last executing test programs: 11m53.610810137s ago: executing program 4 (id=2782): r0 = socket$pppoe(0x18, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@phonet={0x23, 0xf0, 0x2a, 0x8}, 0x80) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'gretap0\x00', r1, 0x1, 0x1, 0xfd7, 0x7fffffff, {{0x21, 0x4, 0x3, 0x20, 0x84, 0x65, 0x0, 0x10, 0x29, 0x0, @private=0xa010101, @remote, {[@ssrr={0x89, 0x7, 0x4f, [@broadcast]}, @timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x8, [{@broadcast, 0x4}, {@multicast1, 0xe}, {@private=0xa010102}]}, @noop, @timestamp={0x44, 0x18, 0xf4, 0x0, 0xe, [0x80000001, 0x8, 0x40, 0x587f, 0xe]}, @timestamp_addr={0x44, 0x34, 0xe9, 0x1, 0x5, [{@multicast1, 0x4}, {@private=0xa010101, 0xaa70}, {@remote, 0x5}, {@rand_addr=0x64010102}, {@private=0xa010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r3, 0x40106e80, &(0x7f0000000200)={0xff}) syz_emit_ethernet(0x56, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@canfd={0xd, {{0x3, 0x1}, 0xb, 0x0, 0x0, 0x0, "789563ce2c360c3ef137425cf5569de9712dde876d8b9f9fa3019863515331f51ecd53cd525c40c1fe2e6dce4c4bacec4494ba745f64a01a9aa906a3dc3ea0c9"}}}}, &(0x7f00000002c0)={0x0, 0x2, [0xf69, 0x3df, 0x737, 0xfbb]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r5, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf, 0x60}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x700, 0x40, 0x2, 0x5, {{0x26, 0x4, 0x2, 0x1, 0x98, 0x67, 0x0, 0xa1, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@cipso={0x86, 0x11, 0x0, [{0x5, 0xb, "e374a682c27ac852a8"}]}, @rr={0x7, 0x7, 0x9c, [@broadcast]}, @lsrr={0x83, 0x7, 0x12, [@remote]}, @lsrr={0x83, 0x7, 0x98, [@remote]}, @generic={0x88, 0x4, '`a'}, @end, @noop, @noop, @timestamp_prespec={0x44, 0x54, 0x9c, 0x3, 0x9, [{@remote, 0x2}, {@multicast2, 0xa533}, {@private=0xa010101, 0x6}, {@empty, 0x3}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x511}, {@remote, 0xffffb451}, {@loopback, 0x8}, {@private=0xa010100, 0xffff}]}]}}}}}) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r7, &(0x7f0000000580)="a7357659ade4b7b6a3dbeab4e5bdd4a9dfbb085d10033db716e74f23c38fab8ff4916d6f28e89e1e1385280b14c07ac8764d92df2a4d0e305b5c6d773b6449ca35339d529d950bb29b3a0a42d365da1cf7d7654bcdb27b0496f0b397b904d7bda9451c5204f9590d58fdfe252d634caa242e8bdc54ad1f10f1d70072e47b0a3ad27a3d93c5d5a0bd46fdc7fa0be43b7ffb2db750a3695daa66184c9b3c6ef724df6cf01653140a8fef30cc39e51295ff5fa99dc619ee27", 0xb7, 0x8804, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x3c35}, 0x1c) connect$inet(r6, &(0x7f0000000680)={0x2, 0x4e20, @private=0xa010102}, 0x10) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$rds(0x15, 0x5, 0x0) r11 = socket$inet6(0xa, 0x6, 0xfff) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000700)={0xffffffffffffffff, 0x1, 0xa, 0x0, 0x4}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x808) r13 = openat$cgroup_pressure(r8, &(0x7f00000008c0)='memory.pressure\x00', 0x2, 0x0) splice(r9, &(0x7f0000000880)=0x2, r13, &(0x7f0000000900)=0xf, 0x30, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r14 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r14, 0x29, 0xd4, &(0x7f0000000940), 0x4) write(r13, &(0x7f0000000980)="03f8a789b9d8774a6d83dbcfa0adb603d46fd37be0140565ad8b886df3f5916696df", 0x22) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f0000000a00)={0x3, 0x1}) 11m53.352561823s ago: executing program 4 (id=2785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x54, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x1a0, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xc8, 0x7, 0x1, 0x0, "f0a3fabd669da86d98bc7eef5dd36f9ae4fe42b570a535e42ca3821ff0e2912775b1109d78469e8203a8bd861841c04a377676243e9edea8fdb2a9185e4c4a47fa2471bea616085cd6504074224636a22893c022ec0388cc85718a56546b54bc6f422fc5ef1c0d0a19ecf2f7ab0c36f57d64cb5864bcbb494cac0b675b674d506c54167fd1e4863665906d93beea2b6e146f60a05f5c7e11102da1189db834f20f784769474886e42d3287ffb49f147781d7d62d8bd1e8a95c4d7244310093c5b3ff6a1c"}, @NFTA_RULE_EXPRESSIONS={0xb8, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc}]}}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x6}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x2020000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xf, 0x0, 0x68, @mcast2, @mcast2={0xff, 0x5}, 0x40, 0x40, 0xe3e1, 0xd00}}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000009500000000000000f9f45cfd094bd6206c31b4307aa4fba1c0769fb4eefa1afc8b2661ca544f096b7e30a6619ce02eeaacf3781b4fa278d3a24d1b4eb2ab8d96c26d93771499ccf565a45e49e2a468f7effeb171f693e7080092be96a98554c822ee32d5b6123edb23"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket(0x2b, 0x6, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x1}, 0x1c) 11m50.443943023s ago: executing program 4 (id=2789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000700000000000000000000008500000027000000850000000700000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 11m49.699470643s ago: executing program 4 (id=2796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110"], 0x28}, 0x4004004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000e00)=ANY=[], 0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="b85c0e00", @ANYRES16=r3, @ANYBLOB="080026bd7000fcdbdf2506000000280001800800030001000000140002007663616e30000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="2000018008000100", @ANYRES32=r8, @ANYBLOB="1400020073797a5f74756e0000000000000000005c00018008000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000100", @ANYRES32=r8, @ANYBLOB="0800030000000000140002006970766c616e300000000000000000000800030000000000080003000100000014000200766c616e3000"/64], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x24040854) connect$802154_dgram(r10, &(0x7f0000000200)={0x2, @long}, 0x8) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000400)=@ethtool_channels={0x3d, 0x2, 0x5, 0x6, 0x0, 0x4611dc44, 0x6, 0x5}}) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r12) ioctl$SIOCSIFHWADDR(r12, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x7, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x8, 0x2}, {0x6, 0x2}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5}}]}, {0x0, [0x30, 0x0, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000c00)=""/59, 0x7b, 0x3b, 0x1, 0xe0000000, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff87f, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1ff}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1000000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000780)='GPL\x00', 0x6, 0xf8, &(0x7f0000000a80)=""/248, 0x40f00, 0x15, '\x00', r4, 0x17, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2715b, r1, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, r11, 0x14, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 11m48.7613976s ago: executing program 4 (id=2800): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x1e, 0x1, 0x0) (async) r1 = socket$kcm(0x1e, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000140), 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f00000000c0)=0x3, 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f00000000c0)=0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x10020, 0x0, 0x0) (async) recvfrom$inet6(r4, 0x0, 0x0, 0x10020, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f00000000c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000040)) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r7 = socket$inet(0x2, 0x3, 0x9) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r7, 0x4010942a, &(0x7f0000000180)={0x0, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) 11m48.300152374s ago: executing program 4 (id=2805): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x100}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000001180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x12}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xcb8b9875f3a153f6) bind$rxrpc(r4, &(0x7f00000001c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x8, @loopback, 0xc36b}}, 0x24) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100), 0x10) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448d788dd965f7a33121800", 0x0, 0xfffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 11m33.169858784s ago: executing program 32 (id=2805): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x100}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000001180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x12}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xcb8b9875f3a153f6) bind$rxrpc(r4, &(0x7f00000001c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x8, @loopback, 0xc36b}}, 0x24) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100), 0x10) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448d788dd965f7a33121800", 0x0, 0xfffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 10m45.197266897s ago: executing program 2 (id=3006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001140)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r4, 0x311, 0x70bd26, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20040140) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf251000000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="aefab2da776db84bd845e272db0abb4d86c811b449043fddb51e92fc04240b01d236c05d905ea0684f0255e593d9dc574f2b9a92a0cc8ac0b4193c42d3"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x48050) 10m45.043984533s ago: executing program 2 (id=3007): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r2, 0x1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, 0x0, 0x2d, 0x10, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x220, 0x258, 0x258, 0x220, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [0x0, 0x0, 0xffffff00], 'dvmrp1\x00', 'macvlan1\x00', {}, {0xff}, 0x73, 0xe}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x3}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x20}, {0x0, 0x20}, 0x14}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x350) 10m44.604826908s ago: executing program 2 (id=3008): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="aa000000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fcdbdf25170000000c00098008000100000000007c000280080002000004000008000100001000002c000380080001002900000008000100020000000800010005000000080001009009000008000100ff03000008000200010000000800020001000000240003800800020006000000080001000900000008000200020000000800010005000000080002000c000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40801) bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) sendfile(0xffffffffffffffff, r5, 0x0, 0xffffffff000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1a0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x153, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb4, 0x2}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @tim={0x5, 0x4c, {0x0, 0xb2, 0x8, "c6a0d6513754541def80f3a3c44db4bddd413751be79af13f335a1b5150c3fefcd99fad1fa24d0a87e2c9e9d01f1b994bdbc186149e2c8bf791133151451b23fee67d7adbe192d9c86"}}, @tim={0x5, 0xb9, {0x7, 0x65, 0x4, "00041fd5cd8a83779359c67c14922ec0aae98c9009b93f0d1b85155a0a7db286af63963ba50118616ab7e34accc75cd3982856c827dba97e580aa3c1b272aa0866561741d78def1fe0b1900d31e9a0a943532f4486791f0d94b16ceef7aa83e0729f531c56f3852e51dedb126267f7f5c66dc02594f0115a0fae8987cee246999f44f54198daf58ef03c62e8a9f6b224bea8e68f283c77e6c3ce7d31c1021c45b827f8c45ac73e815a4e7cbb6bdcc3abb54109b6f8fb"}}, @rann={0x7e, 0x15, {{0x0, 0x33}, 0x40, 0x0, @device_b, 0x401, 0x80000000, 0xffffffff}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x6, @device_b, 0x59, @value=@device_b, 0xffffff80, 0xffffe386, @device_a, 0x7}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ba7d04829254"}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x400c011}, 0x24000000) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3c, 0x1, 0x4, 0x6dd1, 0x4000212a, 0x40000004, 0x6, 0x2, 0x1}}) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 10m43.833288425s ago: executing program 2 (id=3009): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty, 0x9}}, 0x5c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r7, 0x331, 0x1, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000100)=0xa, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x11, r3, 0x100000000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x201, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5d8c9978}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 10m43.152945477s ago: executing program 2 (id=3011): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x1, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x108) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 10m43.031759207s ago: executing program 2 (id=3012): r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @private1}}]}, 0x190) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 10m27.879256003s ago: executing program 33 (id=3012): r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @private1}}]}, 0x190) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 7m25.002991233s ago: executing program 0 (id=3783): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000200000000000000084000000080000002000000000000000000000002000000000000000840000000800000000000000000000000000fffffed20100000000003e8034934d8c2f6425ff2626b745193b09e0a00841a4ef7fd6f4745c44756d233b8640aee1ebd35d6becac959e7581218d6659ab8bb95a5ef870682b35e1aa09de8a35640b40b768fa"], 0x58, 0x4855}, 0x24000052) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@initdev}}, {{}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) 7m24.700960886s ago: executing program 0 (id=3785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) sendmsg(r0, &(0x7f0000003580)={&(0x7f0000000140)=@ethernet={0x306, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="cc1cb9bd655d0e9a3906d1e039c4ddf6c49c7414086d2e359138b930b54171c7487a0e095ab09a27d82a0bcc6364c226878433263801a7b1676914f4177e1b33ef8035d5ae46b725c9977236ccc842c7713c3aabf2a8655667a82b13fce252447fb7d7b860dd2f5365a3683e830eaf52ce9d44c087c8fe1c42abd733803a6f35652cc923f00b533db2f2cbb63812b43d8a9ff8c41926fd08467b8dc0ede068343b69b4fb9a9c7d961bae0b70e5ca8c2690b78945da8952c9", 0xb8}], 0x1, &(0x7f0000001240)=[{0x1010, 0x115, 0x6, "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"}, {0x70, 0x29, 0x4, "a72ccd478fc120b240b5ad4795c7686b28caf63fe09ff772bee2ee5fae40d386639778182cc85a686487af9d83dfaa765cc5b0f30b2a199e2b8738d9af99738123f624ab1b68804e92074a94c1708ed303f9144bea04c8af359b09927c18"}, {0x1010, 0x110, 0x8, "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"}, {0xf8, 0x117, 0x9, "60e4baa6911c00049d803f001f640e5520dd435cfad161db15decd91ce64f4f1a528820e13c7ada1ccae05c122212d96b3e71ce1058ae464da38343d2f4f29f1fd0e216b3664812f448104db367c91df7267275d6fb299a457907572f00778f67a2784ebc05fe55fe071f4d1f83b15ffbce0db646f4365869cc97445a380b4fd12f5d10b4afd0a86c6b0127a3f19e5dcc9c6923409c9bc71387e9f3c17abc98eae3560db878ab72a77d345158aa17f8e5b38d9fdbc9bdbc72a860077e353946b5ea983e5875fb98e1563ae60cf2f1e67e388fe070c53f4ad12799a8397a7999a486e"}, {0x28, 0x11, 0x0, "30855a1dbbca42969ffbf3f42981e72ff132699c5fd50a50"}, {0x108, 0x0, 0x6, "b78044b450f242c83ffc8103b2c1be1ee64b55b6b8db0e524ac92e430fd8f294e0694dc74343c2a3860fef79cf9beadf9e5e24722ce2bbd50e6b805dd7d04f04b1066056f7f50c3632a76c5486a34902ba4989a1228225c7aba2388692c732898714d7e049889786f6737b22a2da27caa0e0f194ebfd5318adb1052d71474f75575ac9f8063c6ee3b1a47d02a2bd423e1ddb6ef4f85708c0e5a1b8cd567afda952db73a88242ea9f95e10060080843ef9a8eaf01c8c619e78a4d429b3a5d913bf1a11d5e762aa77c083a19a8bcd1b38c98e414fb21472fa1dddc7c34ac42ba1931c387bda05e50894fbc4329484782fccf54e87372"}, {0x58, 0x10d, 0x3, "8cf6e2499d293b942e92a5936a0208642f63ad08e9c469613f497d7a13a5fb4c8fbe63daf218f399be7b086fef08f21929744663d9eb57b85c6510e5de2445940e9aacffe9c2"}], 0x2310}, 0x20008800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r3, 0x0) shutdown(r3, 0x1) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x5344b}]}}}]}, 0x40}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0xa000000d}) r5 = epoll_create1(0x0) r6 = socket(0x10, 0x1, 0x9) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 7m22.480595249s ago: executing program 0 (id=3792): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xb4, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x1, {}, [{0xa0, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xffff, 0x10000000, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0xfffffffa, 0xffffffffeffffff7, 0x0, 0x8}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x8, 0x40, 0x7, 0x6, {{0x20, 0x4, 0x1, 0x9, 0x80, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0xf, 0x9a, [@dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}]}, @rr={0x7, 0x13, 0x44, [@broadcast, @empty, @broadcast, @remote]}, @ssrr={0x89, 0x7, 0x17, [@remote]}, @ssrr={0x89, 0x7, 0x87, [@multicast2]}, @timestamp={0x44, 0x24, 0xfc, 0x0, 0xa, [0x2, 0xfffffffd, 0xfffffff9, 0x0, 0x2, 0x7, 0xfff, 0xaf7]}, @rr={0x7, 0x17, 0xcf, [@multicast1, @multicast1, @private=0xa010102, @local, @loopback]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000500)=""/4096, 0xc8, 0x1000, 0x1, 0x3d6af909}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xc, 0x859, 0x23, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20, 0x10, 0xfffff246, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x40, 0x700, 0xa9, 0x6, {{0x2d, 0x4, 0x2, 0x23, 0xb4, 0x66, 0x0, 0x8, 0x29, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x1f, 0x81, [@multicast2, @initdev={0xac, 0x1e, 0xff, 0x0}, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty]}, @cipso={0x86, 0xe, 0x3, [{0x6, 0x4, "02bd"}, {0x2, 0x4, "4efe"}]}, @ssrr={0x89, 0x13, 0xcb, [@multicast1, @remote, @loopback, @loopback]}, @cipso={0x86, 0x38, 0x1, [{0x2, 0xd, "ae9c73c1325878a5dd06df"}, {0x5, 0x9, "ed8c6c9f239638"}, {0x2, 0xf, "ae51d206b1c350ac7ada822855"}, {0x6, 0xd, "a8a244047af003491fd9e4"}]}, @timestamp_prespec={0x44, 0xc, 0xef, 0x3, 0xc, [{@local, 0x7fff}]}, @rr={0x7, 0x17, 0xb6, [@broadcast, @multicast2, @loopback, @remote, @multicast1]}, @ra={0x94, 0x4}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x73, 0x8, 0x0, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x9, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000880)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4b040012}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa4, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0xa4}}, 0x4000d) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000001740)={{r4, &(0x7f0000000080)='@\\([@\x00', 0x2000, &(0x7f0000001540)={@_ha_fsid={[0x80, 0xd20f]}, {0x100, 0x3, 0x6, 0x6}}, 0x4, &(0x7f0000001580), &(0x7f00000015c0)=0xb}, 0x2, &(0x7f0000001700)=[{0x1, 0xf5e0, &(0x7f0000001600)='\\{!\x00', &(0x7f0000001640)}, {0x1, 0x7, &(0x7f0000001680)='vlan\x00', &(0x7f00000016c0)="b159abcd6aa32ae4a21a53805a66b240c1e79e4222c1f0ceefe6dfe3834789511cdb6b0c29424ee56a234dd6dbd539", 0x2f, 0x8}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001880)={'syztnl0\x00', &(0x7f0000001800)={'gretap0\x00', r3, 0x8000, 0x8011, 0x9dd7, 0xa39e, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0xc4, 0x4, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x6b, 0x3, 0xa, [{@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000018c0)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r14, &(0x7f0000001a80)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001900)={0x110, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r17 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r17, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000017f0ffff0000000000810056000800"], 0x19) 7m17.619192098s ago: executing program 0 (id=3804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf252500000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00000800350004000000080026006c0900000a00340001010101010100000500080000000000080037000100000004000b000a"], 0x84}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001440)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514000c40080002003f00020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597f0600000000000000307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b708000000005b8ef200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r8 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2", 0x19}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r7, 0x8}, {r8, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000b00)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xfffffeef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010100000000000000000a000006140000001100010000000500000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)) 7m14.596766402s ago: executing program 0 (id=3819): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0xf0, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0xb3, 0x2, 0xd, 0x1ff}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x58, 0x91, "70f1b77dbb5f8cf7ca95bd74b0f9b1ec7eea221fb979475ac927d488b246761f1e89675deda420df41da6158d469b60519b95752cdf6a37475338918eaaaf2010d6a31fcc2bdf16f8a271e2e49195e74d681697a"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x20000014) listen(r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500e4, 0x40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8841}, 0x8000) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xbf, 0x84, 0x7, 0x17, 0x10, "e758cae9ffed00000000b24000", "39e800bd7bc0d251b0000000000000438000"}) 7m11.227485496s ago: executing program 0 (id=3830): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x2a, 0x2, 0x0) unshare(0x8000400) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x6, &(0x7f0000001240)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r3, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000850300000000ae2024f10d5b63ff6c2500ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000240)="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") socket$kcm(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000180001801400020059797a5f74756e0000000000000000000500020000010000"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x200, 0x200, 0x4}, 0x3c) pipe(&(0x7f0000000440)) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6m55.917964587s ago: executing program 34 (id=3830): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x2a, 0x2, 0x0) unshare(0x8000400) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x6, &(0x7f0000001240)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r3, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000850300000000ae2024f10d5b63ff6c2500ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000240)="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") socket$kcm(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000180001801400020059797a5f74756e0000000000000000000500020000010000"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x200, 0x200, 0x4}, 0x3c) pipe(&(0x7f0000000440)) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m43.617284881s ago: executing program 6 (id=4764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000240), 0x0}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) unshare(0x22020600) setsockopt$sock_attach_bpf(r3, 0x10f, 0x8a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f05a810000020001280080001006774700014000280080003000100000008000200dd54094f043ff761d192c16ee61bd54333c2af809cc5f3429791ff5cbb8ec4b2551fbef19a1a82c057d546840ca677d663323c1f31052362a3f71fd223f4bac660f26d8083217ef0afedde1d03b61c32aa0c55e09d4ac79ea38119b641fb061d6669534262926f882bbe6d0f5552ffb4e9f7c0ac1e2000b872d39269fcf09bef48c58703eab7664b64beaa52f7c1c0aa266d5178acdaeb", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000000c0)=0x7, 0x4) 3m43.367488411s ago: executing program 6 (id=4766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000004000000000000009eaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000c081b72de382b73085000000b7080000000000807b5af8ff00000000bfa200e8ffffff0007020000f8ffffffb70300000801e6ffffffffffffff000085000000870000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x308}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 3m43.029114878s ago: executing program 6 (id=4771): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x0, 'vxcan1\x00', 0x1}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r4) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x43}, 0x2}}, 0x10) 3m42.75694562s ago: executing program 6 (id=4773): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = socket(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) (async) unshare(0x22020400) (async) pread64(r2, 0x0, 0x0, 0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x4) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = socket$kcm(0x11, 0xa, 0x300) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x6, 0x3b1b, 0x7, 0x9, 0x9}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000300)={r8, 0x8, 0x10}, &(0x7f0000000380)=0xc) (async) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2, 0x2}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r10, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 3m42.541126868s ago: executing program 6 (id=4777): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002"], 0x1c) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000800)={&(0x7f0000000380), 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x48080}, 0x41) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x6, @private2, 0x2}]}, &(0x7f0000000180)=0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x762, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) 3m41.384482916s ago: executing program 6 (id=4788): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x4a, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000060c0)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x800, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000002740)=[@flowinfo={{0x14, 0x29, 0xb, 0xdfac}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1e, 0x10001, @l2={'eth', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x404c000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fe1f7b2b94a100d}}, {{&(0x7f0000000080)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x40008004) sendmmsg$alg(r6, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) 3m26.133026702s ago: executing program 35 (id=4788): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x4a, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000060c0)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x800, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000002740)=[@flowinfo={{0x14, 0x29, 0xb, 0xdfac}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1e, 0x10001, @l2={'eth', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x404c000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fe1f7b2b94a100d}}, {{&(0x7f0000000080)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x40008004) sendmmsg$alg(r6, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) 2m27.789181589s ago: executing program 5 (id=5038): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004", @ANYBLOB="46bf4249737fb2e755124a5ce33ff36680e3700064093f9db2c63778f12248609511373bd7cfdd7cc298b553a7f223754af03c36900b8f2a19c118d222d7da4a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x1, 0x9, 0x73766ea5}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r0, 0x0, 0x1000, 0x44, &(0x7f0000000780)="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", &(0x7f0000001780)=""/68, 0x3, 0x0, 0x7d, 0xf6, &(0x7f0000001800)="15fc9608cce2ec26628d2e7137963a253eed3d9a25c107ddca497f8c4d19449c6bf55ce6e3ee10b686ee3697b2a45925a7063de3a90ad9c246c3bf37edeb5961723ba17a33f35bcd3cc4637aa0abca7d9c485fdd4bed896e310652184c68206d991c398edfe2cbaf9891b1f596f477c10dcc3972540d151ab10a107faf", &(0x7f0000001880)="5cdbe1723a304e546d5a6df5e9e72132879dfa0654fd74d7b55bc01f018d9355e3808b06d31172ddbd86f5812348929d90f265a241b4fa719fc38697ca857f8e9163f504b9e228b865933269dfa53b93400af5d0cf42da7b5355b5bcc15e36dce6188a57eb30fe16c7e4dd9e1203467ab9b655829f8764118bf92c92a663424bc0e6fe5d6a7129651f3463fed1671922b599bafd25458a593fdd7a3d9d1c14cb98696912d5a8b8e4c20d8582d1d97c204de76c8d79f55a8da8f465feb8d71575db66351bce0b6c33d02d13f7265b8ac265b6d50c678834b2a8553252a605cb9e403a3742f175778400d90ba721351b13dd73ed43a67e", 0x1, 0x0, 0x2}, 0x50) 2m27.50533121s ago: executing program 5 (id=5042): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000000)='@.-\x00', 0x80, &(0x7f0000000040)={@_ha_fsid={[0xc, 0x7]}, {0x3, 0x2, 0x2d1, 0x9}}, 0xffffae67, &(0x7f0000000080), &(0x7f00000000c0)=0x300}, 0x2, &(0x7f0000000200)=[{0x3, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)="792db1dd09fd6b11c738156b13dd4cc8b8af87efab29588fab6163372c1025d541c89f3d4a47fa553b58", 0x2a, 0x8}, {0x3, 0x9, &(0x7f0000000180)='$\x00', &(0x7f00000001c0)="706d7f68619e61c2e42e2d27296e30c6df4a436e8f5f687ca159564b0c305a8376114c3455ad4fa535", 0x29, 0x10}]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x37a7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008800}, 0x8000) r2 = socket(0x2b, 0x1, 0x1) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000400)={@rand_addr, 0x0}, &(0x7f0000000440)=0x14) pipe(&(0x7f0000000480)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff, '\x00', r3, r4, 0x0, 0x5, 0x5}, 0x50) setsockopt$inet_opts(r2, 0x0, 0x480, 0x0, 0x0) 2m27.405878948s ago: executing program 5 (id=5043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0xd, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44008040}, 0x40008d2) 2m27.168452412s ago: executing program 5 (id=5047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbfa}, 0x1c}, 0x1, 0x0, 0x0, 0xc851}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socketpair(0x22, 0x3, 0xfffff7ef, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@ipmr_delroute={0x38, 0x19, 0x800, 0x70bd25, 0x25dfdbfc, {0x80, 0x14, 0x80, 0x5, 0xfd, 0x1, 0xc8, 0x8, 0x800}, [@RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0xff}}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r2) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x800) 2m26.784467434s ago: executing program 5 (id=5051): openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28c1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400482, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x688408f618821390, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x0) close(0x3) 2m26.42817639s ago: executing program 5 (id=5054): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000600), 0x63) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "dc00", "6a3a05b9", "12772d41f8eb02bb"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r2, 0x0, 0xffffffff004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x4) socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r9, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a3ddbd7000000000000d000000080003002a"], 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700070000002b0006004b6f003c00660000401190780a010102ac14141400067fd2ca4795463fd9e49854a38907f1ac1e00010000004e204e220010907842020000000000003f0a04e84ee8a130913d3e6b6e9d4bc09ad91262b35fbf5bd517a16da49478cbabd6c4a4b9bd4603310e867440dc"], 0x46) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 2m11.20152975s ago: executing program 36 (id=5054): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000600), 0x63) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "dc00", "6a3a05b9", "12772d41f8eb02bb"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r2, 0x0, 0xffffffff004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x4) socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r9, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a3ddbd7000000000000d000000080003002a"], 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700070000002b0006004b6f003c00660000401190780a010102ac14141400067fd2ca4795463fd9e49854a38907f1ac1e00010000004e204e220010907842020000000000003f0a04e84ee8a130913d3e6b6e9d4bc09ad91262b35fbf5bd517a16da49478cbabd6c4a4b9bd4603310e867440dc"], 0x46) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 27.425411479s ago: executing program 9 (id=5721): syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x48, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x5c, 0x3, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x90}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3b, 0x0, 0x9, 0x1, 0x0, 0x19, 0x65}], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x9, 0x0, 0x0, {[@mptcp=@generic={0xae, 0x2}]}}}}}}}}, 0x0) 27.027926539s ago: executing program 9 (id=5725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = socket$unix(0x1, 0x2, 0x0) accept(r2, &(0x7f0000000100)=@un=@abs, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002"], 0x128}, 0x1, 0x0, 0x0, 0x4004091}, 0x0) 26.438143821s ago: executing program 9 (id=5728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000074fa46d5fc867486086e8ef7e33120b3a9a3c7bd999497b2545f62201036dcdb890ae3f1e8d00000000000000000", @ANYRES16=r1, @ANYBLOB="05001000000000000000060000000800050002000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d728af7855f840facd2f53", @ANYRES16=r1, @ANYBLOB="05f858a60aa00000ffffffe600000000006f562da1c3", @ANYRES32=0x0, @ANYBLOB="0a003400020202020202000014002a0075080000050002002d001001de1001090800350007000000080026006c090000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000080)=0xb1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006120202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7ffe}, @random="43b6b0148103", @device_a, @device_b, {0x7, 0xff4}, "", @value={0xd, 0x0, 0x2, 0x0, 0xaa}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x339) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x21, '\x00', 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) recvmsg$kcm(r3, &(0x7f0000002d80)={&(0x7f0000000b00)=@can, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/13, 0xd}, {&(0x7f0000002ac0)=""/45, 0x2d}, {&(0x7f0000002b00)=""/104, 0x68}, {&(0x7f0000002b80)=""/162, 0xa2}, {&(0x7f0000002c40)=""/113, 0x71}], 0x6, &(0x7f0000002d40)}, 0x40000002) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c20000020180c200000086dd6000cd0402203afffe8000000000000000000000000000bbff02000000000000000000000000000186009078005a010000000000000000000e0aa78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000000000000000000000000218fe906d26efe39393fe08f73eabc597af1290a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"], 0x0) recvmmsg$unix(r3, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000280)={0x77359400}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r4, 0xcb}, 0x8) nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f0000000480)) 24.443232029s ago: executing program 9 (id=5736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x68, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1408}, @ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "ecda2df62eebe9f8333703ecd0c9304a1c7753cb89572ef6c8ca76b069e16de9c2ed97fe5b3b63e9597163e166ab1a0702156786b0a342dc18e1c4b447dda1284cb988dc15be8358"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xe}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40045}, 0x24004800) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x68, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1408}, @ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "ecda2df62eebe9f8333703ecd0c9304a1c7753cb89572ef6c8ca76b069e16de9c2ed97fe5b3b63e9597163e166ab1a0702156786b0a342dc18e1c4b447dda1284cb988dc15be8358"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xe}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40045}, 0x24004800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x8}, [@generic={0x2c, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x8}, [@generic={0x2c, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x98, 0x1000000}) 24.135665629s ago: executing program 9 (id=5737): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=0xffffffffffffffff], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="fdfb3ed56908059e754c07bc57c45b6ee4519ab5657baeb8f878ec03082e247a962057599292159bc7e5f364b0fb022fb1a9bb54d7b25b198db7ab36c03ed28bd29ffc0b2e1657d07d4ceb63aa7b4553b0c9dc228e8e3dc34a5be20efa36840415957b9cdb417a067385eab9", @ANYRES64=r0, @ANYBLOB="bf7f0add0041e74ed1488b3b3c1e5e6c5dd6f187a1f187a0a1a308c06e0abe1572c337442898e4a13b216f2113b4db5c981959ae0fdb36cafa1f6fe9a2cee43159087243af0a5219e202d94729f05e24e62f43ad373de8e2"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r5, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 22.120280734s ago: executing program 9 (id=5746): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) syz_emit_ethernet(0xcc, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0xba, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"28c9624ac4c776def5799525026ef73263831c67303671b02526506d68f7957aa244e929321d1642b2236994419199859b2b80e7240fe84b92ea295cffc010e65b9419b0f892a3a019761a2f67901bd50070f4a5be55f260761f0f35f401e46e0ab3ff09e0b30cee48c8b49d03205044d626151b57b834e7f22d4b6d3e45af82f2d6"}}}}}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) (async, rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) (async, rerun: 32) pipe(&(0x7f0000000440)={0xffffffffffffffff}) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) (async) splice(r9, 0x0, r10, 0x0, 0x3000, 0x100000000000000d) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000001480)=@int=0x7, 0x4) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async, rerun: 32) r13 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xb8, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8840}, 0x4000040) (async) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) vmsplice(r3, &(0x7f00000004c0), 0x0, 0xf) write(r0, 0x0, 0x0) 6.957728121s ago: executing program 37 (id=5746): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) syz_emit_ethernet(0xcc, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0xba, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"28c9624ac4c776def5799525026ef73263831c67303671b02526506d68f7957aa244e929321d1642b2236994419199859b2b80e7240fe84b92ea295cffc010e65b9419b0f892a3a019761a2f67901bd50070f4a5be55f260761f0f35f401e46e0ab3ff09e0b30cee48c8b49d03205044d626151b57b834e7f22d4b6d3e45af82f2d6"}}}}}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) (async, rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) (async, rerun: 32) pipe(&(0x7f0000000440)={0xffffffffffffffff}) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) (async) splice(r9, 0x0, r10, 0x0, 0x3000, 0x100000000000000d) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000001480)=@int=0x7, 0x4) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async, rerun: 32) r13 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xb8, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8840}, 0x4000040) (async) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) vmsplice(r3, &(0x7f00000004c0), 0x0, 0xf) write(r0, 0x0, 0x0) 3.108887646s ago: executing program 8 (id=5821): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x4, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x9, 0x9, 0x4, 0x1, 0x1}, @exit], &(0x7f0000000080)='GPL\x00', 0x23, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xb, 0x5, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x3, 0x3, 0xc, 0x6}, {0x2, 0x5, 0xb, 0x4}], 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4000003}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 3.015766444s ago: executing program 7 (id=5822): r0 = epoll_create1(0x80000) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) splice(r1, &(0x7f0000000040)=0x6, r0, &(0x7f0000000080)=0x9, 0x4, 0x2) write(r1, &(0x7f00000000c0)="30b3da29c225e6854b7f7704110d249f129b0259adba336cac1703020e18c80efa19bf715e7ed20cd6292efaefd4c77f89caa87dd3d9cc18da2d724f32f823ec6449a77a37c12e78726834b934af6d2be3cf97cfa094c7d5570d86c4d54f179b5bf8ec0e66", 0x65) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000180)={0x0, 0x0, 0x1b, r3, 0xb}, 0xc) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) socketpair(0x12450a68db43015b, 0x2, 0x3ff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000240)={@any, 0x8, 0x1, 0x1, 0x5, 0x9, "a5395a21b12e4a3526ea5b39bfe41f454b51867e15ba0c8d4e41a96eda945ec6144c7881812635a70f899ef941fadbac221a2d1799424e17bfc5b527416bf95a5ef5b1f8ec354ccf895d8f66eec2a4528907ceda79d44c159ad7c7a90b6409b62404e44ef766f2fa5ed3eccd2de8686531dcc8f68cedbdc9b29174c4da6af159"}) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000300)=0x8, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r5) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x24000040) socket$inet6_sctp(0xa, 0x4, 0x84) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x1d, r7}, 0x10, &(0x7f0000000780)={&(0x7f0000000700)={0x5, 0x880, 0x8, {r10, r11/1000+60000}, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x5, 0x3d4ed774d45ab165, 0x0, 0x0, "0027508fd08ca9b9"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x92) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, &(0x7f0000000800)={0x8, 0x3, 0x7fff, 0x3, 0x7}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x10000, @mcast2, 0x9}}}, &(0x7f0000000900)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000940)={r12, 0x2}, 0x8) connect$inet(r4, &(0x7f0000000980)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, &(0x7f0000000a40)) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000a80)='wg2\x00', 0x4) bind$qrtr(r4, &(0x7f0000000ac0)={0x2a, 0xffffffffffffffff, 0x7ffe}, 0xc) accept(0xffffffffffffffff, 0x0, &(0x7f0000000b00)) 2.924680546s ago: executing program 8 (id=5823): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x82, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.492435597s ago: executing program 7 (id=5824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005580)=@newlink={0xfc, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}, @IFLA_GROUP={0x8}, @IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_PORT_SELF={0x94, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "b15e7e43233aee04a826c0b0dd149a1c"}, @IFLA_PORT_PROFILE={0x6, 0x2, '^\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "369c5a9a0dd2b7d96330f84a4887383d"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4b9da88da32a65f682660cedcb6125c9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c1f3ff250a154af6620f07f98be8a496"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ba4b243236337be2fefcc4df308a1a84"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d2f3dd333a70c2df67a834abe785e4f8"}]}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x95}, 0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000209000004"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000005680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000e616ed7576836c56b2e09f672ece015d599ffcdbc7f73301b26edd9def6679534c6a8999693296202e93a41746d7d884730cf3c33fc139320b5502cdd04cbe07a8aaa0d56d146760e6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005540)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESDEC=r3, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000001880)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="73f405c641f0", 0x6}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @private2, 0x7a}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000200)="c285", 0x2}], 0x1}}], 0x2, 0xc010) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4089, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x6b) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmmsg(r9, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/61}, {&(0x7f0000000040)=""/37}], 0x0, &(0x7f0000000180)=""/193}}, {{&(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)=""/22}, {&(0x7f0000000340)=""/122}, {&(0x7f0000000500)=""/4096}, {&(0x7f0000001500)=""/238}, {&(0x7f0000001600)=""/17}, {&(0x7f0000001640)=""/242}, {&(0x7f0000001740)=""/171}, {&(0x7f0000001800)=""/153}, {&(0x7f00000018c0)=""/225}, {&(0x7f00000019c0)=""/44}]}, 0x8}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/66}, {&(0x7f0000001c80)=""/184}, {&(0x7f0000001d40)=""/116}, {&(0x7f0000001dc0)=""/8, 0xfffffffffffffee3}], 0x0, &(0x7f0000001e40)=""/84, 0x48}, 0x6}, {{&(0x7f0000001ec0)=@in6={0xa, 0x0, 0x0, @private0}, 0x0, &(0x7f0000005480)=[{&(0x7f0000001f40)=""/8}, {&(0x7f0000001f80)=""/43}, {&(0x7f0000001fc0)=""/244}, {&(0x7f00000020c0)=""/54}, {&(0x7f00000000c0)=""/27}, {&(0x7f00000003c0)=""/61}, {&(0x7f0000000400)=""/61}, {&(0x7f0000005340)=""/209}, {&(0x7f0000005440)=""/45}], 0x0, &(0x7f0000002140)=""/59}, 0x401}, {{&(0x7f0000002180)=@tipc, 0x0, &(0x7f0000002300)=[{&(0x7f0000002200)=""/1}, {&(0x7f0000002240)=""/172}], 0x0, &(0x7f0000002340)=""/53}, 0x7fd}, {{&(0x7f0000002380)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x0, &(0x7f0000003880)=[{&(0x7f0000002400)=""/68}, {&(0x7f0000002480)=""/246}, {&(0x7f0000002580)=""/225}, {&(0x7f0000002680)=""/4096}, {&(0x7f0000003680)=""/102}, {&(0x7f0000003700)=""/161}, {&(0x7f00000037c0)=""/135}], 0x0, &(0x7f0000003900)=""/239}, 0x3}, {{&(0x7f0000003a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, &(0x7f0000005000)=[{&(0x7f0000003a80)=""/32}, {&(0x7f0000003ac0)=""/246}, {&(0x7f0000003bc0)=""/253}, {&(0x7f0000003cc0)=""/212}, {&(0x7f0000003dc0)=""/127}, {&(0x7f0000003e40)=""/190}, {&(0x7f0000003f00)=""/161}, {&(0x7f0000003fc0)=""/4096}, {&(0x7f0000004fc0)=""/42}], 0x0, &(0x7f00000050c0)=""/173}, 0x16}], 0x400000000000213, 0x40002002, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @multicast1}, 0xf, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00'], 0x30}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x5}, {0x7, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cd2cf5df7773f7a4c72ae167485315c326281efc400"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x20}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000002140)=@filter={'filter\x00', 0x42, 0x4, 0x1350, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0x0, 'netpci0\x00', 'vcan0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @multicast2, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x1160, 0x1188, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x2, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@string={{0xc0}, {0x4a, 0xfff, 'fsm\x00', "bb306f1a10bd0ba5fc36156ddf3c07659aa78b676a6d24da2c2e72ebc70f03e8fc2a67ed8594a958e8857370ea75ec62940b08c939231d5f7b091abb9155d934d0c3647ab48351a4419075c76b38a28c62d4f8479aea58be8d5f986f780cffb042d909156e4389330510cf49bcfc2aa48d8c9406a773b7d93b72967ae6d1caa9", 0x31, 0x1, {0x8}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b0) 2.479103775s ago: executing program 1 (id=5825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x1402, 0x600, 0x70bd2c, 0x8, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20008001) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 1.92341749s ago: executing program 1 (id=5826): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2fcb", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x30d26732fe5b7335, 0x100408) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@in6={0xa, 0x4e20, 0xe, @mcast1, 0x2}, 0xe, &(0x7f0000000000)=[{&(0x7f0000000100)="e2", 0x1}], 0x1, &(0x7f0000000200)=[@dstaddrv6={0x0, 0x84, 0x8, @private1}, @prinfo={0x0, 0x84, 0x5, {0x10, 0x9}}, @dstaddrv4={0x0, 0x84, 0x7, @loopback}], 0x14, 0x4855}, 0x240408d3) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r6}]}]}, 0x30}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) 1.881707513s ago: executing program 8 (id=5827): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000900000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) unshare(0x400) 1.704685899s ago: executing program 3 (id=5828): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000040)='\\\xc8(:\x00', 0x442, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x6]}, {0x8, 0x4, 0x9, 0x99f}}, 0xd14, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x10}, {[0x3c, 0x40, 0x9, 0x9]}, 0x7, 0x0, &(0x7f0000000140)}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="60010000210001000000000000000000fc02000000000001fe80000000000000000000000000012000000000000000000a0000a02e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5c}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_DEBUG={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000c004}, 0x24084804) 1.527791926s ago: executing program 7 (id=5829): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0xffe0}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fa0, 0xa5}}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORR={0x10, 0x1, {0x7fffffff, 0x5, 0x9}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1ff, 0x1, 0xd8f, 0x1, 0x3}}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc"], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r7, &(0x7f0000001700)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010501010000000000000000070000020c00170000000009000000a1"], 0x20}, 0x1, 0x0, 0x0, 0x20048800}, 0x41) 1.458734378s ago: executing program 1 (id=5830): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB='q\t\b'], 0xf) 1.313629253s ago: executing program 3 (id=5831): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.216815094s ago: executing program 1 (id=5832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x2c, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r6, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) accept4$alg(r6, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400eaa8baa21ffccbb400000234000480300001800e000100696d6de564696174650000001c000280100002800c00028008000180fffffffc08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000100)={0x20000004}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r5, &(0x7f00000005c0)={0x2000a210}) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x29, 0x0, 0x9156) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x1a, 0xb01, 0x0, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.185297676s ago: executing program 8 (id=5833): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="5ac4f06563ed1fa71b235590009d6a8eef133e63a4b72938ae2f89e840300be33371789d5f9b91f879a25860e0b4ea0d52c6e6b51004bb2fb8e8d015e8fe49c1d03cfc51a3832c0acfe7b0d95b0b3abcb0b19f8bf35f4a4587f68b84ad4ecb58cf5ddd1e9cd53d6d46f74693bb67113f33472976ba55cc9ee54387a35d42b18a014dff1ca7ae8bd0b5ebc71a13c6bab2cf4ac942f4fefb43052525f237f11930585370a660f3e4b2b7437f94b2414c359f37b9139bcbb4b0849bcc2eacde6b8978521f41ab6944a2fd5c503a961dafcd2d971bdc33c1fdc5cd2de186bf50702d777a3f0e", 0xe4}, {&(0x7f0000000240)="a8f27d6702d8baf7abaad463d0018802e64ab335e0329c8102d0fc971abe477068db3b611bb34bf30ec67b6bd1753100a95778d3ceaaf52f3f9b3b75a18609d1726dd13b6d8509763bd7210561d03c", 0x4f}, {&(0x7f00000002c0)="07e38901a6d7ccb616a5dae806b075f5b0d0407e1f169e53c4c29b2a7b9a2244a54c8fcf224fd6715f10ccbcc4404b559ae1d6896feaa45978ec15c2ccf5a297c1445a1720d859b6a10f8e457ac76c48bf4273e3f947ff5a863783a266e2529cbf1f4432f0ab9cb1851b898a28f9dd5fe859db58c94bc39e3e6d7d25c131e2815b8aa4332b53b0809f1d9a128566728b6b33b3b324b86c1489d39974189f2f5590e2d8993ae96ec98e327e64f524411ab6ab", 0xb2}], 0x3, &(0x7f0000000400)=[@hopopts={{0x20, 0x29, 0x36, {0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x80}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r1}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x1, 0x8}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x9f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x88}}], 0x1, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004160000000006916360000000000bf6700000000000035060500e0ff1f006706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.12197441s ago: executing program 3 (id=5834): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000000104006b0000000200000010020000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000005000000040000000d00"/28], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x400, 0xffffffffffffffff, 0x8000000}, 0x0, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x3) (async) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x3) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153) close(r1) (async) close(r1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="9bc92f2f", 0x4}, {&(0x7f00000000c0)="304f15de90d93fecc0cd1449d23c347e859f5f3be5f2a9ad4fb2247349a2ac01ee8fc3f0448ba19d7159a04018caca4bb4141451ff7b76567b532e32c264c5915d419f910fc1adc68bc9b528f68ba6390145cff6008a890765ba57b32d5b9f963021a8c9f9418c92a5eaea06124e4a822c", 0x71}], 0x2) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="9bc92f2f", 0x4}, {&(0x7f00000000c0)="304f15de90d93fecc0cd1449d23c347e859f5f3be5f2a9ad4fb2247349a2ac01ee8fc3f0448ba19d7159a04018caca4bb4141451ff7b76567b532e32c264c5915d419f910fc1adc68bc9b528f68ba6390145cff6008a890765ba57b32d5b9f963021a8c9f9418c92a5eaea06124e4a822c", 0x71}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000006800010029bd70007dffff7f00000000000000000c000200010000001500000004000400060003"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000006800010029bd70007dffff7f00000000000000000c000200010000001500000004000400060003"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10, r2, 0x69f47000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$OCFS2_IOC_GROUP_ADD64(r7, 0x40186f03, &(0x7f0000000240)={0x200, 0x2, 0x8d, 0xf}) openat$ppp(0xffffffffffffff9c, &(0x7f00000010c0), 0x40000, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000e7ffffff850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000001100)=0x8) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000001100)=0x8) 988.938571ms ago: executing program 7 (id=5835): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002f80)={{r1, &(0x7f0000000180)='\x00', 0x2, &(0x7f0000000d00)={@align=0x2, {0x0, 0x8, 0x3, 0x9}}, 0xf, &(0x7f0000000d40), &(0x7f0000000f00)=0x1}, {[0x0, 0x86f1, 0x4, 0x1]}, 0x8001, 0x1000, &(0x7f0000001f80)=""/4096}) sendmsg$nl_generic(r2, 0x0, 0x20000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) write(r6, &(0x7f0000000080)="05000000010001", 0x7) (async) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r5, &(0x7f0000000340)="07000000010000", 0x7) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600fe8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 963.574731ms ago: executing program 8 (id=5836): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x70bd21, 0x25dfdbff, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc802) (rerun: 32) 695.6933ms ago: executing program 7 (id=5837): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 636.761129ms ago: executing program 1 (id=5838): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r3, 0x6}, 0x8) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xc7}, 0x8) 636.111175ms ago: executing program 3 (id=5839): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r2, 0x0, 0x0, 0x4a71, 0x5) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x11, 0x2, 0x2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004a008d2a00000000000000000a"], 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r3) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'bridge_slave_1\x00', 0x5}) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008881}, 0x20008004) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pwrite64(r1, &(0x7f0000000140)="5a47d8c30ca684b434ce528faa9d10d4f2a40fb193da0f756ca4f0da39ca185e195b8d7aea964b86784bd0b30221", 0x2e, 0x800) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r0, 0x1) 456.764072ms ago: executing program 1 (id=5840): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0800000004000000040000000101000000000000", @ANYRES32, @ANYBLOB="0200000002000000000033ae633d910100008000030000f9355500001000123300007f0ca4a2285220ac7ff97a83d0345129520ac7b38c27e650a9d94e0598a53d9ad78222a0032931f86922b768f29a657fd3f94744f777407b43c3b7f0f62e9cb3c41b684bb5daf7d297d56ac0f3970345ecf6b12587b1c988606d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001a00e3390000000000f9000081000000000000000000000014001d"], 0x30}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="180000000000000000000000000000001811000043144835235935e1b6c215f668acc2b343e724aae3bb45b3fef326cdaf1534f637aaa8326f7340ef7f8e98e264e77673a7f868c836fea0ba8b170c7954b48e645c4a3c158e4830f65c4aade9939bdce1ca1d64138388f00a28d0cd60bffaee206499a806", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000080000080000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000380)={{r5}, &(0x7f0000000300), 0x0}, 0x20) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) recvfrom(r1, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000001740)=ANY=[@ANYRESDEC=0x0], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r8) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000001700)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000001500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x50, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x4008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r10, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, 0x10) 367.860868ms ago: executing program 7 (id=5841): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997f", 0x29}, {&(0x7f0000000e80)="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", 0x120}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10", 0x6e}], 0x1}}], 0x2, 0x2090) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x2, 0x3, {{0x2b, 0x4, 0x1, 0x2d, 0xac, 0x67, 0x0, 0xea, 0x4, 0x0, @loopback, @remote, {[@timestamp={0x44, 0xc, 0xa0, 0x0, 0x3, [0xa2f, 0x1]}, @noop, @cipso={0x86, 0x4f, 0x0, [{0x7, 0x5, "0af0fe"}, {0x7, 0x3, "f2"}, {0x7, 0x11, "6cbe492dd45f8da61ed8f803c5ecfc"}, {0x2, 0x11, "765de76094912620c76d75cfcce98f"}, {0x1, 0x5, "c91dd3"}, {0x7, 0xd, "b729715c3c106a2a3b6881"}, {0x5, 0xd, "338cbecaa9592c883e0332"}]}, @timestamp={0x44, 0xc, 0x6, 0x0, 0x5, [0x9, 0x7ff]}, @cipso={0x86, 0x16, 0x3, [{0x7, 0x10, "d704046a3499208360009058e7ac"}]}, @cipso={0x86, 0x1a, 0x1, [{0x6, 0x8, "359cf190feb7"}, {0x7, 0xa, "d333a36f24bd1b24"}, {0x7, 0x2}]}]}}}}}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x98, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x50}, 0x24004084) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r14, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0xda, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@mpls_mc={0x8848, {[], @ipv6=@tcp={0x9, 0x6, "814587", 0xa4, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x14}, {[], {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x9, 0x40, 0x8, 0x0, 0xb0e0, {[@mptcp=@capable={0x1e, 0xc, 0x7, 0x8, 0x6, 0x7fff}, @eol]}}, {"64772e6651e54e125b80eb4a34617c077de73da24e7643f022c14af3d56b592a3da546aa6b90ada0f6ce8ceb730aa5abed55fb0c9475408e688eac4087f203b74cb09d83305143da0bd066a481af9fc6bcf9125a3b4ce17b71de7ae8321c9a88d88d5fa80aa65c2e03e0b9394fe4d19b103eaff387c10dfd7bbe0740237806de"}}}}}}}}, &(0x7f00000007c0)={0x1, 0x1, [0x72b, 0x5ef, 0x20, 0xba3]}) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) 184.508979ms ago: executing program 3 (id=5842): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) (async, rerun: 32) r2 = epoll_create1(0x80000) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x10000018}) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) 14.19032ms ago: executing program 8 (id=5843): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x40000, &(0x7f0000000040)={@align=0x6, {0x4, 0xd9, 0x7fff, 0x1}}, 0xfffffffa, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5}, {[0x5, 0xffffffff, 0x10, 0x74c2]}, 0x910f, 0x8, &(0x7f0000000100)=""/8}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x3}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x2, 0x88, 0xc, @mcast2, @loopback, 0x20, 0x1, 0x1}}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000003c0)={@private=0xa010102, @loopback, r2}, 0xc) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xfffffff9, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x4e, "45e21d7990187c047f99c55430dffa592aff9fce190bb7d310157a3992bedf6f01582c3ab2dec83cd98a81912a084cc4489096cb121447d95f33d9d4d4e8c8d4a0b8dc736aad7ae3a991f3993259"}, &(0x7f0000000480)=0x56) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000004c0)={r3, 0x6, 0x5, [0xaf, 0x7, 0xfff9, 0x10, 0x2]}, 0x12) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000500)={0xdd, 0xff, 0x7, 0x92}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000540)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0x7d, 0xa3, &(0x7f0000000580)="2edb701d6d4685c1e90883fafe7ce36e01ec34094dcfe4b194742925a2ffea1c47e5b247fc3f903f301f1c8c8de6a4bd5fd8254f0ea523d5d80ec240050d0f8ee9467594fc46059b898010a5af97d5b4c62420fa32e6794c1144eee137b686f93367da80305f52c3c5138aedf0c57da9e33e46aeb4a0422b347740e04a", &(0x7f0000000600)=""/163, 0xffffffff, 0x0, 0xc4, 0xb, &(0x7f00000006c0)="b2524683f412aaaae6bf8ba0e3f12cf8ef01b02e4ed6c10572daffb3b9ce632df6e24785836bca08534af57093347947accff3c955a25ab3695fa6d79ddea246f668657a1e1db40d330b5062bed2af67806795d9cefdcbf6d2976e38d05748e0151e66aea5072cd2cd6e37e0af0932e98235c0f4d73a31268fb99aa778723b175576487a92b1e0ac9f529c8ce62dbca6b5a48502f27015ce95a8ff8d723e506750d5b7b7d330fd8fa0afbfd42eaeff5aa0df3cc5c57521b1c4b9ee0f3955f11fe90019ba", &(0x7f00000007c0)="c809539bf1b4b4ae37e619", 0x0, 0x0, 0xfffffff8}, 0x50) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000880)=0x1) sendmsg$nl_route(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd2c, 0x25dfdbfc, {0xa, 0x20, 0x0, 0xe3, 0x4, 0x0, 0x0, 0x6, 0x1}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000a40)=0x2, 0x4) splice(r5, &(0x7f0000000a80)=0x50, r5, &(0x7f0000000ac0)=0x80000001, 0x5, 0x4) nanosleep(&(0x7f0000000b00)={0x77359400}, &(0x7f0000000b40)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e00)={'erspan0\x00', &(0x7f0000000d40)={'tunl0\x00', r2, 0x721, 0x0, 0x7fffffff, 0x4, {{0x21, 0x4, 0x2, 0x8, 0x84, 0x68, 0x0, 0x25, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1, {[@timestamp_addr={0x44, 0x4c, 0x4e, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xe}, 0xfffffff9}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x9}, {@multicast2, 0x7}, {@broadcast, 0x5}, {@empty, 0xfffffff7}, {@multicast1, 0x575a}, {@private=0xa010102, 0xfffff749}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xf4, 0x3, 0x8, [{@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x5e}, {@broadcast, 0xfffffffe}]}, @end]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0xc, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x2e, 0x39]}}, &(0x7f0000000e80)=""/145, 0x28, 0x91, 0x1, 0x2, 0x10000, @value=r0}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r0, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000f80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000001080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001100), &(0x7f0000001140), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000001180)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x19, 0x15, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffc7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='GPL\x00', 0x5, 0x9e, &(0x7f0000000c80)=""/158, 0x41000, 0x41, '\x00', r6, @cgroup_sockopt=0x16, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r1, 0x9, 0x0, &(0x7f0000001300)=[{0x5, 0x1, 0x9}, {0x4, 0x1, 0xf}, {0x2, 0x4, 0x9, 0x5}, {0x1, 0x1, 0xf, 0x4}, {0x1, 0x2, 0xb, 0xa}, {0x2, 0x4, 0x1, 0x4}, {0x0, 0x3, 0xb, 0x5}, {0x5, 0x3, 0x5, 0x5}, {0x0, 0x5, 0xc, 0x6}], 0x10, 0x5020}, 0x94) syz_80211_inject_frame(&(0x7f0000001480), &(0x7f00000014c0)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @random="6d45d35d9c9c", {0x1, 0x3}}, 0x202, 0x1, {0x0, 0xf, @random="e46521c2e7e669e0091bf622f4daf7"}, @void, @val={0x2d, 0x1a, {0x80, 0x0, 0x6, 0x0, {0x6, 0x6, 0x0, 0xe, 0x0, 0x1, 0x0, 0x3}, 0x800, 0x2, 0xe}}, [{0xdd, 0x91, "b550fef05167bd2a98a82c55b42835f3e4f903c17df14b60ca8dccdf99988df81c5cd66b98be9de820c7be3187055d93f84aea039497850b8c65966737b65f1b785b9296efb6671c155b5172ebc680630706bc6bd6b68796c3f6719c8424590f27101c02d32690abe9a61f7a837d5f326ac723dd4226b3c4dcbed2e3925b993ddafae23735d27091ec25e554110a839636"}, {0xdd, 0x62, "6509d838cf634c441e289d795f6a1f0bc6b0a4f3e95e413f65e031fbc61fd143e4253139084d61c3a89836172bc00ef44ac8cd7b81bd1b0a12d75cc7f2a5b328a7c1e101379b99b46876a06f83b60da1649c5d8b9a08e6877fdf78dd5105d436237f"}, {0xdd, 0xbd, "0b15984184246b0f0b7e92026ecb3a599cf663c27742ad6c5c92c0d45bb713eb05a06e972bc21374c2c5eb7080bd2078dd8ee73307351ae656f6bf134fee49962a61df4ace4e17910344f4b72b614519df6ecd47de1e5048a3ea5d4778f7f935824079de5f6590c8d66146894253758d6f48293cbe0be779bea9b7f8a9852c2e3a0e9c008edf4dca75a4090135a6370ad43cfb710205d6ca134cddf34ed5170cfd4824feafdbb05173fa407ab9a30018ca5c86893f6d2c1efbbfdbeb1e"}]}, 0x1ff) r10 = accept(r5, &(0x7f0000001700)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001780)=0x80) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x54, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x34}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x57b6f0d247a09cf8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1e}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x408d0}, 0x4080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)=@bridge_delneigh={0x38, 0x1d, 0x2, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x0, r8, 0x80, 0x15, 0xb}, [@NDA_LLADDR={0xa, 0x2, @random="da60bc4fa8a4"}, @NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}, @NDA_SRC_VNI={0x8, 0xb, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a40)={0x124, 0x15, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xc9, 0x8, "970daed4446e30320769987c198e9442d16e206327c70c4eb70860f5f41bfc914182e9f7e39e7d3b0e3d9163de28d055cbb665f075b3dcdca9306402cc5a120b6e8252d02166211cbaf1b38b54a16db3d74e93510fdbba185467144a76ddd73fb3a4a0b6cac853e6f2f63b88a8f885ac84947e9a05a2e056ffe0ed76178af041ae311596d3135afc9a97375d126a98a19a5aab191e6dd41e648e0a335f94f837e6458e15d0373047477b3eceb699dbebeb3d8eaae1a768661dc21e8663204a2d0b70a701ef"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040}, 0x4044) sendmsg$L2TP_CMD_SESSION_CREATE(r10, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x20000081) 0s ago: executing program 3 (id=5844): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e23, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00fc4035c016000100e492c4cc0000"], 0x1c}}, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000640)={'veth1_to_bond\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES16=r4, @ANYRES16=r2], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): lter on device team0 [ 964.195364][T23380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.367248][T23380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 964.405209][T23380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 964.463873][T23380] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 964.503963][T23386] : left allmulticast mode [ 964.751266][T23393] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 964.759953][T23393] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 964.768438][T23393] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 964.977802][T23399] pim6reg: entered allmulticast mode [ 964.990942][T23406] pim6reg: left allmulticast mode [ 965.035583][ T5281] veth0_macvtap: entered promiscuous mode [ 965.383196][T23431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4583'. [ 965.398436][T23433] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4582'. [ 965.441081][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4583'. [ 966.195212][T23457] xt_hl: Unknown Hop Limit match mode: 206 [ 966.214544][T23459] syzkaller0: entered promiscuous mode [ 966.234188][T23459] syzkaller0: entered allmulticast mode [ 966.963444][T23501] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4599'. [ 967.099054][T23496] lo speed is unknown, defaulting to 1000 [ 967.479930][T23517] netlink: 'syz.6.4602': attribute type 4 has an invalid length. [ 967.528562][T23517] netlink: 'syz.6.4602': attribute type 4 has an invalid length. [ 967.565248][T23517] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4602'. [ 967.658669][T23517] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4602'. [ 967.898315][T23517] geneve3: entered promiscuous mode [ 968.448698][T23547] wg1: Caught tx_queue_len zero misconfig [ 968.714125][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4610'. [ 968.769437][T23555] netlink: 'syz.1.4611': attribute type 8 has an invalid length. [ 968.810855][T23555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4611'. [ 968.842361][T23557] netlink: 'syz.3.4612': attribute type 1 has an invalid length. [ 968.880056][T23557] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4612'. [ 968.920489][T23557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4612'. [ 969.011157][T23566] netlink: 'syz.1.4615': attribute type 1 has an invalid length. [ 969.081749][T23560] bond6: Removing last ns target with arp_interval on [ 969.273021][T23568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4612'. [ 969.348392][T23557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4612'. [ 969.382980][ T5738] IPVS: starting estimator thread 0... [ 969.411843][T23569] syzkaller0: entered promiscuous mode [ 969.422418][T23569] syzkaller0: entered allmulticast mode [ 969.423423][T23582] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4618'. [ 969.505362][T23584] IPVS: using max 33 ests per chain, 79200 per kthread [ 973.190821][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4624'. [ 973.229466][T23600] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4624'. [ 973.280298][T23600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 973.338272][T23609] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 973.599546][T23617] RDS: rds_bind could not find a transport for fe80::23, load rds_tcp or rds_rdma? [ 973.870748][T23628] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4631'. [ 974.229792][T23632] xt_hashlimit: size too large, truncated to 1048576 [ 974.525843][T23648] netlink: 'syz.6.4636': attribute type 1 has an invalid length. [ 974.557615][T23648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4636'. [ 974.689418][T23652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4637'. [ 975.676408][T23682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4644'. [ 975.778517][T23685] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4644'. [ 975.812292][T23685] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4644'. [ 975.840549][T23689] netlink: 'syz.6.4647': attribute type 1 has an invalid length. [ 976.005899][T23698] netlink: 'syz.1.4648': attribute type 1 has an invalid length. [ 976.098046][T23697] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4649'. [ 976.168933][T23700] 8021q: adding VLAN 0 to HW filter on device bond10 [ 976.221490][T23700] bond9: (slave bond10): making interface the new active one [ 976.245336][T23700] bond9: (slave bond10): Enslaving as an active interface with an up link [ 978.057949][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 992.796759][T23742] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4652'. [ 992.808151][T23742] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4652'. [ 992.951670][T23750] Cannot find del_set index 4 as target [ 993.189797][ T30] audit: type=1804 audit(1783931679.004:19): pid=23795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4656" name="/newroot/140/memory.events" dev="tmpfs" ino=733 res=1 errno=0 [ 994.992028][T23813] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4658'. [ 995.425522][T23819] ip6_vti0: Caught tx_queue_len zero misconfig [ 996.028375][T23832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4663'. [ 996.093640][T23832] bond0: entered promiscuous mode [ 996.117619][T23832] bond_slave_0: entered promiscuous mode [ 996.144105][T23832] bond_slave_1: entered promiscuous mode [ 996.170932][T23832] veth0_to_bond: entered promiscuous mode [ 996.211400][T23832] bridge_slave_0: entered promiscuous mode [ 996.259871][T23849] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4667'. [ 996.322663][T23851] netlink: 'syz.1.4666': attribute type 3 has an invalid length. [ 996.352259][T23847] tipc: Enabled bearer , priority 0 [ 996.377657][T23852] syzkaller0: entered promiscuous mode [ 996.395308][T23852] syzkaller0: entered allmulticast mode [ 996.619566][T23836] tipc: Resetting bearer [ 996.728875][T23855] wireguard0: left promiscuous mode [ 996.867650][T23855] geneve3: left promiscuous mode [ 996.880734][T23835] tipc: Resetting bearer [ 996.910308][T23866] netlink: 'syz.7.4671': attribute type 21 has an invalid length. [ 996.940003][T23866] netlink: 'syz.7.4671': attribute type 21 has an invalid length. [ 997.014190][T23835] tipc: Disabling bearer [ 997.068336][T23794] netdevsim netdevsim6 : unset [0, 0] type 1 family 0 port 4352 - 0 [ 997.114557][T23794] netdevsim netdevsim6 : unset [0, 1] type 1 family 0 port 8472 - 0 [ 997.140921][T23794] netdevsim netdevsim6 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.161448][T23876] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4674'. [ 997.181487][T23794] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 997.201658][T23878] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4671'. [ 997.202673][T23794] netdevsim netdevsim6 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 997.243427][T23794] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.248884][T23878] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4671'. [ 997.264065][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 997.303307][T23794] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 997.307728][T23878] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4671'. [ 997.359640][T23878] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4671'. [ 997.380891][T23794] netdevsim netdevsim6 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 997.404531][T23794] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.452626][T23794] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 997.502055][T23794] netdevsim netdevsim6 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 997.533408][T23794] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.647617][T23887] syzkaller1: entered promiscuous mode [ 997.681312][T23887] syzkaller1: entered allmulticast mode [ 997.760350][T23892] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 997.988221][T23898] __nla_validate_parse: 1 callbacks suppressed [ 997.988243][T23898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4679'. [ 998.482117][T23920] tcf_pedit_act: 7 callbacks suppressed [ 998.482216][T23920] tc action pedit 'at' offset 20 out of bounds [ 998.497524][T23920] tc action pedit 'at' offset 20 out of bounds [ 998.504027][T23920] tc action pedit 'at' offset 20 out of bounds [ 998.510483][T23920] tc action pedit 'at' offset 20 out of bounds [ 998.516723][T23920] tc action pedit 'at' offset 20 out of bounds [ 998.523268][T23920] tc action pedit 'at' offset 20 out of bounds [ 998.529699][T23920] tc action pedit 'at' offset 20 out of bounds [ 998.536626][T23920] tc action pedit 'at' offset 20 out of bounds [ 998.543637][T23920] tc action pedit 'at' offset 20 out of bounds [ 998.550153][T23920] tc action pedit 'at' offset 20 out of bounds [ 998.556414][T23920] TC_ACT_REPEAT abuse ? [ 998.738973][T23926] netlink: 'syz.3.4687': attribute type 1 has an invalid length. [ 998.763739][T23927] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4686'. [ 998.790584][T23927] netlink: 'syz.5.4686': attribute type 1 has an invalid length. [ 998.929632][T23926] bond7: entered promiscuous mode [ 998.935791][T23926] 8021q: adding VLAN 0 to HW filter on device bond7 [ 999.006304][T23933] 8021q: adding VLAN 0 to HW filter on device bond7 [ 999.030702][T23937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 999.038074][T23937] IPv6: NLM_F_CREATE should be set when creating new route [ 999.056630][T23933] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 999.076030][T23933] bond7: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 999.099775][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4689'. [ 999.109600][T23933] bond7: (slave gre2): making interface the new active one [ 999.117808][T23933] gre2: entered promiscuous mode [ 999.129576][T23942] netlink: 'syz.5.4689': attribute type 1 has an invalid length. [ 999.152079][T23933] bond7: (slave gre2): Enslaving as an active interface with an up link [ 1000.293506][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4699'. [ 1000.618802][T23995] bridge4: entered promiscuous mode [ 1000.646177][T23995] bridge4: entered allmulticast mode [ 1000.689158][T23995] team0: Port device bridge4 added [ 1000.728993][T23998] bridge0: port 1(team0) entered blocking state [ 1000.783860][T23998] bridge0: port 1(team0) entered disabled state [ 1000.807712][T23998] team0: entered allmulticast mode [ 1000.844758][T23998] team_slave_0: entered allmulticast mode [ 1000.864955][T23998] team_slave_1: entered allmulticast mode [ 1000.916691][T24001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1000.931508][T23998] team0: entered promiscuous mode [ 1000.953881][T23998] team_slave_0: entered promiscuous mode [ 1000.973452][T23998] team_slave_1: entered promiscuous mode [ 1000.988314][T23998] macvlan2: entered promiscuous mode [ 1001.023210][T23998] bridge0: port 1(team0) entered blocking state [ 1001.031890][T23998] bridge0: port 1(team0) entered forwarding state [ 1001.081089][T24005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4704'. [ 1001.136194][T24003] veth1_to_bond: entered allmulticast mode [ 1001.154887][T24004] veth1_to_bond: entered promiscuous mode [ 1001.212715][T24005] veth1_to_bond (unregistering): left allmulticast mode [ 1001.252474][T24005] veth1_to_bond (unregistering): left promiscuous mode [ 1001.298971][T24005] bond0: (slave bond_slave_1): Releasing backup interface [ 1001.566016][T24017] netlink: 'syz.7.4708': attribute type 1 has an invalid length. [ 1001.592668][T24017] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4708'. [ 1001.810676][T24031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4712'. [ 1001.911120][T24036] netlink: 768 bytes leftover after parsing attributes in process `syz.6.4713'. [ 1001.959639][T24038] netlink: 768 bytes leftover after parsing attributes in process `syz.6.4713'. [ 1002.256720][T24050] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 [ 1002.267428][T24049] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4717'. [ 1002.617888][T24069] bridge0: port 1(syz_tun) entered blocking state [ 1002.640676][T24069] bridge0: port 1(syz_tun) entered disabled state [ 1002.680870][T24069] syz_tun: entered allmulticast mode [ 1002.728107][T24069] syz_tun: entered promiscuous mode [ 1002.849091][T24069] SET target dimension over the limit! [ 1003.080117][T24087] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4727'. [ 1003.238636][T24098] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4726'. [ 1003.381525][T24109] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4731'. [ 1003.401522][T24111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1003.549054][T24116] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4735'. [ 1003.582328][T24114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4734'. [ 1003.766434][T24118] bond4: entered allmulticast mode [ 1003.785095][T24118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1004.093781][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4738'. [ 1004.121463][T24132] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4738'. [ 1004.160943][T24132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4738'. [ 1004.339985][T24140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4739'. [ 1004.366790][T15847] block nbd3: Receive control failed (result -32) [ 1004.407290][T24137] syzkaller1: entered promiscuous mode [ 1004.416558][T24137] syzkaller1: entered allmulticast mode [ 1004.449696][T24136] tipc: Invalid UDP bearer configuration [ 1004.449751][T24136] tipc: Enabling of bearer rejected, failed to enable media [ 1004.673531][T24149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4742'. [ 1005.232385][T24172] sctp: [Deprecated]: syz.7.4746 (pid 24172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1005.232385][T24172] Use struct sctp_sack_info instead [ 1005.285061][T24172] sctp: [Deprecated]: syz.7.4746 (pid 24172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1005.285061][T24172] Use struct sctp_sack_info instead [ 1005.627899][T24157] ipip0: entered promiscuous mode [ 1005.649829][T24169] bond0: (slave wlan0): Opening slave failed [ 1006.643180][T24228] netlink: 'syz.1.4761': attribute type 8 has an invalid length. [ 1007.042926][T24245] pim6reg: entered allmulticast mode [ 1007.085421][T24245] pim6reg: left allmulticast mode [ 1007.391639][T24252] vlan4: entered promiscuous mode [ 1008.356957][T24290] xt_hashlimit: size too large, truncated to 1048576 [ 1008.419960][T24292] __nla_validate_parse: 11 callbacks suppressed [ 1008.419983][T24292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4782'. [ 1008.846857][T24313] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4787'. [ 1008.871925][T24313] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4787'. [ 1008.892947][T24313] geneve3: entered promiscuous mode [ 1008.901804][T24314] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4787'. [ 1009.020864][T24313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4787'. [ 1009.137260][T24321] tipc: Enabled bearer , priority 30 [ 1009.425080][T24327] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4790'. [ 1009.674130][T24313] infiniband syz0: set active [ 1009.681998][T24313] infiniband syz0: added veth1_vlan [ 1009.704188][T24313] infiniband syz0: Couldn't open port 1 [ 1009.711100][T24313] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1009.728068][T24313] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1009.803816][T24313] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1009.849994][T24313] RDS/IB: syz0: added [ 1009.868704][T24313] smc: adding ib device syz0 with port count 1 [ 1009.877503][T24313] smc: ib device syz0 port 1 has no pnetid [ 1010.435373][T24357] netlink: 'syz.5.4797': attribute type 4 has an invalid length. [ 1010.464723][T24357] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4797'. [ 1010.953622][T24376] netlink: 'syz.1.4800': attribute type 1 has an invalid length. [ 1010.968729][T24376] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4800'. [ 1011.329196][T24387] netlink: 'syz.3.4801': attribute type 3 has an invalid length. [ 1011.349325][T24387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4801'. [ 1014.299421][T24402] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4810'. [ 1014.325316][T24402] ip6gre1: entered promiscuous mode [ 1014.331109][T24402] ip6gre1: entered allmulticast mode [ 1014.343478][T24402] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1014.596689][T24408] xt_hashlimit: max too large, truncated to 1048576 [ 1014.663427][T24411] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4813'. [ 1014.972451][T24417] tipc: Enabled bearer , priority 0 [ 1015.013972][T24417] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1015.051500][T24421] tipc: Enabled bearer , priority 0 [ 1015.081709][T24417] tipc: Resetting bearer [ 1015.106150][T24421] syzkaller0: entered promiscuous mode [ 1015.120857][T24421] syzkaller0: entered allmulticast mode [ 1015.147541][T24426] vlan0: Caught tx_queue_len zero misconfig [ 1015.280774][T24421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4815'. [ 1015.335443][T24421] tipc: Resetting bearer [ 1015.491312][T24416] tipc: Resetting bearer [ 1015.580022][T24436] netlink: 'syz.5.4821': attribute type 1 has an invalid length. [ 1015.597460][T24416] tipc: Disabling bearer [ 1015.626097][T24436] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1015.648250][T24442] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4822'. [ 1015.715878][T24442] netlink: 'syz.7.4822': attribute type 7 has an invalid length. [ 1015.717235][T24444] netlink: 'syz.7.4822': attribute type 1 has an invalid length. [ 1015.752924][T24442] netlink: 'syz.7.4822': attribute type 8 has an invalid length. [ 1015.787713][T24442] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4822'. [ 1015.788303][T24444] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4822'. [ 1016.535567][T24457] syzkaller0: entered promiscuous mode [ 1016.556175][T24457] syzkaller0: entered allmulticast mode [ 1019.072436][T24465] xt_TCPMSS: Only works on TCP SYN packets [ 1019.354103][T24470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4831'. [ 1019.391731][T24467] lo speed is unknown, defaulting to 1000 [ 1020.053254][T24490] bond8: invalid ARP target 0.0.0.0 specified for addition [ 1020.062047][T24490] bond8: option arp_ip_target: invalid value (0) [ 1020.131976][T24490] bond8 (unregistering): Released all slaves [ 1020.806243][T24502] lo speed is unknown, defaulting to 1000 [ 1025.177440][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1025.197215][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1025.210569][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1025.219017][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1025.227318][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1025.466696][T24537] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4848'. [ 1026.027226][T15847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1026.045497][T15847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1026.053255][T15847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1026.061940][T15847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1026.175570][T15847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1026.581745][T24551] udevd[24551]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1026.613251][T24555] udevd[24555]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1026.829955][T24562] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4849'. [ 1026.864108][T24562] netlink: 'syz.7.4849': attribute type 10 has an invalid length. [ 1026.899857][T24562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4849'. [ 1026.937876][T24562] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4849'. [ 1026.997664][T24569] batadv_slave_1: entered promiscuous mode [ 1027.160019][T24573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4852'. [ 1027.716033][T24528] lo speed is unknown, defaulting to 1000 [ 1027.763418][T24564] batadv_slave_1: left promiscuous mode [ 1027.862388][T24580] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4853'. [ 1028.295267][T15586] Bluetooth: hci3: command tx timeout [ 1029.143079][T24596] syzkaller0: entered promiscuous mode [ 1029.166974][T24596] syzkaller0: entered allmulticast mode [ 1029.282006][T24609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.289355][T24609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.297516][T24609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.305133][T24609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.374833][T15586] Bluetooth: hci3: command tx timeout [ 1030.740850][T24607] netlink: 'syz.7.4859': attribute type 1 has an invalid length. [ 1030.755411][T24607] netlink: 'syz.7.4859': attribute type 2 has an invalid length. [ 1030.805039][T24604] lo speed is unknown, defaulting to 1000 [ 1032.460866][T15586] Bluetooth: hci3: command tx timeout [ 1034.544711][T15586] Bluetooth: hci3: command tx timeout [ 1035.853253][T24619] lo speed is unknown, defaulting to 1000 [ 1036.275973][T24643] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4867'. [ 1036.525924][T24648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4866'. [ 1036.662427][T24659] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4869'. [ 1036.747360][T24528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.762212][T24528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.809815][T24528] bridge_slave_0: entered allmulticast mode [ 1036.852322][T24528] bridge_slave_0: entered promiscuous mode [ 1037.022865][T24528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.073536][T24528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.122395][T24528] bridge_slave_1: entered allmulticast mode [ 1037.165363][T24528] bridge_slave_1: entered promiscuous mode [ 1037.527148][T24528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.626397][T24528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.287907][T24528] team0: Port device team_slave_0 added [ 1040.298593][T24528] team0: Port device team_slave_1 added [ 1040.468884][T24528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.488946][T24528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.577215][T24528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.591355][T24528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.602236][T24528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.727479][T24528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.798750][T24681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4874'. [ 1040.818579][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 1041.143138][T24691] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1041.176420][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 1041.362349][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 1041.431120][T24528] hsr_slave_0: entered promiscuous mode [ 1041.439217][T24528] hsr_slave_1: entered promiscuous mode [ 1041.446032][T24528] debugfs: 'hsr0' already exists in 'hsr' [ 1041.451945][T24528] Cannot create hsr debugfs directory [ 1041.463218][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 1041.491699][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 1041.559180][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 1041.628897][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 1041.939689][T24712] FAULT_INJECTION: forcing a failure. [ 1041.939689][T24712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1041.983132][T24712] CPU: 0 UID: 0 PID: 24712 Comm: syz.1.4882 Not tainted syzkaller #0 PREEMPT(full) [ 1041.983166][T24712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1041.983181][T24712] Call Trace: [ 1041.983190][T24712] [ 1041.983201][T24712] dump_stack_lvl+0xe8/0x150 [ 1041.983245][T24712] should_fail_ex+0x40c/0x560 [ 1041.983280][T24712] _copy_from_user+0x2d/0xb0 [ 1041.983314][T24712] ___sys_recvmsg+0x173/0x5a0 [ 1041.983338][T24712] ? ktime_get_ts64+0xa9/0x410 [ 1041.983373][T24712] ? __pfx____sys_recvmsg+0x10/0x10 [ 1041.983399][T24712] ? __fget_files+0x2a/0x420 [ 1041.983447][T24712] ? __fget_files+0x3a2/0x420 [ 1041.983489][T24712] do_recvmmsg+0x31a/0x7f0 [ 1041.983521][T24712] ? __pfx_do_recvmmsg+0x10/0x10 [ 1041.983558][T24712] ? get_timespec64+0x119/0x1b0 [ 1041.983598][T24712] ? __pfx_get_timespec64+0x10/0x10 [ 1041.983650][T24712] __x64_sys_recvmmsg+0x1b7/0x250 [ 1041.983677][T24712] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1041.983709][T24712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.983736][T24712] do_syscall_64+0x174/0x580 [ 1041.983769][T24712] ? trace_irq_disable+0x3b/0x140 [ 1041.983799][T24712] ? clear_bhb_loop+0x40/0x90 [ 1041.983828][T24712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.983850][T24712] RIP: 0033:0x7fd94719de59 [ 1041.983871][T24712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.983891][T24712] RSP: 002b:00007fd947fe4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1041.983915][T24712] RAX: ffffffffffffffda RBX: 00007fd947425fa0 RCX: 00007fd94719de59 [ 1041.983932][T24712] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 1041.983947][T24712] RBP: 00007fd947fe4090 R08: 0000200000000480 R09: 0000000000000000 [ 1041.983961][T24712] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000001 [ 1041.983975][T24712] R13: 00007fd947426038 R14: 00007fd947425fa0 R15: 00007ffd99018b18 [ 1041.984011][T24712] [ 1042.592054][T24717] syzkaller0: entered promiscuous mode [ 1042.605419][T24717] syzkaller0: entered allmulticast mode [ 1042.698571][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1043.306092][ T30] audit: type=1804 audit(1783931729.114:20): pid=24738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4885" name="/newroot/418/memory.events" dev="tmpfs" ino=2151 res=1 errno=0 [ 1044.108067][T24744] netlink: 'syz.1.4887': attribute type 10 has an invalid length. [ 1048.293310][T24721] pimreg: entered allmulticast mode [ 1048.325975][T24744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1048.337744][T24744] team0: Device netdevsim1 is of different type [ 1048.599907][T24759] bridge0: port 1(team0) entered disabled state [ 1048.632630][T24766] FAULT_INJECTION: forcing a failure. [ 1048.632630][T24766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.655795][T24766] CPU: 0 UID: 0 PID: 24766 Comm: syz.1.4893 Not tainted syzkaller #0 PREEMPT(full) [ 1048.655830][T24766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1048.655844][T24766] Call Trace: [ 1048.655853][T24766] [ 1048.655863][T24766] dump_stack_lvl+0xe8/0x150 [ 1048.655906][T24766] should_fail_ex+0x40c/0x560 [ 1048.655942][T24766] _copy_from_user+0x2d/0xb0 [ 1048.655977][T24766] ___sys_recvmsg+0x173/0x5a0 [ 1048.656002][T24766] ? ktime_get_ts64+0xa9/0x410 [ 1048.656039][T24766] ? __pfx____sys_recvmsg+0x10/0x10 [ 1048.656078][T24766] ? ktime_get_ts64+0xa9/0x410 [ 1048.656139][T24766] do_recvmmsg+0x31a/0x7f0 [ 1048.656171][T24766] ? __pfx_do_recvmmsg+0x10/0x10 [ 1048.656208][T24766] ? get_timespec64+0x119/0x1b0 [ 1048.656240][T24766] ? __pfx_get_timespec64+0x10/0x10 [ 1048.656283][T24766] __x64_sys_recvmmsg+0x1b7/0x250 [ 1048.656310][T24766] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1048.656344][T24766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.656370][T24766] do_syscall_64+0x174/0x580 [ 1048.656404][T24766] ? trace_irq_disable+0x3b/0x140 [ 1048.656433][T24766] ? clear_bhb_loop+0x40/0x90 [ 1048.656461][T24766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.656484][T24766] RIP: 0033:0x7fd94719de59 [ 1048.656506][T24766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.656526][T24766] RSP: 002b:00007fd947fe4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1048.656550][T24766] RAX: ffffffffffffffda RBX: 00007fd947425fa0 RCX: 00007fd94719de59 [ 1048.656567][T24766] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 1048.656582][T24766] RBP: 00007fd947fe4090 R08: 0000200000000480 R09: 0000000000000000 [ 1048.656597][T24766] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000001 [ 1048.656612][T24766] R13: 00007fd947426038 R14: 00007fd947425fa0 R15: 00007ffd99018b18 [ 1048.656648][T24766] [ 1049.002671][T24759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1049.021324][T24759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1049.063790][T24759] vlan0: left allmulticast mode [ 1049.069434][T24759] veth0_vlan: left allmulticast mode [ 1049.231274][T24759] geneve2: left allmulticast mode [ 1049.254179][T24759] dummy0: left allmulticast mode [ 1049.286186][T24776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.308138][T24759] ip6erspan0: left allmulticast mode [ 1049.318708][T24759] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1049.339243][T24759] geneve4: left allmulticast mode [ 1049.348882][T24759] bond4: left allmulticast mode [ 1049.355686][T24759] erspan1: left allmulticast mode [ 1049.367812][T24759] ip6erspan1: left allmulticast mode [ 1049.378123][T24759] vlan2: left allmulticast mode [ 1049.383128][T24759] bond5: left allmulticast mode [ 1049.395035][T24759] bond7: left promiscuous mode [ 1049.399953][T24759] gre2: left promiscuous mode [ 1049.542933][T23790] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1049.570142][T23790] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.597779][T23790] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1049.623675][T23790] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1049.643533][T23790] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.657355][T23790] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1049.728762][T23790] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1049.763357][T23790] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.800685][T23790] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1049.945103][T24793] xt_TCPMSS: Only works on TCP SYN packets [ 1050.184477][T24528] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1052.699168][T24528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1052.748541][T24528] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1052.926830][T24528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1053.002040][T24528] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1053.115515][T24528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1053.157917][T24528] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1053.205109][T24805] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4903'. [ 1053.229274][T24528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1053.319856][T24816] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1053.759616][T24528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.780280][T24833] netlink: 'syz.5.4909': attribute type 1 has an invalid length. [ 1053.798221][T24833] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4909'. [ 1053.836609][T24830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4908'. [ 1053.914889][T24835] FAULT_INJECTION: forcing a failure. [ 1053.914889][T24835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.948254][T24835] CPU: 0 UID: 0 PID: 24835 Comm: syz.3.4910 Not tainted syzkaller #0 PREEMPT(full) [ 1053.948287][T24835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.948301][T24835] Call Trace: [ 1053.948311][T24835] [ 1053.948321][T24835] dump_stack_lvl+0xe8/0x150 [ 1053.948362][T24835] should_fail_ex+0x40c/0x560 [ 1053.948394][T24835] _copy_from_user+0x2d/0xb0 [ 1053.948428][T24835] ___sys_recvmsg+0x173/0x5a0 [ 1053.948451][T24835] ? ktime_get_ts64+0xa9/0x410 [ 1053.948485][T24835] ? __pfx____sys_recvmsg+0x10/0x10 [ 1053.948515][T24835] ? ktime_get_ts64+0xa9/0x410 [ 1053.948575][T24835] do_recvmmsg+0x31a/0x7f0 [ 1053.948607][T24835] ? __pfx_do_recvmmsg+0x10/0x10 [ 1053.948639][T24835] ? get_timespec64+0x119/0x1b0 [ 1053.948672][T24835] ? __pfx_get_timespec64+0x10/0x10 [ 1053.948812][T24835] __x64_sys_recvmmsg+0x1b7/0x250 [ 1053.948850][T24835] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1053.948888][T24835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.948914][T24835] do_syscall_64+0x174/0x580 [ 1053.948947][T24835] ? trace_irq_disable+0x3b/0x140 [ 1053.948976][T24835] ? clear_bhb_loop+0x40/0x90 [ 1053.949005][T24835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.949029][T24835] RIP: 0033:0x7f0722f9de59 [ 1053.949053][T24835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.949072][T24835] RSP: 002b:00007f0723da3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1053.949267][T24835] RAX: ffffffffffffffda RBX: 00007f0723225fa0 RCX: 00007f0722f9de59 [ 1053.949285][T24835] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 1053.949299][T24835] RBP: 00007f0723da3090 R08: 0000200000000480 R09: 0000000000000000 [ 1053.949315][T24835] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000001 [ 1053.949328][T24835] R13: 00007f0723226038 R14: 00007f0723225fa0 R15: 00007ffea3b216c8 [ 1053.949365][T24835] [ 1054.261506][T24528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.275308][T24829] lo speed is unknown, defaulting to 1000 [ 1054.331456][T23789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.339205][T23789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.349410][T23789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.356949][T23789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.670254][T24882] netlink: 'syz.3.4919': attribute type 21 has an invalid length. [ 1059.682072][T24889] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 2, id = 0 [ 1059.789827][T24866] netlink: 'syz.1.4917': attribute type 75 has an invalid length. [ 1059.837171][T24528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.307633][T24915] : renamed from bridge_slave_0 [ 1060.313947][T24914] x_tables: duplicate underflow at hook 2 [ 1060.744930][T24528] veth0_vlan: entered promiscuous mode [ 1060.796163][T24528] veth1_vlan: entered promiscuous mode [ 1060.913775][T24528] veth0_macvtap: entered promiscuous mode [ 1060.932419][T24528] veth1_macvtap: entered promiscuous mode [ 1060.981283][T24528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.008618][T24528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.051328][T23764] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.072969][T23764] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.099136][T23764] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.120512][T23764] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.546731][T23754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.571665][T23754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.720345][T23796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.759768][T23796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.432269][T24960] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4936'. [ 1063.719132][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4938'. [ 1063.770833][T24974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4938'. [ 1064.066478][T24971] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1064.175635][T24971] bond11 (unregistering): Released all slaves [ 1065.479253][T25023] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4944'. [ 1065.546313][T25023] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4944'. [ 1065.651400][T25030] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4944'. [ 1070.350975][T25065] syzkaller0: entered allmulticast mode [ 1070.500446][T25073] syzkaller0: entered promiscuous mode [ 1070.512233][T25059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1070.523335][T25073] syzkaller0: entered allmulticast mode [ 1070.531034][T25075] FAULT_INJECTION: forcing a failure. [ 1070.531034][T25075] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.585650][T25075] CPU: 1 UID: 0 PID: 25075 Comm: syz.1.4957 Not tainted syzkaller #0 PREEMPT(full) [ 1070.585685][T25075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1070.585701][T25075] Call Trace: [ 1070.585712][T25075] [ 1070.585723][T25075] dump_stack_lvl+0xe8/0x150 [ 1070.585768][T25075] should_fail_ex+0x40c/0x560 [ 1070.585805][T25075] should_failslab+0xa8/0x100 [ 1070.585847][T25075] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1070.585878][T25075] ? skb_clone+0x212/0x3a0 [ 1070.585902][T25075] ? skb_clone+0x212/0x3a0 [ 1070.585935][T25075] skb_clone+0x212/0x3a0 [ 1070.585966][T25075] __netlink_deliver_tap+0x413/0x860 [ 1070.586008][T25075] ? netlink_deliver_tap+0x2e/0x1b0 [ 1070.586042][T25075] netlink_deliver_tap+0x19c/0x1b0 [ 1070.586070][T25075] netlink_unicast+0x77f/0x940 [ 1070.586125][T25075] netlink_sendmsg+0x813/0xb40 [ 1070.586172][T25075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.586214][T25075] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1070.586247][T25075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.586271][T25075] sock_sendmsg_nosec+0x13a/0x180 [ 1070.586304][T25075] ____sys_sendmsg+0x54e/0x850 [ 1070.586352][T25075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.586403][T25075] ? import_iovec+0x73/0xa0 [ 1070.586444][T25075] ___sys_sendmsg+0x2a5/0x360 [ 1070.586481][T25075] ? __lock_acquire+0x683/0x2cf0 [ 1070.586531][T25075] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.586615][T25075] ? __fget_files+0x2a/0x420 [ 1070.586648][T25075] ? __fget_files+0x3a2/0x420 [ 1070.586694][T25075] __x64_sys_sendmsg+0x1b1/0x290 [ 1070.586737][T25075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1070.586800][T25075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.586830][T25075] do_syscall_64+0x174/0x580 [ 1070.586867][T25075] ? trace_irq_disable+0x3b/0x140 [ 1070.586900][T25075] ? clear_bhb_loop+0x40/0x90 [ 1070.586933][T25075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.586958][T25075] RIP: 0033:0x7fd94719de59 [ 1070.586982][T25075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.587005][T25075] RSP: 002b:00007fd947fc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.587031][T25075] RAX: ffffffffffffffda RBX: 00007fd947426090 RCX: 00007fd94719de59 [ 1070.587050][T25075] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1070.587066][T25075] RBP: 00007fd947fc3090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.587082][T25075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.587098][T25075] R13: 00007fd947426128 R14: 00007fd947426090 R15: 00007ffd99018b18 [ 1070.587147][T25075] [ 1071.278525][T25093] netlink: ct family unspecified [ 1071.308071][T25093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.348119][T25098] sctp: [Deprecated]: syz.5.4960 (pid 25098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1071.348119][T25098] Use struct sctp_sack_info instead [ 1071.404491][T25102] netlink: 'syz.8.4962': attribute type 8 has an invalid length. [ 1071.539792][T25107] x_tables: duplicate underflow at hook 1 [ 1071.763330][T25113] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4966'. [ 1071.779321][T25113] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4966'. [ 1072.945985][T25130] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4971'. [ 1073.417756][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1075.607368][T25131] batman_adv: batadv0: Adding interface: gretap1 [ 1075.642632][T25131] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.705378][T25131] batman_adv: batadv0: Interface activated: gretap1 [ 1076.121488][T25148] bridge_slave_0: left allmulticast mode [ 1076.169679][T25148] bridge_slave_0: left promiscuous mode [ 1076.207068][T25148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.255776][T25156] netlink: 'syz.7.4979': attribute type 1 has an invalid length. [ 1076.281201][T25148] bridge_slave_1: left allmulticast mode [ 1076.305564][T25156] netlink: 'syz.7.4979': attribute type 2 has an invalid length. [ 1076.325028][T25148] bridge_slave_1: left promiscuous mode [ 1076.353334][T25148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.498985][T25148] bond0: (slave bond_slave_0): Releasing backup interface [ 1076.552339][T25148] bond0: (slave bond_slave_1): Releasing backup interface [ 1076.597079][T25148] team0: Port device team_slave_0 removed [ 1076.634012][T25148] team0: Port device team_slave_1 removed [ 1076.660177][T25148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.680495][T25148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.697280][T25148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.708685][T25148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.731224][T25148] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1077.150141][T25192] sctp: [Deprecated]: syz.5.4985 (pid 25192) Use of int in maxseg socket option. [ 1077.150141][T25192] Use struct sctp_assoc_value instead [ 1077.178001][T25191] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4986'. [ 1077.252910][T25190] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4988'. [ 1077.742986][T25220] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4990'. [ 1077.917481][T25226] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4995'. [ 1078.210299][T25236] pim6reg: entered allmulticast mode [ 1078.318774][T25245] netlink: 'syz.1.4996': attribute type 9 has an invalid length. [ 1078.449962][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4996'. [ 1078.525188][T25249] netlink: 284 bytes leftover after parsing attributes in process `syz.5.4999'. [ 1078.711798][T25245] syz_tun: entered promiscuous mode [ 1078.847058][T25245] macvlan2: entered promiscuous mode [ 1078.893772][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4998'. [ 1078.943954][T25245] macvlan2: entered allmulticast mode [ 1078.997768][T25245] syz_tun: entered allmulticast mode [ 1079.172939][T25256] bridge6: entered promiscuous mode [ 1079.233186][T25265] veth1_to_bond: entered allmulticast mode [ 1079.265953][T25274] veth1_to_bond: entered promiscuous mode [ 1079.341164][T25287] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5004'. [ 1079.393039][T25263] veth1_to_bond: left promiscuous mode [ 1079.419607][T25263] veth1_to_bond: left allmulticast mode [ 1079.849505][T25302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5006'. [ 1079.918021][T25303] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5008'. [ 1080.044509][T25307] netlink: 'syz.7.5011': attribute type 21 has an invalid length. [ 1082.052536][T25384] macvtap1: entered promiscuous mode [ 1082.084760][T25384] vlan0: entered promiscuous mode [ 1082.124483][T25384] vlan0: left promiscuous mode [ 1082.135954][T25391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1082.149040][T25393] netlink: 'syz.5.5032': attribute type 1 has an invalid length. [ 1082.193646][T25395] __nla_validate_parse: 8 callbacks suppressed [ 1082.193668][T25395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5031'. [ 1082.288075][T25400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5034'. [ 1082.334436][T25392] kthread_run failed with err -4 [ 1082.348161][T25393] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1082.518509][T25405] netlink: 260 bytes leftover after parsing attributes in process `syz.7.5035'. [ 1082.812955][T25417] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 1082.902100][T25416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5039'. [ 1083.190818][T25434] lo: entered allmulticast mode [ 1083.261417][T25434] lo: left allmulticast mode [ 1083.661211][T25453] netlink: 'syz.1.5050': attribute type 11 has an invalid length. [ 1083.692074][T25453] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.5050'. [ 1083.748337][T25458] veth0: entered promiscuous mode [ 1083.877180][T25458] veth0: left promiscuous mode [ 1084.136064][T25475] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5057'. [ 1084.221494][T25470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.261331][T25470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.325218][T25470] dummy0: left promiscuous mode [ 1084.355025][T25470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.411991][T25489] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5057'. [ 1084.471009][T25470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.499294][T25470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.543614][T25470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1084.582183][T25470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1084.628218][T25470] veth1_vlan: left promiscuous mode [ 1084.649213][T25470] veth0_vlan: left promiscuous mode [ 1084.672308][T25470] veth0_vlan: entered promiscuous mode [ 1084.692892][T25470] veth1_vlan: entered promiscuous mode [ 1084.722003][T25470] veth1_macvtap: left promiscuous mode [ 1084.738649][T25470] veth0_macvtap: left promiscuous mode [ 1084.752068][T25470] veth0_macvtap: entered promiscuous mode [ 1084.774001][T25470] veth1_macvtap: entered promiscuous mode [ 1084.804034][T25470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1084.815717][T25470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1084.833858][T25470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1084.870821][T25470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1084.885136][T25470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1084.892770][T25470] dummy0: entered allmulticast mode [ 1084.899035][T25470] dummy0: entered promiscuous mode [ 1084.932154][T25470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1084.942408][T25470] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1084.959303][T25470] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1084.970411][T25470] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1084.981676][T25470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1084.989544][T25470] hsr1: Slave B () is not up; please bring it up to get a fully working HSR network [ 1085.047048][T25470] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1085.083377][T25470] gretap0: entered promiscuous mode [ 1085.093084][T25470] bridge6: left promiscuous mode [ 1085.197443][T23779] bridge0: port 1(team0) entered blocking state [ 1085.204267][T23779] bridge0: port 1(team0) entered forwarding state [ 1085.240210][T23787] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.250671][T23787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.260428][T23787] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1085.317772][T23787] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.343745][T23787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.372475][T23787] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1085.386243][T23787] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.421090][T23787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.465129][T23787] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1085.496183][T25494] netlink: 'syz.3.5058': attribute type 1 has an invalid length. [ 1085.528037][T25494] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 1085.669465][T25503] netlink: 'syz.1.5061': attribute type 354 has an invalid length. [ 1085.729215][T25500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5060'. [ 1085.752517][T25497] syzkaller1: entered promiscuous mode [ 1085.774807][T25497] syzkaller1: entered allmulticast mode [ 1085.792626][T25500] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1085.803275][T25510] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5062'. [ 1085.823163][T25500] syz_tun: entered promiscuous mode [ 1085.830166][T25500] debugfs: 'hsr1' already exists in 'hsr' [ 1085.837414][T25500] Cannot create hsr debugfs directory [ 1085.937577][T25510] netlink: 40124 bytes leftover after parsing attributes in process `syz.3.5062'. [ 1086.363339][T25529] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1086.442657][T25529] netlink: 'syz.1.5069': attribute type 10 has an invalid length. [ 1086.593296][T25538] : renamed from bridge_slave_0 (while UP) [ 1086.919145][T25547] syzkaller0: entered allmulticast mode [ 1087.312612][T25564] lo speed is unknown, defaulting to 1000 [ 1087.611083][T25579] xt_HMARK: proto mask must be zero with L3 mode [ 1087.635487][T25577] __nla_validate_parse: 4 callbacks suppressed [ 1087.635505][T25577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5080'. [ 1087.692179][T25579] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5081'. [ 1087.725895][T25580] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5081'. [ 1087.765916][T25579] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5081'. [ 1087.789550][T25579] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5081'. [ 1087.820223][T25579] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5081'. [ 1087.836843][T25579] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5081'. [ 1087.869184][T25579] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5081'. [ 1087.904269][T25579] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5081'. [ 1087.935963][T25579] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5081'. [ 1088.263176][T25591] netlink: 'syz.1.5085': attribute type 2 has an invalid length. [ 1088.531539][T15586] block nbd4: Receive control failed (result -107) [ 1088.833140][ T30] audit: type=1804 audit(1783931774.644:21): pid=25608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5087" name="/newroot/460/cgroup.controllers" dev="tmpfs" ino=2368 res=1 errno=0 [ 1088.869980][ T30] audit: type=1800 audit(1783931774.674:22): pid=25608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5087" name="cgroup.controllers" dev="tmpfs" ino=2368 res=0 errno=0 [ 1088.923012][ T30] audit: type=1804 audit(1783931774.734:23): pid=25603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5087" name="/newroot/460/cgroup.controllers" dev="tmpfs" ino=2368 res=1 errno=0 [ 1089.035244][T25611] tipc: Enabling of bearer rejected, failed to enable media [ 1089.128853][T25611] dummy0: Caught tx_queue_len zero misconfig [ 1089.216329][T15586] Bluetooth: hci3: link tx timeout [ 1089.228976][T15586] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1089.244226][T15847] Bluetooth: hci3: link tx timeout [ 1089.265627][T15847] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1089.749190][T25641] set match dimension is over the limit! [ 1090.268824][T23779] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.314442][T25652] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 1090.807862][T25671] syzkaller0: entered promiscuous mode [ 1090.826334][T25671] syzkaller0: entered allmulticast mode [ 1090.844322][T23779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.942653][T25676] lo speed is unknown, defaulting to 1000 [ 1091.347826][T15586] Bluetooth: hci3: command 0x0406 tx timeout [ 1092.660345][T25713] __nla_validate_parse: 51 callbacks suppressed [ 1092.660366][T25713] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5111'. [ 1092.718601][T25713] 0{X: renamed from gretap0 [ 1092.737013][T25722] block nbd7: not configured, cannot reconfigure [ 1092.767517][T25713] 0{X: entered allmulticast mode [ 1092.783852][T25713] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1092.914920][T25724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1092.972680][T25724] tipc: Enabling of bearer rejected, failed to enable media [ 1093.219880][T25730] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5118'. [ 1093.247044][T25728] bond6: entered promiscuous mode [ 1093.253052][T25728] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1093.274001][T25732] netlink: 'syz.3.5116': attribute type 8 has an invalid length. [ 1093.509706][T25741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5121'. [ 1093.549728][T25738] bond8: entered promiscuous mode [ 1093.587261][T25738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1093.598746][T25738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1093.622370][T25738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1093.634917][T25738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1093.668226][T25738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1094.057910][T25760] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5126'. [ 1094.151329][T25763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5128'. [ 1095.700658][T25810] bond8: left promiscuous mode [ 1095.706520][T25810] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1095.922920][T25821] netlink: 'syz.3.5138': attribute type 23 has an invalid length. [ 1097.090865][T25837] geneve2: left promiscuous mode [ 1097.321526][T25837] vlan4: left promiscuous mode [ 1097.337538][T25837] geneve3: left promiscuous mode [ 1097.355774][T25837] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1097.383718][ T7503] bridge0: entered promiscuous mode [ 1097.398573][T25861] pimreg: entered allmulticast mode [ 1097.424459][T25854] pimreg: left allmulticast mode [ 1098.108675][T25892] __nla_validate_parse: 4 callbacks suppressed [ 1098.108697][T25892] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5154'. [ 1098.161628][T25894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5154'. [ 1098.261207][T25896] netlink: 'syz.1.5155': attribute type 1 has an invalid length. [ 1098.284372][T25896] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5155'. [ 1098.320220][T25896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5155'. [ 1098.480792][T25901] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5157'. [ 1098.521429][T25901] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5157'. [ 1098.598416][T25901] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1098.643193][T25901] syzkaller1: linktype set to 270 [ 1099.728348][T15847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1099.749526][T15847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1099.762137][T15847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1099.783579][T15847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1099.797658][T15847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1099.999176][T25955] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5168'. [ 1100.100922][T25956] syzkaller0: entered promiscuous mode [ 1100.127657][T25956] syzkaller0: entered allmulticast mode [ 1100.155069][T25960] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5168'. [ 1100.461445][T25966] xt_limit: Overflow, try lower: 2/2147483648 [ 1101.081237][T25949] lo speed is unknown, defaulting to 1000 [ 1101.214120][T25987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5176'. [ 1101.248767][T25987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5176'. [ 1101.305845][T25987] netlink: 'syz.3.5176': attribute type 12 has an invalid length. [ 1101.332909][T25987] netlink: 'syz.3.5176': attribute type 13 has an invalid length. [ 1101.757243][T26006] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1101.896639][T15586] Bluetooth: hci6: command tx timeout [ 1102.597834][T26038] netlink: 'syz.3.5185': attribute type 1 has an invalid length. [ 1102.666386][T25949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.694851][T25949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.702263][T25949] bridge_slave_0: entered allmulticast mode [ 1102.727950][T25949] bridge_slave_0: entered promiscuous mode [ 1102.788227][T26038] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1102.840329][T26035] vlan6: entered allmulticast mode [ 1102.845973][T26035] bond0: entered allmulticast mode [ 1102.851582][T26035] bond_slave_0: entered allmulticast mode [ 1102.878818][T26040] batadv0: entered promiscuous mode [ 1102.894231][T26040] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1102.973066][T26041] bond9: (slave geneve5): making interface the new active one [ 1102.987445][T26041] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 1103.040981][T25949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.064877][T25949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.086382][T25949] bridge_slave_1: entered allmulticast mode [ 1103.112652][T25949] bridge_slave_1: entered promiscuous mode [ 1103.367524][T25949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.450021][T25949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.588513][T25949] team0: Port device team_slave_0 added [ 1103.598259][T25949] team0: Port device team_slave_1 added [ 1103.764125][T25949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.789390][T25949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.822173][T26061] __nla_validate_parse: 2 callbacks suppressed [ 1103.822193][T26061] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5192'. [ 1103.872718][T25949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.910233][T26061] ip6_vti0: Master is either lo or non-ether device [ 1103.939215][T25949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.971313][T25949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.978055][T15586] Bluetooth: hci6: command tx timeout [ 1104.087723][T25949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.403798][T25949] hsr_slave_0: entered promiscuous mode [ 1104.426156][T25949] hsr_slave_1: entered promiscuous mode [ 1104.433116][T25949] debugfs: 'hsr0' already exists in 'hsr' [ 1104.446295][T25949] Cannot create hsr debugfs directory [ 1105.281220][T26092] netlink: 'syz.1.5197': attribute type 1 has an invalid length. [ 1106.054727][T15586] Bluetooth: hci6: command tx timeout [ 1106.522088][T26055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1106.543015][T25949] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1106.642695][T25949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1106.705669][T25949] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1106.739907][T25949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1106.756566][T25949] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1106.843003][T25949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1106.893169][T26101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5200'. [ 1106.946828][T26101] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1106.956181][T25949] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1106.971312][T25949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1107.478596][T26133] syzkaller1: entered promiscuous mode [ 1107.493603][T26136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5206'. [ 1107.516817][T26133] syzkaller1: entered allmulticast mode [ 1107.662253][T26133] tipc: Started in network mode [ 1107.677208][T26133] tipc: Node identity ac14140f, cluster identity 4711 [ 1107.706542][T26133] tipc: New replicast peer: 255.255.255.255 [ 1107.718651][T26133] tipc: Enabled bearer , priority 10 [ 1107.733643][T26104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1107.764122][T26104] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1107.866293][T26104] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1107.908133][T26104] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1108.015189][T25949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.082784][T26151] syzkaller0: entered promiscuous mode [ 1108.115053][T26151] syzkaller0: entered allmulticast mode [ 1108.173519][T25949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.242895][T26159] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1108.292023][T23770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.299487][T23770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.357006][T26161] netlink: 'syz.3.5211': attribute type 1 has an invalid length. [ 1108.370268][T23754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.377626][T23754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.413471][T26162] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5211'. [ 1108.681313][T26161] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1108.771975][T26173] bond0: (slave veth0_to_bond): Releasing backup interface [ 1108.794089][T26173] veth0_to_bond: left promiscuous mode [ 1108.819009][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5212'. [ 1108.840913][T26173] bond11: (slave veth0_to_bond): making interface the new active one [ 1108.884402][T26173] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1108.931220][T26179] bond11: entered allmulticast mode [ 1108.954445][T26179] veth0_to_bond: entered allmulticast mode [ 1108.982621][ T7491] tipc: Node number set to 2886997007 [ 1109.034447][T26186] tipc: Enabled bearer , priority 0 [ 1109.081613][T26186] syzkaller0: entered promiscuous mode [ 1109.098876][T26186] syzkaller0: entered allmulticast mode [ 1109.200452][T26194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5216'. [ 1109.356447][T26191] tipc: Resetting bearer [ 1109.470892][T26191] tipc: Disabling bearer [ 1109.500523][T26210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5219'. [ 1109.823111][T26222] tipc: Started in network mode [ 1109.845292][T26222] tipc: Node identity 0a02e2e8c0cf, cluster identity 4711 [ 1109.882207][T26222] tipc: Enabled bearer , priority 0 [ 1109.996968][T26228] syzkaller0: entered promiscuous mode [ 1110.003100][T26228] syzkaller0: entered allmulticast mode [ 1110.019891][T26228] tipc: Resetting bearer [ 1110.089137][T26231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5224'. [ 1110.130118][T26237] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5225'. [ 1110.150274][T26237] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5225'. [ 1110.161568][T26237] netlink: 'syz.8.5225': attribute type 10 has an invalid length. [ 1110.187246][T26237] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5225'. [ 1110.396811][T23779] tipc: Resetting bearer [ 1110.514027][T26214] tipc: Resetting bearer [ 1110.804934][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5228'. [ 1110.826085][T26258] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5228'. [ 1110.851923][T26258] netlink: 'syz.8.5228': attribute type 12 has an invalid length. [ 1110.899010][T26258] netlink: 'syz.8.5228': attribute type 11 has an invalid length. [ 1114.782935][T26214] tipc: Disabling bearer [ 1114.811660][ T7503] tipc: Node number set to 3402490600 [ 1114.854047][T26271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5230'. [ 1115.270254][T26276] syzkaller0: entered promiscuous mode [ 1115.288074][T26276] syzkaller0: entered allmulticast mode [ 1115.320658][T26292] tipc: Enabling of bearer rejected, already enabled [ 1115.401048][T26292] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5234'. [ 1119.437444][T26308] veth0_to_team: entered promiscuous mode [ 1119.465343][T26308] gretap0: entered promiscuous mode [ 1119.472601][T26308] debugfs: 'hsr1' already exists in 'hsr' [ 1119.498679][T26308] Cannot create hsr debugfs directory [ 1119.626527][T25949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.672113][T26314] netlink: 'syz.1.5237': attribute type 1 has an invalid length. [ 1119.712718][T26317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5239'. [ 1119.768956][T26321] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5240'. [ 1119.819785][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5237'. [ 1119.904292][T26329] Bluetooth: MGMT ver 1.23 [ 1119.969105][T26314] bond12: entered promiscuous mode [ 1120.023158][T26327] netlink: 'syz.3.5241': attribute type 21 has an invalid length. [ 1120.033960][T26314] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1120.051404][T26327] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5241'. [ 1120.083173][T26327] netlink: 'syz.3.5241': attribute type 4 has an invalid length. [ 1120.111009][T26327] netlink: 'syz.3.5241': attribute type 5 has an invalid length. [ 1120.125099][T26327] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5241'. [ 1120.149529][T26328] netlink: 'syz.3.5241': attribute type 210 has an invalid length. [ 1120.176413][T26329] 8021q: VLANs not supported on ip6_vti0 [ 1120.870140][T25949] veth0_vlan: entered promiscuous mode [ 1120.892171][T25949] veth1_vlan: entered promiscuous mode [ 1121.039348][T25949] veth0_macvtap: entered promiscuous mode [ 1121.139841][T25949] veth1_macvtap: entered promiscuous mode [ 1121.227182][T25949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.359203][T25949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.481986][T23751] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.502350][T23751] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.620665][T23751] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.720217][T23780] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.799426][T26383] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5252'. [ 1122.172683][T26391] ip6tnl2: entered allmulticast mode [ 1122.278093][T23751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.304375][T23751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.430702][T23751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.472566][T23751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.679208][T26410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5256'. [ 1122.835444][T26416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1122.847862][T26416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1123.004224][T26419] gretap0: entered promiscuous mode [ 1123.049120][T23796] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1123.077263][ T7499] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1123.086384][T23796] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1123.396429][ T7491] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1123.421504][T26423] netlink: 80 bytes leftover after parsing attributes in process `syz.9.5164'. [ 1123.491796][T26430] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5262'. [ 1123.542253][T26434] tipc: Enabling of bearer rejected, already enabled [ 1123.906393][ T7499] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1123.929563][T26449] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5264'. [ 1123.954164][T26449] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5264'. [ 1124.019528][T23780] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.044957][T23780] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.091854][T23780] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.125166][T23780] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.387188][T15586] block nbd5: Receive control failed (result -32) [ 1124.396011][T15847] block nbd5: Receive control failed (result -32) [ 1125.444002][T26497] __nla_validate_parse: 3 callbacks suppressed [ 1125.444021][T26497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5277'. [ 1125.522964][T26494] syzkaller0: entered promiscuous mode [ 1125.561665][T26494] syzkaller0: entered allmulticast mode [ 1125.667383][T26506] netlink: 'syz.8.5280': attribute type 83 has an invalid length. [ 1126.240884][T26528] pim6reg: entered allmulticast mode [ 1126.421169][T26540] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1126.803810][T26557] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5296'. [ 1126.831978][T26557] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5296'. [ 1126.867457][T26563] netlink: 'syz.3.5298': attribute type 1 has an invalid length. [ 1126.966914][T26563] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1127.043991][T26574] : renamed from dummy0 (while UP) [ 1127.074806][T26558] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5295'. [ 1127.256375][T26580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5298'. [ 1127.345181][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1127.388893][T26563] hsr0: entered allmulticast mode [ 1127.434708][T26563] hsr_slave_0: entered allmulticast mode [ 1127.455329][T26563] hsr_slave_1: entered allmulticast mode [ 1127.469081][T26580] hsr_slave_0: left promiscuous mode [ 1127.488254][T26580] hsr_slave_1: left promiscuous mode [ 1127.510399][T26580] hsr0 (unregistering): left allmulticast mode [ 1127.585284][T26585] ip6gre1: entered promiscuous mode [ 1127.611533][T26585] ip6gre1: entered allmulticast mode [ 1127.668381][T23787] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1127.702177][ T7491] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1127.712768][T23787] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1127.958368][T26604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5304'. [ 1128.284998][ T7499] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1128.458233][ T7491] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1128.460516][T26615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5306'. [ 1128.707925][T26625] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1129.130022][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5310'. [ 1130.216808][T26578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1130.448328][T26636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5313'. [ 1130.475877][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5313'. [ 1130.566554][T26640] bond7 (unregistering): Released all slaves [ 1130.681663][T26646] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1130.724940][T26646] bond1 (unregistering): Released all slaves [ 1130.973415][T26659] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1131.266800][T26675] tipc: Enabling of bearer rejected, failed to enable media [ 1131.308787][T26676] netlink: 'syz.3.5322': attribute type 21 has an invalid length. [ 1131.533293][T23768] nci: nci_rx_work: unknown MT 0x6 [ 1131.681000][T26697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5326'. [ 1131.828302][T26701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5327'. [ 1131.838249][T26701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5327'. [ 1131.974871][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1131.975917][T26708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5329'. [ 1132.445607][T26724] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5334'. [ 1134.320272][T26680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1134.682708][T26756] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5343'. [ 1134.762753][T26760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5344'. [ 1134.774045][T26757] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5340'. [ 1134.987001][T26760] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1135.060380][T26760] bond7 (unregistering): Released all slaves [ 1135.133542][T26775] netlink: 'syz.9.5347': attribute type 12 has an invalid length. [ 1135.606624][T26793] __nla_validate_parse: 3 callbacks suppressed [ 1135.606647][T26793] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5352'. [ 1135.680923][T26798] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5353'. [ 1135.891879][T26812] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5356'. [ 1136.082585][T26816] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1136.121145][T26836] syzkaller0: entered promiscuous mode [ 1136.135645][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1136.149654][T26816] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1136.194403][T26836] syzkaller0: entered allmulticast mode [ 1136.249080][T26816] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1136.333416][T26816] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1136.442457][T26816] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1136.499125][T26816] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1136.527645][T26816] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1136.964340][T26855] lo speed is unknown, defaulting to 1000 [ 1137.090570][T26868] netlink: 'syz.7.5366': attribute type 30 has an invalid length. [ 1137.144311][T26868] vxlan0: entered promiscuous mode [ 1137.166632][T26873] netlink: 'syz.7.5366': attribute type 30 has an invalid length. [ 1137.192311][T26868] vxlan0: entered allmulticast mode [ 1137.262905][T26881] netlink: 'syz.1.5369': attribute type 1 has an invalid length. [ 1137.333804][T26873] vxlan0: entered promiscuous mode [ 1137.364677][T26873] vxlan0: entered allmulticast mode [ 1137.490352][T26881] bond13: entered promiscuous mode [ 1137.543395][T26881] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1137.660339][T26883] vti0: entered promiscuous mode [ 1137.678401][T26875] netlink: 'syz.1.5369': attribute type 13 has an invalid length. [ 1137.783279][T26892] ip_vti0: Master is either lo or non-ether device [ 1138.159729][T26914] tipc: Enabled bearer , priority 0 [ 1138.236445][T26910] syzkaller0: entered promiscuous mode [ 1138.257074][T26910] syzkaller0: entered allmulticast mode [ 1138.530410][T26924] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1138.550459][T26924] bond14 (unregistering): Released all slaves [ 1138.867354][T26910] tipc: Resetting bearer [ 1138.946855][T26935] netlink: 'syz.8.5383': attribute type 1 has an invalid length. [ 1138.967953][T26910] tipc: Disabling bearer [ 1138.994063][T26933] ip6gre1: entered promiscuous mode [ 1139.037925][T26938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1139.082401][T26933] ip6gre1: entered allmulticast mode [ 1139.105764][T23751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1139.142505][ T7499] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1139.153388][T23751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1139.305023][ T7499] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1139.663208][T26978] netlink: 'syz.1.5394': attribute type 8 has an invalid length. [ 1139.814901][ T7480] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1140.389082][T27001] syzkaller0: entered promiscuous mode [ 1140.415137][T27001] syzkaller0: entered allmulticast mode [ 1140.614705][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1140.951174][T27012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1140.966291][T27008] __nla_validate_parse: 44 callbacks suppressed [ 1140.966311][T27008] netlink: 175008 bytes leftover after parsing attributes in process `syz.9.5402'. [ 1141.009968][T27016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5401'. [ 1141.043959][T27016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5401'. [ 1142.003594][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 1142.048002][T27054] netlink: 'syz.1.5413': attribute type 1 has an invalid length. [ 1142.280860][T27054] bond14: entered promiscuous mode [ 1142.328150][T27054] bond14: entered allmulticast mode [ 1142.344346][T27054] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1142.573994][T27081] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5418'. [ 1142.934769][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1143.352027][T27111] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5425'. [ 1143.375960][T27111] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5425'. [ 1143.413132][T27111] geneve2: entered promiscuous mode [ 1143.418938][T27111] geneve2: entered allmulticast mode [ 1144.136024][T27134] netlink: 'syz.8.5432': attribute type 1 has an invalid length. [ 1144.383871][T27142] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5434'. [ 1144.435328][T27134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1144.621783][T27139] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1144.822135][T27140] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1144.904162][T27134] bond1: entered allmulticast mode [ 1145.204473][T27160] netlink: 'syz.9.5439': attribute type 12 has an invalid length. [ 1145.340713][T27167] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1145.368980][T27161] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5440'. [ 1146.144361][T27198] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5448'. [ 1146.227408][T27198] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5448'. [ 1146.292697][T27198] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5448'. [ 1146.322467][T27203] syzkaller1: entered promiscuous mode [ 1146.329144][T27203] syzkaller1: entered allmulticast mode [ 1146.541687][T27211] netlink: 'syz.1.5452': attribute type 1 has an invalid length. [ 1146.618475][T27211] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1146.622731][T27208] : renamed from bond_slave_0 [ 1146.754119][T27223] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5455'. [ 1146.893638][T27233] netlink: 'syz.1.5459': attribute type 1 has an invalid length. [ 1146.912898][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5456'. [ 1146.998976][T27233] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1147.450385][T27225] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.472033][T27225] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.777576][ T7491] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1147.979488][T27277] netlink: 'syz.3.5463': attribute type 1 has an invalid length. [ 1148.001459][T27225] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.051299][T27278] netlink: 'syz.3.5463': attribute type 46 has an invalid length. [ 1148.069227][ T7491] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1148.081501][T27225] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.321824][T27262] syzkaller1: entered promiscuous mode [ 1148.328670][T27262] syzkaller1: entered allmulticast mode [ 1148.632641][T27225] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.683009][T27225] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.807638][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5466'. [ 1149.035966][T27225] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.092535][T27225] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.533175][T23771] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.542229][T23771] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.610568][T23782] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.620314][T23782] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.652628][T23771] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.662830][T23771] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.691653][T23771] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.700669][T23771] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.920050][T27304] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1150.009266][T27308] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5469'. [ 1150.259261][T27247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1150.281739][T27265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5460'. [ 1150.354249][T27322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1150.702422][T27326] gretap2: entered allmulticast mode [ 1150.821036][T27332] tipc: Enabling of bearer rejected, failed to enable media [ 1150.856742][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1152.074411][T27377] lo speed is unknown, defaulting to 1000 [ 1152.153916][T27383] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5485'. [ 1152.171315][T27384] netlink: 'syz.1.5484': attribute type 1 has an invalid length. [ 1152.377546][T27384] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1152.774730][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1152.985691][T27404] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5487'. [ 1153.068897][T27404] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5487'. [ 1153.248635][T27405] syzkaller0: entered promiscuous mode [ 1153.261542][T27405] syzkaller0: entered allmulticast mode [ 1153.308419][T27402] tipc: Enabled bearer , priority 0 [ 1153.330285][T27402] tipc: Resetting bearer [ 1153.342071][ T30] audit: type=1107 audit(1783931839.154:24): pid=27409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1153.397380][T27402] tipc: Disabling bearer [ 1154.138408][T27425] 0{X: left allmulticast mode [ 1154.340530][T27425] bridge0: port 1(team0) entered disabled state [ 1154.556004][T27425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.571472][T27425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.659051][T27425] : left allmulticast mode [ 1154.705536][T27425] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1154.881827][T27425] bond11: left allmulticast mode [ 1154.887970][T27425] veth0_to_bond: left allmulticast mode [ 1154.898249][T27425] ip6tnl2: left allmulticast mode [ 1154.908800][T27425] ip6gre1: left promiscuous mode [ 1154.913996][T27425] ip6gre1: left allmulticast mode [ 1154.978115][T23751] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.013514][T23751] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.049023][T23751] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1155.139636][T23751] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.189357][T23751] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.198608][T27462] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5500'. [ 1155.224400][T23751] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1155.235939][T23751] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.254451][T23751] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.326900][T23751] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1155.363743][T27463] team0: left promiscuous mode [ 1155.370990][T27463] team_slave_0: left promiscuous mode [ 1155.387358][T27470] netlink: 'syz.7.5503': attribute type 11 has an invalid length. [ 1155.403361][T27463] team_slave_1: left promiscuous mode [ 1155.441608][T27463] macvlan2: left promiscuous mode [ 1155.450615][T27475] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5503'. [ 1155.463645][T27463] bridge4: left promiscuous mode [ 1155.571432][T27483] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5503'. [ 1155.589627][T27465] bridge0: port 2(vlan4) entered blocking state [ 1155.635716][T27465] bridge0: port 2(vlan4) entered disabled state [ 1155.657087][T27465] vlan4: entered allmulticast mode [ 1155.674907][T27465] geneve0: entered allmulticast mode [ 1155.717278][T27465] vlan4: entered promiscuous mode [ 1155.727676][T27465] geneve0: entered promiscuous mode [ 1155.747406][T27465] team0: entered promiscuous mode [ 1155.752706][T27465] team_slave_0: entered promiscuous mode [ 1155.763670][T27465] team_slave_1: entered promiscuous mode [ 1155.773809][T27465] macvlan2: entered promiscuous mode [ 1155.799213][T27465] bridge4: entered promiscuous mode [ 1155.819162][T27493] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1155.841283][T27461] bond0: entered promiscuous mode [ 1155.860683][T27461] bond0: entered allmulticast mode [ 1155.883534][T27461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.937762][T27475] hsr_slave_0: left promiscuous mode [ 1155.946670][T27475] hsr_slave_1: left promiscuous mode [ 1156.343665][T27508] netlink: 'syz.1.5507': attribute type 1 has an invalid length. [ 1156.433954][T27509] geneve3: entered promiscuous mode [ 1156.917456][T27529] netlink: 'syz.8.5515': attribute type 2 has an invalid length. [ 1156.952075][T27529] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5515'. [ 1157.060298][T27529] : entered promiscuous mode [ 1157.245846][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5518'. [ 1157.278580][T27534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5518'. [ 1158.301347][T27578] netlink: 264 bytes leftover after parsing attributes in process `syz.9.5528'. [ 1158.312555][T27578] netlink: 'syz.9.5528': attribute type 1 has an invalid length. [ 1158.322812][T27578] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5528'. [ 1158.417191][T27574] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5527'. [ 1158.428747][T27574] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5527'. [ 1158.534825][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1158.567289][T27582] bond0: option arp_validate: invalid value (55553) [ 1158.567436][T21437] bond0: (slave bond_slave_0): interface is now down [ 1158.606432][T21437] bond0: (slave bond_slave_1): interface is now down [ 1158.657229][T21437] bond0: (slave bond_slave_0): interface is now down [ 1158.704657][T21437] bond0: (slave bond_slave_1): interface is now down [ 1158.767161][T23793] bond0: (slave bond_slave_0): interface is now down [ 1158.792221][T23793] bond0: (slave bond_slave_1): interface is now down [ 1158.829266][T23793] bond0: now running without any active interface! [ 1159.029837][T27603] netlink: 'syz.9.5534': attribute type 4 has an invalid length. [ 1159.228979][T27608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5535'. [ 1159.463377][T27618] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5538'. [ 1159.490523][T27621] xt_hashlimit: size too large, truncated to 1048576 [ 1161.882154][T27628] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5542'. [ 1161.971537][T27638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5545'. [ 1161.985155][T27632] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1162.028874][T27637] syzkaller1: entered promiscuous mode [ 1162.048850][T27637] syzkaller1: entered allmulticast mode [ 1162.526860][T27661] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1162.618620][T27662] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1162.631850][T27661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5551'. [ 1162.645536][T27666] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5553'. [ 1162.659907][T27672] netlink: 'syz.9.5555': attribute type 1 has an invalid length. [ 1162.676889][T27670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5554'. [ 1162.696263][T27673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5554'. [ 1162.852405][ T5811] dummy0: entered promiscuous mode [ 1163.454238][T27704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5562'. [ 1163.638247][T27682] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5553'. [ 1163.660371][T27704] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1163.791464][T27704] macvlan3: entered promiscuous mode [ 1163.815686][T27704] macvlan3: entered allmulticast mode [ 1163.846990][T27704] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1163.882455][T27723] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5565'. [ 1175.816708][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1179.053180][T27779] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5576'. [ 1179.110489][T27779] openvswitch: netlink: Message has 512 unknown bytes. [ 1179.265924][T27783] syzkaller1: entered promiscuous mode [ 1179.273688][T27779] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5576'. [ 1179.299202][T27783] syzkaller1: entered allmulticast mode [ 1179.606646][T27798] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1179.622225][T27799] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1179.880708][T27815] netlink: 'syz.3.5587': attribute type 9 has an invalid length. [ 1180.715105][T27835] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5592'. [ 1180.818983][T27833] hsr1: Slave A (veth0_to_team) is not up; please bring it up to get a fully working HSR network [ 1180.838725][T27833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1180.852748][T27833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1180.987788][T27842] netlink: 'syz.9.5593': attribute type 4 has an invalid length. [ 1180.999909][T27842] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5593'. [ 1181.027410][T23788] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.047211][T23788] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.091837][T27842] .`: renamed from bond0 (while UP) [ 1181.150798][T23788] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.221456][T12040] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1181.244306][T12040] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1181.267096][T12040] bond1: (slave veth3): making interface the new active one [ 1181.274763][T12040] veth3: entered allmulticast mode [ 1181.293399][T12040] bond1: active interface up! [ 1181.318957][T27847] lo speed is unknown, defaulting to 1000 [ 1181.376921][T27851] netlink: 'syz.8.5597': attribute type 11 has an invalid length. [ 1181.389973][T27853] netlink: 'syz.8.5597': attribute type 11 has an invalid length. [ 1182.411070][T27870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.498701][T27870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1182.699025][T27803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1183.117951][T27879] lo speed is unknown, defaulting to 1000 [ 1183.206871][T27891] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5608'. [ 1183.737667][T27909] netlink: 'syz.3.5614': attribute type 1 has an invalid length. [ 1183.764324][T27910] Cannot find del_set index 14804 as target [ 1183.883287][T27909] bond13: entered promiscuous mode [ 1183.943981][T27909] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1184.084639][T27917] ipvlan2: entered allmulticast mode [ 1184.112778][T27917] bond13: entered allmulticast mode [ 1184.210442][T27909] ipvlan3: entered allmulticast mode [ 1184.297036][T27917] bond13: (slave bridge8): making interface the new active one [ 1184.313681][T27892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5605'. [ 1184.333663][T27917] bridge8: entered promiscuous mode [ 1184.349180][T27917] bridge8: entered allmulticast mode [ 1184.382420][T27917] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 1184.429052][T27892] batman_adv: batadv0: Removing interface: gretap2 [ 1184.671793][T27882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1184.931782][T27943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5619'. [ 1184.947425][T27939] smc: adding net device wg2 with user defined pnetid SYZ0 [ 1185.067177][T27946] netlink: 'syz.7.5619': attribute type 10 has an invalid length. [ 1185.807291][T27946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1185.837429][T27946] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 1185.849908][T27946] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1186.109744][T27962] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5623'. [ 1187.492331][T28009] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5631'. [ 1187.566027][T28012] syzkaller1: entered promiscuous mode [ 1187.592927][T28012] syzkaller1: entered allmulticast mode [ 1187.889532][T28014] lo: entered allmulticast mode [ 1187.926936][T28014] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5632'. [ 1188.114006][T28013] lo: left allmulticast mode [ 1189.340112][T28037] No such timeout policy "syz1" [ 1189.413048][T28037] netlink: zone id is out of range [ 1189.440827][T28037] netlink: zone id is out of range [ 1189.484972][T28037] netlink: zone id is out of range [ 1189.515403][T28037] netlink: zone id is out of range [ 1189.540104][T28037] netlink: zone id is out of range [ 1189.565512][T28037] netlink: zone id is out of range [ 1189.584580][T28037] netlink: zone id is out of range [ 1189.599103][T28037] netlink: zone id is out of range [ 1189.618571][T28037] netlink: zone id is out of range [ 1189.643253][T28037] netlink: zone id is out of range [ 1190.051749][T28066] IPVS: set_ctl: invalid protocol: 29992 100.1.1.1:20003 [ 1190.174124][T28066] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5640'. [ 1190.241352][T28067] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5640'. [ 1190.341356][T28069] batman_adv: batadv0: Adding interface: dummy0 [ 1190.354670][T28069] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.387057][T28075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5642'. [ 1190.424729][T28069] batman_adv: batadv0: Interface activated: dummy0 [ 1191.160797][T28102] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5646'. [ 1191.775335][T28122] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5650'. [ 1191.905551][T28125] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5649'. [ 1191.961854][T28122] macvlan2: entered promiscuous mode [ 1191.998920][T28122] macvlan2: entered allmulticast mode [ 1192.026638][T28122] bridge0: port 3(macvlan2) entered blocking state [ 1192.062603][T28122] bridge0: port 3(macvlan2) entered disabled state [ 1192.180060][T28135] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5652'. [ 1192.290366][T28135] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5652'. [ 1192.767825][T28156] ip6erspan0: entered allmulticast mode [ 1194.249405][T28192] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5660'. [ 1194.287381][T28192] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5660'. [ 1194.375328][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1196.297722][T28271] __nla_validate_parse: 3 callbacks suppressed [ 1196.297744][T28271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5676'. [ 1196.327663][T28274] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5678'. [ 1196.357526][T28271] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5676'. [ 1196.373116][T28271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5676'. [ 1196.531020][T28274] ksmbd: Unknown IPC event: 4, ignore. [ 1196.580286][T28271] tipc: MTU too low for tipc bearer [ 1196.670029][T28278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1196.907324][T28291] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5679'. [ 1197.002109][T28291] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5679'. [ 1197.096925][T28291] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5679'. [ 1197.160014][T28291] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5679'. [ 1197.229394][T28291] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5679'. [ 1197.271229][T28291] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5679'. [ 1197.650725][T28303] syzkaller0: entered promiscuous mode [ 1197.669977][T28303] syzkaller0: entered allmulticast mode [ 1197.730423][T28303] bond3 (unregistering): Released all slaves [ 1198.118810][T28321] SET target dimension over the limit! [ 1198.340806][T28329] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1198.505311][T28329] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1198.599668][T28329] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1198.669130][T28329] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1198.751057][T28329] bridge12: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1198.839845][T28329] bridge13: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1198.943695][T28329] bridge14: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1199.004740][T28329] bridge15: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1199.085008][T28329] bridge16: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1200.644189][T28400] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 1201.306370][T28423] net_ratelimit: 5 callbacks suppressed [ 1201.306391][T28423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1201.485174][T28428] netlink: 'syz.9.5709': attribute type 4 has an invalid length. [ 1201.530860][T28432] SET target dimension over the limit! [ 1201.699915][T28429] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1201.762738][T28429] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1201.902583][T28429] Cannot find set identified by id 65534 to match [ 1201.996165][T28429] netlink: 'syz.1.5710': attribute type 1 has an invalid length. [ 1202.413611][T28447] x_tables: duplicate underflow at hook 2 [ 1202.537362][T28454] netlink: 'syz.9.5717': attribute type 11 has an invalid length. [ 1202.780328][T28463] __nla_validate_parse: 31 callbacks suppressed [ 1202.780348][T28463] netlink: 276 bytes leftover after parsing attributes in process `syz.1.5718'. [ 1203.626385][T28492] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5725'. [ 1204.230698][T28505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.982291][T28517] sctp: [Deprecated]: syz.1.5731 (pid 28517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1204.982291][T28517] Use struct sctp_sack_info instead [ 1205.238339][T28519] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5732'. [ 1205.297370][T28519] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5732'. [ 1205.351801][T28519] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5732'. [ 1205.405378][T28519] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5732'. [ 1205.457674][T28519] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5732'. [ 1205.539346][T28519] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5732'. [ 1205.556974][T28522] netlink: 'syz.8.5733': attribute type 1 has an invalid length. [ 1205.621529][T28519] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5732'. [ 1205.667631][T28519] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5732'. [ 1205.702308][T28515] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1205.929754][T28522] bond3: entered promiscuous mode [ 1205.958619][T28522] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1206.004733][T28526] bond3: entered allmulticast mode [ 1206.248271][T28523] bond3: (slave bridge3): making interface the new active one [ 1206.329168][T28523] bridge3: entered promiscuous mode [ 1206.385924][T28523] bridge3: entered allmulticast mode [ 1206.448813][T28523] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1207.059051][T28546] syzkaller1: entered promiscuous mode [ 1207.082378][T28546] syzkaller1: entered allmulticast mode [ 1207.297375][T28560] syz.7.5742: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1207.350466][T28560] CPU: 0 UID: 0 PID: 28560 Comm: syz.7.5742 Not tainted syzkaller #0 PREEMPT(full) [ 1207.350499][T28560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1207.350515][T28560] Call Trace: [ 1207.350525][T28560] [ 1207.350538][T28560] dump_stack_lvl+0xe8/0x150 [ 1207.350581][T28560] warn_alloc+0x24c/0x270 [ 1207.350615][T28560] ? stack_depot_save_flags+0x33/0x800 [ 1207.350651][T28560] ? __pfx_warn_alloc+0x10/0x10 [ 1207.350683][T28560] ? kasan_save_track+0x3e/0x80 [ 1207.350719][T28560] ? __kasan_kmalloc+0x93/0xb0 [ 1207.350752][T28560] ? xsk_setsockopt+0x52a/0x960 [ 1207.350997][T28560] ? do_sock_setsockopt+0x17c/0x1b0 [ 1207.351041][T28560] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1207.351074][T28560] ? do_syscall_64+0x174/0x580 [ 1207.351109][T28560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.351145][T28560] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1207.351209][T28560] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1207.351242][T28560] ? __kasan_kmalloc+0x93/0xb0 [ 1207.351274][T28560] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1207.351305][T28560] ? __kmalloc_cache_noprof+0x150/0x660 [ 1207.351338][T28560] vmalloc_user_noprof+0xad/0xe0 [ 1207.351368][T28560] ? xskq_create+0xbf/0x170 [ 1207.351400][T28560] xskq_create+0xbf/0x170 [ 1207.351434][T28560] xsk_init_queue+0x8a/0xe0 [ 1207.351468][T28560] xsk_setsockopt+0x52a/0x960 [ 1207.351498][T28560] ? __fget_files+0x2a/0x420 [ 1207.351530][T28560] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1207.351561][T28560] ? __pfx_aa_sk_perm+0x10/0x10 [ 1207.351605][T28560] ? aa_sock_opt_perm+0xff/0x1a0 [ 1207.351633][T28560] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1207.351680][T28560] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1207.351713][T28560] do_sock_setsockopt+0x17c/0x1b0 [ 1207.351755][T28560] __x64_sys_setsockopt+0x13d/0x1b0 [ 1207.351793][T28560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.351820][T28560] do_syscall_64+0x174/0x580 [ 1207.351852][T28560] ? trace_irq_disable+0x3b/0x140 [ 1207.351885][T28560] ? clear_bhb_loop+0x40/0x90 [ 1207.351913][T28560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.351937][T28560] RIP: 0033:0x7f447899de59 [ 1207.351960][T28560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.351981][T28560] RSP: 002b:00007f4476bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1207.352006][T28560] RAX: ffffffffffffffda RBX: 00007f4478c25fa0 RCX: 00007f447899de59 [ 1207.352032][T28560] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1207.352047][T28560] RBP: 00007f4478a33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1207.352068][T28560] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.352083][T28560] R13: 00007f4478c26038 R14: 00007f4478c25fa0 R15: 00007ffc59036bf8 [ 1207.352121][T28560] [ 1207.353767][T28560] Mem-Info: [ 1207.728160][T28560] active_anon:11567 inactive_anon:2 isolated_anon:0 [ 1207.728160][T28560] active_file:41 inactive_file:44125 isolated_file:0 [ 1207.728160][T28560] unevictable:768 dirty:241 writeback:0 [ 1207.728160][T28560] slab_reclaimable:12193 slab_unreclaimable:195131 [ 1207.728160][T28560] mapped:42280 shmem:4673 pagetables:1813 [ 1207.728160][T28560] sec_pagetables:0 bounce:0 [ 1207.728160][T28560] kernel_misc_reclaimable:0 [ 1207.728160][T28560] free:1182570 free_pcp:14167 free_cma:0 [ 1207.884886][T28560] Node 0 active_anon:46268kB inactive_anon:8kB active_file:164kB inactive_file:176304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:169120kB dirty:960kB writeback:0kB shmem:17156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17884kB pagetables:7116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1207.953858][T28565] __nla_validate_parse: 30 callbacks suppressed [ 1207.953899][T28565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5742'. [ 1208.093699][T28561] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5742'. [ 1208.147988][T28560] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1208.207001][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806540a400: rx timeout, send abort [ 1208.222912][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053280c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1208.245333][T28560] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.315831][T28560] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 1208.332663][T28560] Node 0 DMA32 free:782088kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46368kB inactive_anon:8kB active_file:164kB inactive_file:176304kB unevictable:1536kB writepending:960kB zspages:0kB present:3129332kB managed:2548764kB mlocked:0kB bounce:0kB free_pcp:49120kB local_pcp:29044kB free_cma:0kB [ 1208.371715][T28560] lowmem_reserve[]: 0 0 0 0 0 [ 1208.382390][T28560] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.421274][T28560] lowmem_reserve[]: 0 0 0 0 0 [ 1208.439393][T28560] Node 1 Normal free:3939260kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6548kB local_pcp:0kB free_cma:0kB [ 1208.533621][T28560] lowmem_reserve[]: 0 0 0 0 0 [ 1208.561217][T28560] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1208.664880][T28560] Node 0 DMA32: 1553*4kB (UME) 1080*8kB (UME) 201*16kB (UME) 702*32kB (UME) 124*64kB (UME) 56*128kB (UME) 23*256kB (UM) 5*512kB (M) 2*1024kB (ME) 5*2048kB (UME) 173*4096kB (UM) = 784980kB [ 1208.719370][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806540a400: abort rx timeout. Force session deactivation [ 1208.794188][T28560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1208.865945][T28560] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3939260kB [ 1208.959635][T28560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.007998][T28560] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1209.064065][T28560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.128593][T28560] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1209.159629][T28560] 48837 total pagecache pages [ 1209.172399][T28560] 1 pages in swap cache [ 1209.181611][T28560] Free swap = 124992kB [ 1209.189060][T28560] Total swap = 124996kB [ 1209.194303][T28560] 2097051 pages RAM [ 1209.203181][T28560] 0 pages HighMem/MovableOnly [ 1209.212443][T28560] 428178 pages reserved [ 1209.221400][T28560] 0 pages cma reserved [ 1212.390653][T28637] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5760'. [ 1212.502820][T28637] netlink: 'syz.8.5760': attribute type 11 has an invalid length. [ 1212.775834][T28642] netlink: 'syz.8.5760': attribute type 1 has an invalid length. [ 1213.017255][T28637] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5760'. [ 1213.048587][T28646] bond4 (unregistering): Released all slaves [ 1213.598664][T28658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5763'. [ 1213.802482][T28664] netlink: 'syz.1.5764': attribute type 1 has an invalid length. [ 1214.027452][T28664] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1214.228364][T28668] veth5: entered allmulticast mode [ 1214.286600][T28668] bond15: (slave veth5): Enslaving as an active interface with a down link [ 1214.363447][T28674] bond15: (slave veth0_to_bond): making interface the new active one [ 1214.416399][T28674] veth0_to_bond: entered promiscuous mode [ 1214.447341][T28674] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1214.489201][T28676] tipc: Enabling of bearer rejected, failed to enable media [ 1214.517914][T28673] tipc: Enabling of bearer rejected, failed to enable media [ 1214.969082][T28699] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1215.106439][T28699] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5771'. [ 1215.164089][T28699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5771'. [ 1215.249613][T28699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5771'. [ 1217.274339][T28740] lo speed is unknown, defaulting to 1000 [ 1217.921787][T28751] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5784'. [ 1218.557396][T28759] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1218.610305][T28759] syzkaller1: linktype set to 823 [ 1218.778705][T28761] netlink: 'syz.7.5786': attribute type 1 has an invalid length. [ 1219.133491][T28761] bond8: (slave dummy0): making interface the new active one [ 1219.145130][T28761] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1219.242445][T28770] netlink: 'syz.8.5788': attribute type 1 has an invalid length. [ 1219.293170][T28765] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1219.586705][T28770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1219.780049][T28776] vlan2: entered allmulticast mode [ 1219.797229][T28776] bond4: entered allmulticast mode [ 1220.370197][T28789] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5794'. [ 1220.772108][T28797] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5796'. [ 1220.829581][T28797] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5796'. [ 1221.895111][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1221.978241][T28829] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5801'. [ 1222.585533][T28841] syzkaller0: entered promiscuous mode [ 1222.624219][T28841] syzkaller0: entered allmulticast mode [ 1222.990853][T28850] netlink: 16170 bytes leftover after parsing attributes in process `syz.7.5807'. [ 1223.303309][T28857] xt_hashlimit: size too large, truncated to 1048576 [ 1223.523064][T28861] netlink: 'syz.8.5809': attribute type 27 has an invalid length. [ 1224.219416][T28861] batman_adv: batadv0: Interface deactivated: dummy0 [ 1224.327744][T15586] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1224.348830][T15586] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1224.361007][T15586] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1224.384010][T15586] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1224.397509][T15586] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1224.499190][T15847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1224.508882][T15847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1224.519567][T15847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1224.532477][T15847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1224.543715][T15847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1225.122878][T28861] batman_adv: batadv0: Interface deactivated: gretap1 [ 1225.260312][T28861] vti0: left promiscuous mode [ 1225.271297][T28861] bond1: left allmulticast mode [ 1225.278367][T28861] veth3: left allmulticast mode [ 1225.308124][T28861] bond3: left promiscuous mode [ 1225.315733][T28861] bridge3: left promiscuous mode [ 1225.321446][T28861] bond3: left allmulticast mode [ 1225.327446][T28861] bridge3: left allmulticast mode [ 1225.352761][T28861] vlan2: left allmulticast mode [ 1225.365258][T28861] bond4: left allmulticast mode [ 1225.467467][T28865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.476567][T28865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.492012][T28865] batman_adv: batadv0: Interface activated: dummy0 [ 1225.510667][T28865] batadv0: left promiscuous mode [ 1225.530885][T28865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.640287][T28865] veth1_vlan: left promiscuous mode [ 1225.652161][T28865] veth0_vlan: left promiscuous mode [ 1225.666614][T28865] veth0_vlan: entered promiscuous mode [ 1225.678530][T28865] veth1_vlan: entered promiscuous mode [ 1225.692656][T28865] veth1_macvtap: left promiscuous mode [ 1225.700198][T28865] veth0_macvtap: left promiscuous mode [ 1225.709198][T28865] veth0_macvtap: entered promiscuous mode [ 1225.717900][T28865] veth1_macvtap: entered promiscuous mode [ 1225.738153][T28865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1225.750011][T28865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1225.760322][T28865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1225.770088][T28865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1225.784025][T28865] batman_adv: batadv0: Interface activated: gretap1 [ 1225.876290][T28865] batadv0: entered promiscuous mode [ 1225.887182][T28865] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1225.915877][T28865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1225.936305][T28865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1225.953257][T28865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1225.966791][T28865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1225.981526][T28865] ip6gretap0: entered promiscuous mode [ 1226.154003][T28867] syzkaller0: entered promiscuous mode [ 1226.166527][T28867] syzkaller0: entered allmulticast mode [ 1226.442323][T23753] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.473390][T23753] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.507796][T23753] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.616753][T15847] Bluetooth: hci7: command tx timeout [ 1226.703069][T23771] veth0_to_bond: left promiscuous mode [ 1226.755232][T28894] sctp: [Deprecated]: syz.3.5815 (pid 28894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1226.755232][T28894] Use struct sctp_sack_info instead [ 1227.048836][T28911] veth0: entered promiscuous mode [ 1227.071630][T28910] veth0: left promiscuous mode [ 1227.254515][T28869] lo speed is unknown, defaulting to 1000 [ 1228.169461][T28928] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1228.303653][T28928] bond9 (unregistering): Released all slaves [ 1228.694821][T15847] Bluetooth: hci7: command tx timeout [ 1228.873258][T28948] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5829'. [ 1229.733269][T28987] netlink: 'syz.7.5837': attribute type 1 has an invalid length. [ 1229.864110][T28987] bond9: entered promiscuous mode [ 1229.870553][T28987] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1229.882617][T28998] netlink: 'syz.1.5840': attribute type 29 has an invalid length. [ 1229.926354][T28991] bridge_slave_1: mtu less than device minimum [ 1230.383608][T28869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.403790][T28869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.423262][T28869] bridge_slave_0: entered allmulticast mode [ 1230.438379][T28869] bridge_slave_0: entered promiscuous mode [ 1230.457771][T28869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.468336][T28869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.476338][T28869] bridge_slave_1: entered allmulticast mode [ 1230.486418][T28869] bridge_slave_1: entered promiscuous mode [ 1230.518352][T29019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1230.586801][T28869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.600156][T28869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.649396][T28869] team0: Port device team_slave_0 added [ 1230.659348][T28869] team0: Port device team_slave_1 added [ 1230.692230][T28869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1230.701959][T28869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.746276][T28869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.762256][T28869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.770829][T28869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.801796][T15847] Bluetooth: hci7: command tx timeout [ 1230.811710][T28869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.857641][ T31] INFO: task syz.5.5054:25467 blocked for more than 143 seconds. [ 1230.865633][ T31] Not tainted syzkaller #0 [ 1230.870805][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1230.891632][ T31] task:syz.5.5054 state:D stack:27200 pid:25467 tgid:25465 ppid:15584 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1230.914627][ T31] Call Trace: [ 1230.924663][ T31] [ 1230.934650][ T31] __schedule+0x17d9/0x56c0 [ 1230.941319][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1230.948390][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1230.954786][ T31] ? __pfx___schedule+0x10/0x10 [ 1230.961236][ T31] ? schedule+0x90/0x2b0 [ 1230.979601][ T31] schedule+0x164/0x2b0 [ 1230.997103][ T31] schedule_preempt_disabled+0x13/0x30 [ 1231.025074][T28869] hsr_slave_0: entered promiscuous mode [ 1231.033909][ T31] __mutex_lock+0x7bf/0x1550 [ 1231.062918][T28869] hsr_slave_1: entered promiscuous mode [ 1231.076901][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1231.092101][ T31] ? nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 1231.102227][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1231.114514][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1231.126649][ T31] ? kern_path+0xd1/0x150 [ 1231.139148][ T31] nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 1231.149872][T29025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5845'. [ 1231.159627][ T31] ? __nla_parse+0x40/0x60 [ 1231.164413][ T31] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 1231.171585][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1231.185999][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1231.228694][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1231.270351][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1231.313324][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1231.364963][ T31] ? security_capable+0x7e/0x2c0 [ 1231.380609][ T31] genl_rcv_msg+0x614/0x7a0 [ 1231.400871][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1231.423302][ T31] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 1231.442093][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1231.455606][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1231.469901][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1231.484414][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1231.501665][ T31] ? down_read+0x2be/0x330 [ 1231.515688][ T31] genl_rcv+0x28/0x40 [ 1231.521474][ T31] netlink_unicast+0x7bb/0x940 [ 1231.534950][ T31] netlink_sendmsg+0x813/0xb40 [ 1231.544569][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1231.554817][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1231.560224][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1231.566167][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1231.571682][ T31] ____sys_sendmsg+0x54e/0x850 [ 1231.577989][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1231.583875][ T31] ? import_iovec+0x73/0xa0 [ 1231.589860][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1231.595176][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1231.600559][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1231.607036][ T31] ? futex_wait+0x2a2/0x390 [ 1231.611819][ T31] ? __fget_files+0x2a/0x420 [ 1231.617195][ T31] ? __fget_files+0x3a2/0x420 [ 1231.622011][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1231.628566][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1231.634255][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.641285][ T31] do_syscall_64+0x174/0x580 [ 1231.647246][ T31] ? trace_irq_disable+0x3b/0x140 [ 1231.652404][ T31] ? clear_bhb_loop+0x40/0x90 [ 1231.658607][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.666050][ T31] RIP: 0033:0x7fcd3b19de59 [ 1231.670593][ T31] RSP: 002b:00007fcd3c135028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1231.680703][ T31] RAX: ffffffffffffffda RBX: 00007fcd3b425fa0 RCX: 00007fcd3b19de59 [ 1231.689764][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000004 [ 1231.699253][ T31] RBP: 00007fcd3b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 1231.707640][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.716169][ T31] R13: 00007fcd3b426038 R14: 00007fcd3b425fa0 R15: 00007ffec5c18628 [ 1231.724412][ T31] [ 1231.731403][ T31] [ 1231.731403][ T31] Showing all locks held in the system: [ 1231.785570][ T31] 1 lock held by khungtaskd/31: [ 1231.797567][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1231.825249][ T31] 2 locks held by getty/5376: [ 1231.836642][ T31] #0: ffff8880361700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1231.879522][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1231.954637][ T31] 3 locks held by kworker/0:6/5738: [ 1231.965802][ T31] 3 locks held by kworker/0:14/7503: [ 1231.994559][ T31] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1232.015767][ T31] #1: ffffc9000354fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1232.044642][ T31] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1232.064680][ T31] 1 lock held by syz-executor/20208: [ 1232.076213][ T31] #0: ffff888051eacea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1232.106503][ T31] 4 locks held by kworker/u8:35/23773: [ 1232.113562][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1232.155693][ T31] #1: ffffc9000414fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1232.207418][ T31] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1232.244677][ T31] #3: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1232.267371][ T31] 2 locks held by syz.6.4788/24319: [ 1232.285599][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1232.307387][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 1232.345608][ T31] 2 locks held by syz.5.5054/25467: [ 1232.351178][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1232.375075][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 1232.394585][ T31] 2 locks held by syz.9.5746/28577: [ 1232.405923][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1232.424552][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 1232.444691][ T31] 1 lock held by syz-executor/28869: [ 1232.464584][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1232.475692][ T31] 1 lock held by syz.8.5843/29019: [ 1232.490716][ T31] [ 1232.499325][ T31] ============================================= [ 1232.499325][ T31] [ 1232.508734][ T31] NMI backtrace for cpu 0 [ 1232.508753][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1232.508777][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1232.508790][ T31] Call Trace: [ 1232.508799][ T31] [ 1232.508809][ T31] dump_stack_lvl+0xe8/0x150 [ 1232.508850][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1232.508958][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1232.509003][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1232.509035][ T31] sys_info+0x135/0x170 [ 1232.509058][ T31] watchdog+0xfd7/0x1030 [ 1232.509101][ T31] ? watchdog+0x1c7/0x1030 [ 1232.509136][ T31] kthread+0x388/0x470 [ 1232.509168][ T31] ? __pfx_watchdog+0x10/0x10 [ 1232.509192][ T31] ? __pfx_kthread+0x10/0x10 [ 1232.509224][ T31] ret_from_fork+0x514/0xb70 [ 1232.509276][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1232.509322][ T31] ? __switch_to+0xc89/0x1420 [ 1232.509360][ T31] ? __pfx_kthread+0x10/0x10 [ 1232.509392][ T31] ret_from_fork_asm+0x1a/0x30 [ 1232.509431][ T31] [ 1232.509454][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1232.625567][ C1] NMI backtrace for cpu 1 [ 1232.625587][ C1] CPU: 1 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted syzkaller #0 PREEMPT(full) [ 1232.625609][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1232.625621][ C1] RIP: 0010:zap_class+0xf7/0x330 [ 1232.625647][ C1] Code: 48 29 e8 48 c1 f8 05 48 8b 0c 24 48 0f ab 41 10 48 ff 05 fc 4e d1 14 4d 8b 6d 08 4d 85 ed 74 b5 49 83 c5 f8 74 af 45 8b 75 00 <41> f6 c6 fc 74 e7 41 c1 ee 08 4a 8d 1c 75 10 e5 74 93 49 81 fe 00 [ 1232.625664][ C1] RSP: 0018:ffffc90000087c50 EFLAGS: 00000097 [ 1232.625681][ C1] RAX: 0000000000019ccd RBX: ffffffff93781eaa RCX: 0000000000019cca [ 1232.625695][ C1] RDX: ffffffff942fe538 RSI: 0000000000000004 RDI: 0000000000037c08 [ 1232.625708][ C1] RBP: ffffffff9473e9b0 R08: ffffffff81afab08 R09: 0000000000000000 [ 1232.625722][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000038126 [ 1232.625734][ C1] R13: ffffffff94894f30 R14: 0000000003109f10 R15: 000000000000083e [ 1232.625748][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 1232.625764][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1232.625777][ C1] CR2: 0000560bf9c72ee8 CR3: 000000007f4d0000 CR4: 00000000003526f0 [ 1232.625794][ C1] Call Trace: [ 1232.625802][ C1] [ 1232.625815][ C1] lockdep_unregister_key+0x1c3/0x350 [ 1232.625853][ C1] pwq_release_workfn+0x746/0x880 [ 1232.625880][ C1] kthread_worker_fn+0x4eb/0xb20 [ 1232.625907][ C1] ? kthread_worker_fn+0xdf/0xb20 [ 1232.625934][ C1] ? __pfx_pwq_release_workfn+0x10/0x10 [ 1232.625958][ C1] kthread+0x388/0x470 [ 1232.625984][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 1232.626007][ C1] ? __pfx_kthread+0x10/0x10 [ 1232.626033][ C1] ret_from_fork+0x514/0xb70 [ 1232.626061][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1232.626088][ C1] ? __switch_to+0xc89/0x1420 [ 1232.626111][ C1] ? __pfx_kthread+0x10/0x10 [ 1232.626137][ C1] ret_from_fork_asm+0x1a/0x30 [ 1232.626163][ C1] [ 1232.887567][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1232.895018][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1232.904965][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1232.915887][ T31] Call Trace: [ 1232.922984][ T31] [ 1232.926292][ T31] vpanic+0x56c/0xa60 [ 1232.931673][ T31] ? __pfx___schedule+0x10/0x10 [ 1232.937464][ T31] ? __pfx_vpanic+0x10/0x10 [ 1232.942557][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1232.951124][ T31] panic+0xc5/0xd0 [ 1232.955634][ T31] ? __pfx_panic+0x10/0x10 [ 1232.960721][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1232.967308][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1232.973792][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1232.981415][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1232.987896][ T31] watchdog+0x1030/0x1030 [ 1232.993051][ T31] ? watchdog+0x1c7/0x1030 [ 1232.997977][ T31] kthread+0x388/0x470 [ 1233.002285][ T31] ? __pfx_watchdog+0x10/0x10 [ 1233.007370][ T31] ? __pfx_kthread+0x10/0x10 [ 1233.013059][ T31] ret_from_fork+0x514/0xb70 [ 1233.018147][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1233.024036][ T31] ? __switch_to+0xc89/0x1420 [ 1233.028910][ T31] ? __pfx_kthread+0x10/0x10 [ 1233.033643][ T31] ret_from_fork_asm+0x1a/0x30 [ 1233.038741][ T31] [ 1233.042597][ T31] Kernel Offset: disabled [ 1233.046948][ T31] Rebooting in 86400 seconds..