last executing test programs: 5m31.191453015s ago: executing program 3 (id=1179): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e20, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000005c0)={0x751e6ce5, {{0xa, 0x4e24, 0x5, @empty, 0x200}}, {{0xa, 0x4620, 0xfffffffa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}}}, 0x108) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x2) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000002326b3bfc9885f55000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) (async) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x10001, 0x80, 0xc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xfffffcab, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYRES16=r4, @ANYRES32=r10, @ANYBLOB="080003000200000008000400ff00f3bda20000c780000008000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) bind$bt_hci(r3, 0x0, 0x0) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) 5m31.074863624s ago: executing program 3 (id=1182): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000dc0)="d8000000180081084e81f783db4cb9040a10080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090f00201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e003640fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4788}, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008090}, 0x810) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r4, 0x1ad72f7) r6 = accept4(r4, 0x0, 0x0, 0x80000) accept4$netrom(r4, 0x0, 0x0, 0x80000) getpeername$ax25(r6, &(0x7f00000000c0)={{0x3, @default}, [@rose, @netrom, @rose, @netrom, @null, @null, @rose, @null]}, &(0x7f0000000140)=0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="18000000000000008400000001"], 0x38, 0x4000001}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000e0004000000080000000100000080010000", @ANYRES32, @ANYBLOB="00000000000000006a000000000000000000000083a3d1664e6485432572b45ae78c543d83876545780ff8adea99982deee125f8e7adabb76e9ee016c54037f74e2e4e6968fe8ef0329024c6393065925308e155f47c0015b76436aa9739926db8524d2f2909015eb16e9ad1e5189f5c4f86e5d8b495d8bdfa975348a57201", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r10}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) r13 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) 5m30.58330167s ago: executing program 4 (id=1187): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/97, 0x61}, {0x0}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x1, 0x2, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0xc041}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400000800014b5c9fa24f5f6708bcfc75184f2043"], 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tr\nr'], 0xa) sendmsg$netlink(r3, 0x0, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) write$tun(r6, &(0x7f0000000240)=ANY=[], 0xfdef) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f00000002c0)={0x0, 0x7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x26}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e00010000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5m30.080747275s ago: executing program 3 (id=1194): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xe, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000149e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x300000e, 0x12, r4, 0xf2d8b000) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x22020400) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r9, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r8, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x5, 0x2000000000010000}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000feffffff0000000004000004850000d3960009344f8402b29087c960739f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) accept4(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80, 0x0) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000100)={'wg1\x00', 0xd66}) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 5m29.966724809s ago: executing program 3 (id=1195): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x10}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000000) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x4, @f={0x8, 0x2, 0x2, 0x6, {0x9, 0x12, "c90e2fba6bad8a1932148548fcee0e28fdc8"}, 0x1}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, 0xb}, 0x94) 5m29.661829408s ago: executing program 0 (id=1198): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x5, 0xc5, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) 5m29.572898062s ago: executing program 4 (id=1199): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x3c}) ppoll(&(0x7f0000000380)=[{r6, 0x15a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r2, @ANYBLOB="049c01000750050008001300", @ANYRES32=r3, @ANYBLOB="140003002e"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r2, 0x1, {0x2}, 0xfd}, 0x18, &(0x7f0000000140)={&(0x7f0000000200)="8e60d0939067077ef7f42dd0fc7cd47e4cb3fcd453a8d4c3643bfd1a0a8760beccca7607794ac8dae0dfb743be31e4f658a2d58a5fe54fe6f3e8032575046f604a458eb5ab8f35c549565ecdb3ae3389a308963763c3b4b60fb010566e69d45805b93c3d21a3ade1ac223403cbf376b19458a2bdbed52f9a2c3468e6373e63939e5fdcb3a45caf13e0", 0x89}, 0x1, 0x0, 0x0, 0x60008010}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000300)={0x2, 0xe65}) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c4000000190001000000000000000000fe800000000000000000000000000037000000000000000000000000000000014e220000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffffffffffffffdffffffffffffff0000000000000000000000001c0000000000000000000000000000000003000000000101000000000c0008000810"], 0xc4}}, 0x0) 5m29.548389726s ago: executing program 4 (id=1200): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x6, 0x2, 0x1, 0x8, 0xd, 0xb, 0x0, 0x8, 0x3, 0xe, 0x2, 0xf, 0xa, 0xe, 0xb, 0xc], 0x1, [0x0, 0x4, 0x6, 0x3, 0x3, 0x3, 0x7f, 0x401, 0x0, 0x0, 0x7, 0x7, 0x8, 0x81, 0x9, 0x4], [0x9, 0x6, 0x6, 0x2, 0x2, 0xd, 0xe000, 0x3, 0x3, 0xff, 0x6, 0x4, 0x5, 0x7fff, 0x1, 0x3ff]}}}}]}, 0x88}}, 0x4) 5m29.464356001s ago: executing program 0 (id=1201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18) r2 = socket(0x8000000010, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) write(r2, &(0x7f00000002c0)="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", 0xfc) sendmsg$rds(r2, &(0x7f00000008c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1, &(0x7f0000000840)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {&(0x7f00000004c0)=""/133, 0x85}, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/111, 0x6f}, {&(0x7f0000000580)=""/153, 0x99}, {&(0x7f00000006c0)=""/119, 0x77}], 0x3, 0x55}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000740)=""/177, 0xb1}, &(0x7f0000000800), 0x43}}], 0x78, 0x4040044}, 0x800) 5m29.461489758s ago: executing program 4 (id=1202): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x44080) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000600)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000680)={'syztnl0\x00', r2, 0x7, 0x88, 0x9, 0x9, {{0x39, 0x4, 0x0, 0x2, 0xe4, 0x68, 0x0, 0x5, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xde, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2f}, @remote]}, @rr={0x7, 0x23, 0xc2, [@remote, @rand_addr=0x64010100, @rand_addr=0x64010100, @private=0xa010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast]}, @cipso={0x86, 0xc, 0x1, [{0x2, 0x6, "a994dae6"}]}, @lsrr={0x83, 0x7, 0x54, [@loopback]}, @timestamp_prespec={0x44, 0x34, 0x9e, 0x3, 0xa, [{@remote, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdb6b}, {@private=0xa010102, 0x3701}, {@broadcast, 0x2}, {@private=0xa010101, 0x200}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x5}]}, @ssrr={0x89, 0xb, 0x39, [@rand_addr=0x64010100, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x12, 0x3, 0x8, [{@loopback, 0x900}, {@broadcast, 0x6}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xc4, 0x0, 0x6, [0x10000, 0x3]}, @rr={0x7, 0x1f, 0x7, [@private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast2, @rand_addr=0x64010102, @empty]}]}}}}}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000514010028bd7000fedbdf25080001000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@setlink={0x178, 0x13, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x30208, 0x802}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_VF_PORTS={0x140, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "feaddf8f56d878ae585a65b69c9ed11a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f5adb82e4fb95d3bbf67763827fd8e8d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x40}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '/*\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dd5d1fed4fcd4de952b3ec0ea4343fe6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "426bf17a38cdee7ac93198904cc8d51a"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "facbd5c9bb8d2caa07cdc802d1795841"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a05fce01859099de948739fb3ba89a4e"}, @IFLA_PORT_REQUEST={0x5}]}, {0x94, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, 'syzkaller0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "505976f16926d9ca533bb38b28c7fb47"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "72595028e58257e8b2c2fc3eda6c2aea"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'batadv\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'batadv\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a2b78eaed84f6ad8f67dae4115479eb8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6264093936c8e2d5ac0a39030456f06d"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000140)=0xa, 0x4) 5m29.420823368s ago: executing program 0 (id=1203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x18, 0x1, 0x24, 0x5}}], 0x18}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="f786", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}], 0x3, 0x608d811) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a0104000000000000000002000090dc00004000000000000000010900010073797a30000000006e0abdc8aa408c0900020073797a3200000000140000001100010000000000000000000000000a67e81bc16d9b1dd5aabe05e8dbda94bcec75d69cc05c22669def21f9e63ed26da378bf98f34130b9630d77f0b87e7dc2574c110dbbfdc5aee23503199a2eeff12f24b7389f8622712310acab87c6f6a6a0f3200f68655615fe3e2692f5efef80fe58e0"], 0x60}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x30, 0x9, 0x6, 0xfffff020}, {0x6, 0x3, 0x9, 0x1}]}) 5m29.132066479s ago: executing program 0 (id=1207): r0 = socket$netlink(0x10, 0x3, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5}, @IFLA_GRE_TOS={0x5, 0x9, 0x4}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5690}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x17}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000080040000000000034b8a8e6672ea6a4eba60c66", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x3ac, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe9f}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x27}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b6db05}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6213d66a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42ce8a5b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1c4000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf28}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x39c5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd727}]}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) 5m29.119985248s ago: executing program 0 (id=1208): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c0003801d000380140001007465616d300000000000000000000000080007"], 0xd8}}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close(0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req3={0x4, 0x3, 0x5, 0x5, 0x0, 0x6, 0x4}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x44}}, 0x4004006) 5m29.022297858s ago: executing program 4 (id=1209): socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet(0x2b, 0x801, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x8010) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) sendmsg$inet(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) socket(0x22, 0x2, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r8) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000200)={'wg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) 5m28.995482944s ago: executing program 3 (id=1210): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7fffffff, 'syz1\x00', @null, 0x9, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) 5m28.880341505s ago: executing program 4 (id=1211): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82881, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0xc}, {0xd}, {0xffff, 0x10}}, [{0x8, 0xb, 0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xf2f, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x3, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 5m28.557445337s ago: executing program 32 (id=1211): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82881, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0xc}, {0xd}, {0xffff, 0x10}}, [{0x8, 0xb, 0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xf2f, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x3, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 5m28.421821177s ago: executing program 0 (id=1213): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000380)=0x1b, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r9, 0xc, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 5m28.415843529s ago: executing program 33 (id=1213): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000380)=0x1b, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r9, 0xc, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 5m28.404436608s ago: executing program 3 (id=1214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @empty}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x2, 0x7}, {0xe, 0xb}, {0xfff1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xa, 0xd}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}}, 0x4000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c050}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) connect$rds(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x14c, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1147}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0xffffffdc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4020894}, 0x800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000005b0008000400", @ANYRES32=r11, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) 5m28.261794959s ago: executing program 34 (id=1214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @empty}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x2, 0x7}, {0xe, 0xb}, {0xfff1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xa, 0xd}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}}, 0x4000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c050}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) connect$rds(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x14c, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1147}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0xffffffdc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4020894}, 0x800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000005b0008000400", @ANYRES32=r11, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) 3.232718741s ago: executing program 2 (id=3815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1c, 0x8, 0x6, 0x6, 0x7, 0x80, 0xe, 0x5b, 0x2, 0x2, 0x3ff, 0x1, 0xd8, 0x4f, 0x5, 0xadf0, [0x2, 0x200]}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x5, 0x101, 0xc600000}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffb9, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x2, 0xb, 0x1, 0xffffffff, 0xffff, 0x5, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.471912834s ago: executing program 2 (id=3821): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xffffff41, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x3, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x6, 0x3, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x6, 0x6}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="05000400", @ANYRES16=r5, @ANYBLOB="091b2cbd7000fddbdf250b0000000c00018008000300030000006000018008000100", @ANYRES32=r7, @ANYBLOB="14000200767863616e31000000000000000000001400020076657468300000000000000000000000080003000100000008000100", @ANYRES32=r8, @ANYBLOB="080003000300000014000200767863616e3100"/28], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socket$inet(0x2, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x9}]}]}, {0x0, [0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x8}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r9}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.528859032s ago: executing program 7 (id=3827): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) socket$inet6(0xa, 0x802, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1], 0x1000f) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1], 0x1000f) 1.51041784s ago: executing program 2 (id=3829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4080001) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x17, r8, 0x1, 0xf9}, 0x14) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r12, 0x2000012, 0xffffffffffffffca, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_l2cap(r11, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r11, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3fcf00"/28], 0x48) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf86000000000000070800", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x9f, 0x7, 0x1, 0x0, "ae30c6652469d550a8437e3e8b97770333c319c0df32f1650cf3bc1fb039336bc6eac347403829945d23b77ab77b46f5d56b910b6d11f60ed30ee657c6a80a56a1e6b8d81eff55fc789dcb0ba37ae7ae2384db372594d89857d1681b74369369ca3e38fea5f93939074886098ca26d7f083ee2b75acff176928b4b9336481c058901157bed37577ad5242a4cb9f219201e97408876ddf4eafc93f0"}]}], {0x14}}, 0x154}}, 0x0) 1.410564321s ago: executing program 5 (id=3830): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0xffffffffffffffa0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x4c}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'NETMAP\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000701cd68232ba00000000950000"], &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvfrom$rxrpc(r2, &(0x7f0000000300)=""/201, 0xc9, 0x2122, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xfffffff8, @mcast2, 0x3ff}}, 0x24) r13 = openat$cgroup_subtree(r12, 0x0, 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESHEX=r12, @ANYRES64=r13, @ANYRES16=r6], 0x37a0}, 0x1, 0x0, 0x0, 0x404080d}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) 1.304756509s ago: executing program 1 (id=3831): socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x2c020400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) listen(r3, 0x0) close(r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x28200, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x198, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0x4}}, [@TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7, 0xd, 0x3, 0x2, 0x5, 0x3, 0x5}}, {0xe, 0x2, [0x4aa, 0x6c3, 0x0, 0x5, 0x5]}}, {{0x1c, 0x1, {0xff, 0x71, 0x5, 0xcc675bdc, 0x1, 0x8, 0x1, 0x3}}, {0xa, 0x2, [0x0, 0x7f, 0xe1]}}, {{0x1c, 0x1, {0x8d, 0x1, 0x1, 0x6, 0x2, 0x3, 0x3, 0x2}}, {0x8, 0x2, [0x9, 0x7]}}, {{0x1c, 0x1, {0x9, 0x6, 0x40, 0x5, 0x0, 0x9, 0xc, 0x1}}, {0x6, 0x2, [0xfff7]}}, {{0x1c, 0x1, {0xc, 0x8, 0x1000, 0x3, 0x2, 0x0, 0xffffffff, 0x6}}, {0x10, 0x2, [0x8, 0x6, 0x4, 0xd8, 0xc, 0x6]}}, {{0x1c, 0x1, {0x4, 0x4, 0x0, 0x5, 0x2, 0x7fd, 0x2, 0x6}}, {0x10, 0x2, [0x2, 0x6, 0xfffb, 0x9, 0x5, 0x8]}}, {{0x1c, 0x1, {0x3, 0x0, 0x5, 0x200, 0x1, 0x3, 0xfffffffc, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x6, 0x93, 0x7f, 0x5, 0x1, 0x8, 0x10, 0x7}}, {0x12, 0x2, [0x6, 0x7, 0xfffc, 0x10, 0x1, 0x2, 0x94a]}}, {{0x1c, 0x1, {0x7b, 0xa, 0x486f, 0x4, 0x0, 0x7, 0x1, 0x4}}, {0xc, 0x2, [0x52, 0x9, 0x1000, 0x4]}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80001, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xd, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8e8, 0x100, 0x0, 0x7, 0x3, 0x8, 0x7, 0xe4, 0x4}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'batadv0\x00'}) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000200)=0xfffffffffffffd5f) sendmsg$nl_route(r9, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="1500030000000000000100009b209279017df2610200000008000500"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090) 1.290349469s ago: executing program 7 (id=3833): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@empty, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x4, 0x3, 0x2, 0x0, 0x0, 0x2e}, {0xc, 0x8, 0x913d, 0x2, 0x7, 0xf42, 0x3}, {0x0, 0x0, 0xa7, 0xfffefffffffffffe}, 0x1fffe, 0x0, 0x1, 0x1, 0x4}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x5}, 0x0, 0x33}, 0x0, @in=@multicast1, 0x3502, 0x0, 0x3, 0x4, 0xfffefffb, 0x0, 0x21}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.120957203s ago: executing program 7 (id=3835): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x72d, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000480)="8d756ced74e7d030adbcfe041e01040ebe9054974c79f2a039178951f8bb57cb53d04cef5612b5811c5e9700860f3b1e38553084ea7a72a9304843187f4a57e64e778ed5f9a0bbd0c2c0131232661e5aa45686ca8c43171e45272f71a82f321cc9ca86a7aa2647f42f78de7fbacf825f76e2b93f6c86756f22072e7a6113b228a9", &(0x7f0000000540)=""/224}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000003000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa900000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x8eb2e000f2c28467, 0x7}, 0x94) 1.120627031s ago: executing program 5 (id=3836): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000180)=0x2, 0x4) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@generic={0x2, 0xc7, 0x1}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0x1, {0x0, 0x1}}, 0x18) (async) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0x1, {0x0, 0x1}}, 0x18) sendmmsg(r0, &(0x7f0000003e00)=[{{&(0x7f00000002c0)=@can={0x1d, 0x0, 0xc7}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001640)="06", 0x1}, {0x0}], 0x2}}], 0x1, 0x4008880) 1.088103314s ago: executing program 2 (id=3837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast1, 0xff, 0xff000000, 'ipvlan0\x00', 'veth1\x00', {0xff}, {0xff}, 0xff, 0x1, 0x58}, 0x6, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0x100}, {}, 0x6, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0xf, 0x4, [0x15, 0x12, 0xf, 0x25, 0x10, 0x6, 0xb, 0x17, 0x15, 0x3a, 0x26, 0x31, 0x36, 0x31, 0x2d, 0x1f], 0x2, 0x1, 0x400}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='objagg_obj_parent_assign\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmmsg$sock(r3, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x6000010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="80210000f700000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x480c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1) 944.864793ms ago: executing program 7 (id=3839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0xd4, 0x41, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xbc, 0x1, 0x0, 0x1, [@typed={0xb6, 0x6, 0x0, 0x0, @str='\x88\nw\x1a>\xa0X\x12\xf0\x97\x87\xfe\xfc\xa7\v_\xbfG6\x84\x96r\xfe\xe23N\xf9\x11\xfd\xce\x1a\x9f\xffp\x1dR\\\x1e\x92\xc7\xb4\b^\xa5\x1d0m\xa4\x82\xd8\xd2\xc8\x8c\xd3\x84\x85\f\x05y\xf0\x11v\x7fA\xcf#\xfaIQ\x10\xae\x1e\x01\xd7U\xa2%R\\s\x9e\x0e\xca\xe2\xb0\xb6\xeb\xa66`y\xd5\xdcqQ\xf6E\xb5\xf9i\xa8\x9f\xe4\x97\x8b\xe4Xr\xf1\xba\xcb\x9c)Vox\xfb~\x85Yk\x9d\xc6c9\xbf\xda))*\x1b\x18\xdes\xf9\xa9\x16\xf5\xd0[5\xcd\x05x\xe8\xc6\x81\x98+FA\x19\x8d\xe3T\xc2\x94\x02\xfd\v\xf7\x9b\xeb\xd3pA6c\tn\xd8\x8c\x97W\x9c\x90\xe1\x8f'}]}]}, 0xd4}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x140f, 0x1, 0x70bd24, 0x21dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x480a0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r6, r5, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r7) 924.571336ms ago: executing program 1 (id=3840): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) socket$kcm(0x29, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000240)=r8, 0x4) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[], 0x9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50007a0000ac0000000000001378595788132f700800000027cad442884a618e24c97b2f36a4981d50c222429178a5d9049b2e87bed4ec367e817186c3a58fed13f458d801325ea5c9b0a7e8df03b78f2c91b96c295a9bc5561706de5e1de609cfe70e338e83d31b029719373f788ea5a38aee4c55afc3e2ed364254f293ac6355ceca636685679f2564bfd96e9c20dea5956be29f09dc386dc3c16310a44878677d329f352e55fa6038b386b375b5111b72", @ANYRES32=0x0, @ANYBLOB="09a0010006800000240012800b000100627269646765000014000280050024000100000005001600010000000a000100aaaaaaaaaaaa0000"], 0x50}}, 0x20000000) 924.103636ms ago: executing program 5 (id=3841): syz_emit_ethernet(0x36, &(0x7f0000000300)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 892.795684ms ago: executing program 6 (id=3842): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0xf7338811cc404a78, 0xffffffffffffffff, 0x180000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x8, 0x7c7, 0x3, 0x4, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xa6, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_prespec={0x44, 0x14, 0xd4, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x6}, {@rand_addr=0x64010100, 0x8}]}, @end, @timestamp={0x44, 0xc, 0xd6, 0x0, 0x3, [0xa0, 0x340]}, @timestamp_prespec={0x44, 0x34, 0xd3, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x20000}, {@loopback, 0x8d}, {@local, 0xfffffffa}]}, @noop, @generic={0x82, 0x2}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r2, &(0x7f00000001c0)=@phonet, &(0x7f0000000240)=0x80) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c800000060601020000000000000000050000060900020073797a30000000009f11abac0b85ad00"/51], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x810) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8a}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) 852.780715ms ago: executing program 1 (id=3843): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000000201600d000000000000000a08000404000180180003018008000100ac1e010108000200ac1414aa2b0002800c000280050001000000000000000003238fa5d1e3fa49d949"], 0x40}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000080)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 664.77852ms ago: executing program 1 (id=3844): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000240), 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000a008a48d00500c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000004040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd230}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x6, 0x8}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e21, @empty}}, [0x9, 0x80000000, 0xd3e0, 0xffff, 0x1, 0x2, 0xf1, 0x8000000000000001, 0x3, 0x2e2, 0x5, 0x4, 0xa9, 0x10000, 0x81]}, &(0x7f00000001c0)=0x100) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000000ff"], 0x20) close(r8) 664.12935ms ago: executing program 6 (id=3845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfffffffd}]}}]}, 0x40}}, 0x0) 652.583626ms ago: executing program 7 (id=3846): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/223, 0xe1}, {0x0, 0x49}], 0x2}, 0x80000001}], 0x1, 0x832b, 0x0) (rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xea, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xea, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}, "16ba1c33be9e3dd3131be124c53e53318de1d162ab4fbabe06a1e9f68c1783e3d351cbb0bf403bd6834b6fdc7eda0ee6797bfe8ae0ebf63b261eb393477f9774ff8a67fe4ee77684611cb9c39ea69a988e7238549b785ac1fbc2ceafd33b693f436ca0badb6d2a7ab27686aa6d35873bf773115f39feedf5814bd61b03685822564f3a6a540acc1600d9f85df98e910d3e141b34c2b8451a4e347d8f35be138666044d448dd6037badf771f6d0167fc826b5914e00b0ebf6065066494321d927dedd6c9535fe41ec19498b71671fed94e71c2e880c19052418f6465fe413"}}}}}}}}, 0x124) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000}, 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 577.36946ms ago: executing program 6 (id=3847): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c62b0686173685f73746174730013a900000000000000000000000000000000050003000b"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x508, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x438, 0xffffffff, 0xffffffff, 0x438, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x3a, 0x0, 0x3, 0x5}, 0x0, 0xf8, 0x168, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@ipv6header={{0x28}, {0x9c, 0x20}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x3, 0x0, 0x0, 0x0, "9eb29feb08296cfd243735265c6647c10eb86502c18b5505040fb30547bbb7a491eaf05b310523ffc7f417c298f69615d8212d2c0d630dc080c22754fa0f8f1a"}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x268, 0x2d0, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}, @ipv4=@multicast2, @ipv4=@rand_addr=0x64010100, 0x29}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, 'pptp\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x568) 424.153363ms ago: executing program 5 (id=3848): socket$kcm(0x29, 0x7, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0x1c) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x990}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000200)={{r1}, "82b510679c5f7f705b224c7276c7deca87c35b3735b3e171432961607d42379c563979bf8b6f94ae04a3576eba059be7b679d5ef143e294e826587bc24e81806324c4bcfc12096347d8134c8f20fef09bf0df4a946c70cd9692bee7250a1d327b226356436004863b8fc0bafd4a69abee1668e944834861a1c1431d625f91e0177d91becda7a21bc72cece8444064a5ab5f012af485ed2a67a30fde9edf0fd53d5191b821035f285b725d19bc148064a206ace3b3d82514557a6053e46568b6a2a6f12acb2d886fba0dde0d4c7ad467009a79e5382401402a7f3650c38c87d86e47b69101c99935bd98e5ec75c4e8e3f886542fd7559871bf49681837902f08381eb8da6d49d3de835ad9b55e08327664ae300a66662ee0fd00c187590fd4b86947aa94c1c1f3e43534d43d19f8265ab70dd979200fb74bdc55c01ed334f0bc447586e1eceaf92726556fac5f7ae86a81344c6a1d8830464c3df94e3d12e97e9a474f23ab44a394db40121003dcf80a19cd7f0ad7375a264c790e1304769391bad58364357121f28f930cb59141299e6d6df1fb95ccad829b2d2e6b4d84e32f9a8411511fdc87f99a95392625ddd094161fff4a7c5951094c5353ba6fac92d92df858aff2ae58c78dc4a6b8888d67f940fc88125a60c690e8514126cdf59dd014255e52f49cbc3d5cb215892550fe309a2cf64c1950899e9364728ac8dbc8edafb9937b3434d1fb37ff91b6e761000704de3e7c88b35f5256b6a8060b030d22a440934d2fc431c4d1bf34f0c0ebb9cdf79ff135f8a1f93c18623a597eb4af55549200d079f2022f0694a7435ffe90d5c198ec9ac767164cef726a9edb68009085e24ac630158f360870f520aaab0f91fac00ac28ed95bc7d7716629e42746cd7da16977c1c0824a7081ffe9c35e351ef9583474b828060a28d81ecf0422c19cb3222afe1d9f2ff55aae69ad9c4c758f2069cea5bd80aa2e8c598c6e2033004bc6796632ba80df9c991d1e4104d95880ff86d1ad233b000a98c0e209181a7d8f66d2ab55b9fc7c9dcdd539956722ab393f254042d8e1c713e05c90a46835263b923be5174f7878e510e08e2e9f49306af44cad474359492765a853762c4017a2ae060909aa0113096034b3f470ef6a1dcd1e35db7121045c341810087d48c41815be21030f91d7b6c50e5eb01e6798a7dba8b1d8360273b1786eaceee37ef6c8f48a7359e49b45a9a7b927b8a70dde754eb5fcb12c6ef67c46da085e207f5368e99554dc8472cd90fcbbae80121a81fdcb472a9977890c5ea03090d32eb40a7984703a115fa14f2c6f88846e39ec8d52d10f9c48765de57c2353ec96b075bb1fc66f9d69fa6125856eae79803b184d2a1935844d6a04a71c15973012c7986b136672fb171e452d8fad9576834a31a8dafd58de4112577f07baec40771a5a5235cd4076602f60db51a91982c67238c93c4b81866170a071c538649aeddb32226e635cfc9fe5ac10c6ec1c50dbf38449689f3618536a60a20b5aa15b81ea0ebf8e332b712a682d6e611e59a135597b896e450c0a3a6389206b1b3789178bd75538617f23e60d07fdbbb10a25944fe3760ba72306fc1d33fdac505fcf32bba42072b5e2031c755e23d83b7bcac949da4d5b08dadb5d7e8daed60337052d34c17fd68fcc27a49b89a812f34773e0c1bf99dc02711b018875fe3e9eca275fc64a8d13452bc5cc5df593eded28749741c017b5efd1321c4356290cf6c4c86db781d5badb72bd561dec5f179e05810360fcb7546b9af7b34f145f5667bc647aa61bde6c0d1846fbd0324cc9b62489dcb39fd972af9bf633f0d98f67bb3587b30982848fb5b1b430e2403d0ae246b59fc733c311f544fa2fdaf5b6a997ce2568e67113a04b4a8bc24fe6fe6fd08446c2b49547fea3837e5a1c2f315ecdbefe097a8fb71baa2a2359a2dc6e315b99662860bc4259851eb6774f562f6354047041d467862411b03ca0fd203d5dd10444401225c1fd90fbbd744d89ba67e04b8448121df2631929eddaff563473d461e72384cd794b8f31a45da71f3b10819026676fc8888e6685caff9cce2fa5f7c682ce6d94cfcbd931dcf22b5471dac7e57695169538f14b34adb68f00f725b8a544ea78397fa102061c34df2a4aff483ed8afc77b664bd4a5bc57648e40bedeec2aae57337ebf7ba960cd49c5ae701d92bb4a527eafafe23d05f095266eee1624b5b2cb56ac9dc539ff2e45896c52a222597d3822472994e05c18750875644f0e516faa9f5c0109298bae29ceeeb94c20fb511d16db154f29e39dbae780ea684085704233bbf2ad208b93fa24a1a6a5f687316a932aa5a681beac13602d1b7fa4d073d62dd0256a2a03a7119f3b880f3c963e5ed1b3f51902262591bbead8b19180edc39b7c477f236441641fc14fbb6d89630ada05dabab327b155a4caec2aa724764ae5d43fb16d71d8339a6a7ff5b6f94e729e1785addc5e42405f2cbd5682aeb07f53f031dc26922c343de70a5ccdc279bbe8100f6d29aaa7be873d3e36cc2faa5f515778bcefb734dd52ccdf78f64be0e8e446b3db4175cec2edb39b989229fd1a6a248f7114494946ce2355b2de827d34a111881072900d1a94910a582325ca79ff86b2c48ca39b3cc45eed10a388f78b890b592940156bd07698a4ddc5fdaef0e6997aa1455de4773a5f4c1feff38f02d6b371b451517de4373f93ed5b964e652da51ffaa0a18991da19b4e9951dc6e4e9de1b6fe5fc538e1fff1c1c45ff4ac396d06788875c3254d30aa887bfaafb6d7ab71671a27d172dd2511ce91195ea2f4d239af9712a670785181ef09af908edd109e5efee1e7f0870e84b8439f71b64348bb8716b509bdc0ab70cf8dadac0ce71c7196bca01817278b1cb6c33f1474725339f41118751b6f9a7bede6d238f62e7dfbe0e87ef4402fcf8b4a60bc4a985b8a02fe5a833a11334b87b710f374092436b7fc42edad84a3de3ebfb07c90aa6b442138e2ca76f375593e93920d2ed35e03b5b6870d408297d733dc93b41e03afa3876f28a1d6f218ee6b6379910401d90867ba7a735f30ad6286570d5a2ced5af6488abb37fa6f75089d1b636d8ce70bc5739f046b92682173e58c33b04b85630ead734eb9426127cc94b3d07a70c619ebc1f816c251719e5bd72f90d3fed3f297d64370d36773bdf78f7036052f07d49f2ca1ca81d4dc7249087c3c10edf36bdf6741fe385200e4408e7781a7845fd283994ba9780f247b6d378ae89c89e6c4ab9363cc00b65a133b86d28e5a6fc215d0ffe4268c2ecf681d5c26602e36e653717912b706012de7d6cfe6baf4a47379d3e5e0c43fa83f03fe20f0e2fcfa6a492854796664b1f06213830b9cd8174f2c6c3bf4d28d455e66493daa568cb224e9d58f84b1fb5a15ae65cfc24052c3ac471be03c86858d04cd51a8f4861962aba4220079ff0e07cb12e3beb440342e77fe73774fb3bc09a4b985ae204ec0142ce077f1bc6a3e1e5ead0f45efc4c329031619a14275a4764acbb11a7113ab697f2fb195d54ef509c517921dd62fc9c32b3e29b21b5987b2aae7b63565299beb82e2269ed6ace21bf17e0e97a2cd197f3c904d9665a0c3713300d50153d77654beccd8fb22c16c9e5c5526f6b284975260923512ae8a9e73937f240918ececfd64944e7f96f7cdfca620e90d65d5f1bc14f7f2cf77f39ef7883c6b8f13862babe8bb345afb95cdfc68eb74ceae9d8e09e286babe101a7f7bd87c7fc9474ab04c8aa366604d0c47a9b4f8e137237d8e83e1a2e4b57702a63b8ae53aaf2f7f8aea1e364a1a3bbfc196c04f5409b9e7fa2387e25b1e4266ac93abaa51a36e30d0df9abc20ab5a1a2aaf7ffdf719402d7d94722f962d78caaac1b536e0ecd9a4e3c6d9a69d89c9e34c978f383615930217ad4287976b0f49ad25b7279de92a305bb61e2287b46d5353f727b384d199d2b682f74756c6a3423e4b3c65639aca53189ee24b3dc1e51ee32598ff9488d1cd483c6daa8ed112e413de3cb82c558785826a45f768798381f112308b0f95401d1cf4d203c1f04918cbaa6ff029654976c3e428f45e33ceb0459fdbc8cbe310ba0b8b7d6b55800374a5f278d622feb64a2774ce8d1a1e8a11d0d98f14025257a1b973615aa24b87d93b1711d255089852b374d7521bf76d7e04d42361b521692423fe64f11c2ade7a68009abf7044ebb6e2646caf36d485a6189df6be2e5c3f4648200b06f7147ee85f8915c83aa26fcde0a17d48be1adf7325c0701b06a32c2b678f0ef487da104e705064e1e12a9bad65c3516587106b1e5079389ae652295e5fd2b5919ad668295cf7b0ac61a42059e7e2636e391230e2609df84baa535f8d7d1cb5fbec7f3689952df0491a059b7c36c76b1f3f631f07eed8f6ced502855048aea96faa84d30a349cf9e7c075bedb099ed7f8a2989c2c33bd287e87cc3362f5ff75758ac4d4922278a0b0ca1ebb860eca5756677742701201489eccd5824e9c870704a0c8a829856459b41e1b3e449f1e07b0da394255d5e138fbdfbade8a0ec86bca2293ea0c758d118ff0c8a795cf0bb9984c17bfac77d1eb0e8e1ee27abfc4eb276d47ef0422f019758875a7f093d2c371674421c5911482f7005e1ffd51c14362fe361d86afafa5aacb3523b71686c6580ec29ad1e531a0b8eb9a1296d1eca6ac83ca7717b1fc24893d5482fa3df98ed53cf5f092d8dbf5a8c6a2d19ded5a11f99cb1dcdaa316d3d93784f7425456c35385b56383202566275ead08b329794f038b4eaccd2da60093b8ff33e00767d1302317d726015b4f7eb95a47745e00e62dbe46dadb776f228c1952204c01d74ab2366fe3b7b7ba7834399beb03c37c74e6277a5c554f4eba74f4545a05b8e27f6f7d244a9a3bb5ef69495e385a397121c9a024510dff45d161612930a16f36bccafdf04430ab5056dc730082b3214d770f194f8b649eefa70d0c446809ef8e520545f859c0deb1051cc7e0176163f52d66bcee1e5cdda3e7d7ff98b0d37229145f596cb4225ad3105acb345a46b57a77e282ec3c02d17ff110fdd650f4fb3d9bdd8109708fb4a7bb52e67d9bca1a490086eabadd501beea42f4a356fb23e6aa2d0147b25019a1331da7d64af5fd2624a4a2d9504d3d385074752fa5b6d777aded713f66dfd466641e6e5e25e92b3bdf86b078b41341eb108b122d9b32f56c16f1f3fee283b7870bbcddf78e09d68b6d336326df979e4a804923ad51822ca2f9bb34a46824b2e451d8f7779a4a3b4625129f3502e7e37349db0de073a42f9106ac4613c5085ca28c3592e948c25a0e4ac468ed18266a94b0120fa2e87917d79a3df875cc09e66e78e74e28f920591f692f3ceee21df24386523370625b77f6aa5089ffe44f43e159ec792de22bf9bdef336f243782aaf6b62002372ca29526f13c3fa4198b3d3bd8d7f2fdf5110b9e6650824700d9380ce1d43c88d6d2e9ddebb67cb0b806e659ee5a48e6933c17382cda1073202d5b140bdfc0fa01cc5e598ba590cc766ea05743ef2e164902c5a1d2762a18b0d1ef96bf07f3b68dc9c8c42933560f81e1910135ace53f476a18968bb0bd11cc8cb514c4af251d6bb34f42b0959ec96f01a9e4ad063404289429b19322702f713aff12ed9d68faa5aac0a85937541cb772fda87b2560a267c9843e03e280a3c17c8f5edb4dcab4ee08efdea97e3b671893a2021803bbbe6314a0ef25fca59e3b10fec205b83c83d944be710660f1718895c9514a1af827060"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000001200), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000001240), r4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000001280)={0x26}, 0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000012c0), 0x40, 0x0) read$rfkill(r6, &(0x7f0000001300), 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000001340)={0x63, 0x4}, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000001380), r3) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000013c0), &(0x7f0000001400)=0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r3) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000001700)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f00000014c0)={0x1cc, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfaca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbdc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x24, 0x3, "9c0fa93cb18ccaa65fdf3c15bdd19bdffec8dc83a30b6a10c0e0744e2a0c5f42"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "25d77571484488d0a63355f63aaebb70d19a456cc421da15f4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc72}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ba}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x10000}, 0x200400d0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001780), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x3, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x88, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c00)={0x6, 0x16, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3a}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001a00)='syzkaller\x00', 0xffff, 0x5a, &(0x7f0000001a40)=""/90, 0x41100, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001b00)={0x0, 0x10, 0x10000, 0xffff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001b40)=[r1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001b80)=[{0x2, 0x2, 0x3, 0x7}, {0x5, 0x2, 0xd, 0x3}, {0x1, 0x2, 0x3, 0xa}, {0x3, 0x5, 0x6, 0x5}, {0x4, 0x2, 0xc, 0x6}, {0x0, 0x5, 0x4, 0x2}, {0x1, 0x3, 0x8, 0x4}, {0x0, 0x2, 0x8, 0x2}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001880)={@map=r10, 0xffffffffffffffff, 0x1e, 0xc, 0x0, @void, @value=r11}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000002580)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002540)={&(0x7f0000001d40)={0x7d8, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x7bc, 0x111, 0x0, 0x1, {0x7b8, 0x5, 0x0, 0x1, [{0x4ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2b4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb4d}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xea7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9f}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8c2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x65}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xd5ad6c34e19e87bd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x172b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}]}, {0x290, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3800}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0x7d8}, 0x1, 0x0, 0x0, 0x814}, 0x20000010) 411.184918ms ago: executing program 1 (id=3849): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@private2, 0x0}, &(0x7f0000000380)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x15, 0x4, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) r5 = socket(0x1e, 0x4, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r6}]}, 0x1c}}, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x34, 0x402d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}, @nested={0x18, 0x16, 0x0, 0x1, [@typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40844) 353.902858ms ago: executing program 5 (id=3850): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@getae={0x15c, 0x1f, 0x400, 0x70bd25, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x2, 0xff}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x3506}, [@algo_auth_trunc={0x119, 0x14, {{'cmac(aes)\x00'}, 0x668, 0x0, "45a551139f5a38705e3249e1da33bc51d7a8fc456da55fa9305d9b2fabfd0bfc760980c96d563f0acc0bd2864479a979f937f29cb705eb3d8880ba804feee57993382036413bb5d76ed2b18170beed0d62c9a445c14847328a90616a442c2de95eb25e5b87a4cf8bdadd0f9fe92e6817daf429a6c364c98256a42f91b962988f338cc11830e5db34a53a96354e26601c98f7051849388e948b007fa6c423bf1a01357857d3eb8fa77ab75c114c097f8971eaeb61b6466301f52c1638eaeb8912d3c65d9124f17ea17fb6664833"}}]}, 0x15c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x27) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 300.748022ms ago: executing program 7 (id=3851): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c5eb9f858bd691a6916214000000150001030000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x700, 0x40, 0xc82e, 0x1ff, {{0x1e, 0x4, 0x2, 0x5, 0x78, 0x65, 0x3, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@rr={0x7, 0x23, 0x97, [@private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}]}, @timestamp={0x44, 0x20, 0x6, 0x0, 0x0, [0x5dc, 0x5, 0xe, 0x2, 0x4, 0x80000001, 0x3]}, @timestamp_prespec={0x44, 0x14, 0xf9, 0x3, 0x1, [{@local, 0xffff}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0xc, 0x8, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x29}, 0xba}]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x10012, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="2d935adf43e2e900a0cc27c70b511d8bb1d5f0fdbaf070d629b98023b73f6e7c9318a87e6ad700fb4d422fd143fbe7c19bd8feac0517d83740c3699aa8abd6f1a10f2bf0895f4eeb4f0c58fc67a576c5bce1e98d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) unshare(0x2c020400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff0e01"], 0x8397de475a1b5b02) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x504) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xe, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="1842e1ff3f0b000000ae00000000faffc5980319e765d92a46935036b11b7a71c7f582d058ed24b84e3f689b41a17a2e51b68ac23bd8c8541a676944b8c6d4770ddb13bff6a19c7cc1e360abc2d09a34d45b728f30bb8091febb9b021c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', r1, 0xd}, 0x94) 236.109681ms ago: executing program 6 (id=3852): r0 = epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0xfffff800, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) 201.556399ms ago: executing program 2 (id=3853): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x80000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015400000000020"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x40, 0x80, 0x0, 0x200, {{0x3b, 0x4, 0x1, 0x2, 0xec, 0x65, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @empty, {[@timestamp_prespec={0x44, 0xc, 0x38, 0x3, 0x8, [{@local, 0x1}]}, @timestamp={0x44, 0x1c, 0x92, 0x0, 0x4, [0x6, 0x6, 0x4, 0xfff, 0xbfa1, 0xfffff800]}, @timestamp_addr={0x44, 0x24, 0x32, 0x1, 0x1, [{@broadcast}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x7fff}, {@multicast1, 0x9}]}, @rr={0x7, 0x23, 0x62, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010100, @empty, @empty, @private=0xa010100, @empty]}, @timestamp={0x44, 0x10, 0x75, 0x0, 0x9, [0x0, 0x4, 0xa]}, @timestamp_addr={0x44, 0x2c, 0xbb, 0x1, 0x4, [{@loopback}, {@private=0xa010102, 0x4}, {@private=0xa010101, 0xfffffff7}, {@multicast1, 0x6}, {@broadcast, 0xfffffffd}]}, @lsrr={0x83, 0x1f, 0x90, [@rand_addr=0x64010100, @remote, @private=0xa010102, @multicast1, @multicast2, @rand_addr=0x64010102, @private=0xa010102]}, @rr={0x7, 0xb, 0x4f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}]}}}}}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x1, r3, 0xf72}, 0xc) 195.421481ms ago: executing program 6 (id=3854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1a, 0x5, 0x80) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000050000006d8022010800000018470000ffffffff0000000000000000c472f2fff0ffffff1800000049e97043000000000100000078df7b22e9114f57a300a1481b67351f0afc1f9bfb4437ab8e4e5b71"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x6f, &(0x7f0000000400)=""/111, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1a, 0x5, 0x80) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000050000006d8022010800000018470000ffffffff0000000000000000c472f2fff0ffffff1800000049e97043000000000100000078df7b22e9114f57a300a1481b67351f0afc1f9bfb4437ab8e4e5b71"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x6f, &(0x7f0000000400)=""/111, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) (async) 179.947977ms ago: executing program 1 (id=3855): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000709fefffffffcffffff017c0000040042801400018006000600894f000006000c00bd0a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018046200000000000000000000800010000000000", 0x24) recvmmsg$unix(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002a"], 0xf8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, &(0x7f0000000340)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1, 0x1000}}, 0x24) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth1_macvtap\x00', {0x4}, 0x8}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000000c0)={@private2, 0xf}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) 60.436446ms ago: executing program 5 (id=3856): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRES32=0x0], 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000540)={r1, 0x5, 0x400, 0x1}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="100400000000000000250d0000000800310008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r9, 0x25, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbad4f943162486dd6000000000103afffe040000000000000000000000000001ff02000000000000000000000000b8244fd024f3df2bba73afb5650b15210001"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff00000568000800", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r6], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x852ac000) sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000047c0)=ANY=[@ANYBLOB="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"], 0x2af8}, 0x1, 0x0, 0x0, 0x8}, 0x4000) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54010000020a0102000000000000000000000007fa000600c7ddf54548ae6dc5322936067c2d935f92700610b6c6d6dc751de29c6d2b3003344b7bfc0beb22eb0b0a823013ea7595a12237bdc42546a845d201fa87b6c1b48a3228eb9bd023a3f92cc2724e064538dc4c10eee08bd7324201024479847e36c92dc4fe783d5565ad80827be14cc88046c21235fc182cde85ac5f666240dc1cae9a2e12e534eaf3f92711935ffdc1666b1fdf4cb8fbc66d1bac24240b7bd142fb7f39eff98e62c37d270facfcb5e220fa0671664e4ef93df6b90f56c4876825d2520f191c411fa2d8970fda3466a3f9f12bf1d95d8d135e7bb7d93410267305356c0b3d7dbddcb736ca3c855a43f1aa8de4b0e1260f000044000600fa8c3f331ef0b6f56e89f9913fa273bcd4c0cb1e9f18c300b3aabcff881f5c4988052719a40646a489b432077a158efc19f5ef5a2a6c349d36f09a7b3ea74fecac000000020a01010000000000000000010000040900010073797a31000000000900010073797a31000000003800060076eaf9e9db235f731f08e3b35c1601437fda314dace60aa3a01e90f06a0bff50255448993b22aed76ff741fd01805b2f167aef2e1a000600bc8eaecf6c348ea223307e68250c9fb75f9392c5526f000008000240000000020c000440000000000000000516000600323d9f374aace764de01d86dd74e97a2b547000020000000020a03000000000000000000020000010c000440000000000000000120000000120a01010000000000000000000000010c00064000000000000000019c000000050a05000000000000000000010000027c000480140003006d6163766c616e30000000000000000008000140000000031400030067656e65766530000000000000000000080002400b90f4de08000140000000021400030073797a6b616c6c657230000000000000080002400b718b55080002402deb51a71400030067656e657665300000000000000000000900030073797a3200000000f4270000090a01010000000000000000020000021002098008000140000000dd0800014000000003a800028014000180080001400000000308000140000000063c00018008000140000001010800014000000007080001400000000508000140000000300800014000000005080001400000000408000140000000032400018008000140000000090800014000000003080001400000000308000140000000020c000180080001400000003a2400018008000140000007ff0800014000000001080001400000ffff080001400000ecc03800028034000180080001400000008008000140000000030800014000000000080001400000000008000140000001ff08000140000000c90800014000000009140102804c00018008000140000000060800014000000080080001400000000108000140000100000800014000000800080001400000039a0800014000000005080001400000005f0800014000000001340001800800014000000005080001400000000608000140000000030800014000000200080001400000006a080001400000c63b0c00018008000140000000040c00018008000140000000052c00018008000140000000c00800014000000800080001407fffffff080001400000004008000140000000010c00018008000140ffffffff1c000180080001400000040008000140000000010800014000000006240001800800014000000009080001400000000008000140000000030800014000000005c8251280600001800e000100636f6e6e6c696d69740000004c000280080001400000000708000140000000800800024000000000080002400000000108000240000000000800014000000004080001400000000c080001400000000408000240000000012c0001800c000100636f756e746572001c0002800c000140000000007fffffff0c0002400000000000002a26382501800a00010072616e676500000028250280080001400000000a04030380360001004ab3bf7bb09947f552fa52790b30de8aef2abaa3f3083ba36dd75cea586bc31204c599a6fde32442309638dfa04e35a184d80000340002800900020073797a310000000008000180ffffffff08000180ffffffff0900020073797a310000000008000340000000043800028008000180fffffffc080003400000000408000180fffffffd0900020073797a3100000000080003400000000308000180fffffffdfd0001002dcb9ee8ea79904abdaf8f045410184d6b607f33f2b81d3520e95fe333ef5fd085266fef1124b45a0935eeac44e725e5f2e15da45661a9141ef86c1db8f1526368b903016c7083c247220eac41f5dff7cc2966cdd8edc54dec4300d7f63489e7ba39a1a7145874e26a6a1b7967a3fa2b133daad78ec52c06797a2423e63095476fba82abf438600b84f8c85194ee2b189f37cf4ea1296ac1a3cff69455908ed6e0ee6be8b60c86023d5e53c4e5d0ffb0d52a24386242123ec246ec1e1c734aa30f000c08da8945d42e6cfc766835c18b37e68d088ac825e3939c99699037014a36b45998b3997432342be45e0673cc74c3516724faf5b1a9ce00000069000100c02099bf46f791b5de53546b8dc609f2cefa808a3b475042f50a2b513938afaf0e952b0754f260ba6ffe31c1f62e7757318acc0ab4b937699d546d79e4aa83d922966ef9cea59e167e3adb4ff47c7e4068ed72fca9478a6d153d207780c9d989cff1d6d4e3000000300002800900020073797a30000000000800034000000003080003400000000108000340000000040800034000000003bf000100ea59a2792673ede1dc16dc4ba85a95f5942973378cc57914e7d042074674bd6ae99fbddd568315018def5b8ee27116c5c4ae3fdf96f80444e9c836a8a0e44091ace4a2aa9f0c4f61cbe077c0db9a266fe1eb84eafb1d8c7f34445371ce6d30f731551c423df8d0886152abdaca3a64c3b58ccc297fd0d7b2a8df65ddc581fe9232e27df41063b0965cbee84d9c931b6c94a3f98a1680c109110ea979ba30564ea1ea32d6b7056d2d0f935b18b39c3799e20802b1e2edcd2ef3dd5e002c00048027000100d8d42ac4cd24cc91e127f42f710ac79c04455ef3bb1c8c240f96cb1f117c5db8474cfc000800024000000000d4210380fb000100d1d0cd708ad7bb6188a850dba3665cd1bdd1349c8814bf6f5214383ace2016b441dde37cb0cdca1a4be5395b7f51ebbc6fea6fe87d2749946b1caf1b7b08137f7413075e357e30ebd3ce5810c8e190883d8f0f5831e3b4f14cc97711059ad70b166c28fd50d0566ca107a48ebc929717569e6ce0cc5c7955a47f0a0e4aa73fc9f63d8507d2b598d5040916abe014dcdc46fa4289ca186f857ed8889329f95852ddd49466a249fd923eb0f5f33d3df207802efccb11f35156d1acb616fcb9bfbbb8c902f8ba7bc849a974a3ab824848ecdc56374272eebec8a23865cddf5616075d7b40f0bd2037c5fd2856744390b4b14a047b4021972a00041001006a8a9435ae514017c393c4b30b10cd5557342e745011355efcd465a813156619c3dedd9a965b038e5fe8a3576253429607784b640723dd1e3d195ead3ed8151d5e387cb50b4d2780e73ee23a717a9aea5521f2f982352417959b68b8ec299b5eed5d6ddce24bf9b1d35dda643aab5427e1e58065ab62bd26c307e3311a1c8b5eff9ade8c1309567f8a39d0d8b98198fea636223a0d0349b512952ecd094dff7416bd7dc1868cee6e6dc30f91ce395374a0ba34ec044476512634f8b0ca2f293891aec175b1252e202e358f4fa1341769a79389f51d8cb78486a5471980264b8ae7250e6ddae96924efe3ce2b52cec28bc8a3b29a78e7d593b7aa4d46be316882ed096ee2a1521d2b536ee1cba2c23277fc823e316d483449197576b1803904aab36d8173e8c87f69ea56bb8880e7402be6e8aa6e7bbe5033ff6aaf3f5ba8b1355123056f739deefc2fb97717f58ad426cde963f5d48ca3c276f6abdc898cf67e244df2c3c6f2bffcd2f6241009c8cd02bbbf1a3f117fd40d7143afef9d7479743e95275d4927128af1de53c86b769bdd4abb09c8fbfc867ec91fa5ed88d5fda01125ab36416c38c8e6fd68fd261a15e1059ffa0dd0debdd2225e0fd908df3eed4cacd0a015029447a892d5ff5458ecbcd0a8055fe291f28a9a84d90f59b07fbfa97089c77a245e6d1c5ca9502f2c076067c46c08b064b382947561a6b3e6f8bbe41a81872fdf891e904ae8fe3cb26fa574f58a9cde6d64107caa3f8d82b9bfeb37b73b07336502af11631fea542bbc4cf39f4ad7aa2b3b6e27b2f9f3ed4ec79641ee4525af6c7b716ac567d795d0eb41ea036d0aeab4be8526f5ee0c39d92b3eb1611e124715a467553aa9b7ec56e14db253c242d4fb51bcd0389f37256fe190e09959b19b140d33f6149a1142df0b81ed89f92e80264650a3508c91a08193f915c7711516237c6ebdac59176723bf53c2031e2d6b6683cd634eb55527c278033e727bdc58ca90912ffdc349845c0720d3cc127c03d229584e8bc4f01be0b7ec56ae35196938117cc46b5d9390f2af26f5cbab97cac4da70024b29b29e2ea01e1de585f2949ed22045a30630e0075a9976180686cba630af5289fab32d66ea0054356a3bc20c8e92450cf9e1c29923667fc1ad5893ebea8954597ca011a0b6a471010d25c014502b51f6dd4bc2afd98f3af488be0c84ff321bb80b2609fe52d94b59e50f5c07df12f308c191ce6c5127c1ef928c5b7b5fbedccbeb29f1f00195bb34c6ab0b53643b138cc01f1f659ac8788a07d56feb480d9ea553f6b9f4155da4f2f86dcb6f2375091a67811c74a761e279bc46a2b9e5f2646888e2a35da2e4a1b5c6e5202b6255c3885ebe1ef4c434c358b28c5b2cd801d5deec60befed145b5fa2a5ba4165c1a36a2543066b6bd02a860773015efb7db9b6a58e5698e93c04ca002ed03038cc16e6b4850ccb410a5bd17f256d15271f57e547c0f0f1ff5a64547b91b885fedd84228884f0b1a22baa959954ccdb59728171f1b53924259ccd70989287df25907e6fdaaabcc18001e68de0abd8a7396e4a0b39c9131ba6bbea9bb7bb89d96a2907d04b648d878a3c7cfd6f6c47cc1185cbd3395434a8e5889dffcf7c6f25e2a7121fcb64055ad3cf434050c71d646c28cee0c80ae6de6fcdbb6beafb641ea5cb2d2057ce9c6a536ff6012fce3228af4496bf727a15b47b358c2018c035c46203a2c0e20753985ab553763f79be171e7338e62bf842eff84a4cd1c0a4da16960ce156ff02f3fca7fbeceaf28ab82ea66006ac334f4b1fab0d3c91a758d54915e7487f581c00829e155c46bce6d5486d0f00f23c16f1245b74e1839f44a2061e4a0f2429e016c173fc87357c3bdedb2b83c640718a42fc3067869df73ff85df315c9474b3ac4541684f9883a054ec58635b5210b048da6d361e03eed09f5c5d94db88a6e37d988c53e2d6b041465ece46f51977b7e4aec379f7fc3911b8d10a545e69b71557dd6ef4d74b8c558bb1dce87fca9d9cc7e00c51aef6422bcc8527711382cc58425e477536cf3f7cbc3b411d786bde2b86e7187f8158452159eb029de8512c88f60dad6f7448558ee87ebb04fd06183811663a1a6689fe0e02ef46adfabf4f82deeac8c8fd2ed5f17939e976fe746965aa24552724b0c71df41aa55f6f1bd2445069595b934d856018463984c3dd10d8241dab0d820a8b50ee98b7dc94796ee2df64d77a7aa7cac54f77f963b97fdfa25dff3d5cf4c39db367d34accefdeb8377e5bedc5afd8e01088ef3dbacdc6ed5a1d3ad802b4f09a70a3577919d1c79b607dfcea13f336f544a2f1cd52133005b6f29c8e33992990cbcaa64ba7881da2c7c3ffd07e23519286df6d68336b7e850aa79a363acce0d4b5d37d0ae3ce7d754968e0e12aba8c00ffb5401c0c11c61f5d8afdca061ff14af71a52ded19a7d212604ff8bdf4e584e0a9d1a035f5b1ce76fd38466364e703f1b8046a92d26f9bc598dbea32f4f6c9570e549b1d29b073ffdf0c5e6a47fbbde8c3364959c4904f1532c4f5a548736adab3f7f0fefcb674273a0981cb11e94da89bc5f6774b1d1fd8511a9c80045e50226315f80ea6af738f210dfe87b4797b11867b8d8c77928700fe2277ffb2ba4eb483551394a37b213ade9790bc18ec94e6e641a4db242c347ad63461c2ec61fbe07c52a286a29f5890b73c2b4392c2c2a406503d66e4455ce072309db56a6f0ec4db97c5e870b903547f7860648e702c4920cbe9fc5c7df323150e90385d34f8028a12be16636de2dbe24d616002da85d9f5b12d5f795b8a99cf61650acdccf339155e898d3eb123506d4c77883dc886907dba86e62c812313f4c41783d81dbc6cacd5d2f28f7c3958439990f5126919762f60dbac455675f825c383a1c73be389ac774810e072730773b45cedcadcd580696421cf741f7f038814d0791fa7422c2087864657bc9090eeb4cc42f8944f40516770c7baab97a17dcd9a8e5aa1d892a51512fd63ce28e1a33374ea3acf3c1e062dab1a8650af6641742d59e0f142967b59e9e108f529b6ccb0e549e385270ada07c06bce397d8696f4a3c2fe0f6f27ab75e678fed24f72b066066cf1a44a3532003494e66c4c7b4a3e54cb521c8124d814a796d8bb4394f6c29ebb8756dc0247f1b44b32ed23eaaba0ee90a3622ecff912865e8289a6f9c38844ae9d56d9bfe38a18f21f08edaf905a5469cd56f0e497543dbd9e04d1dd9d9837c451d56909948d840fda56d0dfe651bc4c9de26904da31219cc8b74c5e97f263e5a0ebeb652eda5461c8b294e3476c6241c34fcd7f6209aa177142867c3bce78455023990a309b2a58a5e382297cd8e7c139c1fb4da4ec74aa882eab76adcc37d27a188a9bc8fe7ee78db2d36bb6a8d8cd5da599e005f71ca7c0fa77e96fc34f4f433e99ee6c61c134fe28dd8ac15940e99843a79a20d206671b41c8ae94858c584c6920f5a328f25e0b85d33da52855c9274058cd8a45a4e81007a71b12eaea6da7e70367668cefcbb30d3629c958857b2d83375854ea7866ea9b7ddb16d6f481537616251036896a93df7a192a613dbf1dac1bb547b97299bb126d6d17f0bed2d9e99011b071409a2b9127f6dc2dc084f959e7e32c5293f77dcd32b31d57c1cf1723cc6eb60780aae843510bc00d0d31b2942500c3b8679312fc12f23fcef4a01a49e03b29e8efd698a4567b40535250630c8035e0039db9d4ef4bd5c31dde0a2a43382aae7088c9f0fe16c14a317e0f1e6d923713011f5f5a00ba47100386a39a3326035437c690b7300e0ffe403c5ee6856aca65f2a818e19eb9cc4f9d9c498dd783f8f1a199b102b2e3366c3f03d6fa250bd61ac616662c347786712a129098535e6efb35602b38bf6de88f3034db5efa8d7eb1506df8c0dcb3f2eabe9278f0548e116015564690582204dfbaa9e280c2adb1aaf6af784ce3523a8f30ce3f5357d15dc58c4e58f5f79db79b6ccc00ff6b1e7826680819457f361ec97ae947dbd55c3fe4d0add6d491a7ee640bf8652145f3c5814c5603249f4d148404abaa989c44088aecaa76ac009ba34c8428b1f71b3e778f67968ddb7a71e4137827a435cc1624b364136800b5bf22278f5a6bfc9358125bc01d51813d5caec3ae271eeaf9d2b1017762e811fef401b3825559e357a2980d0e4f47d33dbc39ce76858c727f9fab65805b5e0c73c83695275ed60b792538e5764c21efbe299102a4018def84b0c4c489ada418ff902e2f59e760363243646617dd2125b098ddabde8f7819f8d8f9d082856c11ae67855c2b983abca7eeaee3768c619868f6b69a5c12f65ba1c840daad54bb0e20210762e509f57fbc256ba36a645e509d12a09275da63f7f2c284f51623cb268ba8ff775ee616cb133db12a6d378862427cceb5588d4beb477b03fc0aa6f9e29eb86785c1c3b946b4419bb1fd765599096db3a40b6702ab973cfef8cff1c21f03715e11e3fd210e1dbf3277575b91254368dc79e94e619fb8f20e19ec6af5a4d2491cabc0efd9b3000a9669690a85d434f123c0a8226fa3d382dc80fce4e7ec39b8fc9d20d6e89902b57faef33a203d48499b44633179194393c3a97e304d2ff67f63d270a32feb71bbd3c5d3e907a4c346b021b5fd71936c35a79c2ca8946123c0972dd82d660d84b33efc88ab770adb6aa712f865260230a0d0408d379f148b9f62e5ae231d1b5787d306f10370ef85a6922175759248ce1b10a10395ad1dce8591e0d751295e756183d5631ef4a7da7e83be09c7e66b59249dd670b3d7d084574c896f4b0e1e88f9160aab82e3dd34d9479853f117112802072800567c5d26c0f910600c566dba0f635700e9473145223ac90b3bd8f66a5d9413152e2022dd21ccd8625e7fb7838e835a6fff9f94e1e6dd21576b78660718857313efa6967fd84db7f96a198ae24b1234178ac0525e1dcc64c4c50cb4bf2778d3c25b4ad5fc7a612a9edf3e1c7155ff93c6cfb18a7c953311f98f9e29be32cd4b38bc0af698c4fa32771fe0d945f442a5db648bc21d6d8f1db364afe5ad2018cf47d6b7eac3020fde61ce609f277986569caf174d4e1ca206f72c1291cc2c4c6cb4952c708fb3d5ec08e5bbc49c3281388e24bb6da6ac2170605f7b12277f32165acf30930f6fdaaf4634749e4a08180452e24c30c74ae198ac5596bfe6d9d3c36f668113fe4c3c2c924970d33693a5618c6ea7196fd7537eead40459303f04798acc1fc2da449989af1206fc341b77f14a9d9072afabe71555be39c722977a8df159d23e4d496c9ef510b22cb792da82f97978b004237c491f0c05a0b7e143e235e9a9c3d3ac3fb051e5d32a63e19ec03f53809e4ec8f44a69007ef71e8f7fdc0ebc6483c399410401c3329e24549c3655ce903fe7cc95a254e6c3b46c12753f8ab350b58b0a0aafe4ac0da29b1cdf0c097813f0246e56730feae7a432fb130486d9cf0dccb1ff12ba2707945dafe22045bc49ffb74fe58be98a7917fa33ceadd11285ef2e3dca099dd66cffd5666bcac1c1da0c0da672c3146c46b53f2a48953be1f6c7d03a308fcbb960fe47b9e0d4c6e05616ba906da1a234924efe5734b8f7398c659f01c82ad0142279bac41467987f63fa415df2a341957d5020c1e1f8b5227e14d9ec35465063dcc2b038a22600e537170784e1b0900c21ea3ebebaead965c6af70fd33dc557579bfb01b3844db8d1aeef61e753aec3aec3d7807f4a3fe6f866db00b9166a8e8b7f27591d9dfcb9e41467aa0ca987f7a3949bc90001005000825749f0c7e61b5ff7e569cca5b15aed3576ecf74e150bcca13f09167545e007a9588e5524df7590a328ed9c448644ba30fc3e8a24840c5d72afb2aec50a2e2c4b1725cabca53cf1c3ce9aa126ce4a35cbd4b7d7e3dbc0a1fee35a39179bc9d1e1d74e491850b7e2ec570e534533f44e4724137bbee5b3d1a84169579f350d5ca908c66875df92e717f8fc2ddb2972311b072387a4b3659f8fcea6f36c912635a1c0d48e7c623c75838d644daf163456fcb84d1abf723b39c940c018c9209355333b17000000041001004204759807f2686d47c2eb059deb9feb494c310eb4ff5338f98144ce3271048f0094f418ed23619a720f724d2afda89f01fdb39adcc9e8fe74fbfa921a6f0dc813cc129aecc5923846e93ab021f299743508c76641ef95b0307c0a5480bc4ae58d43ff4f7e29cd97eeff1f5c13505d87a0e8d9628dc37d4e403c5bbe4e6651a736140e97c808aaf6a53d7436f8ebfe1817c746d63126fad576d20197be05726eefa4f2ba569d10b748084df89394e6941ca07cf0350fbf6d394fb5ec382b8dd0cb46c41b3e31815a01c65f10065f362301d60d563a1c560dbca100ed74b0bc054b7ac3100d52019ccef11b52e7b62f1a0ce1236d1c9437f905b409b0cf56b7d8d68c2f1d2a8b3c5b0e553b89c5fddbfb29d2770d5e60e284f0f5c42e2d3898e031c2d4274d591533632e9a9ca3347e23ae8be71bfa3bc124efd815b019560132c1620c060b4d41361a7efcbdb1bd5bf976c1626e04e4d566760b41914c1cf34df882c1991430507c04de3fb818583cca30cd29f8b65a2a86ad588daadb3aaa7b259da2be76f46d8af8c834ff52e9d2ef223875d4e8c98b023f96055b5157e2e382e46cf7311f5b71c26d2117a38aa6b2780619379b5e4668459d2c2d6d23370f81b9e40234f03fbcacc37339f8959e3d83790ccf496a7c9980cc83044df72304bea3fcdba06fe72ac59385dcae15aea06085915edadf33d8eb180a6c09c9a38628602656616bdc5b0c8072ef64a1fff9412e2c652b8734442277ca1b1bac15d3f756ada17f907ceaa878997794ccc86687252e654e82fbd607f1aafdd919b80b87fb3bfd4f50377972099887ec532041f3d92c2c9960817c4e5a1f0ab3389c9dfeeb5969616d511d296111de7ceb083c9929907698686949fe49ac722a1ce73d5e24e5171b17f59d9520a5b8a884d9ab78d8377f875ff3e185f35b4f6e60b1e5bb34d2619a7b02d2ec7947264debcc18ec494aaee6c6cf8cedccc2a2d4ed7034f57855986168f5346764f9407dcbaad7f85b1b72c5b23f80f90881c1a04a3cd4519211d4d8f46122d7f4037bf04b103bcb04792e029b455dfdc72b43e220849e44523fe8fcea967be138109d00f05dc027a5505c6621d915abc16caa1bf272ca4006496a96ade1360a8188d17a51d017aa05ade8bdd59d398ba8650e2750d114e04b363cb74f1fcac8234391b30833c4edaa695792874a3c2e7cba67dda32bf6ce22f756b7d6bc8fd289e4e4088f34c56f76f9b8ca44f14112ed8f3e1714cb39ff6e51decfae9bcc7899e550a6a83f95c84640e052dd3ce475abd0bf0fa9b79b0e84df42ccc9960e6081b10c0dc95a28a71da3d7456fe278de2d0b93434138c49aade25fdf3743d36a2d85dafa10b7a0011e710cf38beea38cf50fd57b2746d0759a1a9267323c37482d07d3ab72395e0dc666f99e63f7a0b9dc5055d3d32e921f38fcaa4d5e0c08cb1fdfcecd89d2fda45e89db474353db190e657dc03700df790ca7844ca6dd85d81efb6540b92ff5444cd593d5134661038e86d5c99e568ebaa6e14d57a40063cc10851423d6f0319972aa101bea280ae2d28f4d5a568f5c241301cac26ee356bca06b1e09dc9c6d24fa8722deec1ade069ca500911d632c1c1d177848462e99b9ac65230ae07b525f2ed39f60cb84a3be2396be695eb4c791034490308956afee0e32bc132febaa743ab079a34d46e4697f8c6445a967581400870544968c0bd9ef0c887f4c7ed2ee2b237bc74880411d179fb0f7e14d16c5e7358c23e82984c332adb75955d3bea9ac19a2f15a14c12ba47c75345c58f493e0270175a035e31a00039d409feb1bdc69e6e3711deafad48dc1b3bc3dbdc775f9f6eb433c77ba40124ee3496b0ff83a957e6c368b26d68d5ae09caf7c8e80875521ae8836351e5606097620d9d9229234d4e3e89d02fd2bf7546834a8743584d95ba6fbb1660a43f26f903eb716b601756f67eb9c848e18294b86107ba7dd746e651ecfbf2325608f6d1f5262340d31c905d54ee580ba421fba8d74dbf45c9d956a8bef80954cc601b54ac79d23a172fa5bd6177ac6852ba875105f3f26b9cd6b91684f60dd186e4d6494f4796ed6ce0db8514936d89ff9692d239c4b867d403f09f3296315f9db026746583777165d05c7876a60cd9e3093f2bc6110f0e24388efe66b88697543dcb0893f8e85ff1237b76c7057191410269447df796486c8bec8c51ab4f054275a68bbc474debfe6e605ea7631df04af50e7c90b903b85935527e59f73c26f03952e8b0fe9db9b47ee4fbf117fd7effaa75cdc494f6cf85a8fde2242f5a5cd1d0ac621f107a519930eb4a2e94f8d7f18a86f2fc83e9790c3a8f9bb0dc8225dad148e8c403f70eb294a023b31162126b3e66437bda8f0eeb413175d7a4e494ccbc833de63650d8ece48a68576188a771e564f0fa056f948b473c51d45fad1832597c67eedfcad4bb4558e6f546a3ee4b5134df6b257a58af3e686009878d0924b5f8d3703189ee5ab14df6abead06d31c71c1d1a40dfe0919a196f811c110bbad624f05eb4cbb651cf3029233b26cd2f4cf41f533a6e69aff993cfb03fd63f3031dae14935d4b52b2ec3a900e9bf60e6cc70b5f9d118ba3a61b7329d29fb6a2375d07401edf4ee431adf71940b434ee13800b62e867de6f7b6fefc5604762f2f0fd459d7b356a48624172503f2cef7a5bdebd825fafce1b138af9f7df6109ce92668cb99bd737d12541153046349fafb78eb03e09cec0f8414af88b716734782dbc5c851097ca832389f700fb7c4c74441f316886d89a91682aeea236dd22cd698de68ec7b70dfbbd24dab1bac988eaac711ed7fa95d921b919745d2e788f9f7323339f58e664d754f9bbd4e6183313b205ec0113f8743c7b15a0cfea53facdd5d2bc886ec8ae70037478ad72d7463c642273af44110589d1ad5b52f210cbdb1f5964356ea17db5a8b8eb8632dc9c5d5c30404b5f19da8c92bbdf64f32494d210d40d64971428e8a96ea3dd8aa03ee636291968510fc1926d209363a1a92978cac30a4af06e67f0a732db601c795b731884452416e0bb33072a078c05308117d5c39981f73d6fb40218747029be66b91e79309749d75ccb264c27b4a409a3a245e519c027e56907e791090a0a49562e1f8999a6d47c8f251201ab39f5a049697e0a41226f2cf12d9f1dccd8f1c35c3b76d9bdaecd5e47d0a3b7dfe77adc2636fe3afe5e166a80026cbc54a574509f4385d75af14848d518ea6b5636232f65fedbe5e4506620864384219a16e775ca182325e25cdf681063e3c992bda8445a6cd42ba161acf15cbade5f1cb0bd31f580ef6d4f168c132c719c2eb883ff026ee8bce9684463fdff86a172269d12f9f7b144d2a5b271951d418a3f66b49e9b5beb49852f05b40c74dd8570b2c7150e7b1e470cb93df1d708678ae32edf5e806c5f90c798d88162326d1f41bb1527fb3eeddee023369382e116d07642460fe0619e1625ba4f7698bc8e781e656769d9f8b723504802270554e576d6566a516d3c462c652615db3ec5f2678452ea65e51ba5473c8da0d23d4704b89915ab3afb91eea20292598604306c12b9e8261b198cdec4af78072cd663c24d6447c60da8c8cc00e25c6a8812ccf8a1e16b51b26fa4a91e0c4e6a2901b2ef6d72c3d1f40a4333a609b3a914ec63ce87be7a4c87302e07ddf2029bf6861316d352bd4b294cd068a3230da7fdf1eb806a58039f9c321520eea9eb7c3dd7397a9b414210f10cc7cd83005b147a1f0621b602edd98ce4d7c00ebd357317ba95458ae1c3a5d8e0ea9b77ac4127df6e8db01f756a61bbfadec98fd112f8f25ceec529ffa6ae39bbcd4fc1eb44ba4bbb6b8a847353cde74ec797c7308e0b5e372a2aae0c8107119251c27b2e9b38718ff5fb18523773e3ade054cb71893df59672cc1c6e11571ae6fcf168e1bd85de41f24a1d2c093f6aa0b4af68d29adc30e3d057b9396e8c30bfbcd1c4de6fa0ec96de4a53566e521064d7e856998831e71838dffa4c1a61f2fcd923b45f2fbd971b2f520c3a4bb5945045ba0c63b780085bbd078567a6f528ad662d41dc50190677897fd328f8319bc8905640fd1455f0d209d5ecc08e26cf0131f106d2f9519dc41bbe9b36582a86bb24eaf2655c3b7d8b82eaea48c0951de750abebb01ee164747474a5a79280d7cd60da08c6c2ce3b0bdf29dfd8f969632ae39ab2f81676f5f1e28f38509db8a8316d1121679db55069fdf5c9ea28f268433a111df6364318d315b09a61d396158db099cf346b8c1079f67fdf473195f3500c711c644a0a9f2804920ed884385258d3dad18c185108bf58c2c06073191fcc3ecad522221174ec7148751fa1d7652877e0210ce097a5417b5421a9c1c0bf4cab034d7cae6370ac0a9f644c3780460ea1215f420002fbdf20e7eb21e585b0263fe7bc9fbd3d8539c8cfc06e8ec10eb48c2bdcbae37df06a39d6e31aef05da649490389c689d67bdcbabb65712419673ab4ffe543d22524fb388305f084c34c9eecbf3a60f7027e05a0aa8659547c54bee2e9dee4c1567778b48c762f2bbcca83504fd156ebfbf268b4a82e277959b794ad1449e74534e2f6b7ed17a608ec46ffff1117d7b18d5568ab3f8b6c3b4d7400349ce526a4dfdad18a0915d07ab77ff282845105c4bfb9d2a16f54aa8ed8fd1199c432f5c3c668eee2e91b486bef420a895c61647630d7349dc36142e5a67e76406fa632e80499f162054f726b36ab7ebf20ebd4551279b3c94a6581ca46da0a17675d7b9a4fae279270e75a3526743ff0a031dc7de44ee293e13f460502664d6a7ba577bed20559181092ffabe81cb8650094c5acf13ceb48c2c526dff6ab14dea29c1ce50b5a09cc5f8d1b9053d70965faf2e11d43d81a2c0c27b149d9c7a83fb2fab2618cce4e8e0714e5bbef52c792f0bee07538cf0f65e71bf948e845dfe7502126a5e92c8fc770a10094697cc6a50a33def111869ed06b529a4e649e95af2576eb8f8a4584075fcb84ce09b28ebeefaed33cfc27221bd4724ddde79d8d931ee07de9856dac709eeeeb30b17736ccc9559a5522d491e267e2e6d2ff06232c9fc64cc97cd0a6913c65e07969da2f881fd30a746545e4fb181288d3c401b50ba267a4955cb1d1b1cdbd8ed10f57a11bddbc0e159ccff7488ff92aef6ab3b1ed1961b6ecf9d9cb0e99e860d801d642fabcadc68f0da929d07a1ab0760e7f8aba85ce9e400108f22d536ee122c4c15b59b67d8243efcc03f01122f520013df91f5a1af300db45d698ee1a801c5c3dc62409aece9ac5295b4a94eff106973815756eaee6bf7bdc5c6da7961c56ef218ed37126aafd21b5d74b3cf1d519fb9421c68a5e1604261cbf11e66bd75d8b038b54e9867dfe0d9fe62e8db9200112c895789dc47029a474ebbe9203adfaa86afdcd7475dc79ebee22549eb66844f846244b16a09adf48299c7efa0dfbc329fef534447787da2ed57be62ca8a12ded7a0ecc7d3677ea4f46cfee00f88d3053c694395cb83c545f3f534106783c67de20f1655ec37fc48e7bb2d063d8650a21753d0e4e8dd7f7b43e678e7fecde07567816b2a0ff85db18ff1b2f2fec85e7117d3eaba65a13b0b9b4d23c92e539280cced8b2b72217d1f2176e74d77b581b94312e99512698d75fbdd9b7c8242f8272a99831c9716da0a01e316bdd849be9135f9d160a245be7fc67252f32ce6602f20400317f9e1ba6573b8226c8489228f0f50a2cb96b7b69ec4048cb49a7b5a12533334e4f9bf7facc4c2ded40800024000000000080002400000000008000640ffffff00140000001100010000000000000000000000000a07c28fe6b507374117162a4605ec674ddd169a329daa1b1b20baff22ff1a8edef04fdbabae928a2a9106e1ab34aab64004491dcd49b4754c86adfa3f4505647e186002695ab63fb10fdea3331a8c049e8c688e1134aef70629b76afea21b6388fadeaa66eb537a4a1e95fee7e025ac2cf461e480b081392a11acc73a0390c2168c5945"], 0x2af8}, 0x1, 0x0, 0x0, 0x8}, 0x4000) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x919, 0x3}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000180300", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000180300", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) 60.151063ms ago: executing program 6 (id=3857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80c0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xd, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='mem_connect\x00', r3, 0x0, 0x1000000002}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002700fcffffffffffff25030000000500020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xd, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) 0s ago: executing program 2 (id=3858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x2, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x48, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8b}]}]}, 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000032b852bf0030d7d666d28e08208297395634ebe7c4440fe5f8b5cfdff1cde676b7a0576057d8940a35c416d20c60bf7da18f743f30df19064ae5a2cd30e2071c779489583e2e591bde66c7db5b906dde61c61f163d8cb7262d98dc20fa2a31471693883ecbbe03000000000000002c0e999493f1351b3c9d5d379b0181e253baf36767b390c3122ee6c5edce7bf954cdee7ded44b4f913b8746497f5", @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf256f0000000c009900dc0e00003b0000000500d600340000000a000600ffffffffffff00000a0006000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): face the new active one [ 302.416015][T14208] bridge4: entered promiscuous mode [ 302.422442][T14208] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 302.518306][ T7931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.557798][ T7931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.820539][T14229] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.828468][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.854075][T14229] team_slave_0: left promiscuous mode [ 302.860541][T14229] team_slave_1: left promiscuous mode [ 303.109081][T14229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.160439][T14229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.548410][T14229] veth3: left promiscuous mode [ 303.695705][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.722360][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.774038][T14270] tipc: Started in network mode [ 303.778979][T14270] tipc: Node identity eaff13c91bb, cluster identity 4711 [ 303.814472][T14270] tipc: Enabled bearer , priority 0 [ 303.824551][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.834521][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.888342][T14272] syzkaller0: entered promiscuous mode [ 303.898522][T14272] syzkaller0: entered allmulticast mode [ 303.996984][T14283] __nla_validate_parse: 11 callbacks suppressed [ 303.997002][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2120'. [ 304.377003][ T7931] dvmrp0 (unregistering): left allmulticast mode [ 304.471680][ T7931] bond2 (unregistering): (slave bridge0): Releasing backup interface [ 304.479796][ T7931] bridge0 (unregistering): left promiscuous mode [ 304.614648][ T7931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.626137][ T7931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.643074][ T7931] bond0 (unregistering): Released all slaves [ 304.661683][ T7931] bond1 (unregistering): Released all slaves [ 304.757996][ T7931] bond2 (unregistering): Released all slaves [ 304.773251][T14280] lo speed is unknown, defaulting to 1000 [ 304.797304][T14272] tipc: Resetting bearer [ 304.921605][T14299] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 304.945949][T13174] tipc: Node number set to 4048491465 [ 305.021523][T14280] lo speed is unknown, defaulting to 1000 [ 305.023165][ T7931] tipc: Left network mode [ 305.775098][T14309] lo speed is unknown, defaulting to 1000 [ 305.805629][T14309] lo speed is unknown, defaulting to 1000 [ 305.895416][T14331] netlink: zone id is out of range [ 305.901104][T14331] netlink: zone id is out of range [ 306.127814][T14333] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 306.166402][T14344] netlink: 'syz.5.2136': attribute type 1 has an invalid length. [ 306.178761][T14344] netlink: 5624 bytes leftover after parsing attributes in process `syz.5.2136'. [ 306.302950][T14342] lo speed is unknown, defaulting to 1000 [ 306.357663][T14342] lo speed is unknown, defaulting to 1000 [ 306.481767][ T5838] Bluetooth: hci4: link tx timeout [ 306.487828][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.497659][ T5147] Bluetooth: hci4: link tx timeout [ 306.503999][ T5147] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 307.096128][ T7931] hsr_slave_0: left promiscuous mode [ 307.103407][ T7931] hsr_slave_1: left promiscuous mode [ 307.109866][ T7931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.123247][ T7931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.159232][ T7931] veth1_macvtap: left promiscuous mode [ 307.165301][ T7931] veth0_macvtap: left promiscuous mode [ 307.171787][ T7931] veth1_vlan: left promiscuous mode [ 307.177206][ T7931] veth0_vlan: left promiscuous mode [ 307.557422][ T7931] team0 (unregistering): Port device team_slave_1 removed [ 308.008426][ T5891] lo speed is unknown, defaulting to 1000 [ 308.040796][ T5891] infiniband syz1: ib_query_port failed (-19) [ 308.206044][T14367] netlink: 'syz.7.2143': attribute type 1 has an invalid length. [ 308.226778][T14367] netlink: 600 bytes leftover after parsing attributes in process `syz.7.2143'. [ 308.551789][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 308.639220][T14380] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2147'. [ 308.952911][T14392] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2150'. [ 309.085755][T14395] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.138851][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2155'. [ 309.215496][T14395] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.264729][T14416] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2154'. [ 309.312845][T14420] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2158'. [ 309.346280][T14395] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.435179][T14395] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.745265][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.783052][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.818337][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.863891][ T7931] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.389387][T14452] netlink: 'syz.1.2168': attribute type 3 has an invalid length. [ 310.783650][T14471] netlink: 'syz.2.2172': attribute type 1 has an invalid length. [ 310.793196][T14471] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2172'. [ 310.825701][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'. [ 311.041771][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2176'. [ 311.485428][T14513] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 311.492065][T14510] nbd2: detected capacity change from 0 to 127 [ 311.525378][ T5827] block nbd2: Receive control failed (result -32) [ 311.606327][T14514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.985638][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 311.990776][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 312.316868][T14545] syzkaller0: entered promiscuous mode [ 312.333152][T14545] syzkaller0: entered allmulticast mode [ 312.364331][T14545] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.2191'. [ 312.391197][ T5147] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 312.400794][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 312.407713][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2192'. [ 312.529666][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2193'. [ 313.206444][T14564] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.214340][T14564] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.379445][T14564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.403829][T14564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.730033][T14564] ip6gretap0: left allmulticast mode [ 313.757793][ T7941] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.789620][ T7941] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.810747][ T7941] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.819681][ T7941] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.942977][T14595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.955311][T14596] lo speed is unknown, defaulting to 1000 [ 313.964518][T14592] netlink: 'syz.2.2202': attribute type 1 has an invalid length. [ 313.976879][T14598] sctp: [Deprecated]: syz.6.2204 (pid 14598) Use of int in max_burst socket option deprecated. [ 313.976879][T14598] Use struct sctp_assoc_value instead [ 314.071384][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 314.108051][T14602] gretap1: entered allmulticast mode [ 314.171514][T14604] __nla_validate_parse: 1 callbacks suppressed [ 314.171534][T14604] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2206'. [ 314.189903][T14604] netlink: 'syz.6.2206': attribute type 33 has an invalid length. [ 314.221225][T14604] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2206'. [ 314.259468][T14604] `: renamed from team0 [ 314.584667][T14621] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 314.660514][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'. [ 314.674654][T14624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2212'. [ 314.876613][T14635] xt_HMARK: spi-set and port-set can't be combined [ 315.287086][T14654] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.338403][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 315.432916][T14654] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.526935][T14668] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 315.596872][T14670] netlink: 'syz.6.2223': attribute type 6 has an invalid length. [ 315.646504][T14654] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.757028][T14676] xt_ecn: cannot match TCP bits for non-tcp packets [ 315.766025][T14654] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.805240][T14673] lo speed is unknown, defaulting to 1000 [ 315.825222][T14677] tipc: Enabled bearer , priority 0 [ 315.863543][T14677] syzkaller0: entered promiscuous mode [ 315.873019][T14677] syzkaller0: entered allmulticast mode [ 315.913625][T14677] tipc: Resetting bearer [ 315.944706][T14675] tipc: Resetting bearer [ 315.972357][T14675] tipc: Disabling bearer [ 316.076935][ T7937] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.097597][ T7937] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.107606][ T7937] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.149398][ T7937] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.168216][T14687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2229'. [ 316.178006][T14689] batadv_slave_1: entered promiscuous mode [ 316.191459][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2230'. [ 316.201404][T14689] bridge_slave_1: left allmulticast mode [ 316.210981][T14689] bridge_slave_1: left promiscuous mode [ 316.222542][T14689] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.247754][T14689] bridge_slave_0: left allmulticast mode [ 316.258905][T14689] bridge_slave_0: left promiscuous mode [ 316.280942][T14689] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.347918][T14702] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2232'. [ 316.398325][T14697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2232'. [ 316.408747][T14697] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2232'. [ 316.417997][T14697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2232'. [ 316.452520][T14688] batadv_slave_1: left promiscuous mode [ 316.772870][T14724] netlink: 'syz.6.2240': attribute type 10 has an invalid length. [ 316.859199][T14728] veth0_to_bridge: entered promiscuous mode [ 316.902636][T14723] veth0_to_bridge: left promiscuous mode [ 316.966072][T14731] macsec3: entered promiscuous mode [ 316.980789][T14731] macsec3: entered allmulticast mode [ 317.196033][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.562661][T13174] IPVS: starting estimator thread 0... [ 317.569019][T14758] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 317.587595][T14760] bridge0: entered allmulticast mode [ 317.683532][T14764] IPVS: using max 34 ests per chain, 81600 per kthread [ 318.354216][T14789] bond5: down delay (134221824) is not a multiple of miimon (3355), value rounded to 134220130 ms [ 318.368901][T14789] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.165216][T14818] bond6: entered promiscuous mode [ 319.170303][T14818] bond6: entered allmulticast mode [ 319.181097][T14818] 8021q: adding VLAN 0 to HW filter on device bond6 [ 319.242227][T14831] ip6t_srh: unknown srh invflags 4000 [ 319.258446][T14831] __nla_validate_parse: 16 callbacks suppressed [ 319.258468][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2267'. [ 319.511695][T14818] bond6 (unregistering): Released all slaves [ 319.560050][T14827] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 319.838110][T14851] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 319.847811][T14847] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2272'. [ 320.287551][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2280'. [ 320.321686][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2280'. [ 320.335294][T14888] ±ÿ: renamed from batadv_slave_1 [ 320.761084][T14910] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2285'. [ 320.845038][T14913] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2285'. [ 320.894314][T14908] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.942738][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'. [ 320.946366][T14908] bond8: entered promiscuous mode [ 320.958206][T14908] bond8: entered allmulticast mode [ 320.964552][T14908] bond0: (slave bond8): Enslaving as an active interface with an up link [ 320.973207][T14910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2285'. [ 321.268506][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2292'. [ 321.268559][T14930] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2292'. [ 321.363104][T14913] bond1: (slave macvlan2): Releasing backup interface [ 321.390750][T14913] bond0 (unregistering): (slave bond8): Releasing backup interface [ 321.399412][T14913] bond8: left promiscuous mode [ 321.404703][T14913] bond8: left allmulticast mode [ 321.414648][T14913] bond0 (unregistering): Released all slaves [ 321.717141][T14938] lo speed is unknown, defaulting to 1000 [ 322.121627][T14967] netlink: 'syz.1.2300': attribute type 1 has an invalid length. [ 322.227607][T14971] netlink: 'syz.7.2301': attribute type 15 has an invalid length. [ 322.406348][T14980] netlink: 'syz.7.2305': attribute type 12 has an invalid length. [ 322.415071][T14983] sctp: [Deprecated]: syz.2.2304 (pid 14983) Use of int in maxseg socket option. [ 322.415071][T14983] Use struct sctp_assoc_value instead [ 322.846707][T14994] bond0: (slave bond_slave_0): Releasing backup interface [ 322.874690][T14994] bond0: (slave bond_slave_1): Releasing backup interface [ 322.889199][T14994] `: Port device team_slave_0 removed [ 322.933405][T14994] `: Port device team_slave_1 removed [ 322.950521][T14994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.963835][T14994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.980629][T14994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 323.052201][ T30] audit: type=1804 audit(1760282648.682:3): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2312" name="cgroup.controllers" dev="tmpfs" ino=2392 res=1 errno=0 [ 323.114762][ T30] audit: type=1800 audit(1760282648.702:4): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2312" name="cgroup.controllers" dev="tmpfs" ino=2392 res=0 errno=0 [ 323.179909][ T30] audit: type=1800 audit(1760282648.702:5): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2312" name="cgroup.controllers" dev="tmpfs" ino=2392 res=0 errno=0 [ 323.657606][T15051] netlink: 'syz.7.2327': attribute type 1 has an invalid length. [ 323.666315][T15051] netlink: 'syz.7.2327': attribute type 2 has an invalid length. [ 323.678322][T15051] netlink: 'syz.7.2327': attribute type 1 has an invalid length. [ 323.686950][T15051] netlink: 'syz.7.2327': attribute type 2 has an invalid length. [ 323.708730][T15051] team0: entered promiscuous mode [ 323.717230][T15051] team_slave_0: entered promiscuous mode [ 323.723379][T15051] team_slave_1: entered promiscuous mode [ 323.729400][T15051] team0: entered allmulticast mode [ 323.734772][T15051] team_slave_0: entered allmulticast mode [ 323.740840][T15051] team_slave_1: entered allmulticast mode [ 323.838362][T15067] tipc: Enabling of bearer rejected, already enabled [ 323.957659][ T30] audit: type=1107 audit(1760282649.582:6): pid=15072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 324.333449][T15093] __nla_validate_parse: 6 callbacks suppressed [ 324.333471][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'. [ 324.424688][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 324.425855][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 324.456286][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2338'. [ 324.484079][T15093] bridge3: entered allmulticast mode [ 324.884138][T15123] bond3: Removing last ns target with arp_interval on [ 324.944161][T15128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2346'. [ 325.047900][T15132] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2347'. [ 326.275699][T15129] bond6: ARP target 9.0.0.0 is already present [ 326.281949][T15129] bond6: option arp_ip_target: invalid value (9) [ 326.289474][T15129] bond6 (unregistering): Released all slaves [ 326.320808][T15141] dvmrp0: left allmulticast mode [ 326.333017][T15141] pimreg: left allmulticast mode [ 326.442505][T15119] lo speed is unknown, defaulting to 1000 [ 326.561302][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 326.590753][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 326.603878][T15150] bond2: option arp_validate: invalid value (18446744073491447809) [ 326.615322][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 326.630407][T15158] netlink: 'syz.7.2350': attribute type 13 has an invalid length. [ 326.644213][T15150] bond2 (unregistering): Released all slaves [ 326.719899][T15162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2353'. [ 326.900939][T15158] bridge0: port 3(dummy0) entered disabled state [ 326.907647][T15158] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.915436][T15158] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.107456][T15158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.126946][T15158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.291882][T15158] tipc: Resetting bearer [ 327.328507][T15148] lo speed is unknown, defaulting to 1000 [ 327.396776][ T7941] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.433422][ T7941] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.450975][ T7941] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.524769][ T7941] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.769572][T15162] lo speed is unknown, defaulting to 1000 [ 327.847152][T15180] netlink: 'syz.2.2357': attribute type 29 has an invalid length. [ 327.866321][T15180] netlink: 'syz.2.2357': attribute type 29 has an invalid length. [ 327.910904][T15180] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2357'. [ 328.601444][T15196] ip_vti0: left promiscuous mode [ 328.606637][T15196] ip_vti0: left allmulticast mode [ 328.625588][T15196] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 328.708901][T15198] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 328.755941][T15198] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 328.767328][T15198] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 328.842899][T15200] vlan2: entered allmulticast mode [ 328.848072][T15200] bridge0: entered allmulticast mode [ 328.854233][T15200] bond6: (slave vlan2): Opening slave failed [ 329.218977][T15217] veth3: entered promiscuous mode [ 329.244342][T15211] netlink: 468 bytes leftover after parsing attributes in process `syz.5.2368'. [ 329.310290][T15228] netlink: 'syz.2.2372': attribute type 1 has an invalid length. [ 329.369765][T15228] bond7: (slave geneve3): making interface the new active one [ 329.379309][T15228] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 329.396675][T15228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2372'. [ 329.397815][ T7941] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.419370][ T7941] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.427809][ T7941] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.440405][T15228] 8021q: adding VLAN 0 to HW filter on device bond7 [ 329.448103][T15235] tc_dump_action: action bad kind [ 329.470723][ T7941] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 329.547134][T15240] batadv_slave_1: entered promiscuous mode [ 329.642701][T15247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2378'. [ 329.653918][T15247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2378'. [ 329.664071][T15247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2378'. [ 329.679928][T15247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2378'. [ 329.749811][T15238] batadv_slave_1: left promiscuous mode [ 329.991107][T15263] lo speed is unknown, defaulting to 1000 [ 330.287198][T15274] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000 [ 331.012747][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 331.042212][T15293] bond2: option all_slaves_active: invalid value (13) [ 331.063461][T15293] bond2 (unregistering): Released all slaves [ 331.175149][T15296] bridge0: entered promiscuous mode [ 331.192502][T15296] bridge0: entered allmulticast mode [ 331.433089][T15327] x_tables: duplicate underflow at hook 4 [ 331.759001][T15335] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2400'. [ 332.155293][T15356] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2406'. [ 332.529969][T15360] netlink: 'syz.2.2407': attribute type 3 has an invalid length. [ 332.593964][T15360] netlink: 'syz.2.2407': attribute type 1 has an invalid length. [ 332.612343][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2407'. [ 332.689388][T15370] lo speed is unknown, defaulting to 1000 [ 333.085494][T15391] Cannot find set identified by id 65534 to match [ 333.122856][T15393] IPVS: Error connecting to the multicast addr [ 333.531987][T15412] tipc: Invalid UDP bearer configuration [ 333.532059][T15412] tipc: Enabling of bearer rejected, failed to enable media [ 333.875356][T15425] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 334.065767][T15434] lo speed is unknown, defaulting to 1000 [ 334.172900][T15441] C: left allmulticast mode [ 334.395803][T15445] lo speed is unknown, defaulting to 1000 [ 334.589362][T15450] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2432'. [ 335.484575][T15492] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 335.572854][T15492] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.580197][T15492] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 335.623715][T15492] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 335.632080][T15492] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 335.639976][T15492] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 335.671840][T15492] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 335.701944][T15492] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 335.710309][T15507] xfrm1: entered allmulticast mode [ 335.896643][T15519] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2451'. [ 336.020105][T15492] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 336.039145][T15492] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 336.049246][T15526] vxcan1 speed is unknown, defaulting to 1000 [ 336.061388][T15526] vxcan1 speed is unknown, defaulting to 1000 [ 336.086745][T15492] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 336.104164][T15526] vxcan1 speed is unknown, defaulting to 1000 [ 336.260409][T15530] bond2: entered promiscuous mode [ 336.266819][T15530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.314766][T15539] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2455'. [ 336.380767][T15530] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.390094][T15530] bond2: (slave bond3): making interface the new active one [ 336.397761][T15530] bond3: entered promiscuous mode [ 336.404016][T15530] bond2: (slave bond3): Enslaving as an active interface with an up link [ 336.537463][T15526] infiniband syz2: set down [ 336.546344][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 336.562962][T15526] infiniband syz2: added vxcan1 [ 336.625360][T15526] RDS/IB: syz2: added [ 336.629426][T15526] smc: adding ib device syz2 with port count 1 [ 336.636100][T15526] smc: ib device syz2 port 1 has no pnetid [ 336.643062][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 336.652643][T15526] vxcan1 speed is unknown, defaulting to 1000 [ 336.701880][T15560] tipc: Enabled bearer , priority 0 [ 336.751189][T15563] macsec1: entered promiscuous mode [ 336.760635][T15563] ip6gretap0: entered promiscuous mode [ 336.767868][T15560] tipc: Enabling of bearer rejected, already enabled [ 336.889879][T15560] tipc: Disabling bearer [ 336.926485][T15573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.029687][T15584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2467'. [ 337.081530][T15526] vxcan1 speed is unknown, defaulting to 1000 [ 337.082253][T15582] lo speed is unknown, defaulting to 1000 [ 337.227891][T15594] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 337.360430][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2472'. [ 337.421595][T15604] bridge6: entered allmulticast mode [ 337.484129][T15604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.504376][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 337.508056][T15604] bond0: (slave rose0): Enslaving as an active interface with an up link [ 337.574263][T15605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2472'. [ 337.673712][T15526] vxcan1 speed is unknown, defaulting to 1000 [ 337.810484][T15623] bond0: (slave dummy0): Releasing backup interface [ 337.836192][T15623] bridge_slave_0: left promiscuous mode [ 337.851218][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.890909][T15623] bridge_slave_1: left allmulticast mode [ 337.897522][T15623] bridge_slave_1: left promiscuous mode [ 337.915989][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.937756][T15623] bond0: (slave bond_slave_0): Releasing backup interface [ 337.947455][T15623] bond0: (slave bond_slave_1): Releasing backup interface [ 337.966968][T15623] team0: Port device team_slave_0 removed [ 338.014332][T15623] team0: Port device team_slave_1 removed [ 338.029080][T15623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.039315][T15623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.054938][T15623] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 338.181576][T15526] vxcan1 speed is unknown, defaulting to 1000 [ 338.212946][T15639] pim6reg1: entered promiscuous mode [ 338.218346][T15639] pim6reg1: entered allmulticast mode [ 338.404246][T15655] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2486'. [ 338.430846][T15655] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 338.534745][T15663] tipc: Enabling of bearer rejected, failed to enable media [ 338.572621][T15526] vxcan1 speed is unknown, defaulting to 1000 [ 338.613903][T15661] tipc: Enabled bearer , priority 0 [ 338.629750][T15668] syzkaller0: entered promiscuous mode [ 338.639466][T15668] syzkaller0: entered allmulticast mode [ 338.716597][T15661] tipc: Resetting bearer [ 338.813173][T15660] tipc: Resetting bearer [ 338.881293][T15660] tipc: Disabling bearer [ 339.006987][T15526] vxcan1 speed is unknown, defaulting to 1000 [ 339.323733][T15697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.590981][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 339.601222][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 339.663163][T15714] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 339.717481][T15711] tipc: Enabled bearer , priority 0 [ 339.767598][T15718] syzkaller0: entered promiscuous mode [ 339.794849][T15718] syzkaller0: entered allmulticast mode [ 339.875669][T15711] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2502'. [ 339.893039][T15711] tipc: Resetting bearer [ 339.917694][T15710] tipc: Resetting bearer [ 340.099689][T15710] tipc: Disabling bearer [ 340.112759][T15727] veth0_to_bridge: entered promiscuous mode [ 340.267895][T15720] veth0_to_bridge: left promiscuous mode [ 340.404482][T15739] lo speed is unknown, defaulting to 1000 [ 340.423577][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2507'. [ 340.442715][T15737] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 340.963519][T15767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.972045][T15739] vxcan1 speed is unknown, defaulting to 1000 [ 341.113468][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2516'. [ 342.030325][T15800] validate_nla: 61 callbacks suppressed [ 342.030342][T15800] netlink: 'syz.5.2526': attribute type 9 has an invalid length. [ 342.044713][T15800] netlink: 'syz.5.2526': attribute type 7 has an invalid length. [ 342.053595][T15800] netlink: 'syz.5.2526': attribute type 8 has an invalid length. [ 342.453977][T15807] lo speed is unknown, defaulting to 1000 [ 342.731713][T15821] netlink: 'syz.5.2531': attribute type 1 has an invalid length. [ 342.744604][T15819] netlink: 'syz.1.2530': attribute type 1 has an invalid length. [ 342.775898][T15819] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2530'. [ 342.851203][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 343.002011][T15830] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2533'. [ 343.128365][T15807] vxcan1 speed is unknown, defaulting to 1000 [ 343.238146][T15842] sctp: [Deprecated]: syz.7.2537 (pid 15842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.238146][T15842] Use struct sctp_sack_info instead [ 343.359503][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2539'. [ 343.370036][T15851] bpq0: entered promiscuous mode [ 343.390092][T15851] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2540'. [ 343.425473][T15851] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2540'. [ 343.598163][T15859] lo speed is unknown, defaulting to 1000 [ 343.648539][T15862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.660479][T15862] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.675214][T15862] bridge0: port 3(dummy0) entered blocking state [ 343.682013][T15862] bridge0: port 3(dummy0) entered forwarding state [ 343.693035][T15862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.755696][T15863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.899549][T15866] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 343.909056][T15866] bridge5: entered allmulticast mode [ 343.927689][T15859] vxcan1 speed is unknown, defaulting to 1000 [ 344.051461][T15872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2545'. [ 345.073510][T15908] netlink: zone id is out of range [ 345.087053][T15908] netlink: get zone limit has 4 unknown bytes [ 345.457521][ T7937] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 345.476334][ T7937] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 345.550460][T15918] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 345.582802][T15918] bond9 (unregistering): Released all slaves [ 345.627230][ T7937] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 345.649088][ T7937] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 345.767617][T15932] lo speed is unknown, defaulting to 1000 [ 345.894764][T15942] netlink: 'syz.5.2567': attribute type 13 has an invalid length. [ 345.908456][T15942] netlink: 'syz.5.2567': attribute type 17 has an invalid length. [ 346.028488][T15952] __nla_validate_parse: 3 callbacks suppressed [ 346.028506][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2564'. [ 346.489031][T15942] ip6gretap0: left promiscuous mode [ 346.514896][T15942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.526002][T15942] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.536247][T15958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2568'. [ 346.546488][T15942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.569207][T15939] lo speed is unknown, defaulting to 1000 [ 346.598504][T15932] vxcan1 speed is unknown, defaulting to 1000 [ 347.014076][T15947] lo speed is unknown, defaulting to 1000 [ 347.026005][T15939] vxcan1 speed is unknown, defaulting to 1000 [ 347.366164][T15981] netlink: 'syz.6.2575': attribute type 22 has an invalid length. [ 347.460296][T15947] vxcan1 speed is unknown, defaulting to 1000 [ 347.493125][T15986] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2576'. [ 347.553438][T15986] netlink: 14436 bytes leftover after parsing attributes in process `syz.6.2576'. [ 347.575526][T15986] openvswitch: netlink: EtherType 0 is less than min 600 [ 348.871005][T16006] bond4: option lp_interval: invalid value (0) [ 348.885425][T16006] bond4: option lp_interval: allowed values 1 - 2147483647 [ 348.896840][T16006] bond4 (unregistering): Released all slaves [ 349.166949][T16019] vti1: entered promiscuous mode [ 349.546831][T16051] lo speed is unknown, defaulting to 1000 [ 349.811951][T16068] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 349.933910][T16065] lo speed is unknown, defaulting to 1000 [ 349.942314][T16051] vxcan1 speed is unknown, defaulting to 1000 [ 349.955649][T16075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2598'. [ 350.122687][T16078] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2599'. [ 350.438797][T16061] lo speed is unknown, defaulting to 1000 [ 350.502502][T16065] vxcan1 speed is unknown, defaulting to 1000 [ 350.917916][T16093] gtp1: entered promiscuous mode [ 350.940687][T16093] gtp1: entered allmulticast mode [ 350.996025][T16099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'. [ 351.005784][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2605'. [ 351.039976][T16099] geneve4: entered promiscuous mode [ 351.050645][T16099] geneve4: entered allmulticast mode [ 351.059897][ T7931] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 351.089353][ T7931] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 351.143198][T16061] vxcan1 speed is unknown, defaulting to 1000 [ 351.200385][ T7931] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 351.220147][ T7931] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 351.864150][T16122] netlink: 'syz.2.2610': attribute type 1 has an invalid length. [ 351.873314][T16123] netlink: 'syz.2.2610': attribute type 1 has an invalid length. [ 351.943142][T16122] 8021q: adding VLAN 0 to HW filter on device bond8 [ 352.255431][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 352.284703][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 352.883143][T16174] netlink: 'syz.6.2624': attribute type 1 has an invalid length. [ 352.897468][T16174] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2624'. [ 352.912499][T16176] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2625'. [ 352.922025][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2624'. [ 353.054335][T16182] netlink: 'syz.5.2628': attribute type 33 has an invalid length. [ 353.069165][T16182] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2628'. [ 353.099944][T16191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2627'. [ 353.201006][T16196] vlan0: entered promiscuous mode [ 353.370721][T16205] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2634'. [ 353.387940][T16205] netlink: 'syz.6.2634': attribute type 5 has an invalid length. [ 353.659512][T16231] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2642'. [ 353.688511][T16235] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2642'. [ 354.172057][T16256] dvmrp12: entered allmulticast mode [ 354.287721][T16257] dvmrp12: left allmulticast mode [ 355.503527][T16273] bridge0: entered promiscuous mode [ 355.641921][T16282] netlink: 'syz.7.2653': attribute type 3 has an invalid length. [ 355.658979][T16282] netlink: 'syz.7.2653': attribute type 3 has an invalid length. [ 355.802917][T16287] lo speed is unknown, defaulting to 1000 [ 356.014312][T16294] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 356.455110][T16286] lo speed is unknown, defaulting to 1000 [ 356.455134][T16287] vxcan1 speed is unknown, defaulting to 1000 [ 356.688992][T16320] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 356.705298][T16320] CPU: 1 UID: 0 PID: 16320 Comm: syz.7.2666 Not tainted syzkaller #0 PREEMPT(full) [ 356.705350][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.705365][T16320] Call Trace: [ 356.705373][T16320] [ 356.705382][T16320] dump_stack_lvl+0x189/0x250 [ 356.705420][T16320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.705441][T16320] ? __pfx__printk+0x10/0x10 [ 356.705466][T16320] ? kernfs_path_from_node+0x2f/0x290 [ 356.705490][T16320] ? kernfs_path_from_node+0x250/0x290 [ 356.705509][T16320] ? kernfs_path_from_node+0x2f/0x290 [ 356.705534][T16320] sysfs_warn_dup+0x8e/0xa0 [ 356.705554][T16320] sysfs_do_create_link_sd+0xc0/0x110 [ 356.705577][T16320] device_add_class_symlinks+0x1cf/0x240 [ 356.705609][T16320] device_add+0x475/0xb50 [ 356.705640][T16320] wiphy_register+0x1c81/0x2aa0 [ 356.705682][T16320] ? __pfx_wiphy_register+0x10/0x10 [ 356.705706][T16320] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 356.705731][T16320] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 356.705772][T16320] ieee80211_register_hw+0x3473/0x40d0 [ 356.705808][T16320] ? ieee80211_register_hw+0x14a1/0x40d0 [ 356.705838][T16320] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 356.705853][T16320] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 356.705878][T16320] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 356.705899][T16320] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 356.705927][T16320] ? __hrtimer_setup+0x187/0x210 [ 356.705947][T16320] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 356.705976][T16320] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 356.706036][T16320] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 356.706057][T16320] ? trace_kmalloc+0x1f/0xd0 [ 356.706079][T16320] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 356.706106][T16320] ? kstrndup+0xbf/0x160 [ 356.706138][T16320] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 356.706167][T16320] ? __pfx___nla_validate_parse+0x10/0x10 [ 356.706213][T16320] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 356.706243][T16320] ? rcu_is_watching+0x15/0xb0 [ 356.706269][T16320] ? __nla_parse+0x40/0x60 [ 356.706299][T16320] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 356.706336][T16320] genl_family_rcv_msg_doit+0x212/0x300 [ 356.706371][T16320] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 356.706413][T16320] ? bpf_lsm_capable+0x9/0x20 [ 356.706435][T16320] ? security_capable+0x7e/0x2e0 [ 356.706467][T16320] genl_rcv_msg+0x60e/0x790 [ 356.706499][T16320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.706523][T16320] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 356.706564][T16320] netlink_rcv_skb+0x205/0x470 [ 356.706581][T16320] ? __lock_acquire+0xab9/0xd20 [ 356.706602][T16320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.706629][T16320] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.706672][T16320] ? down_read+0x1ad/0x2e0 [ 356.706701][T16320] genl_rcv+0x28/0x40 [ 356.706722][T16320] netlink_unicast+0x82f/0x9e0 [ 356.706769][T16320] ? __pfx_netlink_unicast+0x10/0x10 [ 356.706801][T16320] ? netlink_sendmsg+0x642/0xb30 [ 356.706819][T16320] ? skb_put+0x11b/0x210 [ 356.706842][T16320] netlink_sendmsg+0x805/0xb30 [ 356.706875][T16320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.706899][T16320] ? aa_sock_msg_perm+0xf1/0x1d0 [ 356.706928][T16320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.706946][T16320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.706968][T16320] __sock_sendmsg+0x21c/0x270 [ 356.707000][T16320] ____sys_sendmsg+0x505/0x830 [ 356.707030][T16320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.707064][T16320] ? import_iovec+0x74/0xa0 [ 356.707088][T16320] ___sys_sendmsg+0x21f/0x2a0 [ 356.707114][T16320] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.707180][T16320] ? __fget_files+0x2a/0x420 [ 356.707197][T16320] ? __fget_files+0x3a0/0x420 [ 356.707226][T16320] __x64_sys_sendmsg+0x19b/0x260 [ 356.707251][T16320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.707294][T16320] ? do_syscall_64+0xbe/0xfa0 [ 356.707323][T16320] do_syscall_64+0xfa/0xfa0 [ 356.707344][T16320] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.707366][T16320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.707385][T16320] ? clear_bhb_loop+0x60/0xb0 [ 356.707408][T16320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.707426][T16320] RIP: 0033:0x7f1a8c78eec9 [ 356.707453][T16320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.707469][T16320] RSP: 002b:00007f1a8a9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.707497][T16320] RAX: ffffffffffffffda RBX: 00007f1a8c9e5fa0 RCX: 00007f1a8c78eec9 [ 356.707510][T16320] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 356.707523][T16320] RBP: 00007f1a8c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.707535][T16320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.707547][T16320] R13: 00007f1a8c9e6038 R14: 00007f1a8c9e5fa0 R15: 00007fffe64ce7f8 [ 356.707582][T16320] [ 357.398213][T16292] lo speed is unknown, defaulting to 1000 [ 357.538901][T16286] vxcan1 speed is unknown, defaulting to 1000 [ 357.953817][T16317] lo speed is unknown, defaulting to 1000 [ 358.119909][T16292] vxcan1 speed is unknown, defaulting to 1000 [ 358.380420][T16334] lo speed is unknown, defaulting to 1000 [ 358.425103][T16340] __nla_validate_parse: 2 callbacks suppressed [ 358.425121][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2671'. [ 358.716761][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2672'. [ 358.727283][T16344] netlink: 'syz.7.2672': attribute type 5 has an invalid length. [ 358.735546][T16344] netlink: 'syz.7.2672': attribute type 8 has an invalid length. [ 358.750417][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2672'. [ 358.777505][T16344] geneve2: entered promiscuous mode [ 358.795046][T16344] geneve2: entered allmulticast mode [ 358.803490][ T7931] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 358.813440][ T7931] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 358.829508][ T7931] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 358.861395][T16344] dummy0: left allmulticast mode [ 358.866862][T16344] bridge0: port 3(dummy0) entered disabled state [ 358.877390][T16344] bridge_slave_0: left allmulticast mode [ 358.883887][T16344] bridge_slave_0: left promiscuous mode [ 358.889608][T16344] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.900457][T16344] bridge_slave_1: left allmulticast mode [ 358.907064][T16344] bridge_slave_1: left promiscuous mode [ 358.913916][T16344] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.927480][T16344] bond0: (slave bond_slave_0): Releasing backup interface [ 358.937192][T16344] bond_slave_0: left promiscuous mode [ 358.944137][T16344] team_slave_0: left promiscuous mode [ 358.949915][T16344] team_slave_0: left allmulticast mode [ 358.958925][T16344] team0: Port device team_slave_0 removed [ 358.966255][T16344] team_slave_1: left promiscuous mode [ 358.972005][T16344] team_slave_1: left allmulticast mode [ 358.978973][T16344] team0: Port device team_slave_1 removed [ 358.985849][T16344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.994578][T16344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.003722][T16344] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 359.021359][ T7931] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 359.031058][T16334] vxcan1 speed is unknown, defaulting to 1000 [ 359.170394][T16317] vxcan1 speed is unknown, defaulting to 1000 [ 359.392525][T16345] smc: removing ib device syz0 [ 360.683549][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 361.783191][T16377] hsr0: entered allmulticast mode [ 361.788602][T16377] hsr_slave_0: entered allmulticast mode [ 361.795402][T16377] hsr_slave_1: entered allmulticast mode [ 361.889395][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2681'. [ 361.938861][T16379] pim6reg1: entered promiscuous mode [ 361.956228][T16379] pim6reg1: entered allmulticast mode [ 361.979644][T16382] Can't find ip_set type hash:ip$mec [ 362.299874][T16392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.441074][T16395] geneve3: entered promiscuous mode [ 362.453554][T16395] geneve3: entered allmulticast mode [ 362.540385][T16399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 362.552451][T16399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.567048][T16399] hsr0: entered promiscuous mode [ 363.263661][T16417] vxcan1 speed is unknown, defaulting to 1000 [ 363.550756][T16425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.558027][T16425] IPv6: NLM_F_CREATE should be set when creating new route [ 363.565296][T16425] IPv6: NLM_F_CREATE should be set when creating new route [ 364.014358][T16445] netlink: 'syz.5.2697': attribute type 39 has an invalid length. [ 364.112478][T16447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2698'. [ 364.577224][T16461] netlink: get zone limit has 4 unknown bytes [ 364.754214][T16469] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2704'. [ 364.767815][T16465] vxcan1 speed is unknown, defaulting to 1000 [ 364.848629][T16472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2705'. [ 364.859459][T16472] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.2705'. [ 364.921582][T16480] dvmrp1: entered allmulticast mode [ 364.951151][T16480] dvmrp1: left allmulticast mode [ 365.146811][T16464] vxcan1 speed is unknown, defaulting to 1000 [ 365.170919][T16487] syzkaller1: entered promiscuous mode [ 365.186410][T16487] syzkaller1: entered allmulticast mode [ 365.205961][T16482] tipc: Enabled bearer , priority 0 [ 365.231243][T16489] syzkaller0: entered promiscuous mode [ 365.239550][T16489] syzkaller0: entered allmulticast mode [ 365.412330][T16482] tipc: Resetting bearer [ 365.448971][T16497] vlan0: entered allmulticast mode [ 365.461383][T16497] bridge_slave_0: entered allmulticast mode [ 365.487639][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2713'. [ 365.503192][T16481] tipc: Resetting bearer [ 365.518298][T16481] tipc: Disabling bearer [ 365.550338][T16484] vxcan1 speed is unknown, defaulting to 1000 [ 365.776054][T16509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2714'. [ 366.017437][T16514] vxcan1 speed is unknown, defaulting to 1000 [ 366.364168][T16526] vxcan1 speed is unknown, defaulting to 1000 [ 366.867940][T16535] tipc: Enabled bearer , priority 0 [ 366.881974][T16535] syzkaller0: entered promiscuous mode [ 366.901779][T16535] syzkaller0: entered allmulticast mode [ 367.299274][T16544] netlink: 'syz.7.2724': attribute type 2 has an invalid length. [ 367.308508][T16544] netlink: 'syz.7.2724': attribute type 1 has an invalid length. [ 367.382580][T16549] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2724'. [ 367.413098][T16531] tipc: Resetting bearer [ 367.507828][T16531] tipc: Disabling bearer [ 367.676635][T16551] bond4: Removing last ns target with arp_interval on [ 367.861604][T16554] vxcan1 speed is unknown, defaulting to 1000 [ 368.354544][T16575] veth9: entered promiscuous mode [ 368.722288][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2736'. [ 368.861449][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2736'. [ 368.873757][T16587] vxcan1 speed is unknown, defaulting to 1000 [ 369.701698][T16610] netlink: 'syz.1.2743': attribute type 29 has an invalid length. [ 370.372573][T16642] syzkaller1: entered promiscuous mode [ 370.378082][T16642] syzkaller1: entered allmulticast mode [ 370.531221][T16651] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2751'. [ 370.595269][T16654] netlink: 'syz.2.2753': attribute type 13 has an invalid length. [ 370.842964][ T7792] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 370.851944][ T7792] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.860333][ T7792] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 370.869218][ T7792] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.878112][ T7792] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 370.886904][ T7792] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.896237][ T7792] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 370.905531][ T7792] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.976883][T16666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2756'. [ 370.986748][T16666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2756'. [ 371.182150][T16671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2759'. [ 371.212065][T16671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2759'. [ 371.885350][T16710] bond6: option tlb_dynamic_lb: invalid value (71) [ 371.893636][T16710] bond6 (unregistering): Released all slaves [ 372.212419][T16720] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2770'. [ 372.273807][T16726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2771'. [ 372.288306][T16726] IPv6: sit4: Disabled Multicast RS [ 372.331252][T16726] sit4: entered allmulticast mode [ 372.718987][T16727] netlink: 'syz.2.2772': attribute type 6 has an invalid length. [ 372.727025][T16727] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2772'. [ 373.045671][T16755] netlink: 'syz.6.2779': attribute type 1 has an invalid length. [ 373.063231][T16755] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2779'. [ 373.248337][T16765] rdma_op ffff8880281801f0 conn xmit_rdma 0000000000000000 [ 373.555378][T16785] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2787'. [ 373.968960][T16804] netlink: 'syz.7.2793': attribute type 4 has an invalid length. [ 374.225474][T16821] netlink: 'syz.6.2799': attribute type 1 has an invalid length. [ 374.264207][T16821] gretap1: entered allmulticast mode [ 374.397981][T16833] vxcan1 speed is unknown, defaulting to 1000 [ 375.069735][T16862] netlink: 'syz.7.2808': attribute type 14 has an invalid length. [ 375.169127][T16860] netlink: 'syz.5.2809': attribute type 4 has an invalid length. [ 375.324114][T16860] .`: renamed from bond0 (while UP) [ 375.415728][T16874] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.439291][T16874] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 375.503116][T16882] netlink: 'syz.6.2812': attribute type 83 has an invalid length. [ 375.833039][T16874] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.863486][T16874] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 375.962592][T16886] tipc: Enabled bearer , priority 0 [ 375.971788][T16890] syzkaller0: entered promiscuous mode [ 375.978078][T16890] syzkaller0: entered allmulticast mode [ 376.211280][T16894] tipc: Resetting bearer [ 376.227414][T16874] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.251378][T16874] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.309726][T16878] tipc: Resetting bearer [ 376.373909][T16878] tipc: Disabling bearer [ 376.386073][T16888] vxcan1 speed is unknown, defaulting to 1000 [ 376.400088][T16874] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.428039][T16874] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 376.661094][ T7943] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.681374][ T7943] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 376.702468][ T7943] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.731191][ T7943] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 376.750379][T16901] syzkaller1: entered promiscuous mode [ 376.772545][T16901] syzkaller1: entered allmulticast mode [ 376.799439][ T7931] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.816367][ T7931] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 376.924695][ T7792] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.935527][ T7792] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 377.416708][T16919] vxcan1 speed is unknown, defaulting to 1000 [ 377.794506][T16928] vxcan1 speed is unknown, defaulting to 1000 [ 377.831739][T16946] netlink: 'syz.6.2828': attribute type 13 has an invalid length. [ 378.212676][T16929] vxcan1 speed is unknown, defaulting to 1000 [ 378.638415][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.695145][T16947] vxcan1 speed is unknown, defaulting to 1000 [ 379.297878][T16956] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 380.847026][T16966] vxcan1 speed is unknown, defaulting to 1000 [ 381.124778][T16995] __nla_validate_parse: 8 callbacks suppressed [ 381.124797][T16995] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2839'. [ 382.157749][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2847'. [ 382.172705][T17020] netlink: 'syz.7.2846': attribute type 3 has an invalid length. [ 382.188035][T17020] netlink: 'syz.7.2846': attribute type 1 has an invalid length. [ 382.198891][T17020] netlink: 192 bytes leftover after parsing attributes in process `syz.7.2846'. [ 382.208419][T17020] NCSI netlink: No device for ifindex 0 [ 382.698208][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2854'. [ 382.753149][T17043] vxcan1 speed is unknown, defaulting to 1000 [ 382.839952][T17051] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2857'. [ 382.841417][T17054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2858'. [ 383.122296][T17057] xt_CT: No such helper "syz1" [ 383.188770][T17071] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2863'. [ 383.257111][T17072] syzkaller1: entered promiscuous mode [ 383.266947][T17072] syzkaller1: entered allmulticast mode [ 383.436608][T17080] tipc: Enabling of bearer rejected, failed to enable media [ 383.724983][T17096] netlink: 'syz.6.2868': attribute type 13 has an invalid length. [ 383.743920][T17096] netlink: 'syz.6.2868': attribute type 17 has an invalid length. [ 383.754205][T17096] netlink: 'syz.6.2868': attribute type 27 has an invalid length. [ 383.932621][T17096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.952478][T17096] 8021q: adding VLAN 0 to HW filter on device ` [ 383.971980][T17096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.025315][T17106] wg1: entered promiscuous mode [ 384.041396][T17106] wg1: entered allmulticast mode [ 384.054279][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2872'. [ 384.078399][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2868'. [ 384.089321][T17109] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2868'. [ 384.185706][T17099] vxcan1 speed is unknown, defaulting to 1000 [ 384.945203][T17140] 0ªX¹¦À: renamed from caif0 [ 384.958707][T17140] 0ªX¹¦À: entered allmulticast mode [ 384.982024][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 384.992043][T17140] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 384.992588][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.017534][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.046374][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.054678][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.208084][T17145] vxcan1 speed is unknown, defaulting to 1000 [ 385.351061][T17155] netlink: 'syz.5.2883': attribute type 1 has an invalid length. [ 385.360370][T17158] netlink: 'syz.5.2883': attribute type 1 has an invalid length. [ 385.464973][T17164] netlink: 'syz.1.2886': attribute type 30 has an invalid length. [ 385.493412][T17164] netlink: 'syz.1.2886': attribute type 30 has an invalid length. [ 385.888285][T17180] netlink: 'syz.1.2891': attribute type 6 has an invalid length. [ 386.557826][T17145] chnl_net:caif_netlink_parms(): no params data found [ 386.941088][T17145] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.949472][T17145] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.967009][T17145] bridge_slave_0: entered allmulticast mode [ 386.983506][T17145] bridge_slave_0: entered promiscuous mode [ 386.997014][T17218] vxcan1 speed is unknown, defaulting to 1000 [ 387.004044][T17145] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.011621][T17145] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.023340][T17145] bridge_slave_1: entered allmulticast mode [ 387.041100][T17145] bridge_slave_1: entered promiscuous mode [ 387.120630][ T5838] Bluetooth: hci5: command tx timeout [ 387.479152][T17145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.508110][T17145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.912419][ T7931] wlan1: Trigger new scan to find an IBSS to join [ 387.922779][T17145] team0: Port device team_slave_0 added [ 387.932471][T17145] team0: Port device team_slave_1 added [ 388.006149][T17145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.020900][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.074087][T17145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.096045][T17145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.113127][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.163185][T17145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.381019][T17145] hsr_slave_0: entered promiscuous mode [ 388.388060][T17145] hsr_slave_1: entered promiscuous mode [ 388.397500][T17145] debugfs: 'hsr0' already exists in 'hsr' [ 388.407126][T17145] Cannot create hsr debugfs directory [ 388.438667][T17268] __nla_validate_parse: 12 callbacks suppressed [ 388.438686][T17268] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2907'. [ 389.071483][T17282] validate_nla: 3 callbacks suppressed [ 389.071510][T17282] netlink: 'syz.7.2911': attribute type 8 has an invalid length. [ 389.190981][ T5838] Bluetooth: hci5: command tx timeout [ 389.212560][T17292] netlink: 'syz.1.2914': attribute type 1 has an invalid length. [ 389.259252][T17292] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2914'. [ 389.291095][T17286] vlan1: entered promiscuous mode [ 389.296269][T17286] .`: entered promiscuous mode [ 389.428466][T17145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.505719][T17145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.547709][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 389.561951][T17145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 389.569603][T17308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2917'. [ 389.600880][T17145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.936165][T17307] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2919'. [ 389.988665][T17322] nbd3: detected capacity change from 0 to 127 [ 390.006489][ T5838] block nbd3: Receive control failed (result -32) [ 390.081105][T17347] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2924'. [ 390.100705][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2924'. [ 390.109693][T17347] netlink: 'syz.6.2924': attribute type 2 has an invalid length. [ 390.219974][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'. [ 390.321347][T17145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.351852][T17145] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.379532][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.386821][ T7937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.407269][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.414435][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.568358][T17145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.610901][T17145] veth0_vlan: entered promiscuous mode [ 390.622285][T17145] veth1_vlan: entered promiscuous mode [ 390.650999][T17145] veth0_macvtap: entered promiscuous mode [ 390.659655][T17145] veth1_macvtap: entered promiscuous mode [ 390.677384][T17145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.692328][T17145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.705770][ T1009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.716388][ T7937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.725749][ T7937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.736147][ T1009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.794899][ T7937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.803323][ T7937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.825872][ T7937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.834906][ T7937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.871447][ T36] wlan1: Trigger new scan to find an IBSS to join [ 391.271692][ T5838] Bluetooth: hci5: command tx timeout [ 393.350995][ T5838] Bluetooth: hci5: command tx timeout [ 393.910701][ T7941] wlan1: Trigger new scan to find an IBSS to join [ 394.801853][ T7937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.270934][ T1009] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.073686][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.082926][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.295275][T17385] pim6reg1: entered promiscuous mode [ 448.312727][T17385] pim6reg1: entered allmulticast mode [ 448.404979][T17389] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2936'. [ 448.448687][T17383] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2933'. [ 448.668563][T17387] vxcan1 speed is unknown, defaulting to 1000 [ 449.079756][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2941'. [ 449.143286][T17412] bond9: Invalid ad_actor_system MAC address. [ 449.149586][T17412] bond9: option ad_actor_system: invalid value (7) [ 449.161694][T17412] bond9 (unregistering): Released all slaves [ 449.361454][T17427] Þ9lÿÿ: renamed from bridge_slave_0 (while UP) [ 449.699869][T17438] bridge4: entered promiscuous mode [ 449.705876][T17438] bridge4: entered allmulticast mode [ 449.743043][T17443] vxcan1 speed is unknown, defaulting to 1000 [ 450.225095][T17452] ÿ: renamed from bond_slave_0 [ 450.569777][T17465] netlink: 'syz.5.2952': attribute type 14 has an invalid length. [ 450.662690][T17465] bond0: option xmit_hash_policy: invalid value (11) [ 450.694173][T17465] bond0 (unregistering): Released all slaves [ 450.877093][T17477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2955'. [ 451.037272][T17476] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 452.247652][T17514] sctp: [Deprecated]: syz.2.2964 (pid 17514) Use of int in maxseg socket option. [ 452.247652][T17514] Use struct sctp_assoc_value instead [ 452.296864][T17521] netlink: 'syz.6.2966': attribute type 1 has an invalid length. [ 452.337366][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2966'. [ 452.652868][T17532] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2968'. [ 453.446698][T17547] netlink: 'syz.5.2973': attribute type 1 has an invalid length. [ 453.626088][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 453.933926][T17569] netlink: 676 bytes leftover after parsing attributes in process `syz.5.2978'. [ 453.934618][T17568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2978'. [ 454.000711][T17569] netlink: 676 bytes leftover after parsing attributes in process `syz.5.2978'. [ 454.045791][T17576] geneve2: entered promiscuous mode [ 454.062452][ T1009] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.091809][ T7931] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.261072][ T7931] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.304194][ T7931] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.542724][T17598] 8021q: VLANs not supported on gre0 [ 454.563944][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2984'. [ 454.572985][T17593] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2984'. [ 454.989356][T17609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2987'. [ 455.038626][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.060672][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.070880][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.107146][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.163767][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.172987][T17609] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.2987'. [ 455.296754][T17608] vxcan1 speed is unknown, defaulting to 1000 [ 455.392841][T17617] tipc: Enabled bearer , priority 0 [ 455.457184][T17622] syzkaller0: entered promiscuous mode [ 455.479133][T17624] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2991'. [ 455.489171][T17622] syzkaller0: entered allmulticast mode [ 455.865241][T17624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.880390][T17624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.893417][T17624] bond0 (unregistering): Released all slaves [ 455.933979][T17632] tipc: Resetting bearer [ 455.998289][T17615] tipc: Resetting bearer [ 456.038222][T17615] tipc: Disabling bearer [ 456.048666][T17640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2995'. [ 456.290561][T17640] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.304214][T17640] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.312631][T17640] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.335489][T17640] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 456.392444][T17640] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.401920][T17640] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.416372][T17608] chnl_net:caif_netlink_parms(): no params data found [ 456.438961][T17640] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.441538][T17661] tap0: tun_chr_ioctl cmd 2147767507 [ 456.476953][T17640] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.525693][T17640] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.553702][T17640] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.570057][T17640] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.636634][T17608] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.649589][T17608] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.660543][T17608] bridge_slave_0: entered allmulticast mode [ 456.674446][T17608] bridge_slave_0: entered promiscuous mode [ 456.690665][T17608] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.704741][T17608] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.713695][T17608] bridge_slave_1: entered allmulticast mode [ 456.722498][T17608] bridge_slave_1: entered promiscuous mode [ 456.828373][T17608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.884731][T17608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.955592][T17686] netlink: 'syz.2.3006': attribute type 2 has an invalid length. [ 457.089702][T17608] team0: Port device team_slave_0 added [ 457.116961][T17608] team0: Port device team_slave_1 added [ 457.237951][T17608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.245193][T17608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.281758][ T5147] Bluetooth: hci0: command tx timeout [ 457.290454][T17608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.316380][T17608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.324798][T17608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.354316][T17608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.769524][T17608] hsr_slave_0: entered promiscuous mode [ 457.792192][T17608] hsr_slave_1: entered promiscuous mode [ 457.809940][T17608] debugfs: 'hsr0' already exists in 'hsr' [ 457.832679][T17608] Cannot create hsr debugfs directory [ 457.928021][T17704] syzkaller1: entered promiscuous mode [ 457.933891][T17704] syzkaller1: entered allmulticast mode [ 458.298509][T17723] netlink: 'syz.5.3016': attribute type 8 has an invalid length. [ 458.489216][T17608] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.503034][T17608] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 458.537180][T17732] tipc: Enabled bearer , priority 0 [ 458.585113][T17608] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.604942][T17608] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 458.694821][T17608] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.718180][T17608] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 458.793885][T17608] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.803903][T17608] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 458.832950][T17749] Bluetooth: MGMT ver 1.23 [ 458.986216][T17746] vxcan1 speed is unknown, defaulting to 1000 [ 459.174861][T17757] __nla_validate_parse: 9 callbacks suppressed [ 459.174879][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3026'. [ 459.271246][ T7941] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.350643][ T5147] Bluetooth: hci0: command tx timeout [ 459.392494][T17749] vlan0: left promiscuous mode [ 459.397644][T17749] gtp1: left promiscuous mode [ 459.403016][T17749] veth9: left promiscuous mode [ 459.408260][T17749] bridge4: left promiscuous mode [ 459.438233][T17749] geneve2: left promiscuous mode [ 459.451479][T17757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.543412][T17757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.601212][T17726] tipc: Disabling bearer [ 459.608239][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3027'. [ 459.617860][T17746] virt_wifi0 speed is unknown, defaulting to 1000 [ 459.617898][ T7941] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.633334][ T7941] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.709706][ T7941] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.721734][ T7941] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.778803][T17764] netlink: 'syz.5.3028': attribute type 12 has an invalid length. [ 459.896215][T17768] vxcan1 speed is unknown, defaulting to 1000 [ 459.904216][T17769] bridge0: entered allmulticast mode [ 460.030146][T17608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 460.053500][T17608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 460.082452][T17608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 460.106189][T17608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 460.302529][T17608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.340133][T17608] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.374266][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.381519][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.420511][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.427715][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.478604][T17794] netlink: 'syz.5.3036': attribute type 10 has an invalid length. [ 460.513435][T17794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3036'. [ 460.584377][T17794] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3036'. [ 460.605493][T17794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3036'. [ 460.635644][T17794] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3036'. [ 460.661633][T17768] virt_wifi0 speed is unknown, defaulting to 1000 [ 461.341765][T17805] vxcan1 speed is unknown, defaulting to 1000 [ 461.367887][T17608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.430684][ T5147] Bluetooth: hci0: command tx timeout [ 461.548771][T17608] veth0_vlan: entered promiscuous mode [ 461.576488][T17608] veth1_vlan: entered promiscuous mode [ 461.608161][T17816] netlink: 'syz.7.3040': attribute type 10 has an invalid length. [ 461.616676][T17816] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3040'. [ 461.637780][T17816] geneve0: entered promiscuous mode [ 461.644867][T17816] geneve0: entered allmulticast mode [ 461.651367][T17816] team0: Port device geneve0 added [ 461.666711][ T1009] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 461.689105][ T1009] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 461.730874][ T1009] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 461.790622][ T1009] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 461.815878][T17608] veth0_macvtap: entered promiscuous mode [ 461.858383][T17608] veth1_macvtap: entered promiscuous mode [ 461.933782][T17608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.960736][T17805] virt_wifi0 speed is unknown, defaulting to 1000 [ 462.054358][T17840] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3044'. [ 462.074611][T17608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.122522][T17832] vxcan1 speed is unknown, defaulting to 1000 [ 462.179086][ T7931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.191376][ T7931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.275415][T17843] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 462.286845][ T7931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.296557][ T7931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.316140][T17843] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 462.427101][T17851] sctp: [Deprecated]: syz.2.3047 (pid 17851) Use of int in max_burst socket option deprecated. [ 462.427101][T17851] Use struct sctp_assoc_value instead [ 462.519290][ T7931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.544178][ T7931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.619776][ T7941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.638274][ T7941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.666629][T17832] virt_wifi0 speed is unknown, defaulting to 1000 [ 463.173339][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'. [ 463.184995][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'. [ 463.493133][T17884] netlink: 'syz.1.3052': attribute type 1 has an invalid length. [ 463.510677][ T5147] Bluetooth: hci0: command tx timeout [ 463.614991][T17897] netlink: 'syz.6.3055': attribute type 1 has an invalid length. [ 463.668782][T17897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 463.760713][T17900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.778288][T17897] bond4: (slave veth11): Enslaving as an active interface with a down link [ 463.837944][T17902] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 463.847472][T17902] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 464.283868][T17927] __nla_validate_parse: 9 callbacks suppressed [ 464.283888][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'. [ 464.301084][T17927] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3065'. [ 464.310208][T17927] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3065'. [ 464.319951][T17927] netlink: 'syz.1.3065': attribute type 6 has an invalid length. [ 464.366585][T17927] netlink: 'syz.1.3065': attribute type 5 has an invalid length. [ 464.378825][T17927] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3065'. [ 464.423284][T17932] netlink: 'syz.1.3065': attribute type 4 has an invalid length. [ 464.480713][T17927] netlink: 'syz.1.3065': attribute type 4 has an invalid length. [ 464.579787][T17943] vxcan1 speed is unknown, defaulting to 1000 [ 464.754202][T17963] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 464.943571][T17952] vxcan1 speed is unknown, defaulting to 1000 [ 464.943575][T17943] virt_wifi0 speed is unknown, defaulting to 1000 [ 465.199345][T17978] syz_tun: entered allmulticast mode [ 465.285510][T17977] syz_tun: left allmulticast mode [ 465.304769][T17952] virt_wifi0 speed is unknown, defaulting to 1000 [ 465.424812][T17984] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3081'. [ 465.488145][T17984] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 465.498126][T17984] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 465.542612][T17988] netlink: 'syz.7.3081': attribute type 10 has an invalid length. [ 465.628850][T17988] bridge0: entered promiscuous mode [ 465.643912][T17988] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 465.663907][T17991] x_tables: duplicate underflow at hook 1 [ 465.681927][T17984] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 465.699745][T17984] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 465.759439][T17993] netlink: 'syz.5.3083': attribute type 1 has an invalid length. [ 465.780415][T17993] netlink: 'syz.5.3083': attribute type 2 has an invalid length. [ 465.856058][T17984] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 465.895224][T17984] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 465.998906][T18006] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3087'. [ 466.016173][T17984] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 466.048586][T17984] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 466.073917][T18007] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3087'. [ 466.106001][T18004] vxcan1 speed is unknown, defaulting to 1000 [ 466.209996][ T7931] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.220788][ T7931] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 466.247163][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3088'. [ 466.276945][ T7943] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.286339][ T7943] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 466.307173][T18011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.315525][T18011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.335788][T18011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.351916][T18011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.415673][ T7943] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.441664][ T7943] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 466.495573][ T7943] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.516200][ T7943] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 466.541541][T18004] virt_wifi0 speed is unknown, defaulting to 1000 [ 466.595751][T18025] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 466.608836][T18025] bond0 (unregistering): Released all slaves [ 466.677191][T18035] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3092'. [ 466.705117][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3092'. [ 466.731471][T18033] IPVS: Error connecting to the multicast addr [ 467.422903][T18057] vxcan1 speed is unknown, defaulting to 1000 [ 467.431116][T18066] validate_nla: 3 callbacks suppressed [ 467.431134][T18066] netlink: 'syz.2.3102': attribute type 30 has an invalid length. [ 467.657787][T18074] nbd: nbd2 already in use [ 467.663380][T18074] block nbd2: NBD_DISCONNECT [ 467.668175][T18074] block nbd2: Send disconnect failed -32 [ 467.678298][T18074] block nbd2: shutting down sockets [ 467.794546][T18069] tipc: Enabled bearer , priority 0 [ 467.804267][T18072] syzkaller0: entered promiscuous mode [ 467.809771][T18072] syzkaller0: entered allmulticast mode [ 467.956229][T18072] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 467.974316][T18069] tipc: Resetting bearer [ 467.988661][T18068] tipc: Resetting bearer [ 468.015831][T18068] tipc: Disabling bearer [ 468.052887][T18057] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.700188][ T7941] bond7 (unregistering): (slave geneve3): Releasing active interface [ 468.986514][T18123] netlink: 'syz.2.3113': attribute type 13 has an invalid length. [ 468.995801][T18123] netlink: 'syz.2.3113': attribute type 17 has an invalid length. [ 469.098170][ T7941] bond0 (unregistering): left promiscuous mode [ 469.105220][ T7941] bond0 (unregistering): Released all slaves [ 469.208585][ T7941] bond1 (unregistering): Released all slaves [ 469.313658][ T7941] bond2 (unregistering): Released all slaves [ 469.326972][ T7941] bond3 (unregistering): Released all slaves [ 469.339738][ T7941] bond4 (unregistering): Released all slaves [ 469.452766][ T7941] bond5 (unregistering): Released all slaves [ 469.467806][ T7941] bond6 (unregistering): Released all slaves [ 469.584233][ T7941] bond7 (unregistering): Released all slaves [ 469.688869][ T7941] bond8 (unregistering): Released all slaves [ 469.702103][T18097] vxcan1 speed is unknown, defaulting to 1000 [ 469.953627][T18123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.995055][ T7941] tipc: Left network mode [ 470.058916][ T7941] IPVS: stopping backup sync thread 8201 ... [ 470.073452][T18097] virt_wifi0 speed is unknown, defaulting to 1000 [ 470.305259][T18131] tap0: tun_chr_ioctl cmd 1074025680 [ 470.311260][T18137] bpq0: left promiscuous mode [ 470.898318][T18152] __nla_validate_parse: 14 callbacks suppressed [ 470.898338][T18152] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3119'. [ 470.981007][T18151] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3119'. [ 471.194003][T18167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3124'. [ 471.230556][ T7941] veth1_to_team: left promiscuous mode [ 471.280363][ T7941] hsr_slave_0: left promiscuous mode [ 471.292071][ T7941] hsr_slave_1: left promiscuous mode [ 471.298268][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.344868][T18178] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3128'. [ 471.617733][T18190] netlink: 'syz.5.3131': attribute type 9 has an invalid length. [ 471.626041][T18190] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3131'. [ 471.674326][T18191] netlink: 'syz.5.3131': attribute type 1 has an invalid length. [ 472.561785][T18207] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3135'. [ 472.569033][T18209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3136'. [ 472.593029][T18211] Bluetooth: MGMT ver 1.23 [ 472.636459][T18198] vxcan1 speed is unknown, defaulting to 1000 [ 472.905638][ T7941] IPVS: stop unused estimator thread 0... [ 473.643768][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3142'. [ 473.748699][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3142'. [ 473.830090][T18235] vlan4: entered promiscuous mode [ 473.851281][T18235] bond0: entered promiscuous mode [ 473.893594][ T7943] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 473.914088][ T7943] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 473.922472][ T856] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 473.950422][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3143'. [ 474.055261][T18239] netlink: 'syz.1.3143': attribute type 10 has an invalid length. [ 474.141001][ T5898] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 474.151626][T18239] veth1_vlan: entered allmulticast mode [ 474.165033][T18239] team0: Device veth1_vlan failed to register rx_handler [ 474.173637][T18198] virt_wifi0 speed is unknown, defaulting to 1000 [ 474.481797][ T5898] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 474.583670][T18256] netlink: 'syz.1.3147': attribute type 1 has an invalid length. [ 474.986843][T18268] netlink: 'syz.5.3151': attribute type 4 has an invalid length. [ 475.403933][T18290] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 475.535281][T18293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.555188][T18290] Þ9lÿÿ: left allmulticast mode [ 475.560180][T18290] Þ9lÿÿ: left promiscuous mode [ 475.565454][T18290] bridge0: port 1(Þ9lÿÿ) entered disabled state [ 475.591851][T18290] bridge_slave_1: left allmulticast mode [ 475.607849][T18290] bridge_slave_1: left promiscuous mode [ 475.626377][T18290] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.671237][T18290] team0: Port device team_slave_0 removed [ 475.706370][T18290] team0: Port device team_slave_1 removed [ 475.724388][T18290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.740891][T18290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.773197][T18290] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 475.941393][T18307] __nla_validate_parse: 4 callbacks suppressed [ 475.941412][T18307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3162'. [ 476.228808][T18323] vxcan1 speed is unknown, defaulting to 1000 [ 476.352576][T18330] netlink: 9896 bytes leftover after parsing attributes in process `syz.6.3169'. [ 476.814276][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3173'. [ 476.878352][T18323] virt_wifi0 speed is unknown, defaulting to 1000 [ 477.056983][T18348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3174'. [ 477.618272][T18371] netlink: 'syz.5.3180': attribute type 1 has an invalid length. [ 477.653412][T18371] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3180'. [ 477.662554][T18373] dvmrp8: entered allmulticast mode [ 477.669847][T18372] dvmrp8: left allmulticast mode [ 477.699952][T18376] netlink: 'syz.5.3180': attribute type 30 has an invalid length. [ 477.772459][T18376] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 478.030354][T18392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3183'. [ 478.090667][T18392] netlink: 'syz.1.3183': attribute type 12 has an invalid length. [ 478.127499][ T7792] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.137327][T18392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3183'. [ 478.148141][ T7792] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.157227][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 478.184913][T18392] netlink: 'syz.1.3183': attribute type 12 has an invalid length. [ 478.218254][ T7792] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.237803][ T7792] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.317053][T18404] netlink: 'syz.5.3188': attribute type 13 has an invalid length. [ 478.340112][T18404] netlink: 'syz.5.3188': attribute type 13 has an invalid length. [ 478.353098][ T1009] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.382837][ T1009] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.412160][ T1009] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.453035][ T1009] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.459884][T18415] netlink: 'syz.2.3191': attribute type 1 has an invalid length. [ 478.463281][T18412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3193'. [ 478.489981][T18413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3193'. [ 478.513884][T18412] x_tables: duplicate underflow at hook 3 [ 478.542648][T18415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.572243][T18420] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3194'. [ 478.573642][T18421] bond1: (slave geneve2): making interface the new active one [ 478.593559][T18421] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 478.680285][T18415] bond1: entered promiscuous mode [ 478.685886][T18415] geneve2: entered promiscuous mode [ 478.810084][T18428] gretap1: entered promiscuous mode [ 478.923196][ T7792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.936847][ T7792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.057341][T13174] IPVS: starting estimator thread 0... [ 479.170708][T18449] IPVS: using max 26 ests per chain, 62400 per kthread [ 479.781372][T18483] macsec0: entered promiscuous mode [ 479.786626][T18483] vlan0: entered promiscuous mode [ 479.833242][T18483] vlan0: left promiscuous mode [ 479.999097][ T30] audit: type=1107 audit(1760282805.622:7): pid=18492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 480.014087][T18496] bridge_slave_0: default FDB implementation only supports local addresses [ 480.767488][T18538] netlink: 'syz.1.3243': attribute type 1 has an invalid length. [ 481.059492][T18554] netem: change failed [ 481.594666][T18585] tipc: Enabled bearer , priority 0 [ 481.642210][T18585] tipc: Disabling bearer [ 481.733613][T18587] pim6reg1: entered promiscuous mode [ 481.753221][T18587] pim6reg1: entered allmulticast mode [ 482.021385][T18599] bridge: RTM_NEWNEIGH with invalid ether address [ 482.187531][T18610] __nla_validate_parse: 6 callbacks suppressed [ 482.187552][T18610] netlink: 55 bytes leftover after parsing attributes in process `syz.7.3279'. [ 482.414661][T18620] macsec2: entered promiscuous mode [ 482.505046][T18632] netlink: 'syz.1.3290': attribute type 1 has an invalid length. [ 482.553076][T18634] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3291'. [ 482.656342][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3291'. [ 482.778633][T18643] syzkaller0: left promiscuous mode [ 482.787154][T18643] syzkaller0: left allmulticast mode [ 484.573308][T18685] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3313'. [ 484.721105][T18692] netem: incorrect gi model size [ 484.726478][T18692] netem: change failed [ 484.957641][T18707] xt_bpf: check failed: parse error [ 485.105492][T18713] xt_hashlimit: max too large, truncated to 1048576 [ 485.354308][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'. [ 485.639689][ T30] audit: type=1107 audit(1760282811.262:8): pid=18741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 486.219291][T18768] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3352'. [ 486.228432][T18768] netem: unknown loss type 13 [ 486.237497][T18768] netem: change failed [ 486.334492][T18766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.359980][T18766] 8021q: adding VLAN 0 to HW filter on device ` [ 486.392043][T18766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.790734][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 486.919708][T18810] tipc: Started in network mode [ 486.932853][T18810] tipc: Node identity ac14140f, cluster identity 4711 [ 486.952033][T18810] tipc: New replicast peer: 255.255.255.255 [ 486.958818][T18810] tipc: Enabled bearer , priority 10 [ 487.098895][T18819] pim6reg1: entered promiscuous mode [ 487.115530][T18819] pim6reg1: entered allmulticast mode [ 487.529894][T18846] netem: incorrect gi model size [ 487.536319][T18846] netem: change failed [ 487.778961][T18862] vti0: entered allmulticast mode [ 488.071590][ T5898] tipc: Node number set to 2886997007 [ 488.270570][T18882] netdevsim netdevsim6 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 488.391811][T18886] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3406'. [ 490.135916][T18912] netlink: 'syz.6.3414': attribute type 23 has an invalid length. [ 490.219708][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3414'. [ 490.293041][ T7943] smc: removing ib device syz2 [ 490.597421][T18932] netlink: 'syz.5.3419': attribute type 1 has an invalid length. [ 490.613015][T18934] syzkaller1: entered promiscuous mode [ 490.624704][T18934] syzkaller1: entered allmulticast mode [ 490.807197][T18932] bond7: entered promiscuous mode [ 490.817716][T18932] 8021q: adding VLAN 0 to HW filter on device bond7 [ 490.992308][T18939] bond7: (slave bridge0): making interface the new active one [ 491.020165][T18939] bridge0: entered promiscuous mode [ 491.033337][T18939] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 491.060060][T18946] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3422'. [ 491.091836][T18950] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3422'. [ 491.150582][T18950] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3422'. [ 491.191343][T18950] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3422'. [ 491.215735][T18954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3423'. [ 491.273193][ T7931] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 491.549959][T18966] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3429'. [ 491.561465][T18967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3427'. [ 491.656637][T18969] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.3429'. [ 492.247831][T18989] netlink: 'syz.7.3435': attribute type 10 has an invalid length. [ 492.257121][T18989] dummy0: left promiscuous mode [ 492.276388][T18989] dummy0: entered promiscuous mode [ 492.291484][T18989] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 492.496958][T18997] ip6tnl2: entered promiscuous mode [ 492.503309][T18997] ip6tnl2: entered allmulticast mode [ 492.512038][T18997] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 492.584887][T19005] virt_wifi0 speed is unknown, defaulting to 1000 [ 492.780293][T19011] virt_wifi0 speed is unknown, defaulting to 1000 [ 492.988509][T19013] virt_wifi0 speed is unknown, defaulting to 1000 [ 494.382035][T19041] __nla_validate_parse: 4 callbacks suppressed [ 494.382054][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3448'. [ 494.382222][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'. [ 494.411125][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3449'. [ 494.423252][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'. [ 494.444826][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3449'. [ 494.726530][T19069] virt_wifi0 speed is unknown, defaulting to 1000 [ 495.014543][T19087] veth0_to_bridge: entered promiscuous mode [ 495.186840][T19086] veth0_to_bridge: left promiscuous mode [ 495.203577][T19098] xt_hashlimit: overflow, try lower: 6/0 [ 495.249662][T19099] tipc: Started in network mode [ 495.256451][T19099] tipc: Node identity ac14140f, cluster identity 4711 [ 495.264378][T19099] tipc: New replicast peer: 255.255.255.255 [ 495.272009][T19099] tipc: Enabled bearer , priority 10 [ 495.813946][T19136] xt_recent: Unsupported userspace flags (000000b1) [ 495.937512][T19141] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3471'. [ 496.018764][T19144] netlink: 'syz.2.3472': attribute type 10 has an invalid length. [ 496.369222][T19159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3477'. [ 496.390906][ T5898] tipc: Node number set to 2886997007 [ 496.652672][T19172] dvmrp0: entered allmulticast mode [ 496.676377][ T30] audit: type=1107 audit(1760282822.302:9): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 496.767026][T19183] netlink: 'syz.5.3485': attribute type 1 has an invalid length. [ 496.796278][T19183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3485'. [ 497.107812][T19204] tipc: Enabled bearer , priority 0 [ 497.115574][T19204] syzkaller0: entered promiscuous mode [ 497.121503][T19204] syzkaller0: entered allmulticast mode [ 497.207917][T19212] tipc: Resetting bearer [ 497.251071][T19203] tipc: Resetting bearer [ 497.320305][T19203] tipc: Disabling bearer [ 497.439562][T19216] : option downdelay: invalid value (18446744073709551615) [ 497.447916][T19222] x_tables: duplicate underflow at hook 1 [ 497.456811][T19216] : option downdelay: allowed values 0 - 2147483647 [ 497.473664][T19216]  (unregistering): Released all slaves [ 498.169017][T19243] netlink: 'syz.2.3500': attribute type 10 has an invalid length. [ 498.187220][T19243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3500'. [ 498.206540][T19243] dummy0: entered promiscuous mode [ 498.226030][T19243] bridge0: port 1(dummy0) entered blocking state [ 498.255579][T19243] bridge0: port 1(dummy0) entered disabled state [ 498.264254][T19243] dummy0: entered allmulticast mode [ 498.275618][T19243] bridge0: port 1(dummy0) entered blocking state [ 498.282135][T19243] bridge0: port 1(dummy0) entered listening state [ 498.511984][T19260] IPVS: set_ctl: invalid protocol: 138 100.1.1.2:20001 [ 498.581293][T19270] netlink: 'syz.6.3505': attribute type 13 has an invalid length. [ 498.606186][T19270] netlink: 'syz.6.3505': attribute type 17 has an invalid length. [ 498.628497][T19270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.733241][T19277] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 498.743471][T19277] bridge2: entered allmulticast mode [ 498.857900][T19289] sctp: [Deprecated]: syz.6.3512 (pid 19289) Use of int in maxseg socket option. [ 498.857900][T19289] Use struct sctp_assoc_value instead [ 498.880000][T19286] vlan1: entered promiscuous mode [ 498.885594][T19286] geneve1: entered promiscuous mode [ 498.892665][T19286] vlan1: entered allmulticast mode [ 498.902621][T19286] geneve1: entered allmulticast mode [ 499.007883][T19296] virt_wifi0 speed is unknown, defaulting to 1000 [ 499.044698][T19298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3516'. [ 499.091847][T19298] netlink: 'syz.5.3516': attribute type 12 has an invalid length. [ 499.224980][T19303] virt_wifi0 speed is unknown, defaulting to 1000 [ 499.392086][T19322] x_tables: ip_tables: osf match: only valid for protocol 6 [ 499.564968][T19321] virt_wifi0 speed is unknown, defaulting to 1000 [ 499.608800][T19335] : entered promiscuous mode [ 499.729253][T19339] macvtap1: entered promiscuous mode [ 499.737039][T19339] veth1_to_hsr: entered promiscuous mode [ 499.743692][T19339] macvtap1: entered allmulticast mode [ 499.749335][T19339] veth1_to_hsr: entered allmulticast mode [ 499.757911][T19339] veth1_to_hsr: left allmulticast mode [ 499.764680][T19339] veth1_to_hsr: left promiscuous mode [ 499.801854][T19342] netlink: 'syz.6.3527': attribute type 5 has an invalid length. [ 499.843370][T19329] virt_wifi0 speed is unknown, defaulting to 1000 [ 500.313323][T19365] __nla_validate_parse: 3 callbacks suppressed [ 500.313342][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3531'. [ 500.334075][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3531'. [ 500.401008][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3534'. [ 500.476188][T19372] netlink: 'syz.2.3535': attribute type 9 has an invalid length. [ 500.492106][T19373] delete_channel: no stack [ 500.496814][T19372] netlink: 'syz.2.3535': attribute type 6 has an invalid length. [ 500.540256][T19375] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3537'. [ 500.631057][T19378] !: renamed from dummy0 (while UP) [ 500.684654][T19386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3541'. [ 501.038085][T19388] virt_wifi0 speed is unknown, defaulting to 1000 [ 501.517318][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.536876][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.607249][T19381] virt_wifi0 speed is unknown, defaulting to 1000 [ 501.631018][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3546'. [ 501.735105][T19428] virt_wifi0 speed is unknown, defaulting to 1000 [ 501.747024][T19436] veth1_vlan: default FDB implementation only supports local addresses [ 501.773541][T19436] netlink: 212284 bytes leftover after parsing attributes in process `syz.6.3548'. [ 501.787861][T19436] openvswitch: netlink: Message has 25 unknown bytes. [ 502.185430][T19456] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3556'. [ 502.220766][T19456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3556'. [ 502.436465][T19470] netlink: 9896 bytes leftover after parsing attributes in process `syz.7.3560'. [ 502.454357][T19472] netlink: 'syz.6.3559': attribute type 1 has an invalid length. [ 502.554852][T19472] bond5: (slave gretap1): making interface the new active one [ 502.563690][T19472] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 502.790670][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.839686][T19482] netlink: 'syz.1.3561': attribute type 1 has an invalid length. [ 502.862594][T19482] netlink: 'syz.1.3561': attribute type 2 has an invalid length. [ 503.198541][T19505] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 503.562688][T19526] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 503.936264][T19555] netlink: 'syz.7.3586': attribute type 11 has an invalid length. [ 504.085557][T19566] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 [ 504.101348][T19568] netlink: 'syz.6.3590': attribute type 15 has an invalid length. [ 504.469483][T19583] virt_wifi0 speed is unknown, defaulting to 1000 [ 504.634314][T19593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 504.641837][T19593] IPv6: NLM_F_CREATE should be set when creating new route [ 505.012289][T19609] syzkaller1: entered promiscuous mode [ 505.018055][T19609] syzkaller1: entered allmulticast mode [ 505.195554][T19613] netlink: 'syz.5.3602': attribute type 12 has an invalid length. [ 505.204519][T19613] netlink: 'syz.5.3602': attribute type 14 has an invalid length. [ 505.415390][T19621] virt_wifi0 speed is unknown, defaulting to 1000 [ 505.552532][T19636] netlink: 'syz.1.3607': attribute type 12 has an invalid length. [ 505.914361][T19648] virt_wifi0 speed is unknown, defaulting to 1000 [ 506.365256][T19646] IPVS: Error connecting to the multicast addr [ 506.606209][T19664] netlink: 'syz.1.3616': attribute type 1 has an invalid length. [ 506.668282][T19646] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 506.680089][T19666] __nla_validate_parse: 10 callbacks suppressed [ 506.680106][T19666] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3617'. [ 506.743971][T19668] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3618'. [ 506.804945][T19666] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3617'. [ 506.827463][T19673] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3618'. [ 507.109306][T19682] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3621'. [ 507.152640][T19682] tipc: Enabled bearer , priority 0 [ 507.171103][T19682] syzkaller0: entered promiscuous mode [ 507.176612][T19682] syzkaller0: entered allmulticast mode [ 507.231063][T19682] tipc: Resetting bearer [ 507.243168][T19682] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3621'. [ 507.275659][T19681] tipc: Resetting bearer [ 507.281932][ T5940] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.322651][T19681] tipc: Disabling bearer [ 507.469118][T19695] netdevsim netdevsim5: Direct firmware load for þ failed with error -2 [ 507.490700][T19695] netdevsim netdevsim5: Falling back to sysfs fallback for: þ [ 507.539875][T19701] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3629'. [ 507.661622][ T8001] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.676244][T19709] batadv1: entered promiscuous mode [ 507.707761][T19711] netlink: 'syz.1.3633': attribute type 64 has an invalid length. [ 507.903577][T19722] Cannot find del_set index 2 as target [ 508.622529][T19757] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.817717][T19765] syzkaller1: entered promiscuous mode [ 508.823961][T19765] syzkaller1: entered allmulticast mode [ 509.057523][T19770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3649'. [ 509.409371][T19786] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3652'. [ 509.624213][T19797] netlink: 'syz.6.3656': attribute type 10 has an invalid length. [ 509.650758][T19797] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3656'. [ 509.714494][T19797] `: Port device geneve0 added [ 509.723972][ T36] netdevsim netdevsim6 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.739085][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.770083][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.790615][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.222562][ T30] audit: type=1800 audit(1760282835.842:10): pid=19843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3668" name="memory.events" dev="tmpfs" ino=2449 res=0 errno=0 [ 510.246077][ T30] audit: type=1804 audit(1760282835.852:11): pid=19843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3668" name="/newroot/475/memory.events" dev="tmpfs" ino=2449 res=1 errno=0 [ 510.278423][T19839] 8021q: VLANs not supported on ipvlan1 [ 510.840294][T19879] netlink: 'syz.5.3677': attribute type 21 has an invalid length. [ 510.856107][T19869] team_slave_0: entered promiscuous mode [ 510.862047][T19869] team_slave_1: entered promiscuous mode [ 510.870027][T19869] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 510.881887][T19879] netlink: 'syz.5.3677': attribute type 5 has an invalid length. [ 510.889786][T19879] netlink: 'syz.5.3677': attribute type 6 has an invalid length. [ 510.924529][T19869] virt_wifi0 speed is unknown, defaulting to 1000 [ 511.241956][T19901] Bluetooth: MGMT ver 1.23 [ 511.739632][T19928] virt_wifi0 speed is unknown, defaulting to 1000 [ 511.818574][T19935] __nla_validate_parse: 6 callbacks suppressed [ 511.818591][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3692'. [ 512.199547][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3694'. [ 512.286343][T19946] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3694'. [ 512.301306][T19946] tipc: Enabled bearer , priority 0 [ 512.309517][T19946] syzkaller0: entered promiscuous mode [ 512.316648][T19946] syzkaller0: entered allmulticast mode [ 512.326370][T19945] tipc: Resetting bearer [ 512.362253][T19945] tipc: Disabling bearer [ 512.484924][T19964] netlink: 624 bytes leftover after parsing attributes in process `syz.5.3698'. [ 512.629294][T19972] netlink: 'syz.5.3700': attribute type 4 has an invalid length. [ 512.737391][T19971] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.772442][T19977] tipc: Enabled bearer , priority 0 [ 512.822555][T19977] syzkaller0: entered promiscuous mode [ 512.828071][T19977] syzkaller0: entered allmulticast mode [ 512.836352][T19977] tipc: Resetting bearer [ 512.848475][T19976] tipc: Resetting bearer [ 512.977278][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3705'. [ 513.676190][ C1] bridge0: port 1(dummy0) entered learning state [ 513.823581][T20009] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3709'. [ 513.841481][ T5898] tipc: Node number set to 1292971069 [ 514.618703][T19976] tipc: Disabling bearer [ 514.634513][T20007] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.646182][T20007] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 514.671696][T20009] hsr_slave_0: left promiscuous mode [ 514.679032][T20009] hsr_slave_1: left promiscuous mode [ 514.753993][T20007] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.799222][T20007] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 514.873542][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3713'. [ 514.894598][T20007] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.923749][T20007] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 514.951434][T20028] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3714'. [ 515.043885][T20007] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.080769][T20007] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 515.102539][T20037] netlink: 'syz.2.3717': attribute type 1 has an invalid length. [ 515.125858][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3717'. [ 515.201148][T20031] team0: Port device team_slave_0 removed [ 515.332518][ T7937] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.342143][ T7937] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 515.402922][ T7939] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.419067][ T7939] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 515.450374][ T7939] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.459318][ T7939] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 515.477702][ T7939] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.520451][ T7939] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 515.553765][T20056] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3719'. [ 515.565458][T20049] netlink: 'syz.1.3719': attribute type 1 has an invalid length. [ 515.804664][T20069] virt_wifi0 speed is unknown, defaulting to 1000 [ 515.983574][T20073] virt_wifi0 speed is unknown, defaulting to 1000 [ 516.457824][T20095] virt_wifi0 speed is unknown, defaulting to 1000 [ 516.531538][T20097] virt_wifi0 speed is unknown, defaulting to 1000 [ 516.983994][T20111] __nla_validate_parse: 6 callbacks suppressed [ 516.984014][T20111] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3732'. [ 517.043990][T20125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3739'. [ 517.092779][T20124] tap0: tun_chr_ioctl cmd 1074025678 [ 517.098129][T20124] tap0: group set to 0 [ 517.163109][T20122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3739'. [ 517.196400][T20119] virt_wifi0 speed is unknown, defaulting to 1000 [ 517.489028][T20147] sctp: [Deprecated]: syz.6.3747 (pid 20147) Use of int in maxseg socket option. [ 517.489028][T20147] Use struct sctp_assoc_value instead [ 518.242240][T20179] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3754'. [ 518.627716][T20189] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 520.654074][T20198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3759'. [ 520.680613][T20198] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3759'. [ 520.683912][T20199] virt_wifi0 speed is unknown, defaulting to 1000 [ 520.706655][T20198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3759'. [ 520.721917][T20198] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3759'. [ 520.747710][T20196] virt_wifi0 speed is unknown, defaulting to 1000 [ 520.868888][T20223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3765'. [ 520.980260][T20236] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 521.026328][T20236] bridge0: port 1(dummy0) entered disabled state [ 521.222941][T20249] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3774'. [ 521.243221][T20246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.251788][T20228] virt_wifi0 speed is unknown, defaulting to 1000 [ 521.743362][T20281] netlink: 'syz.1.3779': attribute type 15 has an invalid length. [ 521.769066][T20266] veth0_macvtap: left promiscuous mode [ 521.792677][T20266] veth0_macvtap: entered promiscuous mode [ 521.807314][T20269] virt_wifi0 speed is unknown, defaulting to 1000 [ 522.047658][T20295] __nla_validate_parse: 4 callbacks suppressed [ 522.047677][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3784'. [ 522.117012][T20298] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3785'. [ 522.290427][T20304] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3786'. [ 522.557573][T20326] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3793'. [ 522.715935][T20332] netlink: 'syz.1.3794': attribute type 10 has an invalid length. [ 522.782545][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3794'. [ 522.787807][T20332] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 522.865740][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3798'. [ 523.274077][ T7792] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 523.469531][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3804'. [ 523.485712][T20378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3806'. [ 523.501473][T20379] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3806'. [ 523.519542][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3804'. [ 523.529333][T20376] netlink: 'syz.7.3804': attribute type 15 has an invalid length. [ 523.563517][ T7939] netdevsim netdevsim6 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.577959][ T7939] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.610898][ T7939] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.624051][T20386] xt_TCPMSS: Only works on TCP SYN packets [ 523.719119][T20382] bond1: entered promiscuous mode [ 523.734054][T20382] bond1: entered allmulticast mode [ 523.747501][T20382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 523.771478][ T7939] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.950744][T20397] virt_wifi0 speed is unknown, defaulting to 1000 [ 523.953190][T20403] tipc: Enabled bearer , priority 0 [ 523.985131][T20403] syzkaller0: entered promiscuous mode [ 524.005147][T20403] syzkaller0: entered allmulticast mode [ 524.234474][T20415] bond6: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 524.261848][T20415] bond6 (unregistering): Released all slaves [ 524.340763][T20420] vxcan1: entered promiscuous mode [ 524.360047][T20427] netlink: 'syz.6.3820': attribute type 9 has an invalid length. [ 524.396754][T20414] tipc: Resetting bearer [ 524.415575][T20427] netlink: 'syz.6.3820': attribute type 12 has an invalid length. [ 524.455738][T20415] bond6: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 524.468505][T20415] bond6 (unregistering): Released all slaves [ 524.491750][T20402] tipc: Resetting bearer [ 524.509571][T20402] tipc: Disabling bearer [ 524.576138][T20415] bond6: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 524.613695][T20415] bond6 (unregistering): Released all slaves [ 524.675662][T20421] virt_wifi0 speed is unknown, defaulting to 1000 [ 524.846345][T20415] bond6: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 524.858855][T20415] bond6 (unregistering): Released all slaves [ 525.908244][T20474] tipc: Enabled bearer , priority 0 [ 526.006936][T20474] tipc: Disabling bearer [ 526.094034][T20485] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 526.203298][T20499] netlink: 'syz.7.3839': attribute type 1 has an invalid length. [ 526.292890][T20505] netlink: 'syz.1.3843': attribute type 83 has an invalid length. [ 526.304051][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880586dac00: rx timeout, send abort [ 526.435206][T20511] sch_fq: defrate 4294967293 ignored. [ 526.799714][T20525] bond2: entered promiscuous mode [ 526.804915][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880586db400: rx timeout, send abort [ 526.813206][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880586dac00: abort rx timeout. Force session deactivation [ 526.825632][T20525] bond2: entered allmulticast mode [ 526.835085][T20525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.855608][T20532] bond0: (slave gretap0): Error: Device type is different from other slaves [ 526.973642][T20539] netlink: 'syz.1.3855': attribute type 1 has an invalid length. [ 526.990671][T20539] netlink: 'syz.1.3855': attribute type 2 has an invalid length. [ 527.004888][T20540] netlink: 'syz.2.3853': attribute type 7 has an invalid length. [ 527.034110][T20540] netlink: 'syz.2.3853': attribute type 8 has an invalid length. [ 527.057741][T20545] __nla_validate_parse: 13 callbacks suppressed [ 527.057759][T20545] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3856'. [ 527.112152][ C1] ------------[ cut here ]------------ [ 527.118047][ C1] ODEBUG: free active (active state 0) object: ffff888049c85490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 527.131471][ C1] WARNING: CPU: 1 PID: 20544 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 527.131694][T20539] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3855'. [ 527.141099][ C1] Modules linked in: [ 527.141174][ C1] CPU: 1 UID: 0 PID: 20544 Comm: syz.5.3856 Not tainted syzkaller #0 PREEMPT(full) [ 527.141219][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.141244][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 527.141274][ C1] Code: 4c 89 ff e8 37 f9 8b fd 4d 8b 0f 48 c7 c7 80 7e c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa 77 e9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 06 05 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 527.199409][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 527.205537][ C1] RAX: 6acd13fd1610ce00 RBX: dffffc0000000000 RCX: ffff88804d415ac0 [ 527.213572][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 527.221609][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 527.229609][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffffffff8a3e0c40 [ 527.237650][ C1] R13: ffffffff8bc08000 R14: ffff888049c85490 R15: ffffffff8b6cf600 [ 527.245681][ C1] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 527.254702][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.261424][ C1] CR2: 0000200000010000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 527.269509][ C1] Call Trace: [ 527.272838][ C1] [ 527.275707][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 527.281342][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 527.286488][ C1] kfree+0x115/0x6d0 [ 527.290418][ C1] rose_timer_expiry+0x4cb/0x600 [ 527.295417][ C1] ? call_timer_fn+0x155/0x5f0 [ 527.300206][ C1] call_timer_fn+0x17e/0x5f0 [ 527.304882][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 527.310406][ C1] ? call_timer_fn+0xbe/0x5f0 [ 527.315142][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 527.320288][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.325554][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.330883][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 527.336370][ C1] __run_timer_base+0x61a/0x860 [ 527.341305][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 527.346703][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 527.352979][ C1] run_timer_softirq+0xb7/0x180 [ 527.357833][ C1] handle_softirqs+0x283/0x870 [ 527.362642][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 527.367409][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 527.372722][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 527.377933][ C1] __irq_exit_rcu+0xca/0x1f0 [ 527.382574][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 527.387776][ C1] irq_exit_rcu+0x9/0x30 [ 527.392042][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 527.397686][ C1] [ 527.400646][ C1] [ 527.403572][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 527.409543][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 527.414861][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb 2c f4 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 527.434598][ C1] RSP: 0018:ffffc900140df4b8 EFLAGS: 00000206 [ 527.440713][ C1] RAX: 6acd13fd1610ce00 RBX: 0000000000000000 RCX: 6acd13fd1610ce00 [ 527.448705][ C1] RDX: 0000000000000000 RSI: ffffffff8d9d15ab RDI: ffffffff8bc074e0 [ 527.456730][ C1] RBP: ffffffff8230631a R08: 0000000000000000 R09: ffffffff8230631a [ 527.464749][ C1] R10: dffffc0000000000 R11: fffff940002eb5f9 R12: 0000000000000002 [ 527.472774][ C1] R13: ffffffff8e13d3e0 R14: 0000000000000000 R15: 0000000000000246 [ 527.480796][ C1] ? pfn_valid+0xba/0x490 [ 527.485206][ C1] ? pfn_valid+0xba/0x490 [ 527.489573][ C1] ? pfn_valid+0xba/0x490 [ 527.493924][ C1] pfn_valid+0xd6/0x490 [ 527.498077][ C1] ? pfn_valid+0xba/0x490 [ 527.502429][ C1] page_table_check_clear+0x21/0x700 [ 527.507721][ C1] ? vm_normal_page+0x10d/0x240 [ 527.512683][ C1] unmap_page_range+0x344b/0x4370 [ 527.517734][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 527.523134][ C1] ? mas_find+0xb0e/0xd30 [ 527.527476][ C1] ? unmap_vmas+0x144/0x580 [ 527.532031][ C1] unmap_vmas+0x399/0x580 [ 527.536368][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 527.541270][ C1] exit_mmap+0x240/0xb40 [ 527.545526][ C1] ? uprobe_clear_state+0x20f/0x290 [ 527.550765][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 527.555548][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 527.561241][ C1] ? __pfx_exit_aio+0x10/0x10 [ 527.565961][ C1] ? uprobe_clear_state+0x27c/0x290 [ 527.571193][ C1] __mmput+0x118/0x430 [ 527.575263][ C1] exit_mm+0x1da/0x2c0 [ 527.579357][ C1] ? __pfx_exit_mm+0x10/0x10 [ 527.584005][ C1] ? rcu_is_watching+0x15/0xb0 [ 527.588801][ C1] do_exit+0x648/0x2300 [ 527.592998][ C1] ? preempt_schedule+0xae/0xc0 [ 527.597867][ C1] ? preempt_schedule_common+0x83/0xd0 [ 527.603371][ C1] ? preempt_schedule+0xae/0xc0 [ 527.608221][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 527.613716][ C1] ? __pfx_do_exit+0x10/0x10 [ 527.618348][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 527.623787][ C1] do_group_exit+0x21c/0x2d0 [ 527.628388][ C1] __x64_sys_exit_group+0x3f/0x40 [ 527.633534][ C1] x64_sys_call+0x21f7/0x2200 [ 527.638226][ C1] do_syscall_64+0xfa/0xfa0 [ 527.642782][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.648005][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.654208][ C1] ? clear_bhb_loop+0x60/0xb0 [ 527.658917][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.664872][ C1] RIP: 0033:0x7fab1e78eec9 [ 527.669312][ C1] Code: Unable to access opcode bytes at 0x7fab1e78ee9f. [ 527.676372][ C1] RSP: 002b:00007ffe7aa6f758 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 527.684862][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab1e78eec9 [ 527.692857][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.700915][ C1] RBP: 00007ffe7aa6f7bc R08: 000000287aa6f84f R09: 00000000000927c0 [ 527.708908][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001fd [ 527.716923][ C1] R13: 00000000000927c0 R14: 0000000000080a1f R15: 00007ffe7aa6f810 [ 527.724931][ C1] [ 527.727947][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 527.735215][ C1] CPU: 1 UID: 0 PID: 20544 Comm: syz.5.3856 Not tainted syzkaller #0 PREEMPT(full) [ 527.744584][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.754662][ C1] Call Trace: [ 527.757947][ C1] [ 527.760787][ C1] dump_stack_lvl+0x99/0x250 [ 527.765378][ C1] ? __asan_memcpy+0x40/0x70 [ 527.769968][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.775191][ C1] ? __pfx__printk+0x10/0x10 [ 527.779793][ C1] vpanic+0x237/0x6d0 [ 527.783790][ C1] ? __pfx_vpanic+0x10/0x10 [ 527.788302][ C1] panic+0xb9/0xc0 [ 527.792035][ C1] ? __pfx_panic+0x10/0x10 [ 527.796490][ C1] __warn+0x31b/0x4b0 [ 527.800476][ C1] ? debug_print_object+0x16b/0x1e0 [ 527.805697][ C1] ? debug_print_object+0x16b/0x1e0 [ 527.810904][ C1] report_bug+0x2be/0x4f0 [ 527.815237][ C1] ? debug_print_object+0x16b/0x1e0 [ 527.820431][ C1] ? debug_print_object+0x16b/0x1e0 [ 527.825675][ C1] ? debug_print_object+0x16d/0x1e0 [ 527.830868][ C1] handle_bug+0x84/0x160 [ 527.835114][ C1] exc_invalid_op+0x1a/0x50 [ 527.839620][ C1] asm_exc_invalid_op+0x1a/0x20 [ 527.844461][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 527.850266][ C1] Code: 4c 89 ff e8 37 f9 8b fd 4d 8b 0f 48 c7 c7 80 7e c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa 77 e9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 06 05 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 527.869966][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 527.876041][ C1] RAX: 6acd13fd1610ce00 RBX: dffffc0000000000 RCX: ffff88804d415ac0 [ 527.884023][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 527.892001][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 527.899980][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffffffff8a3e0c40 [ 527.907953][ C1] R13: ffffffff8bc08000 R14: ffff888049c85490 R15: ffffffff8b6cf600 [ 527.915924][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 527.921604][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 527.927166][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 527.932274][ C1] kfree+0x115/0x6d0 [ 527.936170][ C1] rose_timer_expiry+0x4cb/0x600 [ 527.941205][ C1] ? call_timer_fn+0x155/0x5f0 [ 527.945967][ C1] call_timer_fn+0x17e/0x5f0 [ 527.950554][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 527.956095][ C1] ? call_timer_fn+0xbe/0x5f0 [ 527.960765][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 527.965888][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.971075][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.976264][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 527.981749][ C1] __run_timer_base+0x61a/0x860 [ 527.986613][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 527.991984][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 527.998246][ C1] run_timer_softirq+0xb7/0x180 [ 528.003102][ C1] handle_softirqs+0x283/0x870 [ 528.007861][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 528.012619][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 528.017904][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 528.023125][ C1] __irq_exit_rcu+0xca/0x1f0 [ 528.027727][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 528.033022][ C1] irq_exit_rcu+0x9/0x30 [ 528.037268][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 528.042901][ C1] [ 528.045821][ C1] [ 528.048741][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 528.054722][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 528.060003][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb 2c f4 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 528.079688][ C1] RSP: 0018:ffffc900140df4b8 EFLAGS: 00000206 [ 528.085754][ C1] RAX: 6acd13fd1610ce00 RBX: 0000000000000000 RCX: 6acd13fd1610ce00 [ 528.093719][ C1] RDX: 0000000000000000 RSI: ffffffff8d9d15ab RDI: ffffffff8bc074e0 [ 528.101689][ C1] RBP: ffffffff8230631a R08: 0000000000000000 R09: ffffffff8230631a [ 528.109647][ C1] R10: dffffc0000000000 R11: fffff940002eb5f9 R12: 0000000000000002 [ 528.117613][ C1] R13: ffffffff8e13d3e0 R14: 0000000000000000 R15: 0000000000000246 [ 528.125605][ C1] ? pfn_valid+0xba/0x490 [ 528.129945][ C1] ? pfn_valid+0xba/0x490 [ 528.134287][ C1] ? pfn_valid+0xba/0x490 [ 528.138638][ C1] pfn_valid+0xd6/0x490 [ 528.142803][ C1] ? pfn_valid+0xba/0x490 [ 528.147131][ C1] page_table_check_clear+0x21/0x700 [ 528.152420][ C1] ? vm_normal_page+0x10d/0x240 [ 528.157286][ C1] unmap_page_range+0x344b/0x4370 [ 528.162355][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 528.167733][ C1] ? mas_find+0xb0e/0xd30 [ 528.172062][ C1] ? unmap_vmas+0x144/0x580 [ 528.176558][ C1] unmap_vmas+0x399/0x580 [ 528.180889][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 528.185756][ C1] exit_mmap+0x240/0xb40 [ 528.190005][ C1] ? uprobe_clear_state+0x20f/0x290 [ 528.195196][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 528.200039][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 528.205679][ C1] ? __pfx_exit_aio+0x10/0x10 [ 528.210454][ C1] ? uprobe_clear_state+0x27c/0x290 [ 528.215660][ C1] __mmput+0x118/0x430 [ 528.219727][ C1] exit_mm+0x1da/0x2c0 [ 528.223809][ C1] ? __pfx_exit_mm+0x10/0x10 [ 528.228397][ C1] ? rcu_is_watching+0x15/0xb0 [ 528.233157][ C1] do_exit+0x648/0x2300 [ 528.237311][ C1] ? preempt_schedule+0xae/0xc0 [ 528.242161][ C1] ? preempt_schedule_common+0x83/0xd0 [ 528.247614][ C1] ? preempt_schedule+0xae/0xc0 [ 528.252457][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 528.257824][ C1] ? __pfx_do_exit+0x10/0x10 [ 528.262414][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 528.267803][ C1] do_group_exit+0x21c/0x2d0 [ 528.272397][ C1] __x64_sys_exit_group+0x3f/0x40 [ 528.277505][ C1] x64_sys_call+0x21f7/0x2200 [ 528.282268][ C1] do_syscall_64+0xfa/0xfa0 [ 528.286770][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.292057][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.298115][ C1] ? clear_bhb_loop+0x60/0xb0 [ 528.302813][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.308699][ C1] RIP: 0033:0x7fab1e78eec9 [ 528.313107][ C1] Code: Unable to access opcode bytes at 0x7fab1e78ee9f. [ 528.320109][ C1] RSP: 002b:00007ffe7aa6f758 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 528.328515][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab1e78eec9 [ 528.336501][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 528.344484][ C1] RBP: 00007ffe7aa6f7bc R08: 000000287aa6f84f R09: 00000000000927c0 [ 528.352453][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001fd [ 528.360422][ C1] R13: 00000000000927c0 R14: 0000000000080a1f R15: 00007ffe7aa6f810 [ 528.368412][ C1] [ 528.371683][ C1] Kernel Offset: disabled [ 528.376019][ C1] Rebooting in 86400 seconds..