last executing test programs: 8m55.397550025s ago: executing program 32 (id=548): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x14, r4, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xa, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a8010002d800c000180080016000600000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) socket$pptp(0x18, 0x1, 0x2) 8m55.141504102s ago: executing program 33 (id=550): unshare(0x400) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (rerun: 64) socket(0x1d, 0x4, 0x9) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r1, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x2b) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2d, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x3}, 0xfffb}) 8m55.079572923s ago: executing program 34 (id=551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m4.495793415s ago: executing program 6 (id=1318): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0xff02, 0x0) 7m4.352119742s ago: executing program 6 (id=1319): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8000000}, 0x94) 7m4.236098474s ago: executing program 6 (id=1322): syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e214e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = socket(0x22, 0x2, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0) accept4$inet(r3, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x16, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xff, 0x87, 0x0, 0xfffffffe, 0x0, 0x9, 0xb8, 0x0, 0x80000048, [0x2, 0x89ff]}}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0) recvmmsg(r8, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/129, 0x81}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000001940)=""/4092, 0xffc}], 0x3}, 0x816f}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x100, 0x0) 7m3.789420104s ago: executing program 0 (id=1330): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000be155d778ec600000000000000000000000017e177f15a620c975b7b2c11"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) (async) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 7m3.544068574s ago: executing program 0 (id=1334): syz_emit_ethernet(0xf0, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x6, 0x6, "e295e6", 0xb2, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {0x4e20, 0x4e21, 0xb2, 0x0, @opaque="91e1156a35a6e44b627682eea3c3e98a35224faeb0c62010bb11151e8190df6117c09601dd99d8709e75ba038eb596092650b2f6b45b2ec15f4f103a3cc919884fc88d2ad8cecd5312d53c200e357038e434dff2d1bd559b903430f4ac680237057f39e741f5c043e8d6f650672788e3444bd51ef4a52cda4f64ab045a8da808a97e95bd49ccaadb9291389e7937d733811066886b044789dbd9295eeaef4dddb696cbda9da4224666f4"}}}}}}, 0x0) 7m3.399909319s ago: executing program 0 (id=1338): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="15010000000000004c00128009000100626f6e64000000003c000280050001000200000008000a0000000000050001000200000005000c000200000005000e"], 0x7c}}, 0x0) 7m3.275437394s ago: executing program 6 (id=1340): socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYRES64=r1], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3ea}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x200, 0x0, 0x4, 0x0, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="030000000200000000000000e3ffffffffffffff"], 0x50) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000740)={0x5, 0x8e, 0xf, 0x3, 0x9}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) 7m3.24030411s ago: executing program 0 (id=1342): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000000030001103d030100000000009500000000000000bc26000000000000bf67000000000000140300000fff07006702000003000000160600000080ffffbf050000000000000f650000210000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7m3.024095638s ago: executing program 0 (id=1343): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 7m2.600368648s ago: executing program 0 (id=1344): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061182c000001030095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m2.531904127s ago: executing program 6 (id=1345): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000aca562ca0cd82d059233538580ddf6591c3d83ffec5fc5f3502c251ee3414baf527302b97054a7aeda80ac9114a94ae5dda0591ef050a8e1672ddd0ff3f095bd4845dca27f6da44ca2d773e89813bad41c640fb408a90f1366fad9476a3effd8ec9b4861103e78", @ANYRES16=r5, @ANYBLOB="210f2dbd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) 7m2.14587299s ago: executing program 35 (id=1344): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061182c000001030095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m1.999391079s ago: executing program 6 (id=1350): syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e214e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = socket(0x22, 0x2, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0) accept4$inet(r3, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x16, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xff, 0x87, 0x0, 0xfffffffe, 0x0, 0x9, 0xb8, 0x0, 0x80000048, [0x2, 0x89ff]}}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0) recvmmsg(r8, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/129, 0x81}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000001940)=""/4092, 0xffc}], 0x3}, 0x816f}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x100, 0x0) 7m1.479742564s ago: executing program 36 (id=1350): syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e214e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = socket(0x22, 0x2, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0) accept4$inet(r3, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x16, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xff, 0x87, 0x0, 0xfffffffe, 0x0, 0x9, 0xb8, 0x0, 0x80000048, [0x2, 0x89ff]}}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0) recvmmsg(r8, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/129, 0x81}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000001940)=""/4092, 0xffc}], 0x3}, 0x816f}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x100, 0x0) 2m42.681870888s ago: executing program 9 (id=4059): unshare(0x24020400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000240)=""/108, 0x0) 2m42.47880409s ago: executing program 9 (id=4062): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000190001090000000000000000021800000000fd000000000008000100ac141400080005000a0101020c001602060015200600000008000400157d143c0000000000000000", @ANYRES32, @ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000100)=0x120, 0x4) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000200)=""/201, &(0x7f00000000c0)=0xc9) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000180)=@ethtool_coalesce={0x9, 0xffffffff, 0x7fffffff, 0x7ffe, 0x8, 0x3, 0x10000, 0x1, 0x8, 0x5, 0xc, 0x1, 0xd, 0x0, 0x7, 0xfffffc01, 0x5, 0x55b, 0x9, 0xfffffff1, 0x4, 0x482, 0x2}}) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000440)={0xa, 0x4e24, 0xfffffbf9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000010}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4c20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40000000}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x30}}], 0x2, 0x20002040) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) getsockopt(r1, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000190001090000000000000000021800000000fd000000000008000100ac141400080005000a0101020c001602060015200600000008000400157d143c0000000000000000", @ANYRES32, @ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000100)=0x120, 0x4) (async) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000200)=""/201, &(0x7f00000000c0)=0xc9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000180)=@ethtool_coalesce={0x9, 0xffffffff, 0x7fffffff, 0x7ffe, 0x8, 0x3, 0x10000, 0x1, 0x8, 0x5, 0xc, 0x1, 0xd, 0x0, 0x7, 0xfffffc01, 0x5, 0x55b, 0x9, 0xfffffff1, 0x4, 0x482, 0x2}}) (async) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000440)={0xa, 0x4e24, 0xfffffbf9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000010}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4c20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40000000}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x30}}], 0x2, 0x20002040) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) (async) 2m42.178649236s ago: executing program 9 (id=4064): socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2m41.83156251s ago: executing program 9 (id=4067): socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYRES64=r1], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3ea}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0xff1f, 0x8000000}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x200, 0x0, 0x4, 0x0, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="030000000200000000000000e3ffffffffffffff"], 0x50) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000740)={0x5, 0x8e, 0xf, 0x3, 0x9}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) 2m41.423819968s ago: executing program 5 (id=4072): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) r2 = socket(0x8, 0x3, 0x0) shutdown(r2, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x800}}}, 0x84) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 2m39.493697016s ago: executing program 9 (id=4075): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="48000000100003050000000900000100000000007941dd5a228d6138c882b588cf28d6285a4a82d634c2fc98d92e1c5dd346a6c765f241cc4c9c7e4c47007f6d165b9bfdd6aaf1f639fe2ce2413385c719a50a8926b8a7da78be888a13452753cd922b182439b235a220214394d6e323488dc121f4822146657c15c3fde1da8d9e547608", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c280000500030004000000"], 0x48}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) unshare(0x22020400) unshare(0x10000400) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map, r2, 0x5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x3, 0x5, 0x0, 0x0, {}, [@generic="92"]}, 0x18}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002"], 0x30}}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$inet6(r1, &(0x7f00000007c0)={&(0x7f0000000100)={0xa, 0x4e24, 0x7, @remote, 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="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", 0xfc}, {&(0x7f0000000380)="3c3a9763928b166b74b2768113cf3c37b7f6070f1c56cf8e1910f1f235f7a0c4160183b513ee0ed700cb09879c3e9eb253d5d8e753769009cdc83859c3c7cde79940247299c39b6410876ecfffd279d5778004138bfa888b4406739e97c1170ca506bec196fd5906d0f8c8d287560cec437e0b657e5e6950b14ccce133d2da5a5a", 0x81}, {&(0x7f0000000440)="46de1dcbeef6a819fd1b5fc8f3e67758a974d5056e8d76db01fa79a56ba144979a188ab01eb6d8c753b90ddf93e4e57a9997eafc91886313227841a774a434b7526d950b8cb958bfb2cb4e5ab9c08270625bb04119726b1477540667fa5f824f347c492e0fc0f402edceb07130744e40205bcda92537da8a5d59f3b4bdf77008f43605cd8fec58543fb370ab97cf7ec1f8aa7140602d706dd342d59f066ecee740b4e74f148f68cde17cfa268eb379de8cb57cbbbe5478c06c15d3342cd51459a80999e69aacffa82d767d54128a3997e3b550c9eefa29574ec319af934fe486", 0xe0}], 0x3, &(0x7f0000000540)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@pad1, @generic={0x7}]}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x32, 0xc, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0xab1, [0x8, 0x0, 0x4ad, 0x32, 0x4]}}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}}}, @dstopts={{0xb8, 0x29, 0x37, {0x4, 0x13, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xc, "4f96dc09a1dbcd80b8583fd0"}, @jumbo, @jumbo={0xc2, 0x4, 0xfffffffd}, @jumbo={0xc2, 0x4, 0xa46}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x401, [0x9, 0x4]}}, @jumbo={0xc2, 0x4, 0xe000000}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0x1a80, [0x8, 0x400, 0x0, 0x7fffffff, 0x8001, 0x6, 0x1, 0xffffffffffff8524]}}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x89, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x1b8}, 0x4080) (async) sendmsg$inet6(r1, &(0x7f00000007c0)={&(0x7f0000000100)={0xa, 0x4e24, 0x7, @remote, 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="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", 0xfc}, {&(0x7f0000000380)="3c3a9763928b166b74b2768113cf3c37b7f6070f1c56cf8e1910f1f235f7a0c4160183b513ee0ed700cb09879c3e9eb253d5d8e753769009cdc83859c3c7cde79940247299c39b6410876ecfffd279d5778004138bfa888b4406739e97c1170ca506bec196fd5906d0f8c8d287560cec437e0b657e5e6950b14ccce133d2da5a5a", 0x81}, {&(0x7f0000000440)="46de1dcbeef6a819fd1b5fc8f3e67758a974d5056e8d76db01fa79a56ba144979a188ab01eb6d8c753b90ddf93e4e57a9997eafc91886313227841a774a434b7526d950b8cb958bfb2cb4e5ab9c08270625bb04119726b1477540667fa5f824f347c492e0fc0f402edceb07130744e40205bcda92537da8a5d59f3b4bdf77008f43605cd8fec58543fb370ab97cf7ec1f8aa7140602d706dd342d59f066ecee740b4e74f148f68cde17cfa268eb379de8cb57cbbbe5478c06c15d3342cd51459a80999e69aacffa82d767d54128a3997e3b550c9eefa29574ec319af934fe486", 0xe0}], 0x3, &(0x7f0000000540)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@pad1, @generic={0x7}]}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x32, 0xc, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0xab1, [0x8, 0x0, 0x4ad, 0x32, 0x4]}}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}}}, @dstopts={{0xb8, 0x29, 0x37, {0x4, 0x13, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xc, "4f96dc09a1dbcd80b8583fd0"}, @jumbo, @jumbo={0xc2, 0x4, 0xfffffffd}, @jumbo={0xc2, 0x4, 0xa46}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x401, [0x9, 0x4]}}, @jumbo={0xc2, 0x4, 0xe000000}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0x1a80, [0x8, 0x400, 0x0, 0x7fffffff, 0x8001, 0x6, 0x1, 0xffffffffffff8524]}}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x89, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x1b8}, 0x4080) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) splice(r6, 0x0, r7, 0x0, 0x1, 0x0) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) 2m37.765174365s ago: executing program 5 (id=4085): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback={0xa00000000000000}}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 2m37.47700487s ago: executing program 5 (id=4086): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000000800a0018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200f808000000b70300000000080085000000c800000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x7f, &(0x7f0000000140)=""/127, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 2m37.303028739s ago: executing program 9 (id=4088): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e00, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m37.249471077s ago: executing program 5 (id=4089): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00000000de1a025700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x20000400) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) write(r4, 0x0, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) listen(r2, 0x5d9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r6, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) 2m36.74276741s ago: executing program 5 (id=4092): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4045}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x12c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x99}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xffffff52}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x20}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x24048081) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x9}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x200}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x6, 0xff, 0xb, 0x80000000, 0x2e, 0x8000, 0x7}, 0x9c) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f0000000480), 0x80800) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x1, 0x6, 0xffffffffffffffff}) r5 = accept$inet(r2, &(0x7f0000000500)={0x2, 0x0, @initdev}, &(0x7f0000000540)=0x10) r6 = accept4$inet(r5, &(0x7f0000000580)={0x2, 0x0, @broadcast}, &(0x7f00000005c0)=0x10, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000600)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000640), 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000680)=0x15, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000006c0)={'veth1_to_bridge\x00', 0x2000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000700)={@empty, 0x2, 0x2, 0x3, 0x1, 0x0, 0x7}, 0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000740)={0x0, 0xc}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000007c0)={r7, 0x5, 0x2}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$cgroup_ro(r3, &(0x7f0000000800)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3fb, 0x200, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x10) connect$llc(r8, &(0x7f0000000940)={0x1a, 0x8, 0x73, 0x4, 0x7, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000980)={r0, r2}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000009c0)={0x0, 'batadv_slave_0\x00', {0x4}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x3, 0xfffffff7}]}]}, {0x0, [0x0, 0x61, 0x61, 0x61, 0x61, 0x2e, 0x61, 0x0]}}, &(0x7f0000000a40)=""/174, 0x36, 0xae, 0x0, 0x236, 0x10000, @value=r2}, 0x28) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000c00)={&(0x7f0000000b40), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, 0x140f, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x140040d4) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000810) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000d40)=0xffffffff, 0x4) 2m36.630912948s ago: executing program 5 (id=4094): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x2f00, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m22.211223166s ago: executing program 37 (id=4088): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e00, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m20.934881343s ago: executing program 38 (id=4094): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x2f00, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1m15.567995647s ago: executing program 4 (id=4602): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xdfd182dcd395e7a6}}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, 'xfrm0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x23}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'pim6reg1\x00', &(0x7f0000000140)=@ethtool_channels={0x3d, 0x2, 0x8, 0x9, 0x8df, 0x4, 0x9, 0xffffffff, 0x3}}) 1m15.312103744s ago: executing program 4 (id=4603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x7, "de6f47e1174be9"}, &(0x7f0000000040)=0xf) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x1c}, 0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22eb}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x48040) 1m15.247124687s ago: executing program 4 (id=4604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x104, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xd4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x94, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20000006}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x16}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xbc}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xe}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xb6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m15.177171079s ago: executing program 4 (id=4605): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) 1m15.067111864s ago: executing program 4 (id=4606): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x1) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x1) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) 1m14.919823666s ago: executing program 4 (id=4607): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfc"], 0x1c}}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000014c0)=[{{&(0x7f0000001100)=@pppoe, 0x80, &(0x7f0000001440)=[{&(0x7f0000001340)=""/52, 0x34}, {&(0x7f0000001380)=""/52, 0x34}, {&(0x7f00000013c0)=""/93, 0x5d}], 0x3, &(0x7f0000001480)=""/32, 0x20}, 0xfffffc01}], 0x1, 0x40000000, &(0x7f0000001540)={r5, r6+10000000}) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001580)=ANY=[@ANYBLOB="5800000001020500000000000004000003000000180002800c0002800500010088000000060003400001000008000940000001ff240002800c000280050001000600000006000340000100000c00027f050001002100000095c3e3faf044e687e271a0a506d146b5e2fb7f438da796806a746d683471fc16bcfc3d8c441919413ce5eb9e5136e168f516e704e95ec0ae4fc7738deee093516565c9934794d5b96675a50e5311d96b10fbb75ac05d4e67297cfae5da538ac2af8432d9aa1397951f8f0b8327954db542fab4d103f7d889c9d5c0268cbe4563dd"], 0x58}, 0x1, 0x0, 0x0, 0x4008050}, 0x8800) 59.883764111s ago: executing program 39 (id=4607): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfc"], 0x1c}}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000014c0)=[{{&(0x7f0000001100)=@pppoe, 0x80, &(0x7f0000001440)=[{&(0x7f0000001340)=""/52, 0x34}, {&(0x7f0000001380)=""/52, 0x34}, {&(0x7f00000013c0)=""/93, 0x5d}], 0x3, &(0x7f0000001480)=""/32, 0x20}, 0xfffffc01}], 0x1, 0x40000000, &(0x7f0000001540)={r5, r6+10000000}) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001580)=ANY=[@ANYBLOB="5800000001020500000000000004000003000000180002800c0002800500010088000000060003400001000008000940000001ff240002800c000280050001000600000006000340000100000c00027f050001002100000095c3e3faf044e687e271a0a506d146b5e2fb7f438da796806a746d683471fc16bcfc3d8c441919413ce5eb9e5136e168f516e704e95ec0ae4fc7738deee093516565c9934794d5b96675a50e5311d96b10fbb75ac05d4e67297cfae5da538ac2af8432d9aa1397951f8f0b8327954db542fab4d103f7d889c9d5c0268cbe4563dd"], 0x58}, 0x1, 0x0, 0x0, 0x4008050}, 0x8800) 11.352031688s ago: executing program 1 (id=5009): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x4, 0x3}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x200000000, {0x0, 0x0, 0x3}, 0xfe}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) 9.860136139s ago: executing program 1 (id=5023): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd", 0x0, 0xa1b, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701f6ffffff00000000017c0000040042800c00018006000600800a0000200002801c0002"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 9.547591336s ago: executing program 1 (id=5026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x40, 0xff, 0x0, 0xffeffffe}, {0x6, 0x60, 0x0, 0x8}]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000000080)={0x80000002}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xdf, 0x0, r1, 0x6, '\x00', r5, r7, 0x4, 0x3, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) writev(r8, &(0x7f00000002c0), 0x2) write$ppp(r6, &(0x7f0000000300)="5af9", 0x2) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r12, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2a0, 0x24, 0x4ee4e6a52ff56541, 0x70bd6d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xfa, 0x2, 0xfffffff8, 0x1, 0x4, 0x10000, 0x2}}, {0x8, 0x2, [0x4, 0x5]}}, {{0x1c, 0x1, {0xf9, 0x2, 0x7fff, 0x1, 0x2, 0x9, 0x2, 0xa}}, {0x18, 0x2, [0x3, 0xfff2, 0x1, 0x0, 0x2, 0x4, 0x9, 0x10, 0xfffc, 0x0]}}, {{0x1c, 0x1, {0x0, 0x8, 0x1, 0x0, 0x2, 0xee45, 0x9, 0x2}}, {0x8, 0x2, [0x6747, 0xcf]}}, {{0x1c, 0x1, {0x0, 0x81, 0xb312, 0x10001, 0x0, 0xfffffffd, 0x80000000, 0x3}}, {0xa, 0x2, [0xa0d7, 0x7, 0x5c74]}}, {{0x1c, 0x1, {0x0, 0x5, 0x38c, 0x5, 0x2, 0x5, 0x800, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x13, 0x4, 0xd, 0x9, 0x2, 0x2f, 0x4, 0x6}}, {0x10, 0x2, [0x7, 0x99, 0x60ed, 0x2, 0x1, 0x9]}}, {{0x1c, 0x1, {0xfc, 0x40, 0x4, 0x10, 0x1, 0xcaa5, 0x5, 0x2}}, {0x8, 0x2, [0x0, 0x401]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x134, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x101}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x5}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8000000000000000}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x114, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8a}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x502}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x77}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x73}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff8000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc}]}]}]}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0xfe, 0x8}}]}, 0x2a0}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.599063735s ago: executing program 1 (id=5037): r0 = epoll_create(0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000900)={0x11, 0x0, 0x0}, &(0x7f0000000940)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x10, 0x20, 0x3, 0xffffffff, {{0x25, 0x4, 0x0, 0x5, 0x94, 0x64, 0x0, 0x3, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0xd4, 0x0, 0x4, [0x0, 0x8]}, @end, @rr={0x7, 0x7, 0x31, [@broadcast]}, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x1, 0x4, "1e5a"}, {0x0, 0x12, "eb28ced46b108ebbd21489f5f223ba77"}, {0x6, 0x9, "31b9c94c98fd33"}, {0x7, 0xa, "a175fa57383ef7fb"}, {0x5, 0x8, "f86883e134a4"}]}, @ssrr={0x89, 0x7, 0xc0, [@multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xe5, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010100, 0x47}, {@multicast1, 0x9}, {@rand_addr=0x64010102, 0x2192}]}, @end]}}}}}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x25c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90020000", @ANYRES16=r9, @ANYBLOB="0107000000000000000067000000080001000c0000000c009900090000004c0000000800c400050000008a00c500ef6a4e2a84f0ce5d60f807d0014a5522a86d750f7a8a0dbeecc48f498f3b6d2ce0a10a164695d411ee6e2062b3871bfb9e8df8d45e0190d9ef7f92fea570390434393eadb326c8ec2d08a92cf8672dca738fbbe0b900597a2709a0fa339438a41a36f02eae99722a427032921454472ce4c6ecca193e90290227e7d0d6e81380f327ac73967c00000800c300"], 0x290}, 0x1, 0x0, 0x0, 0x44844}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x20, r12, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x801) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r12, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r13}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x1e4, r9, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x47}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x36b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x5, 0x24, 0x79b9, 0x3, 0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ca8}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x35}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xfff, 0x1, 0x7, 0x8, 0xe7, 0x400, 0x7]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x367}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x171}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x551}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x5, 0x6, 0x7, 0xfffffff7, 0x8, 0xd, 0x3, 0x3]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x965}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x49eb}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3, 0xc2b, 0x1ff, 0x1, 0x5, 0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0x7ff, 0x1, 0x5, 0x3, 0x81, 0xebff, 0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff0001}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20044080}, 0x8084) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000140)='pimreg\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x96, &(0x7f00000015c0)=""/150}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312c", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x8090) r14 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r14, &(0x7f0000000240)={0xa0000000}) r15 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r15, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r14, &(0x7f0000000280)={0x2200201d}) 7.804125773s ago: executing program 1 (id=5043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.641413346s ago: executing program 1 (id=5044): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x2000a) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r4, 0x0, 0xf69}, 0x18) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 5.076707482s ago: executing program 2 (id=5068): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="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", 0xfff}, {&(0x7f0000001600)="e4e621", 0x3}], 0x2}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 3.258204364s ago: executing program 7 (id=5083): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x85ff}, 0x94) 3.113671428s ago: executing program 7 (id=5087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000826c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060024fa850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.966357126s ago: executing program 7 (id=5090): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x50, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040400) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000e234d9e67417f653a58a162b404400000000b42893af6a61a214ed5319faa6bcf8a60af4b08ed0d3cb64e0577253de8ff4af08f8ca65afe578c4f55fb546f903857d1785ac858c0d39b41783226df384ab996211bd12217a56c1a3247ed9672ff8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x602, 0x1}}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10}, 0x3e8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x810, @dev={0xfe, 0x80, '\x00', 0x1c}}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4024}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010009000000000008000040000000000000000061000000000000"], 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000002c0)}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x6, 0xb, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x64, 0x0, 0x47, 0x0, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0x3, 0x91}]}}}}}) socket$nl_xfrm(0x10, 0x3, 0x6) 2.187795395s ago: executing program 7 (id=5094): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000006c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) socketpair(0x22, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x6, @private1, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x7}, 0x1c) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="500102805c000100240001006270665f686173685f66756e6300000000000004000000000000000000000000050003000b0000002c000400f7ff7f840600000005002403ff010000090008950200200002000507c7d90000db990f0500000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004ee0080000008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040021820000400001003b0001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400040000000800070000000000"], 0x16c}, 0x1, 0x0, 0x0, 0x404}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in=@private=0xa010101, @in=@empty, 0x4e21, 0x3, 0x4e21, 0xb11, 0x2, 0x20, 0x20, 0x4, r10, r11}, {0x3, 0xcf, 0x6, 0x5, 0x7, 0x6, 0x9, 0x40}, {0x83, 0x4, 0xbc, 0x7}, 0x9, 0x6e6bb9, 0x2}, {{@in6=@remote, 0x4d3, 0x3c}, 0xa, @in6=@local, 0x0, 0x1, 0x1, 0x1, 0x2, 0x3, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r14) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r12, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r15, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x24000804) 2.071122196s ago: executing program 3 (id=5096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000030a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f5900640d00fe8000000000000000000000000000aaff0200000000000000000000000000014e"], 0x9a) 1.929519742s ago: executing program 2 (id=5097): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000ffffffc3182c000000400095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.710688832s ago: executing program 2 (id=5099): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x3a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x18, 0x5a, 0x1, 0xfffffffc, 0x25dfdbfa, {0x2}, [{0x4, 0x3}]}, 0x18}}, 0x8014) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2, 0x7, 0xc, 0x5, 0xc, @local, @mcast2, 0x7, 0x20, 0x260, 0x1}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddr={0x78, 0x14, 0x4, 0x70bd2d, 0x25dfdbfb, {0xa, 0x1f, 0x80, 0xc8, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_CACHEINFO={0x14, 0x6, {0xf, 0x733e, 0x3, 0x8}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 1.531407415s ago: executing program 3 (id=5101): pipe(0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="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", 0xfa, 0x80, &(0x7f0000000240)={0xa, 0x4f24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) shutdown(r2, 0x2) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001080)=ANY=[@ANYRES32, @ANYBLOB="29634b2ac35d30e3d53b956541bf7855693309efe8ceba5cca01a27dd356f02162e5f0b7fe97378e0ab7a69f2bb881ff664d1f27e3ea38b381fcd2e66e6dfead997aafa0a1b713a8686e0edb0d51f6773a75d1dd13c4b3c2aa063d4063ed6b4b6bf9d057d2988ce04e20fa608fcd44f78a6276fda4d9f8498ff0e7cf7982f3bf28b8976b5d3adb920b5985fe75091721a0482da704308c6864ff5fff76c05b8ccb9f9a557ae84699397c1cc69d919b6806a66c5ce7cc2f05fba3e72648da252f80448f1eca3fc1131b6c489f", @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32, @ANYRESDEC=r1, @ANYRESHEX=r2], 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = getpid() (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x402, 0x4) (async) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f80)=ANY=[@ANYBLOB="5000000010000304000000000000000000000000197e1d2156a99e13dbbb41158506105cf96e8eab379bd0d86bb153ce29b78a5a4a0f40265aaebf1bbff4839b9001e82beeab6fb60936297867dbc78147010ded4926cded251cc0d0cb4469f4cd3a88127578723a13d170291c369180affaf30eddc1ab8fb11b3fad23b53313a378d8cadf5e22d1628e63085bd9277085d9455831506c2700640204c5a02817ab0943f4cf0132ac82113300d8ca30e20b279c9c01293f6c913b99", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010067656e6576650000040002800a000200000000000000000008001300", @ANYRES32=r6, @ANYBLOB="08000400e1ff0000"], 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) 1.392482478s ago: executing program 2 (id=5103): socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYRES64=r1], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f101465", 0x1f5}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0xff1f, 0x8000000}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x200, 0x0, 0x4, 0x0, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="030000000200000000000000e3ffffffffffffff"], 0x50) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000740)={0x5, 0x8e, 0xf, 0x3, 0x9}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.345987294s ago: executing program 3 (id=5104): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={0x0, 0xfffffffffffffaa5, 0x7}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={r1, 0x3, 0x7, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) r3 = accept$ax25(r0, 0x0, &(0x7f0000000840)) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000880)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000001540)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f00000009c0)={0xb24, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x800}, @NL80211_ATTR_PEER_MEASUREMENTS={0xab8, 0x111, 0x0, 0x1, {0xab4, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x18c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x148, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x49c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x259}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15c5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf6e6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x94}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf5d7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1b0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe60}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}]}, 0xb24}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000015c0)={0x0, @generic={0x1, "1e32db6c50b5c7fc348a980f345e"}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, @ethernet={0x306, @local}, 0x8, 0x0, 0x0, 0x0, 0x3164, &(0x7f0000001580)='ip6gre0\x00', 0x4a1b, 0x9, 0xffff}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001640)={0x0, 0x7f, 0x4, [0x40, 0xfff9, 0x400, 0xfffb]}, &(0x7f0000001680)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000016c0)=@assoc_value={r8, 0x9}, 0x8) socketpair(0x1a, 0x800, 0x8, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001740)={r8, 0xcc, 0x0, 0x400, 0x10000}, &(0x7f0000001780)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000017c0)={r11, 0x5}, &(0x7f0000001800)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x80, r5, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x6d}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0x2a, 0x5b, "12b0180889c3c268b82c82d2edec68a56767e93882e0e07f6f8fe5c60392d56d1f205b75781a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0x1c, 0x5b, "d4f7c7396021a98cfaab810e15ef67bf0594dd215bb65989"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x7bee5928b2f5ee4a}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x30, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6aa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0xc4) connect$can_bcm(r10, &(0x7f0000001ac0), 0x10) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000001b00)={r8, 0x4, 0x44, 0x1, 0xc7c3, 0x2e, 0x1ff, 0x5, {r8, @in6={{0xa, 0x4e21, 0x248b7a67, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x6, 0x8, 0x5, 0x3, 0xe}}, &(0x7f0000001bc0)=0xb0) getsockopt$inet6_tcp_buf(r10, 0x6, 0x21, &(0x7f0000001c00)=""/48, &(0x7f0000001c40)=0x30) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x4, 0x3f, &(0x7f0000001c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffff8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3f7}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff000}}, @generic={0x6, 0x1, 0x5, 0x401, 0x6}, @alu={0x7, 0x0, 0xb, 0x3, 0x1, 0xfffffffffffffff4, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}]}, &(0x7f0000001e80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001f00)={0x2, 0x9, 0x81, 0xf74b}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001f40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001f80)=[{0x3, 0x3, 0xa}], 0x10, 0x8}, 0x94) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r13, 0xc400941d, &(0x7f0000002080)={r2, 0x6, 0x9}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), r10) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000002500)=0x0, &(0x7f0000002540)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r10, &(0x7f0000002640)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x4c, r14, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c5}, 0x8880) r16 = syz_genetlink_get_family_id$l2tp(&(0x7f00000026c0), r9) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x38, r16, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5fb5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000040) 1.24813243s ago: executing program 2 (id=5105): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3, r1}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 1.244467026s ago: executing program 7 (id=5106): socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYRES64=r1], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3ea}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x200, 0x0, 0x4, 0x0, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="030000000200000000000000e3ffffffffffffff"], 0x50) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000740)={0x5, 0x8e, 0xf, 0x3, 0x9}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) 1.151087397s ago: executing program 2 (id=5107): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="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", 0xfff}, {&(0x7f0000001600)="e4e621", 0x3}], 0x2}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.091911434s ago: executing program 3 (id=5108): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000140)={'team0\x00', @multicast}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xfffeffff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0xac9382baadb1a948) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r10, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) 763.783868ms ago: executing program 7 (id=5109): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x18}, 0xb7}], 0x1, 0x40002021, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x680c}], 0x1d, 0x40000110, 0x0) 523.228485ms ago: executing program 8 (id=5110): socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYRES64=r1], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3ea}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0xff1f, 0x8000000}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x200, 0x0, 0x4, 0x0, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="030000000200000000000000e3ffffffffffffff"], 0x50) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000740)={0x5, 0x8e, 0xf, 0x3, 0x9}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) 420.042505ms ago: executing program 8 (id=5111): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0xffffffffffffff69, 0x44854, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) 320.096976ms ago: executing program 8 (id=5112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x3, 0x0, 0xff, 0x0, 0x1000}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in6=@mcast1, 0x0, 0x4}]}]}, 0x1fc}, 0x1, 0xffffff80}, 0x0) 312.487401ms ago: executing program 8 (id=5113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000826c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060024fa850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 255.916743ms ago: executing program 8 (id=5114): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25200100000120010000000000000000000000000001000000004e210002020000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) unshare(0x20000400) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000280)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'veth0_vlan\x00', 0x800}) 95.873636ms ago: executing program 3 (id=5115): socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYRES64=r1], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1f5}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0xff1f, 0x8000000}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x200, 0x0, 0x4, 0x0, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="030000000200000000000000e3ffffffffffffff"], 0x50) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000740)={0x5, 0x8e, 0xf, 0x3, 0x9}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 19.879341ms ago: executing program 8 (id=5116): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(r0, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xd76}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$inet(0x2b, 0x801, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xf, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf03}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b000003"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r9, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=5117): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b"], 0x6c}, 0x1, 0x0, 0x3000000, 0x40001}, 0x20000000) kernel console output (not intermixed with test programs): netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 504.544596][T18189] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 504.602603][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3817'. [ 504.626353][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3817'. [ 504.694308][T18374] dummy0: entered promiscuous mode [ 504.716691][T18374] macsec2: entered allmulticast mode [ 504.730888][T18374] dummy0: entered allmulticast mode [ 504.776686][T18374] dummy0: left allmulticast mode [ 504.781735][T18374] dummy0: left promiscuous mode [ 504.808969][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3817'. [ 504.849448][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3819'. [ 504.859044][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3817'. [ 505.100766][T18378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3819'. [ 505.147270][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3817'. [ 505.176075][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3817'. [ 506.017253][ T51] Bluetooth: hci5: command tx timeout [ 506.173902][T18189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.239166][T18189] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.309414][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.316772][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.333507][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.341054][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.929819][T18460] tipc: Enabled bearer , priority 0 [ 506.967801][T18460] syzkaller0: entered promiscuous mode [ 506.985988][T18460] syzkaller0: entered allmulticast mode [ 507.086549][T18460] tipc: Resetting bearer [ 507.131326][T18457] tipc: Resetting bearer [ 507.179471][T18457] tipc: Disabling bearer [ 507.312206][T18189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.617669][T18496] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3845'. [ 508.048465][T18512] batadv0: entered promiscuous mode [ 508.076095][T18512] vlan3: entered promiscuous mode [ 508.104803][ T51] Bluetooth: hci5: command tx timeout [ 508.341434][T18189] veth0_vlan: entered promiscuous mode [ 508.360804][T18189] veth1_vlan: entered promiscuous mode [ 508.483251][T18533] bond16: entered promiscuous mode [ 508.493788][T18533] 8021q: adding VLAN 0 to HW filter on device bond16 [ 508.553048][T18189] veth0_macvtap: entered promiscuous mode [ 508.617087][T18189] veth1_macvtap: entered promiscuous mode [ 508.689935][T18189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.848278][T18541] 8021q: adding VLAN 0 to HW filter on device bond17 [ 508.921975][T18541] team0: Port device team_slave_0 removed [ 508.947481][T18541] team0: Port device team_slave_1 removed [ 508.954441][T18541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.968616][T18541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.019273][T18541] bond3: (slave gretap1): Releasing active interface [ 509.033522][T18541] bond3: (slave gretap1): the permanent HWaddr of slave - 36:19:6d:49:db:89 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 509.068008][T18541] bond3: (slave veth3): Releasing active interface [ 509.086767][T18541] bond7: (slave gretap2): Releasing active interface [ 509.093636][T18541] gretap2: left promiscuous mode [ 509.100602][T18541] gretap2: left allmulticast mode [ 509.124880][T18541] bond0: (slave bond8): Releasing backup interface [ 509.133427][T18541] bond0: (slave bond8): the permanent HWaddr of slave - 8e:0c:8b:a8:1a:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 509.161364][T18541] bond8: left promiscuous mode [ 509.175014][T18541] bond0: (slave bond9): Releasing backup interface [ 509.184189][T18541] bond9: left promiscuous mode [ 509.193920][T18541] batman_adv: batadv0: Interface deactivated: vxlan0 [ 509.200825][T18541] batman_adv: batadv0: Removing interface: vxlan0 [ 509.213468][T18541] bond11: (slave veth7): Releasing active interface [ 509.231749][T18541] bond13: (slave geneve2): Releasing active interface [ 509.262026][T18545] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 509.274286][T18545] bond17: (slave macvlan2): Enslaving as a backup interface with a down link [ 509.339311][T18189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.468027][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.484029][T18562] __nla_validate_parse: 7 callbacks suppressed [ 509.484049][T18562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3869'. [ 509.506415][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.532204][T18562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3869'. [ 509.545985][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.583764][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.634713][T18562] bond1: entered promiscuous mode [ 509.642347][T18562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.895240][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.922805][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.990842][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.010357][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.954110][T18596] pimreg3: entered allmulticast mode [ 511.862572][T18626] netlink: 'syz.4.3885': attribute type 10 has an invalid length. [ 511.934697][T18631] tipc: Started in network mode [ 511.941868][T18631] tipc: Node identity 2edfc0cea274, cluster identity 4711 [ 511.960852][T18631] tipc: Enabled bearer , priority 0 [ 511.998919][T18631] syzkaller0: entered promiscuous mode [ 512.026380][T18631] syzkaller0: entered allmulticast mode [ 512.073829][T18631] tipc: Resetting bearer [ 512.120625][T18631] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 512.133649][T18639] tipc: Failed to remove unknown binding: 66,1,1/1953108122:1003594420/1003594422 [ 512.148391][T18639] tipc: Failed to remove unknown binding: 66,1,1/1953108122:1003594420/1003594422 [ 512.158362][T18639] tipc: Failed to remove unknown binding: 66,1,1/1953108122:1003594420/1003594422 [ 512.196481][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3888'. [ 512.211401][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3888'. [ 512.264772][T18629] tipc: Resetting bearer [ 512.321710][T18629] tipc: Disabling bearer [ 512.410128][T18649] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3893'. [ 512.420590][T18649] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3893'. [ 512.559469][T18649] bond1: entered promiscuous mode [ 512.572929][T18649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 512.877960][T18665] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3895'. [ 513.184104][T18670] vlan2: entered promiscuous mode [ 513.203981][T18670] syz_tun: entered promiscuous mode [ 513.288766][T18674] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3899'. [ 513.468701][T18677] netlink: 'syz.7.3899': attribute type 12 has an invalid length. [ 513.501310][T18677] netlink: 'syz.7.3899': attribute type 29 has an invalid length. [ 513.524692][T18677] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3899'. [ 513.755007][T18686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3904'. [ 514.788492][T18737] syzkaller0: entered promiscuous mode [ 514.794047][T18737] syzkaller0: entered allmulticast mode [ 514.970998][T18744] netlink: 'syz.8.3927': attribute type 6 has an invalid length. [ 515.081734][T18749] __nla_validate_parse: 3 callbacks suppressed [ 515.081755][T18749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3930'. [ 515.102983][T18749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3930'. [ 515.168400][T18749] bond2: entered promiscuous mode [ 515.177061][T18749] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.200772][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3929'. [ 515.233556][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3929'. [ 516.069956][T18744] lo speed is unknown, defaulting to 1000 [ 516.164232][T18764] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3929'. [ 516.356397][ T5185] Bluetooth: hci5: command 0x0405 tx timeout [ 516.535327][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3936'. [ 516.777500][T18794] netlink: 'syz.7.3939': attribute type 7 has an invalid length. [ 516.832522][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3939'. [ 516.924957][T18799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.389801][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3943'. [ 517.401619][T18799] bond2 (unregistering): Released all slaves [ 517.416012][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3943'. [ 517.564808][T18815] bond0: entered promiscuous mode [ 517.596404][T18815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.849716][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3947'. [ 517.876374][T18827] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 518.059469][T18834] netlink: 'syz.4.3949': attribute type 12 has an invalid length. [ 518.962825][T18854] bridge_slave_1: left allmulticast mode [ 518.989784][T18854] bridge_slave_1: left promiscuous mode [ 519.028028][T18854] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.056928][T18854] bridge_slave_0: left allmulticast mode [ 519.062817][T18854] bridge_slave_0: left promiscuous mode [ 519.070122][T18854] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.314911][T18857] syzkaller0: entered promiscuous mode [ 519.324404][T18857] syzkaller0: entered allmulticast mode [ 521.459050][T18859] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 521.460324][T18861] tipc: Enabling of bearer rejected, failed to enable media [ 521.508089][T18866] syzkaller1: entered promiscuous mode [ 521.513631][T18866] syzkaller1: entered allmulticast mode [ 521.703500][T18899] __nla_validate_parse: 4 callbacks suppressed [ 521.703520][T18899] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3967'. [ 521.858883][T18906] nbd: socks must be embedded in a SOCK_ITEM attr [ 521.916244][T18906] block nbd5: shutting down sockets [ 522.041780][T18915] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 522.394323][T18926] syzkaller0: entered promiscuous mode [ 522.401405][T18926] syzkaller0: entered allmulticast mode [ 522.448273][T18926] tipc: Enabled bearer , priority 0 [ 522.476271][T18925] tipc: Resetting bearer [ 522.782015][T18950] netlink: 'syz.9.3988': attribute type 1 has an invalid length. [ 522.793327][T18950] netlink: 15 bytes leftover after parsing attributes in process `syz.9.3988'. [ 523.485990][ T8464] tipc: Node number set to 2360066254 [ 524.720234][T18925] tipc: Disabling bearer [ 524.730099][T18944] FAULT_INJECTION: forcing a failure. [ 524.730099][T18944] name failslab, interval 1, probability 0, space 0, times 0 [ 524.744660][T18944] CPU: 0 UID: 0 PID: 18944 Comm: syz.8.3986 Not tainted syzkaller #0 PREEMPT(full) [ 524.744688][T18944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.744699][T18944] Call Trace: [ 524.744707][T18944] [ 524.744715][T18944] dump_stack_lvl+0x189/0x250 [ 524.744745][T18944] ? __pfx____ratelimit+0x10/0x10 [ 524.744766][T18944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.744788][T18944] ? __pfx__printk+0x10/0x10 [ 524.744834][T18944] ? __pfx___might_resched+0x10/0x10 [ 524.744858][T18944] ? fs_reclaim_acquire+0x7d/0x100 [ 524.744882][T18944] should_fail_ex+0x414/0x560 [ 524.744914][T18944] ? alloc_netdev_mqs+0xa3/0x11b0 [ 524.744936][T18944] should_failslab+0xa8/0x100 [ 524.744966][T18944] __kvmalloc_node_noprof+0x161/0x5f0 [ 524.744993][T18944] ? alloc_netdev_mqs+0xa3/0x11b0 [ 524.745015][T18944] ? snprintf+0xda/0x120 [ 524.745046][T18944] alloc_netdev_mqs+0xa3/0x11b0 [ 524.745069][T18944] ? __pfx_macvlan_setup+0x10/0x10 [ 524.745093][T18944] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 524.745129][T18944] rtnl_create_link+0x31f/0xd10 [ 524.745164][T18944] rtnl_newlink_create+0x25c/0xb00 [ 524.745200][T18944] ? __mutex_lock+0x5bb/0x1350 [ 524.745229][T18944] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 524.745254][T18944] ? __pfx___mutex_lock+0x10/0x10 [ 524.745287][T18944] ? ns_capable+0x8a/0xf0 [ 524.745312][T18944] rtnl_newlink+0x16d6/0x1c70 [ 524.745333][T18944] ? netlink_sendmsg+0x805/0xb30 [ 524.745370][T18944] ? __pfx_rtnl_newlink+0x10/0x10 [ 524.745420][T18944] ? kasan_quarantine_put+0xdd/0x220 [ 524.745443][T18944] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.745472][T18944] ? nlmon_xmit+0xb0/0x100 [ 524.745490][T18944] ? kmem_cache_free+0x18f/0x400 [ 524.745526][T18944] ? __local_bh_enable_ip+0x12d/0x1c0 [ 524.745545][T18944] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.745567][T18944] ? __local_bh_enable_ip+0x12d/0x1c0 [ 524.745585][T18944] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 524.745609][T18944] ? __dev_queue_xmit+0x27b/0x3b50 [ 524.745634][T18944] ? __dev_queue_xmit+0x27b/0x3b50 [ 524.745656][T18944] ? __dev_queue_xmit+0x27b/0x3b50 [ 524.745686][T18944] ? __dev_queue_xmit+0x1d79/0x3b50 [ 524.745715][T18944] ? __lock_acquire+0xab9/0xd20 [ 524.745769][T18944] ? __pfx_rtnl_newlink+0x10/0x10 [ 524.745786][T18944] rtnetlink_rcv_msg+0x7cf/0xb70 [ 524.745808][T18944] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 524.745826][T18944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 524.745842][T18944] ? ref_tracker_free+0x63a/0x7d0 [ 524.745869][T18944] ? __asan_memcpy+0x40/0x70 [ 524.745889][T18944] ? __pfx_ref_tracker_free+0x10/0x10 [ 524.745950][T18944] netlink_rcv_skb+0x205/0x470 [ 524.745970][T18944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 524.745991][T18944] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.746024][T18944] ? netlink_deliver_tap+0x2e/0x1b0 [ 524.746053][T18944] netlink_unicast+0x82f/0x9e0 [ 524.746093][T18944] ? __pfx_netlink_unicast+0x10/0x10 [ 524.746123][T18944] ? netlink_sendmsg+0x642/0xb30 [ 524.746141][T18944] ? skb_put+0x11b/0x210 [ 524.746167][T18944] netlink_sendmsg+0x805/0xb30 [ 524.746206][T18944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.746231][T18944] ? aa_sock_msg_perm+0xf1/0x1d0 [ 524.746252][T18944] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.746273][T18944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.746294][T18944] __sock_sendmsg+0x21c/0x270 [ 524.746327][T18944] ____sys_sendmsg+0x52d/0x830 [ 524.746357][T18944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.746392][T18944] ? import_iovec+0x74/0xa0 [ 524.746420][T18944] ___sys_sendmsg+0x21f/0x2a0 [ 524.746446][T18944] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.746516][T18944] ? __fget_files+0x2a/0x420 [ 524.746533][T18944] ? __fget_files+0x3a0/0x420 [ 524.746637][T18944] __sys_sendmmsg+0x227/0x430 [ 524.746692][T18944] ? __pfx___sys_sendmmsg+0x10/0x10 [ 524.746713][T18944] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 524.746770][T18944] ? ksys_write+0x22a/0x250 [ 524.746799][T18944] ? __pfx_ksys_write+0x10/0x10 [ 524.746822][T18944] ? rcu_is_watching+0x15/0xb0 [ 524.746850][T18944] __x64_sys_sendmmsg+0xa0/0xc0 [ 524.746873][T18944] do_syscall_64+0xfa/0x3b0 [ 524.746894][T18944] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.746913][T18944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.746933][T18944] ? clear_bhb_loop+0x60/0xb0 [ 524.746957][T18944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.746976][T18944] RIP: 0033:0x7fafd238ebe9 [ 524.746996][T18944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.747011][T18944] RSP: 002b:00007fafd3134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 524.747090][T18944] RAX: ffffffffffffffda RBX: 00007fafd25c5fa0 RCX: 00007fafd238ebe9 [ 524.747110][T18944] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 524.747122][T18944] RBP: 00007fafd3134090 R08: 0000000000000000 R09: 0000000000000000 [ 524.747134][T18944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.747145][T18944] R13: 00007fafd25c6038 R14: 00007fafd25c5fa0 R15: 00007ffe03f02f08 [ 524.747181][T18944] [ 525.276112][T18951] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3987'. [ 525.548872][T18972] RDS: rds_bind could not find a transport for ::ffff:172.30.1.9, load rds_tcp or rds_rdma? [ 525.616930][T18972] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3993'. [ 525.646477][T18979] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3994'. [ 526.270459][T18994] syzkaller0: entered promiscuous mode [ 526.281827][T18994] syzkaller0: entered allmulticast mode [ 526.357200][T19000] pimreg3: entered allmulticast mode [ 526.363372][T18999] tipc: Enabled bearer , priority 0 [ 526.388157][T18993] tipc: Resetting bearer [ 526.821587][T19019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4011'. [ 526.831353][T19019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4011'. [ 526.916078][T19023] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 526.928251][T19023] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4010'. [ 528.699121][T18993] tipc: Disabling bearer [ 528.714056][T19019] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 529.110443][T19034] svc: failed to register nfsdv3 RPC service (errno 111). [ 529.182321][T19034] svc: failed to register nfsaclv3 RPC service (errno 111). [ 529.333489][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4021'. [ 529.421095][T19042] svc: failed to register nfsdv3 RPC service (errno 111). [ 529.440984][T19042] svc: failed to register nfsaclv3 RPC service (errno 111). [ 529.512839][T19058] tipc: Enabled bearer , priority 0 [ 529.526777][T19058] syzkaller0: entered promiscuous mode [ 529.532574][T19058] syzkaller0: entered allmulticast mode [ 529.555464][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4022'. [ 529.568620][T19058] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 529.581115][T19058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.606735][T19058] tipc: Resetting bearer [ 529.621759][T19057] tipc: Resetting bearer [ 529.657774][T19057] tipc: Disabling bearer [ 529.762640][T19047] svc: failed to register nfsdv3 RPC service (errno 111). [ 529.774832][T19047] svc: failed to register nfsaclv3 RPC service (errno 111). [ 529.823599][T19065] lo speed is unknown, defaulting to 1000 [ 530.048002][T19075] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 530.150519][T19060] svc: failed to register nfsdv3 RPC service (errno 111). [ 530.202828][T19060] svc: failed to register nfsaclv3 RPC service (errno 111). [ 530.272370][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4028'. [ 530.285301][T19082] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 530.294701][T19082] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 530.521431][T19070] svc: failed to register nfsdv3 RPC service (errno 111). [ 530.530736][T19070] svc: failed to register nfsaclv3 RPC service (errno 111). [ 530.593483][T19092] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 530.599712][T19090] IPVS: stopping backup sync thread 19092 ... [ 530.663880][T19090] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4031'. [ 530.676256][T19090] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4031'. [ 530.811262][T19090] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4031'. [ 531.048974][T19101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4034'. [ 531.127693][T19097] svc: failed to register nfsdv3 RPC service (errno 111). [ 531.143733][T19097] svc: failed to register nfsaclv3 RPC service (errno 111). [ 531.239282][T19105] lo speed is unknown, defaulting to 1000 [ 531.258024][T19112] syz_tun: entered promiscuous mode [ 531.265625][T19112] syz_tun: left promiscuous mode [ 531.304365][T19116] netlink: 'syz.7.4037': attribute type 11 has an invalid length. [ 531.846713][T19134] svc: failed to register nfsdv3 RPC service (errno 111). [ 531.865240][T19134] svc: failed to register nfsaclv3 RPC service (errno 111). [ 532.264097][T19151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4050'. [ 532.283868][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4052'. [ 532.305499][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4052'. [ 532.453412][T19164] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4056'. [ 532.491833][T19164] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4056'. [ 532.538906][T19167] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4057'. [ 532.550202][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4057'. [ 532.581190][T19164] bond18: entered promiscuous mode [ 532.591821][T19164] 8021q: adding VLAN 0 to HW filter on device bond18 [ 532.596022][T19167] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4057'. [ 532.928897][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4062'. [ 533.173618][T19185] syzkaller0: entered promiscuous mode [ 533.192273][T19185] syzkaller0: entered allmulticast mode [ 533.211968][T19194] tipc: Enabled bearer , priority 0 [ 533.324307][T19184] tipc: Resetting bearer [ 533.557027][T19207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4068'. [ 535.673648][T19184] tipc: Disabling bearer [ 535.696297][T19219] netlink: 'syz.5.4072': attribute type 12 has an invalid length. [ 535.911437][T19221] lo speed is unknown, defaulting to 1000 [ 536.012218][T19225] lo speed is unknown, defaulting to 1000 [ 536.055590][T19241] netlink: 'syz.4.4078': attribute type 5 has an invalid length. [ 536.186320][T19237] lo speed is unknown, defaulting to 1000 [ 536.808632][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 536.823321][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 536.841675][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 536.852772][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 536.860733][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 536.907396][T11010] syz_tun (unregistering): left allmulticast mode [ 537.309991][T19253] lo speed is unknown, defaulting to 1000 [ 538.099096][T19253] chnl_net:caif_netlink_parms(): no params data found [ 538.261194][T19291] __nla_validate_parse: 5 callbacks suppressed [ 538.261214][T19291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4087'. [ 538.491769][T19253] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.512064][T19253] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.529431][T19253] bridge_slave_0: entered allmulticast mode [ 538.553949][T19253] bridge_slave_0: entered promiscuous mode [ 538.579097][T19253] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.595618][T19253] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.610652][T19253] bridge_slave_1: entered allmulticast mode [ 538.640380][T19253] bridge_slave_1: entered promiscuous mode [ 538.741204][T19253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.756474][T19253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.828193][T19253] team0: Port device team_slave_0 added [ 538.843938][T19253] team0: Port device team_slave_1 added [ 538.896935][ T51] Bluetooth: hci1: command tx timeout [ 538.968302][T19253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.981414][T19253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.011068][T19253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.037062][T19315] lo speed is unknown, defaulting to 1000 [ 539.047744][T19253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.055455][T19253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.083826][T19253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.233365][T19253] hsr_slave_0: entered promiscuous mode [ 539.245107][T19253] hsr_slave_1: entered promiscuous mode [ 539.255522][T19253] debugfs: 'hsr0' already exists in 'hsr' [ 539.262739][T19253] Cannot create hsr debugfs directory [ 539.443159][T19253] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.455321][T19253] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.522557][T19253] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.535221][T19253] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.644080][T19253] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.654589][T19253] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.722226][T19253] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.732674][T19253] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.754878][T19325] netlink: 'syz.4.4098': attribute type 16 has an invalid length. [ 539.763375][T19325] netlink: 'syz.4.4098': attribute type 17 has an invalid length. [ 539.782972][T19325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.997241][T19253] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 540.033865][T19253] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 540.064304][T19253] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 540.086400][T19328] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4099'. [ 540.090947][T19253] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 540.131452][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4099'. [ 540.151806][T19328] netlink: 'syz.7.4099': attribute type 1 has an invalid length. [ 540.204663][T19328] netlink: 10 bytes leftover after parsing attributes in process `syz.7.4099'. [ 540.264856][T19329] netlink: 248 bytes leftover after parsing attributes in process `syz.7.4099'. [ 540.623307][T19253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.693713][T19253] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.733296][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.740667][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.803114][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.810405][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.977542][ T51] Bluetooth: hci1: command tx timeout [ 541.289934][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4102'. [ 541.294843][T19253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.310366][T19345] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 541.484996][T19352] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4104'. [ 541.920130][T19253] veth0_vlan: entered promiscuous mode [ 541.945368][T19253] veth1_vlan: entered promiscuous mode [ 542.020520][T19253] veth0_macvtap: entered promiscuous mode [ 542.039570][T19253] veth1_macvtap: entered promiscuous mode [ 542.102876][T19253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.133480][T19253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.157035][ T1145] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.172180][ T1145] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.187530][ T1145] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.209132][ T1145] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.278450][T19379] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4112'. [ 542.363953][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.384246][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.441296][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.451177][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.487451][T19381] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4113'. [ 542.571134][T19383] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 542.624507][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4077'. [ 542.649293][T19386] netlink: 'syz.8.4077': attribute type 10 has an invalid length. [ 542.715222][T19386] team0: Device veth0_macvtap failed to register rx_handler [ 543.057624][ T51] Bluetooth: hci1: command tx timeout [ 543.151309][T19407] netlink: 'syz.4.4121': attribute type 5 has an invalid length. [ 543.769175][T19412] pimreg3: entered allmulticast mode [ 544.365344][T19426] __nla_validate_parse: 5 callbacks suppressed [ 544.365368][T19426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4126'. [ 544.726860][T19440] pimreg3: entered allmulticast mode [ 545.136331][ T51] Bluetooth: hci1: command tx timeout [ 545.196416][T19456] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4135'. [ 545.297925][T19451] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4134'. [ 545.308253][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4134'. [ 545.527238][T19467] pimreg: entered allmulticast mode [ 545.545492][T19467] dvmrp8: entered allmulticast mode [ 545.552023][T19467] pimreg: left allmulticast mode [ 545.556159][T19468] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4137'. [ 545.558740][T19467] dvmrp8: left allmulticast mode [ 545.855538][T19482] bond0: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 546.196515][T19491] syzkaller0: entered promiscuous mode [ 546.203590][T19491] syzkaller0: entered allmulticast mode [ 546.215837][T19492] tipc: Started in network mode [ 546.220743][T19492] tipc: Node identity , cluster identity 4711 [ 546.227476][T19492] tipc: Failed to obtain node identity [ 546.233001][T19492] tipc: Enabling of bearer rejected, failed to enable media [ 548.535484][ T8464] IPVS: starting estimator thread 0... [ 548.637406][T19506] IPVS: using max 23 ests per chain, 55200 per kthread [ 548.757037][T19508] syzkaller0: entered promiscuous mode [ 548.766419][T19508] syzkaller0: entered allmulticast mode [ 548.832803][T19519] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4154'. [ 548.845904][T19519] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4154'. [ 548.888073][T19521] netlink: 'syz.4.4155': attribute type 16 has an invalid length. [ 548.896949][T19521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4155'. [ 549.711391][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4161'. [ 552.842842][T19545] syzkaller0: entered promiscuous mode [ 552.852086][T19545] syzkaller0: entered allmulticast mode [ 552.863440][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4162'. [ 552.902214][T19542] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.925372][T19547] tipc: Enabled bearer , priority 0 [ 552.948915][T19544] tipc: Resetting bearer [ 553.101689][T19550] netlink: 'syz.8.4164': attribute type 83 has an invalid length. [ 553.591644][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 553.617284][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 553.643967][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 553.660526][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 553.678158][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 554.793330][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 554.811502][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 554.820866][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 554.841379][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 554.850470][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 555.647840][T19544] tipc: Disabling bearer [ 555.722331][T19566] lo speed is unknown, defaulting to 1000 [ 555.750491][T19563] lo speed is unknown, defaulting to 1000 [ 555.786623][ T51] Bluetooth: hci3: command tx timeout [ 555.860944][T19569] Bluetooth: MGMT ver 1.23 [ 555.921780][T19569] geneve2: entered promiscuous mode [ 555.948661][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4168'. [ 556.000966][T19576] pimreg: entered allmulticast mode [ 556.173485][T19582] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4172'. [ 556.726270][T19566] chnl_net:caif_netlink_parms(): no params data found [ 556.896309][ T51] Bluetooth: hci6: command tx timeout [ 556.985522][T19601] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4177'. [ 557.007162][T19601] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4177'. [ 557.025111][T19563] chnl_net:caif_netlink_parms(): no params data found [ 557.205553][T19601] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4177'. [ 557.255391][T19566] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.275050][T19566] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.284646][T19566] bridge_slave_0: entered allmulticast mode [ 557.302752][T19566] bridge_slave_0: entered promiscuous mode [ 557.333677][T19566] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.345457][T19566] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.363328][T19566] bridge_slave_1: entered allmulticast mode [ 557.374171][T19566] bridge_slave_1: entered promiscuous mode [ 557.640663][T19566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.665021][T19563] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.674096][T19563] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.683053][T19563] bridge_slave_0: entered allmulticast mode [ 557.692189][T19563] bridge_slave_0: entered promiscuous mode [ 557.707072][T19566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.717697][T19563] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.735458][T19563] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.743300][T19563] bridge_slave_1: entered allmulticast mode [ 557.752558][T19563] bridge_slave_1: entered promiscuous mode [ 557.856639][ T51] Bluetooth: hci3: command tx timeout [ 557.883173][T19621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4182'. [ 557.894964][T19566] team0: Port device team_slave_0 added [ 557.931451][T19566] team0: Port device team_slave_1 added [ 557.939640][T19619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4181'. [ 557.949227][T19619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4181'. [ 557.958438][T19619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4181'. [ 557.967741][T19619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4181'. [ 558.076511][T19563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.097699][T19566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.113892][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.191316][T19566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.225204][T19566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.243307][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.341316][T19566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.390172][T19563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.652066][T19563] team0: Port device team_slave_0 added [ 558.718091][T19563] team0: Port device team_slave_1 added [ 558.797697][T19566] hsr_slave_0: entered promiscuous mode [ 558.823345][T19566] hsr_slave_1: entered promiscuous mode [ 558.846327][T19566] debugfs: 'hsr0' already exists in 'hsr' [ 558.866123][T19566] Cannot create hsr debugfs directory [ 558.925434][T19563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.946629][T19563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.989762][ T51] Bluetooth: hci6: command tx timeout [ 558.995010][T19563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.110987][T19563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.151779][T19563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.204624][T19563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.669901][T19563] hsr_slave_0: entered promiscuous mode [ 559.692866][T19563] hsr_slave_1: entered promiscuous mode [ 559.709971][T19563] debugfs: 'hsr0' already exists in 'hsr' [ 559.722126][T19563] Cannot create hsr debugfs directory [ 559.897092][T19673] lo speed is unknown, defaulting to 1000 [ 559.936456][ T51] Bluetooth: hci3: command tx timeout [ 560.169380][ T30] audit: type=1800 audit(1757075605.996:7): pid=19681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4199" name="memory.events" dev="tmpfs" ino=1616 res=0 errno=0 [ 560.966821][T19705] __nla_validate_parse: 4 callbacks suppressed [ 560.966841][T19705] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4205'. [ 560.976656][T19704] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4205'. [ 561.065430][ T51] Bluetooth: hci6: command tx timeout [ 561.210727][T19712] vxlan0: entered promiscuous mode [ 561.222161][T19712] vxlan0: entered allmulticast mode [ 561.243191][ T1145] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.271129][ T1145] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.280419][ T1145] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.302994][ T1145] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.745282][T19730] netlink: 324 bytes leftover after parsing attributes in process `syz.8.4211'. [ 561.913774][T19566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 561.931391][T19730] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4211'. [ 561.956664][T19731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 561.975327][T19730] netlink: 27 bytes leftover after parsing attributes in process `syz.8.4211'. [ 561.994295][T19733] netlink: 'syz.7.4212': attribute type 4 has an invalid length. [ 562.008199][T19733] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4212'. [ 562.017786][ T51] Bluetooth: hci3: command tx timeout [ 562.032447][T19566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 562.092082][T19733] Ã: renamed from bond0 (while UP) [ 562.307710][T19566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 562.339726][T19566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 562.585242][T19753] netlink: 'syz.4.4214': attribute type 10 has an invalid length. [ 563.112847][T19566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.137073][ T51] Bluetooth: hci6: command tx timeout [ 563.179184][T19566] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.377909][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.385133][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.517482][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.524686][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.719748][T19563] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 563.777149][T19563] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 563.843872][T19789] dummy0: entered promiscuous mode [ 563.856616][T19789] macsec1: entered promiscuous mode [ 563.864167][T19789] macsec1: entered allmulticast mode [ 563.894084][T19789] dummy0: entered allmulticast mode [ 563.937325][T19789] dummy0: left allmulticast mode [ 563.942785][T19789] dummy0: left promiscuous mode [ 564.018902][T19563] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 564.062392][T19563] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 564.629366][T19563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.632847][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4229'. [ 564.701117][T19563] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.850245][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.857552][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.908843][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.916093][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.942262][T19823] lo speed is unknown, defaulting to 1000 [ 565.155622][T19566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.174698][T19838] netlink: 'syz.7.4232': attribute type 21 has an invalid length. [ 565.206679][T19838] netlink: 'syz.7.4232': attribute type 1 has an invalid length. [ 565.214577][T19838] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4232'. [ 565.804746][T19566] veth0_vlan: entered promiscuous mode [ 565.844512][T19566] veth1_vlan: entered promiscuous mode [ 566.033957][T19566] veth0_macvtap: entered promiscuous mode [ 566.140555][T19566] veth1_macvtap: entered promiscuous mode [ 566.301119][T19563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.358047][T19566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.405040][T19566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.500880][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.529346][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.654101][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.683054][ T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.810807][T19563] veth0_vlan: entered promiscuous mode [ 566.877421][T19886] syzkaller0: entered promiscuous mode [ 566.883102][T19886] syzkaller0: entered allmulticast mode [ 566.929553][T19563] veth1_vlan: entered promiscuous mode [ 567.046252][T19884] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.104673][T19879] tipc: Started in network mode [ 567.110068][T19879] tipc: Node identity fa1680be6acd, cluster identity 4711 [ 567.118884][T19879] tipc: Enabled bearer , priority 0 [ 567.138133][T19889] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 567.268363][T19884] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.363925][T19879] tipc: Resetting bearer [ 567.493913][T19884] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.568864][T19878] tipc: Resetting bearer [ 567.625316][T19878] tipc: Disabling bearer [ 567.701755][T19884] team0: Port device netdevsim0 removed [ 567.751893][T19884] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.800319][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.824806][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.956117][T19563] veth0_macvtap: entered promiscuous mode [ 568.031385][T19563] veth1_macvtap: entered promiscuous mode [ 568.053656][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.074358][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.241672][ T1099] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.286727][ T1099] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.341073][T19563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.430910][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4167'. [ 568.533554][ T65] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.575106][T19563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.598344][ T65] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.624460][T19933] netlink: 'syz.7.4255': attribute type 13 has an invalid length. [ 568.702923][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.986344][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.086967][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.143651][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.301677][T19952] netlink: 'syz.1.4258': attribute type 13 has an invalid length. [ 569.310085][T19952] netlink: 'syz.1.4258': attribute type 17 has an invalid length. [ 569.345062][T19959] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4260'. [ 569.573656][T19952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.816007][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.832965][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.882545][T19974] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4263'. [ 569.904988][T19956] lo speed is unknown, defaulting to 1000 [ 570.259540][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.308180][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.592216][T19997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4270'. [ 570.924033][T20009] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.948187][T20016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4274'. [ 570.963771][T20009] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.123844][T20024] nftables ruleset with unbound chain [ 571.255365][T20009] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.295323][T20009] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.601174][T20009] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.631112][T20009] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.659029][T20044] netlink: 'syz.7.4283': attribute type 4 has an invalid length. [ 571.783147][T20009] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.810978][T20009] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.195139][ T1099] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.256604][ T1099] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.304811][ T65] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.371645][ T65] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.431980][ T65] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.471207][ T65] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.591083][ T1168] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.608171][ T1168] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.827515][T20069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4287'. [ 572.903198][T20074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4289'. [ 573.077439][T20079] FAULT_INJECTION: forcing a failure. [ 573.077439][T20079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.140166][T20079] CPU: 1 UID: 0 PID: 20079 Comm: syz.2.4291 Not tainted syzkaller #0 PREEMPT(full) [ 573.140196][T20079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.140208][T20079] Call Trace: [ 573.140216][T20079] [ 573.140225][T20079] dump_stack_lvl+0x189/0x250 [ 573.140255][T20079] ? __pfx____ratelimit+0x10/0x10 [ 573.140276][T20079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.140299][T20079] ? __pfx__printk+0x10/0x10 [ 573.140338][T20079] should_fail_ex+0x414/0x560 [ 573.140371][T20079] _copy_to_user+0x31/0xb0 [ 573.140409][T20079] finalize_log+0xe1/0x160 [ 573.140434][T20079] ? __pfx_finalize_log+0x10/0x10 [ 573.140453][T20079] ? btf_check_type_tags+0x679/0x680 [ 573.140485][T20079] btf_new_fd+0x6fa/0xc90 [ 573.140505][T20079] ? apparmor_capable+0x137/0x1b0 [ 573.140539][T20079] ? __pfx_btf_new_fd+0x10/0x10 [ 573.140562][T20079] ? bpf_token_put+0x143/0x160 [ 573.140590][T20079] ? bpf_btf_load+0x126/0x190 [ 573.140620][T20079] __sys_bpf+0x406/0x870 [ 573.140647][T20079] ? __pfx___sys_bpf+0x10/0x10 [ 573.140686][T20079] ? ksys_write+0x22a/0x250 [ 573.140715][T20079] ? __pfx_ksys_write+0x10/0x10 [ 573.140750][T20079] __x64_sys_bpf+0x7c/0x90 [ 573.140774][T20079] do_syscall_64+0xfa/0x3b0 [ 573.140795][T20079] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.140816][T20079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.140836][T20079] ? clear_bhb_loop+0x60/0xb0 [ 573.140860][T20079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.140879][T20079] RIP: 0033:0x7fe44e78ebe9 [ 573.140897][T20079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.140914][T20079] RSP: 002b:00007fe44f5fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 573.140936][T20079] RAX: ffffffffffffffda RBX: 00007fe44e9c5fa0 RCX: 00007fe44e78ebe9 [ 573.140950][T20079] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 573.140963][T20079] RBP: 00007fe44f5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 573.140975][T20079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 573.140987][T20079] R13: 00007fe44e9c6038 R14: 00007fe44e9c5fa0 R15: 00007ffe5de605c8 [ 573.141021][T20079] [ 573.692301][T20089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4296'. [ 573.778825][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4296'. [ 574.142389][T20093] tipc: Cannot configure node identity twice [ 574.261967][T20112] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4299'. [ 574.362925][T20111] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4295'. [ 574.687965][T20122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4302'. [ 574.720748][T20122] openvswitch: netlink: Flow key attr not present in new flow. [ 574.841543][T20128] FAULT_INJECTION: forcing a failure. [ 574.841543][T20128] name failslab, interval 1, probability 0, space 0, times 0 [ 574.854695][T20128] CPU: 0 UID: 0 PID: 20128 Comm: syz.4.4303 Not tainted syzkaller #0 PREEMPT(full) [ 574.854723][T20128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.854736][T20128] Call Trace: [ 574.854745][T20128] [ 574.854755][T20128] dump_stack_lvl+0x189/0x250 [ 574.854783][T20128] ? __pfx____ratelimit+0x10/0x10 [ 574.854805][T20128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.854829][T20128] ? __pfx__printk+0x10/0x10 [ 574.854864][T20128] ? stack_trace_save+0x9c/0xe0 [ 574.854891][T20128] should_fail_ex+0x414/0x560 [ 574.854924][T20128] should_failslab+0xa8/0x100 [ 574.854955][T20128] kmem_cache_alloc_noprof+0x73/0x3c0 [ 574.854980][T20128] ? radix_tree_node_alloc+0x7e/0x3a0 [ 574.854997][T20128] ? __kasan_slab_free+0x5b/0x80 [ 574.855027][T20128] radix_tree_node_alloc+0x7e/0x3a0 [ 574.855052][T20128] idr_get_free+0x2b3/0xa70 [ 574.855086][T20128] idr_alloc_u32+0x159/0x2d0 [ 574.855113][T20128] ? __pfx_idr_alloc_u32+0x10/0x10 [ 574.855137][T20128] ? do_raw_spin_lock+0x121/0x290 [ 574.855168][T20128] idr_alloc_cyclic+0x9b/0x1b0 [ 574.855196][T20128] btf_new_fd+0x7d0/0xc90 [ 574.855216][T20128] ? apparmor_capable+0x137/0x1b0 [ 574.855250][T20128] ? __pfx_btf_new_fd+0x10/0x10 [ 574.855273][T20128] ? bpf_token_put+0x143/0x160 [ 574.855300][T20128] ? bpf_btf_load+0x126/0x190 [ 574.855330][T20128] __sys_bpf+0x406/0x870 [ 574.855358][T20128] ? __pfx___sys_bpf+0x10/0x10 [ 574.855398][T20128] ? ksys_write+0x22a/0x250 [ 574.855427][T20128] ? __pfx_ksys_write+0x10/0x10 [ 574.855459][T20128] __x64_sys_bpf+0x7c/0x90 [ 574.855484][T20128] do_syscall_64+0xfa/0x3b0 [ 574.855504][T20128] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.855524][T20128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.855543][T20128] ? clear_bhb_loop+0x60/0xb0 [ 574.855567][T20128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.855586][T20128] RIP: 0033:0x7f151dd8ebe9 [ 574.855604][T20128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.855621][T20128] RSP: 002b:00007f151ec65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 574.855648][T20128] RAX: ffffffffffffffda RBX: 00007f151dfc5fa0 RCX: 00007f151dd8ebe9 [ 574.855661][T20128] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 574.855674][T20128] RBP: 00007f151ec65090 R08: 0000000000000000 R09: 0000000000000000 [ 574.855697][T20128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 574.855709][T20128] R13: 00007f151dfc6038 R14: 00007f151dfc5fa0 R15: 00007ffd2b8b07b8 [ 574.855742][T20128] [ 576.693887][T20173] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4307'. [ 577.564491][T20217] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4316'. [ 577.640400][T20220] netlink: 'syz.7.4315': attribute type 29 has an invalid length. [ 577.658954][T20229] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4317'. [ 577.919135][T20236] FAULT_INJECTION: forcing a failure. [ 577.919135][T20236] name failslab, interval 1, probability 0, space 0, times 0 [ 577.948088][T20236] CPU: 1 UID: 0 PID: 20236 Comm: syz.8.4320 Not tainted syzkaller #0 PREEMPT(full) [ 577.948116][T20236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.948129][T20236] Call Trace: [ 577.948137][T20236] [ 577.948146][T20236] dump_stack_lvl+0x189/0x250 [ 577.948181][T20236] ? __pfx____ratelimit+0x10/0x10 [ 577.948203][T20236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.948227][T20236] ? __pfx__printk+0x10/0x10 [ 577.948258][T20236] ? __pfx___might_resched+0x10/0x10 [ 577.948275][T20236] ? fs_reclaim_acquire+0x7d/0x100 [ 577.948299][T20236] should_fail_ex+0x414/0x560 [ 577.948341][T20236] should_failslab+0xa8/0x100 [ 577.948372][T20236] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 577.948398][T20236] ? __d_alloc+0x36/0x7a0 [ 577.948424][T20236] __d_alloc+0x36/0x7a0 [ 577.948450][T20236] d_alloc_pseudo+0x21/0xc0 [ 577.948471][T20236] alloc_file_pseudo+0xcc/0x210 [ 577.948497][T20236] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 577.948535][T20236] anon_inode_getfd+0xca/0x1b0 [ 577.948560][T20236] btf_new_fd+0x9a5/0xc90 [ 577.948580][T20236] ? apparmor_capable+0x137/0x1b0 [ 577.948613][T20236] ? __pfx_btf_new_fd+0x10/0x10 [ 577.948637][T20236] ? bpf_token_put+0x143/0x160 [ 577.948665][T20236] ? bpf_btf_load+0x126/0x190 [ 577.948693][T20236] __sys_bpf+0x406/0x870 [ 577.948720][T20236] ? __pfx___sys_bpf+0x10/0x10 [ 577.948760][T20236] ? ksys_write+0x22a/0x250 [ 577.948787][T20236] ? __pfx_ksys_write+0x10/0x10 [ 577.948818][T20236] __x64_sys_bpf+0x7c/0x90 [ 577.948842][T20236] do_syscall_64+0xfa/0x3b0 [ 577.948862][T20236] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.948880][T20236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.948900][T20236] ? clear_bhb_loop+0x60/0xb0 [ 577.948924][T20236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.948941][T20236] RIP: 0033:0x7fe372b8ebe9 [ 577.948959][T20236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.948976][T20236] RSP: 002b:00007fe373aa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.948998][T20236] RAX: ffffffffffffffda RBX: 00007fe372dc5fa0 RCX: 00007fe372b8ebe9 [ 577.949012][T20236] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 577.949025][T20236] RBP: 00007fe373aa3090 R08: 0000000000000000 R09: 0000000000000000 [ 577.949038][T20236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.949050][T20236] R13: 00007fe372dc6038 R14: 00007fe372dc5fa0 R15: 00007ffc748e5828 [ 577.949085][T20236] [ 578.567711][T20246] netlink: 'syz.2.4324': attribute type 13 has an invalid length. [ 578.575630][T20246] netlink: 'syz.2.4324': attribute type 17 has an invalid length. [ 578.637244][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4324'. [ 578.961879][T20274] netlink: 'syz.7.4332': attribute type 22 has an invalid length. [ 579.035458][T20246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.207773][T20258] xfrm1: entered promiscuous mode [ 579.251803][T20258] xfrm1: entered allmulticast mode [ 579.825788][T20297] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4337'. [ 580.678882][T20323] netlink: 'syz.8.4345': attribute type 6 has an invalid length. [ 580.767142][T20332] netlink: 'syz.2.4346': attribute type 3 has an invalid length. [ 580.806521][T20336] netlink: 'syz.8.4345': attribute type 12 has an invalid length. [ 580.814415][T20336] netlink: 9472 bytes leftover after parsing attributes in process `syz.8.4345'. [ 581.014936][T20340] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4349'. [ 581.252779][T20351] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 581.470578][T20356] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 581.599986][T20366] xt_socket: unknown flags 0x50 [ 581.764081][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4357'. [ 581.809377][T20369] bridge_slave_1: left allmulticast mode [ 581.815793][T20369] bridge_slave_1: left promiscuous mode [ 581.833931][T20369] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.918165][T20369] bridge_slave_0: left allmulticast mode [ 581.955867][T20369] bridge_slave_0: left promiscuous mode [ 581.961811][T20369] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.211652][T20385] netlink: 'syz.1.4361': attribute type 1 has an invalid length. [ 582.365928][T20399] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 582.587655][T20406] pimreg3: entered allmulticast mode [ 582.654504][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4371'. [ 582.696509][T20416] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4371'. [ 582.721042][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4371'. [ 582.766579][T20421] netlink: 'syz.7.4371': attribute type 16 has an invalid length. [ 582.806197][T20416] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4371'. [ 582.808967][T20421] netlink: 'syz.7.4371': attribute type 17 has an invalid length. [ 582.819461][T20416] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4371'. [ 583.001337][T20391] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 583.172005][T20421] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.181236][T20421] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.459052][T20421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.569682][T20421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.892907][T20441] bond0: option mode: unable to set because the bond device has slaves [ 583.979093][ T65] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.012021][ T65] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.105997][ T51] Bluetooth: hci4: command 0x0401 tx timeout [ 584.167204][T20449] lo speed is unknown, defaulting to 1000 [ 584.261840][ T65] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.283666][ T65] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.488926][T20490] netlink: 'syz.2.4384': attribute type 21 has an invalid length. [ 584.591300][T20490] netlink: 'syz.2.4384': attribute type 1 has an invalid length. [ 584.626064][T20490] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4384'. [ 584.869327][T20486] lo speed is unknown, defaulting to 1000 [ 585.086555][T20510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4390'. [ 585.524046][T20529] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4396'. [ 585.759583][T20540] netlink: 'syz.2.4399': attribute type 1 has an invalid length. [ 585.809632][T20540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4399'. [ 586.845591][T20587] tipc: Started in network mode [ 586.857311][T20587] tipc: Node identity 52bc0d4ee8bb, cluster identity 4711 [ 586.900546][T20587] tipc: Enabled bearer , priority 0 [ 586.920842][T20591] syzkaller0: entered promiscuous mode [ 586.956830][T20591] syzkaller0: entered allmulticast mode [ 586.987563][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 587.032722][T20592] Bluetooth: MGMT ver 1.23 [ 587.076025][T20587] tipc: Resetting bearer [ 587.108168][T20594] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4411'. [ 587.118458][T20586] tipc: Resetting bearer [ 587.154567][T20586] tipc: Disabling bearer [ 587.474841][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4416'. [ 587.882474][T20622] lo speed is unknown, defaulting to 1000 [ 589.637389][T20681] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4433'. [ 590.069710][T20703] lo speed is unknown, defaulting to 1000 [ 591.228414][T20744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4450'. [ 591.469143][T20746] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 591.547509][T20744] syz_tun (unregistering): left allmulticast mode [ 591.573904][T20759] FAULT_INJECTION: forcing a failure. [ 591.573904][T20759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.590245][T20759] CPU: 1 UID: 0 PID: 20759 Comm: syz.2.4453 Not tainted syzkaller #0 PREEMPT(full) [ 591.590272][T20759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.590285][T20759] Call Trace: [ 591.590293][T20759] [ 591.590301][T20759] dump_stack_lvl+0x189/0x250 [ 591.590331][T20759] ? __pfx____ratelimit+0x10/0x10 [ 591.590351][T20759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.590374][T20759] ? __pfx__printk+0x10/0x10 [ 591.590400][T20759] ? __might_fault+0xb0/0x130 [ 591.590447][T20759] should_fail_ex+0x414/0x560 [ 591.590478][T20759] _copy_from_iter+0x1de/0x1790 [ 591.590504][T20759] ? rcu_is_watching+0x15/0xb0 [ 591.590523][T20759] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 591.590547][T20759] ? __pfx__copy_from_iter+0x10/0x10 [ 591.590566][T20759] ? __build_skb_around+0x257/0x3e0 [ 591.590588][T20759] ? netlink_sendmsg+0x642/0xb30 [ 591.590603][T20759] ? skb_put+0x11b/0x210 [ 591.590624][T20759] netlink_sendmsg+0x6b2/0xb30 [ 591.590650][T20759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.590672][T20759] ? aa_sock_msg_perm+0xf1/0x1d0 [ 591.590690][T20759] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.590708][T20759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.590726][T20759] __sock_sendmsg+0x21c/0x270 [ 591.590751][T20759] ____sys_sendmsg+0x505/0x830 [ 591.590776][T20759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.590805][T20759] ? import_iovec+0x74/0xa0 [ 591.590827][T20759] ___sys_sendmsg+0x21f/0x2a0 [ 591.590849][T20759] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.590906][T20759] ? __fget_files+0x2a/0x420 [ 591.590921][T20759] ? __fget_files+0x3a0/0x420 [ 591.590946][T20759] __x64_sys_sendmsg+0x19b/0x260 [ 591.590969][T20759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.590999][T20759] ? __pfx_ksys_write+0x10/0x10 [ 591.591025][T20759] ? do_syscall_64+0xbe/0x3b0 [ 591.591047][T20759] do_syscall_64+0xfa/0x3b0 [ 591.591063][T20759] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.591079][T20759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.591095][T20759] ? clear_bhb_loop+0x60/0xb0 [ 591.591115][T20759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.591130][T20759] RIP: 0033:0x7fe44e78ebe9 [ 591.591147][T20759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.591161][T20759] RSP: 002b:00007fe44f5fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.591181][T20759] RAX: ffffffffffffffda RBX: 00007fe44e9c5fa0 RCX: 00007fe44e78ebe9 [ 591.591193][T20759] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 591.591203][T20759] RBP: 00007fe44f5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 591.591214][T20759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.591224][T20759] R13: 00007fe44e9c6038 R14: 00007fe44e9c5fa0 R15: 00007ffe5de605c8 [ 591.591253][T20759] [ 592.058411][T20760] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 592.068466][T20760] team0: Failed to send options change via netlink (err -105) [ 592.076615][T20760] team0: Port device batadv1 added [ 592.300483][T20781] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4457'. [ 592.378519][T20779] netlink: 'syz.7.4458': attribute type 1 has an invalid length. [ 592.391840][T20771] openvswitch: netlink: Missing key (keys=40, expected=80) [ 592.534377][T20756] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.763312][T20779] smc: adding net device bond0 with user defined pnetid SYZ2 [ 592.852907][T20779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.041447][T20785] bond0: (slave veth7): Enslaving as an active interface with a down link [ 593.110155][T20792] gretap1: entered promiscuous mode [ 593.164574][T20792] bond0: (slave gretap1): making interface the new active one [ 593.200316][T20792] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 593.318237][T20756] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.399107][T20787] macvlan1: entered promiscuous mode [ 593.404680][T20787] macvlan1: entered allmulticast mode [ 593.416447][T20787] bond0: entered promiscuous mode [ 593.432494][T20787] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 593.444691][T20787] bond0: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 593.473077][T20787] bond0: left promiscuous mode [ 593.572246][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4463'. [ 593.592375][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4463'. [ 593.604703][T20819] netlink: 'syz.4.4463': attribute type 1 has an invalid length. [ 593.635266][T20819] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4463'. [ 593.675994][T20822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4463'. [ 593.792556][T20756] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.044175][T20756] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.153851][T20834] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 594.642515][T20843] syzkaller0: entered promiscuous mode [ 594.650932][T20843] syzkaller0: entered allmulticast mode [ 594.669773][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.986088][T20869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4475'. [ 595.426772][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4476'. [ 595.701649][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4478'. [ 597.269263][ T65] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.285525][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.297429][T20869] FAULT_INJECTION: forcing a failure. [ 597.297429][T20869] name failslab, interval 1, probability 0, space 0, times 0 [ 597.337238][T20869] CPU: 1 UID: 0 PID: 20869 Comm: syz.4.4475 Not tainted syzkaller #0 PREEMPT(full) [ 597.337267][T20869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.337279][T20869] Call Trace: [ 597.337288][T20869] [ 597.337297][T20869] dump_stack_lvl+0x189/0x250 [ 597.337327][T20869] ? __pfx____ratelimit+0x10/0x10 [ 597.337349][T20869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.337381][T20869] ? __pfx__printk+0x10/0x10 [ 597.337416][T20869] ? __pfx___might_resched+0x10/0x10 [ 597.337435][T20869] ? fs_reclaim_acquire+0x7d/0x100 [ 597.337460][T20869] should_fail_ex+0x414/0x560 [ 597.337494][T20869] should_failslab+0xa8/0x100 [ 597.337524][T20869] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 597.337551][T20869] ? __alloc_skb+0x112/0x2d0 [ 597.337578][T20869] __alloc_skb+0x112/0x2d0 [ 597.337604][T20869] netlink_ack+0x146/0xa50 [ 597.337622][T20869] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 597.337640][T20869] ? ref_tracker_free+0x63a/0x7d0 [ 597.337668][T20869] ? __asan_memcpy+0x40/0x70 [ 597.337689][T20869] ? __pfx_ref_tracker_free+0x10/0x10 [ 597.337746][T20869] netlink_rcv_skb+0x28c/0x470 [ 597.337768][T20869] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 597.337790][T20869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.337825][T20869] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.337856][T20869] netlink_unicast+0x82f/0x9e0 [ 597.337905][T20869] ? __pfx_netlink_unicast+0x10/0x10 [ 597.337937][T20869] ? netlink_sendmsg+0x642/0xb30 [ 597.337955][T20869] ? skb_put+0x11b/0x210 [ 597.337981][T20869] netlink_sendmsg+0x805/0xb30 [ 597.338013][T20869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.338038][T20869] ? aa_sock_msg_perm+0xf1/0x1d0 [ 597.338060][T20869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.338082][T20869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.338103][T20869] __sock_sendmsg+0x21c/0x270 [ 597.338134][T20869] ____sys_sendmsg+0x505/0x830 [ 597.338164][T20869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.338198][T20869] ? import_iovec+0x74/0xa0 [ 597.338226][T20869] ___sys_sendmsg+0x21f/0x2a0 [ 597.338253][T20869] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.338320][T20869] ? __fget_files+0x2a/0x420 [ 597.338336][T20869] ? __fget_files+0x3a0/0x420 [ 597.338374][T20869] __x64_sys_sendmsg+0x19b/0x260 [ 597.338402][T20869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.338437][T20869] ? __pfx_ksys_write+0x10/0x10 [ 597.338469][T20869] ? do_syscall_64+0xbe/0x3b0 [ 597.338496][T20869] do_syscall_64+0xfa/0x3b0 [ 597.338515][T20869] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.338535][T20869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.338554][T20869] ? clear_bhb_loop+0x60/0xb0 [ 597.338579][T20869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.338597][T20869] RIP: 0033:0x7f151dd8ebe9 [ 597.338616][T20869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.338632][T20869] RSP: 002b:00007f151ec44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.338654][T20869] RAX: ffffffffffffffda RBX: 00007f151dfc6090 RCX: 00007f151dd8ebe9 [ 597.338669][T20869] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 597.338681][T20869] RBP: 00007f151ec44090 R08: 0000000000000000 R09: 0000000000000000 [ 597.338693][T20869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.338705][T20869] R13: 00007f151dfc6128 R14: 00007f151dfc6090 R15: 00007ffd2b8b07b8 [ 597.338739][T20869] [ 597.738825][ T1145] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.651683][T20923] pimreg3: entered allmulticast mode [ 598.904126][T20932] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4491'. [ 599.353197][T20940] sctp: [Deprecated]: syz.2.4494 (pid 20940) Use of int in maxseg socket option. [ 599.353197][T20940] Use struct sctp_assoc_value instead [ 599.419838][T20940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4494'. [ 599.658442][T20951] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 599.683092][T20951] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 599.916412][T20965] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4501'. [ 601.177159][T20998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4506'. [ 601.219409][T20998] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4506'. [ 601.337845][T21004] lo speed is unknown, defaulting to 1000 [ 601.418771][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4509'. [ 601.775072][T21020] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4512'. [ 601.820449][T21015] syzkaller0: entered promiscuous mode [ 601.826222][T21015] syzkaller0: entered allmulticast mode [ 601.999760][T21027] netlink: 'syz.4.4516': attribute type 1 has an invalid length. [ 604.223304][T21027] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 604.310236][T21035] tipc: New replicast peer: 255.255.255.255 [ 604.326907][T21035] tipc: Enabled bearer , priority 10 [ 604.526443][T21059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4524'. [ 604.596683][T21062] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4525'. [ 604.619746][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4523'. [ 605.086828][T21085] syzkaller0: entered promiscuous mode [ 605.094017][T21085] syzkaller0: entered allmulticast mode [ 605.114585][T21085] tipc: Started in network mode [ 605.119942][T21085] tipc: Node identity , cluster identity 4711 [ 605.126933][T21085] tipc: Failed to obtain node identity [ 605.132522][T21085] tipc: Enabling of bearer rejected, failed to enable media [ 605.273197][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4535'. [ 606.163702][T21111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4540'. [ 608.444418][T21133] bridge: RTM_NEWNEIGH with invalid ether address [ 608.702199][T21148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4552'. [ 608.832059][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4553'. [ 608.842758][T21153] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4554'. [ 608.999494][T21154] syzkaller0: entered promiscuous mode [ 609.024921][T21154] syzkaller0: entered allmulticast mode [ 609.047418][T21158] tipc: Started in network mode [ 609.052521][T21158] tipc: Node identity , cluster identity 4711 [ 609.106990][T21158] tipc: Failed to obtain node identity [ 609.116894][T21158] tipc: Enabling of bearer rejected, failed to enable media [ 609.376506][T21174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4560'. [ 609.993545][ T51] block nbd5: Receive control failed (result -32) [ 611.377974][T21184] netlink: 'syz.7.4563': attribute type 1 has an invalid length. [ 611.387004][T21184] netlink: 208 bytes leftover after parsing attributes in process `syz.7.4563'. [ 611.661547][T21191] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4566'. [ 611.697270][T21186] lo speed is unknown, defaulting to 1000 [ 611.704884][T21189] tipc: Enabled bearer , priority 0 [ 612.567363][T21218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4573'. [ 613.010093][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4575'. [ 613.418945][T21242] netlink: 'syz.1.4579': attribute type 6 has an invalid length. [ 613.490443][T21236] syzkaller0: entered promiscuous mode [ 613.496287][T21236] syzkaller0: entered allmulticast mode [ 613.499037][T21246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4581'. [ 613.513393][T21236] tipc: Enabled bearer , priority 0 [ 613.551724][T21234] tipc: Resetting bearer [ 613.637362][T21251] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4580'. [ 614.217220][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4583'. [ 614.234444][T21257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4583'. [ 614.244195][T21257] netlink: 'syz.2.4583': attribute type 12 has an invalid length. [ 614.549869][ T5958] tipc: Node number set to 2430304446 [ 615.768745][T21234] tipc: Disabling bearer [ 615.796381][T21255] bond0: entered promiscuous mode [ 615.801562][T21255] bond_slave_0: entered promiscuous mode [ 615.816962][T21255] bond_slave_1: entered promiscuous mode [ 615.851061][T21255] batadv0: entered promiscuous mode [ 615.857721][T21255] debugfs: 'hsr1' already exists in 'hsr' [ 615.863673][T21255] Cannot create hsr debugfs directory [ 615.870904][T21255] hsr1: entered allmulticast mode [ 615.876451][T21255] bond0: entered allmulticast mode [ 615.881717][T21255] bond_slave_0: entered allmulticast mode [ 615.888855][T21255] bond_slave_1: entered allmulticast mode [ 615.896167][T21255] batadv0: entered allmulticast mode [ 615.902438][T21255] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 615.915256][T21255] bond0: left promiscuous mode [ 615.915473][T21260] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4584'. [ 615.932127][T21255] bond_slave_0: left promiscuous mode [ 615.941424][T21255] bond_slave_1: left promiscuous mode [ 615.950505][T21255] batadv0: left promiscuous mode [ 616.047654][T21260] lo speed is unknown, defaulting to 1000 [ 616.270951][T21278] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4587'. [ 616.483127][T21278] bond1: entered promiscuous mode [ 616.510131][T21278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 616.607459][T21282] __nla_validate_parse: 1 callbacks suppressed [ 616.607480][T21282] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4589'. [ 616.648134][T21282] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4589'. [ 616.738723][T21282] lo speed is unknown, defaulting to 1000 [ 616.813533][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4589'. [ 616.958919][T21282] lo speed is unknown, defaulting to 1000 [ 616.971797][T21282] lo speed is unknown, defaulting to 1000 [ 617.322382][T21314] netlink: 'syz.1.4595': attribute type 13 has an invalid length. [ 617.331042][T21314] netlink: 'syz.1.4595': attribute type 17 has an invalid length. [ 617.424293][T21314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.562158][T21317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4595'. [ 617.601114][T21323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4596'. [ 617.621026][T21315] lo speed is unknown, defaulting to 1000 [ 617.998437][T21314] lo speed is unknown, defaulting to 1000 [ 618.338400][T21282] infiniband syz0: set down [ 618.363819][T21282] infiniband syz0: added lo [ 618.399612][T21282] syz0: rxe_create_cq: returned err = -12 [ 618.414073][T21282] infiniband syz0: Couldn't create ib_mad CQ [ 618.423940][T21282] infiniband syz0: Couldn't open port 1 [ 618.539256][T21282] RDS/IB: syz0: added [ 618.545092][T21282] smc: adding ib device syz0 with port count 1 [ 618.555342][T21282] smc: ib device syz0 port 1 has no pnetid [ 618.860583][T21326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.877082][T21326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.982909][ T8465] lo speed is unknown, defaulting to 1000 [ 618.990450][ T3554] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.000297][ T3554] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.018947][ T5958] lo speed is unknown, defaulting to 1000 [ 619.071917][ T3554] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.080655][ T3554] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.088891][T21330] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4598'. [ 619.094937][ T3554] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.109275][ T3554] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.137550][T21282] lo speed is unknown, defaulting to 1000 [ 619.242432][ T3554] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.265299][ T3554] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.638981][T21282] lo speed is unknown, defaulting to 1000 [ 620.018848][T21282] lo speed is unknown, defaulting to 1000 [ 620.372052][T21282] lo speed is unknown, defaulting to 1000 [ 620.454618][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4607'. [ 620.486265][ T1145] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.494666][ T1145] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.516039][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4607'. [ 620.535966][ T1145] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.544202][ T1145] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.631938][T21282] lo speed is unknown, defaulting to 1000 [ 620.844061][T21282] lo speed is unknown, defaulting to 1000 [ 621.047175][T21282] lo speed is unknown, defaulting to 1000 [ 621.244359][T21282] lo speed is unknown, defaulting to 1000 [ 621.376291][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 621.445146][T21282] lo speed is unknown, defaulting to 1000 [ 621.643671][T21282] lo speed is unknown, defaulting to 1000 [ 621.842403][T21282] lo speed is unknown, defaulting to 1000 [ 622.045130][T21282] lo speed is unknown, defaulting to 1000 [ 622.243581][T21282] lo speed is unknown, defaulting to 1000 [ 622.436060][T21282] lo speed is unknown, defaulting to 1000 [ 622.636449][T21282] lo speed is unknown, defaulting to 1000 [ 622.845180][T21344] lo speed is unknown, defaulting to 1000 [ 622.997633][T21372] netlink: 'syz.7.4608': attribute type 1 has an invalid length. [ 623.073422][T21374] netlink: 19 bytes leftover after parsing attributes in process `syz.7.4608'. [ 623.288740][T21372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.452186][T21376] pimreg: entered allmulticast mode [ 623.822219][T21382] netlink: 308 bytes leftover after parsing attributes in process `syz.1.4610'. [ 624.199967][T21384] syzkaller0: entered promiscuous mode [ 624.213822][T21384] syzkaller0: entered allmulticast mode [ 624.258344][T21384] tipc: Enabled bearer , priority 0 [ 624.268000][T21383] tipc: Resetting bearer [ 624.572243][T21393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4612'. [ 625.390910][ T5949] tipc: Node number set to 3121024334 [ 625.648676][T21415] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 627.071672][T21383] tipc: Disabling bearer [ 627.283141][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4620'. [ 627.370414][T21433] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4622'. [ 627.694038][T21442] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4625'. [ 628.617682][T21461] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4630'. [ 628.633617][T21461] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4630'. [ 628.675612][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4630'. [ 628.693729][T21460] bridge_slave_1: left allmulticast mode [ 628.700118][T21460] bridge_slave_1: left promiscuous mode [ 628.706867][T21460] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.762708][T21460] bridge_slave_0: left allmulticast mode [ 628.768781][T21460] bridge_slave_0: left promiscuous mode [ 628.774803][T21460] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.910840][T21463] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9 [ 628.940864][T21463] netlink: 'syz.8.4631': attribute type 4 has an invalid length. [ 628.961066][T21463] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4631'. [ 628.979373][T21463] Ã: renamed from bond0 [ 628.996198][T21465] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 629.208024][T21478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4634'. [ 629.426269][T21482] netlink: 'syz.8.4636': attribute type 13 has an invalid length. [ 629.549017][T21490] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4637'. [ 629.566959][T21490] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4637'. [ 629.808405][T21499] syzkaller0: entered promiscuous mode [ 629.814148][T21499] syzkaller0: entered allmulticast mode [ 629.830385][T21499] tipc: Enabled bearer , priority 0 [ 629.841339][T21499] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 629.879646][T21499] tipc: Resetting bearer [ 629.891829][T21498] tipc: Resetting bearer [ 629.912193][T21498] tipc: Disabling bearer [ 630.221171][T21514] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 630.681242][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.690987][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.699494][T21537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4653'. [ 630.906816][T21544] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 631.900376][T21586] RDS: rds_bind could not find a transport for ::ffff:172.30.1.9, load rds_tcp or rds_rdma? [ 632.892145][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4673'. [ 632.980116][T21606] netlink: 'syz.8.4675': attribute type 4 has an invalid length. [ 633.084494][T21610] gretap0: entered promiscuous mode [ 633.217301][ T5185] Bluetooth: hci6: command 0x0405 tx timeout [ 633.355611][T21610] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.363447][T21610] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.718638][T21610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.741830][T21610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.023765][T21620] tipc: Enabled bearer , priority 0 [ 634.150002][T21624] syzkaller0: entered promiscuous mode [ 634.158570][T21634] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4679'. [ 634.168711][T21624] syzkaller0: entered allmulticast mode [ 634.195765][T21627] tipc: Resetting bearer [ 634.300254][T21637] netlink: 'syz.8.4679': attribute type 4 has an invalid length. [ 634.393993][T21609] tipc: Resetting bearer [ 635.436403][T21654] sctp: [Deprecated]: syz.7.4683 (pid 21654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.436403][T21654] Use struct sctp_sack_info instead [ 635.933267][ T5185] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 635.953119][ T5185] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 635.962948][ T5185] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 636.001792][ T5185] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 636.019140][ T5185] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 636.884515][T21609] tipc: Disabling bearer [ 636.903498][ T1099] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.912842][ T1099] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.998306][ T1099] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.025820][ T1099] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.148572][T21659] lo speed is unknown, defaulting to 1000 [ 637.170840][T21659] lo speed is unknown, defaulting to 1000 [ 637.243581][T21666] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4688'. [ 637.278404][T21666] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 637.512026][T21679] batadv1: entered promiscuous mode [ 637.660740][T21689] lo: entered allmulticast mode [ 637.728693][T21691] dvmrp8: entered allmulticast mode [ 637.736846][T21689] lo: left allmulticast mode [ 637.743418][T21689] dvmrp8: left allmulticast mode [ 637.809705][T21691] netlink: 'syz.1.4694': attribute type 23 has an invalid length. [ 637.869596][T21689] netlink: 'syz.1.4694': attribute type 6 has an invalid length. [ 637.891682][T21692] netlink: 'syz.1.4694': attribute type 23 has an invalid length. [ 638.097412][ T5185] Bluetooth: hci7: command tx timeout [ 638.263803][T21703] netlink: 'syz.7.4697': attribute type 10 has an invalid length. [ 638.371385][T21703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.400388][T21703] Ã: (slave batadv0): Enslaving as an active interface with an up link [ 638.494091][T21717] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 638.620232][T21659] chnl_net:caif_netlink_parms(): no params data found [ 638.681139][T21730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4702'. [ 638.951286][T21739] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4706'. [ 639.034349][T21747] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4708'. [ 639.045419][T21747] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4708'. [ 639.174426][T21747] bond0: entered promiscuous mode [ 639.191464][T21747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.301881][T21659] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.314595][T21659] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.322155][T21659] bridge_slave_0: entered allmulticast mode [ 639.335036][T21659] bridge_slave_0: entered promiscuous mode [ 639.445604][T21659] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.456902][T21659] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.470951][T21659] bridge_slave_1: entered allmulticast mode [ 639.480417][T21659] bridge_slave_1: entered promiscuous mode [ 639.662897][T21659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.684814][T21764] tipc: Enabled bearer , priority 0 [ 639.709585][T21659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.776139][T21764] tipc: Disabling bearer [ 639.948710][T21659] team0: Port device team_slave_0 added [ 640.011039][T21777] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4713'. [ 640.053263][T21659] team0: Port device team_slave_1 added [ 640.179901][ T5185] Bluetooth: hci7: command tx timeout [ 640.232241][T21787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4716'. [ 640.333666][T21789] openvswitch: netlink: IP tunnel dst address not specified [ 640.350132][T21659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.378263][T21659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.390151][T21786] can: request_module (can-proto-0) failed. [ 640.496879][T21659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.538857][T21659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.559484][T21659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.619628][T21659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.698384][T21801] syzkaller0: entered promiscuous mode [ 640.704803][T21801] syzkaller0: entered allmulticast mode [ 640.848231][T21795] tipc: Started in network mode [ 640.853187][T21795] tipc: Node identity 5aa9aaf74e12, cluster identity 4711 [ 640.869744][T21795] tipc: Enabled bearer , priority 0 [ 640.962120][T21786] tipc: Resetting bearer [ 641.029046][T21785] tipc: Resetting bearer [ 641.092676][T21785] tipc: Disabling bearer [ 641.190699][T21659] hsr_slave_0: entered promiscuous mode [ 641.211452][T21659] hsr_slave_1: entered promiscuous mode [ 641.226183][T21659] debugfs: 'hsr0' already exists in 'hsr' [ 641.237704][T21659] Cannot create hsr debugfs directory [ 641.310799][T21811] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4721'. [ 641.367477][T21802] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 641.778799][T21819] lo speed is unknown, defaulting to 1000 [ 641.823895][T21819] lo speed is unknown, defaulting to 1000 [ 642.257981][ T5185] Bluetooth: hci7: command tx timeout [ 643.209490][T21849] netlink: 116 bytes leftover after parsing attributes in process `syz.7.4730'. [ 643.480875][T21869] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4735'. [ 643.518427][T21869] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4735'. [ 643.667456][T21869] bond3: entered promiscuous mode [ 643.700519][T21869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 644.018497][T21885] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4739'. [ 644.336415][ T5185] Bluetooth: hci7: command tx timeout [ 644.346979][T21659] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 644.411487][T21659] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 644.414032][T21883] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4739'. [ 644.479362][T21659] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 644.619111][T21659] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 644.952201][T21659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.024785][T21659] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.080245][T21916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4744'. [ 645.094007][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.101377][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.157485][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.164823][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.503424][T21928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4747'. [ 645.651612][T21936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4748'. [ 645.695862][T21936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4748'. [ 645.797104][T21936] bond1: entered promiscuous mode [ 645.802837][T21936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 645.908659][T21659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.093606][T21659] veth0_vlan: entered promiscuous mode [ 646.129516][T21659] veth1_vlan: entered promiscuous mode [ 646.233093][T21659] veth0_macvtap: entered promiscuous mode [ 646.278298][T21659] veth1_macvtap: entered promiscuous mode [ 646.340369][T21659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.427841][T21659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.459937][T21961] netlink: 'syz.2.4753': attribute type 1 has an invalid length. [ 646.470709][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.492155][T21961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4753'. [ 646.515187][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.528436][T21961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4753'. [ 646.547749][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.567841][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.669674][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.700016][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.748443][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.757236][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.985149][T21910] Bluetooth: hci5: command 0x0405 tx timeout [ 646.991480][T21910] Bluetooth: hci4: command 0x0401 tx timeout [ 647.108874][T21974] gretap0: entered promiscuous mode [ 647.142201][T21974] gretap0: left promiscuous mode [ 647.220922][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4684'. [ 647.347766][T21988] lo: Caught tx_queue_len zero misconfig [ 647.356460][T21977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4684'. [ 647.569044][T22002] IPVS: set_ctl: invalid protocol: 50 172.20.20.27:20003 [ 647.854805][T22016] lo speed is unknown, defaulting to 1000 [ 647.897989][T22016] lo speed is unknown, defaulting to 1000 [ 648.243074][T22030] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4770'. [ 648.372697][T22034] lo speed is unknown, defaulting to 1000 [ 648.457438][T22032] lo speed is unknown, defaulting to 1000 [ 648.540314][T22046] netlink: 'syz.7.4774': attribute type 5 has an invalid length. [ 648.565698][T22046] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4774'. [ 649.013520][T22063] netlink: 'syz.8.4778': attribute type 12 has an invalid length. [ 649.447134][T22034] lo speed is unknown, defaulting to 1000 [ 649.463833][T22080] netlink: 'syz.3.4783': attribute type 1 has an invalid length. [ 649.475933][T22082] netlink: 'syz.3.4783': attribute type 1 has an invalid length. [ 649.526793][T22078] lo speed is unknown, defaulting to 1000 [ 649.603218][T22084] vlan0: entered allmulticast mode [ 649.630434][T22084] dummy0: entered allmulticast mode [ 650.041164][T22032] lo speed is unknown, defaulting to 1000 [ 650.125943][T22100] __nla_validate_parse: 5 callbacks suppressed [ 650.125965][T22100] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4786'. [ 650.174312][T22102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4786'. [ 650.851080][T22078] lo speed is unknown, defaulting to 1000 [ 651.541362][T22124] syzkaller0: entered promiscuous mode [ 651.565911][T22124] syzkaller0: entered allmulticast mode [ 655.497828][T22191] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4802'. [ 655.679246][T22197] netem: change failed [ 655.720772][T22199] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.4804'. [ 655.750394][T22205] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4802'. [ 656.015458][T22203] lo speed is unknown, defaulting to 1000 [ 656.027626][T22203] lo speed is unknown, defaulting to 1000 [ 656.047141][T22201] lo speed is unknown, defaulting to 1000 [ 656.111133][T22208] lo speed is unknown, defaulting to 1000 [ 656.166077][T22209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4805'. [ 656.265948][T22209] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4805'. [ 657.470595][T22201] lo speed is unknown, defaulting to 1000 [ 657.844261][T22209] netlink: 'syz.7.4805': attribute type 13 has an invalid length. [ 657.906335][T22254] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4815'. [ 657.921627][T22209] netlink: 'syz.7.4805': attribute type 17 has an invalid length. [ 658.209136][T22209] 8021q: adding VLAN 0 to HW filter on device à [ 658.237068][T22209] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.279520][T22209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.314220][ T8463] lo speed is unknown, defaulting to 1000 [ 658.337192][ T8463] syz0: Port: 1 Link ACTIVE [ 658.438979][T22248] team0: Device macvtap1 is already an upper device of the team interface [ 658.480131][T22262] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 658.562186][ T8463] lo speed is unknown, defaulting to 1000 [ 658.623319][T22250] lo speed is unknown, defaulting to 1000 [ 658.630014][T22208] lo speed is unknown, defaulting to 1000 [ 659.075890][T22250] lo speed is unknown, defaulting to 1000 [ 659.910053][T22272] lo speed is unknown, defaulting to 1000 [ 659.991973][T22272] lo speed is unknown, defaulting to 1000 [ 660.132323][T22285] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4821'. [ 660.741578][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4827'. [ 662.027766][T22323] FAULT_INJECTION: forcing a failure. [ 662.027766][T22323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.044533][T22323] CPU: 1 UID: 0 PID: 22323 Comm: syz.8.4834 Not tainted syzkaller #0 PREEMPT(full) [ 662.044560][T22323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 662.044572][T22323] Call Trace: [ 662.044580][T22323] [ 662.044589][T22323] dump_stack_lvl+0x189/0x250 [ 662.044615][T22323] ? __pfx____ratelimit+0x10/0x10 [ 662.044646][T22323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.044666][T22323] ? __pfx__printk+0x10/0x10 [ 662.044692][T22323] ? __might_fault+0xb0/0x130 [ 662.044730][T22323] should_fail_ex+0x414/0x560 [ 662.044761][T22323] _copy_from_iter+0x1de/0x1790 [ 662.044789][T22323] ? rcu_is_watching+0x15/0xb0 [ 662.044810][T22323] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 662.044836][T22323] ? __pfx__copy_from_iter+0x10/0x10 [ 662.044858][T22323] ? __build_skb_around+0x257/0x3e0 [ 662.044882][T22323] ? netlink_sendmsg+0x642/0xb30 [ 662.044900][T22323] ? skb_put+0x11b/0x210 [ 662.044923][T22323] netlink_sendmsg+0x6b2/0xb30 [ 662.044954][T22323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.044979][T22323] ? aa_sock_msg_perm+0xf1/0x1d0 [ 662.045000][T22323] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.045022][T22323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.045045][T22323] __sock_sendmsg+0x21c/0x270 [ 662.045076][T22323] ____sys_sendmsg+0x52d/0x830 [ 662.045106][T22323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.045139][T22323] ? import_iovec+0x74/0xa0 [ 662.045167][T22323] ___sys_sendmsg+0x21f/0x2a0 [ 662.045192][T22323] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.045255][T22323] ? __fget_files+0x2a/0x420 [ 662.045272][T22323] ? __fget_files+0x3a0/0x420 [ 662.045302][T22323] __sys_sendmmsg+0x227/0x430 [ 662.045332][T22323] ? __pfx___sys_sendmmsg+0x10/0x10 [ 662.045352][T22323] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 662.045406][T22323] ? ksys_write+0x22a/0x250 [ 662.045432][T22323] ? __pfx_ksys_write+0x10/0x10 [ 662.045452][T22323] ? rcu_is_watching+0x15/0xb0 [ 662.045478][T22323] __x64_sys_sendmmsg+0xa0/0xc0 [ 662.045503][T22323] do_syscall_64+0xfa/0x3b0 [ 662.045523][T22323] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.045544][T22323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.045563][T22323] ? clear_bhb_loop+0x60/0xb0 [ 662.045587][T22323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.045610][T22323] RIP: 0033:0x7fe372b8ebe9 [ 662.045636][T22323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.045653][T22323] RSP: 002b:00007fe373aa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 662.045676][T22323] RAX: ffffffffffffffda RBX: 00007fe372dc5fa0 RCX: 00007fe372b8ebe9 [ 662.045689][T22323] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 662.045701][T22323] RBP: 00007fe373aa3090 R08: 0000000000000000 R09: 0000000000000000 [ 662.045713][T22323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.045724][T22323] R13: 00007fe372dc6038 R14: 00007fe372dc5fa0 R15: 00007ffc748e5828 [ 662.045756][T22323] [ 663.223257][T22338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4841'. [ 663.366451][T22349] RDS: rds_bind could not find a transport for ::ffff:172.30.1.9, load rds_tcp or rds_rdma? [ 663.687788][T22356] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 663.899180][T22367] sctp: [Deprecated]: syz.1.4845 (pid 22367) Use of int in max_burst socket option. [ 663.899180][T22367] Use struct sctp_assoc_value instead [ 663.994979][T22366] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4849'. [ 664.006730][T22366] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4849'. [ 664.023556][T22366] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4849'. [ 664.072370][T22366] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4849'. [ 664.821423][T22401] lo speed is unknown, defaulting to 1000 [ 664.862698][T22401] lo speed is unknown, defaulting to 1000 [ 665.750084][T22428] block nbd6: server does not support multiple connections per device. [ 665.819646][T22428] block nbd6: shutting down sockets [ 667.343811][T22482] bridge1: entered allmulticast mode [ 667.573519][T22489] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 668.420955][T22510] netlink: 'syz.8.4877': attribute type 49 has an invalid length. [ 669.104257][T22532] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4885'. [ 669.269573][T22531] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4886'. [ 669.297210][T22526] netlink: 'syz.7.4885': attribute type 10 has an invalid length. [ 669.326579][T22538] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4888'. [ 669.342894][T22526] batman_adv: batadv0: Adding interface: netdevsim0 [ 669.371809][T22526] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 669.697042][T22551] netlink: 200 bytes leftover after parsing attributes in process `syz.8.4892'. [ 670.342918][T22574] RDS: rds_bind could not find a transport for ::ffff:172.30.1.9, load rds_tcp or rds_rdma? [ 670.354606][T22574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.517474][T22578] lo speed is unknown, defaulting to 1000 [ 670.535802][T22578] lo speed is unknown, defaulting to 1000 [ 670.579658][T22580] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4903'. [ 670.762597][T22587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.798723][T22611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4907'. [ 672.428442][T22621] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 672.575918][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 672.832500][T22640] netlink: 'syz.8.4914': attribute type 13 has an invalid length. [ 673.215364][T22646] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4915'. [ 673.235704][T22646] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 673.476814][ T48] IPVS: starting estimator thread 0... [ 673.583615][T22654] IPVS: using max 32 ests per chain, 76800 per kthread [ 673.908762][T22661] !: renamed from dummy0 (while UP) [ 674.087216][T22667] tipc: Started in network mode [ 674.092238][T22667] tipc: Node identity 4, cluster identity 4711 [ 674.111867][T22667] tipc: Node number set to 4 [ 674.208590][T22667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4921'. [ 674.367502][T22681] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4926'. [ 674.409672][T22681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input10 [ 674.765236][T22702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4932'. [ 674.885776][T22702] bond2: entered promiscuous mode [ 674.891388][T22702] 8021q: adding VLAN 0 to HW filter on device bond2 [ 674.929730][T22707] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4934'. [ 674.947241][T22713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4933'. [ 675.025253][T22718] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4933'. [ 675.140323][T22728] netlink: 'syz.1.4936': attribute type 7 has an invalid length. [ 675.155981][T22728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4936'. [ 675.189292][T22713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 676.384246][T22774] netlink: 'syz.7.4946': attribute type 39 has an invalid length. [ 676.922541][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4951'. [ 676.973948][T22804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4951'. [ 677.089611][T22799] erspan0: entered promiscuous mode [ 677.104399][T22799] macvtap1: entered promiscuous mode [ 677.151446][T22799] macvtap1: entered allmulticast mode [ 677.168900][T22799] erspan0: entered allmulticast mode [ 677.325140][T22810] lo speed is unknown, defaulting to 1000 [ 677.349098][T22810] lo speed is unknown, defaulting to 1000 [ 677.395113][T22824] netlink: 'syz.3.4955': attribute type 2 has an invalid length. [ 677.699525][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 677.731220][T22830] lo speed is unknown, defaulting to 1000 [ 677.738748][T22836] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4958'. [ 678.096821][T22830] lo speed is unknown, defaulting to 1000 [ 679.593452][T22883] __nla_validate_parse: 2 callbacks suppressed [ 679.593474][T22883] netlink: 566 bytes leftover after parsing attributes in process `syz.3.4969'. [ 679.717662][T22886] tipc: Enabled bearer , priority 0 [ 679.747305][T22886] syzkaller0: entered promiscuous mode [ 679.752832][T22886] syzkaller0: entered allmulticast mode [ 679.883679][T22891] FAULT_INJECTION: forcing a failure. [ 679.883679][T22891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.960558][T22891] CPU: 0 UID: 0 PID: 22891 Comm: syz.7.4971 Not tainted syzkaller #0 PREEMPT(full) [ 679.960588][T22891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 679.960601][T22891] Call Trace: [ 679.960609][T22891] [ 679.960618][T22891] dump_stack_lvl+0x189/0x250 [ 679.960649][T22891] ? __pfx____ratelimit+0x10/0x10 [ 679.960671][T22891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.960695][T22891] ? __pfx__printk+0x10/0x10 [ 679.960723][T22891] ? __might_fault+0xb0/0x130 [ 679.960765][T22891] should_fail_ex+0x414/0x560 [ 679.960797][T22891] _copy_from_user+0x2d/0xb0 [ 679.960823][T22891] ___sys_sendmsg+0x158/0x2a0 [ 679.960850][T22891] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.960919][T22891] ? __fget_files+0x2a/0x420 [ 679.960937][T22891] ? __fget_files+0x3a0/0x420 [ 679.960968][T22891] __x64_sys_sendmsg+0x19b/0x260 [ 679.960996][T22891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 679.961032][T22891] ? __pfx_ksys_write+0x10/0x10 [ 679.961065][T22891] ? do_syscall_64+0xbe/0x3b0 [ 679.961092][T22891] do_syscall_64+0xfa/0x3b0 [ 679.961112][T22891] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.961133][T22891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.961152][T22891] ? clear_bhb_loop+0x60/0xb0 [ 679.961186][T22891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.961204][T22891] RIP: 0033:0x7efec498ebe9 [ 679.961224][T22891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.961241][T22891] RSP: 002b:00007efec58bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.961263][T22891] RAX: ffffffffffffffda RBX: 00007efec4bc5fa0 RCX: 00007efec498ebe9 [ 679.961277][T22891] RDX: 0000000004040010 RSI: 0000200000000200 RDI: 0000000000000003 [ 679.961290][T22891] RBP: 00007efec58bf090 R08: 0000000000000000 R09: 0000000000000000 [ 679.961301][T22891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.961312][T22891] R13: 00007efec4bc6038 R14: 00007efec4bc5fa0 R15: 00007ffec4cd1e38 [ 679.961346][T22891] [ 680.203965][T22892] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 680.378134][T22896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4973'. [ 680.436061][T22896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4973'. [ 680.556306][T22893] tipc: Resetting bearer [ 680.589881][T22885] tipc: Resetting bearer [ 680.667500][T22885] tipc: Disabling bearer [ 681.827189][T22940] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4984'. [ 682.054416][T22955] netlink: 'syz.1.4987': attribute type 13 has an invalid length. [ 682.076625][T22955] netlink: 'syz.1.4987': attribute type 17 has an invalid length. [ 682.137694][T22955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 682.794109][T22991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4994'. [ 683.172645][T23009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5000'. [ 683.211278][T23009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5000'. [ 683.243522][T23010] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4999'. [ 683.265850][T23010] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4999'. [ 683.280826][T23009] bond3: entered promiscuous mode [ 683.286541][T23009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 684.002531][T23050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5009'. [ 684.369970][T23064] netlink: 'syz.8.5014': attribute type 5 has an invalid length. [ 684.378663][T23064] netlink: 'syz.8.5014': attribute type 5 has an invalid length. [ 684.880519][T23090] FAULT_INJECTION: forcing a failure. [ 684.880519][T23090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.954302][T23090] CPU: 0 UID: 0 PID: 23090 Comm: syz.2.5021 Not tainted syzkaller #0 PREEMPT(full) [ 684.954332][T23090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 684.954345][T23090] Call Trace: [ 684.954354][T23090] [ 684.954371][T23090] dump_stack_lvl+0x189/0x250 [ 684.954399][T23090] ? __pfx____ratelimit+0x10/0x10 [ 684.954420][T23090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 684.954440][T23090] ? __pfx__printk+0x10/0x10 [ 684.954465][T23090] ? __might_fault+0xb0/0x130 [ 684.954503][T23090] should_fail_ex+0x414/0x560 [ 684.954536][T23090] _copy_from_iter+0x1de/0x1790 [ 684.954566][T23090] ? rcu_is_watching+0x15/0xb0 [ 684.954588][T23090] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 684.954616][T23090] ? __pfx__copy_from_iter+0x10/0x10 [ 684.954639][T23090] ? __build_skb_around+0x257/0x3e0 [ 684.954664][T23090] ? netlink_sendmsg+0x642/0xb30 [ 684.954683][T23090] ? skb_put+0x11b/0x210 [ 684.954708][T23090] netlink_sendmsg+0x6b2/0xb30 [ 684.954740][T23090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.954765][T23090] ? aa_sock_msg_perm+0xf1/0x1d0 [ 684.954787][T23090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 684.954808][T23090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.954832][T23090] __sock_sendmsg+0x21c/0x270 [ 684.954861][T23090] ____sys_sendmsg+0x505/0x830 [ 684.954888][T23090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 684.954922][T23090] ? import_iovec+0x74/0xa0 [ 684.954950][T23090] ___sys_sendmsg+0x21f/0x2a0 [ 684.954977][T23090] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.955043][T23090] ? __fget_files+0x2a/0x420 [ 684.955059][T23090] ? __fget_files+0x3a0/0x420 [ 684.955090][T23090] __x64_sys_sendmsg+0x19b/0x260 [ 684.955116][T23090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 684.955150][T23090] ? __pfx_ksys_write+0x10/0x10 [ 684.955174][T23090] ? rcu_is_watching+0x15/0xb0 [ 684.955200][T23090] ? do_syscall_64+0xbe/0x3b0 [ 684.955228][T23090] do_syscall_64+0xfa/0x3b0 [ 684.955248][T23090] ? lockdep_hardirqs_on+0x9c/0x150 [ 684.955269][T23090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.955290][T23090] ? clear_bhb_loop+0x60/0xb0 [ 684.955314][T23090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.955333][T23090] RIP: 0033:0x7fe44e78ebe9 [ 684.955353][T23090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.955379][T23090] RSP: 002b:00007fe44f5fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.955404][T23090] RAX: ffffffffffffffda RBX: 00007fe44e9c5fa0 RCX: 00007fe44e78ebe9 [ 684.955419][T23090] RDX: 0000000004040010 RSI: 0000200000000200 RDI: 0000000000000003 [ 684.955433][T23090] RBP: 00007fe44f5fc090 R08: 0000000000000000 R09: 0000000000000000 [ 684.955446][T23090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.955459][T23090] R13: 00007fe44e9c6038 R14: 00007fe44e9c5fa0 R15: 00007ffe5de605c8 [ 684.955493][T23090] [ 685.537134][T23104] __nla_validate_parse: 4 callbacks suppressed [ 685.537156][T23104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5023'. [ 685.553121][ T5949] lo speed is unknown, defaulting to 1000 [ 685.583285][T23104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.584998][ T5949] syz0: Port: 1 Link DOWN [ 685.604449][T23091] geneve2: entered promiscuous mode [ 685.644688][T23091] geneve2: entered allmulticast mode [ 685.777929][ T1168] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 685.794393][ T48] lo speed is unknown, defaulting to 1000 [ 685.810577][ T1099] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 685.873113][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 685.882694][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 686.035064][T23126] netlink: 'syz.7.5027': attribute type 11 has an invalid length. [ 686.066357][T23129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.269706][T23139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.596186][T23153] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5035'. [ 686.618707][T23153] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5035'. [ 686.638771][T23155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5036'. [ 686.675982][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5036'. [ 686.742856][T23154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 686.793786][T23153] bond5: entered promiscuous mode [ 686.799498][T23153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 686.818257][T23161] netlink: 460 bytes leftover after parsing attributes in process `syz.1.5037'. [ 686.876859][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5037'. [ 687.177132][T23177] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5040'. [ 687.248229][T23178] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5040'. [ 687.572278][T23185] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5042'. [ 687.737353][T23189] netlink: 'syz.7.5041': attribute type 1 has an invalid length. [ 689.581765][T23252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.629684][T23257] openvswitch: netlink: Message has 4 unknown bytes. [ 689.646884][T23255] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 689.745221][T23255] bridge_slave_0: left allmulticast mode [ 689.772394][T23255] bridge_slave_0: left promiscuous mode [ 689.806224][T23255] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.867532][T23255] bridge_slave_1: left allmulticast mode [ 689.879331][T23255] bridge_slave_1: left promiscuous mode [ 689.906576][T23255] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.954794][T23255] bond0: (slave bond_slave_0): Releasing backup interface [ 689.980152][T23255] bond0: (slave bond_slave_1): Releasing backup interface [ 690.001351][T23255] team0: Port device team_slave_0 removed [ 690.024720][T23255] team0: Port device team_slave_1 removed [ 690.033341][T23255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.041911][T23255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.053993][T23255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.062724][T23255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.091133][T23296] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 691.481147][T23304] tipc: Enabled bearer , priority 0 [ 691.494044][T23302] syzkaller1: entered promiscuous mode [ 691.500771][T23302] syzkaller1: entered allmulticast mode [ 691.521182][T23304] syzkaller0: entered promiscuous mode [ 691.535508][T23304] syzkaller0: entered allmulticast mode [ 691.582392][T23304] tipc: Resetting bearer [ 691.598774][T23303] tipc: Resetting bearer [ 691.649521][T23303] tipc: Disabling bearer [ 691.800029][T23310] mac80211_hwsim hwsim45 wlan1: Caught tx_queue_len zero misconfig [ 692.537972][T23342] lo speed is unknown, defaulting to 1000 [ 692.579902][T23342] lo speed is unknown, defaulting to 1000 [ 692.643848][T23350] tipc: Enabled bearer , priority 0 [ 692.663957][T23350] syzkaller0: entered promiscuous mode [ 692.683491][T23350] syzkaller0: entered allmulticast mode [ 692.718277][T23350] tipc: Resetting bearer [ 692.738848][T23350] __nla_validate_parse: 5 callbacks suppressed [ 692.738869][T23350] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5091'. [ 692.768871][T23350] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5091'. [ 692.801074][T23350] tipc: Resetting bearer [ 692.844082][T23350] tipc: Disabling bearer [ 693.263545][T23362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5094'. [ 693.645255][T23374] netlink: 'syz.2.5099': attribute type 3 has an invalid length. [ 693.674392][T23377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5100'. [ 693.684053][T23377] netlink: 'syz.8.5100': attribute type 1 has an invalid length. [ 693.692509][T23377] netlink: 'syz.8.5100': attribute type 2 has an invalid length. [ 694.872382][T23410] tunl0: Caught tx_queue_len zero misconfig Connection to 10.128.1.249 closed by remote host. [ 695.456735][ T31] INFO: task syz.5.4094:19308 blocked for more than 143 seconds. [ 695.494860][ T31] Not tainted syzkaller #0 [ 695.535697][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.569603][ T31] task:syz.5.4094 state:D stack:25768 pid:19308 tgid:19307 ppid:18189 task_flags:0x400140 flags:0x00004004 [ 695.582010][ T31] Call Trace: [ 695.585325][ T31] [ 695.588467][ T31] __schedule+0x1798/0x4cc0 [ 695.593105][ T31] ? __lock_acquire+0xab9/0xd20 [ 695.615800][ T31] ? __lock_acquire+0xab9/0xd20 [ 695.620728][ T31] ? __pfx___schedule+0x10/0x10 [ 695.625758][ T31] ? schedule+0x91/0x360 [ 695.630042][ T31] schedule+0x165/0x360 [ 695.634219][ T31] schedule_preempt_disabled+0x13/0x30 [ 695.639723][ T31] __mutex_lock+0x7e6/0x1350 [ 695.644337][ T31] ? __mutex_lock+0x5bb/0x1350 [ 695.649151][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 695.654882][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 695.661217][ T31] ? net_generic+0x1e/0x240 [ 695.666320][ T31] ? net_generic+0x1e/0x240 [ 695.670866][ T31] ? net_generic+0x1e/0x240 [ 695.675385][ T31] ? net_generic+0x1e/0x240 [ 695.680712][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 695.686372][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 695.691950][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 695.699640][ T31] ? bpf_lsm_capable+0x9/0x20 [ 695.704366][ T31] ? security_capable+0x7e/0x2e0 [ 695.709734][ T31] genl_rcv_msg+0x60e/0x790 [ 695.714273][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 695.719475][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 695.725809][ T31] netlink_rcv_skb+0x205/0x470 [ 695.730628][ T31] ? __lock_acquire+0xab9/0xd20 [ 695.735530][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 695.740644][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 695.746063][ T31] ? down_read+0x1ad/0x2e0 [ 695.750499][ T31] genl_rcv+0x28/0x40 [ 695.754504][ T31] netlink_unicast+0x82f/0x9e0 [ 695.759439][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 695.765035][ T31] ? netlink_sendmsg+0x642/0xb30 [ 695.770298][ T31] ? skb_put+0x11b/0x210 [ 695.774560][ T31] netlink_sendmsg+0x805/0xb30 [ 695.780019][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.785359][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 695.791922][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 695.797317][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.802625][ T31] __sock_sendmsg+0x21c/0x270 [ 695.807614][ T31] ____sys_sendmsg+0x505/0x830 [ 695.812407][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.817827][ T31] ? import_iovec+0x74/0xa0 [ 695.822354][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 695.827177][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.832531][ T31] ? __fget_files+0x2a/0x420 [ 695.837251][ T31] ? __fget_files+0x3a0/0x420 [ 695.841972][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 695.847156][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.852649][ T31] ? rcu_is_watching+0x15/0xb0 [ 695.862816][ T31] ? do_syscall_64+0xbe/0x3b0 [ 695.867797][ T31] do_syscall_64+0xfa/0x3b0 [ 695.872331][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.878084][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.884185][ T31] ? clear_bhb_loop+0x60/0xb0 [ 695.888982][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.894903][ T31] RIP: 0033:0x7f5808b8ebe9 [ 695.900020][ T31] RSP: 002b:00007f5809a21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.908549][ T31] RAX: ffffffffffffffda RBX: 00007f5808dc5fa0 RCX: 00007f5808b8ebe9 [ 695.917000][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000008 [ 695.925006][ T31] RBP: 00007f5808c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 695.933067][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.941952][ T31] R13: 00007f5808dc6038 R14: 00007f5808dc5fa0 R15: 00007ffee469cd48 [ 695.950302][ T31] [ 695.953516][ T31] [ 695.953516][ T31] Showing all locks held in the system: [ 695.961472][ T31] 1 lock held by khungtaskd/31: [ 695.995720][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 696.035758][ T31] 5 locks held by kworker/u8:2/36: [ 696.040951][ T31] 2 locks held by getty/5625: [ 696.075691][ T31] #0: ffff88814d3c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 696.085544][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 696.165736][ T31] 8 locks held by kworker/0:6/5936: [ 696.170997][ T31] 3 locks held by kworker/0:7/8463: [ 696.236305][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 696.285727][ T31] #1: ffffc900198e7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 696.325727][ T31] #2: ffffffff8e13f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 696.355724][ T31] 2 locks held by syz.9.4088/19282: [ 696.360981][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 696.395822][ T31] #1: ffffffff8e418708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 696.444314][ T31] 2 locks held by syz.5.4094/19308: [ 696.466024][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 696.474325][ T31] #1: ffffffff8e418708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 696.526061][ T31] 2 locks held by syz.4.4607/21368: [ 696.531326][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 696.566596][ T31] #1: ffffffff8e418708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 696.597011][ T31] 2 locks held by syz.1.5044/23194: [ 696.602359][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 696.635852][ T31] #1: ffffffff8e418708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 696.684062][ T31] 1 lock held by syz.2.5107/23397: [ 696.689599][ T31] 3 locks held by syz.7.5109/23404: [ 696.695042][ T31] #0: ffff888054270dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 696.715931][ T31] #1: ffff8880542700b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 696.735648][ T31] #2: ffffffff8f69e248 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 696.748004][ T31] 5 locks held by syz.8.5116/23424: [ 696.753244][ T31] #0: ffff888076cb4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 696.763654][ T31] #1: ffff888076cb40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 696.773490][ T31] #2: ffffffff8f69e248 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 696.783765][ T31] #3: ffff88806948b338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 696.793623][ T31] #4: ffffffff8e13f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 696.804707][ T31] [ 696.807158][ T31] ============================================= [ 696.807158][ T31] [ 696.819195][ T31] NMI backtrace for cpu 1 [ 696.819224][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 696.819246][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 696.819258][ T31] Call Trace: [ 696.819266][ T31] [ 696.819275][ T31] dump_stack_lvl+0x189/0x250 [ 696.819307][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.819330][ T31] ? __pfx__printk+0x10/0x10 [ 696.819371][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 696.819402][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 696.819432][ T31] ? __pfx__printk+0x10/0x10 [ 696.819464][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 696.819497][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 696.819528][ T31] watchdog+0xf93/0xfe0 [ 696.819560][ T31] ? watchdog+0x1de/0xfe0 [ 696.819592][ T31] kthread+0x70e/0x8a0 [ 696.819620][ T31] ? __pfx_watchdog+0x10/0x10 [ 696.819645][ T31] ? __pfx_kthread+0x10/0x10 [ 696.819671][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 696.819702][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.819720][ T31] ? __pfx_kthread+0x10/0x10 [ 696.819746][ T31] ret_from_fork+0x3fc/0x770 [ 696.819769][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 696.819796][ T31] ? __switch_to_asm+0x39/0x70 [ 696.819820][ T31] ? __switch_to_asm+0x33/0x70 [ 696.819842][ T31] ? __pfx_kthread+0x10/0x10 [ 696.819867][ T31] ret_from_fork_asm+0x1a/0x30 [ 696.819909][ T31] [ 696.819918][ T31] Sending NMI from CPU 1 to CPUs 0: [ 696.973696][ C0] NMI backtrace for cpu 0 [ 696.973715][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 696.973733][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 696.973744][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 696.973767][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 b7 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 696.973781][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 696.973797][ C0] RAX: 348e17986a522600 RBX: ffffffff819683f8 RCX: 348e17986a522600 [ 696.973809][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b9d5d RDI: ffffffff8be33880 [ 696.973820][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 696.973832][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa39330 [ 696.973843][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 696.973854][ C0] FS: 0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 696.973868][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.973879][ C0] CR2: 00007f80f59f84c0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 696.973896][ C0] Call Trace: [ 696.973903][ C0] [ 696.973909][ C0] default_idle+0x13/0x20 [ 696.973927][ C0] default_idle_call+0x74/0xb0 [ 696.973946][ C0] do_idle+0x1e8/0x510 [ 696.973965][ C0] ? __pfx_do_idle+0x10/0x10 [ 696.973987][ C0] cpu_startup_entry+0x44/0x60 [ 696.974002][ C0] rest_init+0x2de/0x300 [ 696.974021][ C0] start_kernel+0x3a9/0x410 [ 696.974040][ C0] x86_64_start_reservations+0x24/0x30 [ 696.974060][ C0] x86_64_start_kernel+0x143/0x1c0 [ 696.974080][ C0] common_startup_64+0x13e/0x147 [ 696.974107][ C0] [ 697.154633][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 697.161540][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 697.170687][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 697.180770][ T31] Call Trace: [ 697.184067][ T31] [ 697.187004][ T31] dump_stack_lvl+0x99/0x250 [ 697.191613][ T31] ? __asan_memcpy+0x40/0x70 [ 697.196210][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 697.201424][ T31] ? __pfx__printk+0x10/0x10 [ 697.206033][ T31] vpanic+0x281/0x750 [ 697.210020][ T31] ? __pfx_vpanic+0x10/0x10 [ 697.214526][ T31] ? preempt_schedule+0xae/0xc0 [ 697.219477][ T31] ? preempt_schedule_common+0x83/0xd0 [ 697.224944][ T31] panic+0xb9/0xc0 [ 697.228667][ T31] ? __pfx_panic+0x10/0x10 [ 697.233090][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 697.238474][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 697.244637][ T31] watchdog+0xfd2/0xfe0 [ 697.248836][ T31] ? watchdog+0x1de/0xfe0 [ 697.253197][ T31] kthread+0x70e/0x8a0 [ 697.257280][ T31] ? __pfx_watchdog+0x10/0x10 [ 697.261963][ T31] ? __pfx_kthread+0x10/0x10 [ 697.266562][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 697.271856][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.277055][ T31] ? __pfx_kthread+0x10/0x10 [ 697.281650][ T31] ret_from_fork+0x3fc/0x770 [ 697.286248][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 697.291367][ T31] ? __switch_to_asm+0x39/0x70 [ 697.296421][ T31] ? __switch_to_asm+0x33/0x70 [ 697.301190][ T31] ? __pfx_kthread+0x10/0x10 [ 697.305786][ T31] ret_from_fork_asm+0x1a/0x30 [ 697.310600][ T31] [ 697.313925][ T31] Kernel Offset: disabled [ 697.318243][ T31] Rebooting in 86400 seconds..