last executing test programs: 4m41.086339535s ago: executing program 1 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) (async, rerun: 32) recvfrom(r0, &(0x7f0000000080)=""/112, 0x70, 0x40000120, &(0x7f0000000100)=@llc={0x1a, 0x311, 0x7, 0x9, 0x5, 0x8, @multicast}, 0x80) (rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x0, 0x6c, "3be4635aed184225215a2d2a10f51049345d36ffb39d6daad785020ccad16c5504e4f588a3885c42aaf080087e956a468df971ff89ace5e31368072c330181f2aac7b322ab3be331b1edfa3ba7c1f6311c77ce3e85bd5d5c6332fa450957b5566a3a6a1a8d2d01c9ecb534e0"}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000240)='o\x94{.]}\x00', 0x200800, &(0x7f0000000280)={@_ha_fsid={[0x7, 0xfffffffc]}, {0x8000, 0xffc0, 0x397, 0x3}}, 0x4, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x5}) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000380)=""/180, &(0x7f0000000440)=0xb4) (async, rerun: 32) r5 = socket(0x2b, 0x6, 0x0) (rerun: 32) syz_emit_ethernet(0x32, &(0x7f0000000480)={@empty, @link_local, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x5, 0x0, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local, @remote, @multicast, @local}}}}, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=@req={0x1, 0x7, 0x0, 0xc7b}, 0x10) (async, rerun: 64) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000600)={r6, &(0x7f0000000500)='(!\'\\*-%)\t\\,\x00', 0x4002, &(0x7f0000000540)={@align=0x7, {0x3, 0x7, 0x6, 0x7}}, 0x4, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x1}) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000640)={0x0, 0x9}, &(0x7f0000000680)=0x8) (async) setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, &(0x7f00000006c0), 0x4) (async) r8 = accept(r3, &(0x7f0000000700)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000780)=0x80) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r9, 0x90, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x24040005) (async, rerun: 64) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, r3, 0xcb01e000) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000900)=[@timestamp, @window={0x3, 0x0, 0x8001}, @sack_perm], 0x3) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000940)) (async, rerun: 32) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) (async, rerun: 32) r10 = socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8e7b03e25a10004b, 0x10, r10, 0x99a8b000) getsockname$packet(r4, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000b00)={@dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, r11}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0x14, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe404, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='GPL\x00', 0x8, 0x46, &(0x7f0000000c40)=""/70, 0x40f00, 0x21, '\x00', r11, 0x0, r7, 0x8, &(0x7f0000000cc0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0xfffffff8, 0x2, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000d40)=[r7, r7, r7, r7, r7, r4, r7, r4], &(0x7f0000000d80)=[{0x4, 0x2, 0xd, 0xa}, {0x0, 0x2, 0xa, 0x5}], 0x10, 0xd13}, 0x94) (async, rerun: 32) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000e80)=0x6, 0x4) (rerun: 32) 4m40.035751527s ago: executing program 1 (id=271): sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="9800ffbd7000bbb5ff030000da0c00000dffe4b7", @ANYRES32=0x0, @ANYBLOB="0c009900ff030000670000002400238005000e000100000005001d00000000000500110000000000060010000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000800c000000080001005f0000000c0099000800000027000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8890) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000200)=@pppoe, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000700)=""/168, 0xa8}, {&(0x7f00000007c0)=""/10, 0xa}], 0x4, &(0x7f0000000840)=""/52, 0x34}, 0x40000002) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd01000100000008"], 0x18}}, 0x20004018) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x21cc, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x2198, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x2140, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7f8f, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cc0, 0x5, 0x0, 0x0, {{0xa}, {0x1c74, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2, 0xfffffffe}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0xa, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x3c, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x1, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x5, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x6, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x3, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x8, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x9, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0x9f5f, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x4, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x9, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcf, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0xf, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x0, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x402, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0xc, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0xffff, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x4}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3001}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x7, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7ff, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x1}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x8, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x7ffc, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x6, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x10, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x10, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x68e, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x2086a7, 0x1dbe, 0x6e41, 0xfffffff6, 0x7, 0x101}, {0x7, 0x2, 0x2, 0x6, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0xffffffff, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0xb}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xfffffff9, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x5, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45124, 0xd}, {0xec, 0x7fff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x9, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x9, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0xf, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x5, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x2, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0xfffffff8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x23, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff46"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x70, 0xb, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xc4, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3f800000, 0x5, 0x20000000, 0x9, 0x5}, 0x8}}]}, {0x71, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1e8, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0xffffffffffffffff, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0x79, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7ec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x21cc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000100)) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m38.961504622s ago: executing program 1 (id=282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x3) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0100fefbdf250657b72b"], 0x14}, 0x1, 0x0, 0x0, 0x4004854}, 0x40030) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="8f33d196afdc"}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) close(r1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) close(r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$inet(0x2, 0x0, 0x3) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0100fefbdf250657b72b"], 0x14}, 0x1, 0x0, 0x0, 0x4004854}, 0x40030) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000340)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="8f33d196afdc"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) (async) 4m36.12819564s ago: executing program 1 (id=290): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @mcast1, 0x6}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000140)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1112, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4d6, 0x3c}, 0x2, @in6=@private2, 0x3507, 0x4, 0x0, 0x2, 0x7, 0x0, 0x2}, {{@in6=@local, 0x4d3, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x1, 0x2, 0x7, 0xf, 0x8}, {{@in=@local, 0x4d4, 0x32}, 0x0, @in=@local, 0x34ff, 0x3, 0x1, 0x9, 0xffff, 0x5, 0x2}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000000) sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) 4m35.882334578s ago: executing program 1 (id=294): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='veno', 0x4) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r1, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0xee3e0ec5e1c42de9, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @empty}}}}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'sed\x00', 0x11, 0x10000004, 0x8}, 0x2c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cc, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r5, 0x400454ce, 0x9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @remote}}}, &(0x7f00000006c0)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000700)={r7, 0x1, 0x1, 0x71ce}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0xa, 0x2, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket3={{0x28}, 0xb}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private0, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xd86, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) socket$inet_sctp(0x2, 0x1, 0x84) sendto$l2tp6(r0, &(0x7f0000000080)="d7ea81cb98ae6a4459c906ec62220c298cd2edf14482f641a9ff70d62d7a46483e8b3bca3c11d56e3af4f000bcd08774f7f3fe6cb724ab4fc1ccfe1b652a84b12bca78fbc1f5469c3c3824cf74e41f4c47aa", 0x52, 0x20008840, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x3, 0x2}, 0x20) 4m34.592530333s ago: executing program 1 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x24004910) 4m19.574374735s ago: executing program 32 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x24004910) 2m31.252325333s ago: executing program 2 (id=1232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0xc, 0xc, 0x5, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000680)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x3}, 0x3, 0x3, 0x5, 0x5, 0x0, 'syz0\x00', "92550f3ecfb1832abf552b20f9a12bacde4511b743951927d5669e781d461f4c", "f832421e2cc6f54eae63a790e3676370b799e89cddccb7ca9a377b298e0a46bc", [{0x1, 0x867, {0x0, 0xfffffff7}}, {0x401, 0xe, {0x2, 0x9}}, {0x2, 0x8, {0x1, 0x7}}, {0x80, 0x4, {0x0, 0x5}}, {0x5, 0x92, {0x1, 0x4}}, {0x2b, 0x8, {0x0, 0x6}}, {0x9, 0x0, {0x0, 0x4}}, {0x8, 0x0, {0x1, 0x3}}, {0x0, 0x9, {0x1, 0xf089}}, {0x1d79, 0x8, {0x3, 0x5}}, {0x4, 0x316, {0x3, 0x6}}, {0x5, 0x1, {0x1, 0xcd7}}, {0x2, 0x3, {0x2, 0x6}}, {0x2, 0x1, {0x0, 0xfff}}, {0x4, 0x8d5, {0x2}}, {0x2, 0x4, {0x3, 0x7ff}}, {0x5, 0x8, {0x3, 0xea67}}, {0xe5d1, 0x5, {0x0, 0x6}}, {0x2, 0xfc, {0x0, 0x5}}, {0x101, 0x3, {0x1, 0x90000}}, {0x8, 0x7, {0x1, 0x5}}, {0x9, 0x7, {0x2, 0xfffffffc}}, {0xd0, 0x40, {0x3, 0xbd2a}}, {0x401, 0x6, {0x0, 0x200}}, {0x1e, 0x3, {0x0, 0x9}}, {0x4, 0x6, {0x2, 0xc}}, {0x4, 0x6, {0x1, 0xc4}}, {0x4, 0x7422, {0x2, 0x1}}, {0x6, 0x9}, {0x2, 0x200, {0x3, 0xfffffff9}}, {0xf76, 0x10, {0x0, 0x1}}, {0x6, 0x8, {0x3, 0x6}}, {0x6, 0x4, {0x2, 0xfffffbff}}, {0xf2dc, 0xfffd, {0x2, 0x3cad}}, {0x81, 0x400, {0x1}}, {0x0, 0x6, {0x3, 0x3}}, {0x100, 0x2, {0x0, 0x7}}, {0x7, 0x9, {0x0, 0x5d3}}, {0xe81d, 0xff80, {0x2, 0x4}}, {0xfff, 0x6, {0x1, 0xf59c}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4008080}, 0x4048000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r3, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r2, @ANYBLOB="dc002f800c00020000000000000000000800010000000000c4000380050002000300000005000200020000000c00050005000000000000000c0005000300000000000000080001"], 0xf8}}, 0x0) 2m30.920064167s ago: executing program 2 (id=1234): syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa0100000035f200182c00fe8000000000000000000000000000bbfe800000bf35ce68e77462de68eb210000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010ffff907800006ae0228d"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa0100000035f200182c00fe8000000000000000000000000000bbfe800000bf35ce68e77462de68eb210000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010ffff907800006ae0228d"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x20000880) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x20000880) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008b100000000000000000000000000000d810cc71debeeb84d5b494a04606c60fde9430a3b8093ce7ffd3a98f8c5d6ad1481cad0f633f2c741a04d7b6bd8d9bcb760a1f760bcf8ff32ef8eced96588ba17ff1d87ec007248455e6464cd8ead6eb8169352661cf8f338fa60e9d6f1f3526fba179d1e579a7393723e0ef6b09d813dca2065624b54aa10636c78a54b79e580c13cc958b52f5145712", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000", @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x50) listen(r0, 0x3) write$tun(r3, &(0x7f0000000780)={@val={0x0, 0x8847}, @void, @ipv4=@igmp={{0x8, 0x4, 0x3, 0x9, 0xa4, 0x67, 0x0, 0x0, 0x2, 0x0, @empty, @rand_addr=0x64010100, {[@generic={0x0, 0x8, "8fa697b9ab1f"}, @ra={0x94, 0x4, 0x1}]}}, {0x15, 0xf7, 0x0, @multicast1, "592697f95b4ec56a90c09bcc4636f84c8b5ba10b8bb0e4bf9d8098cafb158d18fbd8a8ad59b13a8b727860fd1e6cae81740b34b0f41764ddafd810532adb79eb12e88e1a42a15cbb60ea58fe1218030ae85d13add168c0a8f80129a205738ff49656570bebbadbb591f9fdf1038633c960d9c57ddbc587db25122d5c"}}}, 0xa8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000380)=0x4) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000380)=0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) (async) syz_emit_ethernet(0x87a2f, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000070000000500000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00ee7b0800e900", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0x108) 2m30.581341704s ago: executing program 2 (id=1239): sendmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000440)='M', 0x1}], 0x1}}], 0x1, 0x4040040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000140), &(0x7f0000000200)=r1}, 0x20) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x40}}, {0xa001, 0x880b, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "43d6711ac0efef1e1f74c17f85988f65f1056db60a9e01ce4431787073bbdb19", "328e2c6fef49efa792f0322e0061f775", {"11c108d27b66ea7d870480859021d635", "692db37c1a923903858454813e253429"}}}}}}}}, 0x92) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0xffffffffffffffff, 0x8, 0x1, 0x6, @vifc_lcl_addr=@loopback, @empty}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000080), 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0xffc8}}], 0x1, 0x0) 2m30.107667939s ago: executing program 2 (id=1245): unshare(0x22020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffff00, 0x2, 0x6, {@mac, {[0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x800, 0x0, 0x2, 0x403, 0xe1aa, 0x9, 'wlan0\x00', 'netdevsim0\x00', {}, {0x9ac46b8f0aa09f3d}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @remote, @remote, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2m29.837325339s ago: executing program 2 (id=1249): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000008180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @local, @void, {@ipv4={0x800, @esp={{0x7, 0x4, 0x2, 0x6, 0xd73, 0x68, 0x0, 0x4, 0x32, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x32}, {[@timestamp_prespec={0x44, 0x4, 0x9c}, @noop]}}, {0x4d4, 0x0, @cc={0x1, 0x0, 0x8, 0x3a, 0x5, 0xff, 0x68b, [@ipv6=@dccp_packet={0x2, 0x6, "c0f71a", 0x12e, 0x21, 0x0, @empty, @remote, {[@fragment={0x3c, 0x0, 0xff, 0x1, 0x0, 0xf, 0x64}, @dstopts={0x32, 0x7, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x8, 0x0, [0x6, 0x7, 0x9, 0x400, 0x6, 0x4]}}]}, @fragment={0x2c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x65}, @fragment={0x2c, 0x0, 0x3, 0x1, 0x0, 0x13, 0x65}, @hopopts={0x6c, 0x7, '\x00', [@pad1, @generic={0x1, 0x10, "dddcbab2eb2b1d5d012f99e930de1b72"}, @hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @srh={0x2b, 0x2, 0x4, 0x1, 0x31, 0x0, 0x0, [@loopback]}], {{0x4e23, 0x4e23, 0x4, 0x1, 0x9, 0x0, 0x0, 0x8, 0x1, "0074fe", 0x8, "11aa76"}, "62734cfb6159542e9bf860c90fc2f4f834fc69f879e95fc4e99f777959759feca9123a641b60c61559fff913dffb6dd73b617c4a6ad153dd022e708a96095c0f729e5369e12d308ef6f197651de29f116b70ef101f3e5a8be28adb105e1c"}}}, @runt="8f61a75c3072e2dd", @ipv4=@tcp={{0x17, 0x4, 0x1, 0x8, 0xc7, 0x66, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x28}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0xe7, 0x3, 0xb, [{@empty}, {@private=0xa010102, 0xfffffffc}, {@private=0xa010100, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@loopback, 0xfffff015}, {@multicast2, 0x5}, {@remote, 0x5}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x11, 0x40, 0xb785, 0x0, 0x1, {[@eol, @sack={0x5, 0x12, [0xc, 0x1, 0x4, 0x0]}, @generic={0xdf, 0x8, "4408002e618d"}, @nop, @generic={0x8, 0xc, "b0ac80072351715e3d71"}, @generic={0x0, 0x5, "f43ccc"}]}}, {"661e8cc59c96f6f542c44ffdcc75a2acdc09a8fe466291bfff79fc32cd1708b7b03e6fe98f8e41"}}}, @runt="768ffe26b4", @ipv6=@icmpv6={0x2, 0x6, "1e4fad", 0x272, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x5c}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x9, "17787e842b9db7c08e4d93f8effa6c7d9f957eacfd77084439b0ea3e7458af3c81e4864feb66dc9e013493d3c1678a34d8cc98f0e32243fa5a47bf16be14b3716fef16ad3c2ac3917ed6b3"}, {0xe, 0xa, "b33b4c7966c3cf8b25d4337625edbcdbcd72fe965c0f17a44c79b354b103feed4cedcfc270e76f8a7444b61705cd18bf37c7f6a87014301016f62ee1f0495928390add75ee6dcb0153c43c29b644e3f45e9ff7bc"}, {0x22, 0x13, "de7456172bdf44ef74717e9f637e8c79af12a1c39e3d45926d24f005ee256756de92a3f636c823e5b6f947e9c08febc9f15c8cb8e663536fe4ead6978dd0ab0f76975edb0906673a5037168dce197e271f6b13256c8dcd758a37d2095ddbacdd19377106c4743218a9c80d02fcf070e18dd631ef673c19b9785eb3c563739a1bd72a67457a1068de316a8d7428e1d3027890c7d5b982d4258518"}, {0xe, 0x9, "3c00ee4db6ab69abc7394e689b42ea1fa8a2654f381e7b57ad4d8f8fc7e87a77547ed5e19167de2890ce2c792964f10c9fa16503d093c559fe473ba6fba5354fac4afb7e7f8acf16b46c"}, {0x2, 0x16, "2e360c4281663ae725e6c957880d308cf119dcf547327e28ccbf4dbb30a33219a4b67d4384e868dd833ab6b42a61b49d581e0d542e8a7c7832a688a5a88324220082a124849afa8f11ec3c070310aa063939e08a4d6f6e807d99f601a2bcd975cf8b41ff1d7f3d96c2fc5d83d51fd5e56b5a887a925a78a97a174c2326a902e0565ccbbb0eb35cb1a442eeea19840c958ac0571cc298562c64eff9293630d12415a5bee5759da1114549c86ee13c5daa7454816efe"}]}}}, @ipv4=@dccp={{0x5, 0x4, 0x0, 0x1, 0x86c, 0x67, 0x0, 0xf, 0x21, 0x0, @remote, @private=0xa010101}, {{0x4e24, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0xc, 0x0, "c7ce32", 0x53, "269fd8"}, "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"}}]}, "f2ea6aa637", 0x5}}}}}, 0x0) 2m29.141059684s ago: executing program 2 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x4000080) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x2a4, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x164, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf86}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4884ddff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x78, 0x3, "d1452a7e27224541c084ac2fb2fcc0c17a3fc9967e7bdfaefe4be29a51e3f8fcbab88012a80b60b3562e02ffc7be1e0eead5973d2d02020253aad7d13e36adb8f27d208a6ca7de190992e1b9eb2995318eb5b6752085101d472260d361f396df24902af2f78ec53ac5a7630d4816a7ba25908b9b"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "552baa1652b0d7840fd25af261b75a9d9908f5a202097f26d2"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x890) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 2m14.041730852s ago: executing program 33 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x4000080) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x2a4, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x164, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf86}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4884ddff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x78, 0x3, "d1452a7e27224541c084ac2fb2fcc0c17a3fc9967e7bdfaefe4be29a51e3f8fcbab88012a80b60b3562e02ffc7be1e0eead5973d2d02020253aad7d13e36adb8f27d208a6ca7de190992e1b9eb2995318eb5b6752085101d472260d361f396df24902af2f78ec53ac5a7630d4816a7ba25908b9b"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "552baa1652b0d7840fd25af261b75a9d9908f5a202097f26d2"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x890) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 56.061706038s ago: executing program 6 (id=1734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x0, &(0x7f00000000c0)=0x4630, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) socket$inet6(0xa, 0x2, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 55.07904773s ago: executing program 6 (id=1742): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="00019b6d", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250400000008000800ffffffff08000200040000000800070064010100"], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x14, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000003c0)={'erspan0\x00'}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x25, 0xd, @void}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x124, 0x13, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0xdd, 0x8, "ccf8dd8c1eaa54581ee2436c10ad463968c84b9cdd32b03f88922bc7a74167593263f46c8590c5c784fdfd34c2e8b7630c281797d0e4de61b4ebaeffacb27d08a818e4a6893861c89d8534d2b1c4b6f75e35aa22e1a8611a37200d5b24da5e2f7e2a283ce8ede1f691b474f21f8259619aeb9bcf0d919053711551937164fa3baafc8105cc14bdab7fef56fe9b63681f30a4845e852c4613836458e12ab3a8c44f167c80fb12072a99f294b59560a5d3ad4be67c4b6f49594e335a998a29e962a4fc9e9d6ec700f35c11c5ebb99d24b9fb60e054b84654c941"}, @NFTA_OBJ_USERDATA={0x24, 0x8, "4312aad22c55477b2d94dcdc3049fa9e2d9479d1c5705a492473f06b9ddfff77"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x124}}, 0x40015) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="13abd1f0b7e1e43b7a70045f306ac4c2c0b94f7eb49ad9364552dc02fa822788000000000000167d0000850000006e00"], &(0x7f0000000240)='GPL\x00', 0x3, 0x1000, &(0x7f0000000dc0)=""/4096, 0x40e00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001dc0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001e00)={0x1, 0x4, 0x3, 0xfe}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001e80)=[{0x2, 0x3, 0xd, 0x4}, {0x2, 0x4, 0x8, 0x1}, {0x2, 0x5, 0x7, 0x5}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001f80)={r5, r6, 0x0, r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0xd1, 0x0, 0x10, 0x7c6, 0xfdb1, 0x5, 0xc16d, 0x5}, 0x0, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x22820100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000010000000000000208000400", @ANYRES32=0x2], 0x60}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 52.806947682s ago: executing program 6 (id=1754): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000d48664e4d67b11915bce", @ANYRES16=r2, @ANYBLOB="01002cbd700000dcdf251a00000006002100610000000560f54d6ef23543f897d8f77f630092000000000fc7f2e3d40f06ab47ee8ec2419d724ca549bbca7fe6c3f4dfe8553af5e611211aa8a8beb45c5df94b61df883a6ab6ec5531f993d12780b2c85299ce4956611fdcb7feaadfdc7644f7e1e38bc4e45596aabaa655f79a11fb94d77b8771a6d988c705a622372cf181bb9b7e10af514073b2acede78405f5414f5a0032aeac3a074ebc3f961bed4dadab539842791a12b1d2d0f2a7311af570bc3046373967f9a6c6915207abaebff5ad94ceda7a6bb53cba8a549e9908d4a8897fb9c7b92fdbe6c09378"], 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x8850) socket(0xf, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r3], 0x20) 52.45707294s ago: executing program 6 (id=1758): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000000880)=""/247, 0xf7}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000000)=""/32, 0x20}], 0xb}, 0x10000fff}, {{0x0, 0x0, 0x0}, 0x10000004}], 0x1e, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0xffffffc4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0xd6, 0x1, 0x0, 0x2, 0x2, 0xa5, 0x0, 0xd, 0xfb, 0x6, 0xfc, 0x7, 0x5}, 0xe) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) 49.446011308s ago: executing program 6 (id=1764): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20038, 0x40000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x8000) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000640)={{r1, &(0x7f0000000180)='\'(-((:[%+@\x00', 0x4000, &(0x7f0000000540)={@_ha_fsid={[0x13, 0x2]}, {0x9, 0x0, 0xf95, 0xffffffff}}, 0x51, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x400}, {[0x5, 0x7, 0x5, 0x3ff]}, 0x6, 0x16, &(0x7f0000000600)=""/22}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x5, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r4 = socket(0x10, 0x2, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0xf, 0x6, 0x400}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5ed0bffec02b52a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async) sendto(r1, &(0x7f0000000100)="3ec8a9c7ab9a62e18219e894", 0xc, 0x0, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x3, 0x3, 0x3, {0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1a}}}}, 0x80) (async) write(r4, &(0x7f0000000000)="1c0000001a009b8a140000003b00"/28, 0x1c) (async) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000000)={0x6c, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e20, 0x2, 'lc\x00', 0x0, 0xfff, 0x4a}, 0x2c) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x8}, @empty, 0x1e, 0x16}}) (rerun: 64) 48.332889904s ago: executing program 6 (id=1779): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) write$cgroup_devices(r2, 0x0, 0x6) (async) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) (async) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10) close(0x3) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) accept4$nfc_llcp(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x60, 0x80000) (async) r9 = accept4$nfc_llcp(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x60, 0x80000) read(r9, &(0x7f0000000640)=""/65, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r10, 0x0, 0xe, 0x0, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x28001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 33.218721992s ago: executing program 34 (id=1779): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) write$cgroup_devices(r2, 0x0, 0x6) (async) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) (async) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10) close(0x3) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) accept4$nfc_llcp(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x60, 0x80000) (async) r9 = accept4$nfc_llcp(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x60, 0x80000) read(r9, &(0x7f0000000640)=""/65, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r10, 0x0, 0xe, 0x0, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x28001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 14.164307792s ago: executing program 3 (id=1992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x800007, r0}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x20, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c080}, 0x402008c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000380)=0x1c, 0x0) r8 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in=@rand_addr=0x64010101, 0x4e23, 0x1, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, r8}, {0x2, 0x7, 0x549c97b8, 0x5, 0x3, 0x48, 0x5, 0x7fffffffffffffff}, {0x0, 0xdc, 0x10001, 0x100000000}, 0xefe1, 0x6e6bb1, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0xff}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3506, 0x0, 0x0, 0x7f, 0x2, 0xd, 0xfff}}, 0xe8) 10.98899506s ago: executing program 3 (id=2012): syz_emit_ethernet(0x96, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e4d700", 0x60, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @empty, @mcast2, [@srh={0x3a, 0x4, 0x4, 0x2, 0x7e, 0x10, 0x28a5, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], "ef9edaaa64947bfe"}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000059c0)={'veth0\x00', 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @multicast2, 0x17, 0xe}}) 10.779866666s ago: executing program 3 (id=2014): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0x88}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f00000003c0)=@phonet={0x23, 0x9, 0x0, 0x2}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000d00)="cdd7f1d95918b45245adfa6af1ed879b41467b67bb00e55219dbab0700000000000000481eabf71d15b96dbae8b79abec1ca960384d7c732aa794e8e3a832919b70d8201184273da966ca8a3ffa6854f20d126ebf2e7666a2cdd11b688462ba7b69ac0f36eef59a313bcfb5a23d7ba761ffd91f03883bd0b8024d724b313d57970e3d19ccb6822b2ed708901b1d67660a35ee6a781bd00ae099a48bde27637fc1c4af81bd6c64033c6f30000832e21733ea5412b9421bd976ceca3b18c4c1c49c294895b7bc5c1c5247424ceab7af76377f309ac45874c349686bb3b8ccc1d3709097baeeb321944924c27f0d9a0be19fea1002bbc8278fa10963ba6312f533ee60bdaf5fc0064b59526d68bc5adcafc64afdf566189fc6e8e4bc1c420b5e8c52f", 0x121}, {&(0x7f00000006c0)="eb933eca333669499f9da5435a72653181b000bba3d4b7594ce9a19c6fffd77820fdae473fe845c4fc745b746e2527f00f9ed9e003200d7a295491f9244198e9c20ebcd8441a274d64c3e9d4d3355d42f74e267f33c62b228c8e5780fa2ab549b3f9301782b0326954a3b0274066740e530ba925ae681041a7923b834a402ec7e572a4f3ea340cd5e24d0ab3fbe9", 0x8e}, {&(0x7f0000000780)="5035604d9e161d3b14ac1ce80d1f90c81ef1cdf54b5d020d450b77bb0c571f89e7f230c9a205769213c3639bdb57b823347c3cd54ea86d09034fb5a9da869832c9bfe59316806971ac957efd81581487ad60dd84245be6f4f044529d6f5494ade72772f3990f9c7536f6ebb2ab4df7e359748958e04ad270e787ced01e0e2f2c3e424ecdf0ada1482093b9521f2e2def9d4ef68d5bd1b0e3d3d76cd80f84f55e9c1232f0238ba3d6dce918", 0xab}, {&(0x7f0000000840)="f4d690d2b89830f451afe7b93c1343cbf47cf99fefffd4c48078fe436446e969b192c8e4b56815634565effe5905743ffe41f0eaae6c1e87009d6cc370b0b4763b65c421423c4cd031749222875b88ac9786e3018a3db1fadaacd32764ccb03bfe6ca5bb264ed4395764b77b671cce60386b737a9e9438735fd21b8e2922b32a6cd8f7a1dbe86361c7402816483a620d023172c3b6bffe68607a8c056895f0f7b637d939a2573fd29561eb183d21fc27de63a77f86c9760bc15121cd560825b6803c6381e8656188683f89f2f146d583076e03570579906408", 0xd9}, {&(0x7f00000004c0)="2414eb9900000000000000f9c1e8dcd53ce38a4e22", 0xb}], 0x5, &(0x7f0000000500), 0x52}, 0x20000804) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfffe}, {0x1, 0x2}, {0x1, 0xfff2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40d1}, 0x51) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x30}, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73, 0x2, 0xa}, 0x0, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x3, 0x0, 0xe}}, @common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x7ff, 0x5, 'netbios-ns\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0x0, [0x1, 0x0, 0x2, 0x0, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_FLAGS={0x8, 0x8, 0xffffffff}, @TCA_BPF_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000006800010002000000fcffff7f0000000000000000140002000100000005000000f9ffffff0600000004000b00"], 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_freezer_state(r10, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r11, 0xf517, 0x0) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r11, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r11, r11, 0x0, 0x9) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000300)={0x1ba, 0x7, 0x2, 0x100, 0x20000000, 0xfff}) 9.526687941s ago: executing program 3 (id=2025): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "b1acebef3acf7772", "b472889d4e11bfa4fb827e8f90c951e956df2cdefbc5b79d3395b233dae1ff91", "4c3245aa", "10e1894bfaad6d8b"}, 0x38) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.993416224s ago: executing program 3 (id=2029): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="541cc65f42031cdece364c5090a5d94d71b5", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0005000000000000000c0090000200001000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40c0050}, 0x24000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000380)=@allocspi={0x148, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x4e21, 0x3, 0x4e22, 0x10, 0x2, 0x80, 0xa0, 0x3b}, {@in=@multicast1, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00', {0x10000000373a, 0x4, 0x2, 0x1, 0x8, 0x1, 0x4, 0x3}, {0x22, 0xd2, 0x0, 0x3}, {0x0, 0xcd, 0x7}, 0x70bd2c, 0x3504, 0xf016e6580cc0e8b0, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@migrate={0x50, 0x11, [{@in=@private=0xa010100, @in6=@remote, @in6=@remote, @in=@empty, 0x32, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) socket$inet6_mptcp(0xa, 0x1, 0x106) 8.739713409s ago: executing program 3 (id=2032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x402, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044804}, 0x14) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r3) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}}, 0x4000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x808) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x6, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) r8 = socket(0x2, 0x80805, 0x0) close(0x3) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000440)={r11, @in={{0x2, 0x4e23, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) 6.793021787s ago: executing program 7 (id=2044): r0 = socket$inet(0x2, 0x1, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="c8ed0ec2aff22b790000000000000000", 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f00000005c0)={0xa0, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd9c}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x400}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x148, 0x4c, 0x1a, 0x148, 0x73, 0x220, 0x258, 0x258, 0x220, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x1, 0x3}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x20}, {0x0, 0x20}, 0x14}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x350) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x94) mmap(&(0x7f00003ae000/0x2000)=nil, 0x2000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x55d11000) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'pim6reg0\x00', {}, {}, 0x6, 0x1, 0x9}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'ipvlan0\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x6, 0x4, 0x3, 0x2], 0x2, 0x1}, {0xffffffffffffffff, [0x5, 0x6, 0x6, 0x6, 0x4, 0x1], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 6.396593871s ago: executing program 4 (id=2048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001400010000000000000000002d00000002000000050002"], 0x20}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x1, 0x70bd27, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x42885}, 0x4004000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket(0x1, 0x80802, 0x0) sendmsg$kcm(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4011) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x31, 0x5ed95ce3c8b5d92e, 0x5, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r3}, 0x8) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000000)="cec5409dd10263d6ea78e0b9547e", 0x0, 0x240008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback=r0, r10, 0x29, 0x0, 0x0, @void, @value=r12, @void, @void, r11}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000000012bc50a16c70298b4002cd322100002000000240001801400018008000100e000000108000300e00000010c000280050001000000000008000831a42b14c06ee157b8676c400000ff1608"], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 6.077081532s ago: executing program 4 (id=2049): bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b25, &(0x7f0000000000)={'wlan1\x00'}) (async) bind$tipc(r0, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000400)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980080002002e"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000400bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) (async) r9 = socket(0x10, 0x3, 0x0) accept$packet(r9, 0x0, &(0x7f0000000340)) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001e00100000000100000000000a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000800) (async) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 4.204370742s ago: executing program 4 (id=2051): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x22}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x5, 0x100}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001640)={@ifindex, 0xffffffffffffffff, 0x33, 0x20}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1, 0x1, 0x4}}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x2, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x7, 0xfff1}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000200)=0xfffffff0, 0x4) sendmmsg$inet(r3, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x40014) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000340)=0x0) syz_open_procfs$namespace(r6, &(0x7f0000000300)='ns/user\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0xb06a1d8452b18e4e, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, 0x0, 0x0) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffe}, 0x10) sendmsg$tipc(r8, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.984748095s ago: executing program 0 (id=2052): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x1e, 0xb, &(0x7f0000001280)=ANY=[@ANYRESOCT=r3], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x24}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, r5}, 0x38) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8800000000000000000000000000016401010000000000000000000000000000017fff4e230025000000003a000000ac5d1bdec32e16b823c6f66fe4c1748475601484cda7a78c2b80e141f474af387f8b5d83e558afd575b1ddf3079f261d85ed003e6331c97213183cbb02c149dc2a8513fd8a7627c64578b175367e21aff22b594af0a55784a71dffc994168591b154987f6ae1149e885de8149052fe65d9bc1f1e22551bd569925724cf7625499312afe031319c4c3940c73ef03082f2379c25", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff010000000000000000000000000001000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000900000000000000fbffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001800)=ANY=[@ANYBLOB="480100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000014e20071c4e210005020000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES64=r1], 0x148}}, 0x844) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'hsr0\x00', 0x84aebfbd6349b7f2}) (async) unshare(0x4a020700) (async) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e24, @empty}}, 0x2000, 0x21}, 0x90) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000080)={r9, 0x6}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffff7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000019c0)=@newtfilter={0x3b0, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0x4}, {0x0, 0x1}, {0xffef, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x384, 0x2, [@TCA_BPF_ACT={0x334, 0x1, [@m_xt={0x9c, 0xc, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}]}, {0x47, 0x6, "ea9886c57a04ef1b8aa40fae15cff1ec52351740fa76db466c5eb2091ac8c0fdc90d412257f2c3eb75488bc3dab624eaa703f06d30656a79df5bde78d64b718c30eaff"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x1cc, 0x5, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x1, 0x2, 0x4}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x0, 0x0, 0x2}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x5, 0x3, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x4, 0x7, 0x6, 0x7}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0xe, 0x10000000, 0x92, 0xd535}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0xd, 0x4, 0xffff17be, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x9, 0xffffffffffffffff, 0x2, 0x839}, 0x9}}]}, {0xd7, 0x6, "84502b98d4b4b6991dac389551d19b740736c5e89eb8688e2f2b8abf1d411f83070f0a62e468c6072b484fe8056c623bcc18f94eb87972cb4c1ab4b3e52f505442f973f810792865701cb95d578d67e38b49c4795fac21d60a4180156450dcb5252a51f9e9ab23b92bc6631c9f4c0c9e5c5d61d264c33e4a412564473a221434d6692beaa26fbc71a313244ad763b6732e6d076a3fea1572510e7a4ee5477e39639bbebfaed8ed71c980749c466bc8e40d9e853c6052107af52e86d86bd54d5d95c3d3c4ee1cd8dc0312ca57052600d95f8bc6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0xc8, 0x13, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x8c, 0x6, "41e41c04978c9374caa8e7e59466b0e70f4f4bdda462adb41b36eb0e94297f2dde21a5567595fde8f19bbb0def79e054599f2aeaf64d0e67cafa6eb79b6966af2bc9c0b21968f6030b223ac0e3dfe1015358d48779a6cafa1462c21d1445078f8b19c4b048f8bd5c2320511d85f2ee534abf535eb1ce5aa33cf890f98edb1f8b18836ace72f896e3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x2, 0x8, 0x8e, 0x10000}, {0xffca, 0x3, 0x9, 0x6}, {0x1400, 0x5, 0xa, 0x7}, {0x7, 0x8, 0xb1, 0xfffffffa}]}}, @TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) (async) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x1, 0x140, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000b80)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 3.785449183s ago: executing program 5 (id=2053): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) unshare(0x100000) (async) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000640)=@file={0x1, '.\x00'}, 0x6e) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xef) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r7, 0x25, 0x0, @void}, 0x10) (async) syz_extract_tcp_res(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x9, 0x7) syz_extract_tcp_res(&(0x7f00000003c0)={0x41424344, 0x41424344}, 0xa, 0x40) syz_emit_ethernet(0x10d, &(0x7f0000000640)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x19, 0x4, 0x2, 0x28, 0xff, 0x67, 0x0, 0x9, 0x6, 0x0, @private=0xa010101, @private=0xa010100, {[@timestamp_prespec={0x44, 0x24, 0xb5, 0x3, 0xb, [{@private=0xa010102, 0x3}, {@private=0xa010102, 0x7}, {@empty, 0x80000001}, {@local, 0x6}]}, @timestamp={0x44, 0xc, 0xdd, 0x0, 0x8, [0xffffff01, 0x7ff]}, @noop, @rr={0x7, 0x1b, 0xe9, [@remote, @private=0xa010102, @remote, @multicast2, @multicast2, @multicast2]}, @generic={0x7, 0x4, "0ee8"}]}}, {{0x4e22, 0x4e23, r10, r11, 0x0, 0x0, 0x16, 0x40, 0x2, 0x0, 0xfa68, {[@md5sig={0x13, 0x12, "8e73bb6513ad4d9e1d849d5a4f08c776"}, @generic={0x13, 0xe, "473bd3b563d1081f9558d7ba"}, @sack_perm={0x4, 0x2}, @generic={0x13, 0x12, "0ea569363ea953c816a12531cafe45de"}, @window={0x3, 0x3, 0x8}, @mptcp=@syn={0x1e, 0xc, 0x8, 0x1, 0xc, 0xfca0, 0xff9}]}}, {"939b9d6dbab312a12749142d553eeca758a932d2bb70aaf043ee38f151b0146644356b14190b5c4c046353254c99542a622668a56492e84c43ec693383fa1df2748bb8"}}}}}}, &(0x7f0000000780)={0x1, 0x4, [0xa2a, 0x553, 0xb3b, 0xf8d]}) (async) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x3, 0x4e) syz_emit_ethernet(0x11ee, &(0x7f00000012c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6754c36011b806ffff020000000000000000000000000001fc0000000000000000000000000000013301000000000000010700000000000000000000000000003c16000000000000050200060102000004010601010007580000000114b100010500000000000000000000000000000000000000000000000700000000000000493a000000000000be2f0c6a00000000ffffffffffffff7f390000000000000021080000000000000800000000000000000100043fac1e8e4a91143efbbf3c515fb01ec540735188f7d8f5eb5b3f708f003276313630f59a13ad99fc0900000000000000bd1346db03d3fff03ab6ee18cc1fefd5010400000000000000000000e40e0407ee000b00fe80000000000000000000000000000c00000000000000000000000000000000ff020000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000000000ffffac141421ff0100000000000000000000000000014e214e24", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="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"], 0x0) 3.117034807s ago: executing program 7 (id=2054): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe7, 0xfffffffffffffdfa, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x9f0, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x958, 0x178, 0x178, 0x958, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}, {0xffffffffffffffff}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x3, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x7}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x1, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff1}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x2}, {0xd, 0x3}, {0x2, 0x2}, {0xffff, 0x2}, {0x3}, {0x40000002, 0x3}, {0x3, 0x1}, {0x200, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x10006}, {0x4be1, 0x4044}, {0x1, 0x9}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0x4}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5, 0x6c0080e73a6b1d41}, {0x61}, {0x9}, {0x0, 0x3}, {0x2}, {0x101}, {0x40000000, 0x2}, {0x9, 0x3}, {0x2, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x4}], 0x1, 0x7}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x7}], [{0x9, 0x3}, {0xe, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0xa51, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x84f91543aa81d05}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x2}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0xf, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x0, 0x5}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0xff, 0x6}, {[{0x1}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x6, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7, 0x2}, {0x3, 0x2}], [{0x3, 0x3}, {0x76874689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0x0, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x7, 0x3}, {0x18, 0x3}, {0x3ff}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b3}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x81, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x40007ff, 0x63}], 0xb, 0x4}, {[{0x1, 0x1}, {0x0, 0x3}, {0xffff, 0x2}, {0x1}, {0x40004, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x7f, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x8, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa50) (rerun: 64) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x0, [0x4, 0x28, 0x7fff]}, &(0x7f0000000cc0)=0x44) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="324d3d6f59c7ee15e4714c0bf1", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250100000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x24000040) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x500000}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x4041) 3.029537647s ago: executing program 5 (id=2055): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffe, 0x0, 0x0, 0x5}, 0x10) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x97}], 0x400000000000172, 0x4001c00) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000400000000000000001000850000002c000000850000002a000000955a0843f8b5b8a0fb4e8309fa07d0774b33ed991727595376c02690648577f18657d81854930fa803f497eb00e6cf3f0c2a2420962e342c2c8c76e36d952bb5"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r6, 0x0, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) (async) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[], 0x0) syz_genetlink_get_family_id$nl802154(0x0, r3) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020f00000f0000000000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000005001700000000000a00000000000000ff0100000000000000000077754b9ef46128af2a8298f1ca"], 0x78}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, 0x0, 0x20000000) (async) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) (async) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000140003002bbd700600dbdf250a019cc8402324c096f85bf75fa65792dd758b9f6ed0453b012a15f1a34b4796d2f7af6a29e9c845e835edb2063906cf2e3321490849cd8db0685a72b77ed25952c450bec38d783560be655adc052126704a9fa5938d9e9d66a4fc485ca734a41ed40a43c5ff5bf5dc5e6878189466e560439c009e169346be2eceff79ade3b403f9d4df388d31be6e20ba6b83d64549a7922e9d5c650046d5f16cbe17176632", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa08000a00010000000800090000000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) 2.905131174s ago: executing program 4 (id=2056): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) 2.850136213s ago: executing program 0 (id=2057): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x4e8, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4d4, 0x3, 0x0, 0x1, [{0x4d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c8, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x524}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}) ioctl$sock_proto_private(r0, 0x8b24, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r2) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={{0x14, 0x3ea}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.489479884s ago: executing program 4 (id=2058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a310000010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a00000000"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) unshare(0x22020400) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030086be000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xa) read(r5, &(0x7f0000000200)=""/196, 0xc4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a310000010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a00000000"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) (async) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) (async) unshare(0x22020400) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030086be000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xa) (async) read(r5, &(0x7f0000000200)=""/196, 0xc4) (async) 2.32100551s ago: executing program 7 (id=2059): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x5) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xffffff00, 0x0, 0xff000000], [0x100000001, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'ip6gre0\x00', {}, {}, 0x3b, 0xa2, 0x1}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0xa14}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0xfc}, @remote, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe3, 0x4, 0x44}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x4, 0x800, 0xb9e, 0x6, 0x8, 0x3, 0x4], 0x13}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10}}], 0x2, 0xc88c5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18410000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 2.265042844s ago: executing program 0 (id=2060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="380100001000010001000000fddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000df2f6abaff0001000080001c250800000000000200000000000000f8ffffffffffffff020000000000e0fffeffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002900000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3a0) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008002b00fe88a43de1a400000000000000007d01ff020000000000000000"], 0xfdef) setsockopt(0xffffffffffffffff, 0x8bb, 0x100, &(0x7f0000000240)="8d1fcba03b6f16bf3ec06397da8742cf685866b73de74453d9d5b88e7c2ebedcc18eb712391911d27275edf6f01a5a443395967296acd58fbc985ecaa72ca49b8b1f555986484df4a8d3583078d9cca7a3b530154f287e866ac4f0f75ff984bfef8e57f4a8d18dd1cdbf3243850406d7567f3b12bbfedce0092c44f922fe00732d", 0x81) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="740000000206050000000000000000030000fffd0e000300626970000000050004000000000900020073797a31000000002cc2e08008000840000000cb180001801400024020010000000000000000230000000001080012e900006d2305000500020000060000e100"], 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000640)=""/174, 0xae}, {&(0x7f00000005c0)=""/70, 0x46}, {&(0x7f0000002640)=""/4084, 0xff4}, {&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000003780)=""/236, 0xec}, {&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000000080)=""/180, 0xb4}, {&(0x7f0000000040)=""/18, 0x12}], 0xa}, 0xffffff01}], 0x4, 0x40, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 2.069035841s ago: executing program 5 (id=2061): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x24060400) bind$nfc_llcp(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x40, 0xcc26, 0xffb, 0xae, 0xb69, 0x4, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffd, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x75e, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x6, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0xfffffff7, 0xfffffffe, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xfc55, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x84, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x282, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x40, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r0, 0x5ed0e000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1f8, 0x10f0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11e8, 0x206, 0x240, 0x11e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x70, 0x90, 0x0, {0x390, 0x8f00}}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffffff, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x6, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x0, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x4, 0x103a, 0xfffffffc, 0x100, 0x80000000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b2000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095b5ca16deb2a67c58d111ba68ada2f8e3e4b010d27c647dc05654791517e7f2d63981327a8536a298c2db538341309d3cd5"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x94) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r5, 0x0, &(0x7f0000000040), 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4000080) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.765687673s ago: executing program 7 (id=2062): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtaction={0x178, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x164, 0x1, [@m_simple={0x124, 0xa, 0x0, 0x0, {{0xb}, {0x90}, {0x6c, 0x6, "e269aee1245a7636fb3197e4a078e4d8231565f3109bbce05bf5cafa38c64e430172834c4fe857972577cccdb3ebd7b2d66e2a5e435d0fc3040857bb6ef376175e6e00b6604c3662fdc7aa44d91ba9d2c26aa3bb2216c6c8078517560e8914deec3d222718b8de7b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x3c, 0x1d, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x663}], [@TCA_POLICE_TBF={0x0, 0x1, {0x3ff, 0x0, 0x9, 0x5, 0x2, {0x36, 0x1, 0xffcf, 0xadb8, 0x9, 0x9}, {0x14, 0x2, 0x0, 0x8, 0x6, 0x7f6c}, 0x1, 0x6ef, 0x9}}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x1000, 0xffffffff, 0x2, 0xd2, 0x0, 0x9fc, 0xd, 0x8, 0x0, 0x3, 0x8, 0x0, 0x5, 0xf9, 0x2, 0x357, 0x2, 0xffffffff, 0x7f, 0x8, 0xfffffffc, 0xfffffff7, 0xb, 0x6, 0x7, 0xe, 0x10001, 0x4b, 0x8, 0x7, 0x18000000, 0xaaf, 0x4, 0xfe, 0xcec4, 0xffff, 0xa1cf, 0x2, 0x8000, 0x0, 0xffffffe9, 0x3, 0x5, 0x9, 0x7fffffff, 0x7, 0x406f, 0x8, 0x6, 0x8, 0x7ff, 0x8, 0x6, 0x48000, 0x57, 0x33, 0xfff, 0x55e8, 0x1, 0x400, 0xbb, 0x7, 0x7d, 0x0, 0xd, 0xa89d, 0x8, 0x7, 0x3, 0x100, 0x8000, 0x9d2c, 0x2, 0x6, 0x6, 0x81, 0xde5b, 0x3, 0x400000, 0x8, 0x9, 0xa73d, 0x9, 0x9, 0x9, 0x5, 0x2, 0x7, 0x75bd, 0x0, 0x611, 0x8, 0x4, 0x6, 0x4, 0x8, 0x80000000, 0x0, 0x8, 0x9, 0x7, 0x3, 0x8, 0x466, 0xfffffeff, 0x2, 0x7, 0x63, 0x1, 0x1, 0xf, 0x4, 0x34ebdc72, 0x5, 0x0, 0xb2a2, 0x200, 0x2, 0xf, 0x4, 0xfffffff7, 0x9f49, 0x7, 0x8, 0x10, 0x2, 0xdae, 0xb04, 0x80, 0x8, 0x3, 0x6, 0x2, 0x4, 0x6, 0x2, 0x80000001, 0x40, 0x6, 0x3, 0x8, 0x80000000, 0x1000, 0x81, 0x400, 0xc0000000, 0x511, 0x7, 0xfffffeeb, 0x101, 0x3, 0xa2b5, 0x6, 0xfff, 0x5, 0x6, 0x2e080a5b, 0x441, 0x3, 0x0, 0x1, 0xa, 0x40000000, 0x800, 0x7, 0x1ff, 0xffff, 0x8, 0x6, 0x7, 0x8000, 0x60, 0x1, 0x7, 0xc5, 0x5, 0x3, 0x200, 0x873d, 0xff, 0x5e93, 0x7, 0x3, 0x9, 0x4, 0x9, 0x2, 0x3, 0x2, 0x6, 0xfffffff0, 0xc837, 0x1, 0x3ff, 0x7ea, 0x9, 0xf3, 0x3, 0x6, 0x7, 0xcd9, 0x5, 0xf, 0x9, 0x2, 0x9, 0x286, 0x9, 0x10, 0x6, 0x14, 0xffffffff, 0x8, 0xb5d0, 0x4, 0x4, 0x0, 0x340, 0x6, 0x4e46, 0x6, 0xfffffffa, 0x5, 0x50, 0x9, 0x5, 0x18, 0x6, 0x7e, 0x7, 0x6, 0x8000, 0xf, 0x0, 0xfffffffa, 0x656, 0x8, 0x80, 0x0, 0xfff, 0x1, 0x100, 0xab25, 0xa5, 0x0, 0x5, 0x5, 0x400, 0x7ff, 0x81, 0x6, 0x2, 0x5, 0x7, 0xffffffff, 0x100]}, @TCA_POLICE_RATE64={0x0, 0x8, 0x101}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x3, 0x8, 0x9, 0x1, 0x6, 0x519, 0x2, 0xb6, 0x54bb, 0x400, 0xfffffffd, 0x1d18, 0x400, 0x2, 0xf, 0x2, 0x51, 0xffff, 0x3, 0xa, 0x401, 0x2, 0x9, 0x2, 0x7, 0x5, 0x100, 0x0, 0x10000, 0x1, 0x8b0, 0xb63, 0x75b0, 0x6, 0x4e, 0x4, 0x2, 0x1, 0x5, 0x20, 0x2, 0x4, 0x0, 0x25d, 0x2, 0x5, 0x2, 0x5, 0x1000, 0x2, 0x3, 0x5, 0x4e, 0x4, 0xf301, 0x5, 0x6, 0x7, 0x101, 0x7, 0x7, 0x4, 0x33a7, 0x6, 0xfffff9c3, 0x5, 0xd, 0x5, 0x5, 0xad38, 0x10000, 0x1, 0x4, 0x1, 0x13, 0x9, 0x2, 0xc7, 0x3, 0x2, 0x3, 0x1ada, 0xc, 0x3, 0x4, 0x40, 0xfff, 0x87f2, 0x0, 0x5, 0x6, 0x7, 0xd928, 0x0, 0x1, 0x6, 0x7, 0x0, 0x8, 0x200, 0x8001, 0x0, 0x8, 0x8, 0x1, 0x0, 0x7, 0x1, 0x9, 0xd235, 0x200, 0x6, 0x9, 0x9ac, 0x4, 0xfff, 0x3b4, 0x4, 0xf15, 0xfffffff7, 0x8, 0x5, 0x0, 0x81, 0x6a, 0x2c, 0x7ff, 0x7fff, 0x9, 0x40000000, 0x80000000, 0x0, 0x7, 0xf76, 0x3, 0x800, 0x300, 0x2, 0x3, 0x1f, 0xb, 0x0, 0x2380, 0x80, 0x7, 0x9, 0x3, 0x5, 0x8, 0x4, 0x2, 0x8000, 0x6, 0x1, 0x8, 0xffffffff, 0x7, 0x9, 0x2, 0xc, 0x6, 0x8, 0xfffffffb, 0x7f, 0x2, 0x3, 0x7, 0x9, 0x800, 0x58ee, 0x4dee2295, 0x7, 0xfff, 0xffffffff, 0x3, 0x0, 0x7, 0xf02, 0x4, 0xec93a69, 0x1, 0x1, 0x5, 0xff, 0x877b, 0x2, 0x0, 0xffff, 0x6df8, 0x3, 0x6, 0x3, 0x8, 0x4, 0x9, 0x6, 0x0, 0x100, 0x6, 0x5c0, 0x0, 0x0, 0x9, 0x3, 0xff, 0xfffffff7, 0x0, 0x8, 0x7, 0x0, 0x7, 0x2, 0x7, 0x51af, 0x1ff, 0x4, 0x96df, 0x1, 0x0, 0x536e, 0x532, 0x8, 0x5, 0xffffffff, 0x4d6, 0x8001, 0x3, 0xf, 0x401, 0x8, 0x6, 0xb, 0xd6a, 0x1ff, 0x10000, 0x800, 0x2, 0x10001, 0x8, 0x2, 0x10, 0x8, 0x4, 0xffffffff, 0xaf4, 0x2, 0x8, 0x2, 0x1, 0x4, 0x10000, 0xff, 0xfffffff2, 0x5, 0x6, 0x6]}], [@TCA_POLICE_PEAKRATE={0x0, 0x3, [0x8862, 0x2, 0xf, 0x100000, 0x9, 0x1, 0x538, 0x5d, 0xa, 0x3, 0x3, 0x3, 0x8, 0xd15, 0x1a65, 0x7fffffff, 0x80000000, 0x4, 0x800, 0x400, 0x9, 0x6, 0x0, 0xba3, 0xfffffffe, 0x1000, 0x2, 0x96a, 0x80000000, 0x6, 0x2, 0x2, 0x0, 0x3, 0x7fffffff, 0x3, 0x3, 0x7ff, 0x1000, 0x7f, 0x1d, 0xfff, 0x7, 0x0, 0x5, 0x4, 0x6, 0x4, 0x1, 0x8, 0x4, 0x2, 0x76, 0x1122, 0x4, 0x6, 0x70, 0xfffffff8, 0x9, 0x4, 0x2bd0, 0x9, 0xc3f6, 0xffff, 0x9, 0x6, 0xf89, 0x4, 0x5f, 0x4, 0xffff, 0x1e5, 0x9, 0x1, 0x2, 0x7, 0x2, 0x0, 0xffffffff, 0xfffffffd, 0x81, 0xd, 0x7f, 0x3, 0x200, 0x1000, 0x7, 0x7f, 0xa1, 0x272c1f36, 0x7, 0x7ff, 0x2, 0x80, 0x6, 0x8, 0x0, 0xff, 0x8, 0xffff, 0x2, 0x8, 0x1, 0x8, 0xff, 0xbc0, 0x8, 0x9, 0xf, 0x4, 0x80, 0x5afc, 0xffff, 0x3, 0x4, 0x4, 0x200, 0x7, 0x8, 0x2, 0x72, 0xffff, 0x2, 0x1, 0x7f, 0x1000, 0x10000, 0x5, 0xc51, 0x1, 0x1, 0x81, 0xdba, 0x231, 0xfffffffa, 0x4, 0x100, 0xfffffff8, 0x9, 0x9, 0xffff, 0x8, 0x7ff, 0x1, 0x0, 0x3, 0x3, 0xf, 0x10001, 0x7fff, 0x3, 0xfffffff2, 0x3ffc0, 0x9, 0xb, 0x9, 0x5, 0x4, 0x2, 0x8, 0x8, 0xfd9a, 0x4, 0x0, 0x3, 0x6, 0x4800, 0xfff, 0x2, 0xffffff8d, 0x2, 0x40, 0x1, 0x9, 0x6, 0x8, 0x1, 0xfffffffe, 0x6, 0x9, 0x0, 0x2, 0x82, 0xb9, 0x6, 0xc, 0x8, 0x100000, 0x4, 0x8, 0x5, 0x0, 0x0, 0x1, 0x4, 0x5, 0x3, 0xca0d, 0x2, 0x5, 0x7fff, 0x401, 0x1, 0x9, 0xf37, 0x7, 0x8d, 0x0, 0x7fff, 0x81, 0x7, 0x6, 0x2, 0x10001, 0x2, 0x5, 0x4a, 0x3, 0x3, 0x6, 0x1, 0x7f, 0x1, 0x1ff, 0x4a9, 0xff, 0x9, 0x7, 0xb520, 0x6, 0x7fff, 0x6, 0x8000, 0x6, 0x81, 0x9, 0x5, 0x62, 0x400, 0x6, 0x1, 0x6, 0x7, 0xf9, 0xef3, 0x24d, 0x80000000, 0x2f, 0x800, 0x5, 0xadb74ee, 0x800, 0x8, 0x9, 0x3, 0x5ff]}, @TCA_POLICE_AVRATE, @TCA_POLICE_RATE={0x0, 0x2, [0x4, 0x5, 0x9, 0x0, 0x6, 0xa333, 0x9, 0x3, 0x8, 0x6, 0xfffffff7, 0xfffffff3, 0x4c, 0x2e5f0ba3, 0x5, 0xc0c, 0xf, 0x8001, 0x1, 0x5, 0xffffffff, 0xfffffffb, 0x7555, 0x0, 0x8, 0x40, 0x2, 0x0, 0x6, 0x100, 0x9, 0x4, 0x1, 0x4, 0x492b, 0x80000000, 0x101, 0x2, 0x7, 0x2, 0xfff, 0x0, 0x80, 0x9, 0x3, 0x1, 0x235b, 0xffffffff, 0x91a, 0x4, 0xfffffff9, 0x4, 0x10000, 0xce, 0xfca, 0x1, 0x4, 0x9, 0xff, 0x0, 0x6db3, 0x8, 0x40000000, 0xfffffff9, 0x7, 0x1, 0x1, 0x2, 0x8, 0x7, 0x6, 0x9, 0x1, 0x8, 0x8, 0x7, 0x8001, 0x229, 0x2, 0xff, 0x1ff, 0x55ca7e26, 0x2, 0x400, 0x2, 0x1, 0x5, 0x81, 0xfff, 0xcea, 0xd, 0x80000000, 0x1ff, 0x6, 0xa966, 0x0, 0x6, 0xbcb2, 0x2, 0x6, 0x6ba5f126, 0xd7, 0xfffffff4, 0x5, 0x6, 0x4, 0x2, 0x2f, 0x4, 0xffffffff, 0x0, 0x4, 0x1, 0x2, 0x2c79, 0x1, 0x0, 0xffff, 0x990, 0x1000, 0x20e0136c, 0x3, 0x2, 0x5, 0x4, 0x2, 0xc, 0xfae7, 0x5, 0x23a, 0x7fffffff, 0x6, 0x400, 0x4, 0x7, 0x4, 0x13, 0x7, 0x436b4e7e, 0x0, 0x3, 0xd, 0xed44, 0x1, 0x40, 0x7, 0x7664ce6c, 0x9, 0x5, 0x2, 0x3, 0x2, 0x4, 0x9a1, 0x42c, 0x6, 0x80, 0x3, 0x80000000, 0x1000, 0x5, 0xa2, 0xffffffd8, 0x3, 0x8, 0x2400000, 0x2, 0x6, 0x9, 0xfff, 0x7, 0x0, 0x42, 0x295, 0xffffffff, 0x69f0, 0x9, 0x200, 0x200, 0x2, 0x0, 0x4, 0x0, 0x8, 0x4, 0x4, 0x6, 0x9, 0x400, 0x9, 0x3, 0x6, 0x3, 0x5, 0x5, 0x1, 0xa8, 0x3, 0x8, 0x6, 0x4, 0x80, 0x7, 0x1, 0x3c1, 0x3c2, 0x100, 0xe4a, 0x7, 0x3, 0x82, 0x6, 0x0, 0x1, 0x4, 0x1ff, 0x8, 0x7, 0xffff8722, 0x66, 0x3ab, 0x9, 0x0, 0x7, 0x4, 0x3, 0x9f0, 0x1, 0x1, 0x1, 0xc, 0xe, 0x80000000, 0x4, 0x7fffffff, 0x8, 0x6, 0x200, 0x4, 0x2, 0x4, 0x4f, 0x8, 0x8, 0x8, 0x6400000, 0xc, 0x2, 0xfffffffe, 0x6, 0xd5e6, 0x4, 0xe02, 0x5, 0x4d8, 0x8]}, @TCA_POLICE_RESULT={0x0, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x4, 0x5, 0x80, 0xfffffffd, 0x1000, 0x8, 0x7, 0x1, 0x80000000, 0x0, 0xffff, 0x4, 0x401, 0x5, 0x3, 0x0, 0x6, 0x7, 0xec, 0x8, 0xfffffffd, 0x6, 0xb, 0x10000, 0x34715a81, 0x93f4, 0x5, 0x4c5, 0xb, 0x1, 0x2, 0x7fff, 0x0, 0x9, 0x1, 0x1, 0x800, 0x40, 0x1, 0x2, 0x46, 0x2, 0x0, 0xffff, 0x2, 0x2ed02896, 0x2, 0x5, 0x5c, 0x1a7, 0x7f8, 0x0, 0x6db, 0x1fa, 0x0, 0x54, 0x77, 0x1, 0x9, 0xea, 0x11, 0x3, 0x6, 0x7ff, 0x1, 0x9, 0x5, 0xd, 0x10, 0x100, 0x3, 0x5, 0x3, 0x8, 0x2, 0x1ff, 0x100, 0x0, 0x7f, 0x3, 0xfff, 0x1, 0x7, 0x5, 0xa, 0x5, 0xf0ab465, 0xfff, 0x8, 0x9, 0x4, 0x3ff, 0xc, 0x6, 0x401, 0x71, 0x6, 0x6, 0x5, 0x3ff, 0x2, 0x0, 0x401, 0x2000, 0x7fffffff, 0xfff, 0x0, 0x9, 0x0, 0x4, 0x93e3, 0xc, 0x7, 0x5, 0xd, 0x5, 0x48, 0x1, 0x0, 0x4, 0xa482, 0x3, 0x1, 0x9, 0x6, 0x400, 0x1ff, 0x3, 0x4126, 0x2, 0x3, 0x401, 0x3, 0xffffffff, 0x1, 0x48066f78, 0x1, 0x89, 0x7, 0x5, 0xffffffff, 0x3, 0x6, 0x7, 0x10000, 0x2, 0x800, 0x9, 0x7, 0x5, 0x2, 0x0, 0x4, 0x4, 0x3, 0x7f, 0x0, 0x10001, 0x3c62, 0x5, 0xf8, 0x80, 0x101, 0x6, 0x3ff, 0x9, 0x1, 0x4, 0x89, 0x8, 0x40, 0x0, 0x7ff, 0x7fff, 0x6, 0x4, 0x0, 0x2, 0x6, 0x8, 0x77109079, 0x6, 0x11a, 0x1, 0x55, 0xa, 0xca23, 0x8, 0x401, 0x3, 0x3, 0x1, 0x9, 0x10000, 0x800, 0x2, 0xb0000000, 0x2, 0x5, 0x7a85, 0x0, 0x8001, 0x7fffffff, 0x8, 0x8000, 0x7fff, 0x3, 0x4, 0xd193, 0xffff, 0x1e5c, 0x8f, 0x3, 0x2541, 0x0, 0x5, 0x2f82, 0x8, 0x5, 0x743d1923, 0x3, 0x10001, 0x80000000, 0x64886af2, 0xe2, 0x10001, 0x2, 0xf93c, 0x9, 0x8, 0x4, 0xc3, 0x739, 0x5, 0x4, 0x5, 0x8, 0x1, 0x101, 0xffff077c, 0x7ff, 0x6, 0x4, 0x4, 0x8f6e, 0x10, 0x0, 0x5, 0x4, 0x1a70, 0x18000, 0x7, 0x2, 0x68e, 0xdaf, 0x3]}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x7f}, @TCA_POLICE_RATE={0x0, 0x2, [0xc08, 0x1ae0e1a4, 0xb8e, 0xb24, 0x2, 0xff, 0x2, 0x3, 0x1, 0x9, 0x394, 0x1, 0x5, 0xf, 0x9, 0x2, 0x80000000, 0x3, 0x6, 0x2, 0x9, 0x5, 0x40, 0xa, 0xd, 0x8, 0x2, 0x6, 0x4, 0xfff, 0x7f, 0x6, 0xb, 0x8, 0x9, 0x80, 0x2e933858, 0x8001, 0x1, 0xe5b, 0xfffffe01, 0x0, 0x9cae, 0x9, 0x5, 0x2, 0x9c1, 0xeda6, 0x4, 0x9, 0xf, 0xb7b, 0xfffffffd, 0x1, 0x6, 0x5, 0x101, 0x4, 0x2, 0x7ff, 0x800, 0x3, 0x3, 0x3, 0x0, 0x0, 0xffffffff, 0xfffffffb, 0x1a5d, 0x3ff, 0x4, 0x0, 0x7fffffff, 0x0, 0x7, 0x83, 0x3, 0x4, 0x2, 0x2, 0x80000001, 0x1ff, 0x0, 0x6, 0x7c74, 0x1, 0xce, 0x343, 0x1000, 0x40000000, 0x7, 0x1ff, 0x2, 0x1ff, 0x9, 0x3, 0x4, 0x5, 0x6, 0x7, 0x2, 0x1fffc, 0x18f, 0x3, 0x0, 0x9, 0x6, 0x8020, 0x5, 0x5, 0x3, 0x8, 0x4, 0x9, 0x5, 0xfffffa52, 0x47, 0xfffffff3, 0x10000, 0x4, 0x2, 0x2, 0x5, 0xfff, 0x8, 0x8, 0xfffffffd, 0x0, 0x4, 0xfb0d, 0x4, 0x9, 0xf8be, 0x5, 0xd, 0x2, 0x8661, 0x7, 0x3ff, 0x5, 0xc, 0x7f, 0x6, 0x101, 0x9, 0xfffffffc, 0x10, 0x5, 0x6, 0x9, 0x3, 0x0, 0x1, 0xa7a0, 0x8, 0x81, 0x5, 0x6, 0x5, 0x80, 0xffff, 0x1, 0x100, 0xfffffff9, 0x10001, 0x8, 0x10001, 0x4, 0x8, 0x0, 0x8, 0x0, 0x6, 0x5f, 0xfff, 0x4, 0x9e, 0x5, 0x5, 0x7000000, 0x4, 0x4, 0x9, 0x3, 0x4, 0x7, 0x3, 0x40, 0x3, 0x0, 0x0, 0x2, 0x419, 0x4, 0x8, 0x2, 0x7, 0x5, 0x8000, 0x6, 0x3ff, 0x5, 0x2, 0x9, 0x6e7d, 0x0, 0x9, 0xffff15c1, 0x10000, 0x6, 0xffffff00, 0x4, 0x5, 0xfffff001, 0x81, 0x4, 0x3, 0xc9e8, 0x7, 0x100, 0x0, 0x5, 0x8001, 0xb9, 0x3, 0x9, 0x650, 0x7, 0x8001, 0x7, 0x10, 0x5, 0x3c, 0x9, 0x3, 0x9, 0x2, 0x3, 0x8, 0x0, 0x0, 0xfffffff7, 0x5, 0x40, 0x4, 0x7d0, 0x1, 0x8, 0x613, 0x10000, 0x65d2, 0x6, 0x9, 0x10000, 0x1, 0x68fc]}]]}, {0x4}, {0xc, 0x7, {0xb52af6ad64ec03f}}, {0xfffffffffffffc66, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x178}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x73bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) (async) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffb29d, 0x8001, 0xd1ad045825a3ada6, 0x4, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffb29d, 0x8001, 0xd1ad045825a3ada6, 0x4, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) pwritev(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1, 0x2, 0x80) (async) pwritev(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1, 0x2, 0x80) pwrite64(r0, 0x0, 0x0, 0xda8) (async) pwrite64(r0, 0x0, 0x0, 0xda8) 1.672879352s ago: executing program 0 (id=2063): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x98}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000003340)=ANY=[@ANYBLOB="c812000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000040a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x12c8}}, 0x0) 1.34847222s ago: executing program 4 (id=2064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000480), 0x2, r1}, 0x38) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xffff, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x10, 0x803, 0x6) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$kcm(r5, &(0x7f0000001c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)="d2f5fd61e82cf79d7d7ffd8b431ca3c810016962e22b845c8d175eca947815ab5db763f59e60b6bda27dc9542e19e8034223a8c2d3ad34c8296f0684be13f6af3869a595b52b411844690b8956827f5db7a2c16a368496f227960c3190d20364466f2d0f978176fdd6f9d5c82fd69564d84cc78091edfd2822f66d608d464b4c306f3404ba1e7be28d7a3f16ddd73549d6e9a37d41f007d5cd10fd07a0b9b4fc9b4f83a51ce0957eda73b6751e2c24581cf45930ef07d6bcc9b0f04bffc5ff89df4bb3568e40fedd8cefaa8b3d92d0662c45b3dfa9d0ec9584bc700aa9ddabe4d609d831b1c0976c73", 0xe9}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="4cc3434110fbc7ea598ec149049c589dc999414fea1d59bdcf553b024b680b1255942070558566f0c5bf1535ab", 0x2d}, {&(0x7f0000001680)="7d5dc649359a7e3b2694719f926808d8cbe0e32bc5cf86015825eb616f9eccf7d12701e813dc203cb5c250662187f3c826b381e2d070c3720b495803a4792f065041f56409d5cb34eb4ce59e03efc1d9cec5edb2acd65abfcaf576f21a4e4fa9c768209a1d64804a685bde93658585a327f4c03d14528daa85f17d46f43b188f3bce77a7b21e249f0d5af6fa78b0bb4acffa10f18041c5ae897ff1d6b0b8cd1571dbc9d4af723f2fceba22bd1129b1d50d0631dc", 0xb4}, {&(0x7f0000001740)="37be8ccc5981e4118fec261323a548676d1221b411a0012272e5152167a71288db9066a4304ad490847948b44f2d086047527c187fb0bbb5db725473b6734043aef40cf5d8243557d447494641", 0x4d}], 0x5, &(0x7f0000001840)=[{0x28, 0x84, 0x340, "db5ff35bbe827a620667d4fa23d5fe1efb8ab651"}, {0x100, 0x108, 0x1, "380576b59e9368e6ba55320459af67c9be02697c210b3ec5c1904ecdbae6c93863802b57e208e47e96dc1ac40538a359105713ea8fe2d3c475de257e5ee90068a8d4205d6c92988766868be4b1f040aecbb9b48b574692a07a1456b4901d9b528ff8b0af06ee986626dd2114df3eb56cc7d0ba5303266bf23b3bbf87fadaf2c1d20dae96021aa708ed9fac2b6603313a7c9c4d663a93c355cda207cb4ea30833ccf79e30c7bf493d8e26b5947492a9e5c15aa392fe2899d1dd6a962d0de34b0a754c1f7d7e73a86221d9e77c15b02e74c3710f885a2ef8729ab91be69cf73b4c6cea75d3ffcdd3b600128daba6"}, {0xf8, 0x119, 0x4, "d0856465469420bd67170e1ac27510e0c0e62ea046c4e9a4413d2223d0736ee8a4e905bd3d17ae4387391487d06ce6cb53fa6c1ac48138438f81981ba992099d561d2844239cd0198785d5269aece707be25e57df1752f100251bcb1409a2155e8ee870e7eadd8a3c2919c2a78fe628feaa41e8d86bbe05e91b799cd7be4f23b7e0429cce3edae04a21f74a61413ce1ce2e5558a0f31c142125cf0722fe06a76859b532431cf8df8f17790efdb10bf84409bc1de205a8a7180db7e16c2d0d41a403707d671de448dbad7419b684188a88ba88e2263437ebf14de25be5fac4d2eca203303"}, {0xd0, 0xff, 0x5, "c5cc1c9d2c75881e4e701132dd4012ef87c8a014b01d8bc686c6be3c6dacf1678901cf38f6ca0d6972b644177b0ac78cf83f96e95522373d17f7b063677e677bde7c0d3b14125ff88ac83e4de9433c2a061b2d7fbe21612ae7a35df80e05508b17b8238f181dc0a617a68160ddebeb8431c3140d9dfd751d4808c77150d402080f3e208c672d14a161c5fa184b833c28517bf2eb486c8419c212e2f0b084c971d15a1feed21c900814fa335e36f6e69292c10bd4e8f8322aeae77c"}, {0xe8, 0x115, 0x1, "220f3cc3aa2b1b4621a360fe55f2766e3ef5dc00798b2e1db1693b411d591bb6b093b1548b91959f8fad7be3c767161c3d354092228dbbc17a54551b6acc5e699c835d32fc9e0eb3f0836d8868d3e7eccf7ebbea460e42fa9c8a4f7ead7d348843c77187e169503b9645c345f497fd46da1618debfd5c296efb22aaed22613ff0650ac00880639bd9677da169797f4d70c4eac64753d114cb717f22a19a9d8266f85c04012882d590fea21107b1e6a2339db27bd26c043d6eeccac6a5f635bd286a1b75b6b2b97e4bfbda6f114fb5ea316719bdb76"}], 0x3d8}, 0x8000) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r4, 0x1, 0x2, 0x6, @local}, 0x14) 1.329908092s ago: executing program 0 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1e, 0x10001, @l2={'eth', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x404c000) 1.189784003s ago: executing program 5 (id=2066): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7f, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000900)={r5, 0x1000, 0x1, 'S'}, 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @remote}}, [0xf09b, 0x8, 0xfffffffffffffffc, 0x400, 0x69, 0x3, 0x0, 0x1, 0xa, 0x7, 0x7, 0x8, 0x9, 0x9, 0x40]}, &(0x7f00000002c0)=0x100) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r7, 0x0, 0x4, 0x0, &(0x7f0000000180)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8, 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)={r6, 0x5e0, 0x6, [0x1ff, 0x97cd, 0x3, 0x5, 0x3df, 0x11]}, 0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000900)=r10, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000011000408f0ef8ce8b790c0ff4e21790067ceab00127706a53ccd2ed834e347ba757681855529e0000960df5d6", @ANYRES32=r13, @ANYBLOB="408e01000a200200280012800e0001006970366772657461700000001400028006000f0009000000060011004e220000"], 0x48}, 0x1, 0x0, 0x0, 0x400cc17}, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e23, 0x101, @mcast1, 0x1}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) 1.008926272s ago: executing program 0 (id=2067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000000)='*:!\x00', 0x1c1000, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x3]}, {0x401, 0xf02c, 0x8, 0x100}}, 0x400, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xfffffc00}) r1 = socket$pptp(0x18, 0x1, 0x2) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xd, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000051f531177bd2dced0100000000000000000a0000060900020073797a31000000000900010073797a310000104014000380100000800c00018006000100000000001400af001100010000000000000000000100000a5de60c73248e56a69417fa3965c11d96e800d8f45bd1a7f5ec8861fecb6fce0dbf6b1e5c27bbd0a3dd60608990e286afcd8f700cc1975e6f6f0be63bbc649eec02340b44407c6594868586"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) 971.960282ms ago: executing program 7 (id=2068): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r3}, 0x38) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 156.272132ms ago: executing program 5 (id=2069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0400"}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f0000000200)=r2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c000180", @ANYRES64=r0], 0xb0}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) 41.598263ms ago: executing program 7 (id=2070): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@getqdisc={0x48, 0x26, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xf, 0xc}, {0x4, 0xfff2}, {0xb, 0x7}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x40109, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 0s ago: executing program 5 (id=2071): r0 = socket(0x2b, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c00000001084175ebafbbc2045e11fd00000000000000000000000000c97fd96536eb89160ac63a29c5dd54b4248c7f4f4e0f4391802cffd70d3560cab191b6fe8ee06747a49428d121f55100a5ab45227ea9670b28ccdd476f4dddfe0b7a76a631495a93c4ecb6e9aef7842e57d8085e0677e7706c033e4253d55fc60dea003fb30796d49ee13fc8109a8244d1024c4ee7b17a6eff0bbc", @ANYRES32=0x0, @ANYBLOB="2e2002000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x20008880) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'dummy0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r6, @ANYBLOB="04002abd7000fddbdf25170000002c00018008000100", @ANYRES32=r3, @ANYBLOB="08000300030000000800030003000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="4c0001800800030001000000140002006361696630000000000000001400020076657468305f746f5f62617461647600080003000200000008000100"/72, @ANYRES32=r3, @ANYBLOB="5c0001801400020067656e6576653100000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000300030000000800030000000000140002006e69637666300000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300020000001400018008000300b5eeabce08000100", @ANYRES32=r3, @ANYBLOB="340001801400020063616966300000000000000000000000140002006272696467653000000000000000000008000300000000003c000180080003000200000008000100", @ANYRES32=r8, @ANYBLOB="140002006261746164765f736c6176655f3000001400020064766d727030000000000000000000001400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="300001800800030002000000080003000000000008000300030000001400020076657468315f766c616e000000000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000800}, 0x40800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r13, 0x0, 0x8000) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b906, 0x25dfdc01, {0x0, 0x0, 0x0, r15, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040f4}, 0x4890) r16 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r16, &(0x7f0000000280)="05", 0x1, 0x4088, &(0x7f0000000140)={0x11, 0x86dd, r17, 0x1, 0x3, 0x6, @remote}, 0x14) kernel console output (not intermixed with test programs): 09][T10758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.204620][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.204765][T10758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.237240][T10758] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1103'. [ 240.250220][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.250472][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.331585][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1104'. [ 240.333225][T10759] IPVS: Scheduler module ip_vs_sip not found [ 240.660316][T10781] netlink: 'syz.3.1110': attribute type 1 has an invalid length. [ 240.660358][T10781] netlink: 'syz.3.1110': attribute type 12 has an invalid length. [ 240.660410][T10781] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1110'. [ 240.666807][T10779] netlink: 'syz.3.1110': attribute type 1 has an invalid length. [ 240.666867][T10779] netlink: 'syz.3.1110': attribute type 12 has an invalid length. [ 240.666917][T10779] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1110'. [ 240.738080][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'. [ 240.963097][T10799] netlink: 'syz.0.1114': attribute type 2 has an invalid length. [ 241.001636][T10776] netlink: 'syz.5.1109': attribute type 11 has an invalid length. [ 241.001786][T10797] netlink: 'syz.5.1109': attribute type 11 has an invalid length. [ 241.945263][T10824] Bluetooth: hci0: unsupported parameter 5135 [ 241.945317][T10824] Bluetooth: hci0: unsupported parameter 8192 [ 241.945356][T10824] Bluetooth: hci0: unsupported parameter 5135 [ 241.945371][T10824] Bluetooth: hci0: unsupported parameter 8192 [ 242.222506][T10843] syzkaller1: entered promiscuous mode [ 242.229327][T10843] syzkaller1: entered allmulticast mode [ 242.291203][T10845] FAULT_INJECTION: forcing a failure. [ 242.291203][T10845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.291284][T10845] CPU: 0 UID: 0 PID: 10845 Comm: syz.4.1124 Not tainted syzkaller #0 PREEMPT(full) [ 242.291315][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.291333][T10845] Call Trace: [ 242.291423][T10845] [ 242.291525][T10845] dump_stack_lvl+0xe8/0x150 [ 242.291779][T10845] should_fail_ex+0x410/0x560 [ 242.292041][T10845] _copy_from_user+0x2d/0xb0 [ 242.292172][T10845] __sys_bpf+0x2e7/0xd90 [ 242.292310][T10845] ? __pfx___sys_bpf+0x10/0x10 [ 242.292425][T10845] ? __fget_files+0x2a/0x420 [ 242.292598][T10845] ? ksys_write+0x242/0x270 [ 242.292690][T10845] ? __pfx_ksys_write+0x10/0x10 [ 242.292786][T10845] __x64_sys_bpf+0xba/0xd0 [ 242.292849][T10845] do_syscall_64+0x166/0x520 [ 242.293055][T10845] ? trace_irq_disable+0x3b/0x140 [ 242.293108][T10845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.293202][T10845] ? clear_bhb_loop+0x70/0xc0 [ 242.293297][T10845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.293351][T10845] RIP: 0033:0x7f69e559e159 [ 242.293428][T10845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.293472][T10845] RSP: 002b:00007f69e63be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.293568][T10845] RAX: ffffffffffffffda RBX: 00007f69e5825fa0 RCX: 00007f69e559e159 [ 242.293611][T10845] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 242.293644][T10845] RBP: 00007f69e63be090 R08: 0000000000000000 R09: 0000000000000000 [ 242.293684][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.293716][T10845] R13: 00007f69e5826038 R14: 00007f69e5825fa0 R15: 00007ffeac06d378 [ 242.293794][T10845] [ 242.574053][T10854] tipc: New replicast peer: 172.20.20.187 [ 242.592746][T10854] tipc: Enabled bearer , priority 10 [ 243.006797][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 243.418333][T10881] __nla_validate_parse: 6 callbacks suppressed [ 243.418386][T10881] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1133'. [ 243.774293][T10891] x_tables: duplicate underflow at hook 1 [ 243.797996][T10876] bond4 (unregistering): Released all slaves [ 244.111488][T10901] tipc: Enabled bearer , priority 0 [ 244.122162][T10901] syzkaller0: MTU too low for tipc bearer [ 244.122203][T10901] tipc: Disabling bearer [ 244.208275][T10901] tipc: Enabling of bearer rejected, failed to enable media [ 244.304935][T10907] FAULT_INJECTION: forcing a failure. [ 244.304935][T10907] name failslab, interval 1, probability 0, space 0, times 0 [ 244.304993][T10907] CPU: 0 UID: 0 PID: 10907 Comm: syz.2.1137 Not tainted syzkaller #0 PREEMPT(full) [ 244.305018][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.305066][T10907] Call Trace: [ 244.305106][T10907] [ 244.305147][T10907] dump_stack_lvl+0xe8/0x150 [ 244.305259][T10907] should_fail_ex+0x410/0x560 [ 244.305404][T10907] should_failslab+0xa8/0x100 [ 244.305524][T10907] __kmalloc_cache_node_noprof+0xaa/0x620 [ 244.305637][T10907] ? __get_vm_area_node+0x155/0x2f0 [ 244.305726][T10907] ? __get_vm_area_node+0x155/0x2f0 [ 244.305820][T10907] __get_vm_area_node+0x155/0x2f0 [ 244.305915][T10907] __vmalloc_node_range_noprof+0x343/0x1540 [ 244.305992][T10907] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 244.306062][T10907] ? __lock_acquire+0x6df/0x2e50 [ 244.306229][T10907] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 244.306342][T10907] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 244.306405][T10907] __vmalloc_noprof+0xd2/0x120 [ 244.306479][T10907] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 244.306566][T10907] bpf_prog_alloc_no_stats+0x47/0x560 [ 244.306651][T10907] ? bpf_prog_alloc+0x2a/0x1a0 [ 244.306716][T10907] bpf_prog_alloc+0x3c/0x1a0 [ 244.306787][T10907] bpf_prog_load+0x7f8/0x1c20 [ 244.306884][T10907] ? __pfx_bpf_prog_load+0x10/0x10 [ 244.307015][T10907] __sys_bpf+0xd0d/0xd90 [ 244.307099][T10907] ? __pfx___sys_bpf+0x10/0x10 [ 244.307195][T10907] ? __fget_files+0x2a/0x420 [ 244.307319][T10907] ? ksys_write+0x242/0x270 [ 244.307405][T10907] ? __pfx_ksys_write+0x10/0x10 [ 244.307499][T10907] __x64_sys_bpf+0xba/0xd0 [ 244.307562][T10907] do_syscall_64+0x166/0x520 [ 244.307653][T10907] ? trace_irq_disable+0x3b/0x140 [ 244.307706][T10907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.307766][T10907] ? clear_bhb_loop+0x70/0xc0 [ 244.307838][T10907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.307893][T10907] RIP: 0033:0x7f45ee99e159 [ 244.307960][T10907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.308025][T10907] RSP: 002b:00007f45ef87c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.308089][T10907] RAX: ffffffffffffffda RBX: 00007f45eec25fa0 RCX: 00007f45ee99e159 [ 244.308141][T10907] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 244.308174][T10907] RBP: 00007f45ef87c090 R08: 0000000000000000 R09: 0000000000000000 [ 244.308207][T10907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.308246][T10907] R13: 00007f45eec26038 R14: 00007f45eec25fa0 R15: 00007ffeb011e0b8 [ 244.308332][T10907] [ 244.339554][T10907] syz.2.1137: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 244.339770][T10907] CPU: 0 UID: 0 PID: 10907 Comm: syz.2.1137 Not tainted syzkaller #0 PREEMPT(full) [ 244.339833][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.339867][T10907] Call Trace: [ 244.339882][T10907] [ 244.339912][T10907] dump_stack_lvl+0xe8/0x150 [ 244.340006][T10907] warn_alloc+0x24d/0x270 [ 244.340098][T10907] ? __kasan_kmalloc+0x22/0xb0 [ 244.340176][T10907] ? __pfx_warn_alloc+0x10/0x10 [ 244.340258][T10907] ? __get_vm_area_node+0x155/0x2f0 [ 244.340353][T10907] ? __get_vm_area_node+0x2a9/0x2f0 [ 244.340458][T10907] __vmalloc_node_range_noprof+0x36b/0x1540 [ 244.340541][T10907] ? __lock_acquire+0x6df/0x2e50 [ 244.340675][T10907] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 244.340780][T10907] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 244.340841][T10907] __vmalloc_noprof+0xd2/0x120 [ 244.340917][T10907] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 244.340978][T10907] bpf_prog_alloc_no_stats+0x47/0x560 [ 244.341001][T10907] ? bpf_prog_alloc+0x2a/0x1a0 [ 244.341027][T10907] bpf_prog_alloc+0x3c/0x1a0 [ 244.341054][T10907] bpf_prog_load+0x7f8/0x1c20 [ 244.341091][T10907] ? __pfx_bpf_prog_load+0x10/0x10 [ 244.341142][T10907] __sys_bpf+0xd0d/0xd90 [ 244.341178][T10907] ? __pfx___sys_bpf+0x10/0x10 [ 244.341222][T10907] ? __fget_files+0x2a/0x420 [ 244.341267][T10907] ? ksys_write+0x242/0x270 [ 244.341300][T10907] ? __pfx_ksys_write+0x10/0x10 [ 244.341334][T10907] __x64_sys_bpf+0xba/0xd0 [ 244.341358][T10907] do_syscall_64+0x166/0x520 [ 244.341390][T10907] ? trace_irq_disable+0x3b/0x140 [ 244.341410][T10907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.341433][T10907] ? clear_bhb_loop+0x70/0xc0 [ 244.341460][T10907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.341481][T10907] RIP: 0033:0x7f45ee99e159 [ 244.341502][T10907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.341520][T10907] RSP: 002b:00007f45ef87c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.341541][T10907] RAX: ffffffffffffffda RBX: 00007f45eec25fa0 RCX: 00007f45ee99e159 [ 244.341557][T10907] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 244.341572][T10907] RBP: 00007f45ef87c090 R08: 0000000000000000 R09: 0000000000000000 [ 244.341591][T10907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.341617][T10907] R13: 00007f45eec26038 R14: 00007f45eec25fa0 R15: 00007ffeb011e0b8 [ 244.341651][T10907] [ 244.353471][T10907] Mem-Info: [ 244.353515][T10907] active_anon:6662 inactive_anon:0 isolated_anon:0 [ 244.353515][T10907] active_file:0 inactive_file:43424 isolated_file:0 [ 244.353515][T10907] unevictable:0 dirty:236 writeback:0 [ 244.353515][T10907] slab_reclaimable:11045 slab_unreclaimable:105093 [ 244.353515][T10907] mapped:34837 shmem:527 pagetables:1415 [ 244.353515][T10907] sec_pagetables:0 bounce:0 [ 244.353515][T10907] kernel_misc_reclaimable:0 [ 244.353515][T10907] free:1308659 free_pcp:10189 free_cma:0 [ 244.353671][T10907] Node 0 active_anon:26648kB inactive_anon:0kB active_file:0kB inactive_file:173504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139348kB dirty:944kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14432kB pagetables:5544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 244.353828][T10907] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 244.353967][T10907] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.354127][T10907] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 244.354229][T10907] Node 0 DMA32 free:1276000kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26648kB inactive_anon:0kB active_file:0kB inactive_file:173504kB unevictable:0kB writepending:944kB zspages:0kB present:3129332kB managed:2546708kB mlocked:0kB bounce:0kB free_pcp:40756kB local_pcp:19868kB free_cma:0kB [ 244.385911][T10907] lowmem_reserve[]: 0 0 0 0 0 [ 244.386045][T10907] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.386205][T10907] lowmem_reserve[]: 0 0 0 0 0 [ 244.386302][T10907] Node 1 Normal free:3943276kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.386466][T10907] lowmem_reserve[]: 0 0 0 0 0 [ 244.386572][T10907] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 244.386991][T10907] Node 0 DMA32: 1077*4kB (UME) 1043*8kB (UME) 246*16kB (UME) 284*32kB (UME) 95*64kB (UME) 62*128kB (UME) 11*256kB (UM) 3*512kB (M) 5*1024kB (UME) 7*2048kB (UME) 296*4096kB (UM) = 1275916kB [ 244.387439][T10907] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 244.410531][T10907] Node 1 Normal: 5*4kB (UM) 3*8kB (UM) 8*16kB (UM) 10*32kB (UM) 6*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943276kB [ 244.411024][T10907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.411084][T10907] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.411128][T10907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.411172][T10907] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.411291][T10907] 43947 total pagecache pages [ 244.411321][T10907] 0 pages in swap cache [ 244.411343][T10907] Free swap = 124996kB [ 244.411366][T10907] Total swap = 124996kB [ 244.411389][T10907] 2097051 pages RAM [ 244.411411][T10907] 0 pages HighMem/MovableOnly [ 244.411433][T10907] 428758 pages reserved [ 244.411454][T10907] 0 pages cma reserved [ 244.986655][T10914] netlink: 'syz.3.1138': attribute type 2 has an invalid length. [ 244.986729][T10914] netlink: 'syz.3.1138': attribute type 2 has an invalid length. [ 245.265212][T10914] syzkaller1: entered promiscuous mode [ 245.271423][T10914] syzkaller1: entered allmulticast mode [ 245.279086][T10914] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 246.022571][T10954] netlink: 'syz.2.1145': attribute type 13 has an invalid length. [ 246.401833][T10943] wg2 speed is unknown, defaulting to 1000 [ 246.402021][T10943] wg2 speed is unknown, defaulting to 1000 [ 246.501447][T10943] wg2 speed is unknown, defaulting to 1000 [ 246.512423][T10943] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 246.527035][T10943] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 246.544705][T10943] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 246.567859][T10943] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 246.621658][T10943] wg2 speed is unknown, defaulting to 1000 [ 246.632572][T10943] wg2 speed is unknown, defaulting to 1000 [ 246.653935][T10943] wg2 speed is unknown, defaulting to 1000 [ 246.675252][T10943] wg2 speed is unknown, defaulting to 1000 [ 246.690526][T10943] wg2 speed is unknown, defaulting to 1000 [ 246.704593][T10943] wg2 speed is unknown, defaulting to 1000 [ 246.786458][T10970] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1150'. [ 246.805711][T10961] netlink: 'syz.4.1148': attribute type 4 has an invalid length. [ 246.840334][T10961] netlink: 'syz.4.1148': attribute type 4 has an invalid length. [ 246.945630][T10977] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1153'. [ 246.967978][T10973] ovs-s: entered promiscuous mode [ 247.002681][T10973] openvswitch: ovs-s: Dropping previously announced user features [ 247.022089][T10979] openvswitch: ovs-s: Dropping previously announced user features [ 247.039381][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.039442][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.287631][T10991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1156'. [ 247.299112][T10990] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1157'. [ 247.363237][T10993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1157'. [ 247.378783][T10991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.448787][T10997] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1157'. [ 247.460711][T10998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.489060][T11003] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1157'. [ 247.502093][T10991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.694681][T11007] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1158'. [ 247.966720][T11018] FAULT_INJECTION: forcing a failure. [ 247.966720][T11018] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 247.966769][T11018] CPU: 1 UID: 0 PID: 11018 Comm: syz.0.1162 Not tainted syzkaller #0 PREEMPT(full) [ 247.966794][T11018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.966808][T11018] Call Trace: [ 247.966817][T11018] [ 247.966835][T11018] dump_stack_lvl+0xe8/0x150 [ 247.966873][T11018] should_fail_ex+0x410/0x560 [ 247.966912][T11018] prepare_alloc_pages+0x223/0x600 [ 247.966941][T11018] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 247.966969][T11018] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 247.967009][T11018] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 247.967036][T11018] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 247.967064][T11018] ? __pfx_policy_nodemask+0x10/0x10 [ 247.967089][T11018] ? __get_vm_area_node+0x155/0x2f0 [ 247.967119][T11018] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 247.967150][T11018] ? __vmalloc_noprof+0xd2/0x120 [ 247.967185][T11018] __alloc_pages_noprof+0x10/0x100 [ 247.967211][T11018] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 247.967242][T11018] ? alloc_pages_noprof+0x140/0x2b0 [ 247.967275][T11018] __kasan_populate_vmalloc+0xb7/0x1c0 [ 247.967317][T11018] alloc_vmap_area+0xd1a/0x1420 [ 247.967364][T11018] ? __pfx_alloc_vmap_area+0x10/0x10 [ 247.967392][T11018] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 247.967429][T11018] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 247.967464][T11018] ? __get_vm_area_node+0x155/0x2f0 [ 247.967500][T11018] __get_vm_area_node+0x200/0x2f0 [ 247.967539][T11018] __vmalloc_node_range_noprof+0x343/0x1540 [ 247.967573][T11018] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 247.967600][T11018] ? __lock_acquire+0x6df/0x2e50 [ 247.967650][T11018] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 247.967697][T11018] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 247.967722][T11018] __vmalloc_noprof+0xd2/0x120 [ 247.967753][T11018] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 247.967782][T11018] bpf_prog_alloc_no_stats+0x47/0x560 [ 247.967806][T11018] ? bpf_prog_alloc+0x2a/0x1a0 [ 247.967841][T11018] bpf_prog_alloc+0x3c/0x1a0 [ 247.967871][T11018] bpf_prog_load+0x7f8/0x1c20 [ 247.967910][T11018] ? __pfx_bpf_prog_load+0x10/0x10 [ 247.967963][T11018] __sys_bpf+0xd0d/0xd90 [ 247.967997][T11018] ? __pfx___sys_bpf+0x10/0x10 [ 247.968034][T11018] ? __fget_files+0x2a/0x420 [ 247.968083][T11018] ? ksys_write+0x242/0x270 [ 247.968118][T11018] ? __pfx_ksys_write+0x10/0x10 [ 247.968156][T11018] __x64_sys_bpf+0xba/0xd0 [ 247.968181][T11018] do_syscall_64+0x166/0x520 [ 247.968214][T11018] ? trace_irq_disable+0x3b/0x140 [ 247.968235][T11018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.968258][T11018] ? clear_bhb_loop+0x70/0xc0 [ 247.968286][T11018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.968309][T11018] RIP: 0033:0x7fae2339e159 [ 247.968330][T11018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.968350][T11018] RSP: 002b:00007fae242d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.968375][T11018] RAX: ffffffffffffffda RBX: 00007fae23625fa0 RCX: 00007fae2339e159 [ 247.968391][T11018] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 247.968406][T11018] RBP: 00007fae242d8090 R08: 0000000000000000 R09: 0000000000000000 [ 247.968420][T11018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.968433][T11018] R13: 00007fae23626038 R14: 00007fae23625fa0 R15: 00007fff6823f018 [ 247.968467][T11018] [ 248.373589][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1163'. [ 248.383608][T11029] netlink: 'syz.5.1163': attribute type 1 has an invalid length. [ 248.465169][T11029] bond0: entered promiscuous mode [ 248.471137][T11029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.526558][T11020] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1165'. [ 248.580797][T11038] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1166'. [ 248.593179][T11038] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1166'. [ 248.731552][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 249.417297][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 249.477324][T11079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1177'. [ 249.608087][T11082] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1180'. [ 249.617426][T11082] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 249.670367][T11086] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 249.813539][T11095] siw: device registration error -23 [ 249.826446][T11086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.907737][T11089] bond6: (slave veth0_to_bond): making interface the new active one [ 249.920772][T11089] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 249.944603][T11086] bond6: entered promiscuous mode [ 249.944652][T11086] veth0_to_bond: entered promiscuous mode [ 249.956296][T11086] bond6: entered allmulticast mode [ 249.961723][T11086] veth0_to_bond: entered allmulticast mode [ 249.966447][T11085] netlink: 'syz.4.1178': attribute type 13 has an invalid length. [ 250.133987][T11085] hsr0: left promiscuous mode [ 250.261559][T11089] macvlan3: entered promiscuous mode [ 250.261603][T11089] macvlan3: entered allmulticast mode [ 250.282111][T11089] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 250.306859][T11089] bond6: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 250.364829][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1185'. [ 250.416855][T11110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1186'. [ 250.794310][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'. [ 250.851303][T11127] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 250.855490][T11133] netlink: 'syz.5.1191': attribute type 3 has an invalid length. [ 250.881282][T11127] bond4 (unregistering): Released all slaves [ 250.916626][T11135] netlink: 'syz.4.1192': attribute type 11 has an invalid length. [ 251.549037][T11154] FAULT_INJECTION: forcing a failure. [ 251.549037][T11154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.549092][T11154] CPU: 1 UID: 0 PID: 11154 Comm: syz.5.1196 Not tainted syzkaller #0 PREEMPT(full) [ 251.549119][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.549133][T11154] Call Trace: [ 251.549142][T11154] [ 251.549152][T11154] dump_stack_lvl+0xe8/0x150 [ 251.549192][T11154] should_fail_ex+0x410/0x560 [ 251.549234][T11154] _copy_to_user+0x31/0xb0 [ 251.549279][T11154] bpf_prog_test_run_raw_tp+0x604/0x840 [ 251.549445][T11154] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 251.549475][T11154] ? __fget_files+0x2a/0x420 [ 251.549511][T11154] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 251.549540][T11154] bpf_prog_test_run+0x2c5/0x340 [ 251.549572][T11154] __sys_bpf+0xa22/0xd90 [ 251.549606][T11154] ? __pfx___sys_bpf+0x10/0x10 [ 251.549642][T11154] ? __fget_files+0x2a/0x420 [ 251.549690][T11154] ? ksys_write+0x242/0x270 [ 251.549725][T11154] ? __pfx_ksys_write+0x10/0x10 [ 251.549762][T11154] __x64_sys_bpf+0xba/0xd0 [ 251.549786][T11154] do_syscall_64+0x166/0x520 [ 251.549818][T11154] ? trace_irq_disable+0x3b/0x140 [ 251.549840][T11154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.549863][T11154] ? clear_bhb_loop+0x70/0xc0 [ 251.549892][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.549925][T11154] RIP: 0033:0x7fe7b8b9e159 [ 251.549945][T11154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.549966][T11154] RSP: 002b:00007fe7b9a5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.549990][T11154] RAX: ffffffffffffffda RBX: 00007fe7b8e25fa0 RCX: 00007fe7b8b9e159 [ 251.550007][T11154] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 251.550021][T11154] RBP: 00007fe7b9a5a090 R08: 0000000000000000 R09: 0000000000000000 [ 251.550036][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.550049][T11154] R13: 00007fe7b8e26038 R14: 00007fe7b8e25fa0 R15: 00007fff17329698 [ 251.550085][T11154] [ 251.925649][T11138] unsupported nlmsg_type 40 [ 252.651178][T11193] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 253.079492][T11207] wg2 speed is unknown, defaulting to 1000 [ 253.693978][T11236] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 254.191713][T11249] __nla_validate_parse: 5 callbacks suppressed [ 254.198672][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 254.452241][T11259] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1219'. [ 254.639236][T11266] tipc: Enabled bearer , priority 0 [ 254.871140][T11275] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 255.029951][T11287] syzkaller1: entered promiscuous mode [ 255.035806][T11287] syzkaller1: entered allmulticast mode [ 255.211191][T11299] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 255.691689][T11317] C: renamed from veth1_to_team (while UP) [ 255.704926][T11317] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1234'. [ 255.759407][T11317] block nbd0: reconnected socket [ 255.777641][ T5624] block nbd0: Receive control failed (result -32) [ 255.868815][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 256.342623][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1242'. [ 256.486346][T11347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1243'. [ 256.543206][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'. [ 256.566002][T11347] syzkaller1: entered promiscuous mode [ 256.566056][T11347] syzkaller1: entered allmulticast mode [ 256.586703][T11355] x_tables: duplicate underflow at hook 2 [ 256.602389][T11347] nbd: socks must be embedded in a SOCK_ITEM attr [ 256.741676][T11361] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 256.741725][T11361] netlink: 'syz.0.1248': attribute type 2 has an invalid length. [ 256.741756][T11361] netlink: 'syz.0.1248': attribute type 3 has an invalid length. [ 256.741823][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 257.119989][T11373] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 257.256767][T11382] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1253'. [ 257.355137][T11384] netlink: 'syz.0.1254': attribute type 1 has an invalid length. [ 257.473109][T11386] veth6: entered allmulticast mode [ 257.511873][T11384] bond6: (slave veth0_to_bond): Releasing active interface [ 257.521107][T11384] veth0_to_bond: left promiscuous mode [ 257.526923][T11384] veth0_to_bond: left allmulticast mode [ 257.550131][T11384] bond7: (slave veth0_to_bond): making interface the new active one [ 257.561315][T11384] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 257.602547][T11384] lo speed is unknown, defaulting to 1000 [ 257.623327][T11384] lo speed is unknown, defaulting to 1000 [ 257.630629][T11384] lo speed is unknown, defaulting to 1000 [ 257.696979][T11386] macvlan3: entered promiscuous mode [ 257.697029][T11386] macvlan3: entered allmulticast mode [ 257.713299][T11386] bond7: entered promiscuous mode [ 257.713347][T11386] veth0_to_bond: entered promiscuous mode [ 257.742779][T11386] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 257.750885][T11386] bond7: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 257.768817][T11386] bond7: left promiscuous mode [ 257.773701][T11386] veth0_to_bond: left promiscuous mode [ 257.964739][T11402] netlink: 'syz.3.1259': attribute type 1 has an invalid length. [ 258.089578][T11407] netlink: 'syz.3.1259': attribute type 1 has an invalid length. [ 258.495681][ T5748] lo speed is unknown, defaulting to 1000 [ 258.503402][T11384] infiniband sz1: set active [ 258.504025][T11384] infiniband sz1: added lo [ 258.579149][T11384] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 258.596909][T11384] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 258.614603][T11384] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 258.665023][T11384] RDS/IB: sz1: added [ 258.670698][T11384] smc: adding ib device sz1 with port count 1 [ 258.682784][T11384] smc: ib device sz1 port 1 has no pnetid [ 258.693966][ T30] lo speed is unknown, defaulting to 1000 [ 258.726168][T11384] lo speed is unknown, defaulting to 1000 [ 259.072014][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 259.512933][T11384] lo speed is unknown, defaulting to 1000 [ 260.198064][T11445] hsr0: entered promiscuous mode [ 260.215022][T11445] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1268'. [ 260.278635][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.424190][T11384] lo speed is unknown, defaulting to 1000 [ 260.622482][T11450] syzkaller1: entered promiscuous mode [ 260.622529][T11450] syzkaller1: entered allmulticast mode [ 260.656501][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1271'. [ 260.683384][T11451] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1271'. [ 260.740114][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1271'. [ 260.842411][T11384] lo speed is unknown, defaulting to 1000 [ 261.332270][T11461] ip_tables: iptables: counters copy to user failed while replacing table [ 261.473299][T11384] lo speed is unknown, defaulting to 1000 [ 261.574696][T11469] FAULT_INJECTION: forcing a failure. [ 261.574696][T11469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.589683][T11469] CPU: 1 UID: 0 PID: 11469 Comm: syz.4.1276 Not tainted syzkaller #0 PREEMPT(full) [ 261.589716][T11469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.589731][T11469] Call Trace: [ 261.589740][T11469] [ 261.589750][T11469] dump_stack_lvl+0xe8/0x150 [ 261.589791][T11469] should_fail_ex+0x410/0x560 [ 261.589834][T11469] _copy_from_user+0x2d/0xb0 [ 261.589861][T11469] copy_from_bpfptr+0x5c/0x90 [ 261.589890][T11469] bpf_prog_load+0xcdb/0x1c20 [ 261.589931][T11469] ? __pfx_bpf_prog_load+0x10/0x10 [ 261.589985][T11469] __sys_bpf+0xd0d/0xd90 [ 261.590020][T11469] ? __pfx___sys_bpf+0x10/0x10 [ 261.590057][T11469] ? __fget_files+0x2a/0x420 [ 261.590107][T11469] ? ksys_write+0x242/0x270 [ 261.590143][T11469] ? __pfx_ksys_write+0x10/0x10 [ 261.590182][T11469] __x64_sys_bpf+0xba/0xd0 [ 261.590209][T11469] do_syscall_64+0x166/0x520 [ 261.590243][T11469] ? trace_irq_disable+0x3b/0x140 [ 261.590266][T11469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.590293][T11469] ? clear_bhb_loop+0x70/0xc0 [ 261.590327][T11469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.590350][T11469] RIP: 0033:0x7f69e559e159 [ 261.590373][T11469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.590393][T11469] RSP: 002b:00007f69e63be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.590419][T11469] RAX: ffffffffffffffda RBX: 00007f69e5825fa0 RCX: 00007f69e559e159 [ 261.590436][T11469] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 261.590458][T11469] RBP: 00007f69e63be090 R08: 0000000000000000 R09: 0000000000000000 [ 261.590473][T11469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.590487][T11469] R13: 00007f69e5826038 R14: 00007f69e5825fa0 R15: 00007ffeac06d378 [ 261.590523][T11469] [ 262.065308][T11472] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.1277'. [ 262.164224][T11384] lo speed is unknown, defaulting to 1000 [ 262.331055][T11475] netlink: 'syz.5.1277': attribute type 11 has an invalid length. [ 262.331103][T11475] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1277'. [ 262.896523][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1282'. [ 262.911946][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1282'. [ 262.912015][T11497] netlink: 'syz.5.1282': attribute type 18 has an invalid length. [ 262.979697][T11467] netlink: 'syz.3.1275': attribute type 4 has an invalid length. [ 262.979738][T11467] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1275'. [ 263.054636][T11502] netlink: 'syz.5.1283': attribute type 1 has an invalid length. [ 263.608277][T11517] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 263.629301][T11515] syzkaller0: entered promiscuous mode [ 263.629344][T11515] syzkaller0: entered allmulticast mode [ 263.647117][T11515] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 263.931201][T11520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1289'. [ 264.934462][T11557] ip6_vti0: mtu less than device minimum [ 265.347134][T11573] FAULT_INJECTION: forcing a failure. [ 265.347134][T11573] name failslab, interval 1, probability 0, space 0, times 0 [ 265.350181][T11573] CPU: 0 UID: 0 PID: 11573 Comm: syz.5.1302 Not tainted syzkaller #0 PREEMPT(full) [ 265.350276][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.350316][T11573] Call Trace: [ 265.350345][T11573] [ 265.350367][T11573] dump_stack_lvl+0xe8/0x150 [ 265.350464][T11573] should_fail_ex+0x410/0x560 [ 265.350568][T11573] should_failslab+0xa8/0x100 [ 265.350644][T11573] __kmalloc_cache_noprof+0xa3/0x600 [ 265.350758][T11573] ? bpf_diag_init+0x87/0x140 [ 265.350867][T11573] ? bpf_diag_init+0x87/0x140 [ 265.350960][T11573] bpf_diag_init+0x87/0x140 [ 265.351025][T11573] bpf_check+0x5df/0x2e10 [ 265.351118][T11573] ? ktime_get_with_offset+0x93/0x2d0 [ 265.351210][T11573] ? __pfx_bpf_check+0x10/0x10 [ 265.351275][T11573] ? bpf_obj_name_cpy+0x194/0x1e0 [ 265.351362][T11573] bpf_prog_load+0x14d6/0x1c20 [ 265.351460][T11573] ? __pfx_bpf_prog_load+0x10/0x10 [ 265.351599][T11573] __sys_bpf+0xd0d/0xd90 [ 265.351691][T11573] ? __pfx___sys_bpf+0x10/0x10 [ 265.351784][T11573] ? __fget_files+0x2a/0x420 [ 265.351909][T11573] ? ksys_write+0x242/0x270 [ 265.351986][T11573] ? __pfx_ksys_write+0x10/0x10 [ 265.352079][T11573] __x64_sys_bpf+0xba/0xd0 [ 265.352142][T11573] do_syscall_64+0x166/0x520 [ 265.352235][T11573] ? trace_irq_disable+0x3b/0x140 [ 265.352288][T11573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.352343][T11573] ? clear_bhb_loop+0x70/0xc0 [ 265.352417][T11573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.352480][T11573] RIP: 0033:0x7fe7b8b9e159 [ 265.352533][T11573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.352585][T11573] RSP: 002b:00007fe7b9a5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.352648][T11573] RAX: ffffffffffffffda RBX: 00007fe7b8e25fa0 RCX: 00007fe7b8b9e159 [ 265.352684][T11573] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 265.352718][T11573] RBP: 00007fe7b9a5a090 R08: 0000000000000000 R09: 0000000000000000 [ 265.352757][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.352789][T11573] R13: 00007fe7b8e26038 R14: 00007fe7b8e25fa0 R15: 00007fff17329698 [ 265.352873][T11573] [ 265.631053][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.631097][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.838732][T11584] __nla_validate_parse: 2 callbacks suppressed [ 265.838783][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1306'. [ 265.916337][T11584] batadv0: entered promiscuous mode [ 265.964068][T11584] macsec1: entered promiscuous mode [ 265.964305][T11584] macsec1: entered allmulticast mode [ 265.964343][T11584] batadv0: entered allmulticast mode [ 265.999438][T11584] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 266.028243][T11584] batadv0: left allmulticast mode [ 266.028624][T11584] batadv0: left promiscuous mode [ 266.216061][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1308'. [ 266.270500][T11589] x_tables: duplicate underflow at hook 1 [ 266.375151][T11597] netlink: 'syz.0.1310': attribute type 1 has an invalid length. [ 266.438117][T11597] 8021q: adding VLAN 0 to HW filter on device bond8 [ 266.478411][T11600] bond8: (slave macvlan1): making interface the new active one [ 266.493950][T11600] bond8: (slave macvlan1): Enslaving as an active interface with an up link [ 266.605957][ T13] bond8: (slave macvlan1): link status definitely down, disabling slave [ 266.623105][ T13] bond8: now running without any active interface! [ 267.205835][T11621] syzkaller0: entered promiscuous mode [ 267.206759][T11621] syzkaller0: entered allmulticast mode [ 267.242716][T11621] tipc: Enabled bearer , priority 0 [ 267.361632][T11622] tipc: Resetting bearer [ 267.405835][T11630] FAULT_INJECTION: forcing a failure. [ 267.405835][T11630] name failslab, interval 1, probability 0, space 0, times 0 [ 267.425279][T11622] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 267.433395][T11630] CPU: 1 UID: 0 PID: 11630 Comm: syz.3.1316 Not tainted syzkaller #0 PREEMPT(full) [ 267.433427][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.433442][T11630] Call Trace: [ 267.433453][T11630] [ 267.433462][T11630] dump_stack_lvl+0xe8/0x150 [ 267.433503][T11630] should_fail_ex+0x410/0x560 [ 267.433545][T11630] should_failslab+0xa8/0x100 [ 267.433575][T11630] __kmalloc_cache_noprof+0xa3/0x600 [ 267.433612][T11630] ? bpf_diag_init+0x87/0x140 [ 267.433638][T11630] ? bpf_diag_init+0x87/0x140 [ 267.433672][T11630] bpf_diag_init+0x87/0x140 [ 267.433700][T11630] bpf_check+0x5df/0x2e10 [ 267.433738][T11630] ? ktime_get_with_offset+0x93/0x2d0 [ 267.433768][T11630] ? __pfx_bpf_check+0x10/0x10 [ 267.433796][T11630] ? bpf_obj_name_cpy+0x194/0x1e0 [ 267.433831][T11630] bpf_prog_load+0x14d6/0x1c20 [ 267.433872][T11630] ? __pfx_bpf_prog_load+0x10/0x10 [ 267.433926][T11630] __sys_bpf+0xd0d/0xd90 [ 267.433961][T11630] ? __pfx___sys_bpf+0x10/0x10 [ 267.434009][T11630] ? __fget_files+0x2a/0x420 [ 267.434059][T11630] ? ksys_write+0x242/0x270 [ 267.434095][T11630] ? __pfx_ksys_write+0x10/0x10 [ 267.434134][T11630] __x64_sys_bpf+0xba/0xd0 [ 267.434160][T11630] do_syscall_64+0x166/0x520 [ 267.434193][T11630] ? trace_irq_disable+0x3b/0x140 [ 267.434215][T11630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.434238][T11630] ? clear_bhb_loop+0x70/0xc0 [ 267.434267][T11630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.434290][T11630] RIP: 0033:0x7fae4339e159 [ 267.434312][T11630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.434332][T11630] RSP: 002b:00007fae44330028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.434356][T11630] RAX: ffffffffffffffda RBX: 00007fae43625fa0 RCX: 00007fae4339e159 [ 267.434372][T11630] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 267.434386][T11630] RBP: 00007fae44330090 R08: 0000000000000000 R09: 0000000000000000 [ 267.434400][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.434413][T11630] R13: 00007fae43626038 R14: 00007fae43625fa0 R15: 00007fffd75ff308 [ 267.434446][T11630] [ 267.794586][T11620] tipc: Resetting bearer [ 267.871827][T11640] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1 [ 267.871904][T11640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.903077][T11620] tipc: Disabling bearer [ 267.975399][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1317'. [ 268.214403][T11648] netlink: 'syz.0.1321': attribute type 13 has an invalid length. [ 268.335167][T11660] Bluetooth: hci0: unsupported parameter 5135 [ 268.347331][T11660] Bluetooth: hci0: unsupported parameter 8192 [ 268.357565][T11660] Bluetooth: hci0: unsupported parameter 5135 [ 268.357619][T11660] Bluetooth: hci0: unsupported parameter 8192 [ 268.389370][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1322'. [ 268.435404][ T5714] lo speed is unknown, defaulting to 1000 [ 268.526512][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1322'. [ 269.218631][T11687] FAULT_INJECTION: forcing a failure. [ 269.218631][T11687] name failslab, interval 1, probability 0, space 0, times 0 [ 269.233017][T11687] CPU: 1 UID: 0 PID: 11687 Comm: syz.4.1329 Not tainted syzkaller #0 PREEMPT(full) [ 269.233050][T11687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.233065][T11687] Call Trace: [ 269.233073][T11687] [ 269.233083][T11687] dump_stack_lvl+0xe8/0x150 [ 269.233123][T11687] should_fail_ex+0x410/0x560 [ 269.233163][T11687] should_failslab+0xa8/0x100 [ 269.233193][T11687] __kmalloc_cache_node_noprof+0xaa/0x620 [ 269.233229][T11687] ? kasan_save_track+0x4f/0x80 [ 269.233251][T11687] ? kasan_save_track+0x3e/0x80 [ 269.233271][T11687] ? __kasan_kmalloc+0x93/0xb0 [ 269.233293][T11687] ? __get_vm_area_node+0x155/0x2f0 [ 269.233321][T11687] ? __get_vm_area_node+0x155/0x2f0 [ 269.233359][T11687] ? __x64_sys_bpf+0xba/0xd0 [ 269.233386][T11687] __get_vm_area_node+0x155/0x2f0 [ 269.233422][T11687] __vmalloc_node_range_noprof+0x343/0x1540 [ 269.233473][T11687] ? bpf_check+0x10ee/0x2e10 [ 269.233527][T11687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.233560][T11687] ? __kasan_kmalloc+0x93/0xb0 [ 269.233586][T11687] ? __kmalloc_cache_noprof+0x321/0x600 [ 269.233622][T11687] ? __kmalloc_cache_noprof+0x14d/0x600 [ 269.233656][T11687] ? bpf_diag_init+0x87/0x140 [ 269.233681][T11687] ? bpf_diag_init+0x87/0x140 [ 269.233710][T11687] ? bpf_check+0x10ee/0x2e10 [ 269.233732][T11687] __vmalloc_noprof+0xd2/0x120 [ 269.233764][T11687] ? bpf_check+0x10ee/0x2e10 [ 269.233791][T11687] bpf_check+0x10ee/0x2e10 [ 269.233832][T11687] ? ktime_get_with_offset+0x93/0x2d0 [ 269.233861][T11687] ? __pfx_bpf_check+0x10/0x10 [ 269.233888][T11687] ? bpf_obj_name_cpy+0x194/0x1e0 [ 269.233925][T11687] bpf_prog_load+0x14d6/0x1c20 [ 269.233965][T11687] ? __pfx_bpf_prog_load+0x10/0x10 [ 269.234019][T11687] __sys_bpf+0xd0d/0xd90 [ 269.234054][T11687] ? __pfx___sys_bpf+0x10/0x10 [ 269.234092][T11687] ? __fget_files+0x2a/0x420 [ 269.234142][T11687] ? ksys_write+0x242/0x270 [ 269.234178][T11687] ? __pfx_ksys_write+0x10/0x10 [ 269.234217][T11687] __x64_sys_bpf+0xba/0xd0 [ 269.234243][T11687] do_syscall_64+0x166/0x520 [ 269.234277][T11687] ? trace_irq_disable+0x3b/0x140 [ 269.234298][T11687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.234322][T11687] ? clear_bhb_loop+0x70/0xc0 [ 269.234357][T11687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.234381][T11687] RIP: 0033:0x7f69e559e159 [ 269.234404][T11687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.234424][T11687] RSP: 002b:00007f69e63be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.234449][T11687] RAX: ffffffffffffffda RBX: 00007f69e5825fa0 RCX: 00007f69e559e159 [ 269.234466][T11687] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 269.234480][T11687] RBP: 00007f69e63be090 R08: 0000000000000000 R09: 0000000000000000 [ 269.234493][T11687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.234505][T11687] R13: 00007f69e5826038 R14: 00007f69e5825fa0 R15: 00007ffeac06d378 [ 269.234539][T11687] [ 269.476785][T11687] warn_alloc: 1 callbacks suppressed [ 269.477422][T11687] syz.4.1329: vmalloc error: size 2584, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 269.477627][T11687] CPU: 0 UID: 0 PID: 11687 Comm: syz.4.1329 Not tainted syzkaller #0 PREEMPT(full) [ 269.477692][T11687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.477725][T11687] Call Trace: [ 269.477754][T11687] [ 269.477776][T11687] dump_stack_lvl+0xe8/0x150 [ 269.477891][T11687] warn_alloc+0x24d/0x270 [ 269.477984][T11687] ? __kasan_kmalloc+0x22/0xb0 [ 269.478059][T11687] ? __pfx_warn_alloc+0x10/0x10 [ 269.478137][T11687] ? __kasan_kmalloc+0x93/0xb0 [ 269.478200][T11687] ? __get_vm_area_node+0x155/0x2f0 [ 269.478276][T11687] ? __x64_sys_bpf+0xba/0xd0 [ 269.478339][T11687] ? __get_vm_area_node+0x2a9/0x2f0 [ 269.478435][T11687] __vmalloc_node_range_noprof+0x36b/0x1540 [ 269.478586][T11687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.478668][T11687] ? __kasan_kmalloc+0x93/0xb0 [ 269.478732][T11687] ? __kmalloc_cache_noprof+0x321/0x600 [ 269.478824][T11687] ? __kmalloc_cache_noprof+0x14d/0x600 [ 269.478924][T11687] ? bpf_diag_init+0x87/0x140 [ 269.478994][T11687] ? bpf_diag_init+0x87/0x140 [ 269.479063][T11687] ? bpf_check+0x10ee/0x2e10 [ 269.479116][T11687] __vmalloc_noprof+0xd2/0x120 [ 269.479192][T11687] ? bpf_check+0x10ee/0x2e10 [ 269.479256][T11687] bpf_check+0x10ee/0x2e10 [ 269.479337][T11687] ? ktime_get_with_offset+0x93/0x2d0 [ 269.479410][T11687] ? __pfx_bpf_check+0x10/0x10 [ 269.479474][T11687] ? bpf_obj_name_cpy+0x194/0x1e0 [ 269.479560][T11687] bpf_prog_load+0x14d6/0x1c20 [ 269.479655][T11687] ? __pfx_bpf_prog_load+0x10/0x10 [ 269.479786][T11687] __sys_bpf+0xd0d/0xd90 [ 269.479904][T11687] ? __pfx___sys_bpf+0x10/0x10 [ 269.480000][T11687] ? __fget_files+0x2a/0x420 [ 269.480119][T11687] ? ksys_write+0x242/0x270 [ 269.480203][T11687] ? __pfx_ksys_write+0x10/0x10 [ 269.480325][T11687] __x64_sys_bpf+0xba/0xd0 [ 269.480397][T11687] do_syscall_64+0x166/0x520 [ 269.480479][T11687] ? trace_irq_disable+0x3b/0x140 [ 269.480530][T11687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.480591][T11687] ? clear_bhb_loop+0x70/0xc0 [ 269.480656][T11687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.480707][T11687] RIP: 0033:0x7f69e559e159 [ 269.480759][T11687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.480809][T11687] RSP: 002b:00007f69e63be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.480877][T11687] RAX: ffffffffffffffda RBX: 00007f69e5825fa0 RCX: 00007f69e559e159 [ 269.480918][T11687] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 269.480951][T11687] RBP: 00007f69e63be090 R08: 0000000000000000 R09: 0000000000000000 [ 269.480990][T11687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.481034][T11687] R13: 00007f69e5826038 R14: 00007f69e5825fa0 R15: 00007ffeac06d378 [ 269.481099][T11687] [ 269.925493][T11687] Mem-Info: [ 269.925529][T11687] active_anon:6551 inactive_anon:0 isolated_anon:0 [ 269.925529][T11687] active_file:0 inactive_file:43500 isolated_file:0 [ 269.925529][T11687] unevictable:0 dirty:329 writeback:0 [ 269.925529][T11687] slab_reclaimable:11594 slab_unreclaimable:112885 [ 269.925529][T11687] mapped:34923 shmem:527 pagetables:1381 [ 269.925529][T11687] sec_pagetables:0 bounce:0 [ 269.925529][T11687] kernel_misc_reclaimable:0 [ 269.925529][T11687] free:1297607 free_pcp:12170 free_cma:0 [ 269.925608][T11687] Node 0 active_anon:26204kB inactive_anon:0kB active_file:0kB inactive_file:173808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139692kB dirty:1316kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14444kB pagetables:5408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 269.925677][T11687] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 269.925740][T11687] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.925815][T11687] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 269.925884][T11687] Node 0 DMA32 free:1231792kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26204kB inactive_anon:0kB active_file:0kB inactive_file:173808kB unevictable:0kB writepending:1316kB zspages:0kB present:3129332kB managed:2546708kB mlocked:0kB bounce:0kB free_pcp:48680kB local_pcp:21332kB free_cma:0kB [ 269.925960][T11687] lowmem_reserve[]: 0 0 0 0 0 [ 269.926042][T11687] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.926112][T11687] lowmem_reserve[]: 0 0 0 0 0 [ 269.926177][T11687] Node 1 Normal free:3943276kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.926251][T11687] lowmem_reserve[]: 0 0 0 0 0 [ 269.926323][T11687] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 269.926547][T11687] Node 0 DMA32: 496*4kB (UM) 680*8kB (UM) 478*16kB (UME) 560*32kB (UM) 151*64kB (UM) 72*128kB (UM) 17*256kB (UME) 12*512kB (UME) 12*1024kB (UME) 13*2048kB (UM) 276*4096kB (UM) = 1231776kB [ 270.088755][T11687] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 270.088888][T11687] Node 1 Normal: 5*4kB (UM) 3*8kB (UM) 8*16kB (UM) 10*32kB (UM) 6*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943276kB [ 270.132598][T11687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.132650][T11687] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.132693][T11687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.132745][T11687] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.132796][T11687] 44023 total pagecache pages [ 270.132818][T11687] 0 pages in swap cache [ 270.132839][T11687] Free swap = 124996kB [ 270.132861][T11687] Total swap = 124996kB [ 270.132883][T11687] 2097051 pages RAM [ 270.132904][T11687] 0 pages HighMem/MovableOnly [ 270.132925][T11687] 428758 pages reserved [ 270.132946][T11687] 0 pages cma reserved [ 270.792104][T11693] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 270.847733][T11693] bond5 (unregistering): Released all slaves [ 271.778802][T11723] tipc: Enabling of bearer rejected, failed to enable media [ 272.338933][T11747] netlink: 321 bytes leftover after parsing attributes in process `syz.4.1342'. [ 272.834260][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.845900][ T5616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.855423][ T5616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.864186][ T5616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.873825][ T5616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.046117][T11760] syzkaller0: entered promiscuous mode [ 273.048604][T11760] syzkaller0: entered allmulticast mode [ 273.076922][T11766] openvswitch: netlink: Message has 4 unknown bytes. [ 273.601655][T11758] wg2 speed is unknown, defaulting to 1000 [ 273.627945][T11758] lo speed is unknown, defaulting to 1000 [ 274.327013][T11758] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.335805][T11758] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.343574][T11758] bridge_slave_0: entered allmulticast mode [ 274.353023][T11758] bridge_slave_0: entered promiscuous mode [ 274.365946][T11758] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.373724][T11758] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.379899][T11758] bridge_slave_1: entered allmulticast mode [ 274.386133][T11758] bridge_slave_1: entered promiscuous mode [ 274.436998][T11758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.455289][T11758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.503216][T11758] team0: Port device team_slave_0 added [ 274.512540][T11758] team0: Port device team_slave_1 added [ 274.551242][T11758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.558361][T11758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.558396][T11758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.598726][T11758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.605781][T11758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.632563][T11758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.699940][T11758] hsr_slave_0: entered promiscuous mode [ 274.706949][T11758] hsr_slave_1: entered promiscuous mode [ 274.747102][T11726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.918722][ T5616] Bluetooth: hci6: command tx timeout [ 275.250381][ T32] audit: type=1800 audit(1788617732.748:5): pid=11802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1351" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A20 dev="tmpfs" ino=1537 res=0 errno=0 [ 275.297535][T11803] xt_CT: No such helper "snmp_trap" [ 275.316366][T11805] xt_CT: No such helper "snmp_trap" [ 275.329495][T11804] tipc: Started in network mode [ 275.334734][T11804] tipc: Node identity 3a2bf9baeffe, cluster identity 4711 [ 275.344757][T11804] tipc: Enabled bearer , priority 0 [ 275.359668][T11808] syzkaller0: entered promiscuous mode [ 275.360546][T11808] syzkaller0: entered allmulticast mode [ 275.444302][T11804] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 275.586792][T11813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1354'. [ 275.646909][T11804] tipc: Resetting bearer [ 275.808527][T11799] tipc: Resetting bearer [ 275.896162][T11799] tipc: Disabling bearer [ 276.069924][T11817] block nbd3: server does not support multiple connections per device. [ 276.070772][T11817] block nbd3: shutting down sockets [ 276.270462][T11758] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.302259][T11758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.315653][T11758] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.343041][T11758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.353057][T11758] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.417033][T11758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.473158][T11758] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.559571][T11758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.882378][T11837] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1361'. [ 276.997598][T11844] netlink: 'syz.4.1363': attribute type 1 has an invalid length. [ 277.006765][ T5616] Bluetooth: hci6: command tx timeout [ 277.102160][T11841] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 277.130843][T11822] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 277.130898][T11822] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 277.277190][T11822] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 277.277249][T11822] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 277.605553][T11758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.671743][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'. [ 277.750831][T11862] vlan0: entered promiscuous mode [ 277.764235][T11862] gretap0: entered promiscuous mode [ 277.881864][T11758] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.922607][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.922737][ T7065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.967563][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.967690][ T7065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.329566][T11875] netlink: 'syz.4.1369': attribute type 1 has an invalid length. [ 278.387378][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 278.481965][T11875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.514470][T11883] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 278.514511][T11883] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1370'. [ 278.557804][T11883] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 279.036447][T11888] smbdirect: ib_dev[syz2] removed [ 279.857935][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'. [ 279.871272][T11916] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 279.952040][T11758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.390689][T11943] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1381'. [ 280.717015][T11951] syzkaller0: entered promiscuous mode [ 280.723306][T11951] syzkaller0: entered allmulticast mode [ 281.436461][T11758] veth0_vlan: entered promiscuous mode [ 281.464213][T11758] veth1_vlan: entered promiscuous mode [ 281.522474][T11758] veth0_macvtap: entered promiscuous mode [ 281.535305][T11758] veth1_macvtap: entered promiscuous mode [ 281.545169][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 281.605817][T11962] Bluetooth: ISO socket layer initialized [ 281.735955][T11963] 8021q: adding VLAN 0 to HW filter on device bond10 [ 281.770430][T11968] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1386'. [ 281.860533][T11758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.937469][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1384'. [ 282.091403][T11962] 8021q: adding VLAN 0 to HW filter on device bond11 [ 282.113637][T11962] bond10: (slave bond11): Enslaving as an active interface with an up link [ 282.161123][T11977] netlink: 'syz.4.1385': attribute type 1 has an invalid length. [ 282.161168][T11977] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1385'. [ 282.161205][T11977] netlink: 'syz.4.1385': attribute type 1 has an invalid length. [ 282.226581][T11963] bond10 (unregistering): (slave bond11): Releasing backup interface [ 282.247175][T11963] bond10 (unregistering): Released all slaves [ 282.439821][T11758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.829851][ T7065] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.830834][ T7065] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.830909][ T7065] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.830955][ T7065] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.916870][T11969] lo speed is unknown, defaulting to 1000 [ 283.502042][ T256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.502532][ T256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.691004][T12003] xt_nat: multiple ranges no longer supported [ 283.729743][T12004] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.784993][ T7049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.806127][ T7049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.787311][T12046] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 284.950547][ T32] audit: type=1804 audit(1788617742.448:6): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1398" name="/newroot/311/memory.events" dev="tmpfs" ino=1612 res=1 errno=0 [ 284.973307][ T32] audit: type=1800 audit(1788617742.478:7): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1398" name="memory.events" dev="tmpfs" ino=1612 res=0 errno=0 [ 285.005098][ T32] audit: type=1804 audit(1788617742.508:8): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1398" name="/newroot/311/memory.events" dev="tmpfs" ino=1612 res=1 errno=0 [ 285.506832][T12070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.937685][T12089] xt_l2tp: invalid flags combination: 8 [ 286.160246][T12073] syzkaller0: entered promiscuous mode [ 286.160290][T12073] syzkaller0: entered allmulticast mode [ 286.338051][T12078] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 286.717077][T12102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1407'. [ 286.819662][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 286.819712][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 286.819759][T12097] netlink: 'syz.3.1406': attribute type 12 has an invalid length. [ 286.820400][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 286.820424][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 286.820450][T12097] netlink: 'syz.3.1406': attribute type 12 has an invalid length. [ 287.034589][T12105] batman_adv: batadv0: Adding interface: macvtap1 [ 287.041334][T12105] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.067598][T12105] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 287.123513][T12111] tc_dump_action: action bad kind [ 287.686318][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1411'. [ 288.134703][T12128] syzkaller0: entered promiscuous mode [ 288.134746][T12128] syzkaller0: entered allmulticast mode [ 288.268851][T12133] syzkaller1: entered promiscuous mode [ 288.274621][T12133] syzkaller1: entered allmulticast mode [ 288.331820][T12133] lo speed is unknown, defaulting to 1000 [ 289.440686][T12170] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 289.525949][T12158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1423'. [ 289.618648][T12169] Bluetooth: MGMT ver 1.23 [ 289.805571][T12170] 8021q: adding VLAN 0 to HW filter on device bond4 [ 289.832978][T12158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1423'. [ 289.919007][T12136] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1415'. [ 290.386523][T12189] tipc: Can't bind to reserved service type 1 [ 290.915389][T12199] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 290.915660][T12199] bridge0: port 3(vlan2) entered disabled state [ 290.915994][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.917766][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.057339][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 291.296700][T12219] sctp: [Deprecated]: syz.5.1436 (pid 12219) Use of int in maxseg socket option. [ 291.296700][T12219] Use struct sctp_assoc_value instead [ 291.511662][T12221] vlan0: entered promiscuous mode [ 291.982522][T12231] __nla_validate_parse: 1 callbacks suppressed [ 291.993422][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1438'. [ 292.044236][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1438'. [ 292.066653][T12236] netlink: 'syz.6.1438': attribute type 4 has an invalid length. [ 292.066695][T12236] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1438'. [ 292.107164][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1438'. [ 292.424188][T12243] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1441'. [ 292.556711][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1442'. [ 292.578994][T12246] openvswitch: netlink: Flow key attr not present in new flow. [ 293.160556][T12258] tap0: tun_chr_ioctl cmd 1074025673 [ 293.203503][T12262] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1449'. [ 293.370884][T12266] 8021q: VLANs not supported on vxcan1 [ 294.467026][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1460'. [ 295.430797][T12330] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1466'. [ 295.516185][T12335] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20001 [ 295.970997][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 296.641411][T12356] syzkaller1: entered promiscuous mode [ 296.642244][T12356] syzkaller1: entered allmulticast mode [ 297.739342][T12368] syzkaller1: entered allmulticast mode [ 298.225582][T12381] __nla_validate_parse: 3 callbacks suppressed [ 298.226805][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 298.226900][T12381] netlink: 'syz.4.1478': attribute type 10 has an invalid length. [ 298.226951][T12381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1478'. [ 298.280601][T12381] syzkaller0: entered promiscuous mode [ 298.281335][T12381] syzkaller0: entered allmulticast mode [ 298.574575][T12386] netlink: 'syz.5.1479': attribute type 4 has an invalid length. [ 299.006475][T12390] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 299.028818][T12390] syzkaller0: entered promiscuous mode [ 299.029749][T12390] syzkaller0: entered allmulticast mode [ 300.374781][T12406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1486'. [ 300.479478][T12412] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1487'. [ 300.514907][T12407] gtp1: entered promiscuous mode [ 300.515341][T12407] gtp1: entered allmulticast mode [ 300.522655][T12412] netlink: 'syz.6.1487': attribute type 1 has an invalid length. [ 300.524133][T12410] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1487'. [ 300.878357][T12418] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1488'. [ 301.009821][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1491'. [ 301.435195][T12427] netlink: 'syz.4.1492': attribute type 2 has an invalid length. [ 301.485822][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 301.866164][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1495'. [ 302.266978][T12450] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 302.556836][T12300] Set syz1 is full, maxelem 65536 reached [ 302.642597][T12462] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1499'. [ 302.752410][T12453] netlink: 'syz.0.1498': attribute type 3 has an invalid length. [ 303.381332][T12482] __nla_validate_parse: 4 callbacks suppressed [ 303.387668][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1504'. [ 303.404762][T12478] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 303.461139][T12473] geneve3: entered promiscuous mode [ 304.014863][T12507] netlink: 'syz.4.1511': attribute type 4 has an invalid length. [ 304.014920][T12507] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1511'. [ 304.219274][T12514] netlink: 'syz.5.1512': attribute type 3 has an invalid length. [ 304.219503][T12514] netlink: 'syz.5.1512': attribute type 3 has an invalid length. [ 304.566650][T12528] xt_hashlimit: max too large, truncated to 1048576 [ 304.567628][T12528] xt_hashlimit: overflow, try lower: 137438953472/8 [ 304.633733][T12532] netlink: 'syz.4.1517': attribute type 9 has an invalid length. [ 304.679247][T12534] batadv_slave_1: Caught tx_queue_len zero misconfig [ 304.802519][T12530] Cannot find set identified by id 0 to match [ 304.817299][T12537] Cannot find set identified by id 0 to match [ 304.855078][T12529] xt_hashlimit: size too large, truncated to 1048576 [ 304.913886][T12548] xt_hashlimit: size too large, truncated to 1048576 [ 304.921878][T12530] xt_hashlimit: size too large, truncated to 1048576 [ 305.243496][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1521'. [ 305.832538][T12589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1527'. [ 306.786680][T12607] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1533'. [ 306.870696][T12613] hsr0: entered promiscuous mode [ 306.991511][T12611] hsr0: left promiscuous mode [ 307.306326][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1537'. [ 307.306939][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1537'. [ 309.577996][T12612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.886793][T12681] Cannot find set identified by id 0 to match [ 310.577672][T12694] netlink: 'syz.5.1552': attribute type 1 has an invalid length. [ 310.767599][T12694] 8021q: adding VLAN 0 to HW filter on device bond5 [ 310.807446][T12694] netlink: 'syz.5.1552': attribute type 1 has an invalid length. [ 310.844825][T12700] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20004 [ 311.280089][T12699] bond5: (slave bridge2): making interface the new active one [ 311.291837][T12699] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 311.497288][T12705] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 311.507872][T12709] tipc: Enabling of bearer rejected, already enabled [ 311.517109][T12710] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.1555'. [ 314.487403][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'. [ 314.769813][T12744] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 314.812777][T12744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.828070][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1563'. [ 315.279207][T12762] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 315.304813][T12758] ipvlan2: entered allmulticast mode [ 315.304855][T12758] macvlan1: entered allmulticast mode [ 315.304886][T12758] veth1_vlan: entered allmulticast mode [ 315.337461][T12758] batman_adv: batadv0: Adding interface: ipvlan2 [ 315.348108][T12758] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.373869][T12758] batman_adv: batadv0: Interface activated: ipvlan2 [ 315.489827][T12764] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1568'. [ 316.374108][T12767] erspan0: left allmulticast mode [ 316.384858][T12767] bridge1: port 1(erspan0) entered disabled state [ 316.467617][T12767] bridge_slave_0: left allmulticast mode [ 316.503966][T12767] bridge_slave_0: left promiscuous mode [ 316.506483][T12767] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.625317][T12767] bridge_slave_1: left allmulticast mode [ 316.636969][T12767] bridge_slave_1: left promiscuous mode [ 316.637285][T12767] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.781978][T12767] bond0: (slave bond_slave_0): Releasing backup interface [ 316.802075][T12767] bond_slave_0: left allmulticast mode [ 316.885871][T12778] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1573'. [ 316.892371][T12767] bond0: (slave bond_slave_1): Releasing backup interface [ 316.927153][T12774] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1574'. [ 316.987558][T12767] bond_slave_1: left allmulticast mode [ 317.200046][T12767] team0: Port device team_slave_0 removed [ 317.356836][T12767] team0: Port device team_slave_1 removed [ 317.375934][T12767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.377276][T12767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.407450][T12767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.408336][T12767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.446065][T12767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 317.530317][T12768] team0: Mode changed to "loadbalance" [ 317.555219][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.555904][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.572944][T12797] bridge0: entered allmulticast mode [ 317.590033][T12799] bridge_slave_1: left allmulticast mode [ 317.590114][T12799] bridge_slave_1: left promiscuous mode [ 317.590920][T12799] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.653814][T12803] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 317.664028][T12803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.674260][T12799] bridge_slave_0: left allmulticast mode [ 317.677352][T12799] bridge_slave_0: left promiscuous mode [ 317.681247][T12799] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.973723][T12807] netlink: 'syz.4.1578': attribute type 1 has an invalid length. [ 317.974135][T12807] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1578'. [ 317.975667][T12807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1578'. [ 318.431737][T12824] netlink: 'syz.4.1582': attribute type 1 has an invalid length. [ 318.849501][T12835] gretap1: entered promiscuous mode [ 318.859026][T12835] batman_adv: batadv0: Adding interface: gretap1 [ 318.866358][T12835] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.895995][T12835] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 319.638066][T12866] bond3: entered allmulticast mode [ 319.693589][T12866] dvmrp8: entered allmulticast mode [ 319.792493][T12890] pim6reg: entered allmulticast mode [ 319.810937][T12827] bond3: left allmulticast mode [ 319.828373][T12890] pim6reg: left allmulticast mode [ 319.889986][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1593'. [ 320.081398][T12899] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1598'. [ 320.187996][T12887] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 320.205542][T12887] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 320.337683][T12895] syzkaller0: entered promiscuous mode [ 320.338796][T12895] syzkaller0: entered allmulticast mode [ 320.434642][T12906] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 323.430156][T12939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.504551][T12939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.483769][T12944] lo: entered promiscuous mode [ 324.565568][T12944] tunl0: entered promiscuous mode [ 324.697692][T12944] gre0: entered promiscuous mode [ 324.961177][T12944] erspan0: entered promiscuous mode [ 325.023406][T12944] ip_vti0: entered promiscuous mode [ 325.055816][T12944] ip6_vti0: entered promiscuous mode [ 325.064521][T12944] sit0: entered promiscuous mode [ 325.092297][T12944] ip6tnl0: entered promiscuous mode [ 325.188702][T12944] ip6gre0: entered promiscuous mode [ 325.239376][T12944] syz_tun: entered promiscuous mode [ 325.740849][T12944] ip6gretap0: entered promiscuous mode [ 325.753742][T12944] bridge0: entered promiscuous mode [ 325.770809][T12944] vcan0: entered promiscuous mode [ 325.796033][T12944] bond0: entered promiscuous mode [ 325.803997][T12944] bond_slave_0: entered promiscuous mode [ 325.810302][T12944] bond_slave_1: entered promiscuous mode [ 325.829792][T12944] dummy0: entered promiscuous mode [ 325.860531][T12944] nlmon0: entered promiscuous mode [ 325.898366][T12944] batadv0: entered promiscuous mode [ 325.915128][T12944] vxcan0: entered promiscuous mode [ 325.939702][T12944] –: entered promiscuous mode [ 325.956519][T12944] veth0: entered promiscuous mode [ 325.974783][T12944] veth1: entered promiscuous mode [ 326.011425][T12944] wg0: entered promiscuous mode [ 326.040573][T12944] wg1: entered promiscuous mode [ 326.058908][T12944] wg2: entered promiscuous mode [ 326.075899][T12944] veth0_to_bridge: entered promiscuous mode [ 326.119406][T12944] veth1_to_bridge: entered promiscuous mode [ 326.169515][T12944] veth0_to_bond: entered promiscuous mode [ 326.204602][T12944] veth1_to_bond: entered promiscuous mode [ 326.245239][T12944] veth0_to_team: entered promiscuous mode [ 326.260490][T12944] team_slave_0: entered promiscuous mode [ 326.288244][T12944] veth1_to_team: entered promiscuous mode [ 326.312199][T12944] team_slave_1: entered promiscuous mode [ 326.341631][T12944] veth0_to_batadv: entered promiscuous mode [ 326.364735][T12944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.378552][T12944] batadv_slave_0: entered promiscuous mode [ 326.400412][T12944] veth1_to_batadv: entered promiscuous mode [ 326.426256][T12944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.456324][T12944] xfrm0: entered promiscuous mode [ 326.485403][T12944] veth0_to_hsr: entered promiscuous mode [ 326.539062][T12944] veth1_to_hsr: entered promiscuous mode [ 326.623521][T12944] hsr0: entered promiscuous mode [ 326.633520][T12944] veth1_virt_wifi: entered promiscuous mode [ 326.645413][T12944] veth0_virt_wifi: entered promiscuous mode [ 326.695632][T12944] virt_wifi0: entered promiscuous mode [ 326.706738][T12944] vlan1: entered promiscuous mode [ 326.729145][T12944] macvlan0: entered promiscuous mode [ 326.807420][T12944] macvlan1: entered promiscuous mode [ 326.816095][T12944] ipvlan0: entered promiscuous mode [ 326.849129][T12944] ipvlan1: entered promiscuous mode [ 326.867360][T12944] macsec0: entered promiscuous mode [ 326.972431][T12944] geneve1: entered promiscuous mode [ 326.994200][T12944] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 327.004217][T12944] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 327.011665][T12944] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 327.020019][T12944] bridge1: entered promiscuous mode [ 327.042915][T12944] tipc: Resetting bearer [ 327.073172][T12944] ipvlan2: entered promiscuous mode [ 327.080461][T12944] bridge2: entered promiscuous mode [ 327.100394][T12944] bridge3: entered promiscuous mode [ 327.100592][T12944] bridge4: entered promiscuous mode [ 327.100754][T12944] bridge5: entered promiscuous mode [ 327.100900][T12944] netdevsim netdevsim0 eth0: entered promiscuous mode [ 327.101072][T12944] netdevsim netdevsim0 eth1: entered promiscuous mode [ 327.101247][T12944] netdevsim netdevsim0 eth2: entered promiscuous mode [ 327.101418][T12944] netdevsim netdevsim0 eth3: entered promiscuous mode [ 327.101582][T12944] bridge6: entered promiscuous mode [ 327.158578][T12944] veth2: entered promiscuous mode [ 327.158830][T12944] veth3: entered promiscuous mode [ 327.159280][T12944] bridge7: entered promiscuous mode [ 327.159441][T12944] bond1: entered promiscuous mode [ 327.188058][T12944] bond3: entered promiscuous mode [ 327.193694][T12944] bridge0.257: entered promiscuous mode [ 327.200108][T12944] macsec1: entered promiscuous mode [ 327.215350][T12944] sit1: entered promiscuous mode [ 327.220859][T12944] syztnl1: entered promiscuous mode [ 327.226341][T12944] bond4: entered promiscuous mode [ 327.232420][T12944] veth4: entered promiscuous mode [ 327.235462][T12944] pimreg: entered promiscuous mode [ 327.262912][T12944] ipvlan3: entered promiscuous mode [ 327.269299][T12944] ipvlan4: entered promiscuous mode [ 327.276322][T12944] macvtap0: entered promiscuous mode [ 327.282275][T12944] gtp0: entered promiscuous mode [ 327.291609][T12944] bond7: entered promiscuous mode [ 327.297141][T12944] veth5: entered promiscuous mode [ 327.303089][T12944] veth6: entered promiscuous mode [ 327.309480][T12944] bond8: entered promiscuous mode [ 327.321933][T12944] ip6gre1: entered promiscuous mode [ 327.329190][T12944] bond9: entered promiscuous mode [ 327.329359][T12944] bond11: entered promiscuous mode [ 327.329511][T12944] mac80211_hwsim hwsim33 wlan3: entered promiscuous mode [ 327.347707][T12944] mac80211_hwsim hwsim35 wlan4: entered promiscuous mode [ 327.359361][ T7069] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.359627][ T7069] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.376457][ T7069] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.376529][ T7069] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.376575][ T7069] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.376673][ T7069] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.376795][ T7069] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.376898][ T7069] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.489541][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 327.519238][ T25] lo speed is unknown, defaulting to 1000 [ 327.519294][ T25] sz1: Port: 1 Link DOWN [ 327.540685][ T25] lo speed is unknown, defaulting to 1000 [ 327.611582][T12963] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 327.677860][T12963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.767281][T12963] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 327.777992][T12963] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 327.792515][T12963] batman_adv: batadv0: Interface activated: macvtap1 [ 327.927320][T12993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 328.153446][T12963] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 328.248570][ T2227] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.249122][ T2227] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.249238][ T2227] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.253022][T12966] batadv_slave_1: entered promiscuous mode [ 328.271354][T12967] batadv_slave_1: left promiscuous mode [ 328.291450][T12941] lo speed is unknown, defaulting to 1000 [ 328.370604][T13000] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.378589][T13000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.380384][T13000] IPv6: NLM_F_CREATE should be set when creating new route [ 328.380436][T13000] IPv6: NLM_F_CREATE should be set when creating new route [ 328.380464][T13000] IPv6: NLM_F_CREATE should be set when creating new route [ 328.412337][T13000] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1617'. [ 328.425969][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 328.619072][T13005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.619109][T13005] IPv6: NLM_F_CREATE should be set when creating new route [ 328.619173][T13005] IPv6: NLM_F_CREATE should be set when creating new route [ 328.619204][T13005] IPv6: NLM_F_CREATE should be set when creating new route [ 328.676480][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 328.727088][ T7056] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.829334][ T256] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 329.050944][T12975] lo speed is unknown, defaulting to 1000 [ 329.243880][T13019] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 329.253748][T13021] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 329.661350][T13033] xt_l2tp: v2 sid > 0xffff: 33554432 [ 329.667136][T13028] xt_l2tp: v2 sid > 0xffff: 33554432 [ 329.672860][T13023] wg2: Caught tx_queue_len zero misconfig [ 330.800962][T13055] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20003 [ 331.144757][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'. [ 331.346168][T13062] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1626'. [ 331.399936][T13067] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1626'. [ 331.595379][T13065] IPVS: set_ctl: invalid protocol: 61 224.0.0.1:20001 [ 331.724689][T13078] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 332.317923][T13097] netlink: 'syz.5.1632': attribute type 1 has an invalid length. [ 332.317971][T13097] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1632'. [ 332.318012][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1632'. [ 332.759209][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 333.761588][T13124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.761628][T13124] IPv6: NLM_F_CREATE should be set when creating new route [ 333.761691][T13124] IPv6: NLM_F_CREATE should be set when creating new route [ 334.516824][T13114] syz_tun: left promiscuous mode [ 335.653860][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1642'. [ 336.046982][T13114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.117784][T13114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.492160][T13114] veth1_vlan: left allmulticast mode [ 336.729546][T13114] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 336.736991][T13114] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 336.846365][T13114] vlan2: left promiscuous mode [ 336.853492][T13114] macvlan0: left promiscuous mode [ 336.941324][T13114] vlan4: left promiscuous mode [ 336.941367][T13114] 0·: left promiscuous mode [ 336.941626][T13114] vlan4: left allmulticast mode [ 336.941646][T13114] 0·: left allmulticast mode [ 336.941665][T13114] hsr_slave_0: left allmulticast mode [ 336.987814][T13114] veth5: left allmulticast mode [ 337.005187][T13114] bond0: left promiscuous mode [ 337.090513][T13114] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 337.090674][T13114] ipvlan2: left allmulticast mode [ 337.090712][T13114] macvlan1: left allmulticast mode [ 337.166866][ T256] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.178697][ T256] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.238205][T13151] hsr_slave_1 (unregistering): left promiscuous mode [ 337.315945][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1643'. [ 337.673796][T13155] bond6: option downdelay: invalid value (18446744073709551487) [ 337.684710][T13155] bond6: option downdelay: allowed values 0 - 2147483647 [ 337.698347][T13155] bond6 (unregistering): Released all slaves [ 337.729581][T13161] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1644'. [ 337.759334][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'. [ 337.889033][ T7064] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.891316][ T7064] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.892656][ T7064] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.895986][ T7064] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.896034][ T7064] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.896066][ T7064] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.021377][T13161] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1644'. [ 338.064444][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 338.178643][T13167] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1647'. [ 338.260859][T13170] netlink: 'syz.3.1647': attribute type 11 has an invalid length. [ 338.269066][T13170] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1647'. [ 338.411405][T13181] xt_hashlimit: size too large, truncated to 1048576 [ 338.418334][T13181] xt_hashlimit: max too large, truncated to 1048576 [ 338.449386][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1650'. [ 338.449665][T13183] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1650'. [ 338.679568][T13186] ip6gre1: entered promiscuous mode [ 338.683074][T13186] ip6gre1: entered allmulticast mode [ 338.702279][T13186] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.062579][T13199] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 339.081526][T13199] netlink: 'syz.6.1654': attribute type 29 has an invalid length. [ 339.179709][ T256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.187163][ T256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.200349][ T5756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.269526][T13203] syzkaller0: entered promiscuous mode [ 339.269923][T13203] syzkaller0: entered allmulticast mode [ 339.384960][T13203] tipc: Enabled bearer , priority 0 [ 339.445345][T13202] tipc: Resetting bearer [ 339.501203][ T5714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.534642][T13202] tipc: Disabling bearer [ 340.107513][T13232] sctp: [Deprecated]: syz.0.1665 (pid 13232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.107513][T13232] Use struct sctp_sack_info instead [ 340.171966][T13232] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 340.278609][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 340.290395][ T5756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.456660][T13240] lo: Caught tx_queue_len zero misconfig [ 340.969247][T13261] __nla_validate_parse: 11 callbacks suppressed [ 340.977923][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1670'. [ 341.218373][T13270] xt_TCPMSS: Only works on TCP SYN packets [ 341.326029][T13270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1675'. [ 341.460596][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1677'. [ 341.524101][T13286] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1676'. [ 342.307466][T13288] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 342.325744][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1677'. [ 342.566965][T13303] netlink: 'syz.4.1681': attribute type 3 has an invalid length. [ 342.644475][T13302] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1681'. [ 343.008825][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.774202][T13331] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1688'. [ 345.314878][T13375] IPVS: set_ctl: invalid protocol: 73 172.20.20.54:20003 [ 346.415529][T13397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1704'. [ 346.530556][T13401] bond0: left promiscuous mode [ 346.542226][T13401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.608644][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'. [ 346.608690][T13401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.890250][T13401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.899697][T13401] batman_adv: batadv0: Removing interface: gretap1 [ 347.258919][T13420] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1708'. [ 347.777977][T13426] bond10: option arp_interval: invalid value (18446744073709551615) [ 347.786433][T13426] bond10: option arp_interval: allowed values 0 - 2147483647 [ 347.799173][T13426] bond10 (unregistering): Released all slaves [ 349.079630][T13444] ip6gretap1: entered allmulticast mode [ 349.103382][T13444] batman_adv: batadv0: Adding interface: ip6gretap1 [ 349.111991][T13444] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.138152][T13444] batman_adv: batadv0: Interface activated: ip6gretap1 [ 349.898080][T13482] ip6erspan0: entered allmulticast mode [ 349.945189][T13489] x_tables: duplicate underflow at hook 3 [ 350.082033][T13481] ip6erspan0: entered allmulticast mode [ 350.520192][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.147271][T13526] netlink: 'syz.3.1736': attribute type 2 has an invalid length. [ 351.167216][ T5616] block nbd3: Receive control failed (result -32) [ 351.178754][ T5624] block nbd3: Receive control failed (result -32) [ 351.605957][T13545] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.708056][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 351.710794][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 351.712681][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 351.822659][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 351.825523][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 351.833314][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 351.836228][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 351.845405][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 351.858752][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 351.862814][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 352.987052][T13556] ip6gre1: left promiscuous mode [ 352.987908][T13556] ip6gre1: left allmulticast mode [ 353.023517][T13590] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 353.092419][T13584] veth0_to_bond: entered allmulticast mode [ 353.099542][T13590] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 353.110022][T13590] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 353.121252][T13590] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 353.121524][T13595] ip6tnl0: Caught tx_queue_len zero misconfig [ 353.140984][T13590] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 353.230071][T13590] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 353.424728][T13590] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 353.434504][T13590] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 353.460055][T13590] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 353.595176][T13599] veth8: entered allmulticast mode [ 353.680272][T13599] bond10: (slave veth8): Enslaving as an active interface with an up link [ 353.896945][ T256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.912149][ T256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.920815][T12979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.111084][T13607] syzkaller1: entered promiscuous mode [ 354.111937][T13607] syzkaller1: entered allmulticast mode [ 354.998836][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 357.321135][T13636] validate_nla: 24 callbacks suppressed [ 357.321183][T13636] netlink: 'syz.6.1764': attribute type 21 has an invalid length. [ 357.321203][T13636] __nla_validate_parse: 60 callbacks suppressed [ 357.321218][T13636] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1764'. [ 357.321298][T13636] netlink: 'syz.6.1764': attribute type 5 has an invalid length. [ 357.321315][T13636] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1764'. [ 357.434019][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1766'. [ 357.452851][T13642] netlink: 'syz.4.1766': attribute type 4 has an invalid length. [ 357.560050][T13650] netlink: 'syz.4.1766': attribute type 4 has an invalid length. [ 357.686865][T13655] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1769'. [ 357.974967][T13662] veth5: entered allmulticast mode [ 358.157173][T13669] netlink: 179624 bytes leftover after parsing attributes in process `syz.4.1776'. [ 358.363679][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1778'. [ 358.363909][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1778'. [ 358.368030][T13674] xt_l2tp: invalid flags combination: 0 [ 358.452756][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 358.787327][T13697] netlink: 'syz.3.1784': attribute type 21 has an invalid length. [ 358.787371][T13697] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1784'. [ 359.336665][T13697] netlink: 'syz.3.1784': attribute type 5 has an invalid length. [ 359.336707][T13697] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1784'. [ 359.889432][T13712] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 361.063719][T13747] xfrm0: Caught tx_queue_len zero misconfig [ 361.536479][T13767] gretap0: entered promiscuous mode [ 361.542371][T13767] vlan0: entered promiscuous mode [ 361.785186][T13777] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 362.197142][T13797] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 362.223323][T13792] dvmrp0: entered allmulticast mode [ 362.362544][T13785] __nla_validate_parse: 5 callbacks suppressed [ 362.362607][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1809'. [ 362.577401][T13791] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1811'. [ 363.334474][T13835] team_slave_1: Caught tx_queue_len zero misconfig [ 363.431359][T13804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.100358][T13933] netlink: 'syz.4.1839': attribute type 2 has an invalid length. [ 367.120438][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1845'. [ 367.380547][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1848'. [ 367.669774][T13976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1848'. [ 367.670008][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1848'. [ 367.789968][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1848'. [ 368.046821][T13990] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 368.272426][ T7169] udevd[7169]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 368.290853][ T7169] udevd[7169]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 368.426251][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1855'. [ 368.435723][T14004] netlink: 'syz.0.1855': attribute type 3 has an invalid length. [ 368.445061][T14004] netlink: 'syz.0.1855': attribute type 5 has an invalid length. [ 368.453284][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 368.482339][T14004] geneve4: entered promiscuous mode [ 368.487870][T14004] geneve4: entered allmulticast mode [ 368.519380][ T7065] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 49201 - 0 [ 368.520016][ T7065] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 49201 - 0 [ 368.520119][ T7065] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 49201 - 0 [ 368.520205][ T7065] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 49201 - 0 [ 368.864573][T14014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1859'. [ 368.877698][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 368.878224][T14014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1859'. [ 368.953811][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 369.039883][ T7058] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.040425][ T7058] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.040519][ T7058] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.040608][ T7058] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.486425][T14042] netlink: 'syz.4.1865': attribute type 11 has an invalid length. [ 369.499730][T14042] netlink: 'syz.4.1865': attribute type 11 has an invalid length. [ 370.068355][T14058] xfrm0: Caught tx_queue_len zero misconfig [ 370.943376][T14065] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 371.674284][T14100] Bluetooth: hci0: unsupported parameter 5135 [ 371.674331][T14100] Bluetooth: hci0: unsupported parameter 8192 [ 371.674364][T14100] Bluetooth: hci0: unsupported parameter 5135 [ 371.674381][T14100] Bluetooth: hci0: unsupported parameter 8192 [ 371.871066][T14104] syzkaller0: entered promiscuous mode [ 371.871111][T14104] syzkaller0: entered allmulticast mode [ 372.697613][ T7047] tipc: Subscription rejected, illegal request [ 372.779118][T14141] x_tables: duplicate underflow at hook 2 [ 372.807394][T14141] macsec2: entered allmulticast mode [ 372.813078][T14141] veth1_macvtap: entered allmulticast mode [ 372.820722][T14141] veth1_macvtap: left allmulticast mode [ 373.430407][T14152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.479549][T14152] __nla_validate_parse: 6 callbacks suppressed [ 373.487145][T14152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1897'. [ 373.601598][ T5616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 373.615391][ T5616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 373.628716][ T5616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 373.638233][ T5616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 373.649404][ T5616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.734155][T14160] veth0_virt_wifi: entered allmulticast mode [ 374.636393][T14155] lo speed is unknown, defaulting to 1000 [ 375.718730][ T5624] Bluetooth: hci7: command tx timeout [ 375.761849][T14224] netlink: 'syz.0.1912': attribute type 8 has an invalid length. [ 375.769899][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'. [ 376.311206][T14155] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.319111][T14155] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.326687][T14155] bridge_slave_0: entered allmulticast mode [ 376.334933][T14155] bridge_slave_0: entered promiscuous mode [ 376.346926][T14155] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.354450][T14155] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.354650][T14155] bridge_slave_1: entered allmulticast mode [ 376.377244][T14155] bridge_slave_1: entered promiscuous mode [ 376.651256][T14155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.710055][T14155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.006055][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1916'. [ 377.123893][T14246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1916'. [ 377.148220][T14155] team0: Port device team_slave_0 added [ 377.177782][T14155] team0: Port device team_slave_1 added [ 377.418077][T14155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.418115][T14155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.418165][T14155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.468915][T14155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.469381][T14155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.469464][T14155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.799951][ T5624] Bluetooth: hci7: command tx timeout [ 377.815829][T14155] hsr_slave_0: entered promiscuous mode [ 377.828714][T14155] hsr_slave_1: entered promiscuous mode [ 377.838209][T14155] debugfs: 'hsr0' already exists in 'hsr' [ 377.840851][T14155] Cannot create hsr debugfs directory [ 379.378032][T14289] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1925'. [ 379.673050][T14155] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 379.702700][T14155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.717054][T14155] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 379.736513][T14155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.747244][T14155] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 379.772234][T14155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.781819][T14155] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 379.805179][T14155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 379.879197][ T5624] Bluetooth: hci7: command tx timeout [ 379.983921][T14309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1929'. [ 380.388707][T14155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.498117][T14155] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.529127][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.529291][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.555629][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.555755][ T7065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.788339][T14328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1936'. [ 380.799831][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 380.799871][T14328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1936'. [ 380.901860][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1936'. [ 380.927486][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'. [ 380.927999][T14330] netlink: 'syz.5.1934': attribute type 30 has an invalid length. [ 380.964672][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'. [ 380.965190][T14330] netlink: 'syz.5.1934': attribute type 30 has an invalid length. [ 381.053459][T14319] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1934'. [ 381.570201][T14338] xt_policy: neither incoming nor outgoing policy selected [ 381.583657][T14338] xt_policy: neither incoming nor outgoing policy selected [ 381.583826][T14338] xt_policy: neither incoming nor outgoing policy selected [ 381.583948][T14338] xt_policy: neither incoming nor outgoing policy selected [ 381.584065][T14338] xt_policy: neither incoming nor outgoing policy selected [ 381.584181][T14338] xt_policy: neither incoming nor outgoing policy selected [ 381.584296][T14338] xt_policy: neither incoming nor outgoing policy selected [ 381.584443][T14338] xt_policy: neither incoming nor outgoing policy selected [ 381.584568][T14338] xt_policy: neither incoming nor outgoing policy selected [ 381.599978][T14339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1938'. [ 381.660141][T14338] xt_policy: neither incoming nor outgoing policy selected [ 381.845045][T14334] lo speed is unknown, defaulting to 1000 [ 381.962579][ T5624] Bluetooth: hci7: command tx timeout [ 382.326642][T14351] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 382.531433][T14351] bond2: entered promiscuous mode [ 382.537518][T14351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.158617][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.313568][T14376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.313612][T14376] IPv6: NLM_F_CREATE should be set when creating new route [ 383.369881][T14155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.731671][T14388] batadv_slave_0: Caught tx_queue_len zero misconfig [ 383.834550][T14388] netlink: Conntrack attr has 8 unknown bytes [ 383.834612][T14388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.178451][T14399] netlink: 'syz.5.1953': attribute type 1 has an invalid length. [ 384.588927][T14419] __nla_validate_parse: 67 callbacks suppressed [ 384.589159][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 384.589387][T14419] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 384.589999][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 384.590207][T14419] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 384.590905][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 384.591116][T14419] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 384.627874][T14417] openvswitch: netlink: VLAN attribute unexpected. [ 384.659859][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 384.669324][T14419] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 384.670332][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 384.670549][T14419] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 384.697250][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 384.697498][T14419] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 384.698112][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 384.698309][T14419] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 384.698884][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 384.699594][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 384.700498][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 384.850325][T14421] netlink: 'syz.0.1955': attribute type 11 has an invalid length. [ 385.368155][T14155] veth0_vlan: entered promiscuous mode [ 385.410364][T14155] veth1_vlan: entered promiscuous mode [ 385.620398][T14155] veth0_macvtap: entered promiscuous mode [ 385.655152][T14155] veth1_macvtap: entered promiscuous mode [ 385.704749][T14155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.730941][T14155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.962624][ T7065] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.963226][ T7065] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.963782][ T7065] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.973663][ T7047] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.175877][ T7065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.175917][ T7065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.517639][ T7047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.517682][ T7047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.684508][T14445] netlink: 'syz.5.1964': attribute type 1 has an invalid length. [ 387.029715][T14467] netlink: 'syz.5.1967': attribute type 7 has an invalid length. [ 387.037893][T14467] netlink: 'syz.5.1967': attribute type 8 has an invalid length. [ 387.099278][T14466] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 387.594717][T14459] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 387.678658][T14459] bond7 (unregistering): Released all slaves [ 387.886903][T14482] netlink: 'syz.3.1971': attribute type 1 has an invalid length. [ 387.936682][T14466] geneve2: entered promiscuous mode [ 387.948913][T14466] geneve2: entered allmulticast mode [ 388.030897][T14480] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 388.230755][T14483] gretap1: entered allmulticast mode [ 388.343909][T14473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.469793][T14489] lo speed is unknown, defaulting to 1000 [ 388.592926][T14503] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 389.214778][T14516] xt_policy: output policy not valid in PREROUTING and INPUT [ 390.271675][T14546] __nla_validate_parse: 39 callbacks suppressed [ 390.278183][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1984'. [ 390.344409][T14546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.352953][T14546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.382511][T14546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.403572][T14546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.704342][T14567] bridge_slave_0: left allmulticast mode [ 391.710321][T14567] bridge_slave_0: left promiscuous mode [ 391.710596][T14567] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.740080][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1990'. [ 391.872411][T14567] bridge_slave_1: left allmulticast mode [ 391.872458][T14567] bridge_slave_1: left promiscuous mode [ 391.872724][T14567] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.052876][T14567] bond0: (slave bond_slave_0): Releasing backup interface [ 392.158834][T14567] bond0: (slave bond_slave_1): Releasing backup interface [ 392.268624][T14567] team0: Port device team_slave_0 removed [ 392.299087][T14567] team0: Port device team_slave_1 removed [ 392.310200][T14567] net_ratelimit: 27 callbacks suppressed [ 392.316160][T14567] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 392.355040][T14565] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 392.444421][T14568] ipvlan2: entered allmulticast mode [ 392.450451][T14568] syz_tun: entered allmulticast mode [ 392.500170][T14570] team0: Mode changed to "loadbalance" [ 392.513241][T14555] macvlan0: entered promiscuous mode [ 393.058651][T14592] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1995'. [ 393.058757][T14592] ip6tnl0: Caught tx_queue_len zero misconfig [ 393.076788][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'. [ 393.282659][T14605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1998'. [ 393.573323][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 393.614403][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 393.691087][T14624] SET target dimension over the limit! [ 393.966923][T14629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.010313][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2002'. [ 394.020716][T14629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2003'. [ 394.510529][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2005'. [ 395.044359][T14643] hsr_slave_0: left promiscuous mode [ 395.060107][T14643] hsr_slave_1: left promiscuous mode [ 395.182790][T14650] nbd: must specify at least one socket [ 395.954013][T14669] __nla_validate_parse: 7 callbacks suppressed [ 395.961894][T14669] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2015'. [ 396.075143][T14682] netlink: 'syz.0.2017': attribute type 13 has an invalid length. [ 396.137733][T14682] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 396.191367][T14668] xt_CT: No such helper "netbios-ns" [ 396.236556][T14668] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 396.427681][T14690] netlink: 'syz.5.2021': attribute type 1 has an invalid length. [ 396.510352][T14694] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2021'. [ 396.714272][T14702] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2023'. [ 396.851306][T14690] bond7: entered promiscuous mode [ 396.857277][T14690] 8021q: adding VLAN 0 to HW filter on device bond7 [ 397.039452][T14703] bridge0: port 1(vlan2) entered blocking state [ 397.046800][T14703] bridge0: port 1(vlan2) entered disabled state [ 397.046996][T14703] vlan2: entered allmulticast mode [ 397.047016][T14703] geneve0: entered allmulticast mode [ 397.117848][T14703] vlan2: entered promiscuous mode [ 397.124176][T14703] geneve0: entered promiscuous mode [ 397.577813][T14727] netlink: 'syz.5.2028': attribute type 7 has an invalid length. [ 398.239344][T14746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.286228][T14750] block nbd4: server does not support multiple connections per device. [ 398.295757][T14750] block nbd4: shutting down sockets [ 398.329469][ T32] audit: type=1107 audit(1788617855.818:9): pid=14749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 398.704313][T14758] netlink: 400 bytes leftover after parsing attributes in process `syz.4.2040'. [ 398.775601][T14757] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2039'. [ 398.832037][T14734] infiniband syz0: set down [ 398.832170][T14734] infiniband syz0: added ipvlan1 [ 398.849477][T14758] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2040'. [ 398.899159][T14734] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 398.899236][T14734] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 398.899301][T14734] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 398.904887][T14758] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2040'. [ 399.012239][T14734] RDS/IB: syz0: added [ 399.012323][T14734] smc: adding ib device syz0 with port count 1 [ 399.012366][T14734] smc: ib device syz0 port 1 has no pnetid [ 399.150528][T14763] macsec1: entered allmulticast mode [ 399.157748][T14763] gretap0: entered allmulticast mode [ 399.173026][T14763] gretap0: left allmulticast mode [ 399.351845][T14773] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 399.752380][T14786] Cannot find add_set index 0 as target [ 400.147788][T14795] netlink: 'syz.0.2047': attribute type 12 has an invalid length. [ 400.327387][T14799] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2048'. [ 400.493036][T14804] netlink: 56863 bytes leftover after parsing attributes in process `syz.5.2046'. [ 400.812518][T14806] syzkaller1: entered promiscuous mode [ 400.819392][T14806] syzkaller1: entered allmulticast mode [ 401.678983][T14815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.690972][T14815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.965503][T14815] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 401.982512][T12979] lo speed is unknown, defaulting to 1000 [ 401.982539][T12979] sz1: Port: 1 Link ACTIVE [ 401.982619][T12979] lo speed is unknown, defaulting to 1000 [ 402.096400][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.096537][ T7047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.099757][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.099876][ T7047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.229923][ T7047] bridge0: port 3(vlan2) entered blocking state [ 402.230058][ T7047] bridge0: port 3(vlan2) entered forwarding state [ 402.303633][ T7047] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 402.351225][ T7053] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 402.361957][ T7053] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 402.390313][ T59] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 402.614273][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2051'. [ 403.553631][T14842] xt_connbytes: Forcing CT accounting to be enabled [ 404.204370][T14863] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2058'. [ 404.227373][T14863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2058'. [ 404.337657][T14865] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2060'. [ 404.486847][T14865] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2060'. [ 404.531271][T14863] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2058'. [ 404.584005][T14868] ip6t_hbh: too many supported opts specified [ 404.620132][T14865] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 404.628687][T14865] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 404.804503][T14863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2058'. [ 405.058255][T14881] netlink: 4416 bytes leftover after parsing attributes in process `syz.0.2063'. [ 405.405762][T14890] tipc: Enabling of bearer rejected, failed to enable media [ 405.554262][T14888] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2064'. [ 405.717336][T14903] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2066'. [ 405.733696][T14887] syzkaller0: entered promiscuous mode [ 405.745823][T14887] syzkaller0: entered allmulticast mode [ 406.706324][T14920] netlink: 'syz.7.2070': attribute type 4 has an invalid length. [ 409.403706][ T33] INFO: task syz.2.1255:11388 blocked for more than 143 seconds. [ 409.403753][ T33] Not tainted syzkaller #0 [ 409.403803][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.403819][ T33] task:syz.2.1255 state:D stack:26608 pid:11388 tgid:11387 ppid:5612 task_flags:0x400140 flags:0x00080002 [ 409.403900][ T33] Call Trace: [ 409.403913][ T33] [ 409.403934][ T33] __schedule+0x17db/0x58f0 [ 409.404105][ T33] ? __pfx___schedule+0x10/0x10 [ 409.404153][ T33] ? schedule+0x90/0x2b0 [ 409.404200][ T33] schedule+0x164/0x2b0 [ 409.404238][ T33] schedule_preempt_disabled+0x13/0x30 [ 409.404272][ T33] __mutex_lock+0x7c1/0x1550 [ 409.404317][ T33] ? __mutex_lock+0x5d4/0x1550 [ 409.404359][ T33] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 409.404465][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 409.404503][ T33] ? net_generic+0x1e/0x240 [ 409.404538][ T33] ? net_generic+0x1e/0x240 [ 409.404566][ T33] ? net_generic+0x1e/0x240 [ 409.404591][ T33] ? net_generic+0x1e/0x240 [ 409.404625][ T33] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 409.404660][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 409.404710][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 409.404766][ T33] ? bpf_lsm_capable+0x9/0x20 [ 409.404814][ T33] ? security_capable+0x7e/0x2c0 [ 409.404899][ T33] genl_rcv_msg+0x614/0x7a0 [ 409.404947][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.404986][ T33] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 409.431921][ T33] ? __pfx_ref_tracker_free+0x10/0x10 [ 409.432053][ T33] netlink_rcv_skb+0x226/0x4a0 [ 409.432133][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.432172][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.432220][ T33] ? down_read+0x2be/0x330 [ 409.432286][ T33] genl_rcv+0x28/0x40 [ 409.432319][ T33] netlink_unicast+0x7bd/0x940 [ 409.432358][ T33] netlink_sendmsg+0x813/0xb40 [ 409.432398][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.432438][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 409.432513][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.432542][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 409.432661][ T33] ____sys_sendmsg+0x54e/0x850 [ 409.432694][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.432731][ T33] ? import_iovec+0x73/0xa0 [ 409.432766][ T33] ___sys_sendmsg+0x2a5/0x360 [ 409.432791][ T33] ? __lock_acquire+0x6df/0x2e50 [ 409.432820][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.432851][ T33] ? futex_wait+0x2a2/0x390 [ 409.432934][ T33] ? __fget_files+0x2a/0x420 [ 409.432966][ T33] ? __fget_files+0x3a2/0x420 [ 409.433010][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 409.433048][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.433100][ T33] do_syscall_64+0x166/0x520 [ 409.433134][ T33] ? trace_irq_disable+0x3b/0x140 [ 409.433157][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.433183][ T33] ? clear_bhb_loop+0x70/0xc0 [ 409.433213][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.433238][ T33] RIP: 0033:0x7f45ee99e159 [ 409.433260][ T33] RSP: 002b:00007f45ef87c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.433287][ T33] RAX: ffffffffffffffda RBX: 00007f45eec25fa0 RCX: 00007f45ee99e159 [ 409.433305][ T33] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 409.433321][ T33] RBP: 00007f45eea35024 R08: 0000000000000000 R09: 0000000000000000 [ 409.433336][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.433350][ T33] R13: 00007f45eec26038 R14: 00007f45eec25fa0 R15: 00007ffeb011e0b8 [ 409.538281][ T33] [ 409.538980][ T33] [ 409.538980][ T33] Showing all locks held in the system: [ 409.539051][ T33] locks held by pr/ttyS0/16: 2, last CPU#1: [ 409.539229][ T33] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 409.539964][ T33] #1: ffffffff9ad32098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 409.540194][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 409.540245][ T33] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 409.540543][ T33] locks held by getty/5370: 2, on CPU#1: [ 409.540586][ T33] #0: ffff888035fa40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 409.540817][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 409.540993][ T33] locks held by kworker/u8:12/7047: 3, last CPU#0: [ 409.541035][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 409.541221][ T33] #1: ffffc900049b7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 409.541390][ T33] #2: ffff888052a55258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 409.541703][ T33] locks hel ** replaying previous printk message ** [ 409.541703][ T33] locks held by kworker/u8:23/7058: 2, last CPU#0: [ 409.541753][ T33] #0: ffff8880325e6140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 409.541908][ T33] #1: ffffc900048dfc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 409.542195][ T33] locks held by kworker/u8:24/7059: 3, on CPU#1: [ 409.542253][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 409.542439][ T33] #1: ffffc900048cfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 409.542631][ T33] #2: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 409.542917][ T33] locks held by syz.1.302/7209: 2, on CPU#1: [ 409.542965][ T33] #0: ffffffff902c17e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.543169][ T33] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 409.543338][ T33] locks held by syz.2.1255/11388: 2, on CPU#1: [ 409.543356][ T33] #0: ffffffff902c17e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.543424][ T33] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 409.543489][ T33] locks held by syz.6.1779/13676: 3, on CPU#1: [ 409.543507][ T33] #0: ffffffff902c17e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.543585][ T33] #1: ffff88802abd86e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 409.543765][ T33] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 409.544053][ T33] locks held by syz.3.2032/14734: 7, on CPU#1: [ 409.544109][ T33] #0: ffffffff9ad80a28 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 409.544383][ T33] #1: ffffffff8ffac968 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42b/0x650 [ 409.544604][ T33] #2: ffffffff8ff9da88 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 409.544806][ T33] #3: ffffffff8ff9dc48 (rdma_nets_rwsem){++++}-{4:4}, at: enable_device_and_get+0x27c/0x3e0 [ 409.544992][ T33] #4: ffff888046cbd020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 409.545214][ T33] #5: ffff888046cbd310 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 409.545449][ T33] #6: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 409.545647][ T33] locks held by syz.4.2064/14886: 2, on CPU#1: [ 409.545692][ T33] #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 409.545992][ T33] #1: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 409.546177][ T33] locks held by syz.0.2067/14896: 1, on CPU#1: [ 409.546225][ T33] #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 409.546412][ T33] locks held by syz.7.2070/14914: 2, on CPU#0: [ 409.546465][ T33] #0: ffffffff907a4b40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 409.546658][ T33] #1: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 409.546809][ T33] locks held by syz.7.2070/14917: 2, on CPU#1: [ 409.546856][ T33] #0: ffffffff8f996088 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 409.547049][ T33] #1: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 409.547199][ T33] locks held by syz.7.2070/14920: 1, on CPU#0: [ 409.547245][ T33] #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 409.547405][ T33] locks held by syz.5.2071/14916: 1, on CPU#1: [ 409.547452][ T33] #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 409.547703][ T33] locks held by syz.5.2071/14918: 1, on CPU#1: [ 409.547750][ T33] #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 409.547958][ T33] locks held by syz.5.2071/14921: 1, on CPU#1: [ 409.548015][ T33] #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 409.548201][ T33] locks held by syz.5.2071/14923: 1, on CPU#0: [ 409.548246][ T33] #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 409.789818][ T33] locks held by syz.5.2071/14925: 1, on CPU#1: [ 409.789886][ T33] #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 409.790226][ T33] locks held by syz.5.2071/14931: 1, on CPU#1: [ 409.790273][ T33] #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 409.790457][ T33] locks held by dhcpcd/14937: 4, last CPU#1: [ 409.790472][ T33] #0: ffff88807c7601c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 409.790637][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 409.791802][ T33] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 409.791904][ T33] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 409.792102][ T33] [ 409.792131][ T33] ============================================= [ 409.792131][ T33] [ 409.792165][ T33] NMI backtrace for cpu 0 [ 409.792219][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 409.792290][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.792327][ T33] Call Trace: [ 409.792352][ T33] [ 409.792384][ T33] dump_stack_lvl+0xe8/0x150 [ 409.792491][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 409.792630][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 409.792751][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 409.792846][ T33] sys_info+0x135/0x170 [ 409.792915][ T33] watchdog+0xfd7/0x1030 [ 409.793049][ T33] ? watchdog+0x1c7/0x1030 [ 409.793132][ T33] kthread+0x38b/0x480 [ 409.793202][ T33] ? __pfx_watchdog+0x10/0x10 [ 409.793260][ T33] ? __pfx_kthread+0x10/0x10 [ 409.793330][ T33] ret_from_fork+0x514/0xb70 [ 409.793430][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 409.793554][ T33] ? __switch_to+0xc89/0x1420 [ 409.793662][ T33] ? __pfx_kthread+0x10/0x10 [ 409.793730][ T33] ret_from_fork_asm+0x1a/0x30 [ 409.793870][ T33] [ 409.794041][ T33] Sending NMI from CPU 0 to CPUs 1: [ 409.794112][ C1] NMI backtrace for cpu 1 [ 409.794127][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 409.794151][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.794164][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 409.794235][ C1] Code: e8 4e b3 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 7c c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 9a 40 75 06 cc 44 89 f9 80 e1 07 [ 409.794253][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 409.794272][ C1] RAX: 1ffffffff35a6400 RBX: 00000000000003fd RCX: 0000000000000000 [ 409.794287][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 409.794299][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 409.794314][ C1] R10: dffffc0000000000 R11: ffffffff85720780 R12: dffffc0000000000 [ 409.794330][ C1] R13: 0000000000000000 R14: ffffffff9ad320c0 R15: 0000000000000000 [ 409.794344][ C1] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 409.794361][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.794376][ C1] CR2: 000055a5e2943f68 CR3: 000000005be9c000 CR4: 00000000003526f0 [ 409.794395][ C1] Call Trace: [ 409.794402][ C1] [ 409.794412][ C1] wait_for_lsr+0x184/0x2f0 [ 409.794456][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 409.794488][ C1] serial8250_console_write+0xaa1/0x1200 [ 409.794519][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 409.794556][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 409.794588][ C1] ? __schedule+0x17f1/0x58f0 [ 409.794625][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 409.794658][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 409.794685][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 409.794717][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 409.794748][ C1] nbcon_kthread_func+0x679/0x880 [ 409.794774][ C1] ? nbcon_kthread_func+0x163/0x880 [ 409.794794][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 409.794820][ C1] ? __kthread_parkme+0x71/0x1f0 [ 409.794852][ C1] ? __kthread_parkme+0x199/0x1f0 [ 409.794886][ C1] kthread+0x38b/0x480 [ 409.794906][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 409.794926][ C1] ? __pfx_kthread+0x10/0x10 [ 409.794946][ C1] ret_from_fork+0x514/0xb70 [ 409.794973][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 409.795005][ C1] ? __switch_to+0xc89/0x1420 [ 409.795035][ C1] ? __pfx_kthread+0x10/0x10 [ 409.795056][ C1] ret_from_fork_asm+0x1a/0x30 [ 409.795098][ C1] [ 409.923857][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 410.771088][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 410.780221][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.790294][ T33] Call Trace: [ 410.793616][ T33] [ 410.796563][ T33] vpanic+0x56d/0xa60 [ 410.800578][ T33] ? __pfx___schedule+0x10/0x10 [ 410.805452][ T33] ? __pfx_vpanic+0x10/0x10 [ 410.809987][ T33] panic+0xc5/0xd0 [ 410.813739][ T33] ? __pfx_panic+0x10/0x10 [ 410.818182][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 410.823674][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 410.829071][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 410.835257][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 410.841434][ T33] watchdog+0x1030/0x1030 [ 410.845791][ T33] ? watchdog+0x1c7/0x1030 [ 410.850229][ T33] kthread+0x38b/0x480 [ 410.854317][ T33] ? __pfx_watchdog+0x10/0x10 [ 410.859007][ T33] ? __pfx_kthread+0x10/0x10 [ 410.863614][ T33] ret_from_fork+0x514/0xb70 [ 410.868227][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 410.873367][ T33] ? __switch_to+0xc89/0x1420 [ 410.878072][ T33] ? __pfx_kthread+0x10/0x10 [ 410.882687][ T33] ret_from_fork_asm+0x1a/0x30 [ 410.887500][ T33] [ 410.891149][ T33] Kernel Offset: disabled [ 410.895487][ T33] Rebooting in 86400 seconds..