last executing test programs: 3.762987926s ago: executing program 4 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) 2.815952224s ago: executing program 4 (id=718): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="aea922544293df0c5735912d608bc119b2d5a3763bfbcae6f39a4bf28b4a113158ce32408e6e21e977b16372736aa84bed53fa95dc94786a60acc162f91b7e5a8a", 0xffffffffffffff3a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, 0x0, &(0x7f0000000600)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x12102) shutdown(r1, 0x1) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 1.851004835s ago: executing program 4 (id=735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf2501"], 0x1c}}, 0x20004080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000001b000301000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010008a"], 0xd4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x444c}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0x55690764}]}, 0x50}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1000, 0x800, 0x80000000, 0x3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@dellink={0x68, 0x11, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r7) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, 0x140b, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x8000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf4, r8, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r11, 0x5452, &(0x7f0000000180)=0x401) sendmsg$inet(r11, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000240)="ee9731ba7a1ca5efe4892f85d97c047a9f95cc2c5fa1400f64fa1e6fceb67a23e13f2568c8bce50a839670f2139c1ac9c37382e39ab4a37774b8ce317f81fdf6cdbcc35ca9e9fd7259f682094b27b97633196dff11ac75343f2b105cdbbe4093ff5fef5bdfbd4d309aaeee200da001b3dd5db69682311083ea199383de5cb20674d916deb11158d91cfc69929d6c92acea753e693fad8297754e3dc3dfb858083e7e0b9187605302296d700f67357d2fa5e6e7e4", 0xb4}], 0x1, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @loopback}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x34, 0x74, 0x3, 0x4, [{@empty, 0xff}, {@remote, 0xf2e}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6a0}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x3fff80}, {@multicast2, 0xe9d}]}]}}}, @ip_retopts={{0xec, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xa2, 0x0, 0x5, [0x6, 0x4]}, @timestamp={0x44, 0x1c, 0xae, 0x0, 0xf, [0x1200, 0x9, 0x0, 0xc6a754c8, 0x1, 0xfff]}, @cipso={0x86, 0x46, 0x2, [{0x2, 0xb, "aad0ddcfe237ac6c5e"}, {0x1, 0x2}, {0x7, 0x10, "6065d4c0d1d40044d22e747dcaae"}, {0x1, 0x6, "481e1046"}, {0x0, 0x6, "7501d1d6"}, {0x2, 0x4, "ea34"}, {0x0, 0x4, "eb80"}, {0x0, 0xf, "7c3718e32e0de07ada047df7f2"}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x90, 0x0, 0x3, [0x4, 0xd6f6]}, @timestamp_addr={0x44, 0x4, 0x6f}, @timestamp_addr={0x44, 0x14, 0x4f, 0x1, 0x2, [{@multicast2, 0xe3}, {@multicast1, 0x9}]}, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x1, 0x7, "13544ee82b"}, {0x0, 0x12, "44f78b54d8de5ed7cf9edad04ba2c8a6"}, {0x7, 0x8, "80c693f0ad03"}, {0x1, 0x11, "8141857060ef41f798fd2393c009af"}, {0x2, 0x4, "d9d5"}, {0x0, 0x5, "a993e8"}]}, @end]}}}], 0x158}, 0x800) listen(r11, 0x0) ioctl$sock_SIOCSPGRP(r11, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) 1.805798942s ago: executing program 3 (id=736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0xa}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e21, 0x8, @remote, 0xa}}, 0x1, 0x5, 0x3, 0x2, 0x24, 0x5, 0x2}, &(0x7f0000000540)=0x9c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = socket$inet6(0x10, 0x2, 0x4) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x68}}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r10, 0x303, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x24, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4080) sendmmsg$alg(r7, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="ed60af8a59c5", 0x6}], 0x1, 0x0, 0x0, 0x20000081}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20088800}], 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000200)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xd8, 0x1403, 0x200, 0x70bd2b, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.56528059s ago: executing program 2 (id=741): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000380)=@tipc=@id={0x2d, 0x3, 0x3, {0x4e24, 0x3}}, 0x80, 0x0}, 0x850) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x5, 0xe2, 0x414f291a, 0x2, @local, @loopback, 0x7800, 0x10, 0x80, 0x1}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x21, &(0x7f0000000100)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0xb, 0x6, 0x3, 0x80, 0x10}], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sched_cls}, 0x94) 1.496197517s ago: executing program 0 (id=742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x400c000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r3, 0x8) listen(r3, 0x400) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x200440c0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x8000000000000001, {0x0, 0x7, 0x10, 0x5, 0x517}}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x400c000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (async) listen(r3, 0x8) (async) listen(r3, 0x400) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x200440c0) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x8000000000000001, {0x0, 0x7, 0x10, 0x5, 0x517}}) (async) 1.493341258s ago: executing program 4 (id=743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) listen(r1, 0x0) ioctl$sock_SIOCINQ(r1, 0x5411, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x5f2bc000) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="61106f000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) write$tcp_congestion(r3, &(0x7f0000000000)='yeah\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xfffffffffffffe66}, 0x48) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061000000000000009500"/40], &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="00012abd7000fddbdf25070000004403000c00000008000300050000000d0001007564703a73797a300000000008000300020000000d0001007564703a73797a310000000008000300bf2d00002400028008000100ff7f000008000100ffffffff0400040004000400080002000e000000040006800000000000"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x9}, 0x8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYBLOB="a7f622bf46c5168236402c3d6d9c606edd9db92b89d1c6bb8c361c33bd7fd1e38109818bf9918adb06ac2e1f8620f9ea7a932bccfe363d12b3988d7f28c1e7f18cca41a43a411a06c1eccd56d7fc43b6ca2bb10ea438ba854c13cf8814379709e9b3003600ee5f49d3c84b1579a57efa3c4fd153893ebd393349bbf2504cf24090deb4a7a67cec2f9713761a683c9ec997aa6a24df", @ANYBLOB="00000000100000001c001a80080002802d00ff00080002000cb5760ec042d2b93e0a63816e761d9ed390dc6e48462052644187500fa2096c5ddbcc73456f2ac96e13831e40d4219d", @ANYRES32=r1, @ANYRES8=r2], 0x44}}, 0x2000800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet6_tcp_int(r8, 0x6, 0x5, 0x0, &(0x7f00000000c0)) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) 1.460438846s ago: executing program 3 (id=744): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @rose}, [@bcast, @remote, @default, @default, @netrom, @null, @null, @null]}, &(0x7f0000000040)=0x48, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast}) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3, 0x0, 0xfffffffffffffce3}, 0x0) 1.354161755s ago: executing program 4 (id=745): unshare(0x6a040000) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) recvfrom(r2, 0x0, 0x0, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x68041, 0x0) socketpair(0x1a, 0x6, 0xd, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r3, &(0x7f0000002300)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000180)=""/173, 0xad}, {&(0x7f0000000240)=""/236, 0xec}, {&(0x7f0000000340)=""/53, 0x35}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000540)=""/211, 0xd3}, {&(0x7f0000000640)=""/169, 0xa9}, {&(0x7f0000000700)=""/126, 0x7e}], 0x8, &(0x7f0000002100)=[@rdma_args={0x48, 0x114, 0x1, {{0xe, 0x8001}, {&(0x7f0000000800)=""/58, 0x3a}, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/203, 0xcb}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000980)=""/172, 0xac}, {&(0x7f0000000a40)=""/89, 0x59}], 0x4, 0x2, 0x7fff}}, @fadd={0x58, 0x114, 0x6, {{0x2, 0x9}, &(0x7f0000000b00)=0x101, &(0x7f0000000b40)=0x7, 0x6, 0x2, 0x3, 0x7ff, 0x7d, 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x72c7, 0x8}, &(0x7f0000000b80)=0x401, &(0x7f0000000bc0)=0x1, 0x3, 0x0, 0x8000000000000001, 0x1, 0x60, 0x80000001}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000c00)=""/146, 0x92}, &(0x7f0000000cc0), 0x20}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8a3}, @rdma_args={0x48, 0x114, 0x1, {{0x2da4, 0x6}, {&(0x7f0000000d00)=""/251, 0xfb}, &(0x7f0000001fc0)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/162, 0xa2}, {&(0x7f0000001ec0)=""/36, 0x24}, {&(0x7f0000001f00)=""/159, 0x9f}], 0x4, 0x2, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002000)=""/16, 0x10}, &(0x7f0000002040), 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002080)=""/9, 0x9}, &(0x7f00000020c0), 0x2a}}], 0x200, 0x20000000}, 0x8000) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r5, &(0x7f00000000c0)="09a0", 0x2, 0xb, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0xc9100141, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) close(r1) listen(r1, 0x6) 1.303703639s ago: executing program 2 (id=747): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/cgroup\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 1.297922375s ago: executing program 0 (id=748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000200)=0x1c, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) (async) listen(r4, 0x50) (async) r5 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) listen(r5, 0x3) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0x1, 0xffff}, {0x3, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xa}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x34}}, 0x44841) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010000304d2ff000035a97400ea9cd3aa57f87a5d0fadd21aa4cef3dff41597dd8b13fccc4fe53c0ffbe8e8b48604085e7184181e1903aa47359a44fce493c1ea7984bcebec5faffd04c7c392ba17821ba2e5e5322b5829487b12930498ec1877366fb9f159a59137a3376e5d8ec8065fab4f2bc44218bb5181b9219e3dffbd99abbb3532f9e35fc4017506051d6844da6839c04f8b94ced1178e004301ed4b5fcebd5b80499a78fc207eebf5bb1696dfda16e1ef49b2368af09fda22", @ANYRES32=r10, @ANYBLOB="0008000007500500140012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.22169402s ago: executing program 3 (id=749): r0 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000006c0)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2491b10156516508}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000640001090000000000000000021800000000fd010000000008000100ac141400080005000a"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf253400000008000300", @ANYRES32=r8, @ANYBLOB="05002001180000000a0006000802110000000000140055006fd5b6a9cc16ed632cb31fa4ef23a376"], 0x44}, 0x1, 0x0, 0x0, 0x40801}, 0x10) syz_emit_ethernet(0x110, &(0x7f0000000300)={@broadcast, @link_local, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0x80, 0xbc, "63fd", "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"}}}}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200407fc, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x43, 0x400c0, 0x0, 0x0) 1.217633675s ago: executing program 1 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xfffffd6a, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000040)={r10, 0x9e2}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000a80)=ANY=[@ANYRESDEC=r9, @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES16=r7, @ANYBLOB="d5ffffffffffff080211000001ab8f17d0ed0e00000000000000"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3fc}, 0x1, 0x0, 0x0, 0x8840}, 0x805) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8818c7e8f63cc4f40b4f400e300e780a07f23f28eec0bed29e080bdfc47d00cf6", @ANYRES16=r3, @ANYBLOB="020029bd7000fedbdf25070000001800038014000200626174616476300000000000000000001c000280080004000400000006000f0005000000060002004e20000050000180080008000800000006000200ff00000008000800050000000800050000000000080008000300000014000300fc01000000000000000000000000000108000b0073697000060001000a00000008000600030000000c0002800800070006000000200001800c000700330000002200000008000900160000000800080000000080140003800600040006000000060007004e2100001400028008000300040000000800090081000000"], 0xf4}, 0x1, 0x0, 0x0, 0x880}, 0x4000001) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x74, &(0x7f0000000480)=""/218, &(0x7f0000000200)=0xda) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 1.166537371s ago: executing program 2 (id=751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x43, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x24000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xd2}, @initr0, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) 1.016028233s ago: executing program 0 (id=752): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2}, 0x4000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r1, r1, 0x2f}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f00000001c0), 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_emit_ethernet(0x243, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0x1, [0x958, 0xc6d, 0x28b, 0x79]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, r7, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000340)={0x1, 0x101}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40140a1) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xfffe, &(0x7f0000000180)=""/149, 0x41100, 0x0, '\x00', r11, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e}, 0x2d) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x207ffc, 0x96, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x8, 0x700, 0x3ff, 0x6}}) 975.580011ms ago: executing program 2 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000060aa0700aa020800450000200000000086dd000c9078410900e0"], 0x32) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) bind$bt_hci(r3, 0x0, 0x0) listen(r2, 0x200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 935.480533ms ago: executing program 3 (id=754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1ac, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x94e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x845}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 864.138156ms ago: executing program 1 (id=755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x1, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 808.437156ms ago: executing program 0 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="39600c058606a5c095000000000000f64f1e9083c49b9b6b571cbb48be90c85a23a4b8ab4efe97359fd2ea0a6e24e27473c335242c4349dde8f400b139accdd138a795e13454f04656d99d1ef294e9e7f5940a0bb9778802aa4fa2db5c06d96e2034fed41ad8c7ca918197f2e3d5048dc8da4abc45f424d627a39ad5a3b06b4c83cde3fb140b559c3d01edb9f323cf769a9d142c9c2fb82785fdac71efbfe33c5091be832a88a04a55f6bf71e674ff332bd7563ba492684e2b2f12748e283ee424a0607eace3f324606d0bf9"], &(0x7f0000000000)='GPL\x00'}, 0x90) 779.316721ms ago: executing program 3 (id=757): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f00000003c0), &(0x7f0000000440)=r3}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r8, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000067000000080001001e00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000600000000002ce6831805ec105a008499c0b8f2d8678d486d7510a59a3cbd571e9df1d58b6da7cd9f88ccc8db38d07b834419c07ff255dab75dee9adb71cbcd"], 0x30}}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r5) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000b00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)={0x494, r11, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x18fd66f5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x0, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd436}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3769a973}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29b5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd58}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf61}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x808}, 0x20000810) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') 696.126945ms ago: executing program 1 (id=758): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x33) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f00000005c0)="24c953b63aa7367371e40e2f77289af6f77255af4579998d8084439a4f01d08744af804f5c577341527f9016351ca51aca6dc3ee89d01acb5ec2d9aebccf1c787c182c518cf2660d8734193dfadd1bad2f206a9faf061c1bd30e8d728f53bd6c7e2887271ba52e2882753ab7b87d5b45bd5cc93b7cb3b84ad1c5730cfdfbddd4865ec1ef316d70a383eb6da0a7144e94cd", 0x91) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3a071c351e488fbef56352edb0a562cc0a01a0f20a99968974c36a1101f96d9c5c4f095f6fe5", @ANYRES16=r5, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xc, 0x4, 0x4, 0xbf22, 0x400}, 0x50) unshare(0x100) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', r10, 0x29, 0x3, 0x1, 0x8, 0x1, @private1, @mcast2, 0x80, 0x8, 0x95, 0x7}}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=r11, @ANYBLOB='\x00'/20, @ANYRES64=r9, @ANYRESHEX=r6, @ANYBLOB="000fb70000e7ffefd995670cac2d923b8561662510008088"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff85000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r12, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001e0099030000000000000000ff0100000000000000000000000000010000000000000000fe80000000000000000000000000080000000000000000002400090000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0x70}}, 0x0) 586.454342ms ago: executing program 0 (id=759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r1 = socket(0x10, 0x803, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{}, {&(0x7f00000001c0)="674a8bcb09d6b11084c8ba337d7d43c6f91bdf318a0572c29dc1191780e3bddebd64b3a576388a4cc5c48261d4fe805fc2201b5bc6f1c2dd16af5f3f340c421560e87f3bd5cde07905e08972319dd09e89159aeb6a232b0706", 0x59}], 0x2, &(0x7f00000005c0)=[{0x90, 0x104, 0x21, "3d8e167a085ff4b4f082a5458add4d899e92fee9287a57cfcc4c49da9553ec18bb3eef40eee3578836328da11cef995c877c829127336fa9e15aaf59b615001569c81d305e2bb093f2d9d5da0de582a0cd8ae1fc912694821d1374651b632ad916eb09e09cbf4bdb0c31ddfff717b305b0f44ec378074f23f4a9c2d3"}, {0x68, 0x3a, 0x8, "9ca21112e1d33a99fe951e5247015fe188f59a2d2983ffb6a56cd4a8c80aafa1761aac5eeb48cbcd7489f6606b5cbe5eb5ab1f50946b3a4d26410ad41352e447fc3dfaa7f1c66f5e52b9ed3b5515c98986a39a6902b15e"}, {0x70, 0x3a, 0xfa6, "3768409310a2cd4e8346e706b345805c2d92cf9d18011dbd24ac5905d34cc56f58fab19617b9e4ed5709aa1741859bbd2fb27c85e756fdf5b2712223bcdc75999768ddb0892d43b4819b2751024ffb22631ded4b23a56d0063abca881c0dcb"}, {0x30, 0x110, 0x7, "8749cefcd5017a65b89ba6439fe8bb75cd00ccf83496094368ae39981f9f"}, {0x10, 0x112, 0x3}, {0x50, 0x88, 0xffffffff, "3fc2b8c144757e915b125963f633504af92928cb77ab19694f101743a136d21e6d37e48e54d23577267e72deeb07c4528e51f56eeb50ecffa216"}], 0x1f8}, 0x4000) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x7c, 0x10, 0x4, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x3}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}]}, 0x7c}}, 0x0) 521.826178ms ago: executing program 2 (id=760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xff}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7e}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x8008) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000280)={0x7, 'ipvlan0\x00', {0x2}, 0x8}) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x164, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xd4}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xc1, 0xa9, @random="1dfc3b0ed80d6b45eb08806a9d8c3ce1a28837563eccb4d3977580b00dcc82789e544bb4f870303b1f5d3533f5eae3d9d927346dbbdc90183ec17314153d07773675bc6510480dfe252e1511c9dbc47954c2f7ac45b9b1a89c3b53b932001be07eee3ccf747897579e648b5ba24a60622713d85118ac453c05cfadf8933b458cd18ba1f0b06c72eaf277c9913dec76b2c680660a700007428a0881386588a754e4dfa10a0f159dfff1fe1676d826f6c97f35da87ec5efa2b12d00e7d9f"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20026014}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r0) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r4) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x9, 0x1, 0x22, @mcast2, @rand_addr=' \x01\x00', 0x7800, 0x80, 0x6, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x9, 0x1, 0x22, @mcast2, @rand_addr=' \x01\x00', 0x7800, 0x80, 0x6, 0x8}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'vlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x0, 0xfffffff7, 0x30, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x8, 0x8, 0x8, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x0, 0xfffffff7, 0x30, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x8, 0x8, 0x8, 0x5}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000b80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1a4, r6, 0x610, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x12}, 0x4000) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000c00), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000c40)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001280)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000c80)={0x584, r12, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x12}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x51c, 0x8, 0x0, 0x1, [{0x500, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7f6f76dfa0e28754b4fc52a2e2c1ba6374b6d35d9153df7a6e8e95ebb543f5dd"}, @WGPEER_A_ALLOWEDIPS={0x4c4, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x584}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001380)={&(0x7f00000012c0), 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ':'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001380)={&(0x7f00000012c0), 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ':'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000013c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000001400)=0x28) (async) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000013c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000001400)=0x28) syz_genetlink_get_family_id$mptcp(&(0x7f0000001480), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, r14, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4c800) socket$inet6(0xa, 0x6, 0x1) (async) r15 = socket$inet6(0xa, 0x6, 0x1) sendto$inet6(r15, &(0x7f00000015c0)="540d71546a59fded1f37aff3af950b8cca7f264b70", 0x15, 0x48000, &(0x7f0000001600)={0xa, 0x4e24, 0x9d28, @local, 0x1}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) (async) r16 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000001640)={@loopback, 0x0}, &(0x7f0000001680)=0x14) bind$xdp(r16, &(0x7f00000016c0)={0x2c, 0x8, r17, 0x2b}, 0x10) (async) bind$xdp(r16, &(0x7f00000016c0)={0x2c, 0x8, r17, 0x2b}, 0x10) 356.29856ms ago: executing program 1 (id=761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$inet6_tcp_int(r1, 0x11c, 0x4, 0x0, &(0x7f0000000380)) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000c000c000000000000ffffff00000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40008d0) 315.860875ms ago: executing program 3 (id=762): getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000007c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000400"/28], 0x48) (async) r2 = socket(0x2a, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x8001}]}}]}, 0x3c}}, 0x24000041) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r6}, 0x10) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="47c267490c351fefa41ad1438b387deedba879a53ab61fbc5a9c1ffce8984c7301e2f786d5328b53641907d7bf4f1b0601b801c51f78a3654e772cc8c3e9e5f180af2ebe14fa4ff1b8ce17cbf0ded0d6d99e9291cbdaafced182ec5700fddc51ef2048ba0dc3a4d0fa8ebee34e619d246abef245bb082042c4a21362d5174911d566f1c9fba12b", 0x87, 0x20000000, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a80)={0xf0, 0x5e, 0x1, 0x0, 0x0, "", [@generic="fefb592860daa1fcd407a0c2555471d58a261f8f38ad39cf92fc5cd84f36ad1f1c71855916883598e271f51598ed2f3398e95186e7b1a3f787e4f1f96d7ba54ae2ac05269745488a27fc01250cc34e603dd01a10f2c5155e0ccd986e819a7cb16b35b47b5ec2c24937a10d988a90549df284f16097069e6cacba912429524814e7e606db7e6ed9cc3f214aca1847aadba17e03728eb094b4d285e1e3ba62138b551154d52ae0ae17056dd8de86dcda4b3bd1287b3930262cf04883ce57c0b3fce5d459db827aba23710bc9c008158e82fe613ee55fbd09b8868ff9f86472"]}, 0xf0}], 0x1}, 0x4000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000008c0)={@rand_addr, @initdev}, &(0x7f0000000900)=0xc) 302.766012ms ago: executing program 0 (id=763): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r3, @ANYRESDEC=r2, @ANYBLOB="f47f2f93d1cec7dee7f5476809e97beeb85be333f8798388ea8c859f43308468e515f0d82f7275d8b40441c1e0f1b300abb968f909e17dc9ea692809ef0de031095b3384ab288d1aa327127c53f66b5fee572980135118e0ecb6116efd97339e120cb510c11cb23d015da16aa1f344479729451c0b6674e935931b153c3bbba5c729573e595bc53a8234fa802d4d0e8120fd9025f8", @ANYBLOB="fb70c9dd5b29167a06bf93c1589b7be15e8e7460c6444650a320cf1c496b806a0a69d35ee1dcd984f9aa42bac425d9c50f9450dbc841b7490ae6f99b9e46f8079827716466356954d8e1a18319d81602c1c5c1cdbd9a9c0418245fcd2f95c7b204568ec0a5f179a11763258108341e66cef587906a46d3be8e0bd66291d845d22a6912ebcdfaf8ede457ef6dcdb1feb230df94fc93794c1606009d6d1a9499d04b8a83e4bd7bdb0dc10ed5"], 0x40}, 0x1, 0xba01}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f97670f283a7de80ecc00bacc33bd8a94d2dc0db0cc", 0x1c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/13, 0xd}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000000380)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42) 228.164628ms ago: executing program 4 (id=764): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000002c0), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) 201.539186ms ago: executing program 2 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5000000010000104a3bc70000000000000000000", @ANYRESDEC=r4, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}, 0x1, 0x0, 0x0, 0x24000805}, 0x8010) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x25, r5}) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000580)=0x6, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="1559e1a14231"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x48040) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r8, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}}, 0x0) 159.32945ms ago: executing program 1 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3d94ae6ac0facfc9, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7ff, 0x0, 0x10, 0x6, 0x3, 0xfffffffa, 0xc219, 0x1, 0x3ccd}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200048e5}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 1 (id=767): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000c03}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1412, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x5}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x48080) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x901}, 0x4000000) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000003c0)={r0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x9c, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x80, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x8810) r6 = socket$netlink(0x10, 0x3, 0x5) getsockname$netlink(r6, &(0x7f00000008c0), &(0x7f0000000900)=0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000940), 0x3) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000980)=""/227, &(0x7f0000000a80)=0xe3) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x8004) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c00)="79982c34d0e1b9189d5c60495b8c435f03cd325b21ad644440d2d1b340d5970f3a0c036e756e520c3567e13268fa64abead83533178932fafd0b4330f820307ca6344840ca134d352d72a9ea2dfbffce0f3ba6661305add7bc089674", 0x5c}, {&(0x7f0000000c80)="98ddd24afaedd71b4d8ae80ca1909d68c2cf52", 0x13}], 0x2, &(0x7f0000000d00)=[@op={0x18}], 0x18, 0x1}, 0x1) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r8, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x7, 0x80000000, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4048800) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000ec0)=""/163, &(0x7f0000000f80)=0xa3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xac, r1, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3eeb192024"}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "444fdabc33"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ea9a9833602d51e6cb891112f0"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "12968f1f5ec6eeaf9ec4c237b6"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}], @NL80211_ATTR_SSID={0x5, 0x34, @random="c9"}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001180)={r3}, 0x4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x54, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "15e57ab6bcee9b055784d7d744ad0223"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "800c1d35b72bdb33f5da73727b21fd31"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4004040) setsockopt(r6, 0xc9f, 0x1d15, &(0x7f0000001300)="62e8a963f363255b32fc10fd58271340064be1158c871c95cd8b485d62e77d20ab2534dee889da9631b791ec6005", 0x2e) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001380), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000001640)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f00000013c0)={0x204, r10, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xaa7}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7d}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x614}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x48e}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000001680), &(0x7f00000016c0)=0xc) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x4c, r11, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200440a1}, 0x400c040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.197' (ED25519) to the list of known hosts. [ 83.044212][ T5851] cgroup: Unknown subsys name 'net' [ 83.196964][ T5851] cgroup: Unknown subsys name 'cpuset' [ 83.206491][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.971853][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.120520][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.128815][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.139180][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.152934][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.173528][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.186743][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.192530][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.195797][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.209761][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.217610][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.225733][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.226626][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.240694][ T5879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.241937][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.249573][ T5879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.256643][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.264333][ T5879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.269793][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.278619][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.287080][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.297481][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.306569][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.314105][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.323705][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.341450][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.013592][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 89.116501][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 89.215675][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 89.265154][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 89.278453][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 89.450310][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.458424][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.467481][ T5865] bridge_slave_0: entered allmulticast mode [ 89.475965][ T5865] bridge_slave_0: entered promiscuous mode [ 89.486127][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.493511][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.500827][ T5865] bridge_slave_1: entered allmulticast mode [ 89.508937][ T5865] bridge_slave_1: entered promiscuous mode [ 89.531099][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.539261][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.546802][ T5864] bridge_slave_0: entered allmulticast mode [ 89.555348][ T5864] bridge_slave_0: entered promiscuous mode [ 89.597256][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.604588][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.611794][ T5864] bridge_slave_1: entered allmulticast mode [ 89.619454][ T5864] bridge_slave_1: entered promiscuous mode [ 89.657952][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.725047][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.835839][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.843328][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.850547][ T5863] bridge_slave_0: entered allmulticast mode [ 89.858743][ T5863] bridge_slave_0: entered promiscuous mode [ 89.869110][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.878982][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.886617][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.893980][ T5862] bridge_slave_0: entered allmulticast mode [ 89.901305][ T5862] bridge_slave_0: entered promiscuous mode [ 89.910010][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.917439][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.925196][ T5877] bridge_slave_0: entered allmulticast mode [ 89.932903][ T5877] bridge_slave_0: entered promiscuous mode [ 89.943935][ T5865] team0: Port device team_slave_0 added [ 89.954663][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.961931][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.969408][ T5863] bridge_slave_1: entered allmulticast mode [ 89.977528][ T5863] bridge_slave_1: entered promiscuous mode [ 90.001880][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.011669][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.020043][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.028047][ T5862] bridge_slave_1: entered allmulticast mode [ 90.036041][ T5862] bridge_slave_1: entered promiscuous mode [ 90.059821][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.067164][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.074489][ T5877] bridge_slave_1: entered allmulticast mode [ 90.081814][ T5877] bridge_slave_1: entered promiscuous mode [ 90.090538][ T5865] team0: Port device team_slave_1 added [ 90.184798][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.199088][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.225808][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.239801][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.267501][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.275261][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.301755][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.329111][ T5864] team0: Port device team_slave_0 added [ 90.333750][ T5867] Bluetooth: hci4: command tx timeout [ 90.354466][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.365347][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.373067][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.399552][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.412813][ T5867] Bluetooth: hci1: command tx timeout [ 90.412824][ T5185] Bluetooth: hci0: command tx timeout [ 90.413027][ T5185] Bluetooth: hci2: command tx timeout [ 90.418538][ T5867] Bluetooth: hci3: command tx timeout [ 90.452765][ T5864] team0: Port device team_slave_1 added [ 90.476217][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.503888][ T5863] team0: Port device team_slave_0 added [ 90.541146][ T5862] team0: Port device team_slave_0 added [ 90.550430][ T5862] team0: Port device team_slave_1 added [ 90.572765][ T5863] team0: Port device team_slave_1 added [ 90.623632][ T5877] team0: Port device team_slave_0 added [ 90.648638][ T5865] hsr_slave_0: entered promiscuous mode [ 90.655726][ T5865] hsr_slave_1: entered promiscuous mode [ 90.663296][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.670280][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.696940][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.711272][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.718650][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.745132][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.772006][ T5877] team0: Port device team_slave_1 added [ 90.793783][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.800778][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.827373][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.848477][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.855639][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.881716][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.894513][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.901498][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.927757][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.967305][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.975626][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.001970][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.065010][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.071998][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.098565][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.155615][ T5864] hsr_slave_0: entered promiscuous mode [ 91.162142][ T5864] hsr_slave_1: entered promiscuous mode [ 91.168764][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 91.175078][ T5864] Cannot create hsr debugfs directory [ 91.189057][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.196583][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.222648][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.261830][ T5863] hsr_slave_0: entered promiscuous mode [ 91.269189][ T5863] hsr_slave_1: entered promiscuous mode [ 91.275971][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 91.281816][ T5863] Cannot create hsr debugfs directory [ 91.394860][ T5862] hsr_slave_0: entered promiscuous mode [ 91.401704][ T5862] hsr_slave_1: entered promiscuous mode [ 91.408398][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 91.414456][ T5862] Cannot create hsr debugfs directory [ 91.493324][ T5877] hsr_slave_0: entered promiscuous mode [ 91.500226][ T5877] hsr_slave_1: entered promiscuous mode [ 91.509337][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 91.520640][ T5877] Cannot create hsr debugfs directory [ 92.069084][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.086581][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.108526][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.128626][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.186250][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.209870][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.220916][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.261649][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.311452][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.322156][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.346561][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.360271][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.420005][ T5867] Bluetooth: hci4: command tx timeout [ 92.486836][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.494707][ T5876] Bluetooth: hci1: command tx timeout [ 92.495042][ T5185] Bluetooth: hci0: command tx timeout [ 92.500206][ T5867] Bluetooth: hci2: command tx timeout [ 92.506701][ T5185] Bluetooth: hci3: command tx timeout [ 92.541433][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.556294][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.578182][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.724920][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.770729][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.795806][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.807652][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.819699][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.833913][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.870962][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.878322][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.905032][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.912209][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.940343][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.964507][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.040328][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.079368][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.111369][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.118563][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.128784][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.135974][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.150126][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.157575][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.226860][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.234286][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.261861][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.369868][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.405859][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.413190][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.431815][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.439153][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.606271][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.638667][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.696424][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.748835][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.756101][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.798880][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.806163][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.950329][ T5865] veth0_vlan: entered promiscuous mode [ 93.979905][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.011325][ T5865] veth1_vlan: entered promiscuous mode [ 94.160374][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.193264][ T5865] veth0_macvtap: entered promiscuous mode [ 94.230094][ T5865] veth1_macvtap: entered promiscuous mode [ 94.287876][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.310747][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.391235][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.446114][ T3005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.457617][ T3005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.473411][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.492746][ T5185] Bluetooth: hci4: command tx timeout [ 94.511603][ T5864] veth0_vlan: entered promiscuous mode [ 94.528123][ T3005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.538383][ T3005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.573301][ T5185] Bluetooth: hci3: command tx timeout [ 94.573804][ T5867] Bluetooth: hci2: command tx timeout [ 94.578772][ T5185] Bluetooth: hci0: command tx timeout [ 94.584505][ T5876] Bluetooth: hci1: command tx timeout [ 94.641527][ T5864] veth1_vlan: entered promiscuous mode [ 94.699252][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.752187][ T5877] veth0_vlan: entered promiscuous mode [ 94.871038][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.885259][ T5877] veth1_vlan: entered promiscuous mode [ 94.893484][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.931490][ T5864] veth0_macvtap: entered promiscuous mode [ 94.975682][ T5864] veth1_macvtap: entered promiscuous mode [ 94.997898][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.007049][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.047130][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.058123][ T5862] veth0_vlan: entered promiscuous mode [ 95.092162][ T5877] veth0_macvtap: entered promiscuous mode [ 95.107048][ T5877] veth1_macvtap: entered promiscuous mode [ 95.116950][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.128609][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.176553][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.223533][ T5863] veth0_vlan: entered promiscuous mode [ 95.238986][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.248430][ T5862] veth1_vlan: entered promiscuous mode [ 95.273185][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.300613][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.330252][ T5863] veth1_vlan: entered promiscuous mode [ 95.353584][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.398976][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.418895][ T5988] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 95.451046][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.461643][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.471255][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.498612][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.546839][ T5862] veth0_macvtap: entered promiscuous mode [ 95.636108][ T5862] veth1_macvtap: entered promiscuous mode [ 95.645013][ T5863] veth0_macvtap: entered promiscuous mode [ 95.661000][ T5863] veth1_macvtap: entered promiscuous mode [ 95.715643][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.740990][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.825473][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.857232][ T5993] syz.3.8: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 95.867327][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.880017][ T5993] CPU: 1 UID: 0 PID: 5993 Comm: syz.3.8 Not tainted syzkaller #0 PREEMPT(full) [ 95.880046][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.880067][ T5993] Call Trace: [ 95.880076][ T5993] [ 95.880084][ T5993] dump_stack_lvl+0x189/0x250 [ 95.880122][ T5993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.880148][ T5993] ? __pfx__printk+0x10/0x10 [ 95.880177][ T5993] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 95.880203][ T5993] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 95.880229][ T5993] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 95.880258][ T5993] warn_alloc+0x214/0x310 [ 95.880292][ T5993] ? stack_depot_save_flags+0x41b/0x860 [ 95.880326][ T5993] ? __pfx_warn_alloc+0x10/0x10 [ 95.880360][ T5993] ? kasan_save_track+0x4f/0x80 [ 95.880387][ T5993] ? xskq_create+0x56/0x170 [ 95.880406][ T5993] ? xsk_init_queue+0xb0/0x110 [ 95.880422][ T5993] ? xsk_setsockopt+0x4dc/0x8d0 [ 95.880452][ T5993] ? do_sock_setsockopt+0x179/0x1b0 [ 95.880476][ T5993] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 95.880499][ T5993] ? do_syscall_64+0xfa/0x3b0 [ 95.880520][ T5993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.880549][ T5993] __vmalloc_node_range_noprof+0x125/0x12f0 [ 95.880615][ T5993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.880653][ T5993] ? __kasan_kmalloc+0x93/0xb0 [ 95.880682][ T5993] vmalloc_user_noprof+0xad/0xf0 [ 95.880713][ T5993] ? xskq_create+0xbf/0x170 [ 95.880735][ T5993] xskq_create+0xbf/0x170 [ 95.880760][ T5993] xsk_init_queue+0xb0/0x110 [ 95.880791][ T5993] xsk_setsockopt+0x4dc/0x8d0 [ 95.880827][ T5993] ? __pfx_xsk_setsockopt+0x10/0x10 [ 95.880860][ T5993] ? __pfx_aa_sk_perm+0x10/0x10 [ 95.880895][ T5993] ? aa_sock_opt_perm+0xff/0x1b0 [ 95.880921][ T5993] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 95.880943][ T5993] ? __pfx_xsk_setsockopt+0x10/0x10 [ 95.880976][ T5993] do_sock_setsockopt+0x179/0x1b0 [ 95.881008][ T5993] __x64_sys_setsockopt+0x13f/0x1b0 [ 95.881040][ T5993] do_syscall_64+0xfa/0x3b0 [ 95.881061][ T5993] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.881083][ T5993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.881103][ T5993] ? clear_bhb_loop+0x60/0xb0 [ 95.881127][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.881146][ T5993] RIP: 0033:0x7f62c058eec9 [ 95.881173][ T5993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.881191][ T5993] RSP: 002b:00007f62c14ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.881213][ T5993] RAX: ffffffffffffffda RBX: 00007f62c07e5fa0 RCX: 00007f62c058eec9 [ 95.881229][ T5993] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 95.881241][ T5993] RBP: 00007f62c0611f91 R08: 0000000000000004 R09: 0000000000000000 [ 95.881253][ T5993] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.881266][ T5993] R13: 00007f62c07e6038 R14: 00007f62c07e5fa0 R15: 00007ffeab4727e8 [ 95.881298][ T5993] [ 95.881319][ T5993] Mem-Info: [ 95.970420][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.000043][ T5993] active_anon:5378 inactive_anon:0 isolated_anon:0 [ 96.000043][ T5993] active_file:955 inactive_file:39867 isolated_file:0 [ 96.000043][ T5993] unevictable:768 dirty:1433 writeback:0 [ 96.000043][ T5993] slab_reclaimable:10193 slab_unreclaimable:92337 [ 96.000043][ T5993] mapped:28941 shmem:1356 pagetables:957 [ 96.000043][ T5993] sec_pagetables:0 bounce:0 [ 96.000043][ T5993] kernel_misc_reclaimable:0 [ 96.000043][ T5993] free:1330714 free_pcp:24274 free_cma:0 [ 96.007650][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.019805][ T5993] Node 0 active_anon:21512kB inactive_anon:0kB active_file:3820kB inactive_file:159264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115764kB dirty:5716kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11612kB pagetables:3664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 96.281376][ T5993] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 96.318484][ T5993] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.344197][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.352927][ T5993] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 96.367902][ T5993] Node 0 DMA32 free:1416900kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21428kB inactive_anon:0kB active_file:3856kB inactive_file:157688kB unevictable:1536kB writepending:5728kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:76500kB local_pcp:10996kB free_cma:0kB [ 96.402858][ T5993] lowmem_reserve[]: 0 0 1 1 1 [ 96.406497][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.415888][ T5993] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 96.415962][ T5993] lowmem_reserve[]: 0 0 0 0 0 [ 96.416013][ T5993] Node 1 Normal free:3888772kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20720kB local_pcp:8984kB free_cma:0kB [ 96.416079][ T5993] lowmem_reserve[]: 0 0 0 0 0 [ 96.416127][ T5993] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.416300][ T5993] Node 0 DMA32: 1*4kB (M) 2*8kB (ME) 1*16kB (E) 3*32kB (UME) 1*64kB (E) 6*128kB (UM) 7*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 343*4096kB (M) = 1416900kB [ 96.522912][ T2986] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.545189][ T5993] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 96.555985][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.561400][ T5993] Node 1 Normal: 73*4kB (UE) 56*8kB (UME) 42*16kB (UME) 54*32kB (UME) 17*64kB (UME) 8*128kB (UME) 6*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3888772kB [ 96.580022][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.592848][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.605436][ T5993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.607373][ T5867] Bluetooth: hci4: command tx timeout [ 96.625199][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.633921][ T2986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.633965][ T5993] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.653656][ T5867] Bluetooth: hci0: command tx timeout [ 96.659120][ T5867] Bluetooth: hci3: command tx timeout [ 96.664657][ T5867] Bluetooth: hci2: command tx timeout [ 96.669935][ T5876] Bluetooth: hci1: command tx timeout [ 96.670941][ T5993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.685463][ T5993] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.688024][ T2986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.694841][ T5993] 42185 total pagecache pages [ 96.694866][ T5993] 0 pages in swap cache [ 96.694875][ T5993] Free swap = 124996kB [ 96.694884][ T5993] Total swap = 124996kB [ 96.694895][ T5993] 2097051 pages RAM [ 96.729370][ T5993] 0 pages HighMem/MovableOnly [ 96.773149][ T5993] 425673 pages reserved [ 96.788891][ T2986] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.799681][ T5993] 0 pages cma reserved [ 96.846736][ T2986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.873620][ T2986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.932511][ T2986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.045421][ T2986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.061045][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.110596][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.224564][ T1211] cfg80211: failed to load regulatory.db [ 97.239597][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.271994][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.298802][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.495706][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.551596][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.724917][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.776312][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.022021][ T6035] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 98.201302][ T6039] netlink: 256 bytes leftover after parsing attributes in process `syz.1.14'. [ 98.295232][ T6039] trusted_key: syz.1.14 sent an empty control message without MSG_MORE. [ 98.436429][ T6048] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5'. [ 98.490784][ T6050] syzkaller1: entered promiscuous mode [ 98.513462][ T6050] syzkaller1: entered allmulticast mode [ 98.657876][ T6060] nbd: must specify at least one socket [ 98.877549][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 98.893745][ T6068] netlink: 'syz.3.20': attribute type 15 has an invalid length. [ 98.921987][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 98.964456][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 99.167102][ T6078] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.22'. [ 99.236986][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.235037][ T6125] syzkaller1: entered allmulticast mode [ 100.319134][ T6127] sctp: [Deprecated]: syz.2.34 (pid 6127) Use of int in maxseg socket option. [ 100.319134][ T6127] Use struct sctp_assoc_value instead [ 101.282484][ T6175] Zero length message leads to an empty skb [ 101.631826][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'. [ 101.655964][ T6193] netlink: 'syz.1.48': attribute type 27 has an invalid length. [ 101.751254][ T6196] netlink: 60 bytes leftover after parsing attributes in process `syz.2.49'. [ 101.928063][ T6199] erspan0: entered promiscuous mode [ 101.977875][ T6199] erspan0: entered allmulticast mode [ 102.201649][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 102.505988][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.512884][ T6227] openvswitch: netlink: Key type 278 is out of range max 32 [ 102.536431][ T6229] batadv_slave_0: entered promiscuous mode [ 102.547504][ T6225] block nbd3: not configured, cannot reconfigure [ 102.871799][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 102.888087][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 102.902641][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 103.051375][ T6252] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 103.060040][ T6254] netlink: 96 bytes leftover after parsing attributes in process `syz.4.67'. [ 103.085740][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 103.099875][ T6252] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.68'. [ 103.114746][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 103.145022][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 104.070824][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 104.166034][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 104.739619][ T6341] tap0: tun_chr_ioctl cmd 1074025676 [ 104.761982][ T6341] tap0: owner set to 0 [ 104.935794][ T6349] netlink: 'syz.4.92': attribute type 10 has an invalid length. [ 104.959401][ T2986] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.001563][ T2986] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.023593][ T6349] dummy0: entered promiscuous mode [ 105.048858][ T6349] bridge0: port 3(dummy0) entered blocking state [ 105.066004][ T6349] bridge0: port 3(dummy0) entered disabled state [ 105.097374][ T6349] dummy0: entered allmulticast mode [ 105.124441][ T6349] bridge0: port 3(dummy0) entered blocking state [ 105.131157][ T6349] bridge0: port 3(dummy0) entered forwarding state [ 105.143334][ T2986] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.199969][ T2986] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.411648][ T6366] Bluetooth: MGMT ver 1.23 [ 105.596333][ T6380] warning: `syz.3.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.651955][ T6380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.417625][ T6422] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.806342][ T6436] netlink: 'syz.3.118': attribute type 1 has an invalid length. [ 106.845969][ T6436] nbd: couldn't find device at index 1048576 [ 108.518740][ T6500] syzkaller0: entered promiscuous mode [ 108.526524][ T6500] syzkaller0: entered allmulticast mode [ 108.804658][ T6506] __nla_validate_parse: 14 callbacks suppressed [ 108.804681][ T6506] netlink: 830 bytes leftover after parsing attributes in process `syz.0.139'. [ 108.855342][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 109.421864][ T6531] sctp: [Deprecated]: syz.4.145 (pid 6531) Use of int in max_burst socket option deprecated. [ 109.421864][ T6531] Use struct sctp_assoc_value instead [ 109.441191][ T6529] netlink: 128 bytes leftover after parsing attributes in process `syz.0.144'. [ 109.457624][ T6525] netlink: 'syz.3.143': attribute type 1 has an invalid length. [ 109.478421][ T6534] sctp: [Deprecated]: syz.4.145 (pid 6534) Use of int in max_burst socket option deprecated. [ 109.478421][ T6534] Use struct sctp_assoc_value instead [ 109.489036][ T6529] netlink: 128 bytes leftover after parsing attributes in process `syz.0.144'. [ 110.150721][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 110.418001][ T6569] delete_channel: no stack [ 110.594722][ T6579] netlink: 'syz.2.157': attribute type 2 has an invalid length. [ 110.606181][ T6579] netlink: 'syz.2.157': attribute type 8 has an invalid length. [ 110.616297][ T6579] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.157'. [ 110.997673][ T6587] syzkaller0: entered promiscuous mode [ 111.003538][ T6587] syzkaller0: entered allmulticast mode [ 111.169861][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 111.183845][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 111.211757][ T6593] netlink: 196 bytes leftover after parsing attributes in process `syz.4.161'. [ 111.257043][ T6593] netlink: 196 bytes leftover after parsing attributes in process `syz.4.161'. [ 111.436151][ T6605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.548397][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055bd2800: rx timeout, send abort [ 113.049102][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055bd3800: rx timeout, send abort [ 113.057693][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055bd2800: abort rx timeout. Force session deactivation [ 113.471162][ T6712] netlink: 'syz.4.197': attribute type 2 has an invalid length. [ 113.507804][ T6719] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 113.555251][ T6712] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 113.563130][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055bd3800: abort rx timeout. Force session deactivation [ 113.834985][ T6728] __nla_validate_parse: 5 callbacks suppressed [ 113.835005][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 113.835917][ T6727] team0: Device gtp0 is of different type [ 113.953527][ T6732] tipc: Started in network mode [ 113.958662][ T6732] tipc: Node identity ae7e330ce20f, cluster identity 4711 [ 114.014587][ T6732] tipc: Enabled bearer , priority 0 [ 114.040973][ T6739] syzkaller0: entered promiscuous mode [ 114.096878][ T6739] syzkaller0: entered allmulticast mode [ 114.107806][ T6740] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 114.223171][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 114.284392][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 114.326039][ T6751] netlink: 'syz.3.209': attribute type 15 has an invalid length. [ 114.369814][ T6740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.406473][ T6739] netlink: 76 bytes leftover after parsing attributes in process `syz.1.204'. [ 114.442144][ T6732] tipc: Resetting bearer [ 114.539906][ T6762] veth3: entered promiscuous mode [ 114.789694][ T6740] bond1: entered allmulticast mode [ 114.812216][ T6731] tipc: Resetting bearer [ 114.844638][ T6731] tipc: Disabling bearer [ 115.120327][ T6785] netlink: 'syz.0.213': attribute type 7 has an invalid length. [ 115.231433][ T6785] : entered promiscuous mode [ 115.289312][ T6782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.213'. [ 115.459152][ T6794] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.216'. [ 116.858511][ T6843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.007745][ T6848] netlink: 'syz.3.230': attribute type 13 has an invalid length. [ 117.058857][ T6848] veth0_macvtap: left promiscuous mode [ 117.141186][ T6848] macvtap0: entered allmulticast mode [ 117.151274][ T6848] macvtap0: refused to change device tx_queue_len [ 117.171355][ T6851] vlan1: entered promiscuous mode [ 117.188904][ T6851] bridge0: entered promiscuous mode [ 117.208564][ T6856] netlink: 'syz.0.232': attribute type 4 has an invalid length. [ 117.279682][ T6856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.232'. [ 117.346158][ T6859] netlink: 'syz.3.233': attribute type 32 has an invalid length. [ 117.667273][ T6870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.674901][ T6870] IPv6: NLM_F_CREATE should be set when creating new route [ 118.963263][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.245'. [ 119.053714][ T6903] bridge0: port 3(dummy0) entered disabled state [ 119.110390][ T6909] Illegal XDP return value 178543816 on prog (id 45) dev N/A, expect packet loss! [ 119.154453][ T6904] netlink: zone id is out of range [ 119.180575][ T6904] netlink: zone id is out of range [ 119.235595][ T6904] netlink: zone id is out of range [ 119.551772][ T6924] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 119.560789][ T6924] netlink: 224 bytes leftover after parsing attributes in process `syz.0.251'. [ 119.599997][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 119.802755][ T6932] openvswitch: netlink: EtherType 0 is less than min 600 [ 119.811604][ T6929] tipc: Started in network mode [ 119.824249][ T6929] tipc: Node identity , cluster identity 4711 [ 119.830971][ T6929] tipc: Failed to obtain node identity [ 119.841696][ T6929] tipc: Enabling of bearer rejected, failed to enable media [ 119.852221][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 119.862839][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 119.879450][ T6934] syzkaller0: entered promiscuous mode [ 119.885581][ T6934] syzkaller0: entered allmulticast mode [ 120.021806][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 120.254643][ T6948] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 120.271616][ T6948] netlink: 'syz.4.260': attribute type 2 has an invalid length. [ 120.310740][ T6948] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.260'. [ 120.332438][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'. [ 120.348654][ T6950] tc_dump_action: action bad kind [ 120.356140][ T6948] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 120.366854][ T6948] IPVS: set_ctl: invalid protocol: 140 255.255.255.255:20001 [ 120.390598][ T6948] netlink: 80 bytes leftover after parsing attributes in process `syz.4.260'. [ 120.580016][ T6959] netlink: 'syz.3.264': attribute type 10 has an invalid length. [ 120.685396][ T6959] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 120.722001][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.729670][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.741673][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.752614][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.906327][ T6967] netlink: 'syz.2.268': attribute type 7 has an invalid length. [ 120.935312][ T6967] netlink: 140 bytes leftover after parsing attributes in process `syz.2.268'. [ 121.315978][ T6976] dummy0: left allmulticast mode [ 121.322374][ T6976] bridge0: port 3(dummy0) entered disabled state [ 121.370450][ T6976] bridge_slave_0: left allmulticast mode [ 121.414818][ T6976] bridge_slave_0: left promiscuous mode [ 121.466235][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.559400][ T6976] bridge_slave_1: left allmulticast mode [ 121.587545][ T6976] bridge_slave_1: left promiscuous mode [ 121.608330][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.636754][ T6976] bond0: (slave bond_slave_0): Releasing backup interface [ 121.724161][ T6976] bond0: (slave bond_slave_1): Releasing backup interface [ 121.833703][ T6976] team0: Port device team_slave_0 removed [ 121.911571][ T6976] team0: Port device team_slave_1 removed [ 121.923746][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.932470][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.958741][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.992567][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.105112][ T6986] team0: Mode changed to "broadcast" [ 122.248763][ T7009] tipc: Started in network mode [ 122.282410][ T7009] tipc: Node identity 040000000000000007, cluster identity 4711 [ 122.525328][ T7022] netlink: 'syz.0.280': attribute type 10 has an invalid length. [ 122.595659][ T7022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.609779][ T7019] openvswitch: netlink: IPv4 tunnel dst address is zero [ 122.657458][ T7022] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 122.670102][ T7026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.709327][ T7026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.722507][ T7026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.853266][ T7026] bond0: (slave batadv0): Releasing backup interface [ 122.865898][ T7030] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 123.671836][ T6797] Set syz1 is full, maxelem 65536 reached [ 123.983936][ T7069] __nla_validate_parse: 1 callbacks suppressed [ 123.983957][ T7069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.292'. [ 124.203943][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.296'. [ 124.258158][ T7055] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.452061][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 124.474356][ T7090] netlink: 'syz.3.298': attribute type 20 has an invalid length. [ 124.506963][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 124.540554][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.565519][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.597108][ T7090] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 124.602020][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.695970][ T7099] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 124.709961][ T7099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.301'. [ 124.729685][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.831778][ T7099] team0: Port device geneve0 added [ 125.069106][ T7110] tipc: Enabled bearer , priority 0 [ 125.126184][ T7112] syzkaller0: entered promiscuous mode [ 125.131819][ T7112] syzkaller0: entered allmulticast mode [ 125.210386][ T7110] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 125.273961][ T7130] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 125.282074][ T7122] netlink: 'syz.4.309': attribute type 4 has an invalid length. [ 125.355586][ T7112] tipc: Resetting bearer [ 125.462503][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.512101][ T7112] tipc: Disabling bearer [ 125.550634][ T7133] netlink: 'syz.2.312': attribute type 29 has an invalid length. [ 125.561145][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 125.570853][ T7141] netlink: 'syz.2.312': attribute type 29 has an invalid length. [ 125.581618][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 125.730514][ T7148] syz_tun: entered allmulticast mode [ 125.903428][ T7147] syz_tun: left allmulticast mode [ 125.910307][ T7154] netlink: 'syz.4.318': attribute type 1 has an invalid length. [ 125.937053][ T7161] netlink: 72 bytes leftover after parsing attributes in process `syz.3.320'. [ 125.949881][ T7154] netlink: 224 bytes leftover after parsing attributes in process `syz.4.318'. [ 125.961099][ T7161] netlink: 72 bytes leftover after parsing attributes in process `syz.3.320'. [ 126.180163][ T7166] netlink: 'syz.1.322': attribute type 2 has an invalid length. [ 126.579863][ T7190] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 126.612792][ T7198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.838439][ T7208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.954076][ T7208] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 127.311668][ T7230] bridge_slave_1: default FDB implementation only supports local addresses [ 127.626995][ T7253] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 127.808732][ T7266] tipc: Enabling of bearer rejected, failed to enable media [ 127.939323][ T7276] syz_tun: entered allmulticast mode [ 127.950413][ T7276] syz_tun: left allmulticast mode [ 128.399265][ T7292] vlan2: entered allmulticast mode [ 128.414623][ T7292] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 128.593109][ T7305] validate_nla: 5 callbacks suppressed [ 128.593129][ T7305] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 128.610574][ T7305] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 128.645897][ T7309] netlink: 'syz.4.364': attribute type 11 has an invalid length. [ 128.668325][ T7309] netlink: 'syz.4.364': attribute type 11 has an invalid length. [ 128.679954][ T141] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.711238][ T141] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.727877][ T141] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.764832][ T141] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.948033][ T7311] syz.1.365 (7311) used greatest stack depth: 17704 bytes left [ 129.171333][ T7328] __nla_validate_parse: 21 callbacks suppressed [ 129.171420][ T7328] netlink: 64 bytes leftover after parsing attributes in process `syz.3.371'. [ 129.217978][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.371'. [ 129.277106][ T7327] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 129.293986][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 129.365966][ T7332] netlink: 'syz.0.373': attribute type 8 has an invalid length. [ 129.653157][ T7340] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 129.654013][ T7341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.695867][ T7346] netlink: 'syz.1.379': attribute type 6 has an invalid length. [ 129.743967][ T7341] netlink: 'syz.4.377': attribute type 15 has an invalid length. [ 129.783664][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 129.905567][ T7341] netlink: 'syz.4.377': attribute type 15 has an invalid length. [ 129.941818][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 129.967359][ T3005] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 129.997448][ T3005] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 130.055815][ T3005] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 130.108753][ T3005] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 130.152568][ T7362] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 130.247098][ T7362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.332137][ T7367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.383'. [ 130.581582][ T7377] netlink: 'syz.1.386': attribute type 11 has an invalid length. [ 130.625057][ T7377] netlink: 224 bytes leftover after parsing attributes in process `syz.1.386'. [ 131.044101][ T7381] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.073621][ T7381] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 131.112794][ T7381] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.237873][ T7381] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.300802][ T7381] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 131.333886][ T7395] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.348260][ T7381] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.671061][ T7381] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.712754][ T7381] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 131.730899][ T7381] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.909473][ T7381] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.950751][ T7381] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 131.991932][ T7381] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.367564][ T2986] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.396797][ T2986] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 132.421437][ T2986] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.464094][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.479019][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 132.491357][ T13] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 132.509846][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.568839][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.581427][ T13] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 132.600548][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.639901][ T3005] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.679806][ T3005] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 132.700850][ T7435] netlink: 5 bytes leftover after parsing attributes in process `syz.1.402'. [ 132.716627][ T3005] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.274808][ T7461] netlink: 2 bytes leftover after parsing attributes in process `syz.0.409'. [ 133.284302][ T7461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.443662][ T7435] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 133.474107][ T7435] 0ªî{X¹¦: entered allmulticast mode [ 133.480129][ T7435] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 134.391920][ T7503] bond1: entered allmulticast mode [ 134.400242][ T7503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.410770][ T7503] bridge0: port 3(bond1) entered blocking state [ 134.422023][ T7503] bridge0: port 3(bond1) entered disabled state [ 134.436781][ T7503] bond1: entered promiscuous mode [ 134.446318][ T7503] bridge0: port 3(bond1) entered blocking state [ 134.453370][ T7503] bridge0: port 3(bond1) entered forwarding state [ 134.477967][ T7509] __nla_validate_parse: 2 callbacks suppressed [ 134.477988][ T7509] netlink: 96 bytes leftover after parsing attributes in process `syz.2.423'. [ 134.615125][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 134.733900][ T7518] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 134.828962][ T2986] bridge0: port 3(bond1) entered disabled state [ 135.039155][ T7533] validate_nla: 1 callbacks suppressed [ 135.039175][ T7533] netlink: 'syz.1.431': attribute type 1 has an invalid length. [ 135.063500][ T7533] netlink: 'syz.1.431': attribute type 1 has an invalid length. [ 135.104122][ T7540] netlink: 'syz.0.432': attribute type 10 has an invalid length. [ 135.148507][ T7536] netlink: 92 bytes leftover after parsing attributes in process `syz.4.430'. [ 135.165353][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 135.169359][ T7540] team0: Device hsr_slave_0 failed to register rx_handler [ 135.418284][ T7544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.433'. [ 135.479490][ T7544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.433'. [ 135.606652][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 135.636576][ T7558] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.438'. [ 136.387904][ T7593] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 136.530596][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 136.860232][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 138.179805][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.189615][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.668944][ T7640] veth1_macvtap: left promiscuous mode [ 138.689426][ T7640] macsec0: entered promiscuous mode [ 138.701876][ T7640] macsec0: entered allmulticast mode [ 138.720046][ T7644] veth1_macvtap: entered promiscuous mode [ 138.759159][ T7644] veth1_macvtap: entered allmulticast mode [ 138.785363][ T7644] macsec0: left promiscuous mode [ 138.790707][ T7644] macsec0: left allmulticast mode [ 138.799368][ T7644] veth1_macvtap: left allmulticast mode [ 139.396193][ T7669] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 139.492220][ T7671] __nla_validate_parse: 1 callbacks suppressed [ 139.495799][ T7674] netlink: 68 bytes leftover after parsing attributes in process `syz.1.470'. [ 139.518276][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 139.549932][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.469'. [ 139.562184][ T7669] tipc: Invalid UDP bearer configuration [ 139.562906][ T7669] tipc: Enabling of bearer rejected, failed to enable media [ 139.723213][ T7687] syzkaller0: entered promiscuous mode [ 139.728951][ T7687] syzkaller0: entered allmulticast mode [ 139.851338][ T7693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.476'. [ 139.877959][ T7693] IPv6: sit1: Disabled Multicast RS [ 139.886139][ T7693] sit1: entered allmulticast mode [ 139.945257][ T7699] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 139.979225][ T7699] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 140.137549][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 140.209535][ T7708] tipc: Enabled bearer , priority 0 [ 140.232226][ T7708] syzkaller0: entered promiscuous mode [ 140.239557][ T7708] syzkaller0: entered allmulticast mode [ 140.246286][ T7710] netlink: 44 bytes leftover after parsing attributes in process `syz.2.482'. [ 140.299638][ T7708] tipc: Resetting bearer [ 140.447596][ T7719] netlink: 36 bytes leftover after parsing attributes in process `syz.2.485'. [ 140.701058][ T7726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.755311][ T7701] tipc: Resetting bearer [ 140.848435][ T7701] tipc: Disabling bearer [ 140.975149][ T7741] veth0_to_bridge: entered promiscuous mode [ 141.001740][ T7736] veth0_to_bridge: left promiscuous mode [ 141.389895][ T7762] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 141.527406][ T7768] netlink: 68 bytes leftover after parsing attributes in process `syz.0.504'. [ 141.537735][ T7769] netlink: 68 bytes leftover after parsing attributes in process `syz.0.504'. [ 141.662130][ T7775] netlink: 92 bytes leftover after parsing attributes in process `syz.1.506'. [ 142.985726][ T7830] netlink: 'syz.4.514': attribute type 1 has an invalid length. [ 143.000413][ T7830] netlink: 'syz.4.514': attribute type 11 has an invalid length. [ 143.804635][ T7861] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 143.824569][ T7861] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 143.833486][ T7861] netlink: 'syz.3.523': attribute type 4 has an invalid length. [ 143.841385][ T7861] NCSI netlink: No device for ifindex 830110067 [ 144.716944][ T7893] __nla_validate_parse: 5 callbacks suppressed [ 144.716965][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 144.957883][ T7897] netlink: 'syz.4.534': attribute type 1 has an invalid length. [ 144.965935][ T7897] netlink: 'syz.4.534': attribute type 1 has an invalid length. [ 144.989471][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.534'. [ 145.107221][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 145.133622][ T5876] Bluetooth: hci4: command tx timeout [ 145.143551][ T7905] xfrm1: entered promiscuous mode [ 145.148753][ T7905] xfrm1: entered allmulticast mode [ 145.174080][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 145.259757][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 145.330893][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 145.949223][ T7806] syzkaller0: tun_net_xmit 76 [ 145.993410][ T7806] syzkaller0: tun_net_xmit 48 [ 146.008841][ T5924] syzkaller0: tun_net_xmit 76 [ 146.033499][ T5924] syzkaller0: tun_net_xmit 76 [ 146.202551][ T5942] syzkaller0: tun_net_xmit 76 [ 147.410005][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 148.092612][ T7784] Set syz1 is full, maxelem 65536 reached [ 148.311597][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 148.320709][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 148.707361][ T7947] veth0: entered promiscuous mode [ 148.755762][ T7959] kthread_run failed with err -4 [ 148.773600][ T7947] veth0: left promiscuous mode [ 149.096957][ T7989] FAULT_INJECTION: forcing a failure. [ 149.096957][ T7989] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 149.131840][ T7989] CPU: 0 UID: 0 PID: 7989 Comm: syz.4.561 Not tainted syzkaller #0 PREEMPT(full) [ 149.131872][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.131886][ T7989] Call Trace: [ 149.131895][ T7989] [ 149.131904][ T7989] dump_stack_lvl+0x189/0x250 [ 149.131937][ T7989] ? __pfx____ratelimit+0x10/0x10 [ 149.131962][ T7989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.131989][ T7989] ? __pfx__printk+0x10/0x10 [ 149.132026][ T7989] ? __might_fault+0xb0/0x130 [ 149.132071][ T7989] should_fail_ex+0x414/0x560 [ 149.132110][ T7989] _copy_from_user+0x2d/0xb0 [ 149.132142][ T7989] ___sys_recvmsg+0x12e/0x510 [ 149.132179][ T7989] ? __pfx____sys_recvmsg+0x10/0x10 [ 149.132240][ T7989] ? __fget_files+0x3a0/0x420 [ 149.132271][ T7989] __x64_sys_recvmsg+0x198/0x260 [ 149.132305][ T7989] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 149.132346][ T7989] ? __pfx_ksys_write+0x10/0x10 [ 149.132374][ T7989] ? rcu_is_watching+0x15/0xb0 [ 149.132404][ T7989] ? do_syscall_64+0xbe/0x3b0 [ 149.132435][ T7989] do_syscall_64+0xfa/0x3b0 [ 149.132457][ T7989] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.132480][ T7989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.132501][ T7989] ? clear_bhb_loop+0x60/0xb0 [ 149.132542][ T7989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.132564][ T7989] RIP: 0033:0x7fdfca78eec9 [ 149.132585][ T7989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.132604][ T7989] RSP: 002b:00007fdfc89d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 149.132627][ T7989] RAX: ffffffffffffffda RBX: 00007fdfca9e6090 RCX: 00007fdfca78eec9 [ 149.132643][ T7989] RDX: 0000000000000104 RSI: 0000200000001500 RDI: 0000000000000003 [ 149.132658][ T7989] RBP: 00007fdfc89d5090 R08: 0000000000000000 R09: 0000000000000000 [ 149.132671][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.132684][ T7989] R13: 00007fdfca9e6128 R14: 00007fdfca9e6090 R15: 00007fffec964d28 [ 149.132719][ T7989] [ 149.506350][ T7991] vlan2: entered promiscuous mode [ 149.521852][ T7991] bond0: entered promiscuous mode [ 149.554149][ T7991] bond_slave_0: entered promiscuous mode [ 149.575769][ T7991] bond_slave_1: entered promiscuous mode [ 149.598635][ T7993] netlink: 408 bytes leftover after parsing attributes in process `syz.3.563'. [ 149.607872][ T7993] openvswitch: netlink: Flow key attr not present in new flow. [ 149.797958][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 149.864298][ T7998] nbd: must specify a device to reconfigure [ 149.958148][ T7998] nbd: must specify a device to reconfigure [ 150.312631][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.572'. [ 151.129349][ T8066] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 151.141538][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 151.172444][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 151.191876][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 152.027368][ T8089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.593'. [ 152.108040][ T8089] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.593'. [ 152.366458][ T8108] netlink: 80 bytes leftover after parsing attributes in process `syz.4.599'. [ 152.515197][ T1211] IPVS: starting estimator thread 0... [ 152.600689][ T8124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.613527][ T8123] IPVS: ip_vs_edit_dest(): server weight less than zero [ 152.618328][ T8124] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 152.628715][ T1211] IPVS: starting estimator thread 0... [ 152.643523][ T8118] IPVS: using max 25 ests per chain, 60000 per kthread [ 152.668129][ T8124] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 152.724043][ T8124] netlink: 232 bytes leftover after parsing attributes in process `syz.4.604'. [ 152.752401][ T8125] IPVS: using max 26 ests per chain, 62400 per kthread [ 152.903033][ T8136] tipc: Started in network mode [ 152.918707][ T8136] tipc: Node identity e6968692791d, cluster identity 4711 [ 152.942613][ T8136] tipc: Enabled bearer , priority 0 [ 152.977244][ T8141] syzkaller0: entered promiscuous mode [ 153.003018][ T8141] syzkaller0: entered allmulticast mode [ 153.026419][ T8140] wg1 speed is unknown, defaulting to 1000 [ 153.044928][ T8136] tipc: Resetting bearer [ 153.063055][ T8140] wg1 speed is unknown, defaulting to 1000 [ 153.097415][ T8149] netlink: 240 bytes leftover after parsing attributes in process `syz.3.611'. [ 153.128701][ T8135] tipc: Resetting bearer [ 153.170973][ T8135] tipc: Disabling bearer [ 153.196200][ T8140] wg1 speed is unknown, defaulting to 1000 [ 153.259527][ T8140] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.314455][ T8140] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.443336][ T8161] netlink: 'syz.0.616': attribute type 8 has an invalid length. [ 154.708179][ T8140] wg1 speed is unknown, defaulting to 1000 [ 154.717860][ T8140] wg1 speed is unknown, defaulting to 1000 [ 154.742014][ T8140] wg1 speed is unknown, defaulting to 1000 [ 154.785645][ T8140] wg1 speed is unknown, defaulting to 1000 [ 154.840062][ T8140] wg1 speed is unknown, defaulting to 1000 [ 155.245736][ T8195] IPVS: set_ctl: invalid protocol: 137 100.1.1.2:20001 [ 155.465975][ T8196] __nla_validate_parse: 2 callbacks suppressed [ 155.465995][ T8196] netlink: 13 bytes leftover after parsing attributes in process `syz.4.625'. [ 155.577667][ T8211] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 156.423929][ T8250] team0: Device vti0 is up. Set it down before adding it as a team port [ 156.485114][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 156.548059][ T8273] wg1 speed is unknown, defaulting to 1000 [ 156.679719][ T8276] erspan0: entered allmulticast mode [ 156.940254][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 156.978403][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 157.069586][ T8289] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 157.129795][ T8289] netlink: 'syz.1.655': attribute type 11 has an invalid length. [ 157.195756][ T8291] syzkaller0: entered promiscuous mode [ 157.207432][ T8291] syzkaller0: entered allmulticast mode [ 157.274306][ T8293] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 157.332805][ T8303] netlink: 248 bytes leftover after parsing attributes in process `syz.4.658'. [ 157.646494][ T8312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.663'. [ 157.947093][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 157.978168][ T8325] netlink: 'syz.3.664': attribute type 5 has an invalid length. [ 158.083610][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 158.180647][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 158.573976][ T8356] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 158.798147][ T8364] netlink: 68 bytes leftover after parsing attributes in process `syz.1.673'. [ 158.840465][ T8364] bridge_slave_1: left allmulticast mode [ 158.875479][ T8364] bridge_slave_1: left promiscuous mode [ 158.884201][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.908409][ T8364] bridge_slave_0: left allmulticast mode [ 158.936495][ T8364] bridge_slave_0: left promiscuous mode [ 158.937452][ T8371] IPVS: Scheduler module ip_vs_sip not found [ 158.942769][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.043521][ T8385] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 159.051339][ T8385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.196896][ T8384] team0: Cannot enslave team device to itself [ 159.489189][ T8397] vlan2: entered allmulticast mode [ 159.505314][ T8397] hsr0: entered allmulticast mode [ 159.513467][ T8397] hsr_slave_0: entered allmulticast mode [ 159.531600][ T8397] hsr_slave_1: entered allmulticast mode [ 159.557068][ T8410] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 159.582694][ T8410] netlink: 'syz.1.679': attribute type 4 has an invalid length. [ 159.990410][ T8417] veth3: entered allmulticast mode [ 160.583844][ T8456] tipc: Can't bind to reserved service type 0 [ 160.675368][ T8464] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.872117][ T8478] __nla_validate_parse: 10 callbacks suppressed [ 160.872138][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 160.897156][ T8477] netlink: 'syz.4.699': attribute type 10 has an invalid length. [ 161.073651][ T8482] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 161.390238][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 161.427257][ T8504] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 161.830732][ T8519] tipc: Enabled bearer , priority 0 [ 161.877301][ T8519] syzkaller0: entered promiscuous mode [ 161.892916][ T8519] syzkaller0: entered allmulticast mode [ 161.958954][ T8527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.709'. [ 162.009163][ T8527] tipc: Invalid UDP bearer configuration [ 162.009371][ T8527] tipc: Enabling of bearer rejected, failed to enable media [ 162.638578][ T8533] tipc: Resetting bearer [ 162.751494][ T8526] netlink: 72 bytes leftover after parsing attributes in process `syz.0.710'. [ 162.796755][ T8512] tipc: Resetting bearer [ 162.909831][ T8560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.923041][ T8512] tipc: Disabling bearer [ 163.066797][ T8562] tipc: Enabled bearer , priority 0 [ 163.185375][ T8565] syzkaller0: entered promiscuous mode [ 163.223274][ T8565] syzkaller0: entered allmulticast mode [ 163.270037][ T8561] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 163.310467][ T8557] tipc: Resetting bearer [ 163.359849][ T8557] tipc: Disabling bearer [ 163.378852][ T8573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.719'. [ 163.390922][ T8573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.719'. [ 163.486933][ T8586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.723'. [ 163.499626][ T8586] netlink: 'syz.2.723': attribute type 1 has an invalid length. [ 163.657107][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 163.757880][ T8600] IPVS: length: 157 != 24 [ 163.847024][ T8602] netlink: 36 bytes leftover after parsing attributes in process `syz.3.728'. [ 164.188080][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 164.253504][ T8628] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 164.260922][ T8628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.379466][ T8631] netlink: 'syz.1.740': attribute type 4 has an invalid length. [ 164.448037][ T8631] `: renamed from bond0 (while UP) [ 164.510412][ T8637] tipc: Enabling of bearer rejected, media not registered [ 164.830596][ T8654] wg1 speed is unknown, defaulting to 1000 [ 164.907131][ T8655] wg1 speed is unknown, defaulting to 1000 [ 165.997964][ T8723] [ 166.000372][ T8723] ===================================== [ 166.006023][ T8723] WARNING: bad unlock balance detected! [ 166.011626][ T8723] syzkaller #0 Not tainted [ 166.016144][ T8723] ------------------------------------- [ 166.021710][ T8723] syz.1.767/8723 is trying to release lock (&sighand->siglock) at: [ 166.029705][ T8723] [] copy_process+0x2793/0x3c00 [ 166.036141][ T8723] but there are no more locks to release! [ 166.041961][ T8723] [ 166.041961][ T8723] other info that might help us debug this: [ 166.050133][ T8723] 1 lock held by syz.1.767/8723: [ 166.055183][ T8723] #0: ffffffff8e171810 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x212a/0x3c00 [ 166.065661][ T8723] [ 166.065661][ T8723] stack backtrace: [ 166.071591][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.1.767 Not tainted syzkaller #0 PREEMPT(full) [ 166.071612][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.071623][ T8723] Call Trace: [ 166.071631][ T8723] [ 166.071640][ T8723] dump_stack_lvl+0x189/0x250 [ 166.071666][ T8723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.071685][ T8723] ? __pfx__printk+0x10/0x10 [ 166.071714][ T8723] ? copy_process+0x2793/0x3c00 [ 166.071732][ T8723] print_unlock_imbalance_bug+0xdc/0xf0 [ 166.071751][ T8723] lock_release+0x269/0x3e0 [ 166.071777][ T8723] ? copy_process+0x2793/0x3c00 [ 166.071801][ T8723] _raw_spin_unlock+0x16/0x50 [ 166.071817][ T8723] copy_process+0x2793/0x3c00 [ 166.071842][ T8723] ? copy_process+0x97f/0x3c00 [ 166.071862][ T8723] ? __pfx_copy_process+0x10/0x10 [ 166.071885][ T8723] kernel_clone+0x21e/0x840 [ 166.071907][ T8723] ? __pfx_kernel_clone+0x10/0x10 [ 166.071929][ T8723] ? __lock_acquire+0xab9/0xd20 [ 166.071958][ T8723] __se_sys_clone3+0x256/0x2d0 [ 166.071978][ T8723] ? __might_fault+0xb0/0x130 [ 166.072003][ T8723] ? __pfx___se_sys_clone3+0x10/0x10 [ 166.072031][ T8723] ? _copy_to_user+0x8a/0xb0 [ 166.072061][ T8723] ? do_user_addr_fault+0xc8a/0x1390 [ 166.072090][ T8723] ? do_syscall_64+0xbe/0x3b0 [ 166.072114][ T8723] do_syscall_64+0xfa/0x3b0 [ 166.072135][ T8723] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.072155][ T8723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.072175][ T8723] ? clear_bhb_loop+0x60/0xb0 [ 166.072197][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.072217][ T8723] RIP: 0033:0x7f19b01c3609 [ 166.072237][ T8723] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 166.072252][ T8723] RSP: 002b:00007ffe9aa81fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 166.072275][ T8723] RAX: ffffffffffffffda RBX: 00007f19b01459f0 RCX: 00007f19b01c3609 [ 166.072289][ T8723] RDX: 00007f19b01459f0 RSI: 0000000000000058 RDI: 00007ffe9aa82010 [ 166.072300][ T8723] RBP: 00007f19b11126c0 R08: 00007f19b11126c0 R09: 00007ffe9aa820f7 [ 166.072312][ T8723] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 166.072323][ T8723] R13: 000000000000004d R14: 00007ffe9aa82010 R15: 00007ffe9aa820f8 [ 166.072342][ T8723] [ 166.307494][ T8720] __nla_validate_parse: 11 callbacks suppressed [ 166.307519][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'. [ 166.322632][ T8723] ------------[ cut here ]------------ [ 166.328258][ T8723] pvqspinlock: lock 0xffff88802da81280 has corrupted value 0x0! [ 166.357224][ T8723] WARNING: CPU: 0 PID: 8723 at kernel/locking/qspinlock_paravirt.h:506 __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 166.370382][ T8723] Modules linked in: [ 166.375025][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.1.767 Not tainted syzkaller #0 PREEMPT(full) [ 166.385042][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.395764][ T8723] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 166.403139][ T8723] Code: 58 06 a6 f6 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 93 00 00 00 8b 13 48 c7 c7 00 0c 8b 8b 48 89 de e8 d3 21 06 f6 90 <0f> 0b 90 90 eb 95 48 c7 c7 90 c5 00 8e 4c 89 f6 4c 89 fa e8 0a af [ 166.423882][ T8723] RSP: 0018:ffffc90002f478c0 EFLAGS: 00010246 [ 166.430008][ T8723] RAX: 895757a8fb9dfc00 RBX: ffff88802da81280 RCX: ffff88807d3d9e00 [ 166.438564][ T8723] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 166.447010][ T8723] RBP: 1ffff11005b50251 R08: 0000000000000003 R09: 0000000000000004 [ 166.455347][ T8723] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000 [ 166.463564][ T8723] R13: dffffc0000000000 R14: ffff88802da81290 R15: ffff88802da81288 [ 166.472372][ T8723] FS: 0000555590ef7500(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 166.482643][ T8723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.489300][ T8723] CR2: 0000555570c895c8 CR3: 00000000325c2000 CR4: 00000000003526f0 [ 166.497900][ T8723] Call Trace: [ 166.501323][ T8723] [ 166.504755][ T8723] __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 166.512772][ T8723] .slowpath+0x9/0x18 [ 166.516833][ T8723] do_raw_spin_unlock+0x122/0x240 [ 166.521886][ T8723] _raw_spin_unlock+0x1e/0x50 [ 166.526801][ T8723] copy_process+0x2793/0x3c00 [ 166.531523][ T8723] ? copy_process+0x97f/0x3c00 [ 166.536544][ T8723] ? __pfx_copy_process+0x10/0x10 [ 166.542430][ T8723] kernel_clone+0x21e/0x840 [ 166.547081][ T8723] ? __pfx_kernel_clone+0x10/0x10 [ 166.552123][ T8723] ? __lock_acquire+0xab9/0xd20 [ 166.557743][ T8723] __se_sys_clone3+0x256/0x2d0 [ 166.562862][ T8723] ? __might_fault+0xb0/0x130 [ 166.567670][ T8723] ? __pfx___se_sys_clone3+0x10/0x10 [ 166.573260][ T8723] ? _copy_to_user+0x8a/0xb0 [ 166.577920][ T8723] ? do_user_addr_fault+0xc8a/0x1390 [ 166.583455][ T8723] ? do_syscall_64+0xbe/0x3b0 [ 166.588439][ T8723] do_syscall_64+0xfa/0x3b0 [ 166.593494][ T8723] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.598738][ T8723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.605445][ T8723] ? clear_bhb_loop+0x60/0xb0 [ 166.610173][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.616385][ T8723] RIP: 0033:0x7f19b01c3609 [ 166.620846][ T8723] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 166.640787][ T8723] RSP: 002b:00007ffe9aa81fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 166.649458][ T8723] RAX: ffffffffffffffda RBX: 00007f19b01459f0 RCX: 00007f19b01c3609 [ 166.657867][ T8723] RDX: 00007f19b01459f0 RSI: 0000000000000058 RDI: 00007ffe9aa82010 [ 166.666336][ T8723] RBP: 00007f19b11126c0 R08: 00007f19b11126c0 R09: 00007ffe9aa820f7 [ 166.674570][ T8723] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 166.682750][ T8723] R13: 000000000000004d R14: 00007ffe9aa82010 R15: 00007ffe9aa820f8 [ 166.691012][ T8723] [ 166.694393][ T8723] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.701811][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.1.767 Not tainted syzkaller #0 PREEMPT(full) [ 166.711033][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.721105][ T8723] Call Trace: [ 166.724400][ T8723] [ 166.727401][ T8723] dump_stack_lvl+0x99/0x250 [ 166.732018][ T8723] ? __asan_memcpy+0x40/0x70 [ 166.736715][ T8723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.741935][ T8723] ? __pfx__printk+0x10/0x10 [ 166.746669][ T8723] vpanic+0x281/0x750 [ 166.750719][ T8723] ? __pfx__printk+0x10/0x10 [ 166.755350][ T8723] ? __pfx_vpanic+0x10/0x10 [ 166.759871][ T8723] ? is_bpf_text_address+0x26/0x2b0 [ 166.765298][ T8723] panic+0xb9/0xc0 [ 166.769056][ T8723] ? __pfx_panic+0x10/0x10 [ 166.773727][ T8723] __warn+0x31b/0x4b0 [ 166.777743][ T8723] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 166.784210][ T8723] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 166.790817][ T8723] report_bug+0x2be/0x4f0 [ 166.795177][ T8723] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 166.801961][ T8723] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 166.808482][ T8723] ? __pv_queued_spin_unlock_slowpath+0x200/0x2a0 [ 166.814920][ T8723] handle_bug+0x84/0x160 [ 166.819194][ T8723] exc_invalid_op+0x1a/0x50 [ 166.823721][ T8723] asm_exc_invalid_op+0x1a/0x20 [ 166.828580][ T8723] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 166.835638][ T8723] Code: 58 06 a6 f6 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 93 00 00 00 8b 13 48 c7 c7 00 0c 8b 8b 48 89 de e8 d3 21 06 f6 90 <0f> 0b 90 90 eb 95 48 c7 c7 90 c5 00 8e 4c 89 f6 4c 89 fa e8 0a af [ 166.855345][ T8723] RSP: 0018:ffffc90002f478c0 EFLAGS: 00010246 [ 166.861525][ T8723] RAX: 895757a8fb9dfc00 RBX: ffff88802da81280 RCX: ffff88807d3d9e00 [ 166.869508][ T8723] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 166.878032][ T8723] RBP: 1ffff11005b50251 R08: 0000000000000003 R09: 0000000000000004 [ 166.886111][ T8723] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000 [ 166.894119][ T8723] R13: dffffc0000000000 R14: ffff88802da81290 R15: ffff88802da81288 [ 166.902204][ T8723] __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 166.909984][ T8723] .slowpath+0x9/0x18 [ 166.914005][ T8723] do_raw_spin_unlock+0x122/0x240 [ 166.919150][ T8723] _raw_spin_unlock+0x1e/0x50 [ 166.924103][ T8723] copy_process+0x2793/0x3c00 [ 166.928935][ T8723] ? copy_process+0x97f/0x3c00 [ 166.934060][ T8723] ? __pfx_copy_process+0x10/0x10 [ 166.939101][ T8723] kernel_clone+0x21e/0x840 [ 166.943622][ T8723] ? __pfx_kernel_clone+0x10/0x10 [ 166.948676][ T8723] ? __lock_acquire+0xab9/0xd20 [ 166.953554][ T8723] __se_sys_clone3+0x256/0x2d0 [ 166.958422][ T8723] ? __might_fault+0xb0/0x130 [ 166.963205][ T8723] ? __pfx___se_sys_clone3+0x10/0x10 [ 166.968600][ T8723] ? _copy_to_user+0x8a/0xb0 [ 166.973222][ T8723] ? do_user_addr_fault+0xc8a/0x1390 [ 166.978563][ T8723] ? do_syscall_64+0xbe/0x3b0 [ 166.983258][ T8723] do_syscall_64+0xfa/0x3b0 [ 166.987774][ T8723] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.993068][ T8723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.999371][ T8723] ? clear_bhb_loop+0x60/0xb0 [ 167.004062][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.009980][ T8723] RIP: 0033:0x7f19b01c3609 [ 167.014416][ T8723] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 167.034253][ T8723] RSP: 002b:00007ffe9aa81fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 167.042797][ T8723] RAX: ffffffffffffffda RBX: 00007f19b01459f0 RCX: 00007f19b01c3609 [ 167.050877][ T8723] RDX: 00007f19b01459f0 RSI: 0000000000000058 RDI: 00007ffe9aa82010 [ 167.059041][ T8723] RBP: 00007f19b11126c0 R08: 00007f19b11126c0 R09: 00007ffe9aa820f7 [ 167.067117][ T8723] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 167.075290][ T8723] R13: 000000000000004d R14: 00007ffe9aa82010 R15: 00007ffe9aa820f8 [ 167.083416][ T8723] [ 167.086962][ T8723] Kernel Offset: disabled [ 167.091409][ T8723] Rebooting in 86400 seconds..