a3d0d66fd2d81cb94162a2ac890c7727dd11dc6c9f10ae7105eaccd6d5050e4484adb52e2764af6a2526ed06bd7f98816df416fbc64cbe0da9ac86a1a8026418ad74603ee23be08e1caa522a935bc648f3737c8b643369c8dcf260846edff648ab94ba4d40f5", 0x79}, {&(0x7f0000000740)="211d75aba68751fefd77fe08a8ef02d52d34d8143ede871fd0a8eafed676a88a7db4421f68ad84ab4e02feda081d2bf0c78a60412f95661fab4c55d8778112d231d0b9f48e29c15ef4093266135b42c47d", 0x51}], 0x9, &(0x7f0000000880)=[@iv={0xe0, 0x117, 0x2, 0xcb, "da96c86e044fc8c960765f028842bfd7a879969e1d4eb253b604f70376715d70d482c2046e2c5d8d4be6017b9bb0fa96401124b7d0c1d63a667c22d7927e542035e244428ae6fbd9a280f64772652e2dd53852b41322a9d34ffdf32622077d94d1a7eaf4c61afc04053981673d5760dbea47c40601686df0452e807dc53ff5f7c3f07f1c937824aeb938218b5a32d1a5008b54b07bd5bb08681099b1f8c1290120c24f1a98e382afe9f36e6355b0af5e50728554949184548c54a6f19f2fa7da89632a2ed3a1d2969ad0d7"}, @iv={0x40, 0x117, 0x2, 0x25, "08555ca0d095a8dec22cf1cb55c5e898fe82bc76113c114466e42d525049373f5f8f13466e"}], 0x120, 0x10008005}, 0x40) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(r0, &(0x7f0000003900)=[{{&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000100)=""/54, 0x36}], 0x1, &(0x7f0000000a80)=""/118, 0x76}, 0xf64}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b00)=""/109, 0x6d}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/119, 0x77}], 0x3, &(0x7f0000001c40)=""/4096, 0x1000}, 0x5a}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/220, 0xdc}], 0x2, &(0x7f0000002e40)=""/102, 0x66}}, {{&(0x7f0000002ec0)=@caif=@dgm, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002f40)}, {&(0x7f0000002f80)=""/87, 0x57}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/191, 0xbf}, {&(0x7f0000003100)=""/213, 0xd5}, {&(0x7f0000003200)=""/229, 0xe5}, {&(0x7f0000003300)=""/223, 0xdf}, {&(0x7f0000003400)=""/215, 0xd7}, {&(0x7f0000003500)=""/71, 0x47}, {&(0x7f0000003580)}], 0xa, &(0x7f0000003680)=""/3, 0x3}, 0x80000000}, {{&(0x7f00000036c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003740)=""/109, 0x6d}, {&(0x7f00000037c0)=""/254, 0xfe}], 0x2}, 0x2}], 0x5, 0x40, &(0x7f0000003a40)={0x0, 0x3938700}) 33.740642989s ago: executing program 2 (id=2199): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0xc00c0a5}, 0x20000080) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r9, &(0x7f0000000180)="af", 0x1, 0x1840, 0x0, 0x0) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) ppoll(&(0x7f0000000000)=[{r9, 0x408a}], 0x1, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1409, 0x100, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000044) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="038000000000000014001280616e000038fd028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) 33.308607218s ago: executing program 2 (id=2205): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x20, 0x1, 0x4, 0x8, {{0x3c, 0x4, 0x0, 0x6, 0xf0, 0x65, 0x0, 0x82, 0x4, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x1c, 0x32, 0x1, 0x2, [{@private=0xa010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xb25}, {@loopback, 0x6}]}, @cipso={0x86, 0x18, 0x1, [{0x5, 0x12, "c3481b3396741f823bc52535058abdda"}]}, @cipso={0x86, 0x5e, 0x1, [{0x2, 0xe, "1bd2aaa6f227c3edfd2484fc"}, {0x5, 0x9, "b753826ad747b3"}, {0x0, 0x7, "be8c00723f"}, {0x1, 0x12, "4bb2de33c147c7c1992fb70d2cd6dd57"}, {0x5, 0xb, "2891a40b3af219c66c"}, {0x1, 0xf, "0a1488a5ee687c931bd3683d7d"}, {0x6, 0x3, 'R'}, {0x5, 0xb, "9ef1da566aa0d5565a"}]}, @rr={0x7, 0x1f, 0x14, [@loopback, @private=0xa010100, @broadcast, @multicast1, @empty, @private=0xa010102, @local]}, @timestamp_addr={0x44, 0xc, 0x1c, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}]}, @generic={0x7, 0xb, "1526379d32fddf46f8"}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x3, [{@broadcast, 0x101}]}, @lsrr={0x83, 0x7, 0xc3, [@multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@getneigh={0x14, 0x1e, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x0) 33.095690648s ago: executing program 2 (id=2210): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-neon\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-neon\x00'}, 0x58) (async) 32.139417203s ago: executing program 2 (id=2213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2}, 0xebea}], 0x1, 0x40000001, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000180)={0x24, @short}, 0xb) 31.764751218s ago: executing program 2 (id=2217): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$inet(r0, &(0x7f00000017c0)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="852fe51ee95384056b06d311637f227bb6a12dbd6542", 0x16}, {&(0x7f0000000140)="3d066046dc31fbfeca289f1de379814b6116c2911d4638422ccbc6f6905f3de4f396f635a7b69cd959efff3196b22eedd73a7bd48178021e3693f95e328ac6cdba3aa8cdde7cd809f3751609a8f0065c07cd52f8e5e355a11a0f0519659c6dc5183f1ac4667f890fd1e596a36589243ffd3e9163f2cb427b6b0dfc6fa8cd73038aac8e459cfddfacacf4354ea96422f87cf34a58fe3af67b69ef8965a70f3714b3c3f33fdb2e61216e6763e5efeb6674b3c15bc6073ca7349a6916f72b", 0xbd}, {&(0x7f0000000200)="663084ad35b184423dc43ac7f0ae0f8762bc2afd75e835684b6647dea469a0d299b1", 0x22}, {&(0x7f00000002c0)="ed8f10d5a67efa1e32bc53bdeeb0b617bb30f94d05c326020e71dffa6999ddd737660b064b8168f76929d419ff125395e39f53184899bb1177b65d6f92d224ffeaab1987c895479296395cafcbefaae1d03e06b5f1ac4774bc93ff228e13b0a05660854c60db1753815c449abe0f557da4e778", 0x73}, {&(0x7f0000000340)="43c35a68d98a8d45b4535e3f48febbdff8e1f063898fe2f034b121bcc5ab06597c0b9dc25466a196c170c7a678eb544e69ef5e92fa2fea399c53165252", 0x3d}, {&(0x7f0000000380)="5817090b690e092e3b047cd478ae455f91a138c8be6a9d6c54f87c04c4e7cffb39f572d2b9afba22058bfd1d99489089726ed01cc0655943cb9775505aaa88f2", 0x40}, {&(0x7f0000000640)="0a9530ff9729dc20f21ad4e846ace9909b11f3c6e395a4b166cfff82da17a2bd201c9118fcdaa5b68c407a86ed1122b8de873ca2f64fdbb44f85cf49f9abfa8ee323f283fbf644007d9a7037d9d8c0713a535e9d8deccbecad542d876c7d900aa307c79a16786ff7556eecd4db00cc7a2899d233f192d31b0d02b20ac61e5f423e9a4bfb05eb8678a3b2a143af21bd45a5caf04d1f63fb8ca06b14c4b26f581fd4571f861797eb4efb15b4ab38ef2e398a998fe276173a73e5dc0ce4b281f4b52c4c34d8b717182c2046c8b727e9491d6612366001141f5a1dee87b45fc42e0efe", 0xe1}, {&(0x7f00000003c0)="61d3d4818cd6a97e7360c21ab2cff7401d14d0cd7888a645003140e2d4a66cf49fe0c97721fd4ee0d69be38ed987897b589663d29c5c095d4eedbb21a44fd4e606bec405d3d4376368ca030932d4deecdf03164dea27aa907e1809cbdb45b7c14f2b005ff78c490a10ea5a091545e01c8170de7969c801b8167d426043d4046dd701da5a", 0x84}, {&(0x7f0000000740)="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", 0x1000}], 0x9, &(0x7f0000001740)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff0001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x60}, 0x20000050) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 26.875803758s ago: executing program 35 (id=2062): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b5a2cbd7000ffdbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="40007a810c000300f2033cf5e4a563341a7a29e0e1e563140001000fadb7e27e7b3edb4ff77100000000b608000400080000001400020019a8624f4637e89a09"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fecbdf000008006edc0b5694f2355b000008000300", @ANYRES64=r7, @ANYBLOB="050074000100000005eb1201000000002000118004000300040002000400040004000400040003000400010004000c404300280e0000f400000008001400", @ANYRES32=r7, @ANYBLOB="06001000bf050000"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x8008040) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000200"], 0x31) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001c01000020646c2500000000002020207b1af80000000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000085000000500000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000000000018010000756c6c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = accept$ax25(r8, &(0x7f0000000340)={{}, [@null, @rose, @rose, @bcast, @bcast, @rose, @remote, @netrom]}, &(0x7f0000000080)=0x48) ioctl$sock_ax25_SIOCADDRT(r11, 0x890b, &(0x7f00000003c0)={@default, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r13, 0x0, 0xf69}, 0x18) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 16.736781806s ago: executing program 36 (id=2217): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$inet(r0, &(0x7f00000017c0)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="852fe51ee95384056b06d311637f227bb6a12dbd6542", 0x16}, {&(0x7f0000000140)="3d066046dc31fbfeca289f1de379814b6116c2911d4638422ccbc6f6905f3de4f396f635a7b69cd959efff3196b22eedd73a7bd48178021e3693f95e328ac6cdba3aa8cdde7cd809f3751609a8f0065c07cd52f8e5e355a11a0f0519659c6dc5183f1ac4667f890fd1e596a36589243ffd3e9163f2cb427b6b0dfc6fa8cd73038aac8e459cfddfacacf4354ea96422f87cf34a58fe3af67b69ef8965a70f3714b3c3f33fdb2e61216e6763e5efeb6674b3c15bc6073ca7349a6916f72b", 0xbd}, {&(0x7f0000000200)="663084ad35b184423dc43ac7f0ae0f8762bc2afd75e835684b6647dea469a0d299b1", 0x22}, {&(0x7f00000002c0)="ed8f10d5a67efa1e32bc53bdeeb0b617bb30f94d05c326020e71dffa6999ddd737660b064b8168f76929d419ff125395e39f53184899bb1177b65d6f92d224ffeaab1987c895479296395cafcbefaae1d03e06b5f1ac4774bc93ff228e13b0a05660854c60db1753815c449abe0f557da4e778", 0x73}, {&(0x7f0000000340)="43c35a68d98a8d45b4535e3f48febbdff8e1f063898fe2f034b121bcc5ab06597c0b9dc25466a196c170c7a678eb544e69ef5e92fa2fea399c53165252", 0x3d}, {&(0x7f0000000380)="5817090b690e092e3b047cd478ae455f91a138c8be6a9d6c54f87c04c4e7cffb39f572d2b9afba22058bfd1d99489089726ed01cc0655943cb9775505aaa88f2", 0x40}, {&(0x7f0000000640)="0a9530ff9729dc20f21ad4e846ace9909b11f3c6e395a4b166cfff82da17a2bd201c9118fcdaa5b68c407a86ed1122b8de873ca2f64fdbb44f85cf49f9abfa8ee323f283fbf644007d9a7037d9d8c0713a535e9d8deccbecad542d876c7d900aa307c79a16786ff7556eecd4db00cc7a2899d233f192d31b0d02b20ac61e5f423e9a4bfb05eb8678a3b2a143af21bd45a5caf04d1f63fb8ca06b14c4b26f581fd4571f861797eb4efb15b4ab38ef2e398a998fe276173a73e5dc0ce4b281f4b52c4c34d8b717182c2046c8b727e9491d6612366001141f5a1dee87b45fc42e0efe", 0xe1}, {&(0x7f00000003c0)="61d3d4818cd6a97e7360c21ab2cff7401d14d0cd7888a645003140e2d4a66cf49fe0c97721fd4ee0d69be38ed987897b589663d29c5c095d4eedbb21a44fd4e606bec405d3d4376368ca030932d4deecdf03164dea27aa907e1809cbdb45b7c14f2b005ff78c490a10ea5a091545e01c8170de7969c801b8167d426043d4046dd701da5a", 0x84}, {&(0x7f0000000740)="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", 0x1000}], 0x9, &(0x7f0000001740)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff0001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x60}, 0x20000050) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 3.055779938s ago: executing program 6 (id=2563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x1}, 0x8) (async) syz_emit_ethernet(0xae, &(0x7f0000000840)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1, [{0x2, 0xa, "4efd30cc4fd5778d2eddbb50dcd9592d82d0f4824d00292bde7a4c3cbb9c8830e44d8bbf5cff62cb5652b1896b224ca8865ab267c2ec2c252e258b84b7dd7c3df974dd93dc0c51e30171cab29c79"}]}}}}}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x13) (async, rerun: 64) setsockopt$inet_int(r4, 0x0, 0x21, &(0x7f0000000040)=0x80000000, 0x4) (rerun: 64) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x3, 0x4, 0xff, 0x4}, {0x0, 0xf, 0x7, 0x3}, {0x8, 0x5, 0x7, 0x7}, {0x9, 0xa, 0x4, 0x8000}, {0x401, 0x6, 0x9, 0x5}, {0x7, 0x8, 0x7, 0x8}, {0xd, 0xd2, 0x7, 0xfffffffd}, {0x1, 0x1, 0x3, 0x5}]}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r5, 0x3ff) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x39, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x8f56, 0x0, 0x0, {[@md5sig={0x13, 0x12, "2b85bbd9aa0b7ec40900c97fb62cd171"}]}}}}}}}, 0x0) (rerun: 64) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbdd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20008018) 2.532131627s ago: executing program 6 (id=2570): r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x20000081}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20088800}], 0x2, 0x0) 2.328789398s ago: executing program 6 (id=2575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x30600, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x10000, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r8 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r8, 0x111, 0x1, 0x0, &(0x7f0000000380)=0xffffffffffffff40) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r11, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r14], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 2.235031205s ago: executing program 3 (id=2576): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x7, 0x4) bind$l2tp(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1, 0x2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x81) 1.791022053s ago: executing program 6 (id=2582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000000c0)={0x84, 0x2, 0x1, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x6}]}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x83, &(0x7f0000000000)={r5, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e20, @loopback}}, 0x2, 0x7}, 0x90) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0xe}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x2404c084) syz_emit_ethernet(0x114a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x1, 0x4, [0x58c, 0xf5a, 0xf7f, 0x9e2]}) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)=ANY=[@ANYBLOB="8f230000", @ANYRES16=r13, @ANYBLOB="10002bbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x841) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x0) close(0x4) socket(0x10, 0x3, 0x0) 1.767917126s ago: executing program 3 (id=2583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600832fb96dbcf7babe05000700810003004305", 0x1c}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x38, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}]}]}, 0x38}}, 0x0) 1.574718667s ago: executing program 3 (id=2587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f00000002c0), 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\b'], 0x20}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB], 0x70}}, 0x0) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) write$cgroup_subtree(r8, &(0x7f0000000340)={[{0x2d, 'cpuset'}]}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r9, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 1.43529355s ago: executing program 3 (id=2590): syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbd956b900671000051190780a010100ac0014aa4405ff00060000004e2200000000000000000000000000000000bde650ed27e91554b4a6a1b170b882d13d16155050bb25d6fa4a22a996311295471cdc48a09ce14ca06c0b85814caf71279036633b81cb35c7c0c5e122ad5d46f753772532ec7c2d48bc8f9a778cd8313481a633ee4beae08f2994ce0581abf2e17c9e8229a87476c7d8732c15c3a9731e578bb5d981b366255c2056f5d81969aa2ba1d21b3125b7a633f7b305fc33edd871ddad4faf701ab2fa78597afbee1462f54504d4a36c69a83fc2f75a84285eaa09ddad59ae2704dfffae281813ed9bcda6a81a5a98fde4992f675bbe9e67d4c753cb8906605c5f6d3fbae63095acdefab9fb359bf516e0597a2cf637c695b65862032aa6a0d32a748c3059800c5e1c0000000000"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'gretap0\x00', @remote}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @val={0x0, 0x80, 0x7, 0x9, 0x4, 0xc0}, @mpls={[{0x80, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x401}, {}, {0x3, 0x0, 0x1}], @llc={@llc={0x42, 0xf8, 'T', "b7216fe1d28aff35adff44433ef24d1c2083fbbd6a49b25f538eff67a1037cb08c0947b5ee9ae459d77e"}}}}, 0x4b) 823.753211ms ago: executing program 9 (id=2594): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000006740)={'veth1_to_hsr\x00', @broadcast}) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x1b, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d2ca7af23", 0x2c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000006500)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/80, 0x50}], 0x7, &(0x7f0000001640)=""/168, 0xa8}, 0xfffffff9}, {{&(0x7f0000001700)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/103, 0x67}, {&(0x7f0000001800)=""/166, 0xa6}, {&(0x7f00000018c0)=""/135, 0x87}], 0x3}, 0x10001}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001980)=""/83, 0x53}, {&(0x7f0000001a00)=""/237, 0xed}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/107, 0x6b}, {&(0x7f0000002b80)=""/166, 0xa6}, {&(0x7f0000000140)=""/16, 0x10}], 0x6, &(0x7f0000002cc0)=""/129, 0x81}, 0x53b5}, {{&(0x7f0000002d80)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002e00)=""/53, 0x35}, {&(0x7f0000002e40)=""/130, 0x82}, {&(0x7f0000002f00)=""/127, 0x7f}, {&(0x7f0000002f80)=""/198, 0xc6}, {&(0x7f0000003080)=""/74, 0x4a}, {&(0x7f0000003100)=""/245, 0xf5}, {&(0x7f0000003200)=""/80, 0x50}, {&(0x7f0000003280)=""/211, 0xd3}, {&(0x7f0000003380)=""/128, 0x80}], 0x9, &(0x7f00000034c0)=""/106, 0x6a}, 0x2000000}, {{&(0x7f0000003540)=@alg, 0x80, &(0x7f00000037c0)=[{&(0x7f00000035c0)=""/172, 0xac}, {&(0x7f0000003680)=""/77, 0x4d}, {&(0x7f0000003700)=""/146, 0x92}], 0x3, &(0x7f0000003800)=""/4096, 0x1000}, 0xfffff494}, {{&(0x7f0000004800)=@alg, 0x80, &(0x7f0000005c00)=[{&(0x7f0000004880)=""/218, 0xda}, {&(0x7f0000004980)=""/216, 0xd8}, {&(0x7f0000004a80)=""/25, 0x19}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/164, 0xa4}, {&(0x7f0000005b80)=""/117, 0x75}], 0x6, &(0x7f0000005c80)=""/187, 0xbb}, 0x1a8}, {{&(0x7f0000005d40)=@x25={0x9, @remote}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005dc0)=""/151, 0x97}, {&(0x7f0000005e80)=""/114, 0x72}, {&(0x7f0000005f00)=""/142, 0x8e}], 0x3}, 0x8000}, {{&(0x7f0000006000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006240)=[{&(0x7f0000006080)=""/172, 0xac}, {&(0x7f0000006140)=""/70, 0x46}, {&(0x7f00000061c0)=""/77, 0x4d}], 0x3, &(0x7f0000006280)=""/208, 0xd0}, 0x977}, {{0x0, 0x0, &(0x7f0000006440)=[{&(0x7f0000006380)=""/191, 0xbf}], 0x1, &(0x7f0000006480)=""/78, 0x4e}, 0x8fd}], 0x9, 0x40000046, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket$kcm(0x29, 0x5, 0x0) 822.133706ms ago: executing program 5 (id=2596): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0xccd0, 0x6, 0x200, 0x25300, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x20, &(0x7f0000000100)=""/32, 0x41000, 0x25, '\x00', r4, 0x1b, r5, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)=[r6, r7, r8, r9, r10], &(0x7f00000005c0)=[{0x3, 0x4, 0x3, 0x8}, {0x0, 0x5, 0x9, 0x7}, {0x5, 0x4, 0x0, 0x8}, {0x1, 0x3, 0xd, 0xb}, {0x5, 0x3, 0x7, 0x9}], 0x10, 0x3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x19, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 761.452928ms ago: executing program 9 (id=2597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040)=0x80000004, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 328.833172ms ago: executing program 9 (id=2599): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) readv(r0, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) 328.541677ms ago: executing program 8 (id=2600): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x18, 0x9, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040801}, 0x8800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3fab00000000000000002e00"], 0x50}}, 0x80) 327.962957ms ago: executing program 5 (id=2601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000001a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x4c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) read(r0, &(0x7f0000000040)=""/182, 0xb6) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x200080, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000a40)={r6, "8d804cd5ca75c723da52eabc17eba6d4"}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f00000003c0)={0x1, 0x8000000000000001, @start={r6, 0x0, "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", "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"}, [0x7ff, 0x7, 0xa, 0xd, 0xfffffffffffffffc, 0x1, 0x2, 0xc, 0x2, 0x7, 0x9, 0x1, 0xfffffffffffffffa, 0x3, 0xffffffffffffff01, 0x3, 0x1, 0xa166, 0x81, 0x8, 0x5, 0x2, 0xff, 0x3ce, 0x8, 0x3, 0x2, 0x4, 0x8, 0x0, 0xc5c2, 0x9, 0x7, 0xc587, 0x3, 0x5, 0x4, 0xc3, 0x8, 0xce3, 0x81, 0x3, 0x5, 0x200, 0xfffffffffffffc00, 0xfff, 0x5, 0x1, 0x2, 0x8001, 0x1000, 0x5, 0x0, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffc0, 0xffffffffffffffff, 0x2, 0x1]}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'wg1\x00', {0x2, 0x4e20, @loopback}}) 327.483057ms ago: executing program 8 (id=2602): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x200}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0x36) 326.595354ms ago: executing program 6 (id=2603): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040), 0x10) (async) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) (async, rerun: 32) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @local}, 0x14) (rerun: 32) 323.136619ms ago: executing program 5 (id=2604): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001c00010429bd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="0200ee050a000200aae6"], 0x44}, 0x1, 0x0, 0x0, 0xe144e469f031c35f}, 0x20040040) (async) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000000)) (async) syz_emit_ethernet(0x11dc0, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc"}}}}}, 0x0) 322.701618ms ago: executing program 6 (id=2605): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r0, &(0x7f00000004c0)=""/137, 0x89, 0x0, &(0x7f0000000580)={0x2, 0x4e21, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4004014) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)=0x60, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$nfc_llcp(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x27, r4, 0xffffffffffffffff, 0x1, 0x35, 0x20, "822b4938c46ad7632b79b2a271279ed84691de8adace301300bc4ee16ec83a6f4d58137adcbfe32647c63b50f05231c6a2068bfb4483cc89b82f1c4e868e44", 0x1e}, 0x60, &(0x7f00000001c0)=[{&(0x7f0000000380)="2e6e2b609770d61b69786ab57f0fe16498be876f6eab5844f660f41291787f9ba5156dbfdee33e45f0e6bd16a80e5659c32ab92f08107c94e88f309b328764bf545c6409e9d73e8a65ab8cc5f5d179371d2e36002a05aa4ac23b5c80066ce145f6739b790d597673b094ff6a1af48b635b9580e0", 0x74}], 0x1, &(0x7f0000000400)={0x60, 0x0, 0xd, "a85bfac10cf39d47fcf8bd7506c3038c3c8c53c24bf01c04f12913f2b415a609b4f629bd8b6aa46b3f298bba5c8c704906d44b5bd4113696fb3f5ce6390f4133c39492003e65d80dd1f23645"}, 0x60, 0x8001}, 0x84) 321.986802ms ago: executing program 5 (id=2606): r0 = socket(0x2, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000000)=0x205, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x200000c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000180)={'a', ' *:* ', 'wm\x00'}, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="000800130000000000000200", @ANYRES32=r7, @ANYBLOB="1400030076657468305f766972745f7769666900"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r7, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000300)='devices.deny\x00'}, 0x30) openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) connect$unix(r10, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r12 = socket$unix(0x1, 0x1, 0x0) connect$unix(r12, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x802) 320.332903ms ago: executing program 8 (id=2607): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local, {[@generic={0x0, 0x4, 'Z\x00'}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@private=0x4}, {@multicast2}]}]}}}}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r2, @ANYRES32=r1], 0x44}}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 319.429283ms ago: executing program 9 (id=2608): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000001880)={{0x3, @rose}, [@remote, @netrom, @default, @rose, @bcast, @bcast, @default]}, &(0x7f0000001900)=0x48, 0xc1800) accept4$ax25(r0, &(0x7f0000001940)={{}, [@netrom, @null, @netrom, @rose, @bcast, @rose, @default, @bcast]}, &(0x7f00000019c0)=0x48, 0x80800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x15, &(0x7f0000002c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x7, 0x1, 0x9, 0xffffffffffffffff, 0xffffffffffffffff}, @generic={0x2, 0x6, 0x3, 0x1, 0xf}, @call={0x85, 0x0, 0x0, 0x2c}, @generic={0x8, 0x6, 0x4, 0x5, 0xc8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @generic={0xff, 0xc, 0x4, 0x6, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x1, 0x0, 0xb, 0x0, 0x78f7a2873fd2dac4, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x3a, 0x1000, &(0x7f0000000640)=""/4096, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x7, 0xffc00000, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x2, 0x4, 0xffffffff, 0x5}, {0x2, 0x4, 0x8, 0x7}, {0x2, 0x5, 0xb, 0x4}, {0x2, 0x4, 0xf, 0x6}, {0x0, 0x2, 0xf}, {0x2, 0x1, 0x8, 0x4}, {0x9, 0x4, 0x0, 0x3}, {0x5, 0x2, 0xd, 0x8}], 0x10, 0x27ee68a6}, 0x94) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001700)={'syztnl2\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x80, 0x10, 0x3, 0x4, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@noop]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001740)={r2, r3, 0x25, 0x0, @val=@netkit}, 0x1c) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000670900000000994c67374cd8c2915e3cf400a27c6c182252826f6e9a73d7cac9b8601af878b0e67e24378f14b5a2f6b196e8a5891a1e73110200bed1af188521431886101ba5b39fa215c4f4b7f650ce47c601acacd9cfe017c688ec4995cddcd23124ddd2fba799b8c28192a1238c22cb93f826915c81b72b8aa71936e5ca3735f254c3a766a20bbb1b2833c124d602d8cd4aa3065c020bcd"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="110000000000000000dc3406", @ANYRES16=r3, @ANYRES64=r7], 0x20) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x1, '\x00', r3, r6, 0x3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002c40)={&(0x7f0000001a00)="85c4efaed356cc4948001cce8e632cc737867c92d3ecf1878c4c790b26e99f47f6cff2b6b384d9827fb3a27a1c8bd3f4b561139b81adda910c62182fb02d80582faec7c5865de0dcdd6882bf918cdfabd24f903a0ea674fe63a8e2dfe7d749322489e1155af6332f3eadf547e3440c71843aa049bc85516fe639352275c7deb1626213ec1ef681132c23fab0dc1e07982ac34eb8970e8618da586a1aac45d22e76d89fa4603aafc2f64aac0feb8372c0fd0c0ccf20afc717ca7c60f7dca0dc0554d50470d9b0e03f2a09102a8ce9be8b414c4bd75bfa0a2e7be7889ead419f4d926802be2f9db02d9e378d427e06f40269a2c490022328dcb9b0a36766ba5d6c5740a83f74eca601986e3741aae3bc0fc15322f01d0505d5be853368d1e58920f6571545ecbb6feaa0c1c26f11838c663b3a226c3e3a7e1cef933b48dac81ad134fe6ce6c780ff2b8778578293e023a2b8d0ffc7ce414461f8d0874c09958ba1095d22096e1e9562dea053ee79343f807efd4c727396eb39d79f8698c34f5d2fc406aa0fe32f5d1b389e9a501bed77c42f879aa301d39877c5c20b9f3af63d7aa92cc30d8a47270c391d70f02bc7ea86ce19ed6398183100913d10aebb985c42a114d395bb6a4494f49cad85d4ae9b839f0d9886037bd46c61f59c09501d463f426dd7f2f092e0d466b1d9dd6255a842594d842af2f1c186307604d8e68562f60d362966e73723f44e02cf38aee3aad78c4d2b6b829167b7d29c58954eefde11784a6c50139fd56b69594f20d032c2aa54ddc8bc7b6a2973451f91e73cec62c19f1dd7e8a7449a18358bfc13e4db16d5f4b4c7f6057762d8094a60e77aa656a966a77ed21e9b8a8c61159f16b0365dc32885f0f6f660a521af58ac79d8187c355071b4fff64c196aed7919a32396441291d8a22bbdbec1697d50ce4a7e9c46a673f74d2000e1af76df48829d2c1aa20fc93967d1b4ff458ab41cfd57c875fa0f0faf2e485acc486fad8685f4f2c70ae17d415e8f1a0dd92bce2abf224cb360fee5b2fab67c848f00905ba6782858b5700391266f0177aabb2cd0cc862235831f1af8f2e565a1b4b7d0dd85f05c59465f031a054915ae4fed71affaabd88be9ffad91be051c63d192c0e2c6e47f0d7b205ec322c84b1ece5152f1f7fd626f805412579bf8592c98c8abd36210ed30eecb6463add90cd02153c8d8f363ce42476d159df33ce2ac78fa46408b0bca36b517fc88989cd724714912957d71fb3a57541a3dcbdcb2664a46e272c7bdfd647fb86f73ddf23a756908fe29c1f36c3e687810fdbe69abbce948e2d4d3612aa13efe7673bf1c624542a74767948c32b8bcab6dec43d5f04962242a080b778c07f5790c5b22a1de45061f0f341e48434ff6cee8275141bf772812c9687bda10c3788f858056fb8915fc54c39cfbe16f65d35f9dc69eb0b62883e3d89dc1f74e0dbb5138075c8afd96a245f5e18c4089b99be774d6afc1b35a43438a1e34ce5a740e880c4518c181f1cf32885cec1702c64dbd8e36b6125a2bf234022bcf5a520ab1d9a297828dea1ab3c93eafab49954f27fc028dca95102fc56f559711a247781ad4ba410975ce4a634b969ed6dafba9482e6269d9ac3cad8fdaa261b54da3bde4ac31e3f94747dcda9065745903aa5f251fd5465c8537d48d9f94fa3da6cf82145d2cd8f3c4e00d94f29343bc4d08814aa4a6f546ddb7ecd2a4bce67d44c2907be4315de33936956a117cd781e390083d46ebc15a18eef8b0f49828d842df876287a68a520eff80e1a56398b3f977566aec87d2a057dd388bdc9c453927fc12759d99049852affcb33800d6f58a6c481cca016650b656460650cc7ad57f07939a1929d266cace8d85126e49408082ba73f43b07fb944610f15f8e2fd51470b837504fb4a6b78a04e71f05ceb1f28fd629ccd2947ce72f9ed183a7c3a007a2dcae2a1608d7df445f1c361e4f42ea2d3177c766794725d99fdc242d5d8356e876c9a7f1843124ca0afee1cc9a5e18bd2412f704cddb5273dfa48563c8844734982b89828320685659275677875e0ce816ef2afa2015d6705908db331f4e8684bd98472d3f911d022936e43a3a57787e1ae49621fc3a969f80db4d8444957f470fc1acb9c8b3958e5800ae1d5a1c45814700728564f4fecbe8c9c37a36f9de9bb555e15f46ef039c1fe0d24331d16ce0b8bde38adcda889c1220de400b4e819262c1292623082efc5d651585eac319cefe6183407a132542f7a04f7be9245144fa4af974910385aa4365b5fc8a1045794317d416ee645ce00de8c0bdc7c6ffff4a2762d42f1f7a7ed1e4c765330329c13ec42201c6c98a3a88a3a655521e9d5f3bb9840d7e3bc816a8d265811a75861c353457dda8978c50bd3e010d9bf4b1226ffeb48e865bc66c26a8e2350e111a965b942e174c1931981bc87dee8929a58402ebaa6c0396e420d4a49f7a0af94a2fcdecfab006ebcdcb9103d845f088fb3663c615791b4381727a1041c2dd483fdf6d2e96f3154eeb691cf795a95b00ebc795a42d4b7829d50c5fdb5c063784015fe65afcd6a524a7ef6ec49db9c07694fc5b9def406e16101d07239db5c2efde8acfa8acea813cf726ad51fe3e5d2da3a13186080e938812a6239d04e72fe39ba7aee7d1cc15e8e0be351f01fa35b20d57efe0b1d9ae4114599346e996b25133481c1529c824e576c08521b0423ab20bbc5b57edf467909818bf9a11f095d3a157d22ff58c081381d908086194562ee53e5385840c8460219137dd43d0bf8d84874c3cd0490a6d8a653eaa4fa6d516b4f64486ab36ee2c5d90b552e7cd317356d6fcca5124b3296f84fdf9d2fdfd60e1c1f974de7fe22ab5d7c973d072a408461f485acae2556db76116ff740a46247dd70bf7b11a147ea44490726f1c0767e902b7c09f4d604f9a2e153b0e7b55bd09bff82e883b68c326d02552fed81039f4aee0f1bfeb7b04b691f954a7e24a4137ee4b7c62759e16ca4f275b6f585ba2afeba1a30b6d029253fa6fe7173be00d7e51fd904618bb1885009f086333cca292c614d26b8db336dd26797186f5e433e49609453c4cd153e2d3269ba69b0553810a1edf9868078cd28fb90e16fb15e7189ca1cca4868f8ebdc53ebd04eba49ca82956289c7370e1402f79f79a0a97be8dcfaeae10ff6885ec5c49060f82a9fed7f2bb678771007966e5345ca73aecced2929081d7cf5f7c3f1756627aec73837c17f6515286166f7b7316cb806b67552ab51dfde9513d1bdadd09f935821c60bbd96c390efd334516c00c0e60f846adebeced622ca2e344706fd3b5b51975a0edd6abf3df8f26368eb8d4fe98ef600c705875f66bda2ffd7730a23b17852a8920a41ce27078c4897fe746bc04ca59476a4490ceee8496d79eb3d5ccee4ebfe26d65abf967ec3d6208f3c53cc124a9609fee630413d9a3c454e44a172649e4c3beb33eb630bd88c87a8f2424d904c9a9f5b29027ed2bf11a32f62cbdf645deb18ec7837398b96f6f4cf2e440b83a9eb2f3970a07014bb4853ad476628d4c5cca07a9e5d87734e5de45717efa484a35b5bb334aa95cef0199912680464c3d0e8d25a5c2850de0e2e1554820b7f6d11b58c2d09c7a5dd6e63800b250599b3ff9ecdc76f2ee46f3bec8801987599f0a99d057005f1870fc2a90d6cb12f4db916b9d84e8b63f86dfcb52c86d68a5b3b3795761e74a8a73c1badc0d582ba4703df7a62cb8b240d9c048e65e8e2f16455daaa8612c9ccefc84f668cd1059b5d90c31424921042f1c4fd33006b4efe448430cc9a266933434cfaf63322d46c414d25d9e0f80df22ef8fdd59564e39f2fa718b1bb10930a12cced35318a1eb937d35a7789496569c94f0bd4515a2dd44f8d6535d038b57c98c54d2f570ecfa477384dd3078086a7595b58292acb445fd58727f406010ef21244888c8b16b0c25954e9eb7bfda13e211647bd4284b3597416224262ac771660c9c6e9fa6930625a39b6dc38218f839edceb7276879a9ea6432fe86bb8b2402eeae79aa24ca1f97dc490971c21267e789707591760a27ba2ec8603d2f15698d0ee55c0b6a1fd0e2922637f66e57389c118930354f2424ab0fd893225c49b59b9117db22c36887649962be6581ce65abcc2fca0d29da1ebaad1fba1d2e378330d20093439fd969a4fdbee3fa9f4e5972c35b053e1b072bdfb375decdf684764afd1f8c548af88a507824faacc0cdeba019f058533a5f5ef05ed67c11bd246545202bc75cf9eb6fcb93b8b9c0c3af85beb6c9b6dae93528bc6b1ce57c1edb0c7e4e3979d777f6cb6c463c353df49fc720dead110258d690e6295ef793695001000d037eaeca55092bdc2014b3edad3b09207c0cbb928ad3be60414e605b8c20f984a254f1fbdedc3736c0fd0530a0649b37d38dbe1ca3c467e111ffc5a50dbbc4d78b0907b8f75174f73c5685e3f19b766ef1c6b1548bd6c7b4ad7ff9c60bd29673f7c231e7a07dbfeb09c470984e38fc8f4fdf5c3c4bc1276f32321565e0e6d5a7f6c0a0d83ccefa4c19bd3e05e47709109d525cb1087f1c58771645e1e9d8cc347e38139747ab9c1caa1c0a86a8c44f0b4505ebe2b90fd0ae22cd5cd85d9ce8250f592563941438fc8f19c632c2538294f35ccd11e8cfb80fa0815c2756e3b98e652ce9072ff93d8ec9baf4fcfefefc0d2b93d026b1e9c5ddd158e6472540f3eeb2002aa4436a0d1bd1d68b29c0ec96f0cb489351a89a01022f7d173f4477c75df2717ca78dd247433d71c668c501b5ae073500a641db34a9b6015d161fc188e4bf9c3e2a28c859b580c8bf9fb8efcd2852603253ed8e92d71b62804d5458a713dd916c455ab07a6321710112be45c0652b1f2aab908ae1f2e99080fcbd5126aa08fa04265be39e7079a4f528cdc870461d8837ab00f6fdc3ad57ec536e7285ef6ca9bd7b82ea12438f6d849d1a86e95665b38837bbf2ba75b0cd78543c445667e668c9546a1ea8326c884e2a3d086817ef1c8200824fc257b6ad47feb6f325822837fca77b8dcd76f39a21aa80c9a71594a448f0330facb26c97b1797349fc1b9a801dc8b00261ead87d19b433c65ae347053a890233c8e498e294af8f050cc1b828417ec0742dbabcf040c6c4022d9114cc5ab2d0493e6329b990a274444fef28deacf771ae2271dff4f6fddd40a035f6c1f415ba0ef2b8ac13320fa1b8fdd1a7012b885c196bb2ecce502d895e78241f9824f7191910bbb182cc8d32b8c962b91c1b0988c7c1a2efefc020605988fa37c717a7ebc3c4af703e4902e4929ffc4f25402efc75ed3a19323adeeee5e177b51efd4852499ebfc28834906fb0fae119969b28b57adec43a2065c78c38d4a64643a51515918edb6482ee2f1112b05fd890f5bece7d9cdc15f5b22c75c003c3d584e8042798e5448c387b0b834dfe254da83b8f9bd02c57ce771d593ec35442218663d7d880b084b7345576511beb693c6c69cf9e3a3058fd5e1556031199001d86392a4e7984cd3c181797aa7e9193befed48aab0ed7071e1eb68ea070517b82f8045de1378bf3cac63c1b3ed12e53352065377fc72ac38f383df2fb37a9c9193b53d3225e1c9a30030d94a450bc6a959c40b1c9605c4e2d77ea928ee867d197bac35de5bd7178a44d05e0e2e83e479676f13f70447944782fde01f1b2baf25c82782ebd8e4d099d99808e3796f8be08226458f8ccacc031c39af2d52f16250144412bb3976dc754ba1c2318b3e2dca04b6901f8b302077f5aaabcf78158cd", &(0x7f0000002a00)=""/59, &(0x7f0000002a40)="4149330249219ffbaf706d92006bee39db74b111d696916ca463d9d6dff6825646dc2447cc599e942a3aaaebdacdf680b31d0c065f937fb933db86bf6cec1e6092e705455dcb492994c237192db5b71cf077685ec298615193253706ef079a58c1449ecf9729d79d8cecfb9fc1b46042226471e37b6fe198b4765870a9686b48acc2a523e8cdf708f862f15bba13485019d88b71cad297d2e2d037f04e11fb07c48608bd195fd6ddd790af44b2350b072e516d9a4be320831d34098b8bab4e62fd2658ab3e7fbaee8362f487", &(0x7f0000002b40)="284139d8edc609ecb0ba18562c197d7109885e42fd50cdab9f92cf421c4dc9f3753a5cb714db7c7da1ad1aa3b8f354c4bd637246c95c8f4e977da8f3273d376ca2075a7c6de138", 0x7f, r9}, 0x38) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r10, &(0x7f0000001800), 0x0, 0x488ef) 318.876172ms ago: executing program 3 (id=2609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010106000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x7c}}, 0x0) 318.64856ms ago: executing program 8 (id=2610): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x4f) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) 228.935904ms ago: executing program 9 (id=2611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x54, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0xa4}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2f}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x84}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 213.777978ms ago: executing program 8 (id=2612): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64) socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="410401", @ANYRES64=r4], 0x4) (async) sendmmsg$inet(r3, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc92", 0xda}], 0x1}}], 0x2, 0x480e0) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async, rerun: 32) sendto$inet(r3, &(0x7f0000000580)="14", 0xfffffffffffffe96, 0x10008095, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r1], 0x24}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r10, 0xff, 0x7, &(0x7f0000000900)="7c73c6e9", 0x4) 156.117195ms ago: executing program 3 (id=2613): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@bcast, @bcast, @netrom, @rose, @default, @bcast, @bcast, @bcast]}, &(0x7f0000000080)=0x48, 0x80000) close(r0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x6face72eabd4ae14) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"4bec343868e6da84a3b11872e453f557", 0x0, 0x0, {0x6, 0x5}, {0x9, 0x2}, 0x7, [0x290e, 0x49c, 0x10, 0x1ff, 0x6, 0x9, 0xbeb, 0x7, 0x9, 0x1ff, 0x2, 0x1, 0x5, 0x7, 0x8]}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0xc67cbf7c4766d78b, @default, @netrom={'nr', 0x0}, 0x10000000, 'syz0\x00', @default, 0x8, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null]}) read(r0, &(0x7f0000000340)=""/43, 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) read(r1, &(0x7f0000000380)=""/212, 0xd4) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000480)=@bpq0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000004c0)={0x80000000}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa0, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040080}, 0x20001) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000007c0)) r7 = socket(0xf, 0x6, 0x3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'ipvlan1\x00', 0x0}) vmsplice(r5, &(0x7f0000001c00)=[{&(0x7f0000000840)="77f31d309c4924c178b857d3eac950e29bcb9049c554defc618f79b5230703cb24250cca4658684070c0a2e1f180f7ab05942aa2d373763e5dd5364f8458c99fb27e6a05aba704bf3d4029bd799fee4dbf470e1e3e1b0bd3f491ca019718d49fd5f1a45fe958a5356441e0951688d5530f3af8526027551bd331e04b3bf05ec9285d20f5ed11ec1e268a4c2095d81a", 0x8f}, {&(0x7f0000000900)="24486d45113066f49e0ad7cf5719dd1f472d263acd1c0ec106c23ce69214c9c92e219b2043a56421bf62c4899e035508ea61624e76f3be6777a371b24549a4dbbd02fac73f438854c269a996f4e68706a74fdf59cb9698a25a9b0cc75205373397b5f70156db9369bdb78727992e2940403d008ac144c0ddeb3da65e163280f6e4c360b72c5025a63518cc9e936748d333424815795c599c6dbccf8db264179da7fd33f1c10311a00b917df79e1b4c2cced8512de4913b0cefd92175c23a85c46f", 0xc1}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="cae753f98bd269f3b3a9034eda9323a6b7d1ce10664d13f8a5d5f212b2d7b3fabd98777b51fcccc19ad8c8f25cb19e720a72698718f99c5626d263cc8549dbd5c7c6581d74c5f5d9f32cafae2c844fd6be8043ed963ca888f766fba020dc5ac68f455f0b90e3ce8e24b385600228b092b8c948136f9eb84569e4a47cf921e4a40840ebdb1be8b32f09defb477cbb3cacac3191f35970d5a143f26800f4e269ccfc0f993a0707a01213918505009470508e26aaccb05310c6aa870b0228bb7e62e0f4089ba8036a415bdf6fa73a417e6f8b31a1ce64ab0be18dee8c81eb8f87b84d7d6f0e3439152974", 0xe9}, {&(0x7f0000001b00)="e6ac59e3678f4ac9d418d874778b49adeb79cc4ad8fb1d7ef3670862d1d77b8e5c37881150fbbbf2f02d0a509873cae3f14b87bc4b79d7dc67063ed3bddcca599bf373fbaf5896b1be69637d7c251927bd17f83176418eed02771acf2c34ed61a0fb2fd2f91524c181650cf792e6df072ae037805a0394cc151dc6e34625dc68bb022b8b0bb814cd0f0334070fb3932b08933101f95f84684238f2c4ee56d93b3cbc89f0224e65", 0xa7}, {&(0x7f0000001bc0)="2db4a8008e5b7f794c281a65b3d14c132ded5faf27a948628c61728e82e4eb5f30d69766846cc2e8a692be6f86c22870b20198524e4fdb", 0x37}], 0x6, 0x1) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001e00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001cc0)=@ipv4_delroute={0xe4, 0x19, 0x100, 0x70bd2d, 0x25dfdbff, {0x2, 0x14, 0x80, 0xfd, 0xff, 0x1, 0x0, 0x1, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0x5, 0x12, 0x2, r8}}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_OIF={0x8, 0x4, r8}, @RTA_NH_ID={0x8, 0x1e, 0x8}, @RTA_METRICS={0x9a, 0x8, 0x0, 0x1, "34ba9b4d86ee512813fb1929156cb939378e406ffce923833365cadbc4cfdfd8a6efdda7053c7462e69d62df8e199751235f85189151b77b6bda3e751020e158aebae0cf500ba85e534a0ef49c24545b4f4886a3291ca7d19a12c7baee54891cc68795727a5e5b0782f561e0b61be53dce4770bfbdffdeb83d070ee3699d4c965967ad4c3aee6d75a3cf4d2f1270927012ec03057ef5"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000004}, 0x50) connect$rose(r9, &(0x7f0000001e40)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@null, @null, @default, @default, @bcast, @default]}, 0x40) ioctl$FITHAW(r0, 0xc0045878) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000001e80), &(0x7f0000001ec0)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r7, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001f80)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000002a80)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002000)={0xa20, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4000000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r8}, {0x248, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x10, 0xc0f}, {0xfffd, 0x4d, 0x5, 0x4}, {0x0, 0x27, 0xfe, 0x7}, {0x3, 0x4, 0x5, 0x5}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x3, 0x1, 0x6}, {0x9, 0x8, 0x10, 0xefd}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8, 0x6, r8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x40, 0x7, 0x7}, {0x3, 0x8, 0xde, 0x2}, {0x5, 0x6b, 0xe, 0x3}, {0x5, 0x53, 0x35, 0x7}, {0x4c, 0x5, 0x8, 0x184}, {0x5, 0x6f, 0x5, 0x4}, {0x40, 0x6, 0x0, 0x3}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x100, 0xa, 0xb1, 0x8}, {0x8, 0x3, 0x1, 0x5}, {0x0, 0xd, 0x3, 0x500ebc91}, {0xffab, 0x81, 0xd, 0x3}, {0xcc00, 0x5, 0xae, 0x6}, {0x4f, 0x4, 0x9}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x3, 0x7, 0x40}, {0x3, 0x29, 0x1, 0x1}, {0x200, 0x6f, 0x2, 0x10000}]}}}]}}, {{0x8, 0x1, r8}, {0x90, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc0cf}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0xa20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 155.095513ms ago: executing program 5 (id=2614): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x20800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 128.134111ms ago: executing program 9 (id=2615): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x12, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1.047674ms ago: executing program 8 (id=2616): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f00000000c0)="6ae07ce25caf52f9b69049a3141daf6b3609d510c5bf84e26c07c460b06832fca10621527ce8787fa76eaf1d6b58e8230e94119ef621458761e1cfde4368d3b490e0f067194e862c8de7ce84515a25ff4cc6f1762fce4d72c7630be4a04558de75f996d0065659224584dd0f0f94a57efcf95571bcb41869fd92a3f01309bbe1ae18f9fc8d45d0fd3486a774dd11a2f78b89ed99241118ca4c8527138a967cd1cf9675017a257a813b89c4151a89a660f30d71bc40748ff2c7708c52d9b5f90459e8bc9a1d74a60654b6a43a1a27a7fdf667f97b7f9e601cac769e5b658bf620c59e71054d2ea8f16e7b52071cf7") r2 = accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@id, &(0x7f0000000200)=0x10, 0x80000) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0x1c) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@getchain={0x6c, 0x66, 0xa20, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xf}, {0x6, 0xfff3}, {0xffe0, 0xffe0}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x26d0b53f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20060004}, 0x24040884) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000540)={0x40, 0x3, 0x1}, 0x10) r5 = accept4(0xffffffffffffffff, &(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000600)=0x80, 0x800) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x42}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r6) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r9, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000940)={'nat\x00', 0x0, [0x80000, 0x8, 0x1, 0x732c, 0x8]}, &(0x7f00000009c0)=0x54) sendmsg(r0, &(0x7f0000000d00)={&(0x7f0000000a00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)="57e4b0e36eb8c028cf2e172d7c94842da88fe97a3e82c1242838c5b9b7987a85cdf7955ec5d9598a3c44322ba8995a3e69", 0x31}, {&(0x7f0000000ac0)="b10f06e2eda21600a2d7c49a3dbd22b8fc6ce1840b7baf6afa18b58707951b4aa21b226b5018ab7252073315ea174fe3066221555195a8d9d01b345ef5661a5215e63c6e178061361a4a0b8a811cd20f65d0ffd14f9e9534ac94440eb3b019a87c0480dd352cd88d0f780577c08090d3869266a4d1403983ac1c0b1d4217f081892d000c908e6f", 0x87}, {&(0x7f0000000b80)="be74a40718f624550b3b4ea86bd98c82873279180cfa817467d85e58699b9f5442eb4c33432580639c71434193a6165f665c95830f6c25a4c8c933ee4b7e42804a77e57bbf16a2100c017340e43e9325", 0x50}, {&(0x7f0000000c00)="e37d79d2d2659d559773ce79b790c78dd085098838fbb85eb5b08e77047f5e3b56aa35022a8e744b14efd8938117e347bddf9d7aafae0f6d5f83ac6ccf0be235c1a61e0410c251107ba5173019f3734fbfa1168bbb8431da11e767edc291cfea18720bf3d71e140359e9a2bb15c62eb08613e0c12a161558aa", 0x79}], 0x4, &(0x7f0000000cc0)}, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000d40)={0xfffffff2, {{0x2, 0x4e24, @broadcast}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x110) close(r5) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000e80)={0x4, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000fc0)={{0x0, 0x8, 0x7f, 0x1, 0x4, 0x8, 0xff, 0x4, 0xfffff55a, 0x0, 0x3, 0x9, 0x8, 0x8, 0x6}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001080)={{r11, 0x35ee, 0x7, 0x1, 0x7fffffff, 0x400, 0x10, 0x7a, 0x9c, 0x16, 0x1, 0x5, 0x5, 0x8, 0x2}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000020c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x54, r9, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002200)={{{@in6=@mcast1, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000002300)=0xe8) 0s ago: executing program 5 (id=2617): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) kernel console output (not intermixed with test programs): lo speed is unknown, defaulting to 1000 [ 211.781214][ T8472] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 212.211132][ T8526] __nla_validate_parse: 16 callbacks suppressed [ 212.211153][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 212.298663][ T8424] lo speed is unknown, defaulting to 1000 [ 212.473430][ T8424] lo speed is unknown, defaulting to 1000 [ 212.653469][ T8424] lo speed is unknown, defaulting to 1000 [ 213.333604][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 213.386472][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 213.422508][ T8561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'. [ 213.426287][ T8564] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 213.435374][ T8561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.721'. [ 213.605998][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 213.702637][ T8576] lo speed is unknown, defaulting to 1000 [ 213.957490][ T8593] netlink: 64 bytes leftover after parsing attributes in process `syz.4.734'. [ 214.075650][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 214.097888][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 214.121344][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 214.280203][ T8605] tipc: Enabled bearer , priority 0 [ 214.346154][ T8608] syzkaller0: entered promiscuous mode [ 214.363444][ T8608] syzkaller0: entered allmulticast mode [ 214.418714][ T8605] tipc: Resetting bearer [ 214.433066][ T8604] tipc: Resetting bearer [ 214.468588][ T8604] tipc: Disabling bearer [ 214.856715][ T8623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.940906][ T8624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.955306][ T8624] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 214.979523][ T8624] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 215.287871][ T8667] Unsupported ieee802154 address type: 0 [ 215.354126][ T8669] netlink: 'syz.4.756': attribute type 11 has an invalid length. [ 215.640415][ T5839] Bluetooth: hci3: link tx timeout [ 215.648525][ T5839] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.659046][ T5830] Bluetooth: hci3: link tx timeout [ 215.664440][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.678590][ T5830] Bluetooth: hci3: link tx timeout [ 215.684536][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.696198][ T5830] Bluetooth: hci3: link tx timeout [ 215.701559][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.719327][ T5830] Bluetooth: hci3: link tx timeout [ 215.724856][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.732770][ T5830] Bluetooth: hci3: link tx timeout [ 215.738321][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.746560][ T5830] Bluetooth: hci3: link tx timeout [ 215.753133][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 216.204734][ T8704] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 216.292599][ T8705] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 216.300548][ T5915] IPVS: starting estimator thread 0... [ 216.303557][ T8709] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 216.436826][ T8714] IPVS: using max 25 ests per chain, 60000 per kthread [ 216.514518][ T8722] netlink: 'syz.3.776': attribute type 1 has an invalid length. [ 216.527610][ T8720] smc: net device vcan0 applied user defined pnetid SYZ1 [ 216.539576][ T8719] netlink: 'syz.4.775': attribute type 2 has an invalid length. [ 216.565387][ T8719] netlink: 'syz.4.775': attribute type 8 has an invalid length. [ 216.646485][ T8729] bond1: (slave gretap2): making interface the new active one [ 216.658151][ T8729] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 216.722199][ T8719] vxcan1: entered promiscuous mode [ 216.844392][ T8742] unsupported nlmsg_type 40 [ 216.863222][ T8742] netlink: 'syz.2.780': attribute type 4 has an invalid length. [ 216.869544][ T8745] vxcan1: tx drop: invalid sa for name 0x0000100000000000 [ 217.067792][ T8752] nbd: device at index 4 is going down [ 217.100257][ T8752] nbd: device at index 4 is going down [ 217.151647][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 217.153078][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 217.157759][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 217.256402][ T8765] syzkaller0: entered promiscuous mode [ 217.280729][ T8765] syzkaller0: entered allmulticast mode [ 217.520603][ T8788] __nla_validate_parse: 76 callbacks suppressed [ 217.520627][ T8788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.792'. [ 217.562601][ T8788] netlink: 52 bytes leftover after parsing attributes in process `syz.2.792'. [ 217.714250][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 217.766452][ T8801] Bluetooth: MGMT ver 1.23 [ 217.790203][ T8801] Bluetooth: hci1: too big key_count value 32778 [ 217.857722][ T8804] netlink: 32 bytes leftover after parsing attributes in process `syz.4.798'. [ 217.886235][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 217.931733][ T8809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.799'. [ 217.973404][ T8809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.799'. [ 218.007110][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 218.202627][ T8828] tipc: Started in network mode [ 218.208231][ T8828] tipc: Node identity 62820b543837, cluster identity 4711 [ 218.216392][ T8828] tipc: Enabled bearer , priority 0 [ 218.254364][ T8828] syzkaller0: entered promiscuous mode [ 218.273996][ T8828] syzkaller0: entered allmulticast mode [ 218.336940][ T8828] bridge0: entered allmulticast mode [ 218.371082][ T8827] tipc: Resetting bearer [ 218.416694][ T8827] tipc: Disabling bearer [ 218.969028][ T8856] netlink: 14 bytes leftover after parsing attributes in process `syz.1.814'. [ 219.126475][ T8856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.146809][ T8856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.170454][ T8856] bond0 (unregistering): Released all slaves [ 219.289953][ T8863] netlink: 72 bytes leftover after parsing attributes in process `syz.4.818'. [ 219.316762][ T8863] netlink: 72 bytes leftover after parsing attributes in process `syz.4.818'. [ 219.335729][ T8877] º: renamed from veth1_vlan (while UP) [ 219.638048][ T8899] netlink: 'syz.4.826': attribute type 1 has an invalid length. [ 219.660718][ T8899] netlink: 'syz.4.826': attribute type 4 has an invalid length. [ 219.692418][ T8900] netlink: 'syz.4.826': attribute type 1 has an invalid length. [ 219.700132][ T8900] netlink: 'syz.4.826': attribute type 4 has an invalid length. [ 219.828320][ T8914] tipc: Enabled bearer , priority 0 [ 219.854823][ T8914] syzkaller0: entered promiscuous mode [ 219.860519][ T8914] syzkaller0: entered allmulticast mode [ 219.874080][ T12] syzkaller0: tun_net_xmit 70 [ 219.925379][ T8914] tipc: Resetting bearer [ 219.946421][ T8914] syzkaller0: tun_net_xmit 90 [ 219.951477][ T8914] syzkaller0: tun_net_xmit 90 [ 219.993226][ T8906] tipc: Resetting bearer [ 220.037506][ T8906] tipc: Disabling bearer [ 220.239751][ T8937] netlink: 'syz.1.840': attribute type 12 has an invalid length. [ 220.637868][ T8964] block nbd0: Unsupported socket: should be TCP or UNIX. [ 220.697332][ T6738] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.709970][ T6738] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.726242][ T6738] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.762314][ T6738] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.914649][ T8972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.964744][ T8975] veth5: entered promiscuous mode [ 220.977164][ T8975] bond2: (slave veth5): Enslaving as an active interface with an up link [ 221.343602][ T9005] validate_nla: 7 callbacks suppressed [ 221.343622][ T9005] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 221.447413][ T9005] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.513710][ T9018] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 221.532556][ T9010] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.544393][ T9010] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 221.580447][ T9010] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 221.639285][ T9016] vlan3: entered promiscuous mode [ 221.645023][ T9016] bridge0: entered promiscuous mode [ 221.656884][ T9005] syzkaller0: entered promiscuous mode [ 221.682309][ T9005] syzkaller0: entered allmulticast mode [ 221.725538][ T9029] : entered promiscuous mode [ 221.825598][ T9005] veth5: entered promiscuous mode [ 221.847917][ T9005] bond4: (slave veth5): Enslaving as an active interface with a down link [ 221.878487][ T9010] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.014294][ T9048] syz_tun: entered allmulticast mode [ 222.068048][ T9048] dvmrp1: entered allmulticast mode [ 222.119981][ T9045] syz_tun: left allmulticast mode [ 222.227790][ T9054] tipc: Enabled bearer , priority 0 [ 222.319567][ T9054] tipc: Disabling bearer [ 222.361852][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.369074][ T9066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.448029][ T9077] netlink: 'syz.2.882': attribute type 11 has an invalid length. [ 222.636651][ T9087] __nla_validate_parse: 24 callbacks suppressed [ 222.636676][ T9087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.886'. [ 222.812312][ T9094] netlink: 'syz.0.889': attribute type 11 has an invalid length. [ 222.858081][ T9097] tipc: Enabled bearer , priority 0 [ 222.923197][ T9101] Bluetooth: hci0: unsupported parameter 512 [ 222.936717][ T9101] Bluetooth: hci0: unsupported parameter 57307 [ 222.946073][ T9095] tipc: Disabling bearer [ 222.949944][ T9101] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 223.000690][ T9099] netlink: 14 bytes leftover after parsing attributes in process `syz.1.892'. [ 223.039447][ T9100] bond0: option mode: invalid value (133) [ 223.052329][ T9100] bond0 (unregistering): Released all slaves [ 223.406161][ T9123] netlink: 232 bytes leftover after parsing attributes in process `syz.0.902'. [ 223.418162][ T9129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.904'. [ 223.448040][ T9131] netlink: 'syz.1.905': attribute type 29 has an invalid length. [ 223.468321][ T9131] netlink: 'syz.1.905': attribute type 4 has an invalid length. [ 223.663967][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.910'. [ 223.681207][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'. [ 223.767833][ T9156] vxcan1: tx address claim with dlc 0 [ 223.786700][ T9155] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 224.144722][ T9179] netlink: 'syz.3.918': attribute type 3 has an invalid length. [ 224.197750][ T9179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.918'. [ 224.277741][ T9184] tipc: Enabled bearer , priority 0 [ 224.292128][ T9184] tipc: Disabling bearer [ 224.419749][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.923'. [ 224.988261][ T9229] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.140270][ T9241] team0: Device gtp0 is of different type [ 225.159358][ T9225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.402842][ T9252] tipc: Enabled bearer , priority 0 [ 225.410543][ T9252] syzkaller0: entered promiscuous mode [ 225.419243][ T9252] syzkaller0: entered allmulticast mode [ 225.437881][ T9252] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 225.536733][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.942'. [ 225.573179][ T9263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.942'. [ 225.599789][ T9252] tipc: Resetting bearer [ 225.652741][ T9252] tipc: Disabling bearer [ 225.689580][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.852976][ T9279] bond3: option all_slaves_active: invalid value (222) [ 225.862729][ T9287] netlink: 'syz.0.950': attribute type 17 has an invalid length. [ 225.885119][ T9289] netlink: 'syz.0.950': attribute type 17 has an invalid length. [ 225.885645][ T9279] bond3 (unregistering): Released all slaves [ 225.953800][ T9280] team0: Device vti0 is of different type [ 226.181121][ T9304] !: renamed from dummy0 (while UP) [ 226.425859][ T9323] vlan4: entered promiscuous mode [ 226.432471][ T9323] vlan4: entered allmulticast mode [ 226.442896][ T9323] hsr_slave_1: entered allmulticast mode [ 226.570143][ T9329] netlink: 'syz.2.964': attribute type 9 has an invalid length. [ 226.880000][ T9347] tun0: tun_chr_ioctl cmd 1074025675 [ 226.892483][ T9347] tun0: persist disabled [ 226.973034][ T9353] netlink: 'syz.3.972': attribute type 1 has an invalid length. [ 227.086932][ T9353] bond3 (unregistering): Released all slaves [ 227.145808][ T9358] ip6tnl1: entered promiscuous mode [ 227.170717][ T9365] raw_sendmsg: syz.1.976 forgot to set AF_INET. Fix it! [ 227.180752][ T9358] ip6tnl1: entered allmulticast mode [ 227.388131][ T9374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.395502][ T9374] IPv6: NLM_F_CREATE should be set when creating new route [ 227.938372][ T9412] netlink: 'syz.4.996': attribute type 83 has an invalid length. [ 228.066141][ T9425] __nla_validate_parse: 15 callbacks suppressed [ 228.066163][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 228.317175][ T9442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1002'. [ 228.375434][ T9444] netlink: 'syz.2.1003': attribute type 10 has an invalid length. [ 228.409493][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1004'. [ 228.426787][ T9444] team0: Port device 0! added [ 228.620336][ T9462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1010'. [ 228.629720][ T9462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1010'. [ 228.644967][ T9462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1010'. [ 228.658600][ T9462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1010'. [ 228.783655][ T9469] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1011'. [ 228.954303][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1014'. [ 229.043187][ T9477] netlink: 'syz.1.1015': attribute type 1 has an invalid length. [ 229.198571][ T9481] bond1 (unregistering): Released all slaves [ 229.232067][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1015'. [ 229.287079][ T9477] bond0: (slave gretap1): making interface the new active one [ 229.295736][ T9477] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 229.319640][ T9487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.768973][ T9491] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 229.925016][ T9496] bond3: Unable to set down delay as MII monitoring is disabled [ 229.947138][ T9496] bond3 (unregistering): Released all slaves [ 230.127704][ T9504] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 230.164944][ T9504] bond3 (unregistering): Released all slaves [ 230.489290][ T9532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.570755][ T9535] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 230.776816][ T9550] xt_policy: output policy not valid in PREROUTING and INPUT [ 230.861511][ T9560] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 231.031594][ T9566] vlan3: entered allmulticast mode [ 231.036988][ T9566] bond0: entered allmulticast mode [ 231.057215][ T9566] gretap1: entered allmulticast mode [ 231.099706][ T9566] netlink: 'syz.1.1042': attribute type 21 has an invalid length. [ 231.114007][ T9564] can: request_module (can-proto-3) failed. [ 231.149210][ T9566] netlink: 'syz.1.1042': attribute type 5 has an invalid length. [ 231.324810][ T9580] vlan4: entered promiscuous mode [ 231.330097][ T9580] bridge0: entered promiscuous mode [ 231.790738][ T9612] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 231.847682][ T9614] bond3: option min_links: invalid value (18446744073709551614) [ 231.857979][ T9614] bond3: option min_links: allowed values 0 - 2147483647 [ 231.867891][ T9614] bond3 (unregistering): Released all slaves [ 232.138556][ T9631] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 232.150995][ T9631] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 232.363947][ T9645] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 232.815552][ T9655] veth1_to_bond: entered allmulticast mode [ 232.977769][ T9663] netlink: 'syz.0.1075': attribute type 2 has an invalid length. [ 233.166707][ T9675] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.726649][ T9708] netlink: 'syz.3.1084': attribute type 1 has an invalid length. [ 233.740363][ T9708] __nla_validate_parse: 21 callbacks suppressed [ 233.740383][ T9708] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1084'. [ 234.053921][ T9736] C: entered promiscuous mode [ 234.082062][ T9736] tunl0: entered promiscuous mode [ 234.131390][ T9736] gre0: entered promiscuous mode [ 234.193983][ T9736] gretap0: entered promiscuous mode [ 234.287104][ T9736] erspan0: entered promiscuous mode [ 234.305799][ T9736] ip_vti0: entered promiscuous mode [ 234.336402][ T9753] Cannot find add_set index 0 as target [ 234.362922][ T9752] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 234.582815][ T9767] netlink: 'syz.1.1098': attribute type 1 has an invalid length. [ 234.681017][ T9767] netlink: 'syz.1.1098': attribute type 1 has an invalid length. [ 234.770107][ T9742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1092'. [ 234.832674][ T9772] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1099'. [ 235.129059][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 235.139918][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 235.154696][ T9790] syzkaller0: entered promiscuous mode [ 235.161569][ T9790] syzkaller0: entered allmulticast mode [ 235.676587][ T9813] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20000 [ 235.686674][ T9819] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1115'. [ 236.044335][ T9842] xt_bpf: check failed: parse error [ 236.233017][ T9857] netlink: 39848 bytes leftover after parsing attributes in process `syz.2.1129'. [ 236.310064][ T9859] netlink: 'syz.1.1130': attribute type 5 has an invalid length. [ 236.687968][ T9884] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 236.874022][ T9892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'. [ 236.913886][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 237.468544][ T9918] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 237.516498][ T9918] bond3 (unregistering): Released all slaves [ 237.527602][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1150'. [ 237.602531][ T9932] FAULT_INJECTION: forcing a failure. [ 237.602531][ T9932] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 237.691738][ T9932] CPU: 0 UID: 0 PID: 9932 Comm: syz.0.1151 Not tainted syzkaller #0 PREEMPT(full) [ 237.691769][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 237.691791][ T9932] Call Trace: [ 237.691801][ T9932] [ 237.691811][ T9932] dump_stack_lvl+0x189/0x250 [ 237.691851][ T9932] ? __pfx____ratelimit+0x10/0x10 [ 237.691877][ T9932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.691901][ T9932] ? __pfx__printk+0x10/0x10 [ 237.691924][ T9932] ? __might_fault+0xb0/0x130 [ 237.691968][ T9932] should_fail_ex+0x414/0x560 [ 237.692000][ T9932] _copy_from_user+0x2d/0xb0 [ 237.692023][ T9932] ___sys_sendmsg+0x158/0x2a0 [ 237.692054][ T9932] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.692122][ T9932] ? __fget_files+0x2a/0x420 [ 237.692142][ T9932] ? __fget_files+0x3a0/0x420 [ 237.692173][ T9932] __x64_sys_sendmsg+0x19b/0x260 [ 237.692203][ T9932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.692240][ T9932] ? __pfx_ksys_write+0x10/0x10 [ 237.692275][ T9932] ? do_syscall_64+0xbe/0xfa0 [ 237.692307][ T9932] do_syscall_64+0xfa/0xfa0 [ 237.692333][ T9932] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.692360][ T9932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.692382][ T9932] ? clear_bhb_loop+0x60/0xb0 [ 237.692409][ T9932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.692430][ T9932] RIP: 0033:0x7fc9c298eec9 [ 237.692455][ T9932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.692478][ T9932] RSP: 002b:00007fc9c0bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.692510][ T9932] RAX: ffffffffffffffda RBX: 00007fc9c2be5fa0 RCX: 00007fc9c298eec9 [ 237.692526][ T9932] RDX: 0000000020004810 RSI: 0000200000000500 RDI: 0000000000000003 [ 237.692541][ T9932] RBP: 00007fc9c0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 237.692554][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.692567][ T9932] R13: 00007fc9c2be6038 R14: 00007fc9c2be5fa0 R15: 00007ffcc3eb6fb8 [ 237.692604][ T9932] [ 237.919938][ T9928] lec:lec_atm_close: lec0: Shut down! [ 238.072575][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 238.310554][ T9961] ip6t_srh: unknown srh invflags 4000 [ 238.445922][ T9967] netlink: 'syz.4.1163': attribute type 28 has an invalid length. [ 238.497757][ T9967] netlink: 'syz.4.1163': attribute type 3 has an invalid length. [ 238.881746][ T9988] __nla_validate_parse: 8 callbacks suppressed [ 238.881768][ T9988] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1170'. [ 238.899107][ T9988] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1170'. [ 238.908697][ T9988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1170'. [ 238.923787][ T9983] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1167'. [ 238.945859][ T9992] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1169'. [ 238.946976][ T9983] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1167'. [ 239.048301][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'. [ 239.075410][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'. [ 239.084871][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'. [ 240.226292][T10006] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1174'. [ 240.420278][T10027] syzkaller1: entered promiscuous mode [ 240.426636][T10027] syzkaller1: entered allmulticast mode [ 240.834690][T10057] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 240.837288][T10058] netlink: 'syz.1.1188': attribute type 1 has an invalid length. [ 240.903986][T10057] tipc: Cannot configure node identity twice [ 241.660285][T10109] tap0: tun_chr_ioctl cmd 1074025677 [ 241.690480][T10109] tap0: linktype set to 65534 [ 241.920165][T10125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.927509][T10125] IPv6: NLM_F_CREATE should be set when creating new route [ 241.934847][T10125] IPv6: NLM_F_CREATE should be set when creating new route [ 241.942121][T10125] IPv6: NLM_F_CREATE should be set when creating new route [ 241.952982][T10126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.161538][T10141] tipc: Enabled bearer , priority 0 [ 242.169239][T10141] syzkaller0: entered promiscuous mode [ 242.186453][T10141] syzkaller0: entered allmulticast mode [ 242.216729][T10141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 242.241441][T10142] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.257196][T10141] tipc: Resetting bearer [ 242.268910][T10138] tipc: Resetting bearer [ 242.287132][T10138] tipc: Disabling bearer [ 242.501418][T10150] netlink: 'syz.2.1218': attribute type 3 has an invalid length. [ 242.580116][T10149] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.667751][T10153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.677220][T10153] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 242.689934][T10153] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 242.964377][T10175] netlink: 'syz.3.1227': attribute type 10 has an invalid length. [ 242.983755][T10173] bond0: (slave bond_slave_0): Releasing backup interface [ 243.009633][T10173] bond0: (slave bond_slave_1): Releasing backup interface [ 243.045641][T10173] team0: Port device team_slave_0 removed [ 243.077855][T10173] team0: Port device team_slave_1 removed [ 243.085630][T10173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.094191][T10173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.106365][T10173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.114113][T10173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.125479][T10192] openvswitch: netlink: EtherType 306 is less than min 600 [ 243.138469][T10173] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.156258][T10175] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.199502][T10175] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.206798][T10175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.249091][T10175] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 243.278012][T10196] tipc: Started in network mode [ 243.290546][T10196] tipc: Node identity 1a1f829175d1, cluster identity 4711 [ 243.298588][T10196] tipc: Enabled bearer , priority 0 [ 243.307421][T10188] syzkaller0: entered promiscuous mode [ 243.313911][T10188] syzkaller0: entered allmulticast mode [ 243.329493][T10188] tipc: Resetting bearer [ 243.340399][T10187] tipc: Resetting bearer [ 243.356494][T10187] tipc: Disabling bearer [ 243.501667][T10206] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜zR' [ 243.516563][T10206] CPU: 0 UID: 0 PID: 10206 Comm: syz.4.1237 Not tainted syzkaller #0 PREEMPT(full) [ 243.516594][T10206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.516608][T10206] Call Trace: [ 243.516617][T10206] [ 243.516627][T10206] dump_stack_lvl+0x189/0x250 [ 243.516662][T10206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.516686][T10206] ? __pfx__printk+0x10/0x10 [ 243.516716][T10206] ? kernfs_path_from_node+0x2f/0x290 [ 243.516742][T10206] ? kernfs_path_from_node+0x250/0x290 [ 243.516769][T10206] ? kernfs_path_from_node+0x2f/0x290 [ 243.516802][T10206] sysfs_warn_dup+0x8e/0xa0 [ 243.516829][T10206] sysfs_do_create_link_sd+0xc0/0x110 [ 243.516860][T10206] device_add_class_symlinks+0x1cf/0x240 [ 243.516911][T10206] device_add+0x475/0xb50 [ 243.516956][T10206] wiphy_register+0x1c81/0x2aa0 [ 243.517007][T10206] ? __pfx_wiphy_register+0x10/0x10 [ 243.517035][T10206] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 243.517065][T10206] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 243.517106][T10206] ieee80211_register_hw+0x3473/0x40d0 [ 243.517147][T10206] ? ieee80211_register_hw+0x1461/0x40d0 [ 243.517180][T10206] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 243.517200][T10206] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 243.517231][T10206] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 243.517255][T10206] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 243.517289][T10206] ? __hrtimer_setup+0x187/0x210 [ 243.517313][T10206] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 243.517349][T10206] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 243.517414][T10206] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 243.517439][T10206] ? trace_kmalloc+0x1f/0xd0 [ 243.517467][T10206] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 243.517500][T10206] ? kstrndup+0xbf/0x160 [ 243.517535][T10206] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 243.517571][T10206] ? __pfx___nla_validate_parse+0x10/0x10 [ 243.517620][T10206] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 243.517656][T10206] ? rcu_is_watching+0x15/0xb0 [ 243.517687][T10206] ? __nla_parse+0x40/0x60 [ 243.517722][T10206] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 243.517766][T10206] genl_family_rcv_msg_doit+0x212/0x300 [ 243.517806][T10206] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 243.517853][T10206] ? bpf_lsm_capable+0x9/0x20 [ 243.517889][T10206] ? security_capable+0x7e/0x2e0 [ 243.517927][T10206] genl_rcv_msg+0x60e/0x790 [ 243.517966][T10206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.517996][T10206] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 243.518041][T10206] netlink_rcv_skb+0x205/0x470 [ 243.518063][T10206] ? __lock_acquire+0xab9/0xd20 [ 243.518085][T10206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.518118][T10206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.518165][T10206] ? down_read+0x1ad/0x2e0 [ 243.518200][T10206] genl_rcv+0x28/0x40 [ 243.518228][T10206] netlink_unicast+0x82f/0x9e0 [ 243.518275][T10206] ? __pfx_netlink_unicast+0x10/0x10 [ 243.518313][T10206] ? netlink_sendmsg+0x642/0xb30 [ 243.518334][T10206] ? skb_put+0x11b/0x210 [ 243.518364][T10206] netlink_sendmsg+0x805/0xb30 [ 243.518400][T10206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.518429][T10206] ? aa_sock_msg_perm+0xf1/0x1d0 [ 243.518463][T10206] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.518484][T10206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.518510][T10206] __sock_sendmsg+0x21c/0x270 [ 243.518548][T10206] ____sys_sendmsg+0x505/0x830 [ 243.518582][T10206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.518622][T10206] ? import_iovec+0x74/0xa0 [ 243.518648][T10206] ___sys_sendmsg+0x21f/0x2a0 [ 243.518678][T10206] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.518752][T10206] ? __fget_files+0x2a/0x420 [ 243.518771][T10206] ? __fget_files+0x3a0/0x420 [ 243.518805][T10206] __x64_sys_sendmsg+0x19b/0x260 [ 243.518836][T10206] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.518892][T10206] ? do_syscall_64+0xbe/0xfa0 [ 243.518926][T10206] do_syscall_64+0xfa/0xfa0 [ 243.518952][T10206] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.518979][T10206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.519002][T10206] ? clear_bhb_loop+0x60/0xb0 [ 243.519030][T10206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.519052][T10206] RIP: 0033:0x7fb5dc98eec9 [ 243.519073][T10206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.519092][T10206] RSP: 002b:00007fb5dd903038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.519117][T10206] RAX: ffffffffffffffda RBX: 00007fb5dcbe5fa0 RCX: 00007fb5dc98eec9 [ 243.519135][T10206] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 243.519148][T10206] RBP: 00007fb5dca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 243.519162][T10206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.519174][T10206] R13: 00007fb5dcbe6038 R14: 00007fb5dcbe5fa0 R15: 00007ffc8ab38078 [ 243.519224][T10206] [ 244.215160][T10220] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 244.265076][T10222] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.571594][T10241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.659892][T10247] __nla_validate_parse: 13 callbacks suppressed [ 244.659916][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 244.740211][T10249] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 244.755789][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 244.768900][ T5894] IPVS: starting estimator thread 0... [ 244.795929][T10251] tipc: Enabled bearer , priority 10 [ 244.813611][T10257] netlink: 'syz.2.1252': attribute type 4 has an invalid length. [ 244.824954][T10256] tipc: Enabling of bearer rejected, already enabled [ 244.860995][T10252] IPVS: using max 25 ests per chain, 60000 per kthread [ 245.092995][T10273] x_tables: duplicate underflow at hook 3 [ 245.122769][T10279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1256'. [ 245.207005][T10282] wg1: entered promiscuous mode [ 245.212630][T10282] wg1: entered allmulticast mode [ 245.282588][T10285] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1260'. [ 246.216207][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1269'. [ 247.186090][T10329] netlink: 'syz.4.1276': attribute type 16 has an invalid length. [ 247.188461][T10327] netlink: 'syz.4.1276': attribute type 16 has an invalid length. [ 247.202150][T10329] netlink: 'syz.4.1276': attribute type 17 has an invalid length. [ 247.242787][T10329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.254860][T10327] netlink: 'syz.4.1276': attribute type 17 has an invalid length. [ 247.462673][T10327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.491176][T10344] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 248.128569][T10375] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1291'. [ 248.256911][T10385] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.264160][T10385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.314112][T10387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1294'. [ 248.334395][T10390] tipc: Enabling of bearer rejected, failed to enable media [ 248.380551][T10390] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1295'. [ 248.614759][T10406] bridge3: entered allmulticast mode [ 248.622451][T10409] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1300'. [ 248.790279][T10419] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 248.814489][T10420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.004204][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 249.026289][T10429] xt_ecn: cannot match TCP bits for non-tcp packets [ 249.952000][T10499] __nla_validate_parse: 1 callbacks suppressed [ 249.952020][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'. [ 250.309708][T10521] xt_l2tp: wrong L2TP version: 0 [ 250.474349][T10530] xt_HMARK: spi-set and port-set can't be combined [ 250.763265][T10543] tipc: Enabled bearer , priority 0 [ 250.902781][T10543] tipc: Disabling bearer [ 251.116367][T10568] pim6reg: entered allmulticast mode [ 251.136593][T10572] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 251.197635][T10576] netlink: 'syz.1.1351': attribute type 10 has an invalid length. [ 251.217435][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1351'. [ 251.263274][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 251.279323][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 251.361698][T10578] macvtap0: entered promiscuous mode [ 251.367197][T10578] vlan0: entered promiscuous mode [ 251.373643][T10578] macvtap0: entered allmulticast mode [ 251.380065][T10578] vlan0: entered allmulticast mode [ 251.385947][T10578] veth0_vlan: entered allmulticast mode [ 251.595145][T10592] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1357'. [ 251.822702][T10609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1360'. [ 251.866647][T10606] team0: Device ip6gre1 is of different type [ 252.159846][T10625] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1364'. [ 252.214817][T10628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1367'. [ 252.318513][T10634] tipc: Enabled bearer , priority 0 [ 252.346199][T10634] syzkaller0: entered promiscuous mode [ 252.353935][T10634] syzkaller0: entered allmulticast mode [ 252.422911][T10634] bridge_slave_0: mtu greater than device maximum [ 252.436239][T10633] tipc: Resetting bearer [ 252.498562][T10633] tipc: Disabling bearer [ 252.528233][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 252.727925][T10657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1375'. [ 252.841439][T10657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.972500][T10657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.979823][T10657] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 253.022302][T10657] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 253.470728][ T6734] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.506477][ T6734] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.544701][ T6734] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.574599][ T6734] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.795543][T10723] netlink: 'syz.2.1395': attribute type 21 has an invalid length. [ 253.838353][T10723] netlink: 'syz.2.1395': attribute type 4 has an invalid length. [ 253.863950][T10723] netlink: 'syz.2.1395': attribute type 5 has an invalid length. [ 253.966974][T10731] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 254.250406][T10757] tipc: Enabled bearer , priority 0 [ 254.325272][T10757] tipc: Disabling bearer [ 254.932893][T10796] lo speed is unknown, defaulting to 1000 [ 255.045803][T10816] __nla_validate_parse: 9 callbacks suppressed [ 255.045827][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1417'. [ 255.075240][T10816] bridge_slave_1: left allmulticast mode [ 255.093576][T10816] bridge_slave_1: left promiscuous mode [ 255.102147][T10816] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.132841][T10816] bridge_slave_0: left allmulticast mode [ 255.138586][T10816] bridge_slave_0: left promiscuous mode [ 255.167308][T10816] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.190183][T10819] netlink: 'syz.2.1418': attribute type 10 has an invalid length. [ 255.272804][T10816] bond0: (slave bridge0): Releasing backup interface [ 255.279889][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 255.369092][T10819] team0: Device ipvlan1 failed to register rx_handler [ 255.547842][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 255.605289][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1420'. [ 255.899375][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 256.111657][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 256.358136][T10869] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1433'. [ 256.484267][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1435'. [ 256.535007][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1435'. [ 256.650273][T10888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1438'. [ 256.664481][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'. [ 256.889197][T10902] Illegal XDP return value 3498530076 on prog (id 368) dev N/A, expect packet loss! [ 257.308717][T10908] netlink: 'syz.4.1443': attribute type 21 has an invalid length. [ 257.899834][T10926] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 257.924518][T10926] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 257.962439][T10926] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 258.930540][T10990] IPVS: set_ctl: invalid protocol: 184 172.20.20.187:20001 [ 258.946573][T10992] openvswitch: netlink: Key type 30 is not supported [ 259.138275][T11005] wlan1 speed is unknown, defaulting to 1000 [ 259.154459][T11005] wlan1 speed is unknown, defaulting to 1000 [ 259.175059][T11005] wlan1 speed is unknown, defaulting to 1000 [ 259.189102][T11005] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.216673][T11005] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 259.260157][T11005] wlan1 speed is unknown, defaulting to 1000 [ 259.269431][T11005] wlan1 speed is unknown, defaulting to 1000 [ 259.278705][T11005] wlan1 speed is unknown, defaulting to 1000 [ 259.287957][T11005] wlan1 speed is unknown, defaulting to 1000 [ 259.302984][T11005] wlan1 speed is unknown, defaulting to 1000 [ 259.771970][T11029] IPVS: length: 19 != 8 [ 260.069346][T11050] netlink: zone id is out of range [ 260.081525][T11050] netlink: zone id is out of range [ 260.086749][T11050] netlink: del zone limit has 4 unknown bytes [ 260.288128][T11061] __nla_validate_parse: 16 callbacks suppressed [ 260.288149][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1482'. [ 260.584107][T11080] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 260.592396][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 260.645883][T11083] netlink: 'syz.3.1489': attribute type 1 has an invalid length. [ 260.728825][T11083] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 260.807047][T11095] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1493'. [ 260.984595][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 261.007274][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1497'. [ 261.159300][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.181899][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 261.201605][T11120] netlink: 'syz.3.1502': attribute type 2 has an invalid length. [ 261.218165][T11120] netlink: 'syz.3.1502': attribute type 8 has an invalid length. [ 261.236750][T11120] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1502'. [ 261.740089][T11151] openvswitch: netlink: Actions may not be safe on all matching packets [ 261.865743][T11157] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1519'. [ 261.919353][T11162] xt_hashlimit: size too large, truncated to 1048576 [ 262.056239][T11169] sctp: [Deprecated]: syz.3.1524 (pid 11169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.056239][T11169] Use struct sctp_sack_info instead [ 262.077652][T11172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1525'. [ 262.087939][T11171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1525'. [ 262.345826][T11180] sctp: [Deprecated]: syz.3.1528 (pid 11180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.345826][T11180] Use struct sctp_sack_info instead [ 262.784650][T11213] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 262.795370][T11213] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 262.977836][T11224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.112158][T11229] netlink: 'syz.3.1546': attribute type 83 has an invalid length. [ 263.796224][T11243] tipc: Enabled bearer , priority 0 [ 263.804260][T11243] syzkaller0: entered promiscuous mode [ 263.809914][T11243] syzkaller0: entered allmulticast mode [ 263.888036][T11243] tipc: Resetting bearer [ 263.897806][T11242] tipc: Resetting bearer [ 263.920084][T11242] tipc: Disabling bearer [ 264.338816][T11271] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 264.377633][T11271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.419620][T11271] veth7: entered promiscuous mode [ 264.493003][T11284] veth0: entered promiscuous mode [ 264.506197][T11283] veth0: left promiscuous mode [ 264.579809][ T6726] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.590378][ T6726] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.610666][ T6726] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.624024][ T6726] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.703130][T11292] netlink: 'syz.2.1568': attribute type 39 has an invalid length. [ 264.930581][T11301] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 266.308064][T11358] syzkaller0: entered promiscuous mode [ 266.314585][T11358] syzkaller0: entered allmulticast mode [ 266.381119][T11358] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 266.833309][T11386] netlink: 'syz.4.1593': attribute type 13 has an invalid length. [ 266.841444][T11386] netlink: 'syz.4.1593': attribute type 58 has an invalid length. [ 266.849337][T11386] __nla_validate_parse: 17 callbacks suppressed [ 266.849357][T11386] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1593'. [ 267.697414][T11374] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.707993][T11374] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.761000][T11390] netlink: 'syz.2.1594': attribute type 10 has an invalid length. [ 267.792950][T11390] team0: Device veth1_macvtap failed to register rx_handler [ 267.935280][T11397] netlink: 'syz.4.1595': attribute type 1 has an invalid length. [ 267.949800][T11396] netlink: 'syz.4.1595': attribute type 1 has an invalid length. [ 268.048537][T11404] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 268.061784][T11404] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 268.473661][T11431] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1606'. [ 268.517965][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1607'. [ 268.596752][T11431] bond0 (unregistering): left promiscuous mode [ 268.615007][T11431] bond2: (slave macvlan2): Releasing active interface [ 268.622542][T11431] macvlan2 (unregistering): left promiscuous mode [ 268.641871][T11431] bond0 (unregistering): Released all slaves [ 268.808683][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1612'. [ 268.818448][T11444] openvswitch: netlink: Flow actions attr not present in new flow. [ 269.096832][T11454] nbd: must specify a device to reconfigure [ 269.105211][T11454] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 269.200472][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 269.643399][T11488] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1627'. [ 269.989580][T11498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 270.256277][T11509] netlink: 'syz.3.1636': attribute type 9 has an invalid length. [ 270.276088][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.285864][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.294577][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.303724][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.313550][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.367538][T11515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1634'. [ 270.403442][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 270.419098][T11510] lo speed is unknown, defaulting to 1000 [ 270.674836][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 270.724144][ T6730] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.732819][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 270.742179][ T6730] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.750409][ T6730] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.766279][ T6730] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.777346][T11510] wlan1 speed is unknown, defaulting to 1000 [ 271.239297][T11510] chnl_net:caif_netlink_parms(): no params data found [ 271.357497][T11554] netlink: 'syz.2.1649': attribute type 29 has an invalid length. [ 271.444668][T11554] netlink: 'syz.2.1649': attribute type 29 has an invalid length. [ 271.535782][T11566] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 271.615600][T11510] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.641152][T11510] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.651975][T11510] bridge_slave_0: entered allmulticast mode [ 271.659958][T11510] bridge_slave_0: entered promiscuous mode [ 271.692075][T11510] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.712699][T11510] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.720050][T11510] bridge_slave_1: entered allmulticast mode [ 271.743327][T11510] bridge_slave_1: entered promiscuous mode [ 271.908215][T11510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.938322][T11510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.018310][T11581] __nla_validate_parse: 1 callbacks suppressed [ 272.018333][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1655'. [ 272.098226][T11510] team0: Port device team_slave_0 added [ 272.118078][T11510] team0: Port device team_slave_1 added [ 272.175335][T11589] netlink: 'syz.4.1659': attribute type 21 has an invalid length. [ 272.186966][T11589] netlink: 'syz.4.1659': attribute type 1 has an invalid length. [ 272.203544][T11510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.215317][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.243416][T11510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.276780][T11510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.292939][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.329086][T11510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.354926][ T52] Bluetooth: hci5: command tx timeout [ 273.090619][T11510] hsr_slave_0: entered promiscuous mode [ 273.112167][T11510] hsr_slave_1: entered promiscuous mode [ 273.131742][T11510] debugfs: 'hsr0' already exists in 'hsr' [ 273.137574][T11510] Cannot create hsr debugfs directory [ 273.274913][T11615] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1665'. [ 273.301319][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1665'. [ 273.310348][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1665'. [ 273.571565][T11620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1667'. [ 273.591096][T11620] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1667'. [ 273.730081][T11634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1670'. [ 273.755028][T11634] netlink: 'syz.4.1670': attribute type 7 has an invalid length. [ 273.767630][T11634] netlink: 'syz.4.1670': attribute type 8 has an invalid length. [ 273.778718][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'. [ 273.785920][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 273.810371][T11634] gretap0: entered promiscuous mode [ 273.817780][T11634] batadv_slave_1: entered promiscuous mode [ 273.826638][T11634] gretap0: left promiscuous mode [ 273.832653][T11634] batadv_slave_1: left promiscuous mode [ 274.053714][T11510] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 274.068593][T11510] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 274.089592][T11510] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.118974][T11510] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 274.198061][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 274.215457][T11658] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 274.252010][T11658] syzkaller0: entered promiscuous mode [ 274.258606][T11658] syzkaller0: entered allmulticast mode [ 274.295737][T11660] tipc: Can't bind to reserved service type 0 [ 274.362289][T11510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.391262][T11510] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.407795][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.415072][ T6730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.432257][ T52] Bluetooth: hci5: command tx timeout [ 274.454863][T11666] netlink: 'syz.2.1681': attribute type 1 has an invalid length. [ 274.470039][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.477359][ T6730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.059704][T11510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.091927][T11694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.247407][T11700] bond0: (slave bond_slave_0): Releasing backup interface [ 275.258125][T11700] bond_slave_0: left promiscuous mode [ 275.277420][T11700] bond0: (slave bond_slave_1): Releasing backup interface [ 275.292262][T11700] bond_slave_1: left promiscuous mode [ 275.318379][T11700] team0: Port device team_slave_0 removed [ 275.344099][T11700] team0: Port device team_slave_1 removed [ 275.369128][T11700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.377032][T11700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.389299][T11700] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 275.676545][T11510] veth0_vlan: entered promiscuous mode [ 275.700400][T11510] veth1_vlan: entered promiscuous mode [ 275.765597][T11720] netlink: 'syz.4.1692': attribute type 11 has an invalid length. [ 275.827933][T11510] veth0_macvtap: entered promiscuous mode [ 275.846049][T11510] veth1_macvtap: entered promiscuous mode [ 275.868299][T11510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.894207][T11510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.914485][ T6730] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.927467][ T6730] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.949305][ T6730] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.960379][ T6730] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.050556][ T6726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.083982][ T6726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.157409][ T6730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.168686][ T6730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.352176][T11729] bond0: Error: Cannot enslave bond to itself. [ 276.373450][T11729] bond0: Error: Cannot enslave bond to itself. [ 276.515692][ T52] Bluetooth: hci5: command tx timeout [ 276.552134][T11732] syz.2.1696 (11732) used greatest stack depth: 17072 bytes left [ 277.114607][T11763] __nla_validate_parse: 25 callbacks suppressed [ 277.114631][T11763] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1705'. [ 277.174469][T11763] --map-set only usable from mangle table [ 277.195750][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1705'. [ 277.246847][T11769] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 277.259174][T11769] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20003 [ 277.484661][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1712'. [ 277.921930][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 277.931344][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1716'. [ 277.993858][T11800] netlink: 'syz.5.1718': attribute type 4 has an invalid length. [ 278.006487][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.011880][T11800] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1718'. [ 278.018932][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.034192][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.042875][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.052800][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.129238][T11804] lo speed is unknown, defaulting to 1000 [ 278.169629][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 278.202916][T11807] ip6gre0: Master is either lo or non-ether device [ 278.412561][T11804] wlan1 speed is unknown, defaulting to 1000 [ 278.465032][T11817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1723'. [ 278.593439][ T5839] Bluetooth: hci5: command tx timeout [ 278.638826][T11822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 278.809447][T11804] chnl_net:caif_netlink_parms(): no params data found [ 279.014813][T11804] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.022279][T11804] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.029589][T11804] bridge_slave_0: entered allmulticast mode [ 279.038887][T11804] bridge_slave_0: entered promiscuous mode [ 279.048916][T11804] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.056425][T11804] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.064092][T11804] bridge_slave_1: entered allmulticast mode [ 279.073237][T11804] bridge_slave_1: entered promiscuous mode [ 279.129961][T11804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.156597][T11804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.276397][T11804] team0: Port device team_slave_0 added [ 279.295465][T11804] team0: Port device team_slave_1 added [ 279.383850][T11804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.398448][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.426141][T11804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.446951][T11804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.455572][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.483533][T11804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.599768][T11804] hsr_slave_0: entered promiscuous mode [ 279.612428][T11804] hsr_slave_1: entered promiscuous mode [ 279.619054][T11804] debugfs: 'hsr0' already exists in 'hsr' [ 279.627398][T11804] Cannot create hsr debugfs directory [ 280.112594][ T5839] Bluetooth: hci6: command tx timeout [ 280.133021][T11804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 280.178030][T11804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 280.191601][T11897] netlink: 'syz.5.1741': attribute type 8 has an invalid length. [ 280.202717][T11804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 280.226618][T11804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 280.450108][T11804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.494603][T11804] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.517398][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.524693][ T6734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.561713][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.568927][ T6730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.063511][T11942] tipc: Started in network mode [ 281.079833][T11942] tipc: Node identity , cluster identity 4711 [ 281.099878][T11942] tipc: Failed to obtain node identity [ 281.105651][T11942] tipc: Enabling of bearer rejected, failed to enable media [ 281.126211][T11942] syzkaller0: entered promiscuous mode [ 281.134143][T11942] syzkaller0: entered allmulticast mode [ 281.145835][T11942] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 281.214256][T11804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.273650][T11950] Bluetooth: MGMT ver 1.23 [ 281.294958][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 281.398470][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1754'. [ 281.886379][T11804] veth0_vlan: entered promiscuous mode [ 281.914659][T11804] veth1_vlan: entered promiscuous mode [ 281.977125][ T6730] nci: nci_ntf_packet: unknown ntf opcode 0x303 [ 281.989975][T11804] veth0_macvtap: entered promiscuous mode [ 282.004086][T11804] veth1_macvtap: entered promiscuous mode [ 282.027941][T11804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.043334][T11804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.072621][ T6734] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.083016][ T6734] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.102749][ T6734] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.112233][ T6734] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.191332][ T5839] Bluetooth: hci6: command tx timeout [ 282.852204][ T6730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.873758][ T6730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.935113][ T6730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.959368][ T6730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.116116][T12015] sctp: [Deprecated]: syz.3.1768 (pid 12015) Use of int in max_burst socket option deprecated. [ 283.116116][T12015] Use struct sctp_assoc_value instead [ 283.929333][T12035] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 283.978840][T12041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1775'. [ 284.167914][T12050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1779'. [ 284.271575][ T5839] Bluetooth: hci6: command tx timeout [ 284.444818][T12060] Cannot find del_set index 4 as target [ 284.977965][T12091] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 284.992206][T12091] bond1 (unregistering): Released all slaves [ 285.041316][T12095] syzkaller1: entered promiscuous mode [ 285.065034][T12095] syzkaller1: entered allmulticast mode [ 285.255503][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 285.300905][T12114] netlink: 'syz.3.1797': attribute type 5 has an invalid length. [ 285.334242][T12114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1797'. [ 285.356349][T12114] geneve2: entered promiscuous mode [ 285.364624][T12114] geneve2: entered allmulticast mode [ 285.383042][ T6726] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 285.394134][ T6726] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 285.403222][ T6726] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 285.793186][T12138] tipc: Enabling of bearer rejected, failed to enable media [ 285.860707][T12141] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 285.877063][T12141] bond1 (unregistering): Released all slaves [ 285.917260][T12142] tipc: Enabled bearer , priority 0 [ 286.029935][T12139] tipc: Disabling bearer [ 286.201182][T12162] netlink: 'syz.5.1812': attribute type 1 has an invalid length. [ 286.352981][ T5839] Bluetooth: hci6: command tx timeout [ 352.935229][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 352.968767][T12189] netlink: 'syz.6.1817': attribute type 1 has an invalid length. [ 352.987184][T12189] netlink: 'syz.6.1817': attribute type 1 has an invalid length. [ 353.119936][T12199] IPv6: sit2: Disabled Multicast RS [ 353.148045][T12199] sit2: entered allmulticast mode [ 353.167089][T12205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1821'. [ 353.344432][T12212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1824'. [ 353.394135][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 353.405751][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 353.417920][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 353.431508][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 353.439355][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 353.474548][T12219] netlink: 'syz.5.1826': attribute type 1 has an invalid length. [ 353.511334][T12219] netlink: 'syz.5.1826': attribute type 2 has an invalid length. [ 353.537966][T12213] lo speed is unknown, defaulting to 1000 [ 353.543314][T12222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.795589][T12240] netlink: 'syz.6.1830': attribute type 1 has an invalid length. [ 353.806071][T12240] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1830'. [ 353.855554][T12213] wlan1 speed is unknown, defaulting to 1000 [ 353.945572][T12246] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1832'. [ 353.949483][T12244] syzkaller1: entered promiscuous mode [ 353.955844][T12246] openvswitch: netlink: Message has 512 unknown bytes. [ 353.970288][T12244] syzkaller1: entered allmulticast mode [ 354.532012][T12259] netlink: 'syz.6.1835': attribute type 1 has an invalid length. [ 354.545672][ T5943] IPVS: starting estimator thread 0... [ 354.580690][T12213] chnl_net:caif_netlink_parms(): no params data found [ 354.655436][T12262] IPVS: using max 25 ests per chain, 60000 per kthread [ 354.713748][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1839'. [ 355.095511][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1845'. [ 355.124392][T12297] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1846'. [ 355.135992][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1845'. [ 355.181372][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 355.276056][T12213] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.284865][T12213] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.293122][T12213] bridge_slave_0: entered allmulticast mode [ 355.304686][T12213] bridge_slave_0: entered promiscuous mode [ 355.335765][T12213] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.366095][T12213] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.381790][T12213] bridge_slave_1: entered allmulticast mode [ 355.394240][T12213] bridge_slave_1: entered promiscuous mode [ 355.472400][ T52] Bluetooth: hci7: command tx timeout [ 355.520576][T12213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.585940][T12213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.686206][T12213] team0: Port device team_slave_0 added [ 355.709794][T12213] team0: Port device team_slave_1 added [ 355.774514][T12213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.801134][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.843814][T12213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.867740][T12213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.876815][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.904444][T12213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.039785][T12213] hsr_slave_0: entered promiscuous mode [ 356.051206][T12213] hsr_slave_1: entered promiscuous mode [ 356.057844][T12213] debugfs: 'hsr0' already exists in 'hsr' [ 356.064797][T12213] Cannot create hsr debugfs directory [ 356.172561][T12342] erspan0: entered promiscuous mode [ 356.181844][T12342] erspan0: entered allmulticast mode [ 356.449094][T12213] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 356.466229][T12213] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 356.487806][T12213] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 356.584873][T12213] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 356.610670][T12365] veth1_macvtap: left promiscuous mode [ 356.618180][T12365] macsec0: entered promiscuous mode [ 356.625165][T12365] macsec0: entered allmulticast mode [ 356.644016][T12364] veth1_macvtap: entered promiscuous mode [ 356.650221][T12364] veth1_macvtap: entered allmulticast mode [ 356.657590][T12364] macsec0: left promiscuous mode [ 356.663630][T12364] macsec0: left allmulticast mode [ 356.668803][T12364] veth1_macvtap: left allmulticast mode [ 356.848422][T12213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.895716][T12213] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.915438][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.922728][ T6736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.944898][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.952163][ T6735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.105325][T12391] lo speed is unknown, defaulting to 1000 [ 357.260506][T12395] netlink: 'syz.5.1876': attribute type 12 has an invalid length. [ 357.302808][T12213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.553329][ T52] Bluetooth: hci7: command tx timeout [ 357.871865][T12213] veth0_vlan: entered promiscuous mode [ 357.902363][T12213] veth1_vlan: entered promiscuous mode [ 358.009076][T12428] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 358.026490][T12213] veth0_macvtap: entered promiscuous mode [ 358.043992][T12213] veth1_macvtap: entered promiscuous mode [ 358.100414][T12213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.137060][T12213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.172498][ T6734] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.200867][ T6734] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.236614][ T6734] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.273753][ T6734] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.419891][T12443] __nla_validate_parse: 8 callbacks suppressed [ 358.419913][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1888'. [ 358.458929][T12446] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 358.481725][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1888'. [ 358.487258][T12446] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 358.504996][ T6736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.513318][ T6736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.668177][T12443] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1888'. [ 358.676876][T12458] openvswitch: netlink: Message has 4 unknown bytes. [ 358.688893][ T6729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.707866][ T6729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.741527][T12457] syzkaller0: entered promiscuous mode [ 358.757315][T12457] syzkaller0: entered allmulticast mode [ 358.808935][T12461] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1894'. [ 358.858696][T12463] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1895'. [ 358.885304][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1895'. [ 358.937400][T12468] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1896'. [ 358.970023][T12468] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1896'. [ 358.990552][T12468] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1896'. [ 359.635244][ T52] Bluetooth: hci7: command tx timeout [ 359.867856][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1906'. [ 360.058678][T12502] nbd: couldn't find device at index 131072 [ 360.326943][T12513] netlink: 'syz.3.1912': attribute type 1 has an invalid length. [ 360.496934][T12517] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 360.518477][T12517] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 360.551924][T12513] vlan3: entered allmulticast mode [ 360.557096][T12513] bridge0: entered allmulticast mode [ 360.565123][T12513] bridge0: entered promiscuous mode [ 360.576560][T12513] bridge0: left promiscuous mode [ 360.586018][T12513] bond6: (slave vlan3): making interface the new active one [ 360.595612][T12513] bridge0: entered promiscuous mode [ 360.602807][T12513] bond6: (slave vlan3): Enslaving as an active interface with an up link [ 360.621672][T12519] team0: Device ip6gre1 is of different type [ 360.803075][T12537] sch_tbf: burst 127 is lower than device syzkaller0 mtu (299) ! [ 361.711027][ T52] Bluetooth: hci7: command tx timeout [ 361.758938][T12601] tipc: Started in network mode [ 361.776313][T12601] tipc: Node identity , cluster identity 4711 [ 361.817284][T12601] tipc: Failed to obtain node identity [ 361.848053][T12601] tipc: Enabling of bearer rejected, failed to enable media [ 361.903256][T12605] gtp0: entered promiscuous mode [ 361.908287][T12605] gtp0: entered allmulticast mode [ 362.118657][T12624] bridge_slave_1: left allmulticast mode [ 362.125983][T12624] bridge_slave_1: left promiscuous mode [ 362.132864][T12624] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.147886][T12624] bridge_slave_0: left allmulticast mode [ 362.157767][T12624] bridge_slave_0: left promiscuous mode [ 362.166097][T12624] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.573190][T12655] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 363.402448][T12704] netlink: 'syz.2.1965': attribute type 23 has an invalid length. [ 363.684808][T12727] netlink: 'syz.5.1968': attribute type 18 has an invalid length. [ 363.729293][T12730] netlink: 'syz.6.1970': attribute type 1 has an invalid length. [ 363.735067][T12714] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.749906][T12714] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.791351][T12714] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.800915][T12714] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.969782][T12736] syzkaller0: entered promiscuous mode [ 363.976384][T12730] __nla_validate_parse: 14 callbacks suppressed [ 363.976408][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'. [ 363.994217][T12736] syzkaller0: entered allmulticast mode [ 363.998405][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1971'. [ 364.016164][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1974'. [ 364.029368][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1974'. [ 364.105003][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1974'. [ 364.105214][T12713] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.146396][T12713] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.152524][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1974'. [ 364.167842][T12709] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.191976][T12709] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.964639][T12763] netlink: 'syz.2.1981': attribute type 21 has an invalid length. [ 365.000036][T12763] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.074335][T12763] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1981'. [ 365.087742][T12771] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1981'. [ 365.102600][T12763] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1981'. [ 365.138353][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1984'. [ 366.170335][T12853] netlink: 'syz.3.2007': attribute type 8 has an invalid length. [ 366.222970][T12861] netlink: 'syz.3.2007': attribute type 8 has an invalid length. [ 367.080700][T12903] nbd: must specify a size in bytes for the device [ 367.217438][ T5943] lo speed is unknown, defaulting to 1000 [ 367.229438][T12909] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 368.297800][T12969] sit2: entered promiscuous mode [ 368.305616][T12969] sit2: entered allmulticast mode [ 368.374418][T12981] tipc: Started in network mode [ 368.379399][T12981] tipc: Node identity b2b76fc351f6, cluster identity 4711 [ 368.423286][T12981] tipc: Enabled bearer , priority 0 [ 368.443842][T12989] syzkaller0: entered promiscuous mode [ 368.449382][T12989] syzkaller0: entered allmulticast mode [ 368.504735][T12981] tipc: Resetting bearer [ 368.524076][T12997] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 368.537781][T12997] 0ªî{X¹¦: entered allmulticast mode [ 368.546445][T12997] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 368.566324][T12998] tipc: Started in network mode [ 368.573887][T12998] tipc: Node identity , cluster identity 4711 [ 368.580058][T12998] tipc: Failed to obtain node identity [ 368.597772][T12998] tipc: Enabling of bearer rejected, failed to enable media [ 368.689937][T12977] tipc: Resetting bearer [ 368.712790][T12977] tipc: Disabling bearer [ 368.892456][T13015] netlink: 'syz.2.2049': attribute type 4 has an invalid length. [ 368.982887][T13019] __nla_validate_parse: 20 callbacks suppressed [ 368.982911][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2050'. [ 369.172848][T13034] nbd: device at index 7 is going down [ 369.175228][T13032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2054'. [ 369.472123][T13046] netlink: 'syz.5.2060': attribute type 1 has an invalid length. [ 369.491683][T13046] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2060'. [ 369.514224][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2060'. [ 369.630402][T13059] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 369.794022][T13069] pim6reg1: entered promiscuous mode [ 369.804241][T13069] pim6reg1: entered allmulticast mode [ 370.324848][T13092] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2075'. [ 370.341640][T13092] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2075'. [ 370.496379][T13102] bond2: Removing last ns target with arp_interval on [ 370.758471][T13117] sctp: [Deprecated]: syz.3.2082 (pid 13117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.758471][T13117] Use struct sctp_sack_info instead [ 370.855081][T13115] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2081'. [ 370.938028][T13126] syzkaller0: entered promiscuous mode [ 370.945119][T13126] syzkaller0: entered allmulticast mode [ 371.265613][T13145] syz_tun: entered allmulticast mode [ 371.302891][T13145] dvmrp1: entered allmulticast mode [ 371.314585][T13149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2092'. [ 371.388049][T13144] syz_tun: left allmulticast mode [ 371.452981][T13151] team0: Port device 0! removed [ 371.513265][T13151] bond0: (slave bond_slave_0): Releasing backup interface [ 371.566586][T13151] bond0: (slave bond_slave_1): Releasing backup interface [ 371.584402][T13168] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 371.614594][T13151] team0: Port device team_slave_0 removed [ 371.631474][T13151] team0: Port device team_slave_1 removed [ 371.638469][T13151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.649853][T13151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.662534][T13151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.685262][T13158] lo: entered allmulticast mode [ 371.692422][T13158] tunl0: entered allmulticast mode [ 371.698780][T13158] gre0: entered allmulticast mode [ 371.706868][T13158] gretap0: entered allmulticast mode [ 371.714274][T13158] erspan0: left promiscuous mode [ 371.723149][T13158] ip_vti0: entered allmulticast mode [ 371.729859][T13158] ip6_vti0: entered allmulticast mode [ 371.737139][T13158] sit0: entered allmulticast mode [ 371.748657][T13158] ip6tnl0: entered allmulticast mode [ 371.762328][T13158] ip6gre0: entered allmulticast mode [ 371.769131][T13158] syz_tun: entered allmulticast mode [ 371.777880][T13158] ip6gretap0: entered allmulticast mode [ 371.785889][T13158] bridge0: entered allmulticast mode [ 371.933799][T13178] bridge0: port 1(ipvlan4) entered blocking state [ 371.940667][T13178] bridge0: port 1(ipvlan4) entered disabled state [ 371.950215][T13178] ipvlan4: entered allmulticast mode [ 371.958563][T13178] ipvlan4: left allmulticast mode [ 372.317162][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2107'. [ 372.358960][T13203] netlink: 'syz.3.2109': attribute type 11 has an invalid length. [ 372.374966][T13203] netlink: 'syz.3.2109': attribute type 11 has an invalid length. [ 372.384169][T13203] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2109'. [ 373.069149][T13241] netlink: 'syz.5.2119': attribute type 5 has an invalid length. [ 373.098639][T13241] geneve2: entered promiscuous mode [ 373.105521][T13241] geneve2: entered allmulticast mode [ 373.113638][T12709] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 373.125338][T12709] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 373.139918][T12709] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 373.153097][T12709] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 373.598407][T13271] tap0: tun_chr_ioctl cmd 1074025672 [ 373.606222][T13271] tap0: ignored: set checksum disabled [ 374.011290][T13288] __nla_validate_parse: 6 callbacks suppressed [ 374.011312][T13288] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2137'. [ 374.602095][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2152'. [ 374.827357][T13352] xt_socket: unknown flags 0x50 [ 374.843949][T13354] tipc: New replicast peer: 255.255.255.255 [ 374.852559][T13354] tipc: Enabled bearer , priority 10 [ 374.861898][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2157'. [ 374.874190][T13354] netlink: 'syz.6.2157': attribute type 1 has an invalid length. [ 374.884544][T13354] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2157'. [ 374.894748][T13354] nbd: illegal input index 1048576 [ 375.960869][ T24] tipc: Node number set to 3812716483 [ 376.406964][T13411] bond1 (unregistering): Released all slaves [ 376.788482][T13429] syzkaller0: left promiscuous mode [ 376.828739][T13429] syzkaller0: left allmulticast mode [ 376.933937][T13435] netlink: 'syz.5.2181': attribute type 1 has an invalid length. [ 376.979080][T13435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2181'. [ 377.040659][T13442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.163977][T13452] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2187'. [ 377.183229][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2187'. [ 377.212558][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2186'. [ 377.789143][T13487] netlink: ct family unspecified [ 377.795971][T13487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.881156][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'. [ 377.926143][T13500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2199'. [ 377.992889][T13506] tipc: Enabled bearer , priority 0 [ 378.020306][T13506] syzkaller0: entered promiscuous mode [ 378.036128][T13506] syzkaller0: entered allmulticast mode [ 378.094725][T13506] tipc: Resetting bearer [ 378.118149][T13501] tipc: Resetting bearer [ 378.162427][T13501] tipc: Disabling bearer [ 378.444594][T13532] syz.5.2206: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 378.444959][T13539] netlink: 'syz.2.2210': attribute type 1 has an invalid length. [ 378.476939][T13532] CPU: 0 UID: 0 PID: 13532 Comm: syz.5.2206 Not tainted syzkaller #0 PREEMPT(full) [ 378.476967][T13532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.476988][T13532] Call Trace: [ 378.476998][T13532] [ 378.477008][T13532] dump_stack_lvl+0x189/0x250 [ 378.477042][T13532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.477066][T13532] ? __pfx__printk+0x10/0x10 [ 378.477088][T13532] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 378.477118][T13532] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 378.477151][T13532] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 378.477185][T13532] warn_alloc+0x214/0x310 [ 378.477223][T13532] ? __pfx_warn_alloc+0x10/0x10 [ 378.477266][T13532] ? __get_vm_area_node+0x28f/0x300 [ 378.477297][T13532] ? packet_set_ring+0x6f3/0x2120 [ 378.477344][T13532] __vmalloc_node_range_noprof+0x690/0x12d0 [ 378.477405][T13532] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 378.477439][T13532] ? alloc_pages_mpol+0x3cd/0x4a0 [ 378.477477][T13532] ? packet_set_ring+0x6f3/0x2120 [ 378.477507][T13532] vzalloc_noprof+0xb2/0xf0 [ 378.477535][T13532] ? packet_set_ring+0x6f3/0x2120 [ 378.477568][T13532] packet_set_ring+0x6f3/0x2120 [ 378.477623][T13532] ? __pfx_packet_set_ring+0x10/0x10 [ 378.477678][T13532] ? _copy_from_user+0x94/0xb0 [ 378.477704][T13532] packet_setsockopt+0xc5a/0x12c0 [ 378.477739][T13532] ? __pfx_packet_setsockopt+0x10/0x10 [ 378.477769][T13532] ? __pfx_css_rstat_updated+0x10/0x10 [ 378.477811][T13532] ? aa_sk_perm+0x81e/0x950 [ 378.477845][T13532] ? __pfx_aa_sk_perm+0x10/0x10 [ 378.477875][T13532] ? aa_sock_opt_perm+0xff/0x1b0 [ 378.477908][T13532] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 378.477929][T13532] ? __pfx_packet_setsockopt+0x10/0x10 [ 378.477963][T13532] do_sock_setsockopt+0x179/0x1b0 [ 378.477994][T13532] __x64_sys_setsockopt+0x13f/0x1b0 [ 378.478026][T13532] do_syscall_64+0xfa/0xfa0 [ 378.478052][T13532] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.478079][T13532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.478101][T13532] ? clear_bhb_loop+0x60/0xb0 [ 378.478128][T13532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.478158][T13532] RIP: 0033:0x7f5de238eec9 [ 378.478178][T13532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.478197][T13532] RSP: 002b:00007f5de32e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 378.478220][T13532] RAX: ffffffffffffffda RBX: 00007f5de25e6090 RCX: 00007f5de238eec9 [ 378.478235][T13532] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000008 [ 378.478249][T13532] RBP: 00007f5de2411f91 R08: 000000000000001c R09: 0000000000000000 [ 378.478262][T13532] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 378.478276][T13532] R13: 00007f5de25e6128 R14: 00007f5de25e6090 R15: 00007fffe46641d8 [ 378.478313][T13532] [ 378.478332][T13532] Mem-Info: [ 378.553596][T13546] netlink: 'syz.2.2210': attribute type 1 has an invalid length. [ 378.563571][T13532] active_anon:5754 inactive_anon:0 isolated_anon:0 [ 378.563571][T13532] active_file:3082 inactive_file:39960 isolated_file:0 [ 378.563571][T13532] unevictable:768 dirty:85 writeback:0 [ 378.563571][T13532] slab_reclaimable:12477 slab_unreclaimable:117162 [ 378.563571][T13532] mapped:44489 shmem:1407 pagetables:1309 [ 378.563571][T13532] sec_pagetables:0 bounce:0 [ 378.563571][T13532] kernel_misc_reclaimable:0 [ 378.563571][T13532] free:1271646 free_pcp:14109 free_cma:0 [ 378.881740][T13532] Node 0 active_anon:23216kB inactive_anon:0kB active_file:12328kB inactive_file:159640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:177956kB dirty:340kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14976kB pagetables:5168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 378.943609][T13532] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 378.985602][T13532] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 379.019457][T13532] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 379.027033][T13532] Node 0 DMA32 free:1177928kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25816kB inactive_anon:0kB active_file:12328kB inactive_file:159640kB unevictable:1536kB writepending:340kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:35596kB local_pcp:22168kB free_cma:0kB [ 379.109748][T13532] lowmem_reserve[]: 0 0 1 1 1 [ 379.115263][T13532] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 379.150580][T13532] lowmem_reserve[]: 0 0 0 0 0 [ 379.192940][T13532] Node 1 Normal free:3890596kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19456kB local_pcp:11712kB free_cma:0kB [ 379.245263][T13532] lowmem_reserve[]: 0 0 0 0 0 [ 379.250243][T13532] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 379.264999][T13532] Node 0 DMA32: 2*4kB (UM) 1*8kB (E) 4*16kB (U) 814*32kB (U) 417*64kB (U) 214*128kB (U) 86*256kB (U) 30*512kB (UME) 15*1024kB (UE) 5*2048kB (UME) 249*4096kB (UM) = 1163088kB [ 379.335599][T13532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 379.349131][T13532] Node 1 Normal: 195*4kB (U) 43*8kB (UME) 44*16kB (UME) 102*32kB (UME) 29*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3890596kB [ 379.372462][T13532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.382155][T13532] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.393018][T13532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.402778][T13532] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.412210][T13532] 48519 total pagecache pages [ 379.416936][T13532] 0 pages in swap cache [ 379.421540][T13532] Free swap = 124996kB [ 379.428160][T13532] Total swap = 124996kB [ 379.437886][T13532] 2097051 pages RAM [ 379.446236][T13562] __nla_validate_parse: 1 callbacks suppressed [ 379.446259][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2213'. [ 379.448603][T13532] 0 pages HighMem/MovableOnly [ 379.453619][T13562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2213'. [ 379.463773][T13532] 424543 pages reserved [ 379.468025][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2213'. [ 379.476163][T13532] 0 pages cma reserved [ 379.496000][T13562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2213'. [ 379.506783][T13562] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2213'. [ 379.608396][T13568] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2215'. [ 379.609073][T13563] syzkaller1: entered promiscuous mode [ 379.639949][T13563] syzkaller1: entered allmulticast mode [ 379.864923][T13578] syzkaller0: entered promiscuous mode [ 379.870595][T13578] syzkaller0: entered allmulticast mode [ 379.889874][T13579] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2219'. [ 380.081023][T13589] syzkaller0: entered promiscuous mode [ 380.087203][T13589] syzkaller0: entered allmulticast mode [ 380.299762][T13600] netlink: 'syz.6.2225': attribute type 1 has an invalid length. [ 380.319967][T13601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2226'. [ 380.327719][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2227'. [ 380.388002][T13607] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 380.404243][T13607] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 380.455468][T13600] vlan2: entered allmulticast mode [ 380.464810][T13600] bridge0: entered promiscuous mode [ 380.472604][T13600] bridge0: left promiscuous mode [ 380.479989][T13600] bond3: (slave vlan2): making interface the new active one [ 380.491619][T13600] bridge0: entered promiscuous mode [ 380.499098][T13600] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 380.509198][T13610] C: renamed from team_slave_0 (while UP) [ 380.534581][T13610] netlink: 'syz.5.2228': attribute type 1 has an invalid length. [ 380.553828][T13610] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 380.577401][T13616] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2229'. [ 380.679654][T13620] tipc: Enabled bearer , priority 0 [ 380.692269][T13620] syzkaller0: entered promiscuous mode [ 380.697837][T13620] syzkaller0: entered allmulticast mode [ 380.736520][T13620] tipc: Resetting bearer [ 380.749675][T13620] tipc: Enabling of bearer rejected, already enabled [ 380.809517][T13620] tipc: Resetting bearer [ 380.840393][T13620] tipc: Disabling bearer [ 381.185852][T13650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.230075][T13650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.243942][T13650] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 381.257426][T13650] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 381.654283][T13673] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 381.964120][T13683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 381.965285][T13689] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 381.996316][T13689] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 382.007308][T13683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.016864][T13689] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 382.026560][T13683] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 382.046192][T13683] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 382.355583][T13713] syzkaller0: entered promiscuous mode [ 382.361817][T13713] syzkaller0: entered allmulticast mode [ 382.555670][T13724] netlink: 'syz.3.2262': attribute type 28 has an invalid length. [ 382.565172][T13724] netlink: 'syz.3.2262': attribute type 3 has an invalid length. [ 382.588058][T13727] xt_policy: output policy not valid in PREROUTING and INPUT [ 382.753407][T13736] tipc: Enabled bearer , priority 0 [ 382.761210][T13736] syzkaller0: entered promiscuous mode [ 382.766845][T13736] syzkaller0: entered allmulticast mode [ 382.782396][T13736] tipc: Resetting bearer [ 382.792548][T13733] tipc: Resetting bearer [ 382.822081][T13733] tipc: Disabling bearer [ 383.306463][T13751] bond5: entered promiscuous mode [ 383.787308][T13775] lo: left allmulticast mode [ 383.805516][T13775] tunl0: left allmulticast mode [ 383.825895][T13775] gre0: left allmulticast mode [ 383.846789][T13775] gretap0: left allmulticast mode [ 383.865877][T13775] erspan0: left allmulticast mode [ 383.873375][T13775] ip_vti0: left allmulticast mode [ 383.886290][T13775] ip6_vti0: left allmulticast mode [ 383.924441][T13775] sit0: left allmulticast mode [ 383.946991][T13775] ip6tnl0: left allmulticast mode [ 383.972030][T13775] ip6gre0: left allmulticast mode [ 383.983826][T13775] syz_tun: left allmulticast mode [ 384.002633][T13775] ip6gretap0: left allmulticast mode [ 384.040482][T13775] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.048343][T13775] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.274215][T13775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.292803][T13775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.436283][T13775] gtp0: left promiscuous mode [ 384.442025][T13775] gtp0: left allmulticast mode [ 384.456099][T13791] __nla_validate_parse: 12 callbacks suppressed [ 384.456120][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2280'. [ 384.459533][T13775] vlan2: left allmulticast mode [ 384.476720][T13775] bridge0: left allmulticast mode [ 384.483046][T13775] bond5: left promiscuous mode [ 384.543545][T12709] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.554196][T13791] veth0: entered promiscuous mode [ 384.560380][T13791] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2280'. [ 384.670221][T12709] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.891730][T12709] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.918442][T12709] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.063694][T13806] netlink: 1420 bytes leftover after parsing attributes in process `syz.6.2283'. [ 385.133622][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2283'. [ 385.265659][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 385.276544][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 385.286350][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 385.297845][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 385.310475][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 385.484314][T13822] tipc: Started in network mode [ 385.515452][T13822] tipc: Node identity , cluster identity 4711 [ 385.528047][T13822] tipc: Failed to obtain node identity [ 385.561721][T13822] tipc: Enabling of bearer rejected, failed to enable media [ 385.670087][T13823] lo speed is unknown, defaulting to 1000 [ 386.123018][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2290'. [ 386.132262][T13849] Unsupported xt match [ 386.132277][T13849] unable to load match [ 386.517687][T13871] net veth1_virt_wifi .: renamed from virt_wifi0 [ 386.559039][T13873] netlink: 'syz.5.2295': attribute type 1 has an invalid length. [ 386.602661][T13873] netlink: 'syz.5.2295': attribute type 4 has an invalid length. [ 386.616979][T13873] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2295'. [ 386.788486][T13886] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 386.999419][T13823] chnl_net:caif_netlink_parms(): no params data found [ 387.239941][T13908] tipc: Started in network mode [ 387.252533][T13908] tipc: Node identity , cluster identity 4711 [ 387.261841][T13908] tipc: Failed to obtain node identity [ 387.268937][T13908] tipc: Enabling of bearer rejected, failed to enable media [ 387.308995][T13914] syzkaller0: entered promiscuous mode [ 387.318281][T13914] syzkaller0: entered allmulticast mode [ 387.327733][T13902] tipc: Started in network mode [ 387.348352][T13902] tipc: Node identity , cluster identity 4711 [ 387.363957][T13902] tipc: Failed to obtain node identity [ 387.376307][T13902] tipc: Enabling of bearer rejected, failed to enable media [ 387.393380][ T5839] Bluetooth: hci8: command tx timeout [ 387.562739][T13823] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.570571][T13823] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.578839][T13823] bridge_slave_0: entered allmulticast mode [ 387.587275][T13823] bridge_slave_0: entered promiscuous mode [ 387.602478][T13823] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.610620][T13823] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.620341][T13823] bridge_slave_1: entered allmulticast mode [ 387.630082][T13823] bridge_slave_1: entered promiscuous mode [ 387.769434][T13823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.833088][T13823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.967529][T13823] team0: Port device team_slave_0 added [ 387.992983][T13823] team0: Port device team_slave_1 added [ 388.104225][T13823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.119227][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.167860][T13823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.227164][T13949] wlan1 speed is unknown, defaulting to 1000 [ 388.234842][T13823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.242041][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.300921][T13823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.323437][T13949] wlan1 speed is unknown, defaulting to 1000 [ 388.330416][T13949] wlan1 speed is unknown, defaulting to 1000 [ 388.431773][T13949] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 388.448431][T13958] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2309'. [ 388.520875][T13823] hsr_slave_0: entered promiscuous mode [ 388.528589][T13823] hsr_slave_1: entered promiscuous mode [ 388.556572][T13823] debugfs: 'hsr0' already exists in 'hsr' [ 388.571619][T13823] Cannot create hsr debugfs directory [ 388.577414][T13949] wlan1 speed is unknown, defaulting to 1000 [ 388.641711][T13949] wlan1 speed is unknown, defaulting to 1000 [ 388.652774][T13949] wlan1 speed is unknown, defaulting to 1000 [ 388.668742][T13949] wlan1 speed is unknown, defaulting to 1000 [ 388.743647][T13949] wlan1 speed is unknown, defaulting to 1000 [ 388.757681][T13949] wlan1 speed is unknown, defaulting to 1000 [ 388.803667][T13949] wlan1 speed is unknown, defaulting to 1000 [ 388.822317][T13949] wlan1 speed is unknown, defaulting to 1000 [ 388.860236][T13949] wlan1 speed is unknown, defaulting to 1000 [ 389.213704][T13823] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 389.263477][T13823] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 389.288947][T13823] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 389.373867][T14007] Bluetooth: hci0: invalid len left 70, exp >= 163 [ 389.393863][T14007] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2317'. [ 389.470983][ T5839] Bluetooth: hci8: command tx timeout [ 389.866141][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2319'. [ 390.214842][T13823] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 390.376574][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2322'. [ 390.476814][T13823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.507345][T13823] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.523896][T13997] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.531166][T13997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.552551][T13997] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.559746][T13997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.749350][T14056] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.2325'. [ 390.850127][T14054] syzkaller1: entered promiscuous mode [ 390.861213][T14054] syzkaller1: entered allmulticast mode [ 391.072777][T13823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.441770][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2332'. [ 391.551068][ T5839] Bluetooth: hci8: command tx timeout [ 391.630300][T14097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2335'. [ 391.658915][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2335'. [ 391.712311][T14107] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2337'. [ 391.750395][T13823] veth0_vlan: entered promiscuous mode [ 391.780098][T13823] veth1_vlan: entered promiscuous mode [ 391.884433][T13823] veth0_macvtap: entered promiscuous mode [ 391.916576][T13823] veth1_macvtap: entered promiscuous mode [ 391.938975][T14116] netlink: 'syz.5.2341': attribute type 2 has an invalid length. [ 391.948013][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2341'. [ 391.968448][T13823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.977283][T14116] netlink: 'syz.5.2341': attribute type 1 has an invalid length. [ 391.996488][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2341'. [ 391.999049][T13823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.020546][T14118] openvswitch: netlink: Flow key attr not present in new flow. [ 392.046550][ T6711] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.072162][ T6711] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.107280][ T6711] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.129015][T14124] netlink: 'syz.6.2344': attribute type 10 has an invalid length. [ 392.141982][ T6711] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.180601][T14124] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 392.212400][T14127] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 392.220065][T14127] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 392.339936][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.349611][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.394561][T14132] netlink: 'syz.3.2346': attribute type 4 has an invalid length. [ 392.428765][ T6711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.437609][ T6711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.458212][T14136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.483816][T14132] netlink: 'syz.3.2346': attribute type 4 has an invalid length. [ 392.683440][T14151] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2352'. [ 393.179212][T14178] netlink: 'syz.8.2361': attribute type 3 has an invalid length. [ 393.325441][T14178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.342549][T14178] batadv_slave_1: entered promiscuous mode [ 393.349553][T14178] batadv_slave_1: entered allmulticast mode [ 393.631111][ T5839] Bluetooth: hci8: command tx timeout [ 393.747231][T14215] tipc: Started in network mode [ 393.753731][T14215] tipc: Node identity , cluster identity 4711 [ 393.762315][T14215] tipc: Failed to obtain node identity [ 393.768043][T14215] tipc: Enabling of bearer rejected, failed to enable media [ 393.780200][T14215] sch_tbf: burst 127 is lower than device syzkaller0 mtu (299) ! [ 394.898579][T14243] bond6: Unable to set up delay as MII monitoring is disabled [ 394.910539][T14243] bond6 (unregistering): Released all slaves [ 395.331805][T14269] netlink: 'syz.6.2388': attribute type 2 has an invalid length. [ 395.349877][T14269] __nla_validate_parse: 4 callbacks suppressed [ 395.349899][T14269] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2388'. [ 395.489968][ T5837] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 395.503161][ T5837] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 395.514270][ T5837] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 395.546512][ T5837] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 395.564110][ T5837] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 395.607384][T14282] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2391'. [ 395.669137][T14281] team_slave_0: mtu greater than device maximum [ 395.683280][T14275] lo speed is unknown, defaulting to 1000 [ 395.790584][T14281] syzkaller0: entered allmulticast mode [ 396.353479][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 396.415243][T14303] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2397'. [ 396.425801][T14303] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2397'. [ 396.435728][T14303] netlink: 'syz.5.2397': attribute type 5 has an invalid length. [ 396.445279][T14303] netlink: 'syz.5.2397': attribute type 6 has an invalid length. [ 396.453465][T14303] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2397'. [ 397.451739][T14275] wlan1 speed is unknown, defaulting to 1000 [ 397.577648][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2399'. [ 397.619499][T14311] bridge0: entered promiscuous mode [ 397.628657][T14311] macsec1: entered promiscuous mode [ 397.635009][ T5839] Bluetooth: hci9: command tx timeout [ 397.639483][T14311] macsec1: entered allmulticast mode [ 397.649789][T14311] bridge0: entered allmulticast mode [ 397.666404][T14311] bridge0: port 3(macsec1) entered blocking state [ 397.691531][T14311] bridge0: port 3(macsec1) entered disabled state [ 397.724035][T14311] bridge0: left allmulticast mode [ 397.731961][T14311] bridge0: left promiscuous mode [ 397.793346][T14318] nft_compat: unsupported protocol 0 [ 397.997991][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2406'. [ 398.019670][T14328] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2406'. [ 398.079989][T14328] netlink: 'syz.5.2406': attribute type 5 has an invalid length. [ 398.140057][T14275] chnl_net:caif_netlink_parms(): no params data found [ 398.216767][T14343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2409'. [ 398.243085][T14342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.253669][T14343] IPVS: Unknown mcast interface: vcan0 [ 398.270111][T14342] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 398.276969][T14342] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 398.348472][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2410'. [ 398.434073][T14275] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.445208][T14275] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.453947][T14275] bridge_slave_0: entered allmulticast mode [ 398.464715][T14275] bridge_slave_0: entered promiscuous mode [ 398.475185][T14275] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.483259][T14275] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.490671][T14275] bridge_slave_1: entered allmulticast mode [ 398.499503][T14275] bridge_slave_1: entered promiscuous mode [ 398.602628][T14354] netlink: 'syz.5.2413': attribute type 2 has an invalid length. [ 398.624307][T14275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.647845][T14275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.778322][T14275] team0: Port device team_slave_0 added [ 398.806466][T14371] lo speed is unknown, defaulting to 1000 [ 398.824051][T14275] team0: Port device team_slave_1 added [ 398.919464][T14275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.937771][T14275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.994541][T14275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.171772][T14275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.179058][T14275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.206586][T14275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.265755][T14371] wlan1 speed is unknown, defaulting to 1000 [ 399.586606][T14275] hsr_slave_0: entered promiscuous mode [ 399.614209][T14275] hsr_slave_1: entered promiscuous mode [ 399.632258][T14275] debugfs: 'hsr0' already exists in 'hsr' [ 399.649577][T14275] Cannot create hsr debugfs directory [ 399.712761][ T52] Bluetooth: hci9: command tx timeout [ 400.313771][T14437] veth1_virt_wifi: entered allmulticast mode [ 400.621094][T14275] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 400.649336][T14275] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 400.650995][T14449] netlink: 'syz.5.2440': attribute type 23 has an invalid length. [ 400.697562][T14275] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 400.718471][T14275] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 400.740393][T14453] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 401.103705][T14275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.143268][T14275] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.179963][T13991] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.187217][T13991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.215960][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.223243][ T6720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.369146][T14275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.407787][T14275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.428227][T14491] netlink: 'syz.6.2451': attribute type 1 has an invalid length. [ 401.475055][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 401.654450][T14497] netlink: 'syz.3.2454': attribute type 21 has an invalid length. [ 401.684303][T14497] netlink: 'syz.3.2454': attribute type 22 has an invalid length. [ 401.702960][T14497] netlink: 'syz.3.2454': attribute type 23 has an invalid length. [ 401.736536][T14497] netlink: 'syz.3.2454': attribute type 25 has an invalid length. [ 401.746719][T14497] __nla_validate_parse: 4 callbacks suppressed [ 401.746737][T14497] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2454'. [ 401.774360][T14504] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2456'. [ 401.791119][ T5839] Bluetooth: hci9: command tx timeout [ 401.845190][T14275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.986897][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2457'. [ 401.997792][T14511] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2457'. [ 402.084580][T14515] IPVS: set_ctl: invalid protocol: 137 172.20.20.36:20004 [ 402.326947][T14529] netlink: 'syz.5.2463': attribute type 1 has an invalid length. [ 402.342048][T14528] IPVS: set_ctl: invalid protocol: 92 10.1.1.0:20003 [ 402.352929][T14527] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2462'. [ 402.513681][T14275] veth0_vlan: entered promiscuous mode [ 402.586643][T14275] veth1_vlan: entered promiscuous mode [ 402.635662][T14542] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2467'. [ 402.703623][T14544] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2467'. [ 402.729329][T14275] veth0_macvtap: entered promiscuous mode [ 402.750205][T14275] veth1_macvtap: entered promiscuous mode [ 402.821390][T14275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.867487][T14275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.909004][T13991] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.923246][T12713] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.944088][T12713] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.954084][T12713] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.200578][T12713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.209099][T12713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.332420][T13997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.343850][T13997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.423068][T14573] netlink: 'syz.5.2476': attribute type 6 has an invalid length. [ 403.442333][T14575] tipc: Started in network mode [ 403.447595][T14575] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 403.461888][T14575] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 403.475749][T14575] tipc: Enabled bearer , priority 10 [ 403.484289][T14573] netlink: 'syz.5.2476': attribute type 6 has an invalid length. [ 403.872110][ T5839] Bluetooth: hci9: command tx timeout [ 403.978044][T14598] x_tables: duplicate underflow at hook 2 [ 404.276614][T14600] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2485'. [ 404.581000][ T5946] tipc: Node number set to 1 [ 404.977730][T14634] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2497'. [ 405.135599][T14643] netlink: 'syz.5.2499': attribute type 10 has an invalid length. [ 405.144416][T14642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.161480][T14642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.186919][T14643] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 405.252685][T14642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.954365][ T5839] Bluetooth: hci9: command tx timeout [ 406.070415][T14694] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2517'. [ 406.124091][T14694] netlink: 'syz.5.2517': attribute type 1 has an invalid length. [ 406.627356][T14737] netlink: 'syz.3.2528': attribute type 1 has an invalid length. [ 407.073878][T14760] __nla_validate_parse: 6 callbacks suppressed [ 407.073899][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2537'. [ 407.116488][T14762] netlink: 'syz.9.2538': attribute type 1 has an invalid length. [ 407.127813][T14760] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.135743][T14760] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.454499][T14787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2542'. [ 407.526355][T14767] veth3: entered promiscuous mode [ 407.568647][T14771] vlan2: entered allmulticast mode [ 407.574108][T14771] team_slave_1: entered allmulticast mode [ 407.753875][T14795] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2545'. [ 407.934238][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2550'. [ 407.972050][T14808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2550'. [ 407.990291][T14816] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2552'. [ 408.000135][T14809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2550'. [ 408.085971][T14821] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2554'. [ 408.175919][T14821] xt_hashlimit: size too large, truncated to 1048576 [ 408.196969][T14825] netlink: 'syz.3.2555': attribute type 4 has an invalid length. [ 408.222527][T14828] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2557'. [ 408.240534][T14826] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2556'. [ 408.280497][T14828] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 408.283015][T14831] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 408.518698][T14842] rdma_rxe: rxe_newlink: failed to add lo [ 408.548252][T14843] netlink: 'syz.8.2559': attribute type 39 has an invalid length. [ 408.624749][T14843] veth0_macvtap: left promiscuous mode [ 409.265744][T14891] tipc: Enabled bearer , priority 0 [ 409.325561][T14891] netlink: 'syz.6.2575': attribute type 1 has an invalid length. [ 409.553112][T14907] netlink: 'syz.5.2578': attribute type 10 has an invalid length. [ 409.579600][T14890] tipc: Disabling bearer [ 409.765026][T14907] sctp: [Deprecated]: syz.5.2578 (pid 14907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.765026][T14907] Use struct sctp_sack_info instead [ 409.849614][T14927] rdma_rxe: rxe_newlink: failed to add lo [ 409.857624][T14930] 8021q: VLANs not supported on ip6gre0 [ 410.110514][T14952] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 4, id = 0 [ 410.283490][T14960] netlink: 'syz.9.2594': attribute type 83 has an invalid length. [ 410.345943][T14917] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 410.358956][T14966] Cannot find set identified by id 65534 to match [ 410.694189][T14980] netlink: 'syz.5.2601': attribute type 1 has an invalid length. [ 410.837890][T14991] bridge_slave_0: default FDB implementation only supports local addresses [ 410.968028][T14994] netlink: 'syz.8.2607': attribute type 4 has an invalid length. [ 411.086643][T15002] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 411.106671][T15002] batman_adv: batadv0: Adding interface: netdevsim0 [ 411.114482][T15002] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.141212][T15002] batman_adv: batadv0: Interface activated: netdevsim0 [ 411.552331][ T31] INFO: task syz.1.1531:11189 blocked for more than 143 seconds. [ 411.560304][ T31] Not tainted syzkaller #0 [ 411.566703][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.575997][ T31] task:syz.1.1531 state:D stack:25592 pid:11189 tgid:11188 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 411.588782][ T31] Call Trace: [ 411.592225][ T31] [ 411.595268][ T31] __schedule+0x1798/0x4cc0 [ 411.602517][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.610073][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.615482][ T31] ? __pfx___schedule+0x10/0x10 [ 411.620534][ T31] ? schedule+0x91/0x360 [ 411.627445][ T31] schedule+0x165/0x360 [ 411.632058][ T31] schedule_preempt_disabled+0x13/0x30 [ 411.637681][ T31] __mutex_lock+0x7e6/0x1350 [ 411.642854][ T31] ? __mutex_lock+0x5bb/0x1350 [ 411.647773][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 411.653779][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 411.658944][ T31] ? __nlmsg_put+0xef/0x1b0 [ 411.663675][ T31] ? genlmsg_put+0x137/0x2e0 [ 411.668443][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 411.674546][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 411.681179][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 411.686688][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 411.692759][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 411.698450][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 411.710805][ T31] genl_rcv_msg+0x60e/0x790 [ 411.715650][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.721084][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 411.727325][ T31] ? __asan_memcpy+0x40/0x70 [ 411.732508][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 411.738069][ T31] netlink_rcv_skb+0x205/0x470 [ 411.743338][ T31] ? __lock_acquire+0xab9/0xd20 [ 411.748362][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.753648][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.759127][ T31] ? down_read+0x1ad/0x2e0 [ 411.764051][ T31] genl_rcv+0x28/0x40 [ 411.768165][ T31] netlink_unicast+0x82f/0x9e0 [ 411.773274][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 411.778686][ T31] ? netlink_sendmsg+0x642/0xb30 [ 411.785569][ T31] ? skb_put+0x11b/0x210 [ 411.790129][ T31] netlink_sendmsg+0x805/0xb30 [ 411.796015][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.802879][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 411.808101][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.813759][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.819197][ T31] __sock_sendmsg+0x21c/0x270 [ 411.824411][ T31] ____sys_sendmsg+0x505/0x830 [ 411.829277][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.834716][ T31] ? import_iovec+0x74/0xa0 [ 411.839263][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 411.846118][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.851785][ T31] ? __fget_files+0x2a/0x420 [ 411.856434][ T31] ? __fget_files+0x3a0/0x420 [ 411.861280][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 411.866282][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.877807][ T31] ? do_syscall_64+0xbe/0xfa0 [ 411.883954][ T31] do_syscall_64+0xfa/0xfa0 [ 411.888525][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.893867][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.899997][ T31] ? clear_bhb_loop+0x60/0xb0 [ 411.906340][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.913313][ T31] RIP: 0033:0x7f59ecf8eec9 [ 411.917786][ T31] RSP: 002b:00007f59ede41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.926362][ T31] RAX: ffffffffffffffda RBX: 00007f59ed1e5fa0 RCX: 00007f59ecf8eec9 [ 411.934515][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 411.943012][ T31] RBP: 00007f59ed011f91 R08: 0000000000000000 R09: 0000000000000000 [ 411.951320][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.959356][ T31] R13: 00007f59ed1e6038 R14: 00007f59ed1e5fa0 R15: 00007ffc877769b8 [ 411.967464][ T31] [ 411.970646][ T31] [ 411.970646][ T31] Showing all locks held in the system: [ 411.980297][ T31] 1 lock held by khungtaskd/31: [ 411.986236][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 411.996269][ T31] 2 locks held by getty/5586: [ 412.003852][ T31] #0: ffff88814d9e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 412.014960][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 412.028292][ T31] 4 locks held by kworker/u8:16/6720: [ 412.034331][ T31] #0: ffff8880b873a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 412.044442][ T31] #1: ffff8880b8724048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 412.053435][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 412.062968][ T31] #3: ffffffff99c26740 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 412.073373][ T31] 2 locks held by syz.0.1411/10793: [ 412.078597][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.086906][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 412.097754][ T31] 2 locks held by syz.1.1531/11189: [ 412.103154][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.111615][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 412.122116][ T31] 2 locks held by syz.4.1708/11771: [ 412.127355][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.135682][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 412.146124][ T31] 2 locks held by syz.7.2062/13050: [ 412.151635][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.159859][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 412.170272][ T31] 2 locks held by syz.2.2217/13571: [ 412.175566][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.184170][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 412.197739][ T31] 2 locks held by syz.3.2613/15016: [ 412.203129][ T31] [ 412.205502][ T31] ============================================= [ 412.205502][ T31] [ 412.223971][ T31] NMI backtrace for cpu 1 [ 412.223993][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 412.224019][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 412.224033][ T31] Call Trace: [ 412.224042][ T31] [ 412.224052][ T31] dump_stack_lvl+0x189/0x250 [ 412.224086][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.224111][ T31] ? __pfx__printk+0x10/0x10 [ 412.224147][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 412.224179][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 412.224210][ T31] ? __pfx__printk+0x10/0x10 [ 412.224232][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 412.224264][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 412.224295][ T31] watchdog+0xf60/0xfa0 [ 412.224318][ T31] ? watchdog+0x1e2/0xfa0 [ 412.224341][ T31] kthread+0x711/0x8a0 [ 412.224368][ T31] ? __pfx_watchdog+0x10/0x10 [ 412.224385][ T31] ? __pfx_kthread+0x10/0x10 [ 412.224411][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.224431][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.224452][ T31] ? __pfx_kthread+0x10/0x10 [ 412.224476][ T31] ret_from_fork+0x4bc/0x870 [ 412.224497][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 412.224522][ T31] ? __switch_to_asm+0x39/0x70 [ 412.224541][ T31] ? __switch_to_asm+0x33/0x70 [ 412.224561][ T31] ? __pfx_kthread+0x10/0x10 [ 412.224586][ T31] ret_from_fork_asm+0x1a/0x30 [ 412.224622][ T31] [ 412.224634][ T31] Sending NMI from CPU 1 to CPUs 0: [ 412.377680][ C0] NMI backtrace for cpu 0 [ 412.377701][ C0] CPU: 0 UID: 0 PID: 6711 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 412.377723][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 412.377737][ C0] Workqueue: events_unbound toggle_allocation_gate [ 412.377774][ C0] RIP: 0010:switch_mm_irqs_off+0x165/0x7a0 [ 412.377805][ C0] Code: 38 01 00 00 4d 85 f6 0f 84 90 00 00 00 4d 8d a6 98 05 00 00 4d 89 e7 49 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 <74> 08 4c 89 e7 e8 61 37 b0 00 49 8b 1c 24 48 85 db 74 60 4c 89 f0 [ 412.377822][ C0] RSP: 0018:ffffc9001abd74e0 EFLAGS: 00000046 [ 412.377838][ C0] RAX: dffffc0000000000 RBX: ffff88813ff20000 RCX: ffff88802622dac0 [ 412.377854][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 412.377866][ C0] RBP: ffffc9001abd75b0 R08: ffff88813ff20a07 R09: 1ffff11027fe4140 [ 412.377881][ C0] R10: dffffc0000000000 R11: ffffed1027fe4141 R12: ffff88802622e058 [ 412.377895][ C0] R13: ffffffff8e248300 R14: ffff88802622dac0 R15: 1ffff11004c45c0b [ 412.377910][ C0] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 412.377925][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.377938][ C0] CR2: 00007fedcddb12f8 CR3: 000000013ff16000 CR4: 00000000003526f0 [ 412.377955][ C0] Call Trace: [ 412.377963][ C0] [ 412.377976][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 412.378003][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 412.378028][ C0] ? do_raw_spin_lock+0x121/0x290 [ 412.378054][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 412.378089][ C0] unuse_temporary_mm+0x136/0x220 [ 412.378119][ C0] ? __pfx_unuse_temporary_mm+0x10/0x10 [ 412.378146][ C0] ? __text_poke+0x636/0xa10 [ 412.378171][ C0] ? kasan_check_range+0x2b0/0x2c0 [ 412.378187][ C0] ? __text_poke+0x636/0xa10 [ 412.378213][ C0] ? __kmalloc_noprof+0xdf/0x7f0 [ 412.378238][ C0] __text_poke+0x6c8/0xa10 [ 412.378265][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 412.378290][ C0] ? __kmalloc_noprof+0xdf/0x7f0 [ 412.378316][ C0] ? __pfx___text_poke+0x10/0x10 [ 412.378338][ C0] ? rcu_is_watching+0x15/0xb0 [ 412.378359][ C0] ? trace_contention_end+0x39/0x120 [ 412.378391][ C0] smp_text_poke_batch_finish+0x90a/0x1130 [ 412.378424][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 412.378453][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 412.378491][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 412.378520][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 412.378549][ C0] static_key_enable+0x1a/0x20 [ 412.378574][ C0] toggle_allocation_gate+0xad/0x240 [ 412.378603][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 412.378631][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 412.378656][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 412.378676][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 412.378696][ C0] process_scheduled_works+0xae1/0x17b0 [ 412.378733][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 412.378762][ C0] worker_thread+0x8a0/0xda0 [ 412.378798][ C0] kthread+0x711/0x8a0 [ 412.378825][ C0] ? __pfx_worker_thread+0x10/0x10 [ 412.378846][ C0] ? __pfx_kthread+0x10/0x10 [ 412.378873][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.378895][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.378917][ C0] ? __pfx_kthread+0x10/0x10 [ 412.378943][ C0] ret_from_fork+0x4bc/0x870 [ 412.378963][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 412.378987][ C0] ? __switch_to_asm+0x39/0x70 [ 412.379009][ C0] ? __switch_to_asm+0x33/0x70 [ 412.379030][ C0] ? __pfx_kthread+0x10/0x10 [ 412.379056][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.379094][ C0] [ 412.380664][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 412.380695][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 412.380725][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 412.380742][ T31] Call Trace: [ 412.380753][ T31] [ 412.380766][ T31] dump_stack_lvl+0x99/0x250 [ 412.380800][ T31] ? __asan_memcpy+0x40/0x70 [ 412.380844][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.380887][ T31] ? __pfx__printk+0x10/0x10 [ 412.380930][ T31] vpanic+0x237/0x6d0 [ 412.380967][ T31] ? __pfx_vpanic+0x10/0x10 [ 412.381004][ T31] ? preempt_schedule_common+0x83/0xd0 [ 412.381042][ T31] panic+0xb9/0xc0 [ 412.381077][ T31] ? __pfx_panic+0x10/0x10 [ 412.381112][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 412.381156][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 412.381201][ T31] watchdog+0xf9f/0xfa0 [ 412.381234][ T31] ? watchdog+0x1e2/0xfa0 [ 412.381266][ T31] kthread+0x711/0x8a0 [ 412.381306][ T31] ? __pfx_watchdog+0x10/0x10 [ 412.381330][ T31] ? __pfx_kthread+0x10/0x10 [ 412.381366][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.381396][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.381425][ T31] ? __pfx_kthread+0x10/0x10 [ 412.381460][ T31] ret_from_fork+0x4bc/0x870 [ 412.381490][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 412.381526][ T31] ? __switch_to_asm+0x39/0x70 [ 412.381553][ T31] ? __switch_to_asm+0x33/0x70 [ 412.381581][ T31] ? __pfx_kthread+0x10/0x10 [ 412.381616][ T31] ret_from_fork_asm+0x1a/0x30 [ 412.381666][ T31] [ 412.884623][ T31] Kernel Offset: disabled [ 412.888958][ T31] Rebooting in 86400 seconds..