last executing test programs: 3m39.512374701s ago: executing program 2 (id=3099): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd700001dcdf25000000007b3becb9f1b028e93b7147d33d667c50b2b6a1", @ANYRES32=0x0, @ANYBLOB="162a00006cd102e71c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x8000002) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x405, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x4008050, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x80000001, @empty}}}, 0x84) 3m39.221966018s ago: executing program 2 (id=3102): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESOCT=r2, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m38.931605479s ago: executing program 2 (id=3104): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xaa, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x20e7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x5a}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @cgroup_device=0x2febe5ce8a469a3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000400), 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r7}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r8, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002400070128bd7000fbdbdf25027c00000c00018008000200010000001b3741ba9fbf42b3fc6a28a2f9076c77bf8a99b8b4d47d49f2765244facf00d4eb59a068fba53d0f0ed44b24703dafd6355d16d79a4c"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x20080000, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x1}}}], 0x18}, 0x800) sendmsg$netlink(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r13 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000480)) ioctl$sock_proto_private(r13, 0x89ed, &(0x7f00000004c0)="28cb600e294e3c151e31c42c21c41533d27fd39c1f") 3m38.555734757s ago: executing program 2 (id=3105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000d0000004200000040"], 0x50) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x25}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="ac", 0x1}], 0x1}, 0x8804) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000440), 0x810f0, r0}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x8, 0x10000a4, 0xffb, 0x7, 0xf71, 0xc1, 0x81, 0xffffffff, 0x3, 0x7, 0x1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x14, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3, 0x1c00, 0xb, 0x8, 0xbed4, 0x1ff, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x6, 0x1, 0x7f, 0x7, 0x7, 0x7, 0x1, 0x105, 0x7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x4, 0x4, 0x100002, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x4, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x1, 0xd9a, 0x400d, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x9, 0x400004, 0x6, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0xffffffff]}}) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1e, 0x8010, r9, 0x0) (async) r13 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r13, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) (async) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg(r14, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000840)="932c7c6e56fe8958b4c8175ddbec9cba", 0x10}], 0x1}}], 0x1, 0x40040) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4e5b7000000000061117400000000001a000000000000009508000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x1, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3m37.194932783s ago: executing program 2 (id=3110): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000000300)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 3m36.559901302s ago: executing program 2 (id=3114): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16=r0, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c00000008000300040000003400"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40041}}], 0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x4}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r7, 0xffffffffffffffff}, 0x4) unshare(0x400) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, 0x0, 0x0}, 0x20) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x34, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r9, 0x84, 0x78, &(0x7f0000000680)=r11, 0x4) 3m21.508071216s ago: executing program 32 (id=3114): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16=r0, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c00000008000300040000003400"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40041}}], 0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x4}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r7, 0xffffffffffffffff}, 0x4) unshare(0x400) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, 0x0, 0x0}, 0x20) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x34, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r9, 0x84, 0x78, &(0x7f0000000680)=r11, 0x4) 2m34.392166429s ago: executing program 0 (id=3497): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) close(r0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="1535077099537d53c15bb7881d4f631b52f5f61a5d7c8a1c44a47b9ac099be0113b65cb6e97ae4b23f0803f4d28b3ef80f9d99fdb15863852e3a35e0c2fee2c7770ea954737713ee", 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x13}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\xef:\x00'}]}, 0x34}}, 0x20000000) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/220, 0xdc}], 0x1}}], 0x1, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c004}, 0xc054) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m34.148937329s ago: executing program 0 (id=3499): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7ff}, 0x1c) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r1, &(0x7f0000000540)=""/4096, 0x1000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r1, 0xd, 0x0, @void}, 0x10) 2m33.135689506s ago: executing program 0 (id=3507): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000800000091104b000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r2, &(0x7f0000000040)=0x4800000000000000, r1, &(0x7f0000000080)=0xbc, 0x7, 0x8) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 2m32.594332275s ago: executing program 0 (id=3511): socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r0) (async) ppoll(0x0, 0x0, 0x0, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071105c00000000001f010000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x117, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb4d2}, 0x46) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x478, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {0x3}, @broadcast, @device_b, @from_mac=@broadcast}, 0x0, @default, 0x8848, @void, @val, @val={0x3, 0x1, 0x5c}, @void, @val={0x6, 0x2, 0x10}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x28, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1e, 0x3, "d3536c63b4f6bfadfbba56bd20655e7be8b447d76d44414e136f"}]}, @NL80211_ATTR_FTM_RESPONDER={0x3dc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x9d, 0x2, "7dd522cd0648e18a2cd0450303a1d118fbb40d24f2e59fec3865ff4925ae605803baf2023e7c98a71295ee632aa6a7b0f94b125102c91a00d9c6fa3e3f9c958993725440b96d73c582fcab1e2a458f36d13d854904562da0689ce38d7f3941f3ce2f70d0cb99088aec6ce465ef309bbeabe81a8334a624a6a9006a8209fc2f71f3413bf507ca4911cfd4de922d7cf067de4871a0ae82f3a84b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf8, 0x3, "49da519359ce0c29644081acb710e067ed9faa7fda6dac531830abc2733e3b8f2676d3c2297a97c8c87c392b0e43d0a7d014333cb2efca51ba4d7d5dfc109b75bd77cfaac67cb67f976b2a41c62190b76c37bb4447beef8885651a2de5d648be2d35e0be1aab9d6681a1e0f67b66db7d6574cf8bab583fd8e6024b102594d980b8c6b8de99289a27f3bea06dd1e6a3f810558e1379b39b61d39175a6897b90b74ee4e2c18a5ecac25208411113003fb2e7d71dd8fa013ad658a1ea8a23e68814a2df080c37672d8258e19d2e6e2b1f38923d33e4f348ccc8d9ac13ab1afd644c90d9135e638f489cbee4cbec9b8287b3d0cfa7a7"}, @NL80211_FTM_RESP_ATTR_LCI={0xbc, 0x2, "e2c97c679907860b5e467d163a151bdb276e9966211d8e144262b1fce1f9be767bfa2bc0bb78e377d6ad30666d448c32fd8dea170e86abdfed9f2fad64027ec361aa3f443808c15f11519481dd8540be44f6173f09d32b0e5dfe97cb43a095794c3cbfbeced413726cfb7d6cac6ed0fe87f165eef5b484c3b0f34cee3bf0c802f0b78408304b97c2433b8c5b297a46f306852fb8221da743cefefcb747a5ed80361cafbc31c54d873f562b9bc84b96913ff27cab4897ff2f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xca, 0x3, "2025329886c3563dfa4a6084b8f9ee4416e8c7903a861ba226ca57290092967a817c2201ac3d0caaee860b646f35a71d6e3d1dba049e955a0fad72e14d1a9d2a20cc8b0afe6f0f44af0ce26fe2b0b0f8ec3764a08e954ab2617b2a45b69ad256b3e955c4b3bbeb631b7feaf5eee76e3b67b6c2432d89a6810ef99ac07c9adbd55bb8bd099f88381c259b41b9cccce5c3ea162b7d2649eacd97682bc25ee248fd543353ad7da1b6cda4f4a8e11726034ca025bc74bef247692ac0c49e7bc1fb30a07d1c2a5786"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xb0, 0x2, "e4c8c4510296ca2ddf9576ee957ab336de1017c1fc3d3f749efd08cb87141a244eb1b1be24c8c46976ccdfed89ba2e36e36f441b9ca4a29d8ba667126faf7dd23062d0c91f831e96a18d49181f443c4dbe15c96d637d1e7a8d778fc0b7bf454f5a9cd915be22ae268b029cc529f424d2007b235f2d9d69d3b46328d66a117f8665835a6dd4968000da44a99acdb1dfe3d40be3e508fe76ec7b92f797af342fe358960999016ba0b4479b578b"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x478}}, 0x40) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @bcast, @default, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) 2m31.287082234s ago: executing program 0 (id=3527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x4f, 0xcb0}}], 0x18}}], 0x1, 0x404c804) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x84}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000000)='.[\xac\x00', 0x200, &(0x7f0000000100)={@_ha_fsid={[0x3, 0x2]}, {0x7f, 0x7a99, 0x3, 0x7ff}}, 0x68, &(0x7f0000000140), &(0x7f0000000180)=0x40}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xfd, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x8c4) (async, rerun: 64) r4 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000940)={@void, @void, @llc={@llc={0x0, 0x8e, "d3c9", "b8675c7642c2ca15e580fef45ce178d151ec5b483159c1fe4cae1c80b6c6cac33e44c3ee9d5e0b82bc273daff176a87aea6e17ad187e0fd1abc189ef18"}}}, 0x41) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$sock_int(r4, 0x1, 0x38, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000062514ac208440f970400000093117abcb28bac009500000000000000ea57e2d74c199964f4d8905983b6e343c93db457011396025d4bd43dbe47470af5ff2798e2aaa71fe60413858b25bbe3e3683c2c00175af25344fdec"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 2m30.851802895s ago: executing program 0 (id=3531): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000d00404500020000000100000000000000000000000d000000feffffff100000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {0x80}, {}, 0x2c, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) close(r9) socket$nl_sock_diag(0x10, 0x3, 0x4) r11 = socket$igmp(0x2, 0x3, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) setsockopt$MRT_TABLE(r11, 0x0, 0xcf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x7, 0x8}], 0x10, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x26010008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008813}, 0x4041) 2m15.788291207s ago: executing program 33 (id=3531): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000d00404500020000000100000000000000000000000d000000feffffff100000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x240, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {0x80}, {}, 0x2c, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) close(r9) socket$nl_sock_diag(0x10, 0x3, 0x4) r11 = socket$igmp(0x2, 0x3, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) setsockopt$MRT_TABLE(r11, 0x0, 0xcf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x1, 0x7, 0x8}], 0x10, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x26010008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008813}, 0x4041) 2m13.98310365s ago: executing program 3 (id=3728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0, 0x604000000000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700f80081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103100000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x74, 0x0, 0x25236, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES32=r6, @ANYRES64, @ANYRESOCT=r1], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000f00", 0x33a) r8 = socket(0x1e, 0x4, 0x0) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16=r8], 0x14) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m13.672736203s ago: executing program 3 (id=3730): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000027000000000000000090df2503000000"], 0x14}}, 0x4004804) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) 2m13.298977576s ago: executing program 3 (id=3735): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2d, 0x3, 0x2, {0x1, @esp_ip6_spec={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0xaf7, 0x6}, {0x0, @remote, 0x2, 0xe, [0x2, 0x3]}, @esp_ip4_spec={@local, @empty, 0x7, 0x5}, {0x0, @local, 0x800, 0x1, [0xf, 0x8]}, 0x4, 0xd}}}) 2m13.023877092s ago: executing program 3 (id=3738): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x200}) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000001800ef012bbd7000000000000a200000fc000005000000001400050000000000000000000000ffff"], 0x38}, 0x1, 0x11}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x28}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0x64}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000db000000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdd5}, 0x48) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x3932b8274563bb0c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9e}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00'}) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004700070128bd500000000000017c000007000480360a3b"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5fe4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 2m12.603874863s ago: executing program 3 (id=3741): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000d7e7cb5c4d1401e2282ed32b18e2cd09c6633dfcc42c8048f002853422e30f1e99a6b743788b45b6e227a6f7dddeb527343969b33a495b749469624e56a4d05ad4e66f0b3dceef57884fc64c772873146a7f4f9a0b58197bbadef85560f70dfb96a2681c9a", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x2c, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}}, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 2m12.255195443s ago: executing program 3 (id=3745): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x20040010) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x801) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) 1m57.066151686s ago: executing program 34 (id=3745): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x20040010) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x801) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) 1m31.828299439s ago: executing program 1 (id=4033): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, 0x0, &(0x7f0000000340)=""/186}, 0x20) 1m31.612925261s ago: executing program 1 (id=4037): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x0) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0xd92d}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xffdd) 1m27.390965824s ago: executing program 1 (id=4046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x801, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffff9, 0x5}}]}]}]}, 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000006800010029bd70007dffff7f00000000000000000c000200010000001500000004000400060003"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)="0ecabff79a705d3689746d2ca5966d30179474d75489ac1d2a917286290a9eb989d09b6d2e7bbaf567be155543a47a361cdffca2a0e11d00f17729662ddc8779c042e76d8951b0cf4cbaabf9691e206d328b55c02ab7fbf40413232ff81b1ccf235f460c7016f4a7b1b3a0c57ea50563fd676e152e61213ab8cdfe05785a243ca59d9132120729e5b40507b40f1c5b962bb2ccafcd61fd5dfcd0ecd82d4b7c13a750788c99e4512dcff70b2a8fee6e2bef5535d25103b43faf4cbc0baed6131fa13b4d", 0xc3}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000540)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x34}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000240)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="7400000007a9b5b483b9561d6b72ff4b4ae0853d7c9b0d354d506ed1dca9fa8bc6c5ab5843de9c1803fba8e30962b0575d8756a588c979527c1a01d4b7e24886fa61923ca038a03ee5afc2e3190b9aed8794c1cb554abc760b2a74b57acd98ff2da6bbea39ec95547ef7cb517e9dfd3c4bdc76cbfaddeb55230f80900f5f234ca03d070e0e6194e7d978f715e9a68433ae4875428d0f168ff8607747d902e49be81ec13d535b514ad246e8862a5c5de6f6c31c3def6338e53368a171a5f47bf4", @ANYRES16=r8, @ANYBLOB="010000000000ffffffff0600000914000600626f6e645f736c6176655f310000000008000500e00000020f000700756e636f6e66696e65640000080005007f000001050001000000000008000500ac1414aa08000400ffffffff14000300fc020000000000000000000000000001"], 0x74}, 0x2, 0x34005}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000000)={0x13, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f00000001c0)) close(0x3) close(0x3) 1m26.83676415s ago: executing program 1 (id=4053): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@dev}]}]}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000000002010400000000000000000a0000000400018014000300fc00000000000000000000000000000014000000000000b1de97763b6ae8791c000000bb3c0002800c00028005000100000000002c000180140003"], 0x84}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='DV', 0x2}], 0x1}, 0x4048841) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}, 0x1) recvmsg$unix(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)=""/146, 0x92}], 0x1}, 0x2002) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x10) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x488, 0x24, 0x200, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {0x2, 0x3}, {0xffff, 0xfff6}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x39bf0871}, @qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_tbf={{0x8}, {0x444, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x371c7d60e5e533a5}, @TCA_TBF_PBURST={0x8, 0x7, 0x2232}, @TCA_TBF_RATE64={0xc, 0x4, 0xe8ba3e0fe32c8b57}, @TCA_TBF_BURST={0x8, 0x6, 0xe000000}, @TCA_TBF_RATE64={0xc, 0x4, 0xec1eff3b77e396ef}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x8, 0x7, 0x6, 0x8, 0x8, 0x6, 0xff, 0x9, 0x4, 0x6, 0x7fffffff, 0x9, 0x4, 0x3, 0x1000, 0x1, 0xad, 0x6, 0x1, 0x8, 0x1, 0x7, 0x3, 0xe9ee, 0xdaa, 0x0, 0xca, 0xf96c, 0xa59, 0x3, 0x80, 0x6, 0x6, 0x401, 0xff, 0x5, 0x0, 0x5, 0x6, 0x3, 0x4, 0x2, 0x0, 0x2, 0x7, 0x9, 0x1, 0xd, 0x3ff, 0x1, 0x5cd6, 0x101, 0x2, 0x3567, 0x40000000, 0x10, 0x2, 0x34da, 0x4, 0x401, 0x9, 0x224, 0x3, 0xfffffffd, 0x4, 0x7, 0xffff2e99, 0x1, 0x7d, 0x3, 0x2b3e, 0x7, 0x7f, 0x1, 0xf6e, 0x1, 0x800, 0xc8fa, 0xb21, 0x8, 0x401, 0x6, 0xffffffff, 0x6, 0x2, 0x29, 0x5, 0x86, 0x101, 0xfffffffd, 0x8, 0xfffffe01, 0x7, 0x4, 0x6, 0x3, 0x400, 0x0, 0x700, 0x9, 0x0, 0x6, 0x1, 0xa1, 0x72, 0x4, 0x6, 0x6, 0x4, 0x2, 0x0, 0x0, 0x998, 0x818, 0x5, 0xff, 0x2, 0x4, 0x6, 0x7, 0xc8fd, 0x71, 0x9, 0x1e69, 0x3, 0x3, 0x5, 0x8, 0x7, 0x8, 0x18000, 0x9, 0x0, 0x5, 0xfffffffd, 0x64e, 0x7, 0x3, 0x200, 0x2, 0x10001, 0x8, 0x2, 0x5, 0x0, 0xa930, 0x100005, 0x5, 0x80000000, 0x9, 0x2, 0x21, 0x9, 0x6, 0x5, 0x8, 0x3, 0xf248, 0x7, 0x1, 0x200, 0x5, 0x6, 0x8, 0x5, 0x5, 0x0, 0xffffb8c8, 0xff, 0x40, 0x614, 0x3, 0x10, 0x7d3, 0xc5c1, 0x100, 0x101, 0xffffffff, 0x8, 0x2, 0x4, 0x2, 0x5, 0xfffffffc, 0x4, 0x6, 0x2, 0x101, 0x8000, 0x6, 0x8, 0xc0, 0x3, 0x4, 0x2, 0x2, 0x7db3, 0x6c, 0x4, 0x6, 0xc0, 0x9b64, 0x10000000, 0xfffffffd, 0x401, 0x4, 0x7, 0xca07, 0x7, 0xfffffffb, 0x1, 0x49a, 0x2, 0x9, 0x1, 0xffffffff, 0x9, 0x1, 0x9, 0x5, 0x3, 0x8, 0x0, 0x5, 0x40, 0xe7a, 0x101, 0x6, 0x0, 0x1, 0xe0ea, 0x4ba, 0x6, 0x5, 0x100, 0x10000, 0x0, 0x40, 0x3, 0x5, 0xb, 0x8, 0xfff, 0x177d, 0xef, 0x3, 0x3, 0x7, 0x200, 0x8, 0x1, 0x7, 0x200, 0x9, 0x3]}, @TCA_TBF_PBURST={0x8, 0x7, 0x556}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x42}, 0x200000d5) 1m26.448280128s ago: executing program 1 (id=4058): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRESHEX=r0, @ANYBLOB="56060800000000002400128009000100626f6e640200000014000280050022ae1e970705feb081875e2e8de1580b688af5472b6745ce311905c178987db3057929653e53a8a2268a48677d954b1405e0f2c74f507fa5530428153ff70ebe78fb99eb7ad270addafa5599bb0ac4810621508e187a7dcfd754540f4bf85a7cf4ccf2fd3cda210be42b1d9f6002906233d7f48172f69482c467578d64ddca7779ed6499ff1d8d9473ab9ee218c34591cf1e5938"], 0x44}}, 0x40) 1m22.756412607s ago: executing program 1 (id=4064): recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10022, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000000)='.(}((\xe4*.\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x7e4]}, {0x3, 0x0, 0x9, 0x1}}, 0x80, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xf2a}, {[0x9, 0x7, 0xb, 0x4]}, 0x9, 0x52, &(0x7f0000000100)=""/82}) sendmsg$AUDIT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3e8, 0x800, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0xc0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x24008040) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff0000000000010800450000277f884d531da25efd06030000019078ac1e0001ac1414aa040090780300000045000000000000000000005e10d62a40b2ef0047eee358ba70e606ffff44d2dbeefa2510248045e1658a3a17026d094d3d5f10f719ed278078a732dfa3e27f1f20edecfe"], 0x0) write$bt_hci(r0, &(0x7f0000000380)={0x1, @le_set_ext_adv_enable={{0x2039, 0xa}, {0xd, 0xc, "722c8c8e736f1acf"}}}, 0xe) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x4, 0x0, @empty, @private}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r6, &(0x7f0000000280)}, 0x20) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x2118, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000540)={0x0, 0x3, 0x6}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x4, 0x15}, 0x48) 1m7.4674883s ago: executing program 35 (id=4064): recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10022, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000000)='.(}((\xe4*.\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x7e4]}, {0x3, 0x0, 0x9, 0x1}}, 0x80, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xf2a}, {[0x9, 0x7, 0xb, 0x4]}, 0x9, 0x52, &(0x7f0000000100)=""/82}) sendmsg$AUDIT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3e8, 0x800, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0xc0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x24008040) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff0000000000010800450000277f884d531da25efd06030000019078ac1e0001ac1414aa040090780300000045000000000000000000005e10d62a40b2ef0047eee358ba70e606ffff44d2dbeefa2510248045e1658a3a17026d094d3d5f10f719ed278078a732dfa3e27f1f20edecfe"], 0x0) write$bt_hci(r0, &(0x7f0000000380)={0x1, @le_set_ext_adv_enable={{0x2039, 0xa}, {0xd, 0xc, "722c8c8e736f1acf"}}}, 0xe) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x4, 0x0, @empty, @private}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r6, &(0x7f0000000280)}, 0x20) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x2118, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000540)={0x0, 0x3, 0x6}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x4, 0x15}, 0x48) 2.766098613s ago: executing program 8 (id=4411): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r6, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r9) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, r10}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f0000004340), r11) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000004700)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x10) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000280)={@empty, @multicast1, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000500)={'gre0\x00', r6, 0x1, 0x8, 0x6, 0x0, {{0x32, 0x4, 0x0, 0x4, 0xc8, 0x68, 0x0, 0x8, 0x2f, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0xf, 0x34, [@dev={0xac, 0x14, 0x14, 0x37}, @remote, @empty]}, @lsrr={0x83, 0x13, 0xda, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0xb}, @empty]}, @timestamp_addr={0x44, 0x4c, 0xc8, 0x1, 0x3, [{@remote, 0x3}, {@multicast2, 0x3}, {@private=0xa010102, 0x9}, {@multicast2, 0x42c9}, {@local, 0x5}, {@multicast1, 0x1}, {@remote, 0x400}, {@local, 0xf}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x44, 0x43, 0x3, 0x5, [{@rand_addr=0x64010105, 0x2}, {@broadcast, 0x2}, {@remote, 0x3fb}, {@loopback, 0x8}, {@loopback, 0x5}, {@multicast1, 0x4}, {@empty, 0x5}, {@rand_addr=0x64010101, 0xfffffff0}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000d80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000980)={0x3b0, r12, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0xcc, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x149, 0x5, 0x6, 0x683}, {0x5, 0x9, 0x10, 0x8}, {0x6, 0x1, 0x0, 0x8}, {0x5, 0x10, 0x4}, {0x2, 0x0, 0x7f, 0xfffffffc}, {0x6, 0xf8, 0xa, 0x3}, {0xfe, 0x8, 0x8, 0xffff}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x8, 0x1, 0x6}, {0x1ff, 0x0, 0x2, 0x9}, {0x9, 0x3, 0x7f, 0x7}, {0x40, 0x3, 0x68, 0x4}, {0x1, 0x74, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x4, 0x4, 0x8}, {0x34, 0x7, 0x6, 0x1e7f}, {0x7, 0x8, 0x5, 0x5}, {0x0, 0x3, 0x4, 0x37}, {0x0, 0x1, 0xed, 0xca}, {0x8, 0x9, 0x2, 0x1}, {0x5, 0x3f, 0x6, 0x7}, {0x2, 0x81, 0x82, 0x9}, {0x5, 0x4, 0x9, 0xfffffffc}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x932}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) 2.532213759s ago: executing program 4 (id=4412): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}}}, {{0xa, 0x0, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x19, 0x8, 0x4001, 0x0, 0x8, 0x3, 0x4, 0x6, 0x0, 0x7, 0x80000003, 0x7fffffff, 0xfffb, 0x3, 0x5, 0x6, [0xe, 0xfc]}}) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x30000000}) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}}}, {{0xa, 0x0, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) (async) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x19, 0x8, 0x4001, 0x0, 0x8, 0x3, 0x4, 0x6, 0x0, 0x7, 0x80000003, 0x7fffffff, 0xfffb, 0x3, 0x5, 0x6, [0xe, 0xfc]}}) (async) epoll_create(0x5) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x30000000}) (async) 2.531265642s ago: executing program 7 (id=4413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r5 = accept(r4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r5) recvmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10003) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x5, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 2.530600809s ago: executing program 6 (id=4414): r0 = socket(0x2b, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000f9ffffffffffffff00"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000200080025000100000008"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x124, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xf8, 0x84, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffa}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="12e1af59cdfe"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x400}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x101}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x92}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffff76}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}]}, 0x124}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0000ff0180c200000e810010020800450000b0000000000011907800000000e0000001000017c1009c90780100000001000000626abd460320000000000079a7000000000000000020002beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71e1185fa4afcc815bc2106000000000000005189dacc307c357402a8c5a9c5b5b06cbc715d9569f2b2ee1cf210c588b60723e0cc4e1fdd8d6d18e2e9ee4939689f000000000000000000004ffa026350f5cd5d0c047efce94ea56f8f4572797a4f6bd90310b6976fa719c0afc33e0ce4814705648e0bf7d6198de7f147f9601aaaf0cf278a7a0d488fb6c4c110439c52da63cab00093f41ae806b7c43c4bffd0ba2ae6b0caf4712f20e699e7c33d28707c9aba6e71674faf9aacd59c45438b071eed32871e7e5a4c471c5063dd182939c723647873869400"/329], 0xc6) socket(0x2b, 0x1, 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000f9ffffffffffffff00"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000200080025000100000008"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x124, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xf8, 0x84, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffa}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="12e1af59cdfe"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x400}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x101}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x92}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffff76}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}]}, 0x124}, 0x1, 0x0, 0x0, 0x40040}, 0x800) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/329], 0xc6) (async) 2.360126709s ago: executing program 5 (id=4415): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x200}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000004c0)={r3, 0x40}, &(0x7f0000000500)=0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f00000000c0)={0x12, 0xff}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c000100299c7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000380)=""/143, &(0x7f0000000440)=0x8f) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x9, 0x0, 0xff, 0x0, 0x0, 0x2000000, 0x800000, 0x2}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468", @ANYRESOCT=r8], 0x48}}, 0x0) 2.293789358s ago: executing program 8 (id=4416): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.268925968s ago: executing program 7 (id=4417): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="2f00000010"], 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x82d7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc0000000}}, 0x0, 0x0, 0x1e, 0x0, "c411ec04788bbcfb122cd10b00bc30ef6cc4b3a858b68ba1777fd7bac30f3d9617597a9e2d42eb5c7562cc8ab209ea8133faef3eb75adfccdf85ae8d7d7de3eb9f6d8d6bac15919e9c0cb3fb007eee11"}, 0xd8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1004100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7481}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000000}, 0x1df81d8f87bba935) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000000)={r6, r2}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r6, 0xffffffffffffffff, 0x9, 0x2923, 0x3}) 2.115970073s ago: executing program 4 (id=4418): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) recvmsg(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/114, 0x72}, {&(0x7f00000001c0)=""/231, 0xe7}, {&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/51, 0x33}], 0x4, &(0x7f0000000400)=""/78, 0x4e}, 0x40000020) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/180, 0xb4}, {&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/201, 0xc9}, {&(0x7f0000000980)=""/75, 0x4b}], 0x6, &(0x7f0000000a80)=""/154, 0x9a}, 0x1) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b80)={0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000bc0)={0x101, 0x8, 0x5076dea8, 0xe8, 0x3f04}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000c00)={0x8, 'veth0_virt_wifi\x00', {'veth1_to_hsr\x00'}, 0x2e00}) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000c40), &(0x7f0000000cc0)=0x6e, 0x0) recvmmsg$unix(r4, &(0x7f0000003f80)=[{{&(0x7f0000000d00), 0x6e, &(0x7f0000002100)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/239, 0xef}, {&(0x7f0000001e80)=""/192, 0xc0}, {&(0x7f0000001f40)=""/210, 0xd2}, {&(0x7f0000002040)=""/48, 0x30}, {&(0x7f0000002080)=""/68, 0x44}], 0x6, &(0x7f0000002180)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000021c0)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002240)=""/83, 0x53}, {&(0x7f00000022c0)=""/92, 0x5c}, {&(0x7f0000002340)=""/58, 0x3a}], 0x3, &(0x7f00000023c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002580)=""/216, 0xd8}, {&(0x7f0000002680)=""/153, 0x99}, {&(0x7f0000002740)=""/145, 0x91}, {&(0x7f0000002800)}, {&(0x7f0000002840)=""/81, 0x51}, {&(0x7f00000028c0)=""/61, 0x3d}, {&(0x7f0000002900)=""/92, 0x5c}, {&(0x7f0000002980)=""/135, 0x87}, {&(0x7f0000002a40)=""/97, 0x61}], 0x9, &(0x7f0000002b80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000002c80)=@abs, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000002d00)=""/202, 0xca}, {&(0x7f0000002e00)=""/169, 0xa9}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)}], 0x4, &(0x7f0000003f40)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002000, &(0x7f0000004080)) ioctl$int_in(r12, 0x5421, &(0x7f00000040c0)=0xffffffff80000001) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r10, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x30, 0x1410, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000850}, 0x20000800) r22 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004200)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r5, 0xffff, '\x00', 0x0, r11, 0x3, 0x3, 0x2}, 0x50) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r22, 0x40106e80, &(0x7f0000004280)={0x0, 0x1}) epoll_ctl$EPOLL_CTL_DEL(r18, 0x2, r13) getsockopt$TIPC_SRC_DROPPABLE(r20, 0x10f, 0x80, &(0x7f00000042c0), &(0x7f0000004300)=0x4) ioctl$BTRFS_IOC_SEND(r14, 0x40489426, &(0x7f0000004380)={{r15}, 0x0, &(0x7f0000004340), 0x800, 0xd}) r23 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004440), r17) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000004500)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004480)={0x1c, r23, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x1c}}, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000004540), &(0x7f0000004580)=0x14) sendmsg$SEG6_CMD_SETHMAC(r16, &(0x7f00000046c0)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004680)={&(0x7f0000004600)={0x70, r23, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0x80000001, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x81, 0xffffffff, 0x6, 0x7f]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x400) setsockopt$CAN_RAW_JOIN_FILTERS(r19, 0x65, 0x6, &(0x7f0000004700)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000004740)={{{@in=@empty, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000004840)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r24, 0x4004f506, &(0x7f00000048c0)=0x1) setsockopt$EBT_SO_SET_COUNTERS(r17, 0x0, 0x81, &(0x7f0000004940)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x3ff, 0x0, 0xe5d5, 0x21, 0x59f3], 0x7, &(0x7f0000004900)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r25, &(0x7f0000004a40)={0x8}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000004a80)={'sit0\x00', 0x1}) read$rfkill(r21, &(0x7f0000004ac0), 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000004c00)={r6, &(0x7f0000004b00)="10fb1aeab5ddb42c9a05e7f380fca423f02bc0ac681f78c50ce38ba650530a914dce5acf0aee2e3a816d70bf81968c83127c21c22488149dc315b8d3cf96effac4fbb26954e2aa35cc333bffdc34071bd83c24659c14fb5e4e1dbd428adcbe3478d661ead0f3f0248b3ae2e888fb93beae92098af6", &(0x7f0000004b80)=""/105}, 0x20) 2.093098316s ago: executing program 8 (id=4419): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x2dc, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x29743765}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca4b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x800}, 0x24004080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x14, r0, 0x761, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r6, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00400000400600006591e793"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/58, 0x32c000, 0x800, 0x9}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000200)=0x100000, 0x4) bind$xdp(r7, &(0x7f0000000100), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x27}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32=r8, @ANYBLOB="830405000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0xcc, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x0, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x0, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x0, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x0, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0xffffff6b, 0x1, 0x4e24}]}]}]}, 0xcc}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) 1.74113905s ago: executing program 7 (id=4420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) close(0x3) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000180)='eM', 0x2) shutdown(r0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/139, &(0x7f00000002c0)=0x8b) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f00000000c0)="185a22", &(0x7f0000000180)=@udp6}, 0x20) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x50000000}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0xa, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 1.660563976s ago: executing program 6 (id=4421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0000000120021002dbd7000fcdbdf2561656769733132386c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002c00000000000000000000080001000400000005000100"], 0xf0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="ee235af98b7f0e282eaa196acf113c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088010000c800c000b8008000a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x24, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) r5 = epoll_create1(0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000500)={0x14}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) tee(r12, r12, 0x100000001, 0x6) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r10, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x131}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.631502774s ago: executing program 5 (id=4422): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x80) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9683}], 0x1, 0x12142, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xb7}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) sendto(r8, &(0x7f00000002c0)='9d', 0x2, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) sendmmsg(r5, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="e0", 0x12}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x18, 0x84, 0x5, "fa"}], 0x18}}], 0x2, 0xc8844) sendmmsg$inet(r0, &(0x7f0000004e00)=[{{&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001600)="2508bd44", 0x4}], 0x1}}, {{&(0x7f0000001740)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0x9, 0x3, [{0x1, 0x3, ':'}]}]}}}], 0x20}}], 0x2, 0x80) 1.41552192s ago: executing program 7 (id=4423): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x1a, 0x6, 0x8, 0x51, @local, @private0, 0x1, 0xee89036aa2cc40bf, 0x5, 0x7ff}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2c, 0x0, &(0x7f0000000300)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x114}}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000009000004e99ea80653ddc8df958067f35a29beb2a0821817751cc131c8f8596701de1d6fe016e42760bfb721b73c9eaa025b3640872bf24466dd2d2acae880080816e29de82ffeac2bf44afdcc8d5dff1488a5f06d0565f686718e8cd715b7fd7e146642340d78298f61d43c15368d6abfb0d5f96ab6d7bda7281a238110f76130b3dd78e72961d995f64b70204b8f5b52644a53daf2b89814475c5862bd8d2743c21dca13b1bb41e77239fc5e0819e197a6cb404cb000"/200], 0x14}, 0x1, 0x0, 0x0, 0x24000041}, 0x10) 1.352999235s ago: executing program 5 (id=4424): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00', 0x2}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x7, 0x5, 0xd, @local, @loopback, 0x8, 0x10, 0xfff}}) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='rdma.current\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x7f, 0x0, 0x4, 0x10800, r0, 0x7fffffff, '\x00', r4, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @value=r5}, 0x50) 1.316887029s ago: executing program 6 (id=4425): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$netlink(0x10, 0x3, 0x12) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="e1251a26da9717a9e597f516490240"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9039dc164c1cc82f23a8e10b2b126b0e"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040081}, 0x4c000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r4, 0x8, 0x70bd2d, 0x4, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x5e}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xb}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xab0, 0x4}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000004c0)="dcdd9286aa2a2582ad", 0x9) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r6, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000840)={r0, &(0x7f0000000740)='nfc\x00', 0x10081, &(0x7f0000000780)={@align=0x4, {0x98b, 0x1, 0xfffffffc, 0x2}}, 0x1, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x18d}) write$tun(r10, &(0x7f0000000880)={@void, @void, @eth={@random='l}BT]{', @local, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x3, 0x1, 0x2}}, {@llc={0x4, {@llc={0xe, 0x7e, "c612", "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"}}}}}}, 0x118) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000009c0)={0x0, 0x80000000}, &(0x7f0000000a00)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000a40)={r11, 0x4}, &(0x7f0000000a80)=0x8) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000b40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000b80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r12, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$AUTOFS_IOC_EXPIRE(r10, 0x810c9365, &(0x7f0000000cc0)={{0x5, 0x5}, 0x100, './file0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r10, 0x800448d2, &(0x7f0000000e40)={0x0, &(0x7f0000000e00)}) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000e80)=0x1, &(0x7f0000000ec0)=0x4) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r3) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x50, r16, 0xe02, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0xc0) 1.286636182s ago: executing program 8 (id=4426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x64, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x64}}, 0x810) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3a0, 0x208, 0x700001b, 0x148, 0x208, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x47, 0x1, 0x151c8f99, 0x100, 0x1, 0x8}, {0x8}}}, @common=@inet=@ecn={{0x28}, {0x30, 0x0, 0x5, 0xa3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffff6, 0x8]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0xf800, 0x0, [0x30, 0x19, 0x29, 0x18, 0x1, 0x13, 0x4, 0x1c, 0x3f, 0xc, 0x2b, 0x12, 0x10, 0x14, 0x37, 0x30], 0x0, 0x7ff, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 1.117635397s ago: executing program 5 (id=4427): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) r1 = socket(0x15, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x100000}, 0x10) 1.117056579s ago: executing program 4 (id=4428): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7, 0x28179, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000070000000400000000005f5f00"/47], 0x0, 0x2f, 0x0, 0x1}, 0x28) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ea}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="f199ebc5ee7fc17292ed1dcdda1b8908276890918cb59ac593b163fcf0baa9408140b049d700f966d539b4733cc8b7ba08409ba99416a64acedf6c74037ebdbe9bbc2f30d0a4cf37051049886038629bf8f3358083c4b40eb7d10aa53e8b6a5aa0a5b2b21068719f971c05097bf7c887039971be3c66270f6643bab16365b3e1fa9a29c156069aceda1a00fbd59cd8131990e7bf534034ec96ecf2d737f67be12b3047c14626d16eb766d6e494fdeefff7016ae5e17f3a927bab936719c14e50c48d13fa1953892f1ab563cbaff1560aac1ec05b55afef82deff8ebdf21ec96b1c293e0800cf82238f94172bba23ce837b00a1000000", 0xf6, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) 1.116625633s ago: executing program 8 (id=4429): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004880)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @uid}]}]}, 0x24}], 0x1}, 0x44010) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x4, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec}, 0x94) 1.115882611s ago: executing program 7 (id=4430): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}}, 0x10000800) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="71050108030306f708fb230e90cee95ca31cd4f209819d08"], 0x105) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) socket$rds(0x15, 0x5, 0x0) socket$inet(0x2, 0xa, 0xfffff7fd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) recvmmsg(r9, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/64, 0x40}], 0x1}, 0x6}], 0x1, 0x20, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 836.041487ms ago: executing program 8 (id=4431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000050900020073797a32000000002c000480180001800d00010073796e70726f78790000000004000280107371000000000900010073797a3100000000140000001100010000000000000000000e00000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) write(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x380002, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c5", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) getsockopt$inet6_int(r8, 0x29, 0x10, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xfffe}, &(0x7f0000000040)=0x20) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000540001002abd70000200000007000000", @ANYRES32=r6, @ANYBLOB="9a48b9668f45948c796044754d4091daa5804bab0b40ea9656f24f8e92a0b8af3609f9d25771f8d1305113493667de724e85605967e68d4330050ec490ba4df04d338280256c77f2b3a46531e4e7c6a0821c18f578d5e031a339dce699775f1de4ccae0413275d570afe2e62923287ca1e947ff2c918665ffd75b606234bed820e2b9d54a1173fab00000000000000902aac69", @ANYRES32=r6, @ANYBLOB="00020200e000000200000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0xa1b92000) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r10, 0x29, 0x18, 0x0, 0x0) sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x8}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000001880)=""/4112, 0x1010}], 0x1, 0x20}}], 0x48, 0x80}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 828.929809ms ago: executing program 4 (id=4432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'lblcr\x00', 0x0, 0xfffffffd}, 0x2c) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x3}, {0x10040002, 0x0, 0x7, 0x5}], 0x10, 0x80}, 0x94) close(r10) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r11) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000008c0)=r12, 0x4) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608304c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x1c}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r14, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 823.933829ms ago: executing program 5 (id=4433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x4914}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) write(r1, &(0x7f00000000c0)="519703000000", 0x6) 680.224156ms ago: executing program 6 (id=4434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000911112000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000911112000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"/293], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004810) 616.830987ms ago: executing program 5 (id=4435): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x0, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6gretap0\x00', {0xf63}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32=0x0], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 464.160886ms ago: executing program 6 (id=4436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xffffffff) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x300, 0x0, 0x10001, 0x5}, &(0x7f0000000780)=0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14008e5051f302907df8000000000000000a1400e4ffdf241d471f4919c6a278ff3cb9d8"], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 380.074589ms ago: executing program 4 (id=4437): socket(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, r3, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/4089, 0x88, 0xff9, 0x8}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 319.640387ms ago: executing program 6 (id=4438): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x5) (async) accept(r1, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r4, 0xff, 0x24, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) 244.04917ms ago: executing program 4 (id=4439): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8010) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x1405, 0x20, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000000) recvmsg$can_raw(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000005c0)=""/240, 0xf0}], 0x1}, 0x43) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001800ef012bbd7000000000000a200000fc000005000000001400050000000000000000001000"], 0x38}, 0x1, 0x11}, 0x0) 0s ago: executing program 7 (id=4440): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r2, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x2f, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'none\x00', 0x20, 0x6, 0x19}, {@remote, 0x7, 0x2000, 0x7, 0x570, 0x5c}}, 0x44) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = socket(0x10, 0x803, 0x0) unshare(0x26020480) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e21, @multicast1}, 0x1c) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x3}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x3) splice(r10, 0x0, r9, 0x0, 0x10000008ebc, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1d, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @jmp={0x5, 0x1, 0x7, 0x0, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, r9}, 0x94) kernel console output (not intermixed with test programs): .523858][T19586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.554102][T19586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.613242][T19586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.634478][T19586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.663516][T19586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.718587][T19713] geneve2: entered promiscuous mode [ 551.953644][T19586] hsr_slave_0: entered promiscuous mode [ 551.973642][T19586] hsr_slave_1: entered promiscuous mode [ 551.995863][T19586] debugfs: 'hsr0' already exists in 'hsr' [ 552.012600][T19586] Cannot create hsr debugfs directory [ 552.296464][T19733] vxcan2: entered allmulticast mode [ 552.356736][T19730] syzkaller0: entered promiscuous mode [ 552.382076][T19730] syzkaller0: entered allmulticast mode [ 552.565970][T19746] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3298'. [ 552.591318][ T5638] Bluetooth: hci6: command tx timeout [ 552.632829][T19746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.668465][T19746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.698799][T19746] bond0 (unregistering): Released all slaves [ 552.742397][T19750] netlink: 'syz.4.3299': attribute type 2 has an invalid length. [ 552.759060][T19749] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3299'. [ 553.003854][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'. [ 553.045797][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'. [ 553.286256][T19586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.391992][T19781] netlink: 5000 bytes leftover after parsing attributes in process `syz.1.3306'. [ 553.732831][T19586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.981893][T19586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.119926][ T5772] net_ratelimit: 361 callbacks suppressed [ 554.119947][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.173791][T19586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.245393][T19806] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3312'. [ 554.669725][ T5638] Bluetooth: hci6: command tx timeout [ 554.731774][T19819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.742678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.810509][T19821] netlink: 'syz.0.3316': attribute type 4 has an invalid length. [ 554.880814][T19828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.902700][T19828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.927345][T19828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.957474][T19830] virt_wifi0: refused to change device tx_queue_len [ 554.981635][T19830] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 555.047374][T19586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 555.110421][T19586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 555.140636][T19586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 555.175052][T19586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 555.197714][T19586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 555.245343][T19586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 555.277257][T19586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 555.329215][T19586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.403775][T19851] xt_hashlimit: size too large, truncated to 1048576 [ 555.417789][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3324'. [ 555.482037][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 555.504982][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3325'. [ 555.511870][T19865] netlink: 404 bytes leftover after parsing attributes in process `syz.5.3326'. [ 555.516593][T19862] veth1_to_bond: Caught tx_queue_len zero misconfig [ 555.535263][T19859] netlink: 'syz.1.3324': attribute type 1 has an invalid length. [ 555.740599][T19869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3328'. [ 555.768674][T19586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.897782][T19870] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.905435][T19870] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.976749][T19870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.994712][T19870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.125300][T19875] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 556.199827][ T7342] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.218208][ T7342] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.242193][ T7342] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.280829][ T7342] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.334706][T19586] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.374549][T19879] syzkaller0: entered promiscuous mode [ 556.393087][T19879] syzkaller0: entered allmulticast mode [ 556.441257][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.448486][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.471044][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.478298][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.545571][T19885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3332'. [ 556.557385][T19890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3334'. [ 556.749737][ T5638] Bluetooth: hci6: command tx timeout [ 557.048333][T19916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3337'. [ 557.151576][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.301984][T19924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3339'. [ 557.407793][T19929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.432601][T19929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.716720][T19586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.783961][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3345'. [ 557.886450][T19586] veth0_vlan: entered promiscuous mode [ 557.923430][T19586] veth1_vlan: entered promiscuous mode [ 558.026517][T19586] veth0_macvtap: entered promiscuous mode [ 558.062861][T19586] veth1_macvtap: entered promiscuous mode [ 558.149201][T19586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.192207][T19962] netlink: 'syz.5.3348': attribute type 11 has an invalid length. [ 558.198216][T19586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.237298][ T7340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.249468][ T7340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.287655][ T6366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.429717][T19966] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.438494][T19966] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.766299][T19966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.796970][T19966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.037466][T19966] mac80211_hwsim hwsim47 wlan0: left promiscuous mode [ 559.049209][T19966] mac80211_hwsim hwsim47 wlan0: left allmulticast mode [ 559.090999][ T6366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.191571][ T6366] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.223052][ T6366] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.280206][ T6366] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.296296][ T6366] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.524220][ T7342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.564480][ T7342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.677212][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.713215][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.858487][T20024] "syz.0.3364" (20024) uses obsolete ecb(arc4) skcipher [ 560.091135][T20034] netlink: 'syz.1.3367': attribute type 1 has an invalid length. [ 560.127716][T20035] netlink: 'syz.1.3367': attribute type 1 has an invalid length. [ 560.189588][ T8867] net_ratelimit: 4 callbacks suppressed [ 560.189609][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.624349][T20057] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 560.744819][T20061] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 560.793005][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 560.805191][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 560.813868][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 560.829523][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 560.839028][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 561.204687][T20079] tipc: Can't bind to reserved service type 1 [ 561.586526][T20089] __nla_validate_parse: 7 callbacks suppressed [ 561.586548][T20089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3382'. [ 561.665867][T20089] ip6gre1: entered promiscuous mode [ 561.671532][T20089] ip6gre1: entered allmulticast mode [ 562.051630][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3385'. [ 562.138171][T20099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.161494][T20099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.184160][T20099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.198006][T20099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.198818][T20107] netlink: 'syz.5.3387': attribute type 15 has an invalid length. [ 562.213593][T20107] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3387'. [ 562.223251][T20105] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3386'. [ 562.244674][T20113] netlink: 30 bytes leftover after parsing attributes in process `syz.0.3384'. [ 562.274413][T20113] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3384'. [ 562.724168][T20132] netlink: 'syz.5.3392': attribute type 10 has an invalid length. [ 562.769848][T20132] team0: Port device bridge0 added [ 562.919255][ T5638] Bluetooth: hci3: command tx timeout [ 563.070867][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.081398][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.603184][ T6366] dvmrp0: left allmulticast mode [ 563.618053][ T6366] pimreg9: left allmulticast mode [ 563.661415][T19981] IPVS: starting estimator thread 0... [ 563.787721][T20171] IPVS: using max 26 ests per chain, 62400 per kthread [ 563.894257][ T6366] bond11 (unregistering): (slave ip6gre1): Releasing backup interface [ 564.445686][ T6366] bond16 (unregistering): (slave gretap3): Releasing active interface [ 564.463285][ T6366] gretap3 (unregistering): left allmulticast mode [ 564.521548][ T6366] bond5 (unregistering): (slave gre2): Releasing backup interface [ 564.607333][ T6366] bond1 (unregistering): (slave geneve2): Releasing active interface [ 564.632679][ T6366] team0: Port device bridge1 removed [ 564.686678][ T6366] team0: Port device bridge10 removed [ 564.745555][ T6366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.761805][ T6366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.771677][ T6366] bond0 (unregistering): Released all slaves [ 564.782812][ T6366] bond1 (unregistering): Released all slaves [ 564.797690][ T6366] bond2 (unregistering): Released all slaves [ 564.812238][ T6366] bond3 (unregistering): Released all slaves [ 564.827210][ T6366] bond4 (unregistering): Released all slaves [ 564.842784][ T6366] bond5 (unregistering): Released all slaves [ 564.868017][ T6366] bond6 (unregistering): Released all slaves [ 564.884264][ T6366] bond7 (unregistering): (slave veth9): Releasing active interface [ 564.894101][ T6366] bond7 (unregistering): (slave batadv1): Releasing active interface [ 564.904114][ T6366] bond7 (unregistering): (slave veth11): Releasing active interface [ 564.920576][ T6366] bond7 (unregistering): Released all slaves [ 564.934626][ T6366] bond8 (unregistering): Released all slaves [ 564.948606][ T6366] bond9 (unregistering): Released all slaves [ 564.966829][ T6366] bond10 (unregistering): Released all slaves [ 564.982717][ T6366] bond11 (unregistering): Released all slaves [ 564.989689][ T5638] Bluetooth: hci3: command tx timeout [ 565.003434][ T6366] bond12 (unregistering): Released all slaves [ 565.027572][ T6366] bond13 (unregistering): Released all slaves [ 565.043144][ T6366] bond14 (unregistering): (slave veth13): Releasing active interface [ 565.053017][ T6366] bond14 (unregistering): (slave veth15): Releasing active interface [ 565.066984][ T6366] bond14 (unregistering): Released all slaves [ 565.083298][ T6366] bond15 (unregistering): Released all slaves [ 565.097796][ T6366] bond16 (unregistering): Released all slaves [ 565.353728][T20185] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 565.384855][T20185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.474096][T20185] geneve2: left promiscuous mode [ 565.513071][T20185] ip6gre1: left promiscuous mode [ 565.538313][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 565.634364][ T6366] : left promiscuous mode [ 565.804309][T20202] tipc: Started in network mode [ 565.809972][T20202] tipc: Node identity 9296593ee0bd, cluster identity 4711 [ 565.828539][T20202] tipc: Enabled bearer , priority 0 [ 565.995839][ T6366] tipc: Left network mode [ 566.019139][T20202] tipc: Disabling bearer [ 566.328664][T20247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3413'. [ 566.356126][T20235] ipip0: entered promiscuous mode [ 566.357804][T20251] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3413'. [ 566.547071][T20260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3415'. [ 566.569982][T20246] team0: Port device syz_tun added [ 566.583055][T20249] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3411'. [ 566.636794][T20063] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.672377][T20063] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.704306][T20063] bridge_slave_0: entered allmulticast mode [ 566.733940][T20063] bridge_slave_0: entered promiscuous mode [ 566.777070][T20063] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.804995][T20063] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.822628][T20273] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3417'. [ 566.832571][T20063] bridge_slave_1: entered allmulticast mode [ 566.844831][T20063] bridge_slave_1: entered promiscuous mode [ 566.854787][T20268] macvlan0: mtu less than device minimum [ 567.013317][T20063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.052634][T20063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.069304][ T5638] Bluetooth: hci3: command tx timeout [ 567.385759][T20283] ip6tnl1: entered allmulticast mode [ 567.420814][T20063] team0: Port device team_slave_0 added [ 567.441739][T20063] team0: Port device team_slave_1 added [ 567.462285][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 567.587967][T20063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.601994][T20063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.634577][T20063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.664151][T20063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.700073][T20063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.763328][T20063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.979746][T20063] hsr_slave_0: entered promiscuous mode [ 567.986769][T20063] hsr_slave_1: entered promiscuous mode [ 567.994651][T20063] debugfs: 'hsr0' already exists in 'hsr' [ 568.001614][T20063] Cannot create hsr debugfs directory [ 568.021901][ T6366] hsr_slave_0: left promiscuous mode [ 568.033301][ T6366] hsr_slave_1: left promiscuous mode [ 568.430862][ T6366] team0 (unregistering): Port device team_slave_1 removed [ 568.451649][ T6366] team0 (unregistering): Port device team_slave_0 removed [ 569.026823][ T6366] IPVS: stop unused estimator thread 0... [ 569.160239][ T5638] Bluetooth: hci3: command tx timeout [ 569.183235][T20254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.576639][T20317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.687322][T20317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.829535][T20312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.655885][T20063] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 570.702260][T20063] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.733796][T20063] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 570.776173][T20063] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.805518][T20063] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 570.853103][T20063] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.882978][T20063] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 570.938132][T20063] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.295960][T20063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.323277][T20379] netlink: 'syz.3.3433': attribute type 1 has an invalid length. [ 571.364038][T20063] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.376750][T20381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3433'. [ 571.418342][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.425660][ T7342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.441165][T20383] netlink: 'syz.0.3434': attribute type 24 has an invalid length. [ 571.544588][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.551829][ T7342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.833435][T20395] netlink: 'syz.3.3437': attribute type 3 has an invalid length. [ 571.888486][T20395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3437'. [ 572.235366][T20414] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 572.235392][T20417] netlink: 'syz.0.3442': attribute type 3 has an invalid length. [ 572.263616][T20418] netlink: 'syz.3.3440': attribute type 1 has an invalid length. [ 572.293259][T20417] netlink: 'syz.0.3442': attribute type 3 has an invalid length. [ 572.348238][T20421] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3441'. [ 572.440136][T20418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.462041][T20426] openvswitch: netlink: Flow actions attr not present in new flow. [ 572.543452][T20411] bond1: (slave batadv1): Opening slave failed [ 573.136913][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3445'. [ 573.143867][T20456] netlink: 'syz.3.3445': attribute type 1 has an invalid length. [ 573.231122][T20063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.377111][T20063] veth0_vlan: entered promiscuous mode [ 573.439283][T20063] veth1_vlan: entered promiscuous mode [ 573.545014][T20063] veth0_macvtap: entered promiscuous mode [ 573.580703][T20473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3448'. [ 573.591758][T20063] veth1_macvtap: entered promiscuous mode [ 573.617524][T20473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3448'. [ 573.654741][T20063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.728583][T20063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.773156][T20473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3448'. [ 573.794836][ T6366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.818036][T20473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3448'. [ 573.829111][T20489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3451'. [ 573.838273][ T6366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.866882][ T6366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.893058][ T6366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.914107][T20485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3451'. [ 574.025652][T20489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3451'. [ 574.586977][ T7330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.608151][ T7330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.653161][T20520] syzkaller0: entered promiscuous mode [ 574.658742][T20520] syzkaller0: entered allmulticast mode [ 574.716191][T20520] tipc: Started in network mode [ 574.732608][T20520] tipc: Node identity ce2cac4ccda2, cluster identity 4711 [ 574.752150][T20520] tipc: Enabled bearer , priority 0 [ 574.798309][T20527] vlan2: entered allmulticast mode [ 574.814109][T20527] bond0: entered allmulticast mode [ 574.822463][T20527] bond_slave_0: entered allmulticast mode [ 574.828526][T20527] bond_slave_1: entered allmulticast mode [ 574.839941][ T7340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.862764][ T7340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.873827][T20518] tipc: Resetting bearer [ 574.978480][T20518] tipc: Disabling bearer [ 575.875495][T20575] netlink: 'syz.1.3467': attribute type 1 has an invalid length. [ 575.976792][T20582] netlink: zone id is out of range [ 575.994506][T20582] netlink: zone id is out of range [ 576.007479][T20582] netlink: zone id is out of range [ 576.017710][T20582] netlink: zone id is out of range [ 576.025324][T20582] netlink: zone id is out of range [ 576.039805][T20582] netlink: zone id is out of range [ 576.072905][T20582] netlink: zone id is out of range [ 576.117728][T20582] netlink: zone id is out of range [ 576.144783][T20582] netlink: zone id is out of range [ 576.445396][T20603] block nbd3: server does not support multiple connections per device. [ 576.502156][T20603] block nbd3: shutting down sockets [ 577.162682][T20604] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 577.180567][T20604] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 577.282201][T20604] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 577.298262][T20604] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 577.336268][T20604] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 577.349178][T20604] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 577.404273][T20604] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 577.422054][T20604] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 577.556366][T20604] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 577.570164][T20604] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 578.048303][T20643] __nla_validate_parse: 11 callbacks suppressed [ 578.048325][T20643] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3485'. [ 578.097165][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3486'. [ 578.097764][T20643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3485'. [ 578.134219][T20645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3486'. [ 578.158459][T20649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3487'. [ 578.210159][T20649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.276654][T20654] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 578.360404][T20657] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3489'. [ 578.867479][T20671] netlink: 'syz.5.3494': attribute type 1 has an invalid length. [ 579.065947][T20680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3494'. [ 579.184176][T20680] ip6gre1: entered promiscuous mode [ 579.199040][T20680] ip6gre1: entered allmulticast mode [ 579.219879][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3498'. [ 579.285476][ T7340] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.304197][ T7340] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.312598][ T5777] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.379745][ T5777] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.464182][T20692] bond1: (slave macvlan1): Releasing backup interface [ 579.575861][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3501'. [ 579.750261][ T5777] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 580.284849][T20715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3503'. [ 580.908494][T20751] IPVS: Error connecting to the multicast addr [ 582.134924][T20798] netlink: 'syz.0.3527': attribute type 9 has an invalid length. [ 582.383899][T20811] : renamed from dummy0 [ 582.494765][T20813] netlink: 'syz.0.3531': attribute type 2 has an invalid length. [ 582.526937][T20813] x_tables: duplicate underflow at hook 2 [ 582.564820][T20813] xt_NFQUEUE: number of total queues is 0 [ 582.800701][T20830] netlink: 'syz.1.3534': attribute type 1 has an invalid length. [ 582.989275][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.150141][T20842] __nla_validate_parse: 4 callbacks suppressed [ 583.150164][T20842] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3537'. [ 583.193115][T20842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3537'. [ 583.226471][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3540'. [ 583.575508][T20860] syz_tun: entered allmulticast mode [ 583.597186][T20859] syz_tun: left allmulticast mode [ 583.981555][T20873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3547'. [ 583.991372][T20873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3547'. [ 584.124179][T20883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3547'. [ 584.159526][T20886] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3550'. [ 584.176448][T20887] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3550'. [ 584.361306][T20892] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3551'. [ 584.474548][T20896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3552'. [ 584.913776][T20906] tipc: Started in network mode [ 584.931378][T20906] tipc: Node identity 4277d0b4252a, cluster identity 4711 [ 584.970371][T20906] tipc: Enabled bearer , priority 0 [ 584.993978][T20911] syzkaller0: entered promiscuous mode [ 585.015667][T20911] syzkaller0: entered allmulticast mode [ 585.046337][T20906] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 585.167944][T20906] tipc: Resetting bearer [ 585.221754][T20905] tipc: Resetting bearer [ 585.267285][T20905] tipc: Disabling bearer [ 585.786991][T20943] vlan2: entered allmulticast mode [ 585.802207][T20943] bond0: entered allmulticast mode [ 585.809849][T20943] bond_slave_0: entered allmulticast mode [ 585.819834][T20943] bond_slave_1: entered allmulticast mode [ 585.859504][T20945] netlink: 'syz.3.3564': attribute type 15 has an invalid length. [ 586.098163][T20954] netlink: 'syz.3.3567': attribute type 1 has an invalid length. [ 586.515807][T20972] syzkaller0: entered promiscuous mode [ 586.528875][T20972] syzkaller0: entered allmulticast mode [ 586.811538][T20985] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.819145][T20985] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.931669][T20991] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 586.985755][T20991] geneve2: entered promiscuous mode [ 587.119310][T21003] nft_compat: unsupported protocol 5 [ 587.156246][T21001] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 587.199024][T21001] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 587.244121][T21001] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 587.297386][T21001] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 587.327387][T21013] netlink: 'syz.3.3588': attribute type 8 has an invalid length. [ 587.591893][ T7337] smbdirect: ib_dev[syz2] removed [ 587.865279][T21041] mac80211_hwsim hwsim54 »»»»»»: renamed from wlan0 [ 588.153252][T21056] netlink: 'syz.1.3603': attribute type 3 has an invalid length. [ 588.193026][T21056] netlink: 'syz.1.3603': attribute type 2 has an invalid length. [ 588.224740][T21056] __nla_validate_parse: 19 callbacks suppressed [ 588.224762][T21056] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3603'. [ 588.246595][T21056] netlink: 'syz.1.3603': attribute type 2 has an invalid length. [ 588.502664][T21079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3609'. [ 588.759664][T21090] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3611'. [ 588.776582][T21091] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3611'. [ 589.025025][T21102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3615'. [ 589.485319][T21135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3625'. [ 589.534320][T21137] bridge2: entered promiscuous mode [ 589.548473][T21137] bridge2: entered allmulticast mode [ 589.564151][T21137] team0: Port device bridge2 added [ 589.570512][T21138] bridge0: port 3(team0) entered blocking state [ 589.577157][T21138] bridge0: port 3(team0) entered disabled state [ 589.580608][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3627'. [ 589.589106][T21138] team0: entered allmulticast mode [ 589.597701][T21138] team_slave_0: entered allmulticast mode [ 589.604069][T21138] team_slave_1: entered allmulticast mode [ 589.610776][T21138] bridge0: entered allmulticast mode [ 589.616516][T21137] sock: sock_timestamping_bind_phc: sock not bind to device [ 589.641804][T21138] team0: left allmulticast mode [ 589.646958][T21138] team_slave_0: left allmulticast mode [ 589.653193][T21138] team_slave_1: left allmulticast mode [ 589.659108][T21138] bridge0: left allmulticast mode [ 589.873074][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3633'. [ 590.162101][T21174] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3637'. [ 590.174599][T21175] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3637'. [ 590.263200][T21169] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.271143][T21169] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.391225][T21169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.403173][T21169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.507747][ T7330] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.535455][ T7330] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.563732][ T7330] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.584403][ T7330] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.599143][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 590.711610][T21193] netlink: 'syz.3.3641': attribute type 2 has an invalid length. [ 590.745446][T21193] netlink: 'syz.3.3641': attribute type 5 has an invalid length. [ 591.303008][T21216] net_ratelimit: 1706 callbacks suppressed [ 591.303028][T21216] macvlan0: mtu less than device minimum [ 591.730078][T21243] syzkaller0: entered promiscuous mode [ 591.735611][T21243] syzkaller0: entered allmulticast mode [ 591.811407][T21248] xt_hashlimit: size too large, truncated to 1048576 [ 591.855925][T21253] syzkaller0: entered promiscuous mode [ 591.882059][T21253] syzkaller0: entered allmulticast mode [ 591.920041][T21253] tipc: Enabled bearer , priority 0 [ 591.957689][T21253] tipc: Resetting bearer [ 592.212254][T21245] tipc: Resetting bearer [ 592.266570][T21245] tipc: Disabling bearer [ 592.400324][T21266] syzkaller0: entered promiscuous mode [ 592.410973][T21266] syzkaller0: entered allmulticast mode [ 592.662284][T21280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 592.872869][T21289] syzkaller1: entered promiscuous mode [ 592.878768][T21289] syzkaller1: entered allmulticast mode [ 593.140859][T21304] xt_hashlimit: size too large, truncated to 1048576 [ 593.271694][T21306] __nla_validate_parse: 6 callbacks suppressed [ 593.271718][T21306] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3672'. [ 593.492281][T21318] syzkaller0: entered promiscuous mode [ 593.503446][T21318] syzkaller0: entered allmulticast mode [ 594.473413][T21335] netlink: 'syz.3.3679': attribute type 1 has an invalid length. [ 594.589561][T21345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.730283][T21335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 594.737796][T21354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3682'. [ 594.766287][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3682'. [ 594.787106][T21341] bond2: (slave geneve3): making interface the new active one [ 594.804588][T21341] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 594.849308][T21354] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 594.915874][ T7342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.941837][ T7330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.959073][ T7330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.020973][ T7330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.123401][T21370] syzkaller1: entered promiscuous mode [ 595.135415][T21370] syzkaller1: entered allmulticast mode [ 595.199953][T21353] syzkaller1: entered promiscuous mode [ 595.206942][T21353] syzkaller1: entered allmulticast mode [ 595.556147][T21386] : renamed from veth0_to_bond (while UP) [ 596.260655][T21416] netlink: 'syz.3.3698': attribute type 11 has an invalid length. [ 596.514495][T21423] pim6reg1: entered promiscuous mode [ 596.523009][T21423] pim6reg1: entered allmulticast mode [ 596.656276][T21431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3702'. [ 596.744481][T21431] netlink: 'syz.4.3702': attribute type 10 has an invalid length. [ 596.797086][T21431] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.817144][T21433] netlink: 'syz.4.3702': attribute type 10 has an invalid length. [ 596.828423][T21431] team0: Port device netdevsim1 added [ 596.832478][T19301] udevd[19301]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 596.985309][T21440] syzkaller0: refused to change device tx_queue_len [ 596.999942][T21441] syzkaller0: refused to change device tx_queue_len [ 597.068513][T21444] pimreg: entered allmulticast mode [ 597.077142][T21444] netlink: 'syz.5.3705': attribute type 1 has an invalid length. [ 597.166876][T21444] bond2: (slave gretap1): making interface the new active one [ 597.189414][T21444] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 597.210853][T21449] tipc: Started in network mode [ 597.219701][T21449] tipc: Node identity ea6bc30bb1e2, cluster identity 4711 [ 597.239320][T21449] tipc: Enabled bearer , priority 0 [ 597.246407][T21443] pimreg: left allmulticast mode [ 597.282323][T21449] syzkaller0: entered promiscuous mode [ 597.287920][T21449] syzkaller0: entered allmulticast mode [ 597.295891][T21448] tipc: Enabling of bearer rejected, already enabled [ 597.307948][T21453] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 597.332971][T21449] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 597.380398][T21448] tipc: Resetting bearer [ 597.403339][T21446] tipc: Resetting bearer [ 597.484419][T21446] tipc: Disabling bearer [ 597.622685][T21458] xt_hashlimit: size too large, truncated to 1048576 [ 597.704393][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.718819][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.732049][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.746317][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.755199][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 597.828028][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.837669][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.845488][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.854860][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.866819][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.329922][T21479] netlink: 'syz.4.3714': attribute type 15 has an invalid length. [ 598.346470][T21479] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3714'. [ 598.377850][T21486] syzkaller0: entered promiscuous mode [ 598.406362][T21486] syzkaller0: entered allmulticast mode [ 598.782908][T21499] netlink: 'syz.3.3722': attribute type 13 has an invalid length. [ 598.818831][T21505] sctp: [Deprecated]: syz.1.3721 (pid 21505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.818831][T21505] Use struct sctp_sack_info instead [ 599.042418][T21515] openvswitch: netlink: Duplicate or invalid key (type 0). [ 599.060943][T21515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.412631][T21530] netlink: 'syz.3.3728': attribute type 15 has an invalid length. [ 599.424075][T21462] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.432125][T21530] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3728'. [ 599.444957][T21462] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.453699][T21462] bridge_slave_0: entered allmulticast mode [ 599.478905][T21462] bridge_slave_0: entered promiscuous mode [ 599.511268][T21462] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.544532][T21462] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.554187][T21462] bridge_slave_1: entered allmulticast mode [ 599.564732][T21462] bridge_slave_1: entered promiscuous mode [ 599.666239][T21462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.681580][T21462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.691564][T21541] mac80211_hwsim hwsim53 syzkaller0: Caught tx_queue_len zero misconfig [ 599.794807][T21541] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 599.809717][T21541] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 599.897279][T21462] team0: Port device team_slave_0 added [ 599.918094][T21462] team0: Port device team_slave_1 added [ 599.928589][T19990] IPVS: starting estimator thread 0... [ 599.935057][T21549] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 599.949377][ T5638] Bluetooth: hci0: command tx timeout [ 600.032343][T21462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.042745][T21550] IPVS: using max 26 ests per chain, 62400 per kthread [ 600.050777][T21462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.101407][T21462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.132634][T21462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.150539][T21462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.207678][T21462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.301386][T21462] hsr_slave_0: entered promiscuous mode [ 600.315831][T21462] hsr_slave_1: entered promiscuous mode [ 600.336407][T21565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3738'. [ 600.369141][T21565] IPv6: NLM_F_CREATE should be specified when creating new route [ 600.524466][T21565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.697655][T21572] IPVS: set_ctl: invalid protocol: 44 100.1.1.5:20002 [ 600.713061][T21572] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 600.764746][T21579] netlink: 'syz.1.3742': attribute type 8 has an invalid length. [ 600.779266][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3742'. [ 600.817321][T21581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3742'. [ 600.877707][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3742'. [ 600.912680][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3742'. [ 600.995914][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3742'. [ 601.028016][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3742'. [ 601.289965][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3742'. [ 601.319904][T21462] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 601.345597][T21462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 601.372006][T21462] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 601.391742][T21462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 601.416002][T21601] netlink: 'syz.4.3747': attribute type 9 has an invalid length. [ 601.440610][T21462] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 601.458561][T21462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 601.486926][T21462] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 601.518258][T21462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 601.661152][T21613] vlan2: entered promiscuous mode [ 601.666465][T21613] bridge0: entered promiscuous mode [ 601.804504][T21617] syzkaller0: entered promiscuous mode [ 601.810265][T21617] syzkaller0: entered allmulticast mode [ 602.039341][ T5638] Bluetooth: hci0: command tx timeout [ 604.689120][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 604.730343][T21638] __nla_validate_parse: 3 callbacks suppressed [ 604.730365][T21638] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3756'. [ 605.005955][T21462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.079269][T21462] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.114596][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.121848][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.177528][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.184815][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.887265][T19983] hid-generic 0005:0007:0007.0001: item fetching failed at offset 0/17 [ 605.987084][T19983] hid-generic 0005:0007:0007.0001: probe with driver hid-generic failed with error -22 [ 606.161818][T21678] netlink: 'syz.4.3766': attribute type 15 has an invalid length. [ 606.171105][T21678] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3766'. [ 606.464338][T21462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.528409][T21691] openvswitch: netlink: Missing valid actions attribute. [ 606.536144][T21691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.577213][T21693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 606.664096][T21697] veth0: entered promiscuous mode [ 606.696921][T21690] veth0: left promiscuous mode [ 606.898611][T21707] bond4: entered promiscuous mode [ 606.904871][T21707] 8021q: adding VLAN 0 to HW filter on device bond4 [ 607.006430][T21702] nbd: couldn't find a device at index 0 [ 607.174375][T21462] veth0_vlan: entered promiscuous mode [ 607.198945][T21462] veth1_vlan: entered promiscuous mode [ 607.246453][T21462] veth0_macvtap: entered promiscuous mode [ 607.277815][T21462] veth1_macvtap: entered promiscuous mode [ 607.330901][T21462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.361148][T21462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.384265][T21723] netlink: 'syz.5.3775': attribute type 15 has an invalid length. [ 607.491995][ T7337] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.509613][T21731] netlink: 'syz.1.3776': attribute type 15 has an invalid length. [ 607.531543][ T7337] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.546003][T21731] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3776'. [ 607.585383][ T7337] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.636587][ T7337] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.963681][ T7340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.977441][ T7340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.136933][ T7340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.148312][ T7340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.295479][T21753] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3782'. [ 608.446491][T21753] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3782'. [ 608.542820][T21762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3783'. [ 608.663340][T21765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3785'. [ 608.673353][T21765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3785'. [ 608.700437][T21767] netlink: 'syz.1.3786': attribute type 30 has an invalid length. [ 608.751495][T21767] bond2: option arp_missed_max: invalid value (0) [ 608.763065][T21767] bond2: option arp_missed_max: allowed values 1 - 255 [ 608.806566][T21767] bond2 (unregistering): Released all slaves [ 608.892355][T21773] netlink: 'syz.6.3788': attribute type 15 has an invalid length. [ 608.930782][T21773] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3788'. [ 609.314438][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3794'. [ 609.371221][T21803] xt_TCPMSS: Only works on TCP SYN packets [ 610.225711][T21799] bridge_slave_1: left allmulticast mode [ 610.233544][T21799] bridge_slave_1: left promiscuous mode [ 610.239697][T21799] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.253081][T21799] bridge_slave_0: left allmulticast mode [ 610.259027][T21799] bridge_slave_0: left promiscuous mode [ 610.265181][T21799] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.471865][T21821] __nla_validate_parse: 6 callbacks suppressed [ 610.471886][T21821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3799'. [ 610.771842][T21843] netlink: 'syz.6.3805': attribute type 83 has an invalid length. [ 610.799752][T21841] TCP: TCP_TX_DELAY enabled [ 610.800536][T21843] IPv6: Can't replace route, no match found [ 610.981843][T21849] netlink: 'syz.6.3807': attribute type 2 has an invalid length. [ 611.039056][T21853] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3808'. [ 611.084830][T21857] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3809'. [ 611.095432][T21857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3809'. [ 611.168843][T21857] bond5: entered promiscuous mode [ 611.177629][T21857] 8021q: adding VLAN 0 to HW filter on device bond5 [ 611.196569][T21863] netlink: 'syz.6.3810': attribute type 13 has an invalid length. [ 611.220277][T21863] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3810'. [ 611.250998][T21863] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3810'. [ 611.300526][T21864] netlink: 'syz.1.3808': attribute type 3 has an invalid length. [ 611.318638][T21864] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3808'. [ 611.446498][T21869] netlink: 'syz.5.3811': attribute type 9 has an invalid length. [ 611.484812][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3811'. [ 611.522128][T21864] bond2 (unregistering): Released all slaves [ 611.584962][T21869] macvlan2: entered promiscuous mode [ 611.615396][T21869] erspan0: entered promiscuous mode [ 611.621330][T21869] macvlan2: entered allmulticast mode [ 611.626884][T21869] erspan0: entered allmulticast mode [ 611.726972][T21875] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3814'. [ 611.850656][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3813'. [ 611.875825][T21881] veth0_macvtap: left promiscuous mode [ 612.784098][T21917] can: request_module (can-proto-0) failed. [ 613.515134][T21945] netlink: 'syz.1.3836': attribute type 4 has an invalid length. [ 613.712810][T21956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.074850][T21969] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 614.206160][T21973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.247340][T22007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.285297][T22007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.501976][T22023] netlink: 'syz.5.3857': attribute type 1 has an invalid length. [ 615.793817][T22023] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 615.796487][ T3333] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.866614][ T3333] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.898565][ T3333] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.923462][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.432623][T22057] __nla_validate_parse: 6 callbacks suppressed [ 616.432647][T22057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3862'. [ 616.483060][T22057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3862'. [ 616.624469][T22065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3862'. [ 616.708388][ T5639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 616.727096][ T5639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 616.736963][ T5639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 616.750342][ T5639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 616.760679][ T5639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 616.905494][T22077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 616.943654][T22077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 617.021529][T22077] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 617.223242][T22092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.316375][T22094] tipc: Started in network mode [ 617.341308][T22094] tipc: Node identity 4e0686ee209, cluster identity 4711 [ 617.369443][T22094] tipc: Enabled bearer , priority 0 [ 617.381219][T22103] syzkaller0: entered promiscuous mode [ 617.417315][T22103] syzkaller0: entered allmulticast mode [ 617.515382][T22094] tipc: Resetting bearer [ 617.551828][T22093] tipc: Resetting bearer [ 617.617670][T22093] tipc: Disabling bearer [ 617.793936][T22117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3875'. [ 617.917586][T22117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3875'. [ 617.986517][T22124] veth3: entered promiscuous mode [ 618.048836][T19992] IPVS: starting estimator thread 0... [ 618.139359][T22130] IPVS: using max 23 ests per chain, 55200 per kthread [ 618.162618][T22134] netlink: 'syz.5.3880': attribute type 39 has an invalid length. [ 618.457245][T22146] netlink: 'syz.6.3882': attribute type 9 has an invalid length. [ 618.617777][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3885'. [ 618.645216][T22153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3885'. [ 618.656388][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3885'. [ 618.840016][ T5639] Bluetooth: hci7: command tx timeout [ 619.341968][T22067] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.367097][T22067] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.368872][T22177] netlink: zone id is out of range [ 619.375435][T22067] bridge_slave_0: entered allmulticast mode [ 619.388268][T22067] bridge_slave_0: entered promiscuous mode [ 619.409578][T22177] netlink: zone id is out of range [ 619.415267][T22067] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.423185][T22067] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.431253][T22067] bridge_slave_1: entered allmulticast mode [ 619.439885][T22067] bridge_slave_1: entered promiscuous mode [ 619.442065][T22177] netlink: zone id is out of range [ 619.489884][T22177] netlink: zone id is out of range [ 619.556587][T22180] macvtap0: entered promiscuous mode [ 619.589880][T22067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.637028][T22067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.665656][T22180] macvtap0: left promiscuous mode [ 619.735878][T22067] team0: Port device team_slave_0 added [ 619.768770][T22067] team0: Port device team_slave_1 added [ 619.853928][T22067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.868784][T22067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.903767][T22067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.917417][T22067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.948520][T22067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.979069][T22067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.028250][T22200] tipc: Enabled bearer , priority 0 [ 620.131817][T22200] tipc: Disabling bearer [ 620.156746][T22067] hsr_slave_0: entered promiscuous mode [ 620.164842][T22067] hsr_slave_1: entered promiscuous mode [ 620.172578][T22067] debugfs: 'hsr0' already exists in 'hsr' [ 620.188578][T22067] Cannot create hsr debugfs directory [ 620.632698][T22222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3899'. [ 620.919083][ T5639] Bluetooth: hci7: command tx timeout [ 620.946260][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3904'. [ 620.961496][T22236] FAULT_INJECTION: forcing a failure. [ 620.961496][T22236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.007104][T22236] CPU: 1 UID: 0 PID: 22236 Comm: syz.5.3905 Not tainted syzkaller #0 PREEMPT(full) [ 621.007137][T22236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 621.007150][T22236] Call Trace: [ 621.007157][T22236] [ 621.007165][T22236] dump_stack_lvl+0xe8/0x150 [ 621.007206][T22236] should_fail_ex+0x40c/0x560 [ 621.007241][T22236] _copy_from_user+0x2d/0xb0 [ 621.007272][T22236] __sys_connect+0x155/0x460 [ 621.007309][T22236] ? __pfx___sys_connect+0x10/0x10 [ 621.007351][T22236] ? __pfx_ksys_write+0x10/0x10 [ 621.007388][T22236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.007413][T22236] __x64_sys_connect+0x7a/0x90 [ 621.007442][T22236] do_syscall_64+0x174/0x580 [ 621.007473][T22236] ? trace_irq_disable+0x3b/0x140 [ 621.007510][T22236] ? clear_bhb_loop+0x40/0x90 [ 621.007535][T22236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.007554][T22236] RIP: 0033:0x7fc38d99de99 [ 621.007574][T22236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.007590][T22236] RSP: 002b:00007fc38e8ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 621.007613][T22236] RAX: ffffffffffffffda RBX: 00007fc38dc25fa0 RCX: 00007fc38d99de99 [ 621.007628][T22236] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 621.007641][T22236] RBP: 00007fc38e8ec090 R08: 0000000000000000 R09: 0000000000000000 [ 621.007653][T22236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.007665][T22236] R13: 00007fc38dc26038 R14: 00007fc38dc25fa0 R15: 00007ffc625f5628 [ 621.007698][T22236] [ 621.467727][T22067] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 621.490057][T22067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 621.521895][T22067] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 621.530101][T22258] __nla_validate_parse: 2 callbacks suppressed [ 621.530122][T22258] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3911'. [ 621.573594][T22067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 621.615690][T22067] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 621.650354][T22252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3911'. [ 621.697117][T22067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 621.746058][T22265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3913'. [ 621.756053][T22252] ip6tnl3: entered allmulticast mode [ 621.791960][T22261] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3912'. [ 621.802449][T22261] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3912'. [ 621.812027][T22262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3912'. [ 621.829047][T22262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3912'. [ 621.865104][T22067] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 621.894597][T22067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 621.911192][ T7328] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 621.944171][ T8881] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 621.953105][ T7328] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 622.024096][T22283] netlink: 'syz.6.3916': attribute type 2 has an invalid length. [ 622.046473][T22283] netlink: 'syz.6.3916': attribute type 8 has an invalid length. [ 622.061990][T22283] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3916'. [ 622.066305][T22287] FAULT_INJECTION: forcing a failure. [ 622.066305][T22287] name failslab, interval 1, probability 0, space 0, times 1 [ 622.094306][T22287] CPU: 0 UID: 0 PID: 22287 Comm: syz.4.3917 Not tainted syzkaller #0 PREEMPT(full) [ 622.094339][T22287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 622.094350][T22287] Call Trace: [ 622.094359][T22287] [ 622.094366][T22287] dump_stack_lvl+0xe8/0x150 [ 622.094391][T22287] should_fail_ex+0x40c/0x560 [ 622.094410][T22287] should_failslab+0xa8/0x100 [ 622.094429][T22287] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 622.094444][T22287] ? dst_alloc+0x105/0x170 [ 622.094509][T22287] ? dst_alloc+0x105/0x170 [ 622.094522][T22287] ? fib_lookup+0x76/0x440 [ 622.094586][T22287] dst_alloc+0x105/0x170 [ 622.094603][T22287] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 622.094626][T22287] ? ip_route_output_key_hash+0xd8/0x2a0 [ 622.094644][T22287] ip_route_output_key_hash+0x18d/0x2a0 [ 622.094663][T22287] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 622.094690][T22287] tcp_v4_connect+0x6fd/0x1950 [ 622.094731][T22287] ? __pfx_tcp_v4_connect+0x10/0x10 [ 622.094744][T22287] ? __lock_acquire+0x683/0x2cf0 [ 622.094782][T22287] __inet_stream_connect+0x258/0xe00 [ 622.094819][T22287] ? do_raw_spin_lock+0x12b/0x2f0 [ 622.094831][T22287] ? lock_sock_nested+0x6a/0x100 [ 622.094861][T22287] ? __pfx___inet_stream_connect+0x10/0x10 [ 622.094880][T22287] ? inet_stream_connect+0x51/0xa0 [ 622.094897][T22287] ? __local_bh_enable_ip+0xd0/0x130 [ 622.094927][T22287] inet_stream_connect+0x66/0xa0 [ 622.094946][T22287] kernel_connect+0x141/0x1c0 [ 622.094963][T22287] ? __pfx_kernel_connect+0x10/0x10 [ 622.094977][T22287] ? do_raw_spin_lock+0x12b/0x2f0 [ 622.094999][T22287] ? __local_bh_enable_ip+0xd0/0x130 [ 622.095015][T22287] smc_connect+0x78c/0xdb0 [ 622.095080][T22287] __sys_connect+0x323/0x460 [ 622.095098][T22287] ? __pfx___sys_connect+0x10/0x10 [ 622.095123][T22287] ? __pfx_ksys_write+0x10/0x10 [ 622.095144][T22287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.095157][T22287] __x64_sys_connect+0x7a/0x90 [ 622.095174][T22287] do_syscall_64+0x174/0x580 [ 622.095191][T22287] ? trace_irq_disable+0x3b/0x140 [ 622.095206][T22287] ? clear_bhb_loop+0x40/0x90 [ 622.095221][T22287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.095233][T22287] RIP: 0033:0x7f260139de99 [ 622.095246][T22287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.095256][T22287] RSP: 002b:00007f260230f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 622.095271][T22287] RAX: ffffffffffffffda RBX: 00007f2601625fa0 RCX: 00007f260139de99 [ 622.095280][T22287] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 622.095288][T22287] RBP: 00007f260230f090 R08: 0000000000000000 R09: 0000000000000000 [ 622.095295][T22287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.095302][T22287] R13: 00007f2601626038 R14: 00007f2601625fa0 R15: 00007ffc20015668 [ 622.095322][T22287] [ 622.381990][T19992] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 622.390133][T19992] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 622.641760][T22067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.692583][T22067] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.713438][T22302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3921'. [ 622.724647][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.731884][ T6357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.745698][T22302] netlink: 'syz.4.3921': attribute type 5 has an invalid length. [ 622.756072][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.763336][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.775295][T22302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3921'. [ 622.825176][T22302] geneve3: entered promiscuous mode [ 622.841452][T22302] geneve3: entered allmulticast mode [ 622.854698][ T6349] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 47053 - 0 [ 622.864307][ T6349] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 47053 - 0 [ 622.877560][ T6349] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 47053 - 0 [ 622.887559][ T6349] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 47053 - 0 [ 622.930352][T22308] ip6erspan0: entered promiscuous mode [ 622.990411][ T5639] Bluetooth: hci7: command tx timeout [ 623.449705][T22322] netlink: 'syz.5.3925': attribute type 5 has an invalid length. [ 623.523902][T22067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.651636][T22330] netlink: 'syz.5.3926': attribute type 4 has an invalid length. [ 623.679222][T22330] netlink: 'syz.5.3926': attribute type 4 has an invalid length. [ 623.896196][T22067] veth0_vlan: entered promiscuous mode [ 623.915294][T22067] veth1_vlan: entered promiscuous mode [ 623.981012][T22067] veth0_macvtap: entered promiscuous mode [ 623.994197][T22067] veth1_macvtap: entered promiscuous mode [ 624.025611][T22067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.058593][T22067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.081361][ T7328] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.091132][ T7328] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.102430][ T7328] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.112387][ T7328] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.387649][T22336] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 624.511960][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.523786][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.885889][T22282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.069622][ T5639] Bluetooth: hci7: command tx timeout [ 625.078609][ T6357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.109585][ T6357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.260843][T22352] bridge3: entered promiscuous mode [ 625.266857][T22352] bridge3: entered allmulticast mode [ 625.302715][T22352] team0: Port device bridge3 added [ 625.314110][T22339] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 625.323955][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.348523][T22354] bridge0: port 3(team0) entered blocking state [ 625.356304][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.370232][T22354] bridge0: port 3(team0) entered disabled state [ 625.380089][T22354] team0: entered allmulticast mode [ 625.385379][T22354] team_slave_0: entered allmulticast mode [ 625.391498][T22354] team_slave_1: entered allmulticast mode [ 625.409794][T22354] team0: entered promiscuous mode [ 625.425034][T22354] team_slave_0: entered promiscuous mode [ 625.431561][T22354] team_slave_1: entered promiscuous mode [ 625.465330][T22352] bond0: Unable to set down delay as MII monitoring is disabled [ 625.481020][T22364] sctp: [Deprecated]: syz.5.3934 (pid 22364) Use of struct sctp_assoc_value in delayed_ack socket option. [ 625.481020][T22364] Use struct sctp_sack_info instead [ 625.901772][T22366] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 625.920834][T22366] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 626.187592][T22392] bridge5: entered promiscuous mode [ 626.193318][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 626.219107][T22392] bridge5: entered allmulticast mode [ 626.238186][T22392] team0: Port device bridge5 added [ 626.244746][T22390] bridge0: port 3(team0) entered blocking state [ 626.252023][T22390] bridge0: port 3(team0) entered disabled state [ 626.258575][T22390] team0: entered allmulticast mode [ 626.264958][T22390] team_slave_0: entered allmulticast mode [ 626.273667][T22390] team_slave_1: entered allmulticast mode [ 626.290183][T22390] bridge0: entered allmulticast mode [ 626.310297][T22390] team0: left allmulticast mode [ 626.318339][T22390] team_slave_0: left allmulticast mode [ 626.343916][T22390] team_slave_1: left allmulticast mode [ 626.351265][T22390] bridge0: left allmulticast mode [ 627.426582][T22441] IPv6: sit1: Disabled Multicast RS [ 628.007809][T22458] __nla_validate_parse: 14 callbacks suppressed [ 628.007830][T22458] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3962'. [ 628.039996][T22458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3962'. [ 628.103486][T22475] netlink: 'syz.5.3964': attribute type 1 has an invalid length. [ 628.241832][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3966'. [ 628.348528][T22484] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3966'. [ 629.127492][T22496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3970'. [ 629.213685][T22502] FAULT_INJECTION: forcing a failure. [ 629.213685][T22502] name failslab, interval 1, probability 0, space 0, times 0 [ 629.228486][T22502] CPU: 0 UID: 0 PID: 22502 Comm: syz.7.3972 Not tainted syzkaller #0 PREEMPT(full) [ 629.228514][T22502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 629.228527][T22502] Call Trace: [ 629.228535][T22502] [ 629.228543][T22502] dump_stack_lvl+0xe8/0x150 [ 629.228580][T22502] should_fail_ex+0x40c/0x560 [ 629.228609][T22502] should_failslab+0xa8/0x100 [ 629.228639][T22502] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 629.228665][T22502] ? __inet_hash_connect+0xe9b/0x25a0 [ 629.228749][T22502] ? __inet_hash_connect+0xe9b/0x25a0 [ 629.228781][T22502] __inet_hash_connect+0xe9b/0x25a0 [ 629.228809][T22502] ? __pfx___inet_check_established+0x10/0x10 [ 629.228845][T22502] ? __inet_hash_connect+0x5ce/0x25a0 [ 629.228875][T22502] ? __pfx___inet_hash_connect+0x10/0x10 [ 629.228900][T22502] ? lockdep_hardirqs_on+0x7a/0x110 [ 629.228961][T22502] ? inet_hash_connect+0xf1/0x380 [ 629.228990][T22502] tcp_v4_connect+0xcee/0x1950 [ 629.229028][T22502] ? __pfx_tcp_v4_connect+0x10/0x10 [ 629.229050][T22502] ? __lock_acquire+0x683/0x2cf0 [ 629.229082][T22502] __inet_stream_connect+0x258/0xe00 [ 629.229117][T22502] ? do_raw_spin_lock+0x12b/0x2f0 [ 629.229138][T22502] ? lock_sock_nested+0x6a/0x100 [ 629.229165][T22502] ? __pfx___inet_stream_connect+0x10/0x10 [ 629.229198][T22502] ? inet_stream_connect+0x51/0xa0 [ 629.229227][T22502] ? __local_bh_enable_ip+0xd0/0x130 [ 629.229256][T22502] inet_stream_connect+0x66/0xa0 [ 629.229288][T22502] kernel_connect+0x141/0x1c0 [ 629.229313][T22502] ? __pfx_kernel_connect+0x10/0x10 [ 629.229333][T22502] ? do_raw_spin_lock+0x12b/0x2f0 [ 629.229380][T22502] ? __local_bh_enable_ip+0xd0/0x130 [ 629.229409][T22502] smc_connect+0x78c/0xdb0 [ 629.229445][T22502] __sys_connect+0x323/0x460 [ 629.229474][T22502] ? __pfx___sys_connect+0x10/0x10 [ 629.229513][T22502] ? __pfx_ksys_write+0x10/0x10 [ 629.229547][T22502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.229569][T22502] __x64_sys_connect+0x7a/0x90 [ 629.229596][T22502] do_syscall_64+0x174/0x580 [ 629.229623][T22502] ? trace_irq_disable+0x3b/0x140 [ 629.229649][T22502] ? clear_bhb_loop+0x40/0x90 [ 629.229672][T22502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.229692][T22502] RIP: 0033:0x7f12e2b9de99 [ 629.229713][T22502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.229729][T22502] RSP: 002b:00007f12e3a74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 629.229751][T22502] RAX: ffffffffffffffda RBX: 00007f12e2e25fa0 RCX: 00007f12e2b9de99 [ 629.229766][T22502] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 629.229778][T22502] RBP: 00007f12e3a74090 R08: 0000000000000000 R09: 0000000000000000 [ 629.229790][T22502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.229801][T22502] R13: 00007f12e2e26038 R14: 00007f12e2e25fa0 R15: 00007ffd42785fa8 [ 629.229835][T22502] [ 629.591271][T22509] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3970'. [ 629.854843][T22520] netlink: 'syz.5.3975': attribute type 8 has an invalid length. [ 630.406595][T19301] udevd[19301]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 630.632604][T22534] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3978'. [ 630.909182][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 630.930313][T22545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3982'. [ 631.056701][T22545] veth3: entered allmulticast mode [ 631.235138][T22556] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3984'. [ 631.282363][T22560] FAULT_INJECTION: forcing a failure. [ 631.282363][T22560] name failslab, interval 1, probability 0, space 0, times 0 [ 631.297321][T22560] CPU: 0 UID: 0 PID: 22560 Comm: syz.6.3986 Not tainted syzkaller #0 PREEMPT(full) [ 631.297351][T22560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 631.297364][T22560] Call Trace: [ 631.297373][T22560] [ 631.297381][T22560] dump_stack_lvl+0xe8/0x150 [ 631.297419][T22560] should_fail_ex+0x40c/0x560 [ 631.297448][T22560] should_failslab+0xa8/0x100 [ 631.297478][T22560] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 631.297503][T22560] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 631.297522][T22560] ? __inet_hash_connect+0x1631/0x25a0 [ 631.297545][T22560] ? __inet_hash_connect+0x1631/0x25a0 [ 631.297575][T22560] __inet_hash_connect+0x1631/0x25a0 [ 631.297613][T22560] ? __inet_hash_connect+0x5ce/0x25a0 [ 631.297641][T22560] ? __pfx___inet_hash_connect+0x10/0x10 [ 631.297662][T22560] ? lockdep_hardirqs_on+0x7a/0x110 [ 631.297696][T22560] ? inet_hash_connect+0xf1/0x380 [ 631.297725][T22560] tcp_v4_connect+0xcee/0x1950 [ 631.297762][T22560] ? __pfx_tcp_v4_connect+0x10/0x10 [ 631.297785][T22560] ? __lock_acquire+0x683/0x2cf0 [ 631.297819][T22560] __inet_stream_connect+0x258/0xe00 [ 631.297853][T22560] ? do_raw_spin_lock+0x12b/0x2f0 [ 631.297884][T22560] ? lock_sock_nested+0x6a/0x100 [ 631.297912][T22560] ? __pfx___inet_stream_connect+0x10/0x10 [ 631.297943][T22560] ? inet_stream_connect+0x51/0xa0 [ 631.297974][T22560] ? __local_bh_enable_ip+0xd0/0x130 [ 631.298002][T22560] inet_stream_connect+0x66/0xa0 [ 631.298032][T22560] kernel_connect+0x141/0x1c0 [ 631.298058][T22560] ? __pfx_kernel_connect+0x10/0x10 [ 631.298076][T22560] ? do_raw_spin_lock+0x12b/0x2f0 [ 631.298112][T22560] ? __local_bh_enable_ip+0xd0/0x130 [ 631.298138][T22560] smc_connect+0x78c/0xdb0 [ 631.298174][T22560] __sys_connect+0x323/0x460 [ 631.298204][T22560] ? __pfx___sys_connect+0x10/0x10 [ 631.298245][T22560] ? __pfx_ksys_write+0x10/0x10 [ 631.298281][T22560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.298304][T22560] __x64_sys_connect+0x7a/0x90 [ 631.298334][T22560] do_syscall_64+0x174/0x580 [ 631.298360][T22560] ? trace_irq_disable+0x3b/0x140 [ 631.298385][T22560] ? clear_bhb_loop+0x40/0x90 [ 631.298411][T22560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.298432][T22560] RIP: 0033:0x7fcdc339de99 [ 631.298451][T22560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.298468][T22560] RSP: 002b:00007fcdc42d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 631.298491][T22560] RAX: ffffffffffffffda RBX: 00007fcdc3625fa0 RCX: 00007fcdc339de99 [ 631.298506][T22560] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 631.298517][T22560] RBP: 00007fcdc42d9090 R08: 0000000000000000 R09: 0000000000000000 [ 631.298529][T22560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.298540][T22560] R13: 00007fcdc3626038 R14: 00007fcdc3625fa0 R15: 00007fff5addab08 [ 631.298574][T22560] [ 631.864619][T22574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3987'. [ 631.934473][T22566] tipc: Failed to remove unknown binding: 66,0,0/0:84229256/84229257 [ 631.984155][T22566] tipc: Failed to remove unknown binding: 66,0,0/0:84229256/84229257 [ 632.337341][T22595] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 632.363211][T22595] nbd: error processing sock list [ 632.468374][T22602] netlink: 'syz.5.3995': attribute type 10 has an invalid length. [ 632.477618][T22600] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 632.495774][T22600] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 632.509962][T22600] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 632.522806][T22605] FAULT_INJECTION: forcing a failure. [ 632.522806][T22605] name failslab, interval 1, probability 0, space 0, times 0 [ 632.549293][T22605] CPU: 1 UID: 0 PID: 22605 Comm: syz.1.3998 Not tainted syzkaller #0 PREEMPT(full) [ 632.549321][T22605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 632.549331][T22605] Call Trace: [ 632.549338][T22605] [ 632.549345][T22605] dump_stack_lvl+0xe8/0x150 [ 632.549378][T22605] should_fail_ex+0x40c/0x560 [ 632.549404][T22605] should_failslab+0xa8/0x100 [ 632.549430][T22605] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 632.549450][T22605] ? dst_alloc+0x105/0x170 [ 632.549467][T22605] ? dst_alloc+0x105/0x170 [ 632.549492][T22605] dst_alloc+0x105/0x170 [ 632.549515][T22605] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 632.549549][T22605] ? ip_route_output_key_hash+0xd8/0x2a0 [ 632.549574][T22605] ip_route_output_key_hash+0x18d/0x2a0 [ 632.549610][T22605] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 632.549631][T22605] ? call_rcu+0x64b/0x8b0 [ 632.549697][T22605] ip_route_output_flow+0x2a/0x150 [ 632.549724][T22605] tcp_v4_connect+0xd86/0x1950 [ 632.549759][T22605] ? __pfx_tcp_v4_connect+0x10/0x10 [ 632.549779][T22605] ? __lock_acquire+0x683/0x2cf0 [ 632.549807][T22605] __inet_stream_connect+0x258/0xe00 [ 632.549839][T22605] ? do_raw_spin_lock+0x12b/0x2f0 [ 632.549857][T22605] ? lock_sock_nested+0x6a/0x100 [ 632.549881][T22605] ? __pfx___inet_stream_connect+0x10/0x10 [ 632.549913][T22605] ? inet_stream_connect+0x51/0xa0 [ 632.549938][T22605] ? __local_bh_enable_ip+0xd0/0x130 [ 632.549965][T22605] inet_stream_connect+0x66/0xa0 [ 632.549993][T22605] kernel_connect+0x141/0x1c0 [ 632.550016][T22605] ? __pfx_kernel_connect+0x10/0x10 [ 632.550035][T22605] ? do_raw_spin_lock+0x12b/0x2f0 [ 632.550073][T22605] ? __local_bh_enable_ip+0xd0/0x130 [ 632.550101][T22605] smc_connect+0x78c/0xdb0 [ 632.550140][T22605] __sys_connect+0x323/0x460 [ 632.550172][T22605] ? __pfx___sys_connect+0x10/0x10 [ 632.550216][T22605] ? __pfx_ksys_write+0x10/0x10 [ 632.550254][T22605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.550278][T22605] __x64_sys_connect+0x7a/0x90 [ 632.550308][T22605] do_syscall_64+0x174/0x580 [ 632.550339][T22605] ? trace_irq_disable+0x3b/0x140 [ 632.550365][T22605] ? clear_bhb_loop+0x40/0x90 [ 632.550392][T22605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.550413][T22605] RIP: 0033:0x7f8cd559de99 [ 632.550434][T22605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.550452][T22605] RSP: 002b:00007f8cd64cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 632.550475][T22605] RAX: ffffffffffffffda RBX: 00007f8cd5825fa0 RCX: 00007f8cd559de99 [ 632.550489][T22605] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 632.550502][T22605] RBP: 00007f8cd64cd090 R08: 0000000000000000 R09: 0000000000000000 [ 632.550514][T22605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.550525][T22605] R13: 00007f8cd5826038 R14: 00007f8cd5825fa0 R15: 00007ffdec61d378 [ 632.550561][T22605] [ 633.070373][T22611] __nla_validate_parse: 2 callbacks suppressed [ 633.070395][T22611] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4000'. [ 633.218584][T22617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4001'. [ 634.431624][ T5639] Bluetooth: hci7: command tx timeout [ 634.753447][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 636.132311][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4001'. [ 636.545759][T22645] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 636.612950][T22652] netlink: 'syz.4.4013': attribute type 3 has an invalid length. [ 636.626800][T22652] netlink: 'syz.4.4013': attribute type 1 has an invalid length. [ 636.651412][T22652] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4013'. [ 636.694632][T22652] NCSI netlink: No device for ifindex 4294967295 [ 636.731016][T22650] syzkaller0: entered promiscuous mode [ 636.736810][T22650] syzkaller0: entered allmulticast mode [ 637.484675][T22673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4019'. [ 640.898144][T22700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4025'. [ 640.951321][T22699] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4024'. [ 641.027790][T22710] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4026'. [ 641.702627][T22745] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 641.729641][T22745] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 641.975233][T22747] syzkaller0: entered promiscuous mode [ 641.998226][T22747] syzkaller0: entered allmulticast mode [ 642.018007][T22753] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4038'. [ 642.146632][T22765] Cannot find set identified by id 0 to match [ 645.952331][T22789] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4045'. [ 645.977913][T22793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4047'. [ 646.576635][T22818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4053'. [ 646.616897][T22818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4053'. [ 646.657692][T22818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4053'. [ 646.697945][T22818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4053'. [ 646.724266][T22818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4053'. [ 646.729583][T22826] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 646.854951][T22830] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4057'. [ 646.908273][T22828] syzkaller0: entered promiscuous mode [ 646.914286][T22828] syzkaller0: entered allmulticast mode [ 646.947068][T22833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4058'. [ 647.256292][T22847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4062'. [ 650.684038][T22856] netlink: zone id is out of range [ 650.700063][T22856] netlink: zone id is out of range [ 650.705363][T22856] netlink: zone id is out of range [ 650.714171][T22856] netlink: zone id is out of range [ 650.721768][T22856] netlink: zone id is out of range [ 650.727156][T22856] netlink: zone id is out of range [ 650.735872][T22856] netlink: zone id is out of range [ 650.744419][T22856] netlink: get zone limit has 4 unknown bytes [ 651.220928][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4070'. [ 651.240771][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4070'. [ 651.931826][T22885] syzkaller0: entered promiscuous mode [ 651.950652][T22885] syzkaller0: entered allmulticast mode [ 652.022643][T22899] netlink: 'syz.6.4074': attribute type 1 has an invalid length. [ 652.029775][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 652.128772][T22895] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4075'. [ 652.270032][T22911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4077'. [ 652.377623][T19992] IPVS: starting estimator thread 0... [ 652.510050][T22918] IPVS: using max 27 ests per chain, 64800 per kthread [ 655.617870][T22898] bridge1: entered promiscuous mode [ 655.623235][T22898] bridge1: entered allmulticast mode [ 655.631930][T22898] team0: Port device bridge1 added [ 655.653623][T22915] bridge2: entered promiscuous mode [ 655.658978][T22915] bridge2: entered allmulticast mode [ 655.669597][T22915] team0: Port device bridge2 added [ 655.805501][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4082'. [ 655.841209][T22939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4082'. [ 655.916227][T22947] xt_connbytes: Forcing CT accounting to be enabled [ 656.101267][ T6361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.127667][ T6361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.519865][T22974] netlink: 'syz.6.4092': attribute type 1 has an invalid length. [ 656.552124][T22978] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4091'. [ 656.612091][T22974] bond1: entered promiscuous mode [ 656.617819][T22974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.936600][T22994] Bluetooth: MGMT ver 1.23 [ 656.961133][T22996] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4098'. [ 656.965830][T22988] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.302938][T22988] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.617323][T22988] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.661780][T23023] Bluetooth: MGMT ver 1.23 [ 657.814072][T22988] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.140548][T23037] tipc: New replicast peer: 255.255.255.255 [ 658.156885][T23037] tipc: Enabled bearer , priority 10 [ 658.200841][ T6357] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.316078][ T6349] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.382308][ T6357] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.440568][T23037] ipt_ECN: cannot use operation on non-tcp rule [ 658.451053][ T6349] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.567803][T23050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4111'. [ 658.764110][T23056] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4114'. [ 658.789382][T23056] netlink: 'syz.7.4114': attribute type 1 has an invalid length. [ 658.833093][T23056] geneve2: entered promiscuous mode [ 658.848718][T23058] bridge_slave_0: left allmulticast mode [ 658.858548][T23058] bridge_slave_0: left promiscuous mode [ 658.865507][T23058] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.891700][T23058] bridge_slave_1: left allmulticast mode [ 658.930971][T23058] bridge_slave_1: left promiscuous mode [ 658.950203][T23058] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.989268][ T5639] Bluetooth: hci0: command tx timeout [ 658.991184][T23067] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4114'. [ 659.028377][T23073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4118'. [ 659.028411][T23058] bond0: (slave bond_slave_0): Releasing backup interface [ 659.054828][T23058] bond0: (slave bond_slave_1): Releasing backup interface [ 659.082888][T23058] team0: Port device team_slave_0 removed [ 659.103409][T23058] team0: Port device team_slave_1 removed [ 659.115691][T23058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.123300][T23058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.133157][T23058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.141696][T23058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.152775][T23058] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 659.198799][T23056] team0: Device xfrm0 is of different type [ 659.353139][T23077] tun0: tun_chr_ioctl cmd 1074025675 [ 659.365856][T23077] tun0: persist enabled [ 659.374388][T23059] tun0: tun_chr_ioctl cmd 1074025675 [ 659.380882][T23059] tun0: persist disabled [ 659.385299][ T5819] tipc: Node number set to 59681868 [ 659.395878][T23078] syzkaller0: entered promiscuous mode [ 659.411842][T23078] syzkaller0: entered allmulticast mode [ 661.069247][ T5639] Bluetooth: hci0: command tx timeout [ 661.820114][T23063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 662.027288][T23097] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4121'. [ 662.070390][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4121'. [ 662.082900][T23101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4122'. [ 662.097737][T23100] GUP no longer grows the stack in syz.5.4123 (23100): 200000003000-20000000a000 (200000001000) [ 662.118649][T23100] CPU: 0 UID: 0 PID: 23100 Comm: syz.5.4123 Not tainted syzkaller #0 PREEMPT(full) [ 662.118681][T23100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 662.118694][T23100] Call Trace: [ 662.118702][T23100] [ 662.118712][T23100] dump_stack_lvl+0xe8/0x150 [ 662.118751][T23100] __get_user_pages+0x238c/0x2720 [ 662.118791][T23100] ? __gup_longterm_locked+0xc3b/0x15c0 [ 662.118837][T23100] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 662.118878][T23100] __gup_longterm_locked+0xd52/0x15c0 [ 662.118903][T23100] ? lock_acquire+0x106/0x350 [ 662.118949][T23100] gup_fast_fallback+0x1d8c/0x20e0 [ 662.118969][T23100] ? lockdep_hardirqs_on+0x7a/0x110 [ 662.119037][T23100] ? __pfx_gup_fast_fallback+0x10/0x10 [ 662.119063][T23100] ? is_valid_gup_args+0x11f/0x200 [ 662.119086][T23100] ? get_user_pages_fast+0x4d/0xb0 [ 662.119110][T23100] __iov_iter_get_pages_alloc+0x378/0xa40 [ 662.119221][T23100] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 662.119259][T23100] iov_iter_get_pages2+0x5e/0xa0 [ 662.119293][T23100] __se_sys_vmsplice+0x7b5/0x1660 [ 662.119347][T23100] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 662.119391][T23100] ? __pfx_futex_wake+0x10/0x10 [ 662.119505][T23100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.119530][T23100] do_syscall_64+0x174/0x580 [ 662.119562][T23100] ? trace_irq_disable+0x3b/0x140 [ 662.119590][T23100] ? clear_bhb_loop+0x40/0x90 [ 662.119616][T23100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.119638][T23100] RIP: 0033:0x7fc38d99de99 [ 662.119659][T23100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.119678][T23100] RSP: 002b:00007fc38e8ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 662.119702][T23100] RAX: ffffffffffffffda RBX: 00007fc38dc25fa0 RCX: 00007fc38d99de99 [ 662.119717][T23100] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 662.119729][T23100] RBP: 00007fc38da33eaf R08: 0000000000000000 R09: 0000000000000000 [ 662.119742][T23100] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 662.119754][T23100] R13: 00007fc38dc26038 R14: 00007fc38dc25fa0 R15: 00007ffc625f5628 [ 662.119789][T23100] [ 662.350577][T23095] veth1_macvtap: left promiscuous mode [ 662.370435][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4123'. [ 662.371832][T23105] x_tables: duplicate underflow at hook 1 [ 662.410004][T23107] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4122'. [ 662.432905][T23100] netlink: 'syz.5.4123': attribute type 1 has an invalid length. [ 662.441866][T23100] netlink: 'syz.5.4123': attribute type 2 has an invalid length. [ 662.566373][T23109] openvswitch: netlink: Actions may not be safe on all matching packets [ 662.601662][T23109] netlink: 'syz.5.4126': attribute type 32 has an invalid length. [ 662.696387][T23111] syzkaller0: entered promiscuous mode [ 662.709351][T23111] syzkaller0: entered allmulticast mode [ 663.168265][ T5639] Bluetooth: hci0: command tx timeout [ 666.170162][ T5638] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 666.223799][ T5638] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 666.247604][ T5638] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 666.264093][ T5638] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 666.278573][ T5638] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 666.457639][T23122] tc_dump_action: action bad kind [ 666.466412][T23133] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4131'. [ 666.494041][T23133] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4131'. [ 666.576554][T23143] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4133'. [ 666.724047][T23147] netlink: 'syz.5.4135': attribute type 11 has an invalid length. [ 666.815790][T23158] netlink: 'syz.6.4136': attribute type 49 has an invalid length. [ 666.963410][T23161] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 667.142276][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880526b9400: rx timeout, send abort [ 667.214708][T23172] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4140'. [ 667.240344][T23172] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4140'. [ 667.642483][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880526bb800: rx timeout, send abort [ 667.653822][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880526b9400: abort rx timeout. Force session deactivation [ 667.776127][T23185] lo speed is unknown, defaulting to 1000 [ 667.831552][T23185] lo speed is unknown, defaulting to 1000 [ 667.853342][T23185] lo speed is unknown, defaulting to 1000 [ 667.943074][T23185] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 668.011960][T23185] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 668.054963][T23185] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 668.120256][T23185] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 668.150929][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880526bb800: abort rx timeout. Force session deactivation [ 668.165996][T23206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4146'. [ 668.280262][T23193] syzkaller0: entered promiscuous mode [ 668.286043][T23193] syzkaller0: entered allmulticast mode [ 668.343518][T23185] lo speed is unknown, defaulting to 1000 [ 668.429926][ T5638] Bluetooth: hci8: command tx timeout [ 670.517409][ T5638] Bluetooth: hci8: command tx timeout [ 671.663833][T23185] lo speed is unknown, defaulting to 1000 [ 671.731973][T23185] lo speed is unknown, defaulting to 1000 [ 671.766087][T23137] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.774495][T23137] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.795011][T23137] bridge_slave_0: entered allmulticast mode [ 671.827700][T23137] bridge_slave_0: entered promiscuous mode [ 671.859532][T23185] lo speed is unknown, defaulting to 1000 [ 671.859960][T23137] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.891373][T23227] sctp: [Deprecated]: syz.7.4151 (pid 23227) Use of int in max_burst socket option. [ 671.891373][T23227] Use struct sctp_assoc_value instead [ 671.913442][T23137] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.929617][T23137] bridge_slave_1: entered allmulticast mode [ 671.949441][T23137] bridge_slave_1: entered promiscuous mode [ 671.959630][T23185] lo speed is unknown, defaulting to 1000 [ 671.995746][T23232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.000095][T23185] lo speed is unknown, defaulting to 1000 [ 672.019953][T23232] netlink: 'syz.4.4153': attribute type 13 has an invalid length. [ 672.029899][T23137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.039842][T23185] lo speed is unknown, defaulting to 1000 [ 672.040512][T23228] tipc: Enabled bearer , priority 0 [ 672.190313][T23232] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.197842][T23232] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.599154][ T5638] Bluetooth: hci8: command tx timeout [ 672.886259][T23137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.900270][T23185] lo speed is unknown, defaulting to 1000 [ 672.924368][T23227] syzkaller0: entered promiscuous mode [ 672.930278][T23227] syzkaller0: entered allmulticast mode [ 672.937570][T23228] syzkaller0: entered promiscuous mode [ 672.943455][T23228] syzkaller0: entered allmulticast mode [ 672.954852][T23230] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 673.006688][T23243] tipc: Resetting bearer [ 673.062593][T23226] tipc: Resetting bearer [ 673.101028][T23226] tipc: Disabling bearer [ 673.118241][ T3333] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.146482][ T3333] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 47053 - 0 [ 673.175914][ T3333] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.196505][ T3333] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 47053 - 0 [ 673.208126][T23185] lo speed is unknown, defaulting to 1000 [ 673.268497][ T6349] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.292049][T23252] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 673.294332][ T6349] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 47053 - 0 [ 673.330610][ T6349] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.349104][ T6349] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 47053 - 0 [ 673.358270][T23185] lo speed is unknown, defaulting to 1000 [ 673.368530][T23137] team0: Port device team_slave_0 added [ 673.394014][T23137] team0: Port device team_slave_1 added [ 673.489134][T23258] x_tables: unsorted entry at hook 1 [ 673.526776][T23137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.542864][T23137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.580002][T23137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.603083][T23262] syzkaller0: entered promiscuous mode [ 673.610505][T23262] syzkaller0: entered allmulticast mode [ 673.619513][T23137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.629767][T23137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.662745][T23264] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 673.669747][T23137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.697039][T23265] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4159'. [ 674.094077][T23267] syzkaller0: entered promiscuous mode [ 674.100452][T23267] syzkaller0: entered allmulticast mode [ 674.123993][T23137] hsr_slave_0: entered promiscuous mode [ 674.145935][T23137] hsr_slave_1: entered promiscuous mode [ 674.152517][T23277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4164'. [ 674.163310][T23137] debugfs: 'hsr0' already exists in 'hsr' [ 674.170602][T23137] Cannot create hsr debugfs directory [ 674.177584][T23274] netlink: 'syz.6.4163': attribute type 12 has an invalid length. [ 674.187476][T23274] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4163'. [ 674.414753][ T30] audit: type=1804 audit(1784386445.050:7): pid=23284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4165" name="/newroot/50/cgroup.controllers" dev="tmpfs" ino=274 res=1 errno=0 [ 674.466292][T23289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4163'. [ 674.468965][ T30] audit: type=1800 audit(1784386445.070:8): pid=23284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4165" name="cgroup.controllers" dev="tmpfs" ino=274 res=0 errno=0 [ 674.669096][ T5638] Bluetooth: hci8: command tx timeout [ 677.638534][T23274] tipc: Enabled bearer , priority 0 [ 677.646477][T23276] syzkaller0: entered promiscuous mode [ 677.652375][T23276] syzkaller0: entered allmulticast mode [ 677.684501][T23283] tipc: Resetting bearer [ 677.886945][T23301] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4168'. [ 677.913837][T23292] tipc: Resetting bearer [ 677.916522][T23307] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4170'. [ 677.970565][T23292] tipc: Disabling bearer [ 678.124567][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4173'. [ 678.658333][T23329] bond8: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 678.675112][T23329] bond8 (unregistering): Released all slaves [ 678.738104][T23338] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4180'. [ 678.773776][T23338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4180'. [ 678.788304][T23338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4180'. [ 678.813329][T23338] netlink: 'syz.4.4180': attribute type 2 has an invalid length. [ 678.937132][T23341] syzkaller0: entered promiscuous mode [ 678.943385][T23341] syzkaller0: entered allmulticast mode [ 679.016761][T23338] : entered promiscuous mode [ 679.325351][T23363] netlink: 'syz.4.4186': attribute type 1 has an invalid length. [ 679.480580][T23369] netdevsim netdevsim4: Direct firmware load for á failed with error -2 [ 679.489335][T23369] netdevsim netdevsim4: Falling back to sysfs fallback for: á [ 679.953630][T23381] netlink: 496 bytes leftover after parsing attributes in process `syz.5.4188'. [ 682.694461][T23363] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 682.796790][T23137] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 682.851684][T23137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.861392][T23137] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 682.874085][T23137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.906352][T23137] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 682.937131][T23137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.955189][T23137] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 682.984414][T23137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.069956][T23384] syzkaller0: entered promiscuous mode [ 683.087965][T23384] syzkaller0: entered allmulticast mode [ 683.521987][T23410] bond8: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 683.544010][T23410] bond8: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 683.554071][T23410] bond8: entered allmulticast mode [ 683.563842][T23414] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 683.570394][T23137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.612095][T23137] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.628802][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.636086][ T7328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.700851][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.708181][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.824880][T23427] xt_hl: Unknown TTL match mode: 237 [ 683.953608][T23431] syzkaller0: entered promiscuous mode [ 683.970994][T23431] syzkaller0: entered allmulticast mode [ 684.146474][T23438] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4200'. [ 684.917269][T23458] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 684.942911][T23458] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 685.957469][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.966897][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.990143][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.231512][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 688.003216][ T7328] vlan5: left allmulticast mode [ 688.008262][ T7328] vlan5: left promiscuous mode [ 688.013722][ T7328] geneve0: left promiscuous mode [ 688.026877][ T7328] bridge0: port 3(vlan5) entered disabled state [ 688.061939][ T7328] bridge_slave_1: left promiscuous mode [ 688.084494][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.127305][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4211'. [ 688.137814][ T7328] bridge_slave_0: left promiscuous mode [ 688.139671][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4211'. [ 688.163368][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.250596][ T7328] pim6reg: left allmulticast mode [ 688.741647][ T7328] bond1 (unregistering): (slave gre1): Releasing backup interface [ 688.861321][ T7328] bond11 (unregistering): (slave geneve2): Releasing active interface [ 689.009678][ T7328] bond4 (unregistering): (slave bridge3): Releasing active interface [ 689.171958][ T7328] bond14 (unregistering): (slave bridge12): Releasing backup interface [ 689.190854][ T7328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.206980][ T7328] bond_slave_0: left promiscuous mode [ 689.213945][ T7328] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 689.222900][ T7328] @0Ù: left promiscuous mode [ 689.230569][ T7328] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 689.240267][ T7328] bond0 (unregistering): Released all slaves [ 689.255725][ T7328] bond1 (unregistering): Released all slaves [ 689.286854][ T7328] bond2 (unregistering): (slave veth3): Releasing active interface [ 689.297234][ T7328] bond2 (unregistering): Released all slaves [ 689.321866][ T7328] bond3 (unregistering): Released all slaves [ 689.378742][ T7328] bond4 (unregistering): Released all slaves [ 689.412045][ T7328] bond5 (unregistering): Released all slaves [ 689.434813][ T7328] bond6 (unregistering): Released all slaves [ 689.466201][ T7328] bond7 (unregistering): (slave veth7): Releasing active interface [ 689.485267][ T7328] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 689.504539][ T7328] bond7 (unregistering): Released all slaves [ 689.526509][ T7328] bond8 (unregistering): Released all slaves [ 689.549388][ T7328] bond9 (unregistering): Released all slaves [ 689.577024][ T7328] bond10 (unregistering): Released all slaves [ 689.607406][ T7328] bond11 (unregistering): Released all slaves [ 689.628325][ T7328] bond12 (unregistering): Released all slaves [ 689.644896][ T7328] bond13 (unregistering): Released all slaves [ 689.660783][ T7328] bond14 (unregistering): Released all slaves [ 689.679463][ T7328] bond15 (unregistering): Released all slaves [ 689.698245][ T7328] bond16 (unregistering): Released all slaves [ 689.724551][ T7328] bond17 (unregistering): Released all slaves [ 689.745078][T23488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.804275][T23496] macsec1: entered promiscuous mode [ 690.092259][T23502] syzkaller0: entered promiscuous mode [ 690.114767][T23502] syzkaller0: entered allmulticast mode [ 690.167602][T23502] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4218'. [ 690.178463][ T7328] tipc: Left network mode [ 690.212117][T23507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4219'. [ 690.310732][ T7328] IPVS: stopping master sync thread 14866 ... [ 690.406710][T23509] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4221'. [ 690.520628][T23520] xt_hashlimit: max too large, truncated to 1048576 [ 690.937465][T23518] syzkaller0: entered promiscuous mode [ 690.943236][T23518] syzkaller0: entered allmulticast mode [ 691.020981][T23532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4226'. [ 694.491117][T23532] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4226'. [ 694.514202][T23544] bridge7: entered promiscuous mode [ 694.527843][T23544] bridge7: entered allmulticast mode [ 694.538427][T23544] team0: Port device bridge7 added [ 694.682048][T23542] lo speed is unknown, defaulting to 1000 [ 694.764108][T23555] syzkaller1: entered promiscuous mode [ 694.801094][T23555] syzkaller1: entered allmulticast mode [ 694.842985][T23561] netlink: 'syz.6.4232': attribute type 1 has an invalid length. [ 695.086509][T23555] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4231'. [ 695.281570][T23571] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4231'. [ 695.542411][ T7328] hsr_slave_0: left promiscuous mode [ 695.561785][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.734829][T23594] IPv6: addrconf: prefix option has invalid lifetime [ 695.810218][ T7328] team0 (unregistering): Port device batadv1 removed [ 696.303336][ T7328] team0 (unregistering): Port device team_slave_1 removed [ 696.384760][ T7328] team0 (unregistering): Port device team_slave_0 removed [ 696.824446][T23137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.197718][T23611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4241'. [ 697.201124][T23607] syzkaller0: entered promiscuous mode [ 697.227027][T23607] syzkaller0: entered allmulticast mode [ 697.286665][T23617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4239'. [ 697.571260][T23626] FAULT_INJECTION: forcing a failure. [ 697.571260][T23626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.599211][T23626] CPU: 0 UID: 0 PID: 23626 Comm: syz.5.4242 Not tainted syzkaller #0 PREEMPT(full) [ 697.599244][T23626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 697.599256][T23626] Call Trace: [ 697.599264][T23626] [ 697.599273][T23626] dump_stack_lvl+0xe8/0x150 [ 697.599310][T23626] should_fail_ex+0x40c/0x560 [ 697.599350][T23626] _copy_to_user+0x31/0xb0 [ 697.599383][T23626] simple_read_from_buffer+0xe1/0x170 [ 697.599415][T23626] proc_fail_nth_read+0x1bb/0x230 [ 697.599447][T23626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 697.599479][T23626] ? rw_verify_area+0x24a/0x4c0 [ 697.599509][T23626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 697.599534][T23626] vfs_read+0x213/0xa80 [ 697.599568][T23626] ? __pfx___mutex_lock+0x10/0x10 [ 697.599660][T23626] ? __pfx_vfs_read+0x10/0x10 [ 697.599692][T23626] ? __fget_files+0x2a/0x420 [ 697.599722][T23626] ? __fget_files+0x3a2/0x420 [ 697.599749][T23626] ? __fget_files+0x2a/0x420 [ 697.599781][T23626] ksys_read+0x150/0x270 [ 697.599813][T23626] ? __pfx_ksys_read+0x10/0x10 [ 697.599850][T23626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.599872][T23626] do_syscall_64+0x174/0x580 [ 697.599899][T23626] ? trace_irq_disable+0x3b/0x140 [ 697.599924][T23626] ? clear_bhb_loop+0x40/0x90 [ 697.599949][T23626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.599968][T23626] RIP: 0033:0x7fc38d95e6ce [ 697.599987][T23626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 697.600004][T23626] RSP: 002b:00007fc38e8ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 697.600026][T23626] RAX: ffffffffffffffda RBX: 00007fc38e8ec6c0 RCX: 00007fc38d95e6ce [ 697.600041][T23626] RDX: 000000000000000f RSI: 00007fc38e8ec0a0 RDI: 0000000000000004 [ 697.600054][T23626] RBP: 00007fc38e8ec090 R08: 0000000000000000 R09: 0000000000000000 [ 697.600066][T23626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.600078][T23626] R13: 00007fc38dc26038 R14: 00007fc38dc25fa0 R15: 00007ffc625f5628 [ 697.600110][T23626] [ 698.669194][T23662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4248'. [ 701.450292][T23617] ip6gre2: entered promiscuous mode [ 701.455778][T23617] ip6gre2: entered allmulticast mode [ 701.471579][T23613] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 701.485935][T23613] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 701.509273][T23613] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 701.615070][T23662] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 701.910592][ T7328] IPVS: stop unused estimator thread 0... [ 701.931668][T23137] veth0_vlan: entered promiscuous mode [ 701.953067][T23678] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 702.015030][T23137] veth1_vlan: entered promiscuous mode [ 702.184928][T23137] veth0_macvtap: entered promiscuous mode [ 702.250740][T23137] veth1_macvtap: entered promiscuous mode [ 702.328429][T23137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.370307][T23137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.404431][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4257'. [ 702.414420][ T6366] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.444610][ T7328] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.475628][ T7328] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.517703][ T7328] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.855239][T23701] syzkaller0: entered promiscuous mode [ 702.864997][T23701] syzkaller0: entered allmulticast mode [ 702.891371][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.919519][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.292542][T23729] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4266'. [ 706.665455][ T6366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.702026][ T6366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.874455][T23742] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4269'. [ 707.043467][T23750] openvswitch: netlink: IP tunnel TTL not specified. [ 707.112230][T23747] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4269'. [ 707.247351][T23750] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.255366][T23750] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.335902][T23769] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 707.496234][T23750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.525773][T23750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.781299][ T1050] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.809188][ T1050] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.833088][ T1050] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.859571][T23782] syzkaller0: entered promiscuous mode [ 707.889715][T23782] syzkaller0: entered allmulticast mode [ 707.905763][ T1050] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.175851][T23799] bridge2: entered promiscuous mode [ 708.190384][T23799] bridge2: entered allmulticast mode [ 708.216921][T23799] team0: Port device bridge2 added [ 708.311777][ T8867] IPVS: starting estimator thread 0... [ 708.356321][T23813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.429427][T23810] IPVS: using max 24 ests per chain, 57600 per kthread [ 708.447557][T23790] bridge3: entered promiscuous mode [ 708.470248][T23790] bridge3: entered allmulticast mode [ 708.507049][T23790] team0: Port device bridge3 added [ 708.525895][T23814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.606092][T23817] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 708.783949][T23829] netlink: 244 bytes leftover after parsing attributes in process `syz.7.4294'. [ 708.873249][T23833] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4296'. [ 709.147668][T23833] syzkaller0: entered promiscuous mode [ 709.171361][T23833] syzkaller0: entered allmulticast mode [ 709.190692][T23831] lo speed is unknown, defaulting to 1000 [ 709.414296][T23858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4304'. [ 712.820997][T23856] 8021q: VLANs not supported on wg1 [ 713.287185][T23884] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4309'. [ 714.528753][T23937] syzkaller0: entered promiscuous mode [ 714.559593][T23937] syzkaller0: entered allmulticast mode [ 715.133023][T23950] netlink: 'syz.8.4319': attribute type 3 has an invalid length. [ 715.174310][T23970] netlink: 'syz.7.4324': attribute type 1 has an invalid length. [ 715.216341][T23972] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4324'. [ 718.121533][T23945] lo speed is unknown, defaulting to 1000 [ 718.138669][T23970] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 718.930736][T23996] tipc: Started in network mode [ 718.944926][T23996] tipc: Node identity , cluster identity 4711 [ 718.957686][T23996] tipc: Failed to obtain node identity [ 718.969868][T23996] tipc: Enabling of bearer rejected, failed to enable media [ 719.204238][T24015] netlink: 'syz.4.4332': attribute type 1 has an invalid length. [ 719.480461][T24029] veth0: entered promiscuous mode [ 719.514095][T24026] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 719.576822][T24029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4336'. [ 719.728227][T24029] bond0: (slave bond_slave_1): Releasing backup interface [ 719.813591][T24025] veth0: left promiscuous mode [ 720.008596][T24051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4343'. [ 720.024575][T24051] netlink: 'syz.7.4343': attribute type 10 has an invalid length. [ 720.033536][T24051] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4343'. [ 720.060580][T24051] geneve3: entered promiscuous mode [ 720.066773][T24051] geneve3: entered allmulticast mode [ 720.133172][T24053] lo speed is unknown, defaulting to 1000 [ 720.235448][T24057] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4344'. [ 720.384455][T24057] veth5: entered allmulticast mode [ 720.621260][T24062] netlink: 'syz.8.4346': attribute type 1 has an invalid length. [ 720.822995][T24067] gre0: entered promiscuous mode [ 720.828042][T24067] gre0: entered allmulticast mode [ 720.942505][T24071] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4349'. [ 720.975735][T24072] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4350'. [ 721.017563][T24072] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4350'. [ 721.223166][T24080] veth3: entered promiscuous mode [ 721.245896][T24080] veth3: entered allmulticast mode [ 721.257039][T24080] team0: Device veth3 is up. Set it down before adding it as a team port [ 721.305248][T24090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4355'. [ 721.337632][T24090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4355'. [ 721.525697][T24087] syzkaller0: entered promiscuous mode [ 721.531655][T24087] syzkaller0: entered allmulticast mode [ 722.251219][T24126] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4363'. [ 725.173812][T24127] lo speed is unknown, defaulting to 1000 [ 725.328136][T24134] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4365'. [ 725.911230][T24165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4372'. [ 726.056560][T24173] No such timeout policy "syz1" [ 726.191234][T24177] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 726.222138][T24172] netlink: 'syz.7.4375': attribute type 12 has an invalid length. [ 726.422369][T24167] netlink: 'syz.5.4374': attribute type 12 has an invalid length. [ 726.582472][T24182] netlink: 'syz.8.4377': attribute type 28 has an invalid length. [ 726.723616][T24187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4380'. [ 726.818122][T24185] lo speed is unknown, defaulting to 1000 [ 727.006094][T24201] netlink: 'syz.7.4383': attribute type 10 has an invalid length. [ 727.042216][T24207] netlink: 'syz.7.4383': attribute type 10 has an invalid length. [ 727.421603][T24219] lo speed is unknown, defaulting to 1000 [ 727.537662][T24222] lo speed is unknown, defaulting to 1000 [ 728.076251][T24239] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4390'. [ 728.598255][T24248] tipc: Started in network mode [ 728.610957][T24248] tipc: Node identity 3ec26d68072e, cluster identity 4711 [ 728.625623][T24248] tipc: Enabled bearer , priority 0 [ 728.696906][T24248] syzkaller0: entered promiscuous mode [ 728.725016][T24248] syzkaller0: entered allmulticast mode [ 728.738785][T24234] lo speed is unknown, defaulting to 1000 [ 728.747775][T24250] tipc: Resetting bearer [ 728.792360][T24248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4394'. [ 728.806517][T24248] netlink: 'syz.8.4394': attribute type 10 has an invalid length. [ 728.819066][T24248] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4394'. [ 728.895629][T24248] geneve2: entered promiscuous mode [ 728.904010][T24248] geneve2: entered allmulticast mode [ 728.925028][T24238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4392'. [ 729.037211][T24246] tipc: Resetting bearer [ 729.092099][T24246] tipc: Disabling bearer [ 729.476065][T24276] vlan0: entered promiscuous mode [ 729.630922][T24279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4401'. [ 729.774824][T24286] lo speed is unknown, defaulting to 1000 [ 730.304828][T24315] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4407'. [ 730.548103][T24281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.557295][T24327] geneve2: entered promiscuous mode [ 730.568558][ T7329] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.598292][ T7329] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.610363][ T7329] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.622188][ T7329] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.861666][T24335] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4414'. [ 730.884265][T24336] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4413'. [ 731.041638][T24342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4415'. [ 731.109819][T24342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4415'. [ 731.115638][T24347] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4414'. [ 731.423851][T24355] veth3: entered allmulticast mode [ 731.543700][T24359] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4419'. [ 731.632309][T24364] netlink: 'syz.6.4421': attribute type 1 has an invalid length. [ 731.729970][T24362] IPVS: length: 139 != 8 [ 732.075061][T24383] tipc: Enabling of bearer rejected, failed to enable media [ 732.099988][T24383] xt_hashlimit: max too large, truncated to 1048576 [ 732.107097][T24383] xt_ecn: cannot match TCP bits for non-tcp packets [ 732.464417][ T7329] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 732.607641][T24410] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4431'. [ 733.168148][T24433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4439'. [ 733.199812][T24433] IPv6: NLM_F_CREATE should be specified when creating new route [ 733.276313][T24435] netlink: 'syz.7.4440': attribute type 1 has an invalid length. [ 733.309435][ T31] INFO: task syz.0.3531:20813 blocked for more than 143 seconds. [ 733.317570][ T31] Not tainted syzkaller #0 [ 733.335690][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 733.361445][ T31] task:syz.0.3531 state:D stack:25864 pid:20813 tgid:20812 ppid:18590 task_flags:0x400140 flags:0x00080002 [ 733.379223][ T31] Call Trace: [ 733.382802][ T31] [ 733.383733][T24435] bond1: entered promiscuous mode [ 733.386000][ T31] __schedule+0x17d9/0x56c0 [ 733.394147][T24435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 733.396026][ T31] ? __lock_acquire+0x683/0x2cf0 [ 733.407462][ T31] ? __pfx___schedule+0x10/0x10 [ 733.412737][ T31] ? schedule+0x90/0x2b0 [ 733.417016][ T31] schedule+0x164/0x2b0 [ 733.421272][ T31] schedule_preempt_disabled+0x13/0x30 [ 733.426766][ T31] __mutex_lock+0x7bf/0x1550 [ 733.432285][ T31] ? __mutex_lock+0x5d4/0x1550 [ 733.437115][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 733.443777][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 733.449064][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 733.454620][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 733.459936][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 733.466055][ T31] ? kasan_save_track+0x3e/0x80 [ 733.471352][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 733.476198][ T31] ? __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 733.482928][ T31] ? __alloc_skb+0x2bd/0x7a0 [ 733.487590][ T31] ? netlink_dump+0x1e7/0xee0 [ 733.492616][ T31] ? __netlink_dump_start+0x589/0x7b0 [ 733.498133][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 733.504397][ T31] ? genl_rcv_msg+0x5e1/0x7a0 [ 733.509280][ T31] ? genl_rcv+0x28/0x40 [ 733.513487][ T31] ? netlink_unicast+0x7bb/0x940 [ 733.518463][ T31] ? netlink_sendmsg+0x813/0xb40 [ 733.523968][ T31] ? sock_sendmsg_nosec+0x13a/0x180 [ 733.529696][ T31] ? ____sys_sendmsg+0x54e/0x850 [ 733.535194][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 733.540946][ T31] ? __x64_sys_sendmsg+0x1b1/0x290 [ 733.547178][ T31] ? do_syscall_64+0x174/0x580 [ 733.552207][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.558443][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 733.565389][ T31] ? rcu_is_watching+0x15/0xb0 [ 733.570362][ T31] ? trace_kmalloc+0x2a/0xf0 [ 733.575034][ T31] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 733.581732][ T31] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 733.587844][ T31] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 733.594953][ T31] ? netlink_dump+0x1e7/0xee0 [ 733.599780][ T31] ? netlink_dump+0x1e7/0xee0 [ 733.604515][ T31] genl_dumpit+0x10b/0x1b0 [ 733.609106][ T31] netlink_dump+0x711/0xee0 [ 733.613668][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 733.618723][ T31] ? genl_start+0x497/0x6d0 [ 733.623600][ T31] __netlink_dump_start+0x589/0x7b0 [ 733.628838][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 733.635652][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 733.642346][ T31] ? genl_get_cmd+0x523/0x960 [ 733.647100][ T31] ? __pfx_genl_start+0x10/0x10 [ 733.652574][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 733.657538][ T31] ? __pfx_genl_done+0x10/0x10 [ 733.662422][ T31] ? __lock_acquire+0x683/0x2cf0 [ 733.667438][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 733.672264][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.677318][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 733.684831][ T31] netlink_rcv_skb+0x226/0x4a0 [ 733.689842][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.694915][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 733.700357][ T31] ? down_read+0x2be/0x330 [ 733.704818][ T31] genl_rcv+0x28/0x40 [ 733.708820][ T31] netlink_unicast+0x7bb/0x940 [ 733.715710][ T31] netlink_sendmsg+0x813/0xb40 [ 733.720629][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.725951][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 733.731083][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.736898][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 733.742292][ T31] ____sys_sendmsg+0x54e/0x850 [ 733.747103][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.752626][ T31] ? import_iovec+0x73/0xa0 [ 733.757260][ T31] ___sys_sendmsg+0x2a5/0x360 [ 733.762346][ T31] ? __lock_acquire+0x683/0x2cf0 [ 733.767353][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.773261][ T31] ? futex_wake+0x51b/0x5f0 [ 733.777864][ T31] ? __fget_files+0x2a/0x420 [ 733.782789][ T31] ? __fget_files+0x3a2/0x420 [ 733.787541][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 733.793251][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.798793][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.805409][ T31] do_syscall_64+0x174/0x580 [ 733.810143][ T31] ? clear_bhb_loop+0x40/0x90 [ 733.814862][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.820845][ T31] RIP: 0033:0x7f5a6399de99 [ 733.825292][ T31] RSP: 002b:00007f5a648d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.834183][ T31] RAX: ffffffffffffffda RBX: 00007f5a63c25fa0 RCX: 00007f5a6399de99 [ 733.842735][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 733.850927][ T31] RBP: 00007f5a63a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 733.859271][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.867354][ T31] R13: 00007f5a63c26038 R14: 00007f5a63c25fa0 R15: 00007ffd92658258 [ 733.876131][ T31] [ 733.879334][ T31] [ 733.879334][ T31] Showing all locks held in the system: [ 733.887087][ T31] 1 lock held by khungtaskd/31: [ 733.919281][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 733.932874][ T31] 2 locks held by kworker/u8:11/3303: [ 733.938814][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 733.952872][ T31] #1: ffffc9000d18fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 733.966729][ T31] 2 locks held by getty/5382: [ 733.971877][ T31] #0: ffff8880333010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 733.982655][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 733.993309][ T31] 3 locks held by kworker/u9:6/5639: [ 733.998817][ T31] #0: ffff888056d2c140 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 734.010739][ T31] #1: ffffc900043c7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 734.033682][ T31] #2: ffff888026a00ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 734.044928][ T31] 5 locks held by kworker/u8:24/6369: [ 734.050482][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 734.060569][ T31] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 734.069867][ T31] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 734.079729][ T31] #3: ffff8880b86281d8 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x8c/0x3e0 [ 734.090554][ T31] #4: ffff88807e056790 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x14d0 [ 734.100148][ T31] 3 locks held by kworker/u8:27/7329: [ 734.105544][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 734.117735][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 734.124168][ T31] #1: ffffc90003557c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 734.135557][ T31] #2: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 734.146342][ T31] 3 locks held by kworker/0:16/8898: [ 734.151832][ T31] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 734.163270][ T31] #1: ffffc90002f47c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 734.173583][ T31] #2: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 734.183133][ T31] 2 locks held by syz.2.3114/18832: [ 734.188348][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 734.197108][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 734.207723][ T31] 3 locks held by syz.0.3531/20813: [ 734.213087][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 734.221766][ T31] #1: ffff888021ea26e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 734.232417][ T31] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 734.242996][ T31] 3 locks held by syz.3.3745/21591: [ 734.248619][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 734.257385][ T31] #1: ffff88807c00a6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 734.267959][ T31] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 734.278672][ T31] 2 locks held by syz.1.4064/22854: [ 734.284233][ T31] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 734.292704][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 734.303630][ T31] 2 locks held by syz.7.4440/24435: [ 734.308847][ T31] #0: ffff888077d076e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 734.319806][ T31] #1: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 734.328716][ T31] 3 locks held by syz.7.4440/24437: [ 734.334123][ T31] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0x120/0x990 [ 734.344055][ T31] #1: ffffffff9002fc40 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20 [ 734.359683][ T31] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 734.371069][ T31] 2 locks held by syz.7.4440/24438: [ 734.376315][ T31] #0: ffffffff905912d8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 734.385892][ T31] #1: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 734.395214][ T31] [ 734.401562][ T31] ============================================= [ 734.401562][ T31] [ 734.410226][ T31] NMI backtrace for cpu 1 [ 734.410248][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 734.410271][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 734.410283][ T31] Call Trace: [ 734.410291][ T31] [ 734.410299][ T31] dump_stack_lvl+0xe8/0x150 [ 734.410338][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 734.410465][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 734.410498][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 734.410523][ T31] sys_info+0x135/0x170 [ 734.410539][ T31] watchdog+0xfd7/0x1030 [ 734.410571][ T31] ? watchdog+0x1c7/0x1030 [ 734.410595][ T31] kthread+0x388/0x470 [ 734.410617][ T31] ? __pfx_watchdog+0x10/0x10 [ 734.410635][ T31] ? __pfx_kthread+0x10/0x10 [ 734.410658][ T31] ret_from_fork+0x514/0xb70 [ 734.410697][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 734.410720][ T31] ? __switch_to+0xc89/0x1420 [ 734.410741][ T31] ? __pfx_kthread+0x10/0x10 [ 734.410763][ T31] ret_from_fork_asm+0x1a/0x30 [ 734.410790][ T31] [ 734.410800][ T31] Sending NMI from CPU 1 to CPUs 0: [ 734.525370][ C0] NMI backtrace for cpu 0 [ 734.525394][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 734.525413][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 734.525423][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 734.525453][ C0] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 734.525467][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 734.525483][ C0] RAX: 00000000001e2911 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 734.525496][ C0] RDX: 0000000000000001 RSI: ffffffff8e22ba06 RDI: ffffffff8c4bd380 [ 734.525507][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 734.525519][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 734.525530][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 734.525542][ C0] FS: 0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 734.525556][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 734.525568][ C0] CR2: 00007f5cd21ed2f8 CR3: 0000000074634000 CR4: 00000000003526f0 [ 734.525584][ C0] Call Trace: [ 734.525593][ C0] [ 734.525599][ C0] default_idle+0x9/0x20 [ 734.525617][ C0] default_idle_call+0x72/0xb0 [ 734.525634][ C0] do_idle+0x2e0/0x540 [ 734.525657][ C0] ? __pfx_do_idle+0x10/0x10 [ 734.525681][ C0] cpu_startup_entry+0x43/0x60 [ 734.525701][ C0] rest_init+0x2de/0x300 [ 734.525719][ C0] start_kernel+0x392/0x3e0 [ 734.525823][ C0] x86_64_start_reservations+0x24/0x30 [ 734.525884][ C0] x86_64_start_kernel+0x137/0x1b0 [ 734.525901][ C0] common_startup_64+0x13e/0x157 [ 734.525927][ C0] [ 734.704440][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 734.711327][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 734.720517][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 734.730691][ T31] Call Trace: [ 734.733977][ T31] [ 734.736932][ T31] vpanic+0x56c/0xa60 [ 734.740926][ T31] ? __pfx___schedule+0x10/0x10 [ 734.745791][ T31] ? __pfx_vpanic+0x10/0x10 [ 734.750312][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 734.756486][ T31] panic+0xc5/0xd0 [ 734.760228][ T31] ? __pfx_panic+0x10/0x10 [ 734.764688][ T31] ? preempt_schedule_common+0x82/0xd0 [ 734.770157][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 734.775557][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 734.781712][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 734.787866][ T31] watchdog+0x1030/0x1030 [ 734.792216][ T31] ? watchdog+0x1c7/0x1030 [ 734.796635][ T31] kthread+0x388/0x470 [ 734.800706][ T31] ? __pfx_watchdog+0x10/0x10 [ 734.805396][ T31] ? __pfx_kthread+0x10/0x10 [ 734.809991][ T31] ret_from_fork+0x514/0xb70 [ 734.814603][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 734.819727][ T31] ? __switch_to+0xc89/0x1420 [ 734.824417][ T31] ? __pfx_kthread+0x10/0x10 [ 734.829019][ T31] ret_from_fork_asm+0x1a/0x30 [ 734.833801][ T31] [ 734.837098][ T31] Kernel Offset: disabled [ 734.841433][ T31] Rebooting in 86400 seconds..