last executing test programs: 10m22.605226988s ago: executing program 0 (id=3190): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800012200000000fcdbdf2502180000fe0300090012000008000100ac1414"], 0x24}}, 0x8000000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c00)=ANY=[], 0x190) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x2a, 0x0, "739a016ad067af8ec1190685cbcc83b0785f20e6feac4039e0ef2234165bfa31d18d90fe76cd29c937970bdeb54e23d9e1ea70596be4775ecb01d04a415c29f6549f86556f2d2a1e6e1b1d5dab586670"}, 0xd8) 10m21.980549566s ago: executing program 0 (id=3193): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x300, 0x70bd2c, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044896}, 0x24000041) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x50}}, 0x20008000) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@val={0x0, 0x88ca}, @void, @ipv4=@udp={{0x6, 0x4, 0x1, 0x37, 0xb9, 0x66, 0x0, 0xff, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010100, {[@end]}}, {0x4e21, 0x4e20, 0xa1, 0x0, @opaque="0dba2dfa35a4fb7161039fc7fd819a8f7466ab4ec37baea615f66c386475bc6bebdb77fb9d26e2bfb1a45bb9808bb0dd889b4d55b3195460a104f075902b36c854abfea5bb1cf0b775c20ee5a56c9411725c70474a34e17d5807ebc119c17a418a83aecd71437b9bf98e2ebd44702f1c246b6783a2160743dd69b899520bd135eff62c39f37e98b7b09a6032d7f1d43ec4f9465404cd212c8a"}}}, 0xbd) readv(r0, &(0x7f0000001b80)=[{&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)}, {&(0x7f0000001700)=""/203, 0xcb}, {&(0x7f0000001800)=""/197, 0xc5}, {&(0x7f0000001900)=""/234, 0xea}, {&(0x7f0000001a00)=""/109, 0x6d}, {&(0x7f0000001a80)=""/216, 0xd8}], 0x9) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x800) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x6c, r10, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "623d56ff98992d74a3595fd3f1e68313"}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "670d26df32"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x54, r12, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x140488d0}, 0x4040010) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002180), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x3c, r13, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x6eddf3b3f2a5391}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x28, r10, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) r14 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000002380)="2af1a1b0c39e62f6fd1251d44a2f88eb77fa035f2e2c1a17234dc45a30d93f713aa9a16dd3f3915790a9e387c00d4fd263693cd2dbf44cf3091b5a5444c954b92542c6ba5affd57c7b98a185bb85e98f59f94ffe7fc21d99598fc8cb7a89f34741a8958911d07f528457a60a661b3279dce4bcb8ce5d2e7dea6815", 0x7b) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002400)={0x5, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002440)=r15, 0x4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r11, &(0x7f0000002540)={&(0x7f0000002480), 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x20, r10, 0x101, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 10m20.211059228s ago: executing program 0 (id=3196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44040) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) 10m19.750190351s ago: executing program 0 (id=3199): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000001c0)=0x2, &(0x7f0000000200)=0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = accept4$packet(r1, 0x0, &(0x7f0000000100), 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0xc4000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000140)=0x1, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x5}, &(0x7f0000000180)=0xb354, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffd, 0xc555, 0x7c, 0x10, 0x6}}], 0x58}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xca}}, 0x0, 0x0, 0x3a, 0x0, "2f2d74024b13e2058efc1a35b3a334d39483fbf342cf8c8852f93f9265bd6e3f082c4d1c1e7b7fa6afa933974245ab6f2d5c2b4362d94ed14218fe92209b9bc5c60c45ae397860dcc175770287c11a3d"}, 0xd8) 10m19.014096986s ago: executing program 0 (id=3201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000291ab7a9e5df8e8ff4835f6aa2ffce837e4096beb59af750d7b7f647c172e42263cf3a1cb9c45deb66832a0188d63af3c48e27e3568d75161c", @ANYRES16=r3, @ANYBLOB="000029bd7000fddbdf258200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000100000045000000"], 0x28}}, 0x8005) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newneigh={0x24, 0x1c, 0x10, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, r5, 0x1, 0xc0, 0xb}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}}, 0x0) 10m17.640765153s ago: executing program 0 (id=3207): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010010000010096880f7531f6e16a6e0000dc00000000000000"], 0x18}, 0x404f444) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000980)=@dellink={0x228, 0x11, 0x220, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x69800, 0x24091}, [@IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wlan0\x00'}, {0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'veth1\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5d727}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @AF_BRIDGE={0x4}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x1, 0x8, 0x1}]}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x1ff}, {0x8, 0x6, 0x0, 0x0, 0x53c9}, {0x8, 0xd, 0x0, 0x0, 0x4}]}}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x2}]}, @AF_MPLS]}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x118, 0x16, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x3f2, 0x9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1f, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7ff, 0xd07, 0x3958}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xa, 0x80000000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x7}}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x5356, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x380000000000000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xa261, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9fa2, 0xffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xa, 0xffffffff}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @broadcast}}]}]}]}, 0x228}}, 0x4000) unshare(0x62000000) r7 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r7, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600160000000000000000000a0000000bc4ec30471815a475c0ea99b8068880e6ac4d8387bd4c", @ANYRES32=0x0], 0x18}}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40081) r10 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) recvmsg$can_bcm(r10, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40002163) 10m2.499679498s ago: executing program 32 (id=3207): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010010000010096880f7531f6e16a6e0000dc00000000000000"], 0x18}, 0x404f444) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000980)=@dellink={0x228, 0x11, 0x220, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x69800, 0x24091}, [@IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wlan0\x00'}, {0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'veth1\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5d727}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @AF_BRIDGE={0x4}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x1, 0x8, 0x1}]}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x1ff}, {0x8, 0x6, 0x0, 0x0, 0x53c9}, {0x8, 0xd, 0x0, 0x0, 0x4}]}}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x2}]}, @AF_MPLS]}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x118, 0x16, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x3f2, 0x9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1f, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7ff, 0xd07, 0x3958}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xa, 0x80000000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x7}}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x5356, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x380000000000000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xa261, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9fa2, 0xffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xa, 0xffffffff}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @broadcast}}]}]}]}, 0x228}}, 0x4000) unshare(0x62000000) r7 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r7, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001600160000000000000000000a0000000bc4ec30471815a475c0ea99b8068880e6ac4d8387bd4c", @ANYRES32=0x0], 0x18}}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40081) r10 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) recvmsg$can_bcm(r10, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40002163) 8m34.648630145s ago: executing program 5 (id=3447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 8m34.067009106s ago: executing program 5 (id=3449): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x8, 0xfff}], 0x1, 0x10, 0x9e3, 0x9}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x11, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000300)={@loopback, @broadcast, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xa, 0x6, 0x44, @remote, @private1, 0x8000, 0xc6, 0x7, 0x4}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast1, @initdev}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000c00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000004c0)={0x6d4, r6, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xe}, @ETHTOOL_A_LINKMODES_OURS={0x684, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x93c8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'devices.deny\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xa0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[$H&}[]]\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*,:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']@!/!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc0000000}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@#-.\xa7^^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ')#*.&\\\\@9:]\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'devices.deny\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/{!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'devices.deny\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'devices.deny\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x1a8, 0x3, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.&\x1c^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'devices.deny\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#+!*.\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '{-]!\\--&,%[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbdcc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'devices.deny\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'devices.deny\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}z\'\xd5\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "9e32d58f795ba6b5960f0639aac13d577edfa8961d6a9f4f59340f9ccc7e6093b8080485efb99c083486cf186fabf15c5ba5de06f15c1f4aafc04c1d756b3c98f00b290a1c3f5466e4538e213e55be6cd505409144e5c66c4da3c14e82bee7a64bf800d0fdf9142b977db5860863a71fa526c9a63444ab4d586b02c6edcbf70a4f15ef9ac1b7b64922c26a186cfa27e9d4f829a6a1c3ec9b0b162e1a180a96a703f466edd25a71d0f76220acb6c8727336"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x59ca}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x27a6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xd9+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x75}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5083}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#/,[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.!.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!.-A\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda64}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '#}-#)#e[/\xba.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}]}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x6d4}, 0x1, 0x0, 0x0, 0x20040884}, 0x8005) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000000c80)={0x0, @generic={0x2b, "155ebc0bffa6063eb412b0d392c2"}, @ax25={0x3, @null, 0x7}, @can, 0x0, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000c40)='virt_wifi0\x00', 0x4, 0x8, 0x1000}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) sendmsg$kcm(r3, &(0x7f0000001580)={&(0x7f0000000d00)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000d80)="69221abf49f061d31d03c51a6ee64a13b8d4a43d297ac265f08477747483a06287b7bb114248853639d99dea99e60121adc9a0722e530a66ead513ecc75e42e4c01842fba0b86535bb7f407fc6a5c7f9b02db81805328e57d86ea7dc8584ab199999f9d08228b0a522f7f308364b447800c9e21c32a6202324d4dcd3c3f6d419afd591fc16b0fcaf64d6decb2dedb813110eb03528754928b04fe6008c3f94fad0d146c387eae7f9b422abbd00f547ba27f76a2e6d55f7861ca798521678a946a70c5aec919f35d5221d4f3fdc5ef46e17c8d4dc21f245bfc034288dfe548989c4d60e9017395e5e", 0xe8}, {&(0x7f0000000e80)="87dd5e3ecb0721a1eb4051f2a5133cca6e997b833704162d5d55df35a8b6fc152e77721130e6d58bc817855f774977de4fbf698d1df554ad0b0aea2e030daac413f38a84f63967788112cbf3a72fe34f5db18399fb185d3cba43184eb15a7c0136e7232cf3b448d2", 0x68}, {&(0x7f0000000f00)="eec41276140ac0549123d5c277654a89520dea2a6cfc7a2a992a90ab21f8c1fe2cc1d90ba4e1c609d4a1eeac99faf4644ffdd29cdc8588d030ed9fe49eb3e7676d690a6672f494d91109075044e008414969184a472de2e68d87616143dafc1357fe4df6c5857837b42cdcf5181475", 0x6f}, {&(0x7f0000000f80)="53b8a6f0cdb413b98a31e1c747fe1435b395bc8d056b36ce9dd3998ce13ad6e737b944726da8759a9f2293198fbe3f9d12c06f3b1a9ff620501f2a16bd8c2ab6ef26c51e7c90d7ecca6afde5d595df3de33214397604c08ff3944176bd71b02144b8bfa33fb47324e1f9ad5378ba2662b09a7ec61f3c3e71e039427627e805f2b2e7eff4afce05b008364859557a1df60ef24edae7d00b9515cf071c6c6f430bc7d89083f10b6849f77900a1df0cee4291619fe17f1b8c20e14cbd63414634669b77f63ec7c72a826a", 0xc9}, {&(0x7f0000001080)="4effcb39d2e688a3e3cbb4f105e2e03e6b4c9d28e94be5399a5bd2c136bf684a13979821d8bf27ccb28dff26215b31c503acb87af640fefbd0bdafb4f6bf124bbb96f25c9e2f8c69e6a1cdc28f1b2df87743ae790c9161ea7bbd7e48dc4d09c2022a6386361db9d1b201a3456ce5e51a0477b7f4bfbe7e7031625a1d18ba4e986bb512475d8779dc9625d77ff924568e850a6a025b3272f1976a73d858c8716269033070566d45bdf8c93e37fbef8ac48dd619d52118225b245e084692812582c8198e192e7d55", 0xc7}, {&(0x7f0000001180)="0509c735939d398b23d4f32420c54cf800f16aa1971fa1cbe78d83a62850ed7e295e9da5850a8c0d10fcec5575926c0411c5", 0x32}], 0x6, &(0x7f0000001240)=[{0xd8, 0x10a, 0x10, "42dfa64a61e09cb126b6d41c70c70fbe6939d85deeae5a10b09efe56a68e2b7ea784ae24b3d365a4824c45bca2f74cb790d24253f3c4306e92859b21c505a55e9e608fb907af0a93c5f97ab4153a178f6ca72dcf145fe5adb9df7e86f5c38cc68698202e11044c947bd17e4b9bb7408905a7afc0e22e5c7605ea8443f6a7e58e361330cec467a47e65ff04774690a9df61b0dbeb9e8d9a3f1d9817c0775dce3910abf255529d3fea68299be0b2666d63dd598e091a83cd742b9590533cfb1b7e5865"}, {0x58, 0x112, 0x532, "1fcf74c41b693318c90607085d97c90d88f486ac17559052ed2c454249680560a30a574af9fdc5b270c0966b1b95cfab75f2ffcad0f5b83527a04b39de8375c611cb7927ffa0dc"}, {0x50, 0x102, 0x0, "41f4c95ef265d7882f8147b2f6747621854f04bfc2a836e4eb263cbd836c99dd8fa69439f89609097cd9e98d2f27c82d7f5707067b4466ab82"}, {0xa8, 0x88, 0x3f46, "04c4b72051964efd45016b41a99c6e6c3bf94afe28b767aa60d975c48ee7d66c46e98014b4569984f5257c895a5a001c958b6e5ee85e6c6e7dddd363e13c134baff9023c34dc17155eb4b5587d00c62186e36c93b409b3cfc23fa90e913bc233ea1400849f55389613b4550498213a2e05bad132f7f0c618f3cb53a0739d1a243979f9f5023de5e0bcf80e8058c1c344998a0041314397"}, {0xe8, 0x88, 0x5, "b8c740f3d8f10774254d990e464f551ea0c24eb67bd0d9010dc5382b00d286e439cafbfb40c41075d0609695467fe97eb1806ec6db54121ba68fdb11d0be958b597d9240cf49f5f3ab5fd6c9285ce0f3de239b4a5072066f78e137a4b7a2fb3bc8f2e5a79f58426dac761b9571acac955b6b464bcf3ed3ab6ab43ea64e1fbab1f79c424ae04839edb4cc39f4fd795c0768af85b912f4fa14af2c2b94ee20fa9749a1a87677cb139c4cf232488ff5f2ca36efc5c9fb62af368cc6b9a4127c979fd17e24d33e0f5b7f8322d76a0740acb82d0ba86a2d8c4cc7"}, {0x10, 0x10b, 0x4}, {0x10, 0x108, 0x4d}], 0x330}, 0x4008004) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x98, r12, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:init_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x8841}, 0x8000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r11) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000001940)={&(0x7f0000001780), 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xa0, r13, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ad8664afd04c0cf2716365e430d7128d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "94189508440b1911a17dc60dc8491bed"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "bdea966b1840528838d2d1ee64f143cb"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2c0a4ac96608e08e6c9c77331614690d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6e0d5daf5d5a46e749dd20181432351d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5cf4cbe5c7737c5ce962e3f70a1b8ce4"}, @NL80211_ATTR_MAC={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000019c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001a00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001a40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001a80)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x64, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, 'virt_wifi0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '#/,[\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'syztnl0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000000) sendmsg$IPVS_CMD_GET_DEST(r11, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x4008000) 8m33.170060555s ago: executing program 5 (id=3453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 8m32.566399281s ago: executing program 5 (id=3456): syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7ff7}, @device_b, @device_b, @from_mac=@broadcast, {0x4, 0x40}, @value=@ver_80211n={0x0, 0x5, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x1, 0x4, 0x60, @val={0x10, 0x1, 0x2}, [{0xdd, 0x78, "85a1dcc024e26bcdd4e76e506ad74567b4d9d065701392e0514850035abfc7b094188e89d7baeab2793ec8628eaec404124954001960729b624f57a3ed5b9ed207029bc02a426558c2857318231cd07b6350ea9c1204c89f171a672264bbe3b72c90bc506bc5291ab089fc54d54911b23e0e5ea5da13ac17"}, {0xdd, 0xf5, "30504a6a8a079768b068336693c8ab908aded2fbaf9188420adf1237a9430f1faec3136778bb779cf6a0b3ee84df753dfd59b065bbadea66bfdb959594887ff1dd3dea573a40e64320c492661c84673346d406b5ac9b7125677a3299dc6c93478def912e815cac70a77acd2fa6732d399863ce972c6e2844773dc21209143ae49820ebf44dd5702f876e87ae6367addb9a16dd548030d10300d14dcffc1dee710fd4956aa85ebb04e50d2cd53332d88a71e0531e56451940e3823bd8a5cb1878031f6bd7fae3d7853e1f71ce0aeb4a1fec68abafd4a20b082f6b713d032afe7203a6a1fc246418bd48b68e029e1d14d5e25442ba34"}, {0xdd, 0x9c, "4218366cfa8c1e42750a949e944688d1e0ea4033f10cebb9d461d23609958e2d9ea6a37c56ae61f7782dc3642e84f76ea89209cd43e0a1a0dc4caa7ecf948d22a9c6c2595ff97790255e17de48a771a75e9773f579a39e9004e0afd87188b9ec4ff99be44acbf9e476ec71b5000917ea84c5822ad26d704f1096c1d026b430b787547540932a4b12ab33b296bb2ac1f255437a504f3b1bed2ed0627a"}, {0xdd, 0xdd, "ad936a402383995d0c04bf1da3b8c44471d3a9142569fd2a617b157d3eca9349285def6f46ad28fdc5b0a754b9a1dfb98b553f6fdf2a40ee38562b6c319880d2372e304a15d2fef3e5f4cc1de235767fcc2d11d73f12ea994edddbec08b0fd347e2e5c486f53e66d182fa11bf24e4cb9eb3ffc03e9e6385480d124ce99b0de9b88eb415cdb9641638fa62fffa53e0b314e57e00cfb3edc227a1b94fe3ec87e6f9480ac5ba9e45e48c404973061ab5f51dd8e6fefdc0ae8f5cb666f6fc91c5605168272438a2d3e5fcee14f4a39e009f06a5582602facf65c83c349e820"}, {0xdd, 0x68, "22c996fd2c6ee28d1e1223fe3a8c9d5126583a43f91f0968496c5b996d43a69180ceebd80fd9ce2cf92a19279dba5dd78c7126d15ca7ebcda4e00b75ca3e2aeaacec0642f092fc44b8510c44fe9a7704f1a22a1f15b9da6296287f3f8127c92330c9185279f36424"}, {0xdd, 0xb4, "1fba0608b05aa6b5deae7d7fda8efcd1209e12077a7f9d7ae0d45c005ca923724594676b021a8b5b317ca22b71dff883c07238678d9d6d7bd5a8b4feb1589f3cfcc97d8863daa85d1067c6e16050f852dfd4484a1460bac81d0f253c4e2520bc9022a3e13cb74a0faff9c6f9332a184651658d0cc793f5c5dbe969282b6bd5fb0d0410a528e601c2a6359618f73330b48553cf6e368e11f8feb6de0dedd4b186ae16a53ef7f5b5d363410d1082696bbda2cdce19"}]}, 0x433) 8m31.001812549s ago: executing program 5 (id=3460): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x184}}, 0x40080) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r3 = socket(0x2a, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000009500"/32], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000001c0)) ioctl$XFS_IOC_GETPARENTS(r4, 0xc028583e, &(0x7f0000000540)={{[0xc860, 0x4, 0xd]}, 0x0, 0x3, 0xa1, 0x0, &(0x7f00000003c0)=[{{@_ha_fsid={[0x6, 0x6]}, {0x3, 0xfffa, 0xc17b, 0xc}}, 0x7fff, 0x0, ']/.\x00'}, {{@_ha_fsid={[0x1f, 0x5]}, {0x2, 0x2, 0xdba3, 0x5}}, 0xfffffe00, 0x0, '\'{\"\x00'}, {{@align=0x3, {0x4, 0x4, 0x1000, 0x6}}, 0xc6, 0x0, '-\x00'}, {{@align=0x9, {0x6, 0xa, 0x10, 0x7}}, 0x0, 0x0, 'B\'R{/#--:\x00'}, {{@align=0x1, {0x5, 0x8, 0x2, 0x3}}, 0x1, 0x0, 'ns/cgroup\x00'}, {{@align=0x1, {0x800, 0x7, 0x6, 0x5}}, 0x8, 0x0, '-\x00'}, {{@align, {0x0, 0x6, 0xd90, 0x5}}, 0x2, 0x0, ')\x00'}]}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000180)=0x255f, 0x4) sendto$inet(r7, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000000801020000000000000000000000010600024083060e00000900010073797a3100000000060002404305000005000300880000000600024000f80000050003003a00000004716536592ea531ee9c000f2f101c9c65def2314c6fa6d7b6852741e762363d6836ac87ef0428b4ddd81de22920b772f5aadc739d0d1612a82ae20f387a50b5b677da984b08dc00516b6b5ebe9160f8f9c38a95e7b84c6c1b400212b6f05c69d579a6ecf42a5871bae5a9563c0b883d5cac6a5baeb34861038325a27585922b82dd94e0655402020b10005707de98c660af1cf0c5"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) 8m29.1763463s ago: executing program 5 (id=3465): unshare(0x6a040000) (async, rerun: 64) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 64) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) mmap(&(0x7f00001b1000/0x1000)=nil, 0x1000, 0x3, 0x20010, r0, 0x8be88000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="00e0c911544741f46e99288266b13d7a70f3356adaae07bc702945e2962dcf5c0f3aeb42daeac175411aaf90b923708e4a9153fa12231ba6786fb01fc2f5b4dcc99309e0646caef3adb97eea0448c3ace6a794bf1f795added9df57af2617402873d0705e941f5f6347e5beb7b21440a5d0d24c0a2cde97d20bd8f7068f9f43a4421b53e8d96250aa1bf13adac2f63c76a06bc0136f6936d0aaec417bb17b0457056c565d64f7efcac1a16de850a4cea12bdbeb2e6eb628b1d13e526a9bf57ddc379ca089d6275236fc9fcc4524f4664d3a7fa6b5b6a3724e838d15b186cc8c08c83c1e4b95f99253f3c228e", 0xec) 8m14.397308854s ago: executing program 3 (id=3492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x1f}], 0x1}}], 0x1, 0x200, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r3 = socket(0xa, 0x3, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) sendto$inet(r2, 0x0, 0x0, 0x4048002, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x4004084, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x43, 0x0, &(0x7f0000000100)) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000100)) poll(&(0x7f0000000000), 0x0, 0x2000000c) 8m12.965508469s ago: executing program 33 (id=3465): unshare(0x6a040000) (async, rerun: 64) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 64) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) mmap(&(0x7f00001b1000/0x1000)=nil, 0x1000, 0x3, 0x20010, r0, 0x8be88000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="00e0c911544741f46e99288266b13d7a70f3356adaae07bc702945e2962dcf5c0f3aeb42daeac175411aaf90b923708e4a9153fa12231ba6786fb01fc2f5b4dcc99309e0646caef3adb97eea0448c3ace6a794bf1f795added9df57af2617402873d0705e941f5f6347e5beb7b21440a5d0d24c0a2cde97d20bd8f7068f9f43a4421b53e8d96250aa1bf13adac2f63c76a06bc0136f6936d0aaec417bb17b0457056c565d64f7efcac1a16de850a4cea12bdbeb2e6eb628b1d13e526a9bf57ddc379ca089d6275236fc9fcc4524f4664d3a7fa6b5b6a3724e838d15b186cc8c08c83c1e4b95f99253f3c228e", 0xec) 8m12.618618979s ago: executing program 3 (id=3495): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010ecdf41b8000000e46bb8957f354798", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000100030000000800150000000000"], 0x44}}, 0x0) 8m11.514802441s ago: executing program 3 (id=3496): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000080)=0x1c) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000080)=0x1c) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) (async) 8m10.501555827s ago: executing program 3 (id=3498): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002e000900274a64bdf00300000000000000000468013fa236a6887543f8ec736869f28683739b59001e8076f2dc439fba864fcd11331ef9fbd6a91995379518f0de16a693e3b114cef5aeb98cee4049de01316f656370c36946ccb52ce4a98e043799aa3840291f7d044401000000000000008ce595a616b737f23e1ea7"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088480000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000140)={r3, 0x8, 0x401}) close(r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7cff00000000", 0x8}, {&(0x7f0000000100)="301ed9f9a338ef", 0x7}], 0x3) 8m10.256499151s ago: executing program 1 (id=3499): unshare(0x26020480) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x20040800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 8m8.766154281s ago: executing program 1 (id=3500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000029000b0027bd70000040000002"], 0x1c}}, 0x4040080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x15}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xf}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xd}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1d}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004840) 8m7.717488681s ago: executing program 1 (id=3501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2300, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0xd, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) 7m58.691391907s ago: executing program 1 (id=3506): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f00000009c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x2, 0x3, {0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="c2766f875a24e966a5883022b41437a76bb4992d86554e10a67c71492c89630bb92e2efba9e250a5082dd42aa0684e4cd77fc77c744103aaee959c7219e1b2e3eb9287441651ff3c18da0d666712f0b39907eff8811752e667881c64fc2e6b6234160979a7fbdcf715ce708fed8f4ab3b72e85f6f023a5efe475af74b36ffbeb3fbab99dd0522301c7241270ad4f42d43e8c12c3b32f258be0bde9840075ea71dd0380a94d14", 0xa6}, {&(0x7f0000000140)="d83ae5f5caeca74f658d3868f365c63edaa8c13bee5ba8f1a82bffd5ae87c59c64dd7f6259aff897950933581991d9f11e6abc1ad2107331e1a80839133a0bdfb0148e25f079ce55f0b31acce638029ed0027f57ba1604ac380b9ffed7925c00e948a63f586d3ff97bd7981b4218edb969d424c5cfd2e0fc21a638e4e12097032007", 0x82}, {&(0x7f0000000200)="d9dc0dfccdb1a82bb8a691a07dc867621f77648d2f5d8d8a50358bcfacd29bd4ec88cee20a890b0efe9a2540b7d621e5c6088c0e2f27feb02b168352fcc379078537e4f6fb3ce5d3d621bda2e336e587a715b1560f0e8a7490861007f7c12a7352d0993792bd5b7bdcd261488cd132ea64f52c5ad63291c95d1ee3fd3957fc03b69b375cb887aad70b14f2854c07c7877978ce3361d4353ea10d9a57248f804b128f71a5f7bebaf579670068604b18c7541cdc646f4fd2cb7233e4dfdd6fd40c6c25f3066191d22484965032b576e5f8c4", 0xd1}, {&(0x7f0000000300)="a94cac9d086cbfad2d4503e4efb509ce83a6d44aafaf96ef3b025c93208acadf4758b10d0fa500bec5011c36d4a6c54f0142e5411dfb569310438f45e25a2d8d92f7c0b268ca89184c12a6d6e9601a71c02eb969f8b045280e975f867aaffe3e6964aef574a42355626beb598c31bc253cb57d4dc1d193f59c284cdc123f6513f1a41f3678de4f91cd839e33d37f9479d2844f8d1e", 0x95}], 0x4, &(0x7f0000000400)=[{0xc0, 0x2, 0x4, "f3e4229efefc1c53584ae3afc5a7ff6236856866eab141d5608387ce21e262153a97113a31a6532a52f8da2d85824acbd8fe7b37514a2b43c810def6418b13d80d9a5b9b92a9ee28237ff85752f0ce63dee5bf7e492973afafa52494066e8a18ab41d29f14ee19ce124012644647676e69345e8ce05d34ce59555b104c14736f9e5b0c8cb720d312a07142e600c46b7bdfd32daa05886e573b55204dfdac6b2135330914384be1a75edef9b5079a8b"}, {0xd0, 0x115, 0x9, "064cc6f99a8ece4ef0ccc5742bd6d685a7c6e22d0ef77a283bbd398853625e20979de5c4f29a6ad2fa26b9203b32c599cfd7dc0a7fcc5a34e6beaa380cc4d6600ea0c3a94dc97f15e48f64251f6daa88b60ef6dd356445d0d8aa2a2a0c2b44510975fa3217a3c3db3d0b9f4ae1ad7ebb3359a88bc3c598fbc23e26ec87b661b4c688613d8d7a0bf64b504cd089dce89f44edb1588a18e50af8fe50c8ed7f21b9ecdd173b502a2560e19b5ab6a6e2fb5a86b138878cbb92df32ba4a6e4850"}, {0x100, 0x119, 0x4, "b546eefe8655f3894fcec310b474bf8765b028691c8f23e56be375cae0a2da4fec3f539d0ce900295fd9b69d2f61e1072df892a0cdf42e53fce66574b4c8d19b88bc72e4651ccce409b6fc5ce9d6902be210579053722e8792b66ce3ebd3f8975f0f64ffd854a54462b4993c5803defa18dc80e7adce2a854c38a16523ccde010ad01fc5a9ccf390c9075108d25c61df9c5f3e636389d2587d2ab2193298d0302965dce75048e1c19fca478d28b3cc10b8504a045dd3519df1ac38f71d9049372f96bdbb655a3ab142e5077eea078aadd2a28eaff10584f8fafce25ec7390bc92d96fc4de540d76b9d9ba2be3bb2"}, {0x90, 0x118, 0x8, "e155d21be9a1f529f06cebf1c172a2e7de7d67a2486944f46aec983829ca1e046745104f248d8259e30142d15844b2a2dec33566994380bf0f6a897d11bc99a64df4df2428470d23d9cd0d81ba9c066e66602caddb223105f9159cd01933762140190210d05874ec386ec877646512a0ca79b6304e66b3cbc40915ec6e30"}, {0x28, 0x114, 0x0, "032c14cbc9542c087f013f3cf1ba70abbe"}, {0xa8, 0x108, 0x4, "a0aa51ac62d369393a0e791f6057c110adc00bed63ee2f49af68785e848f3a289386c63671708537226d2174ceb7b8c377c42ff6dacec97f3cba4952068f54476a1d6f3d37c8ae1d9b8d3a06f1d917c20c0ae47357c109782992e0e197ceb962fe8e9db7699268b9753776d889e195e1829db767175873a72327697040bbf51c545f9045b6bd2115126962f1189e9a6709987a5834c9"}, {0xa0, 0x115, 0x1, "bea4625a6a20305f0c162057867b6cdfba263fdd243b55d2a9a05650865fca19d210e64be81323250cbcc5f0042ab7848fe0da9c60d8e407874b7e833f4497d229b69f0b18a722d66e59efd41a4de1a78981670a96cce2c0f7a829eee476f304c255f86730c9cbd4b79e94afd9ebeac227cc8c6103f226dc68c1a1308b44439409441f1b5262c683eef3cb2df8c0e73d"}, {0x70, 0x10f, 0x1a, "1634da84a278cf00159f789673cc8350a40e61b0a849bace7c9a2b38eff30b65b90a0baf933d344a4f3e125159ea32ab2824f66d2e0e46ee016eef3b0b1329231180ff262abacc4d25d3becde2d5694e77bea5fca7023232d3"}, {0x88, 0x10c, 0x100, "d2c6115481ae7129e59b3a22b43938f06a6daae17718aca28af7752aa2650ed5e317acc915fdc874907ed4b829a8335dc77bd2e3213ded4310240a00534e4507e8c4dbde323028ba2a2a42b9a5ddda53e8c60a9595b8de6f14a7e3b43f7529b4ac5a351818877fc6660f8a1b92521535c74f"}], 0x588}, 0x80) r2 = socket$kcm(0x29, 0x5, 0x0) getpeername(r2, &(0x7f0000000a00)=@l2tp6, &(0x7f0000000a80)=0x80) r3 = accept4$inet(r1, &(0x7f0000000ac0), &(0x7f0000000b00)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000b40)={0x0, 0x5, 0x10, 0x10, 0x7}, &(0x7f0000000b80)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000bc0)={r4, 0xb}, &(0x7f0000000c00)=0x8) readv(r2, &(0x7f0000002cc0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/68, 0x44}], 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000004a00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000005100)=0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000068c0)=[{&(0x7f0000002d00)={0x27, 0x0, 0x0, 0x4, 0x4, 0x1, "451dd35ef9d80409c63208dc1637c78e21d73d49308ee418638156bf83e8ab8d4b2f053cbd21efdd01bf8fad46fc93ee0c329005364f56a6013ca99bbb57de", 0x20}, 0x60, &(0x7f0000003180)=[{&(0x7f0000002d80)="9c7fb643302bc5f4c5f4906c2e5f201f2f50f48a7f716dea301f1db695eae6ab24261b1238212726efbb10c9e3d7696e4c2311af65d3", 0x36}, {&(0x7f0000002dc0)="d86d8ccb5e7e8ebc60e7e121d053153e5002be72c8c0e4f1e2de2228989a43191baa590c318c57e7ebedb4687f32a241d0b61b82fe3b52cccde65af90fc9c23d27e8999db0010e25fd90ba7dfaff0277b485ff417722a052179298fc117ddb08ba63859e2cb54ee6efba5ac6469485c6c70a7bcd7e3e7cae59d4e5bb0426ba733dc13aca60449bccae14a1955ce5af53c236b5ee57ff4944460e7c23452c853ba10e3b740156e5aea278db7003c309a0f7592c787d35a9edfec620e0983e2cd05aba05d5b30e702e29a49395795480ad8fc293cdd479782606ed6124a743", 0xde}, {&(0x7f0000002ec0)="ec0596d0c42ef51368a053956f365fc19ef26ebe921a09eca2eef65a5e156affe01bca3726af7534e7ed8e9803363d0902af46713b59e2a426f276b688318553f8e672b23dea999d3d133b401f190a7f", 0x50}, {&(0x7f0000002f40)="9e84a28caf3bfbb9696231ed1aaf63ce6cbb7e89dfd2e284756655b145b302805943ab56fa06b9ebbbcaf616610c00df7fdf84176ba85e507f33f05c72e21e1ef1514a4333266fc194d0c6a732701dcc5d2340d7a74ff188a1d88c01dd502df7457bfd0c6cdaacd913e5a669260cedf051a4893d39", 0x75}, {&(0x7f0000002fc0)="aaeb3f2e682906163e45ccd008531ff75f56bd90cb20c909448345c4043e2f1b621c88e1a56c103dc1ed804f856ec266f3732c84b755f59ca9eab140b428c49e6ed8d256afb36d5c5554adda825e97a58f5290253dc25d811b048fadf7f8d47efb91ae6c10011cc465f37d8df775df939d1cae5d96b422f086a7d7d899e8571d3cab4e2515bf264593d26d3a8d27bc84a82b50392735bf1e5b4aa8c8a8c2741de08f51edfde4933b37db07a19b8f37b592f7442e1fd27f61fee8000c3edb27893ed10947191f7fc9a064d067f68ed0f6eac24c0b06ccee50ab493936", 0xdc}, {&(0x7f00000030c0)="eef33611965e4ef31c08b0f00ebe024800516315b4e976eedef853a0fa9c2657a6d9165c5bef264e6413f1f7a0d0d287d85a86f3f991eec832cb8c2cbc8b631a658ce51c859b47ed4747c0319e99eaf933421c90c5a2df3670815dba2e6427031f4ba3c6eebb6c434c9bf32ff84e314c09cbf3137364eb286eb23b0250525ecf9a6899f2887e693adbb7c5f28e73", 0x8e}], 0x6, &(0x7f0000003200)={0x38, 0x84, 0x40, "a6318a0b59e71eca3d1f2981f76afecddec5fa0dfe61ae429e121b55f70ac2c780"}, 0x38, 0x4080}, {&(0x7f0000003280)={0x27, r5, 0x0, 0x6, 0x7, 0x10, "418dd54dd5e8712ca2f85024242c46c11c60d8863ad0e0a086bd66a7145b68ecf74722a4aa9b0056121271d02cbe68ef05cd43970962482e22060c4ae265dc", 0x13}, 0x60, &(0x7f0000004500)=[{&(0x7f0000003300)="528d4ff6b9144b6b8898d9ee8a729b0ccf1d6d16cfd67bec7e69260910011704f20cedfba85c95f024316983150ef7f50a217c9c6b01", 0x36}, {&(0x7f0000003340)="0c0ba372552ff1262abea847737f5efc89f6cca3343b8a45090775375399bd5225a615f3f0ffcc13a3819215c52be11c3e82078a997bd63305f1517f77ab4cb79c49df3ad30ba48404c8d3359bc08340234b8d3f15b4602b620a53eadc13bedf7447b2691cbbeb6726cb0253bf9f987530638d8a4e8f8860956b1b6645250374c48b96618f723c663ef402f6599dd77d167eabe54a8387a2122110dafd543bdf28d55f175518b5abd5342ee74ef63022b0e97728df50e47a1745dde7b8a53214fefff019240dc85956e831ca01b702bd4c004972e918e547e9eb9eead61cfc5c9656db378ac3fe228407e404aecfcf8d79064c60b7da2d614efc13490c6f86e7c5013b0aee687de804b26a649dcdf2e13c976fbed7e2140eabc505968fbb40909b22e0c6d777571a0aabe6aca7d4f677818acd19123ca393025eeed661611e11148db45394656eeaa66adc79ee2ae74e07efa8afd53ba4970d83320e10538575ce976366acd2dbc23489202abaafe9df86a5d1bdc203d9b5a446f4834a299d6653f65e9a88af3ecaffa786715e4fe8cbf566b811b28251c877150ea6750b132a12811563b4c67981f3df3abea65f3b8b1cb25e7ce60fe1eaf9060347d8eb4dfac7e31aca05f2c03ad757447019bf303082a209b92a3a1295258c237357d605d8a6be2ceb6a3a3d09742fadba4aaea3362c76f662f4f06a137eecf4db4cd0737a287a5c5e7328aa591fb6eb181750078f4a0e2f5d11fab35f4ee062771e22e4c1412092946c0d34a25da27f1ae1fa43d8698aac5261e4467587207bbd289353609d8a9acf31172fb080fd074b6b5286507a97a3c24a896f8f6643d5dee0a3aaf35aab61fddec662ce55b5caa58e6e500f6c9b3b97a23617e4c9aac073c378010f869c99c2bd8e177c37375bbaaf2c46dce95b80f8155ee343bc5027fe1daa078515d4a18b1c570755904b4aaa66f84b3675a0c02a1714f1db8c46c917d2643fafd3ce1b7b37d27607b5fb5ac2e671607e5e556d68598e5356a5f3bd8a961d33f5bb1903982c67a1508a27837d102f541c5651a4776ef2dc4f2b840aab0f858ecc0c8b8d4c7baa9b4047add442d17cf22364a0a23caf57a2c19efd9ea4be4964058f3a27546ada53094880ab642f21df31c28b927bad51551d8dfb8c5537dd56d92e44c137166006ca7d6b25298cf821cc67eaea52a95f787dac934713baf23a4b51b5a2912ac8717442d0a872acd284e78bc96939dff3d40e945b4b5a60cefeec324d62120ffa512290af566848baf0839954b5acfe60211adb250dbd1cce3d5a699dae145d834989ad99ca152904f90e74bd8376c7c1ee14d8c35a5afeec6e1aced9076dfdf3d62664ad7184c6bc44c555a58cde7e11881b4daa7fa5ec84d8b474bdf0f518985952fe2c641cd97ee8295c732ab61b7d2f186599cdf888235a669d6bb5583de874d02f6643b00a4a11aa7e6b08745b5c9594474af4ad2d1f77ba067e6aa82f70917918e36db863ee79e7a898f4528f7d7078966cf3033a34f986efef76fdb5ea5bca4d3ab6d604db14834f25a7b627817385b6714771f900734946c4495d7a54b9983497ab5e64c281845a8113b38cdd27bf54a547c6959094c6071d5ed547149532b013762d55a3a66776dfa0c3f6556fd8430b6c7ffc9b1b8e0d3423e7c32e10a118e370790fa21eb8f10c5ff99dcc13afcd8277abb8d4f854b9d6bb623c2a9044caa368e8c94efbdbb60971aaa414d89fd0252135fdc7cbcb61ef68496d958ebf53a9652ed23261c10ff5b50554fbdb15a3252b81c6e003fdfefdff470e23d3c064b04334f0d45acf075e96cc6d2fc30017f97d15154afae5789ae64046d2644b90a10ddb1e8e9dd51074e7c43783c6376cd66d04d597e33400ac3121b930cdfaa019e904328e5050d89366e5ef923a874e58e5c55c92a7210fdd712260c3c1ba328bb318eeec24d7eae800f8b51d165896d33b6aa7c8c711bf81d67e8ee0e77040000976e874c156519a990b279d32222e3c69ad0bab7dd4ac3716b623fd1fed446835f9771d678278f886cd463cabbc355ff62b6b4aee6f6e949e8ac10f41558075f5247d3cbb831e23109a55113825a016fdc9b6c73a2e28181b80a4f537684f268d69f0ed4b6520179b67aa8fb06ae5616681fc0f8dca5ebe0912899e8589ae6e3b5585c0ef78bb8273c708fd37ac83be0b41205fef29a90fcc93c0435528ae887e43d25a0f508b04796551ceeeb2f60f47fa60f6421293006aff5c90d5c563d1f24782bec040a82a634c9ee94932936e1172288cf5eebc8deca3cd63626aed9208f0106e3c268c1751cd7ff55808052738e13765a72a565590306846972e3b048b9f5921af70a9b4d465fbfe597edc330343abe1fbb145c7974ff68367805de5136d881f2fcdf954ed3e389782d65e8cda2ef9ea66ae46c1560121ffd5e054e1bd5aeeedcf48f181472b68e9cf95fac83c8ab41103c3a17cf958afea44e8391643526d5c2fb10dc9dc12d514ce7a73bca589050b7b589a44ff5f95ba31c84d56da76241ac87ed7beb8a7df9c4d520c2619f3297d14a94f76e4aff19942024feca7d4901c3aa5321ab970a898e3254dcfbe7b0b9e25713ff34ee7fbdf8e415b5b3e192dc1b852074806bffb38a679eb8f53b92886bcbf3da872716f72aaade3d7a20247825cfc4c535a59d3916479636aa81d3a0a53b5c17357979fe441e8aa1203576fd53bb79f3d19c8b32f7d0405a90861373d55b01cdbd58e96c8f8f997c63836d1fc32d345abad87e1300ab6d843aa6f0030413eaa6b774e01f951b56211a4c81b1dc2519647ba0b1e37576bb4904b6523b6fe8ec9c700d50b50590f96033f24ff7668545d3a8821f5e10d7225a2c44ffeea31dce82380000ff50113e3a9b61da66d8df4512111459c41776627438246c0128a3612764979b720f2cec8024a9730e50132cc601139c129bee2184db65d9ccb4a63be4e9a5d65df01334cdb39ae6956034689db5af876ab4973a2c1dd3b29ba8c1610115a8f5d80c155e726e4d87917ff7741b06f7b6fa71e2e6cee19c36236ac060c18e61a9d28b91202e1ae7a784a5adeba3ad8a9658e9637f8f20c644eb2e7ceb8093d765889f5e1d5f8f08b1ff87dfedb80277477dffb8b67a93860c2c6eaee61324f7beb449af748e034bbdd3d56cd55fc38f6445a0256dd9bf3dc2ec34818a627772351b666936f3f2fa586d326a8429e2cfbd365ce35439946ea06fb27ad1cf5897ea45d616a5738104d6f2eb72b31d662b89792cc5f9fbdd8af070d1bd3b6a72233457122cc47e59e70348f5a7bb75aa1b26286b6ec97058dffa933a9a2aec5b8c0240512f7f95ca023bacc7c572c9a617072335975eff2643eb9e5af9e8a883bf0b3a77397c97d380156f13864d5c8b9392cabd3ce7c01190e568dc04fed25606014b1aa6e1a13c2a9df9cdcde20c5898fb3814e07e2c05cb9189dbb9ad20922d389f4d0f193360c3a250604ef17bec839aeff02e07028b11811dcb7baa64df297e6228dde630aac7fe31fc33741bb8b220c50bdfe62f0fe6fc631f21841ad93d8da8542ad69e0f362b16a7be856c0ef2b53cfba6c3c77a167e2db834383182cc2c4cc5e66fb7bcf18e638cf6c59c97d6aafae133aae02a8107db06c6296a82564b1e8482f714386f3cdc95fb11b70b2416a9ddcd65c934ac226331e2443b730ad02bc964cf0d6298d75118707dc36e6aea231773899beab9f0deba9657bac9b716673463d1ea5100bab46d900bf9cced7312b0e9bdb4cc4f814e0274bda1f4270591e799bd0c7984af358bf8daffe5f218ad293c2bcd0705e7529009b2dbb23ee6eb4b49be21b6ec5101ce444752d02987ed36773b3717236f4b11d1501714e25b97054e90655012a301153f86a15c8613f0450f9cd7ccd0eb68f25d05028d6294bc662bfdf106b76b92110ad531957f96771bd3b9f76444114993933f1933648b448b090642d02c15f60da5ec3ab8ca4a2bf58c61034db92dfd127309ea84469ae4aa65c1ae2bd854dd47ec25ecf9f69beb43f25ca651fb5b716e205d9939404f7d1314b168c38d0954cdc61c26fb30412d1f1d9e536c130889dbea4fc66b58b0b049ccf71a90b1acdc517da3cdd64320333d3e6fbf6551719c61a90a8e2cf134853f7568079bcf8886e5cdfa67cd1a5f6100b10a05dc6417d9cfa6e5268bf83269dca8d1f5cf42b2bf1802c358f2c9522c82aa38e475a27abc0ba6ecdb01db540f26a31f0eb73c8272d16f3debaab7ad08d3ed0ea206358b8f160411dca76dc12e9736b0c8f26acab936e4695d9b78aaa9acd457f3cca831475bbe2b675ede0ed37635072abb06a48188850f2bacde447b62821b91546149d161a80acb64272c62f9ebbd0bcb3bfb1a30868eb2acb51b96c48094d195184b63fecbf6ff2a77aef0161a905bdc7d12032fe38c5c8bee7d3b23d6dc3b7f31bac19906079ee3277d07137ed55b54fa868570a176d7ad0643a1e3e4ad119ba88cb3928ae826142161b4b62452981ea23e1787836015b2339b1252a54eacb3ce22ca6929f97d62ad4618c5cfbe7caeb3c5205a3d7a5391661b49ed5644bcafc0216d456fcd9d0009309690548499e52056e84c17a0a9b884ee14f8d457db5e487a94f79f012202a04994a280e97836a57b0777e103f7dec00afa6ac2f3c7dee9bd5ab2e9c01b9c8263f5e36b060ed02dba0f9ba310fb80d6cb355aa16c2e4e1a41c662e89c140df86559ba02e77ba407625f00f85967417827717286b389dca6a4ed7735891c25417171c2c2819b8900ba5c6ed3fd9c7ec0eebac3c001f4affdc6a5966f0ccfb10722f8442a19bc678537c8678540b0593d5372837472130472e798f87a9c0b2e37fafe07b592d8f9e075d49fb877d22ca00ca5a712caa4937a13ac37d51c9955f1b0be27140e0239bd22f0807550f4adb3da553664232a8fa73d911a9a03d5ac42265506e460d57e5c9c82eae92da3d0303c6dc4f003e9eb66bcc8915695cd9afd1a2d9a50dbf3aad6cf5052f1f6de4c62114a55bc96c5ec4e7f4abe6d178fe00139e7933cb8c30a81a8d56d7642b2e4eeaee6902c4f7ba15ad9b5b6787e12c6e4e5e1e879a0235ad09d2325a0c446dbbb014936c8b4edb13f86886312d500c512a6bea8235fb5f4a76fdbc1d0931484cfeb1e461ab64e43ca58161a9a3b4c6a7d9464efdaeaccfb448f5f2a959aa99e0582857a6fbb7e2da156a9707240a4e785904d6e40804d5eff9d281f873d48b039decf7eac8727f14554749096b79259cba012b0376e9721a57d439fc431a877c33cd485035f7d43f48ecc068804342c1abaedd40bbf7815163cbe329171b0ebffe41a39b405fc8e0b103f0dc31f41c541e4f2822798228c298e344bf16c4801360f6cc2d90d8fb1dda1288a5c6f698b827ae71a04293579a16ed97828b0a8f5fb5b273de7f968833bfeee353b0342bc15754f4b14b6349c083325cd57223697b509dec630450e6bc56594b236c2d6e7155fa3da2040eb932c470e69671aa3d0d01d01719bfb2eafa20212b581fc2fa6e8b5de794c29966bfdd9e3c92b85cc2335b2ff065bf938e74d0ae237c6b998a2036f3c9861eb6f7580006791c9d9922d0f0702d421da6cf3f3ed145da893628a21ab9181f0381038ab91c3488e233653488663e2c23c1e94e84b13b29c83e2bf9acb810eaebfb7027bbcf64147486d617f9d4e62561ec3fb0caf2538de9cafe8e6edfbcfcc8d0fecf3dfafe775953bf1c1e79c154cdc2bacafc5c619688", 0x1000}, {&(0x7f0000004340)="1f42680c0db374cd4de219ddb511d1d55e7a14b3d3eb8ecb73289738c0e5cfb1c50620baecd67c51fbed9c762dee382f8734a3f5f0ea19b58c0c47c6314cd23b1d2943f9223ffe53b25c896a9050f39086fa55060f62d2a1267057b70e6faa50ab7b04e3a5ef5b048876f98f834e10e45df55fac8c7caf135a3806c373e5ca109179b68b68f440984602082fc0d8543a34c96054d5f9caf0c18637a7", 0x9c}, {&(0x7f0000004400)="4c3cdaf3623d7cf0453cfaee4e0cd2822654ff1bc484e7bda80c1ac6d83ca9da3f7ad763edd9f2753143775b94d4611f8322035e0ca1cdd5869152d7891ec3ff301bcfb9ee2a36dc39824cebc76175ce9b7a65c9846f47e4541686046af17ef0791e4a7d383e3fdd119f3558a4b00f28576967939d04e1f2bdba0d4b9a21f7d37d833bbad0ab553cf1975751ae53cea4cdf268a16019b4b62d54ebc9ce6b4942567faf571c7819acb299d1cb5d8ab2603331ea56d3d21e5cd8653b01506129091a3ff89b989a67fce98ebef3e2c29dcf60021f5983792e231af36bc9a9c4ae0f683951a7ab10d53d3245b7", 0xeb}], 0x4, &(0x7f0000004540)={0x60, 0x116, 0x2, "b196f29126755c2f4aaa35716c64628e2b8f61a71ca851aab8ec1d53f4b2152877106668530e1006410e833c94dd5eeaa79a4748ac7e34fedd366e6a3c2380676746df67f4c72e5e815577eb8a7dc3"}, 0x60, 0x8000}, {&(0x7f00000045c0)={0x27, 0x0, 0x0, 0x7, 0x4, 0x4, "9d56b378e05c76a0f9278d61c3da5f20e3dc09d40f7a517f987509ad8d1e21c021f80fcc526a611cbceb0507e4eae43b79525d12adae656a301883f3285363", 0x2f}, 0x60, &(0x7f0000004900)=[{&(0x7f0000004640)="e4a90efa685309ae4e7f759af7648647eca9bb7f19b76132fe679553ac6e842833701225f6b3c8914f946622d9455af57f1e", 0x32}, {&(0x7f0000004680)="f798fcdd979ddc479795298bca3f8d7d3fc4b9187e44f177fffad9a264f37bfcb7c64fc0d1a48a777cc7352f52ffb85f2b18fcfb636822369aa2702dff8760f7d75c21ea9f03e3e9205a0dfe02d24d0c2064ff0f6eaf24f6a517c100ad49e896b5a08299b51fd73f60768d89e75cc3b2dc1f0e8dd0ca95ab4f53853fb215f91632487faf6ce8705709b5c31bdfb836224c9178952d50434950936f58d1d91e6f3381035f2bd86e86f34d6efb9bff64a8408320292a9b0c588b5298258854cfb145b047eed7787733d4b2146c99792cbe54a212a385ab4c784363bc4483df669f1863", 0xe2}, {&(0x7f0000004780)="e60938fb467905a6b6071a3aae34b082a3502457c3c11acac863d44a826d5f41fd0883f3f91023d40ad15e4d41da535d47f4f9bfb142db249b0bea08f124ec4a689ac44a1e56b1089ff5cb5de0cf6affca402312e3c41ebe10f29a21c9e85cfd83c1a5b0c8c58a216b5109bc856c8923f1ab8ef9f6974044b9e0c6f3fec419bdec8cdfd1f4c958f33f6f5ef3e5ea2dce278c3ca2efa21cea8f796c0487d7fbab24be48c078ca96a61b69082638898e33a87d4db6f45c5e63", 0xb8}, {&(0x7f0000004840)="564a6eaf03978d67cab8fab53838cee59d920359d61763eb4a8c734587a66fd9cb81170fca73ade2ed84c8b330507b45aecfc930436afe44394785b2dde489145cab558b83e122ed716bf11e075e3e8682f46c0616323888d1714f2692c5d8c73b33bd0002ec046ce043c9c8feb4ad9f4e9cdf7f0cf06272b30b7c034b276df58178a73b239d4b18d9f295ebea1f035ff4b640a462e55fff4b920a006d88b8ac2d90de37005376aea73b163430e407a663b2187cc2", 0xb5}], 0x4, &(0x7f0000004940)={0xb8, 0x10e, 0x7, "b86303270038432323816180d136208bad17425eae648cd9ab962d4b6f3b262443a5bcd1599e0803d71ff51ba3eea58500833b63cd5b59eb30a6c91e061240644823299217929da7c3f35e31b0338619565adc5e288d327f8bb8a8ff21cf8385202bb879ae57c362d7165ba24b594bf8d90fe7da601ffc3673c37ac92a66ad8d2e7e3518b3c208f9fd62646b1406d5a5d54082dbc72b7280e1c3c3f826cd720885"}, 0xb8, 0x4000084}, {&(0x7f0000004a40)={0x27, r6, 0xffffffffffffffff, 0x7, 0x2, 0x10, "3719cb50be1cc225bdf88b6c1d5b45c597b0b774a2f35b614061da5077ce726855e0fd94b95128d0125a7acba34f0010c81cee64109c897c0cc04a1bfaf8f4", 0x16}, 0x60, &(0x7f0000004fc0)=[{&(0x7f0000004ac0)="abf973aeaa305d9fcd403b9907f4aea586127cb1ecc7f6dd050e3d0f6f6d5d80be24730b22b1bbc7356f0fcfc6d1d2471a3da58b943f04371812772784de7017c9eb075f2648e4abe86e7fc369704dfae005eaf9b205f401eb1bb85dd3cfd4ba0b98", 0x62}, {&(0x7f0000004b40)="0009699532328de617bcb2de960178fd565bc68bd0c95d201384441a682ef62a7b96fcfcc60b6a050bde2baf417003b84985f49195cf389a616c275c49f13214862d99a2981414c218c5ce22f7c85d7eaa7a55fa068c426ded1f9f0f085d87fa6eb43e770ad740112f2bd32bc3f4eecc94eb2975", 0x74}, {&(0x7f0000004bc0)="261962434ddebc58113c315495ab3307ee08501e4adc3d575a7c1414435c5a911431b72f5e9634d3ea8a52e9c501eab0f55254fc470af8bf40b531ca2786ed6829e52baef9fdc123ed02fc27c10db4a0c287ea20a11a2b73b16a954e7883b8b1882ad4f9485280c9ae16a184094f3202d49c20cec62d78e10abd762f1b2395a3070f2d1f537e0eedd1d1fa0fa4dac13d5e560a378766f2930f1aca2770a87297d50a414fc97034a93cf0b58d76bf56e3b37af0e36ca89bad82e224951dcb4a908a31c457d90704d3dbcfa52740ebe1c811a94846877b4627a5d801f6c308", 0xde}, {&(0x7f0000004cc0)="414ede82e4ffc25ae10fe56901db3117ae6ffb673a7ade68be31ac64457ddfc665c70a58e5f0c92e387f1220e3a8863b8202fe52926e7bd27b8e4e23fb9e839c78bf48", 0x43}, {&(0x7f0000004d40)="621fd293928c291ff225305e9e9f7425b16821", 0x13}, {&(0x7f0000004d80)="831eacd6b34adf6865653d84d866e93fca7948c9694705fe70cb348b42e3f9bb7a5fdd71d4e264eb45692c837a8683b2881f422e94eb1f1542", 0x39}, {&(0x7f0000004dc0)="adbc9e0fc58e43b26efeccc739dc2311675d447056bd9c97b5b4b331cf30fab5c7ae001ee1e930aabcd7c85cfb7114", 0x2f}, {&(0x7f0000004e00)="009780773868a7525b8c6ffcc8e84128cd9feee6dbc12391bacf7408c2f6668e0c049c8fb401d82ba45dc401b7d8cfd09042f849b597e66454df305abb28af429728f6962dba00f32d74835dfc18b6a79ab6325ffc459bf38a649531a559ffba2e7370af82eba591774bc8e8a913b32d11a8f01b43e8a7aa5e4843c48202ff1430e63710609c6146e13f6bca910d9a278d98186c8cdf44cf6da7fcfb201f1c601b2710c42fdb028676a35d5331d27002dc797ba9a0612bac94e4bbc9dd70bc9778a4ef824de5c1f32c40289cc4a9978ecae00d193374e6c349b5491535ff819681a0", 0xe2}, {&(0x7f0000004f00)="96066b46d6bff81dd9433184ca5dbee682c364aeb1f2f31dfcb1ee700dd282acb894dc79e3886e237eda195a834f32ff623ca19aae0d38aade89c6311cd1f0bb77e2f257e74755127f6d95a9309a4096c32ef77e236bb2d288d2df746a0436a80ca21eecbad1c36ad6f3d6b2409a8d6c37fb4fbd9da82c9aedcd431e5a0c161376357e60", 0x84}], 0x9, &(0x7f0000005080)={0x50, 0x107, 0x7, "b3b0fd6a7e509cc478b8da6dfc8ab82cec31ee31da8f6b6a5a04f5d8392cda53a1eb40c9c63f2d25731c80908f744a833b4f4036a822db64de51"}, 0x50, 0x40}, {&(0x7f0000005140)={0x27, r7, 0xffffffffffffffff, 0x1, 0x6, 0x27, "f4ffff3e64d38562bddbfb7e57a39fcf05bea64b37e0e5d4ab3cfd7df53f2c714f44a58750c9c8621e7c267f60e0abaaeb6cb0f4819af8c7be4cb4f19d045d", 0x1d}, 0x60, &(0x7f0000005340)=[{&(0x7f00000051c0)="8268589b28d6f6aa15a22975aeb991c46b677addb10600ed36d74c78e2294e5465679937d2fd565434e064e36a7be72ce50835b8f36d32b8d3f5148956db2c9a7115db159be30c41e7d83708ef4dd43bc13a1a178b9a7489720113df555b2e8008749348491d65464050135085cd61354a94199c9b1dcecf5994539518b44c233b45db1ab736c3ee708f1f2fd9a4ccdac73563987f3c351027dc30261a58a7443c3a3597642b13da65ea8ccdc27243ecd5399a6d2ff1f384a30f800d864a0165e69956becac234608cde8333402c5fb9fb1b9bb8bfc7e0caed824ebd568831fe6ed0edf81ca5ecf8e407b3fc5ead1ee859973cf8584f996db9", 0xf9}, {&(0x7f00000052c0)="c639f05b115d892ccf3ed8fcd70646579711fff22f82eaee1cc8d06c2eaba994bb85798ae144aaac627b63bed4b99ab026931b4171621888a8e0d0d901ec75405c4e03554f64e24e1377bd64b83632b52404e86544509fa146b7b4fcfc5eba2960d7952a4d41a7b0c1bb34b41f35300a5e79c6e052", 0x75}], 0x2, &(0x7f0000005380)={0x50, 0x119, 0x3, "3f9f259f2187f04edcb85c3c918fa353b65d79bd29131f381142da01e7c59e8f0ca4108e4fb3f87079fa364bda8c2e9199a94308b4f2100561b6cc07"}, 0x50, 0x44001}, {&(0x7f0000005400)={0x27, 0x0, 0x1, 0x4, 0x1c, 0x7, "265a9cb21c5880d823701bdbc7eddd076bddfc85005583b29647b3cc930d8c803abf0c618d7c17a999b247c33dd83b3bd9cbba54ecfb71862689be228677b8", 0x1d}, 0x60, &(0x7f0000006700)=[{&(0x7f0000005480)="1db1bf094624826313450f42c1d242c332944c80cd83876e071b9bb846ed69401af61a4fc44c848e6b01fe6bcd9cebc7783d62c99f25d469e3f19b0191c81e58b6c1a96b8b6bae1233accd2c47ecc819711209567c52305dac246c852ed5da7b5d81948c52501be67e8050cf8f993eae0244522ab239efb5ec6448654ba8663e93e4026c385ebae289bf19b1b89cfc3b2d6aa7f61c1aa2a04860d14d4370ccd9ad143878612cda1375226fc57466746d0d1348a80e03f6076836c4166f8073eca1b33093ad86aa40b344f65892b670879c2fb62cd869", 0xd6}, {&(0x7f0000005580)="3f71d58e1d1fc538a651361c0c8dc0090ec674156e6863757b23c9b6bf6e1af8190de8160c3ee5509fed74fa0623e3189a652f48f5cfa07b09aaa410f921e111312d69d9fdca9b13cc02061682f84da8", 0x50}, {&(0x7f0000005600)="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", 0x1000}, {&(0x7f0000006600)="0d48434821c4fc1176606c9af486df8799eecf9795f4ba0c9ad934ab5369fd7c77726d571d587d86ae83480ce911999faa11bd576e4dc4db41f76b4184b61a347294d66c5f9a35450c5aaa8136a1f44b234f8e2c81867b63aa417482d046ca925ba5badbd71c621f64d81a8d8074c6f24dd3fc9f05183e0b68ca60b482ab6fe44c56400b37c119baac0038bb175a82adc354cb9ae8dd42a489488e420e7588b877ccacb7b74f11bd534cf8659518ec5fdd60", 0xb2}, {&(0x7f00000066c0)="cd4de9c259b264c77afe2e850b16ca2f12dc05", 0x13}], 0x5, &(0x7f0000006780)={0x110, 0x102, 0x9, "ddaa301d2c36bea960ef97f1e5fade8149c49cfbe53214438ab2f82d053f9cbca62661b1e8759f9ec2cd830aba3c4f8655630d0b019334e2c7981e9ad194a9324c0244f4c1763499d049995b555f17d82ebe8a2065580885c73b0c9306142475530b8cb6c74c3a983a524865d46bca8d1da5e712641f124546360e91982da4ebd275eee1beedf4fe36b6757fb6090b59528f6990fd69d8276e0e63c602ed550a915460949c47902f8e3aa3ecf8f41a282a3d27fc50e7077672d5376bd92b791ed31849a15cd0d2ccd5e908cd01d7f76dbac71b82f356e0c54e519f78552e7df43e8847db7279256be038e1c10a2af72fdfdd4e7c9b1fe0655c0b2f"}, 0x110, 0x4}], 0x6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f0000006b00)=@buf={0x9c, &(0x7f0000006a40)="f90231101e7563974891f4f21e798096de5daae484dda0f40be1b52169aad44ea88bb83c1eb8c91c276cbaf883561395194420b549ec19662943c7c75eea2931c39967902c5e2ca97e0f293341ac7d69ba86cdb85421f1ed095591c18e273930b0b33fb7067e6bb81eb5964fc233c72be648eea9e81cdadb76c5b0ce8664422b88e984153d0f6d86a0a04d0d9c046931142b916b8bdb386f4472620e"}) pipe(&(0x7f0000006b40)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000006bc0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r10, &(0x7f0000006c80)={&(0x7f0000006b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006c40)={&(0x7f0000006c00)={0x34, r12, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048015}, 0x20000000) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000006d00), r11) sendmsg$L2TP_CMD_TUNNEL_DELETE(r10, &(0x7f0000006dc0)={&(0x7f0000006cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006d80)={&(0x7f0000006d40)={0x1c, r13, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000006e00)=""/239, &(0x7f0000006f00)=0xef) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000006f80)={@loopback, 0x0}, &(0x7f0000006fc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000007080)={'ip6_vti0\x00', &(0x7f0000007000)={'ip6tnl0\x00', 0x0, 0x2f, 0xa, 0x5, 0x800, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @empty, 0x7, 0x10, 0x5, 0x9}}) getsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f00000070c0)={@mcast2, 0x0}, &(0x7f0000007100)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r10, &(0x7f0000007240)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007200)={&(0x7f0000007140)={0x9c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}}, 0x4000801) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000007280)={{0xbb, @multicast2, 0x4e20, 0x2, 'sed\x00', 0x10, 0x8d50, 0x6f}, {@rand_addr=0x64010100, 0x4e23, 0x10002, 0x7, 0x7, 0xd}}, 0x44) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000007400)={&(0x7f0000007300)={0x10, 0x0, 0x0, 0x800c0}, 0xc, &(0x7f00000073c0)={&(0x7f0000007340)={0x6c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0xffffff01, 0x6]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040004}, 0x40810) getsockname$l2tp(r11, &(0x7f0000007440)={0x2, 0x0, @local}, &(0x7f0000007480)=0x10) accept(r8, &(0x7f00000074c0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000007540)=0x80) 7m57.255019081s ago: executing program 1 (id=3508): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)="c9709aa7127c6dac28f1ed60a09d18", 0xf}}, 0x8080) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)='\x00'/11, 0xb}}, 0x0) 7m57.024470364s ago: executing program 3 (id=3509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x40080c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0002000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a0c020000180a010400000000000000000a000008980103800800024000000007680003801400010076657468305f766c616e000000000000140001007465616d3000000000000000000000001400010073697430000000000000000000000000140001006e657470636930000000000000000000140001006e6963766630000000000000000000007c000380140001007665746830000000000000000000000014000100766c616e310000000000000000000000140001006772653000000000000000000000000014000100626f6e643000000000000000000000001400010076657468315f6d6163767461700000001400010062617461647630000000000000000000900003801400010069703667726574617030000000000000140001006261746164765f736c6176655f30000014000100776730000000000000000000000000001400010064766d72703000000000000000000000140001007665746830000000000000000000000014000100766972745f77696669300000000000001400010076657468315f746f5f6261746164760008000140000000000800014000000000080002400000003f0900010073797a300000000008000740000000010c000540000000000000000108000740000000020900010073797a30000000000c00054000000000000000020c000540000000000000000108000740000000010900020073797a30000000001c000000050a010100000000000000000100000408000b400000000118010000020a01020000000000000000070000070900010073797a3000000800d4000600d92d53521168418cab3bdda74fb6e361f1cc990ad3d19e4f71066824956ecf0c181209d87f55e11d7fe7d2ea12f1f6a507166036954437d39675d09b8c5e9f895c91fd13674cff9a01c6e9b328fcec1f15c5d98dff1afa4b5f4a048ccd27b7fb38be3ac9d2801c308953c86f432fa7df0b5df40d0241d5c79cc848fc68f23917522b7d060189c28621bd0083d0adb10ea7fb3ec5fabc754d68167dabf67af5e92fb05b8726afababd2cecc29e6e0298be65273d9146885fd1023b52172ea662951d23fa81746042cb8a73cb77f64bad80900010073797a31000000000900010073797a30000000000c00044000000000000000012c0000000b0a010200000000000000000500000a0c000b4000000000000000150c00104000000000000000054c0000000c0a01020000000000000000030000030900010073797a310000000008000440000000010900010073797a30000000000900010073797a30000000000900010073797a300000000020010000050a01010000000000000000070000081c0008800c00024000000000000000050c0001400000000000000002f0000c00d1e46742fbdf562c90efb2039d97ebd04ccfa77d3f145737a12e175bd30d8ae16ab639438fa9fb1a3be19a9b1de27306ecca8e528e50d9228ad15124a8da3f577813dcc12e05696bcd7bbf82a4be77640bec23ddc8cf117f2301237935e934311e67a40e32a90e0fc741d5e6ebc189681514c7f3bc660c21856d72f656966eeddb2c0027d3c801462d532a4ec9afd4a76a0efce256ef509bea859db44ea3e8b9d8584253980e8b5d71dd4f33ce968b08083c8c5350df99afa17713c4a456430d137dc0b7efdae97243439b04cd884984671de1c14b1ec528cf1a2ce4064505a1357fce5c2dc4c290f2699afd70000000060a01040000000000000000030000020900010073797a30000000000900010073797a30000000000900020073797a30000000000900020073797a32000000000900020073797a30000000000900010073797a31000000000c0003400000000000000005080009400000000020000000080a010100000000000000000500000a0c0003400000000000000001140000001100010000000000000000000000000a"], 0x590}, 0x1, 0x0, 0x0, 0x4050}, 0x8004) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) close(r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ad2fa983babde0f8d2e9332f3e970362305000000000000e0f1bb8af5c81e67260f"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000e00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r5, @ANYBLOB="000428bd7000fcdbdf250b000000600003800500080009000000080003000400000008000500e000000114000600fe88000000010000000000000000000105000800740000001400020070696d367265670000000000000000001400060000000000000000000000ffff0000000008000400050000003800028006000f000002000006000f008100000006000b000200000014000100200100000000000000000000000000010882ce6ddb000400a10c00000c00018007000600"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x48040200}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8005) close(0x3) socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000127bd0400000000000000000008000300", @ANYRES32=r8, @ANYBLOB="0c009900f326000064000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 7m56.128535282s ago: executing program 3 (id=3510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c803c010b800800090000000000080009000000000008000a"], 0x16c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000000000b8ee0816756b62187804752330b2b558fe9a8f0201f7693863f7adcb30d7228ef1593c0639bd084bba9efd8db72f0600000000000000c6ec61a03fc316d5d47970907af5fc"], 0x20000600}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'macvlan0\x00', {}, 0x8}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x27a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2, 0xd5}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c803c010b800800090000000000080009000000000008000a"], 0x16c}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000000000b8ee0816756b62187804752330b2b558fe9a8f0201f7693863f7adcb30d7228ef1593c0639bd084bba9efd8db72f0600000000000000c6ec61a03fc316d5d47970907af5fc"], 0x20000600}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'macvlan0\x00', {}, 0x8}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_emit_ethernet(0x27a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2, 0xd5}, 0x8) (async) 7m55.821593358s ago: executing program 1 (id=3511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x3f5, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x440) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4068, 0xfe4}, {&(0x7f0000002d80)=""/4112, 0x1010}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000005000)=""/4085, 0xff5}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000200)=""/34, 0x22}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f00000005c0)=""/110, 0x6e}], 0x301}, 0x20100) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="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"], 0xffffffffffffffc8}, 0x1, 0x0, 0x0, 0x4010090}, 0x0) 7m40.382906917s ago: executing program 34 (id=3511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x3f5, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x440) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4068, 0xfe4}, {&(0x7f0000002d80)=""/4112, 0x1010}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000005000)=""/4085, 0xff5}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000200)=""/34, 0x22}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f00000005c0)=""/110, 0x6e}], 0x301}, 0x20100) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="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"], 0xffffffffffffffc8}, 0x1, 0x0, 0x0, 0x4010090}, 0x0) 7m40.168130102s ago: executing program 35 (id=3510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c803c010b800800090000000000080009000000000008000a"], 0x16c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000000000b8ee0816756b62187804752330b2b558fe9a8f0201f7693863f7adcb30d7228ef1593c0639bd084bba9efd8db72f0600000000000000c6ec61a03fc316d5d47970907af5fc"], 0x20000600}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'macvlan0\x00', {}, 0x8}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x27a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2, 0xd5}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c803c010b800800090000000000080009000000000008000a"], 0x16c}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000000000b8ee0816756b62187804752330b2b558fe9a8f0201f7693863f7adcb30d7228ef1593c0639bd084bba9efd8db72f0600000000000000c6ec61a03fc316d5d47970907af5fc"], 0x20000600}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'macvlan0\x00', {}, 0x8}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_emit_ethernet(0x27a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2, 0xd5}, 0x8) (async) 3.477480662s ago: executing program 6 (id=6224): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e500020000000000e500fcff00000000850000000200000095000000000000005b5e2e900bdddabda4ea28"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="f36088e85e", 0x5}], 0x1, 0x0, 0x0, 0x20060000}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x2d, 0x7, 0x5, {0x2, @udp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4e32, 0x1}, {0x0, @broadcast, 0x200, 0x9a32, [0x3, 0x8001]}, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xa8b9289b, 0x9, 0x1, 0xd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x9ab, 0x9, [0xa, 0x8]}, 0x2, 0x3}}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) 3.208151698s ago: executing program 6 (id=6230): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) 2.98232423s ago: executing program 6 (id=6234): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=ANY=[@ANYBLOB="5400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000002c001a80080002800400018020007c0000000700ff0200000000000000000000000000010500080003000000deef9ad15c05df9190bec209d3600fc27c959f19ebe72c4d83a4ba5fecce6bb7b7104536bacbe0753f9ed1fc6ed969f9f49f836a5a7ceec71d23bf0af829d88fc544b21e3ad024b38a5fa712e1c792266ea95841d99f23446cb9eb11d860f08b42d2c65aa2e45b8ad11a364a8acf2f8710bca79e65a87cba38be82982b9789fcbf67e52d69c223eef3133793e10e8886"], 0x54}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x80000000, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=ANY=[@ANYBLOB="5400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000002c001a80080002800400018020007c0000000700ff0200000000000000000000000000010500080003000000deef9ad15c05df9190bec209d3600fc27c959f19ebe72c4d83a4ba5fecce6bb7b7104536bacbe0753f9ed1fc6ed969f9f49f836a5a7ceec71d23bf0af829d88fc544b21e3ad024b38a5fa712e1c792266ea95841d99f23446cb9eb11d860f08b42d2c65aa2e45b8ad11a364a8acf2f8710bca79e65a87cba38be82982b9789fcbf67e52d69c223eef3133793e10e8886"], 0x54}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x80000000, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) 2.892974045s ago: executing program 6 (id=6235): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0xae}}}}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x100, 0xfffffffc, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2.831931276s ago: executing program 6 (id=6236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) recvmsg(r0, &(0x7f0000000980)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/244, 0xf4}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000000640)=""/215, 0xd7}, {&(0x7f0000000740)=""/166, 0xa6}, {&(0x7f0000000800)=""/72, 0x48}], 0xa, &(0x7f0000000940)=""/10, 0xa}, 0x10102) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000a40)={0x1d, r3}, 0x10) r4 = openat$cgroup_ro(r1, &(0x7f0000000a80)='cgroup.kill\x00', 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000ac0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@canfd={0xd, {{0x1}, 0x15, 0x2, 0x0, 0x0, "7412fe0ca920e4dde449a080497adb640dbfd7178146d1efdb66b2789b05069195fa4729e8144907684b4cebfa5a387382fa3706bd624c655c28abc0a2d7735e"}}}}, &(0x7f0000000b40)={0x0, 0x1, [0xe5, 0x52c, 0x519, 0x409]}) bind$rxrpc(r1, &(0x7f0000000b80)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xc0, r5, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3c2f8787}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x870}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x8, 0x6, 0x4, 0x60000, 0x48, 0x81, 0x3601, 0x1, 0x690]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xc8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x63b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5f1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r2) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000001080)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e00)={0x21c, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffbe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcfc}]}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9117}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x8880}, 0x4040880) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f00000010c0), &(0x7f0000001100)=0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), r2) connect$l2tp6(r1, &(0x7f0000001180)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x101, 0x3}, 0x20) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f00000011c0)=0x8, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001440)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f0000001240)={0x184, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a5bf2dd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xebd0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000040) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000001480)={'syzkaller0\x00', {0x2, 0x4e22, @private=0xa010100}}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/107, 0x6b}, {&(0x7f0000001580)=""/35, 0x23}], 0x3}, 0x10000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r2, 0x0, 0xfb, 0xb4, &(0x7f0000001640)="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", &(0x7f0000001740)=""/180, 0x8, 0x0, 0xcf, 0x3f, &(0x7f0000001800)="42ea8740285006b03a09fd6aa08ac628cdbff50815cc7d46c9ee85573754f7b237c491ffcfaf96902129d5c2d75ae27eaee31aa04b433153efebfc7e0cb2a7b66b4588cff790a671b5d5eefd35ce4a9e41a701c16bf878ce807556a4c5cf76d59965ea8baa531943f4c7aa121b1d66226c3548883e76df5e6378e9e599837a7f4ef46d6db8ee92fc495a9d865a9611253c8c4533a727a98b9c80c9ac78c2fc883c6eb7cbf52bcc01b2abdd8ceeb8c66b59bbc874bfeb9a68ba46187cec17663bc30980ada752cc6e3161d24742e351", &(0x7f0000001900)="7cfd247052a94670725d53e67678a2932e6e264218e87025a1582c943cd84ea4358770d49d6d8d6a0a4657a51b18c9688d0df3f262305cd17e212e2ba47492", 0x7}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001a00)={'wg0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)=@ipv4_delroute={0x78, 0x19, 0x20, 0x70bd25, 0x25dfdbff, {0x2, 0x80, 0x20, 0x9, 0xfe, 0x1, 0xfe, 0x3, 0x1000}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_METRICS={0x51, 0x8, 0x0, 0x1, "0de7bedbd6266bac4951b4c38bb179b0d8711b22bc82232f079ec20c1045d1d71f8609e7faff5088df7083b73810a2b163db0d0a1af23d1dfad6b956ba0c9a9947d874b876968b7dc8ffca781f"}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040) r9 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b80)={0xdc, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x84}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0xdc}}, 0x80) ioctl$XFS_IOC_AG_GEOMETRY(r9, 0xc080583d, &(0x7f0000001d00)={0x3e2decc8, 0x9, 0x5, 0x0, 0x550, 0x25, 0xd04a, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x340}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x34, r5, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7fff, 0x11}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) 1.857677321s ago: executing program 6 (id=6246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x28, r5, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 1.685648178s ago: executing program 8 (id=6249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000e5e5137a78e8eea24a831c4d0c000000000000000000000a68000000060a0b040000000000000000020000003c000480380001800b00010064796e736574000028000280080003400000000008000440000000000900010073797a300000000008000240000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x90}}, 0x0) 1.637344877s ago: executing program 4 (id=6250): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x3, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1.598202171s ago: executing program 7 (id=6251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000665d30d933a589ba0b46ce81239ab4", @ANYRES16=r1, @ANYBLOB="130f00000000000000000700000010000280040002000000000004000400"], 0x24}}, 0x0) 1.436974312s ago: executing program 8 (id=6252): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='@\x00\x00\x00']}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40}, 0x20) 1.397119118s ago: executing program 7 (id=6253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004040) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) (async) 1.309597366s ago: executing program 2 (id=6254): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0x7, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x5}, {0x1, 0x1}, {0x8, 0x5}, {0x8, 0x1}, {0x1, 0x5}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x3c081da1}}, @enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0x10, 0x200}, {0x1, 0x1}, {0xa, 0x400}]}, @datasec={0x7, 0x3, 0x0, 0xf, 0x1, [{0x5, 0x54b0, 0x7}, {0x1, 0x5389, 0x61e7}, {0x4, 0x7bb6, 0xd}], 'J'}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x3}, @func={0xe, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xfffffffb}}, @func={0x2, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x61, 0x2e, 0x61, 0x99881c2f1b2edd61]}}, &(0x7f0000000580)=""/186, 0x10f, 0xba, 0x1, 0x6d, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', r3, r4, 0x5, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.307621224s ago: executing program 4 (id=6255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x422c, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4055, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@mcast1, 0x4, r3}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, "001863718e9bf703"}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r7, &(0x7f00000025c0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000440)=@phonet={0x23, 0x1, 0x1}, 0x80, 0x0}}], 0x2, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0xc0b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) 1.200834355s ago: executing program 8 (id=6256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)='#\x00\x00\x00', 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r9, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000440)="4e358ed59ee7a636d3a35d9bb1a218701d8f6d70ee6d34b9565d847dddb24e725b783f9101", 0x25}, {&(0x7f0000000000)="bb47775eecf8ee1b31de7f14c5e023c088bb5a46dd94d7412aa2ddb64b4ad4ea359e6d884b4e0f6626ff0a0081ae1e0e0c34d3818e79a7b771aa2dfaa9e833d899786513bde4900acbbe0d6388d9d960e79a7068efd3da2ea03830eca37c82e5300e", 0x62}, {&(0x7f0000000480)="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", 0x673}], 0x3}}], 0x1, 0x48010) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x6}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000040) r11 = socket$unix(0x1, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xffff, 0x1}, {}, {0x12, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0xc000) 1.15270153s ago: executing program 7 (id=6257): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r1, &(0x7f00000003c0)=""/132, 0x84) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r2, 0x0, 0x0, 0x8000, &(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x3, 0x3, 0x3, 0x2}}, 0x80) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$l2tp6(r3, &(0x7f00000001c0)={0xa, 0x0, 0xa, @remote, 0x9, 0x4}, 0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x8, 0x6, [0x9, 0x9, 0x3ff, 0x4, 0x6491, 0x6]}, &(0x7f0000000040)=0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001d00)=ANY=[@ANYBLOB="0000bfb44f7b55b51722d5668592b7020353058a52444f0b562f92650577bd3f7f773e77c314c715203f1d0a5602e4c6f279c6d1a46a43bde19b969d0a5bd2f8f4d56de6a4f90cf7ddde18bf735c142890bfa64ff57f73a9ff8ba50ee5e9e5466d6c9bc0d34d8d4019683fd766dabb2681626e7b32fec1d12cb064a72439e66fdbec2246a8e65b587a3d03b4f7a8fa5877811d0a399d2a2bcf636275fbf40a14ae47249fd3a17a01faf79f1e09b78458336fcb612923e73259b0c58ad6d28997", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf256700000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x1244}, 0x1, 0x0, 0x0, 0x800}, 0xe72c6e9d63347bd) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) sendto$inet6(r7, 0x0, 0x0, 0x40000, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000080)={r4, 0x8bc}, &(0x7f00000000c0)=0x8) 1.045312661s ago: executing program 2 (id=6258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r2, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b1600000000000000000200000844000480000c000280080001400000000428000180080001006e0000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010005000000000000000000000a00000000000000000000005302e85cad6fa55ed9f11c9efcfd14ace9f5b028a3b19d43e7ae8c0ea7c606cd88993dcd6696abf00a0837823d7ed7ae6104a549d0f9c72f5ef8a887"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bpf$MAP_CREATE(0x0, 0x0, 0x0) 929.605921ms ago: executing program 4 (id=6259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000000080)=""/102377, &(0x7f0000000040)=0x18fe9) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x3501, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 827.016364ms ago: executing program 7 (id=6260): r0 = socket$netlink(0x10, 0x3, 0x2) recvmmsg(r0, &(0x7f0000001340)=[{{&(0x7f0000000000)=@caif=@dgm, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/172, 0xac}, {&(0x7f0000001200)=""/163, 0xa3}], 0x4, &(0x7f0000001300)}, 0x6}], 0x1, 0x50e057226334e7e, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000001380)={0x6, 'veth0_virt_wifi\x00', {0xde9d}, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), r0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0xc0, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0x44}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @mcast1, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x107}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ffc0000}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44080}, 0x4000000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0xcfbe8000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xcc, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xede}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf644}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @private0, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000044) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r1) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001840)={&(0x7f0000001740), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x20, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x30}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4808}, 0x20000800) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000001880)) r4 = syz_genetlink_get_family_id$team(&(0x7f0000001900), r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001980)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001a40)={'ip6tnl0\x00', &(0x7f00000019c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x4, 0x4a, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, 0x7, 0x40, 0xedaf, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001a80)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001ac0)={'nr0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001bc0)={'gre0\x00', &(0x7f0000001b00)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x9, 0x0, {{0x1c, 0x4, 0x3, 0x37, 0x70, 0x67, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1b, 0xae, [@local, @multicast2, @rand_addr=0x64010100, @broadcast, @broadcast, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x34, 0xc2, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1}, 0x3}, {@loopback, 0x22}, {@local, 0x1}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xa}, {@local, 0xd}]}, @timestamp_prespec={0x44, 0xc, 0x25, 0x3, 0x9, [{@broadcast, 0x8001}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001c00)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001cc0)={'syztnl0\x00', &(0x7f0000001c40)={'ip6tnl0\x00', 0x0, 0x29, 0x2d, 0x4, 0x4, 0x4, @loopback, @local, 0x80, 0x700, 0x0, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001d00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001e40)={'tunl0\x00', &(0x7f0000001d40)={'erspan0\x00', 0x0, 0x7801, 0x1, 0xff, 0x1, {{0x2f, 0x4, 0x3, 0x3a, 0xbc, 0x64, 0x0, 0xf, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0xde, 0x3, 0xc, [{@remote, 0xcff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe3b9985}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x2e, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x3}]}, @timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x8, [{@remote, 0x3}, {@multicast1, 0xffffffff}, {@private=0xa010101, 0x4}, {@remote, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x85, 0x1, 0xa, [{@rand_addr=0x64010102, 0x9}, {@local, 0xd}, {@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x9}, {@multicast1, 0x8}, {@local, 0x7ff}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000024c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002480)={&(0x7f0000001e80)={0x5f4, r4, 0x200, 0x3, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x10c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x800, 0x4, 0xd, 0x2}, {0xc00, 0x2, 0xf8, 0xe6}, {0x8477, 0x2, 0x6, 0x7}, {0x4, 0x3, 0x7, 0x4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x6, 0x3, 0x5}, {0x200, 0x40, 0x4, 0x3}, {0x5, 0x8, 0xf9, 0x6}, {0x3, 0x8, 0x10, 0x1}, {0x7, 0x8, 0x2}]}}}]}}, {{0x8, 0x1, r13}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x47fa, 0xbc, 0x3, 0x48}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x1, 0xe, 0x71, 0x10}, {0x4, 0x80, 0x5a, 0x2}, {0xf001, 0xc, 0x2, 0x5}, {0xc3, 0x2, 0x6, 0x6}, {0xffff, 0x0, 0x6}, {0x8, 0xd0, 0xc, 0x4}, {0x9, 0x0, 0x3}, {0xe68, 0x2, 0x5e, 0xffffffff}, {0x5, 0x5a, 0x2, 0x2419}]}}}]}}, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x40, 0x8, 0xd}, {0x9, 0x5, 0xc, 0x3}, {0x8000, 0x81, 0x7, 0xc10}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x5, 0x9, 0x76}, {0xce9, 0x9, 0x0, 0x40}, {0x3, 0xb5, 0x4, 0x80}]}}}]}}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x9054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002540)=0x0) recvfrom(r1, &(0x7f0000002500), 0x0, 0x2000, &(0x7f0000002580)=@nfc={0x27, r15, 0x0, 0x1}, 0x80) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000027c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002780)={&(0x7f0000002640)={0x13c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x70}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0xf0, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x67}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x28}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x4005) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002840), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r16, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x28, r17, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20040000) bpf$ITER_CREATE(0x21, &(0x7f0000002980), 0x8) 784.299617ms ago: executing program 4 (id=6261): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000200)=0xc90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 673.065756ms ago: executing program 8 (id=6262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x1c}}, 0x80) 672.136915ms ago: executing program 2 (id=6263): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000000)=0x2, 0x4) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x3}, 0xc) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@nfc={0x27, r2, 0x0, 0x9}, {&(0x7f00000000c0)=""/125, 0x7d}, &(0x7f0000000140), 0x2}, 0xa0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e24, 0x5, @loopback, 0x4}, {0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x19}, 0x200}, 0x1, {[0x6, 0x2, 0x0, 0xd8, 0xa, 0x4, 0x7, 0x2]}}, 0x5c) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000002c0)=0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000340)={0x7fff, 0x3, 0x1, 0x2, 0x3, 0x0, [{0x8, 0x5, 0x7, '\x00', 0x400}, {0x238, 0x9, 0x4, '\x00', 0x84}, {0x4, 0xe4, 0x33, '\x00', 0x1800}]}) syz_emit_ethernet(0x5f, &(0x7f0000000440)={@random="4809db43d29e", @empty, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x3, 0x0, 0x3}}, {@generic={0x88f8, "2dc28684316b2d6c1123974d947c3169011443cb83936eede598e9e4ccb2480070db0e22864bc7704e10a2f03b5482434dcb118985ac5dfa7a4f8067c1ff8955784345ca9b5e1b32ea"}}}, &(0x7f00000004c0)={0x0, 0x2, [0xbc5, 0x3bf, 0x816, 0x627]}) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000600)={r5, &(0x7f0000000500)='\x00', 0x2080, &(0x7f0000000540)={@_ha_fsid={[0x1, 0x9]}, {0x7, 0x4892, 0x80, 0xf73}}, 0x979, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0xead}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r6, 0x0, 0x25, 0x12, @void}, 0x10) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, &(0x7f00000007c0)={{&(0x7f0000000680)=""/233, 0xe9}, &(0x7f0000000780), 0x20}, 0x20) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x20, &(0x7f0000001a40)={&(0x7f0000000a00)=""/4096, 0x1000, 0x0, &(0x7f0000001a00)=""/34, 0x22}}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001ac0)={0x0, 0x1, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x1d, 0x17, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, @ldst={0x1, 0x2, 0x6, 0x7, 0xb, 0xc, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf05a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000008c0)='GPL\x00', 0x7, 0x54, &(0x7f0000000900)=""/84, 0x41000, 0x28, '\x00', 0x0, @lsm=0x2b, r6, 0x8, &(0x7f0000000980)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0xe, 0xa5a, 0x8}, 0x10, r8, 0xffffffffffffffff, 0x1, &(0x7f0000001b00)=[r6, r6, r5, r9], &(0x7f0000001b40)=[{0x4, 0x5, 0x0, 0x1}], 0x10, 0x5}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001c40), r10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) r11 = epoll_create1(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000001d00)) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000001fc0)=0x0, &(0x7f0000002000)=0x4) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000002040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@var={0x10, 0x0, 0x0, 0xe, 0x2}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xa, 0x4}, {0x1, 0x4}, {0x10, 0x4}, {0xc}, {0x9, 0x5}, {0x0, 0x3}, {0xc}, {0x1, 0x5}, {0x3, 0x4}]}]}, {0x0, [0x2e, 0x4f]}}, &(0x7f0000002100)=""/93, 0x88, 0x5d, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0x8, &(0x7f0000001f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000001f40)='GPL\x00', 0x80000001, 0x1f, &(0x7f0000001f80)=""/31, 0x41000, 0x22, '\x00', r12, 0x0, r13, 0x8, &(0x7f00000021c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000002200)={0x4, 0x6, 0x7, 0x3ff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002240)=[0x1, r6, r6], &(0x7f0000002280)=[{0x0, 0x2, 0xf, 0xb}, {0x5, 0x1, 0xe, 0x9}, {0x5, 0x2, 0x5, 0x9}, {0x4, 0x4, 0x6, 0x1}, {0x4, 0x1, 0x6, 0x2}, {0x4, 0x3, 0x1, 0x9}, {0x3, 0x1, 0x3, 0xb}], 0x10, 0x81}, 0x94) 476.959315ms ago: executing program 2 (id=6264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xfffffff9}, 0x2, 0xa, 0x40, 0x4, 0x1, 'syz0\x00', "a8ade9db18a9e1d93ee4ab381d1f2d57bf24d5a049b3e40ba20d8b981ce6931f", "af7af1d3b3c3ad33171d5f3ebe5ecc5d874c3a06e44c3142a7af088e33b5cb39", [{0x5, 0xb, {0x0, 0x4d}}, {0x7, 0x5, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x7ff}}, {0x3, 0x1fa0, {0x0, 0x102}}, {0x401, 0x5, {0x0, 0x5}}, {0x2, 0xfffc, {0x0, 0x1}}, {0x4, 0x9dc, {0x2, 0x7}}, {0x5, 0x400, {0x2, 0xfffffff9}}, {0xfffc, 0x1, {0x0, 0x800}}, {0xfff7, 0x10, {0x3, 0x7}}, {0x7df, 0x7, {0x0, 0x2d}}, {0x6, 0x9, {0x0, 0xffffffff}}, {0x4, 0x0, {0x3, 0xfffff000}}, {0x400, 0x1, {0x3}}, {0x0, 0x9, {0x3, 0xe}}, {0x0, 0xf, {0x1, 0x565}}, {0x81c, 0x1, {0x1, 0x2c}}, {0x6072, 0x7fff, {0x2, 0x3}}, {0x5, 0x3, {0x2, 0x3}}, {0x5, 0x9, {0x2, 0x4}}, {0xb9, 0xfffb, {0x1, 0x7}}, {0x0, 0x5, {0x3, 0x81}}, {0x5, 0x5, {0x0, 0xd65}}, {0x9, 0x6c01, {0x0, 0x5}}, {0x7, 0xa, {0x1, 0x7bd6}}, {0x6, 0x2, {0x1, 0xc600000}}, {0xfffa, 0x2, {0x0, 0x4}}, {0x2, 0xbe}, {0x6, 0x8c, {0x4, 0x5}}, {0x5, 0x5, {0x3, 0x3}}, {0x3, 0x1, {0x3, 0x3}}, {0xd29e, 0x3, {0x3, 0x1ff}}, {0x1e70, 0x5, {0x3, 0xfffffbff}}, {0x7, 0x6, {0x2, 0xff}}, {0x3, 0xc6b, {0x0, 0xf}}, {0x6, 0x5, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x9}}, {0x3, 0x0, {0x1, 0x9}}, {0x0, 0x7a8, {0x0, 0x6}}, {0x0, 0xfffa, {0x3, 0xa8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) 384.576633ms ago: executing program 8 (id=6265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd364", 0x1b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c090) 308.955649ms ago: executing program 4 (id=6266): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="39c394e534ecf05fa80a9c82080092", 0xf, 0x0, &(0x7f0000000080)={0x11, 0x1c, r6, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)={0x0, 0x4}) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="95cf8f01975b3dbeb35752ad86cf1d3064c0b828e49651a44392f765b950e5297ecc68f972c5273217b3c6b8e841fb118897ff9985763911054174b69eaff91f1bc77143fc546b66726917d6d595976967567d7228e831a2b3ec116dedf7cdab880fe543b2d09e2a5964be58f8f3887d781d7e4edcd7f28f1495fbb49d2898c0826f366959810a0bbc7dd33cd13c804d0cc880728cabc2460dcb2ea0ec5b4284a46691c0493e41c583a7a70391691643e8f8b9ed14b215bbfc3ee3d1c6afc2188bce8052eae7c8e67ef79da0974b29bbce5cd6fd17d278ee2e5b96b07c6957", @ANYRESOCT=r2], 0x109ed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, 0x0, &(0x7f00000000c0)) 276.115505ms ago: executing program 2 (id=6267): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000080) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x153}, {&(0x7f0000000bc0)="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", 0x1c9}, {&(0x7f00000006c0)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c555706970ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b114ee598f068ad", 0xa9}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x40004) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x5c}}, 0x4000000) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 257.628099ms ago: executing program 7 (id=6268): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) (async) 29.974445ms ago: executing program 2 (id=6269): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000002c0)={0x1, 'veth0_to_bond\x00', {}, 0x21e}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 29.675235ms ago: executing program 7 (id=6270): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108028000d80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000d00000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) (rerun: 32) 26.968793ms ago: executing program 8 (id=6271): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f00000008c0)=""/242, 0xf2}, {&(0x7f00000009c0)=""/180, 0xb4}, {&(0x7f0000000a80)=""/109, 0x6d}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000002000)=""/69, 0x45}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000002080)=""/26, 0x1a}], 0x7}, 0xdf5c}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1ecc}], 0x4, 0x10020, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x22e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) 0s ago: executing program 4 (id=6272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x153}}]}}, 0x0, 0x3e, 0x0, 0x1, 0x4863dbfa}, 0x28) pipe(&(0x7f0000000140)) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): ess `syz.7.4481'. [ 773.226437][T23303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4486'. [ 773.235879][T23303] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4486'. [ 773.730344][T23315] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 774.064354][T23334] syzkaller0: entered promiscuous mode [ 774.069873][T23334] syzkaller0: entered allmulticast mode [ 774.771241][ T5626] Bluetooth: hci2: command 0x0401 tx timeout [ 777.308819][T23378] __nla_validate_parse: 4 callbacks suppressed [ 777.308838][T23378] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4504'. [ 777.387521][T23388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.451875][T23394] netlink: 'syz.2.4509': attribute type 9 has an invalid length. [ 777.474357][T23396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4508'. [ 777.479038][T23394] netlink: 'syz.2.4509': attribute type 6 has an invalid length. [ 777.532455][T23385] netlink: 'syz.8.4506': attribute type 2 has an invalid length. [ 777.548677][T23385] netlink: 'syz.8.4506': attribute type 2 has an invalid length. [ 778.194219][T23423] netlink: 'syz.6.4519': attribute type 4 has an invalid length. [ 778.658656][T23459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4530'. [ 778.670824][T23460] netlink: 'syz.6.4531': attribute type 1 has an invalid length. [ 778.675491][T23459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4530'. [ 778.690246][T23460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.824014][T23465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4533'. [ 778.921074][T23472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4536'. [ 778.965065][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4536'. [ 779.627914][T23510] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4543'. [ 780.010669][T23524] netlink: 'syz.8.4549': attribute type 1 has an invalid length. [ 780.068040][T23524] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4549'. [ 780.350923][T23534] syzkaller0: entered promiscuous mode [ 780.410648][T23534] syzkaller0: entered allmulticast mode [ 780.639965][T23557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4557'. [ 781.501040][T23577] netlink: 'syz.7.4561': attribute type 4 has an invalid length. [ 783.329142][T23536] tap0: tun_chr_ioctl cmd 2148553947 [ 783.522227][T23581] __nla_validate_parse: 2 callbacks suppressed [ 783.522245][T23581] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4562'. [ 783.590873][T23585] netlink: 'syz.8.4562': attribute type 1 has an invalid length. [ 783.604780][T23581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.652214][T23585] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4562'. [ 784.011669][T23609] netlink: 'syz.6.4571': attribute type 25 has an invalid length. [ 784.035534][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4571'. [ 784.044679][T23609] netlink: 'syz.6.4571': attribute type 25 has an invalid length. [ 784.086936][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4571'. [ 784.126043][T23616] syzkaller0: entered promiscuous mode [ 784.131543][T23616] syzkaller0: entered allmulticast mode [ 784.686288][T23642] IPVS: length: 138 != 8 [ 784.729831][T23645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4580'. [ 784.752469][T23652] netlink: 640 bytes leftover after parsing attributes in process `syz.2.4583'. [ 784.789484][T23652] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 784.829377][T23652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4583'. [ 784.860151][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4583'. [ 785.072622][T23660] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4585'. [ 785.469433][T23678] syzkaller0: entered promiscuous mode [ 785.475002][T23678] syzkaller0: entered allmulticast mode [ 785.831424][T23689] wireguard: wg0: Could not create IPv4 socket [ 785.843269][T23687] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode [ 785.860128][T23694] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4597'. [ 785.873205][T23689] netlink: 'syz.2.4595': attribute type 1 has an invalid length. [ 785.875813][T23687] mac80211_hwsim hwsim56 syzkaller0: entered allmulticast mode [ 786.128664][T23698] bond1: (slave bridge4): making interface the new active one [ 786.136765][T23698] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 786.146601][T23711] netlink: 'syz.4.4599': attribute type 1 has an invalid length. [ 786.154650][T23711] netlink: 'syz.4.4599': attribute type 2 has an invalid length. [ 786.284064][T23722] sctp: [Deprecated]: syz.8.4603 (pid 23722) Use of int in max_burst socket option. [ 786.284064][T23722] Use struct sctp_assoc_value instead [ 786.638228][T23744] netlink: 'syz.2.4606': attribute type 1 has an invalid length. [ 786.920342][T23744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 787.068395][T23746] vlan0: entered allmulticast mode [ 787.082541][T23746] bond2: entered allmulticast mode [ 787.105106][T23764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.140191][T23753] bond2: (slave geneve3): making interface the new active one [ 787.156609][T23753] geneve3: entered allmulticast mode [ 787.175510][T23753] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 787.370268][T23768] netlink: 'syz.4.4613': attribute type 2 has an invalid length. [ 787.798697][T23788] netlink: 'syz.2.4618': attribute type 9 has an invalid length. [ 787.995058][T23798] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 788.004858][T23799] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 788.401101][T23808] 8021q: adding VLAN 0 to HW filter on device bond7 [ 788.420525][T23808] bond7 (unregistering): Released all slaves [ 790.598814][T23775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 790.949660][T23841] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 790.969485][T23841] syzkaller1: linktype set to 823 [ 791.107990][T23852] __nla_validate_parse: 11 callbacks suppressed [ 791.108024][T23852] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4635'. [ 791.497779][T23868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4640'. [ 791.705140][T23878] netlink: 'syz.6.4640': attribute type 20 has an invalid length. [ 791.755637][T23868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4640'. [ 791.843428][T23868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4640'. [ 792.305424][T23923] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4649'. [ 792.444196][T23917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 794.240303][T23963] netlink: 'syz.7.4659': attribute type 21 has an invalid length. [ 794.252221][T23963] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4659'. [ 794.261895][T23963] netlink: 'syz.7.4659': attribute type 4 has an invalid length. [ 794.269849][T23963] netlink: 'syz.7.4659': attribute type 5 has an invalid length. [ 794.277927][T23963] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4659'. [ 794.291835][T23964] netlink: 'syz.7.4659': attribute type 21 has an invalid length. [ 794.299973][T23964] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4659'. [ 794.309479][T23964] netlink: 'syz.7.4659': attribute type 4 has an invalid length. [ 794.318830][T23964] netlink: 'syz.7.4659': attribute type 5 has an invalid length. [ 794.327211][T23964] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4659'. [ 794.339586][T23963] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 795.616803][T23932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 796.011689][T23978] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 796.049229][T23978] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4664'. [ 796.144861][T23979] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4663'. [ 796.351149][T23991] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4663'. [ 796.524674][T23999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.593444][T24002] netlink: 67 bytes leftover after parsing attributes in process `syz.7.4669'. [ 796.766022][T24012] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4673'. [ 796.851843][T24013] netlink: 'syz.8.4672': attribute type 3 has an invalid length. [ 796.961596][T24017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4674'. [ 797.380405][T24037] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4679'. [ 797.480549][T24044] netlink: 'syz.2.4681': attribute type 2 has an invalid length. [ 797.510593][T24046] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 797.676345][T17594] Bluetooth: hci5: link tx timeout [ 797.682836][T17594] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 797.696299][T17594] Bluetooth: hci5: link tx timeout [ 797.701447][T17594] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 797.710612][T24053] netlink: 'syz.7.4685': attribute type 1 has an invalid length. [ 797.776971][T24056] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4683'. [ 797.799482][T24060] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4686'. [ 797.810131][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4685'. [ 797.845313][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4685'. [ 797.915035][T24053] bond2: entered promiscuous mode [ 797.921449][T24053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 797.977337][T24061] bond2: (slave bridge3): making interface the new active one [ 797.985325][T24061] bridge3: entered promiscuous mode [ 797.991688][T24061] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 798.027957][T24054] hsr0 speed is unknown, defaulting to 1000 [ 798.066695][T24066] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 798.220968][T24073] syzkaller0: entered promiscuous mode [ 798.226463][T24073] syzkaller0: entered allmulticast mode [ 798.338660][T24076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.400587][T24073] tipc: Enabled bearer , priority 0 [ 798.418404][T24079] bond2: entered allmulticast mode [ 798.429731][T24083] bridge8: entered promiscuous mode [ 798.435479][T24083] bridge8: entered allmulticast mode [ 798.443883][T24083] bond2: (slave bridge8): Enslaving as an active interface with an up link [ 798.517037][T24076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.775701][T24076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.792627][T24091] netlink: 'syz.7.4695': attribute type 4 has an invalid length. [ 798.804302][T24091] xt_addrtype: ipv6 does not support BROADCAST matching [ 798.818639][T24065] tipc: Resetting bearer [ 798.844225][T24065] tipc: Disabling bearer [ 798.956915][T24076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.337059][T11142] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.399729][T24110] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 799.430421][T24112] syzkaller0: entered promiscuous mode [ 799.437798][T24112] syzkaller0: entered allmulticast mode [ 799.450359][T11164] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.739124][T17594] Bluetooth: hci5: command 0x0405 tx timeout [ 799.903045][T19505] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.998667][T19505] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.586815][T24166] syzkaller0: entered promiscuous mode [ 800.594251][T24166] syzkaller0: entered allmulticast mode [ 801.228021][T24207] IPVS: set_ctl: invalid protocol: 60 172.30.0.3:20004 [ 801.261352][T24206] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 801.287201][T24206] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 801.304104][T24206] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 801.378251][T24206] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 801.462088][T24218] __nla_validate_parse: 9 callbacks suppressed [ 801.462106][T24218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4734'. [ 801.486476][T24218] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4734'. [ 801.515622][T24217] syzkaller0: entered promiscuous mode [ 801.521118][T24217] syzkaller0: entered allmulticast mode [ 801.550008][T24221] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4738'. [ 801.632025][T24221] vxcan3: entered promiscuous mode [ 801.878640][T24241] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 801.893527][T17594] Bluetooth: hci5: command 0x0405 tx timeout [ 801.973742][T24249] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4745'. [ 802.089829][T11164] smbdirect: ib_dev[syz2] removed [ 802.392722][T24262] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4749'. [ 802.482111][T24271] syzkaller0: entered promiscuous mode [ 802.509140][T24275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4754'. [ 802.518595][T24271] syzkaller0: entered allmulticast mode [ 802.548656][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4754'. [ 802.568354][T24277] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 802.672808][T24275] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4754'. [ 802.761505][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4759'. [ 802.771941][T24283] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4759'. [ 802.881564][T24286] netlink: 'syz.2.4760': attribute type 2 has an invalid length. [ 802.935898][T24292] netlink: 'syz.4.4762': attribute type 1 has an invalid length. [ 802.983551][T24292] 8021q: adding VLAN 0 to HW filter on device bond7 [ 803.022383][T24292] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 803.167831][T11137] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 803.350721][T11164] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 803.413485][T24317] netem: change failed [ 803.848718][T24326] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 803.870078][T24326] bond3 (unregistering): Released all slaves [ 804.123345][T24352] syzkaller0: entered promiscuous mode [ 804.129656][T24352] syzkaller0: entered allmulticast mode [ 804.144488][T24352] TC_ACT_REPEAT abuse ? [ 804.269138][T24363] netlink: 'syz.6.4783': attribute type 29 has an invalid length. [ 804.277490][T24363] netlink: 'syz.6.4783': attribute type 29 has an invalid length. [ 804.583801][T24374] openvswitch: netlink: Flow key attr not present in new flow. [ 805.400996][T24419] netlink: 'syz.2.4797': attribute type 10 has an invalid length. [ 805.418668][T24408] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 805.515746][T24408] bond5: (slave lo): Enslaving as an active interface with an up link [ 805.527762][T24423] ip6t_srh: unknown srh invflags 4000 [ 805.535280][T24423] netlink: 'syz.6.4798': attribute type 1 has an invalid length. [ 805.546747][T24408] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 805.974613][T24430] "syz.8.4800" (24430) uses obsolete ecb(arc4) skcipher [ 806.212200][T24447] netlink: 'syz.7.4805': attribute type 1 has an invalid length. [ 806.518357][T24462] __nla_validate_parse: 15 callbacks suppressed [ 806.518394][T24462] netlink: 209980 bytes leftover after parsing attributes in process `syz.7.4809'. [ 806.718695][T24469] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4812'. [ 806.784163][T24469] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4812'. [ 806.823017][T24469] IPv6: NLM_F_CREATE should be specified when creating new route [ 806.893476][T24482] xt_hashlimit: invalid interval [ 807.251629][T24498] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4821'. [ 807.373369][T24498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4821'. [ 807.395326][T24498] veth0_macvtap: left promiscuous mode [ 807.409542][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4821'. [ 807.882000][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4825'. [ 807.978793][T24535] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4827'. [ 808.073823][T24540] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4829'. [ 808.155287][T24540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4829'. [ 808.356840][T24551] bond7: (slave syz_tun): Removing an active aggregator [ 808.365903][T24551] bond7: (slave syz_tun): Releasing backup interface [ 808.771974][T24571] netlink: 'syz.4.4839': attribute type 2 has an invalid length. [ 808.844432][T24573] xt_hashlimit: size too large, truncated to 1048576 [ 808.909785][T24574] netlink: 'syz.7.4840': attribute type 1 has an invalid length. [ 808.936744][T24576] netem: incorrect ge model size [ 808.953056][T24576] netem: change failed [ 809.145296][T24590] netlink: 'syz.4.4844': attribute type 1 has an invalid length. [ 809.376839][T24592] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 809.447273][T24597] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 809.508824][T24600] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 809.537257][T24600] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 809.571773][T24600] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 809.934303][T11115] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.972745][T11115] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.998906][T11115] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.057252][T11115] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.101872][T24627] tipc: Enabled bearer , priority 0 [ 810.246240][T24634] netlink: 'syz.8.4860': attribute type 2 has an invalid length. [ 810.302201][T24634] netlink: 'syz.8.4860': attribute type 2 has an invalid length. [ 810.328981][T24627] syzkaller0: entered promiscuous mode [ 810.351526][T24627] syzkaller0: entered allmulticast mode [ 810.383637][T24627] tipc: Resetting bearer [ 810.461669][T24626] tipc: Resetting bearer [ 813.107568][T24626] tipc: Disabling bearer [ 813.356822][T24670] __nla_validate_parse: 12 callbacks suppressed [ 813.356835][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4865'. [ 813.782089][T24680] sctp: [Deprecated]: syz.2.4868 (pid 24680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 813.782089][T24680] Use struct sctp_sack_info instead [ 813.946311][T24682] 8021q: VLANs not supported on ipvlan1 [ 814.075047][T24694] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4875'. [ 814.205425][T24693] syzkaller0: entered promiscuous mode [ 814.222758][T24693] syzkaller0: entered allmulticast mode [ 814.229725][T24672] netlink: 71 bytes leftover after parsing attributes in process `syz.7.4866'. [ 814.329616][T24706] syzkaller0: entered promiscuous mode [ 814.335127][T24706] syzkaller0: entered allmulticast mode [ 814.385162][T24712] netlink: 'syz.6.4874': attribute type 1 has an invalid length. [ 814.655452][T24718] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4882'. [ 814.664587][T24719] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4882'. [ 814.878752][T24729] netlink: 'syz.2.4887': attribute type 8 has an invalid length. [ 814.886516][T24729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4887'. [ 814.945377][T24729] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.952995][T24729] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.061227][T24746] hsr0 speed is unknown, defaulting to 1000 [ 815.710023][T24732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 815.721730][T24748] netlink: 'syz.2.4891': attribute type 1 has an invalid length. [ 815.743710][T24748] netlink: 'syz.2.4891': attribute type 1 has an invalid length. [ 815.922162][T24762] bond0: Error: Cannot enslave bond to itself. [ 816.446459][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4898'. [ 816.477114][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4899'. [ 816.501892][T24783] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4898'. [ 816.598503][T24785] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 816.624970][T24785] bond7 (unregistering): Released all slaves [ 816.675501][T24790] netlink: 'syz.7.4900': attribute type 1 has an invalid length. [ 816.982710][T24792] bond3: (slave gretap1): making interface the new active one [ 817.009577][T24792] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 817.283978][T24810] netlink: 332 bytes leftover after parsing attributes in process `syz.7.4906'. [ 817.469292][T24820] dvmrp0: entered allmulticast mode [ 818.840665][T24892] Cannot find add_set index 2 as target [ 818.977800][T24895] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4927'. [ 819.088092][T24902] syzkaller0: entered promiscuous mode [ 819.113049][T24902] syzkaller0: entered allmulticast mode [ 819.128962][T24904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4933'. [ 819.164127][T24904] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4933'. [ 819.373762][T24910] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4935'. [ 819.383106][T24911] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4935'. [ 819.392235][T24911] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.399370][T24911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.406880][T24911] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.414022][T24911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.423025][T24911] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4935'. [ 819.595654][T24915] bridge9: entered promiscuous mode [ 819.600991][T24915] bridge9: entered allmulticast mode [ 819.610385][T24915] team0: Port device bridge9 added [ 819.625084][T24917] netlink: 'syz.4.4938': attribute type 21 has an invalid length. [ 819.633819][T24917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4938'. [ 819.647209][T24915] x_tables: duplicate underflow at hook 3 [ 819.671492][T24915] bridge0: port 3(team0) entered blocking state [ 819.677935][T24915] bridge0: port 3(team0) entered disabled state [ 819.684348][T24915] team0: entered allmulticast mode [ 819.689660][T24915] team_slave_0: entered allmulticast mode [ 819.695434][T24915] team_slave_1: entered allmulticast mode [ 819.701554][T24915] dummy0: entered allmulticast mode [ 819.717504][T24915] team0: entered promiscuous mode [ 819.722555][T24915] team_slave_0: entered promiscuous mode [ 819.728355][T24915] team_slave_1: entered promiscuous mode [ 819.734818][T24915] dummy0: entered promiscuous mode [ 819.741068][T24915] bridge0: port 3(team0) entered blocking state [ 819.747399][T24915] bridge0: port 3(team0) entered forwarding state [ 819.917901][T24920] mac80211_hwsim hwsim56 syzkaller0: left promiscuous mode [ 819.939259][T24920] mac80211_hwsim hwsim56 syzkaller0: left allmulticast mode [ 820.137436][T24931] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4942'. [ 820.189547][T24933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4943'. [ 820.405135][T24941] sctp: [Deprecated]: syz.8.4944 (pid 24941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 820.405135][T24941] Use struct sctp_sack_info instead [ 820.440067][T24942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4945'. [ 820.468929][T24941] sctp: [Deprecated]: syz.8.4944 (pid 24941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 820.468929][T24941] Use struct sctp_sack_info instead [ 820.570166][T24941] 8021q: adding VLAN 0 to HW filter on device bond7 [ 820.577625][T24941] bridge0: port 4(bond7) entered blocking state [ 820.593476][T24941] bridge0: port 4(bond7) entered disabled state [ 820.610388][T24941] bond7: entered allmulticast mode [ 820.638129][T24941] bond7: entered promiscuous mode [ 820.657878][T24941] bridge0: port 4(bond7) entered blocking state [ 820.664307][T24941] bridge0: port 4(bond7) entered forwarding state [ 820.710079][T24951] netlink: 'syz.4.4947': attribute type 1 has an invalid length. [ 820.786072][T24951] 8021q: adding VLAN 0 to HW filter on device bond8 [ 821.109956][T24973] nftables ruleset with unbound set [ 821.219536][T19842] bridge0: port 4(bond7) entered disabled state [ 821.682198][T25001] tipc: Enabling of bearer rejected, failed to enable media [ 822.098160][T25021] bridge_slave_0: invalid flags given to default FDB implementation [ 822.234606][T25033] hsr0 speed is unknown, defaulting to 1000 [ 822.308052][T25036] openvswitch: netlink: Flow actions attr not present in new flow. [ 823.236187][T25084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 823.308557][T25085] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 823.332317][T25085] bond3 (unregistering): Released all slaves [ 823.436570][T25084] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 823.454304][T25084] bond3 (unregistering): Released all slaves [ 823.708079][T25067] syz.2.4982 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 823.851070][T25067] CPU: 0 UID: 0 PID: 25067 Comm: syz.2.4982 Not tainted syzkaller #0 PREEMPT(full) [ 823.851101][T25067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.851113][T25067] Call Trace: [ 823.851121][T25067] [ 823.851129][T25067] dump_stack_lvl+0xe8/0x150 [ 823.851158][T25067] dump_header+0xd3/0x4c0 [ 823.851193][T25067] oom_kill_process+0x3ab/0x970 [ 823.851226][T25067] out_of_memory+0x106c/0x1410 [ 823.851250][T25067] ? try_charge_memcg+0xbb9/0x1570 [ 823.851282][T25067] ? __pfx___mutex_lock+0x10/0x10 [ 823.851315][T25067] ? __pfx_out_of_memory+0x10/0x10 [ 823.851339][T25067] ? do_raw_spin_unlock+0xf5/0x210 [ 823.851376][T25067] try_charge_memcg+0xc77/0x1570 [ 823.851425][T25067] ? __pfx_try_charge_memcg+0x10/0x10 [ 823.851451][T25067] ? percpu_ref_tryget+0x15/0x180 [ 823.851502][T25067] ? charge_memcg+0x23/0x2b0 [ 823.851535][T25067] charge_memcg+0x1a2/0x2b0 [ 823.851566][T25067] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 823.851594][T25067] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 823.851628][T25067] __swap_cache_prepare_and_add+0xdc/0x700 [ 823.851659][T25067] ? page_rmappable_folio+0x9a/0x170 [ 823.851698][T25067] swap_cache_alloc_folio+0xf1/0x240 [ 823.851725][T25067] swap_cluster_readahead+0x355/0x670 [ 823.851753][T25067] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 823.851788][T25067] ? get_vma_policy+0x27b/0x3c0 [ 823.851822][T25067] swapin_readahead+0x196/0xc50 [ 823.851850][T25067] ? swap_table_get+0x1e/0x260 [ 823.851879][T25067] ? __pfx_swapin_readahead+0x10/0x10 [ 823.851906][T25067] ? swap_table_get+0x1e/0x260 [ 823.851926][T25067] ? swap_table_get+0x1e/0x260 [ 823.851944][T25067] ? swap_table_get+0x1e/0x260 [ 823.851966][T25067] ? swap_table_get+0x216/0x260 [ 823.851989][T25067] ? swap_cache_get_folio+0x2e4/0x2f0 [ 823.852030][T25067] do_swap_page+0x555/0x5120 [ 823.852060][T25067] ? __pte_offset_map+0x29/0x240 [ 823.852086][T25067] ? __pte_offset_map+0x29/0x240 [ 823.852120][T25067] ? do_swap_page+0x128/0x5120 [ 823.852142][T25067] ? __pfx_do_swap_page+0x10/0x10 [ 823.852163][T25067] ? __pte_offset_map+0x1ae/0x240 [ 823.852190][T25067] ? pte_offset_map_rw_nolock+0xea/0x160 [ 823.852215][T25067] handle_mm_fault+0x12d2/0x3170 [ 823.852251][T25067] ? handle_mm_fault+0xee/0x3170 [ 823.852278][T25067] ? __pfx_handle_mm_fault+0x10/0x10 [ 823.852296][T25067] ? lock_vma_under_rcu+0x45a/0x500 [ 823.852317][T25067] ? __pfx___sys_bpf+0x10/0x10 [ 823.852362][T25067] do_user_addr_fault+0xa73/0x1340 [ 823.852387][T25067] ? rcu_is_watching+0x15/0xb0 [ 823.852408][T25067] ? trace_page_fault_user+0x84/0x1e0 [ 823.852428][T25067] exc_page_fault+0x6a/0xc0 [ 823.852451][T25067] asm_exc_page_fault+0x26/0x30 [ 823.852467][T25067] RIP: 0033:0x7f8bee19cdeb [ 823.852485][T25067] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 823.852500][T25067] RSP: 002b:00007f8bef083028 EFLAGS: 00010217 [ 823.852516][T25067] RAX: 000000000000000c RBX: 00007f8bee415fa0 RCX: ffffffffffffffe8 [ 823.852528][T25067] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000000 [ 823.852538][T25067] RBP: 00007f8bee232d69 R08: 0000000000000000 R09: 0000000000000000 [ 823.852548][T25067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.852558][T25067] R13: 00007f8bee416038 R14: 00007f8bee415fa0 R15: 00007ffc317a32e8 [ 823.852586][T25067] [ 823.852594][T25067] memory: usage 307200kB, limit 307200kB, failcnt 454 [ 824.044404][T25112] __nla_validate_parse: 9 callbacks suppressed [ 824.044421][T25112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4995'. [ 824.252266][T25067] memory+swap: usage 291796kB, limit 9007199254740988kB, failcnt 0 [ 824.263461][T25067] kmem: usage 291392kB, limit 9007199254740988kB, failcnt 0 [ 824.272328][T25067] Memory cgroup stats for /syz2: [ 824.272598][T25067] cache 0 [ 824.282438][T25067] rss 0 [ 824.285930][T25067] rss_huge 0 [ 824.291149][T25067] shmem 0 [ 824.294545][T25067] mapped_file 0 [ 824.298038][T25067] dirty 0 [ 824.300975][T25067] writeback 0 [ 824.304365][T25067] workingset_refault_anon 0 [ 824.339678][T25067] workingset_refault_file 0 [ 824.347368][T25112] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 824.380741][T25067] swap 200704 [ 824.397008][T25067] swapcached 200704 [ 824.411587][T25067] pgpgin 74135 [ 824.418350][T25067] pgpgout 74135 [ 824.425147][T25067] pgfault 161672 [ 824.432122][T25067] pgmajfault 3 [ 824.442080][T25067] inactive_anon 0 [ 824.453049][T25067] active_anon 0 [ 824.460351][T25067] inactive_file 0 [ 824.468332][T25067] active_file 0 [ 824.486275][T25067] unevictable 0 [ 824.503303][T25067] hierarchical_memory_limit 314572800 [ 824.541696][T25067] hierarchical_memsw_limit 9223372036854771712 [ 824.574907][T25067] total_cache 0 [ 824.592826][T25067] total_rss 0 [ 824.598752][T25119] netlink: 216 bytes leftover after parsing attributes in process `syz.6.4997'. [ 824.600636][T25067] total_rss_huge 0 [ 824.619774][T25067] total_shmem 0 [ 824.638716][T25067] total_mapped_file 0 [ 824.642797][T25067] total_dirty 0 [ 824.650202][T25067] total_writeback 0 [ 824.663434][T25067] total_workingset_refault_anon 0 [ 824.673345][T25067] total_workingset_refault_file 0 [ 824.689304][T25067] total_swap 200704 [ 824.710222][T25067] total_swapcached 200704 [ 824.756932][T25067] total_pgpgin 74135 [ 824.782315][T25067] total_pgpgout 74135 [ 824.798775][T25067] total_pgfault 161672 [ 824.825957][T25067] total_pgmajfault 3 [ 824.842273][T25067] total_inactive_anon 0 [ 824.857576][T25067] total_active_anon 0 [ 824.880724][T25067] total_inactive_file 0 [ 824.893350][T25067] total_active_file 0 [ 824.903610][T25067] total_unevictable 0 [ 824.938910][T25067] anon_cost 0 [ 824.947313][T25067] file_cost 0 [ 824.954702][T25067] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4982,pid=25065,uid=0 [ 824.981370][T25067] Memory cgroup out of memory: Killed process 25065 (syz.2.4982) total-vm:102292kB, anon-rss:1240kB, file-rss:22924kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 825.501141][T25148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5003'. [ 825.538303][T25150] netlink: 'syz.4.5005': attribute type 2 has an invalid length. [ 825.584374][T25148] veth0_macvtap: left promiscuous mode [ 826.028806][T25174] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5008'. [ 826.216401][T25181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5011'. [ 826.291605][T25182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5011'. [ 826.830971][T25207] netlink: 'syz.4.5014': attribute type 19 has an invalid length. [ 826.958917][T25212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5021'. [ 826.968147][T25212] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5021'. [ 827.092406][T25209] syzkaller1: entered promiscuous mode [ 827.116698][T25209] syzkaller1: entered allmulticast mode [ 827.148583][T25209] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 827.174214][T25220] openvswitch: netlink: IPv4 tun info is not correct [ 827.294925][T25224] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5024'. [ 827.617654][T25240] tipc: Enabling of bearer rejected, failed to enable media [ 827.639244][T25240] hsr0 speed is unknown, defaulting to 1000 [ 827.687314][T25245] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5031'. [ 827.759593][ T30] audit: type=1800 audit(1777963783.802:18): pid=25240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5030" name="memory.events" dev="tmpfs" ino=1458 res=0 errno=0 [ 827.787910][ T30] audit: type=1804 audit(1777963783.802:19): pid=25240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5030" name="/newroot/284/memory.events" dev="tmpfs" ino=1458 res=1 errno=0 [ 827.978616][T25258] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20004 [ 828.434865][T25273] syzkaller1: entered promiscuous mode [ 828.440522][T25273] syzkaller1: entered allmulticast mode [ 828.560166][T25283] veth0: entered promiscuous mode [ 828.633217][T25283] veth0: left promiscuous mode [ 828.763837][T25299] netlink: 'syz.7.5048': attribute type 1 has an invalid length. [ 828.832567][T25299] 8021q: adding VLAN 0 to HW filter on device bond4 [ 828.841562][T25306] mac80211_hwsim hwsim38 : renamed from wlan1 (while UP) [ 828.863380][T25304] gre1: entered promiscuous mode [ 828.868356][T25304] gre1: entered allmulticast mode [ 828.969572][T25311] can: request_module (can-proto-0) failed. [ 828.989437][T25299] bond4: (slave geneve4): making interface the new active one [ 828.999012][T25299] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 829.092341][T25321] __nla_validate_parse: 3 callbacks suppressed [ 829.092359][T25321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5053'. [ 829.109759][T25321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5053'. [ 829.131207][T25310] tipc: Resetting bearer [ 829.186578][T11164] netdevsim netdevsim7 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 829.195493][T11164] netdevsim netdevsim7 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 829.204294][T11164] netdevsim netdevsim7 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 829.213101][T19506] netdevsim netdevsim7 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 829.274342][T25324] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5055'. [ 829.419400][T25334] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5059'. [ 829.670264][T25342] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5062'. [ 829.709154][T25343] netlink: 'syz.6.5062': attribute type 12 has an invalid length. [ 829.717173][T25343] netlink: 'syz.6.5062': attribute type 29 has an invalid length. [ 829.747954][T25343] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5062'. [ 829.751897][T25345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5063'. [ 829.757010][T25343] netlink: 59 bytes leftover after parsing attributes in process `syz.6.5062'. [ 829.757920][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5062'. [ 829.784043][T25343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5062'. [ 829.862712][T25348] netlink: zone id is out of range [ 829.867879][T25348] netlink: del zone limit has 4 unknown bytes [ 830.650003][T25379] openvswitch: netlink: Flow key attribute not present in set flow. [ 830.782216][T25382] netlink: 'syz.2.5075': attribute type 21 has an invalid length. [ 831.185828][T25400] netlink: 'syz.7.5082': attribute type 21 has an invalid length. [ 831.360060][T25413] netlink: 'syz.2.5084': attribute type 5 has an invalid length. [ 831.701183][T25429] syzkaller0: entered promiscuous mode [ 831.714660][T25429] syzkaller0: entered allmulticast mode [ 832.037535][T25450] xt_hl: Unknown TTL match mode: 255 [ 832.161827][T25452] sch_tbf: burst 12 is lower than device bridge9 mtu (1514) ! [ 832.176589][T25454] netlink: 'syz.7.5094': attribute type 1 has an invalid length. [ 832.519881][T25474] tipc: Enabling of bearer rejected, failed to enable media [ 832.848862][T25493] openvswitch: netlink: Message has 8 unknown bytes. [ 832.924554][T25497] netlink: 'syz.2.5108': attribute type 1 has an invalid length. [ 832.952349][T25497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 833.366011][T25528] syzkaller0: entered promiscuous mode [ 833.371516][T25528] syzkaller0: entered allmulticast mode [ 833.790332][T25546] vlan1: entered allmulticast mode [ 833.813176][T25546] erspan0: entered allmulticast mode [ 834.372031][T25570] netlink: 'syz.6.5130': attribute type 1 has an invalid length. [ 834.466351][T25575] __nla_validate_parse: 15 callbacks suppressed [ 834.466369][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5132'. [ 834.515114][T25575] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5132'. [ 834.527603][T25579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5130'. [ 834.748447][T25583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5134'. [ 837.195587][T25570] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 837.310590][T25598] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 837.541192][T25600] macsec2: entered promiscuous mode [ 837.566564][T25605] sit0: entered promiscuous mode [ 837.573656][T25605] netlink: 'syz.6.5141': attribute type 1 has an invalid length. [ 837.581379][T25605] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5141'. [ 837.611192][T25613] sctp: [Deprecated]: syz.4.5143 (pid 25613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 837.611192][T25613] Use struct sctp_sack_info instead [ 837.669228][T25615] syzkaller0: entered promiscuous mode [ 837.685458][T25615] syzkaller0: entered allmulticast mode [ 837.735931][T25615] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5144'. [ 837.837304][T25623] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 837.886868][T25625] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 838.113829][T25621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.711604][T25683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5162'. [ 838.720613][T25683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5162'. [ 839.081973][T25705] syzkaller1: entered promiscuous mode [ 839.118450][T25705] syzkaller1: entered allmulticast mode [ 839.169899][T25695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5167'. [ 839.210261][T25695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5167'. [ 839.310442][T25716] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 839.320417][T25714] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 839.435072][T25721] tipc: Resetting bearer [ 839.579617][T25729] __nla_validate_parse: 1 callbacks suppressed [ 839.579635][T25729] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5172'. [ 840.001845][T25744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5177'. [ 840.136882][T25748] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5179'. [ 840.147496][T25748] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5179'. [ 840.150217][T25749] veth0: entered promiscuous mode [ 840.171408][T25749] xt_TPROXY: Can be used only with -p tcp or -p udp [ 840.181752][T25746] veth0: left promiscuous mode [ 841.501476][T25798] netlink: 'syz.8.5192': attribute type 3 has an invalid length. [ 841.512548][T25796] bond0: entered promiscuous mode [ 841.517615][T25796] bond_slave_0: entered promiscuous mode [ 841.523435][T25796] bond_slave_1: entered promiscuous mode [ 841.533641][T25796] bond0: left promiscuous mode [ 841.538431][T25796] bond_slave_0: left promiscuous mode [ 841.538450][T25798] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5192'. [ 841.543971][T25796] bond_slave_1: left promiscuous mode [ 841.580311][T25799] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5194'. [ 841.582414][T25804] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5194'. [ 841.733640][T25810] ip6gretap0: left promiscuous mode [ 841.897557][T25815] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.5199'. [ 842.200752][T25818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5200'. [ 842.433958][T25830] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5204'. [ 843.625813][T25873] syz_tun: entered promiscuous mode [ 843.642135][T25873] syz_tun: left promiscuous mode [ 843.942180][T25901] C: renamed from lo (while UP) [ 843.950283][T25901] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 844.678671][T25914] bridge_slave_0: left allmulticast mode [ 844.685817][T25914] bridge_slave_0: left promiscuous mode [ 844.691629][T25914] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.707551][T25914] bridge_slave_1: left allmulticast mode [ 844.713601][T25914] bridge_slave_1: left promiscuous mode [ 844.720380][T25914] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.732394][T25914] bond0: (slave bond_slave_0): Releasing backup interface [ 844.750342][T25914] bond0: (slave bond_slave_1): Releasing backup interface [ 844.774646][T25914] team0: Port device team_slave_0 removed [ 844.794331][T25914] team0: Port device team_slave_1 removed [ 844.808160][T25914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.821298][T25914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.832044][T25914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.840006][T25914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.860944][T25914] bond2: (slave bridge3): Releasing backup interface [ 844.867904][T25914] bridge3: left promiscuous mode [ 844.895167][T25914] bond3: (slave gretap1): Releasing active interface [ 844.910982][T25914] bond4: (slave geneve4): Releasing active interface [ 844.958041][T11164] netdevsim netdevsim7 netdevsim0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 844.967764][T11164] netdevsim netdevsim7 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 844.977718][T11164] netdevsim netdevsim7 netdevsim2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 844.988418][T11164] netdevsim netdevsim7 netdevsim3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 846.451912][T25876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.729467][T25922] netlink: 'syz.4.5231': attribute type 39 has an invalid length. [ 846.738665][T25923] __nla_validate_parse: 11 callbacks suppressed [ 846.738682][T25923] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5233'. [ 846.792770][T19506] bond0: (slave bond_slave_0): interface is now down [ 846.836088][T19506] bond0: (slave bond_slave_1): interface is now down [ 846.942290][T25930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5234'. [ 846.987169][T25930] netlink: 'syz.7.5234': attribute type 3 has an invalid length. [ 847.031410][T11137] bond0: (slave bond_slave_0): interface is now down [ 847.038184][T11137] bond0: (slave bond_slave_1): interface is now down [ 847.053931][T25939] ip6gre1: entered promiscuous mode [ 847.059540][T25939] ip6gre1: entered allmulticast mode [ 847.230907][ T3381] bond0: (slave bond_slave_0): interface is now down [ 847.250265][ T3381] bond0: (slave bond_slave_1): interface is now down [ 847.446803][T19506] bond0: (slave bond_slave_0): interface is now down [ 847.489037][T19506] bond0: (slave bond_slave_1): interface is now down [ 847.512121][T19506] bond0: now running without any active interface! [ 847.944014][T25985] xt_hashlimit: size too large, truncated to 1048576 [ 848.055902][T25996] xt_hashlimit: size too large, truncated to 1048576 [ 848.128457][T26003] : renamed from vxcan1 (while UP) [ 848.628998][T26027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.002028][T26046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5261'. [ 849.114254][T26048] bridge0: port 3(syz_tun) entered blocking state [ 849.120870][T26048] bridge0: port 3(syz_tun) entered disabled state [ 849.139709][T26048] syz_tun: entered allmulticast mode [ 849.146665][T26048] syz_tun: entered promiscuous mode [ 849.226255][T26057] netlink: 'syz.8.5266': attribute type 21 has an invalid length. [ 849.263997][T26057] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5266'. [ 849.374442][T26071] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.5269'. [ 849.466381][T26076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5272'. [ 849.569992][T26085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5273'. [ 849.587329][T26085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5273'. [ 852.199996][T26061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 852.467481][T26100] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5278'. [ 852.617174][T26105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.637731][T26108] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5280'. [ 852.913568][T26124] openvswitch: netlink: Key 6 has unexpected len 94 expected 2 [ 853.072070][T26133] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 853.130329][T26127] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5284'. [ 853.139556][T26127] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5284'. [ 853.166761][T26137] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5290'. [ 853.172598][T26127] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5284'. [ 853.548152][T26160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5293'. [ 854.249007][T26191] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5302'. [ 854.332294][T26194] openvswitch: netlink: Duplicate or invalid key (type 0). [ 854.351224][T26190] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5304'. [ 854.370269][T26194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.458917][T26198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5305'. [ 854.707342][T26205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.530550][ T30] audit: type=1800 audit(1777963811.572:20): pid=26238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5320" name="memory.events" dev="tmpfs" ino=1866 res=0 errno=0 [ 856.155333][T26271] lo: entered promiscuous mode [ 856.194069][T26271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.194883][ T30] audit: type=1804 audit(1777963812.232:21): pid=26280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5332" name="/newroot/307/cgroup.controllers" dev="tmpfs" ino=1577 res=1 errno=0 [ 856.348478][ T30] audit: type=1800 audit(1777963812.232:22): pid=26280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5332" name="cgroup.controllers" dev="tmpfs" ino=1577 res=0 errno=0 [ 856.393465][T26285] openvswitch: netlink: Flow key attr not present in new flow. [ 856.607205][T26303] netlink: 'syz.4.5339': attribute type 62 has an invalid length. [ 857.393643][T26338] netlink: 'syz.2.5349': attribute type 1 has an invalid length. [ 857.418865][T26349] openvswitch: netlink: Key 4 has unexpected len 16 expected 12 [ 857.456012][T26352] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 857.475438][T26335] wireguard0: entered promiscuous mode [ 857.502800][T26335] wireguard0: entered allmulticast mode [ 857.519337][T26354] __nla_validate_parse: 8 callbacks suppressed [ 857.519350][T26354] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5353'. [ 857.550786][T26330] hsr0 speed is unknown, defaulting to 1000 [ 857.592127][T26359] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5354'. [ 857.834329][T26375] netlink: 'syz.4.5355': attribute type 4 has an invalid length. [ 857.835465][T26373] xt_connbytes: Forcing CT accounting to be enabled [ 858.011919][T26371] netlink: 'syz.8.5357': attribute type 29 has an invalid length. [ 858.267109][T26394] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5362'. [ 858.348750][T26403] netlink: 'syz.6.5366': attribute type 1 has an invalid length. [ 858.440337][T26405] netem: change failed [ 858.722766][T26414] syzkaller0: entered promiscuous mode [ 858.728280][T26414] syzkaller0: entered allmulticast mode [ 859.024817][T17594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 859.039373][T17594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 859.047382][T17594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 859.055782][T17594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 859.091878][T17594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 859.126098][T26435] netlink: 'syz.7.5375': attribute type 11 has an invalid length. [ 859.334867][T26446] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5377'. [ 859.345460][T26446] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.5377'. [ 859.709141][T26454] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5379'. [ 859.713417][T26433] hsr0 speed is unknown, defaulting to 1000 [ 860.352812][T26480] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5385'. [ 860.466035][T26433] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.474260][T26433] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.482358][T26433] bridge_slave_0: entered allmulticast mode [ 860.501831][T26433] bridge_slave_0: entered promiscuous mode [ 860.531063][T26433] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.554899][T26433] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.562327][T26433] bridge_slave_1: entered allmulticast mode [ 860.579093][T26433] bridge_slave_1: entered promiscuous mode [ 860.699254][T26433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.734698][T26433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.757772][T26473] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 860.809765][T26433] team0: Port device team_slave_0 added [ 860.827812][T26433] team0: Port device team_slave_1 added [ 860.948285][T26433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.958530][T26433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.995628][T26433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.028682][T26433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.048696][T26433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.130190][T26433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.334007][T26433] hsr_slave_0: entered promiscuous mode [ 861.356413][T26433] hsr_slave_1: entered promiscuous mode [ 861.374154][T26433] debugfs: 'hsr0' already exists in 'hsr' [ 861.387317][T26433] Cannot create hsr debugfs directory [ 862.466804][T26531] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 862.771962][T26433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.822143][T26433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.160484][T26433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.171672][T26433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.195513][T26553] netlink: 'syz.8.5402': attribute type 2 has an invalid length. [ 863.204127][T26553] netlink: 'syz.8.5402': attribute type 2 has an invalid length. [ 863.212082][T26553] netlink: 'syz.8.5402': attribute type 2 has an invalid length. [ 863.220737][T26553] netlink: 'syz.8.5402': attribute type 2 has an invalid length. [ 863.236780][T26553] netlink: 'syz.8.5402': attribute type 2 has an invalid length. [ 863.250403][T26553] netlink: 'syz.8.5402': attribute type 2 has an invalid length. [ 863.259676][T26553] netlink: 'syz.8.5402': attribute type 2 has an invalid length. [ 863.499657][T26558] syzkaller0: entered promiscuous mode [ 863.505176][T26558] syzkaller0: entered allmulticast mode [ 863.632671][T26433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.667783][T26433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.956006][T26433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.966810][T26433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.150775][T26599] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5410'. [ 867.652197][T26614] gretap0: entered promiscuous mode [ 867.768214][T26620] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5419'. [ 867.808205][T26620] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5419'. [ 867.809296][T26621] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5416'. [ 867.844362][T26433] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 867.862753][T26624] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5420'. [ 867.875110][T26624] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 867.878763][T26433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 867.956400][T26433] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 867.971226][T26433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 867.982148][T26433] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 868.012230][T26433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.039298][T26630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5422'. [ 868.052141][T26433] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 868.084874][T26433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 868.349516][T26649] netlink: 'syz.6.5427': attribute type 10 has an invalid length. [ 868.363531][T26433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.394442][T26649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.413157][T26649] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 868.427600][T26645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5425'. [ 868.488180][T26433] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.510802][T11135] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.518036][T11135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.532044][T26645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5425'. [ 868.534917][T26657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5428'. [ 868.556524][T11135] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.563631][T11135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.623535][T26433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 868.824015][T26666] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5433'. [ 869.003952][T26678] Bluetooth: MGMT ver 1.23 [ 869.805462][T26433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.240507][T26737] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 871.272518][T26433] veth0_vlan: entered promiscuous mode [ 871.292144][T26433] veth1_vlan: entered promiscuous mode [ 871.436430][T26433] veth0_macvtap: entered promiscuous mode [ 871.470033][T26433] veth1_macvtap: entered promiscuous mode [ 871.557273][T26433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.616955][T26433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.667730][T26799] netlink: 'syz.2.5467': attribute type 1 has an invalid length. [ 871.695443][T11164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.728739][T11164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.758215][T11164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.766961][T11164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.829354][T26805] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 872.106088][T26820] SET target dimension over the limit! [ 872.159542][T26822] __nla_validate_parse: 6 callbacks suppressed [ 872.159560][T26822] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5474'. [ 872.236237][T11137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.244137][T11137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.393991][T26832] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5477'. [ 872.416078][T11115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.423989][T11115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.432166][T26832] x_tables: duplicate underflow at hook 1 [ 872.528572][T26837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5478'. [ 872.562260][T26841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5480'. [ 872.577617][T26842] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5481'. [ 872.729780][T26837] 8021q: adding VLAN 0 to HW filter on device bond4 [ 872.755022][T26837] bond4 (unregistering): Released all slaves [ 872.823552][T26854] sock: sock_set_timeout: `syz.2.5482' (pid 26854) tries to set negative timeout [ 873.299500][T26870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5486'. [ 873.440268][T26878] macvtap1: entered promiscuous mode [ 873.464248][T26878] vlan0: entered promiscuous mode [ 873.479970][T26878] macvtap1: entered allmulticast mode [ 873.504769][T26878] vlan0: entered allmulticast mode [ 873.529067][T26878] veth0_vlan: entered allmulticast mode [ 873.584041][T26879] macvtap2: entered promiscuous mode [ 873.589503][T26879] macvtap2: entered allmulticast mode [ 873.919992][T26890] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5491'. [ 874.169383][T26903] netlink: 'syz.2.5496': attribute type 5 has an invalid length. [ 874.329374][T26909] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 876.165503][T26865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.383199][T26942] netlink: 'syz.6.5507': attribute type 1 has an invalid length. [ 876.491104][T26942] bond4: entered promiscuous mode [ 876.498237][T26942] 8021q: adding VLAN 0 to HW filter on device bond4 [ 876.501160][T26953] netlink: 'syz.8.5510': attribute type 2 has an invalid length. [ 876.518212][T26942] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5507'. [ 876.684957][T26942] bond4: entered allmulticast mode [ 876.725227][T26942] bond4: (slave bridge11): making interface the new active one [ 876.732816][T26942] bridge11: entered promiscuous mode [ 876.738282][T26942] bridge11: entered allmulticast mode [ 876.744774][T26942] bond4: (slave bridge11): Enslaving as an active interface with an up link [ 876.780543][T26967] netlink: 211856 bytes leftover after parsing attributes in process `syz.7.5514'. [ 876.791277][T11137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.803021][T11137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.814492][T26970] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 876.826953][T26970] bond0: (slave lo): Error: Device can not be enslaved while up [ 876.901968][T26970] openvswitch: netlink: Duplicate or invalid key (type 0). [ 876.963142][T26976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5518'. [ 876.969130][T26970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.284939][T26998] __nla_validate_parse: 1 callbacks suppressed [ 877.284957][T26998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5525'. [ 877.300199][T26998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5525'. [ 877.416840][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 877.481651][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 877.510364][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 877.565892][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 877.600548][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 877.626047][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 877.635740][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 877.645800][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 878.106522][T11115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.128728][T11115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.153113][T27039] netlink: 'syz.7.5538': attribute type 1 has an invalid length. [ 878.285515][T11142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.377548][T27051] netlink: 'syz.4.5543': attribute type 4 has an invalid length. [ 878.468373][T27053] netlink: 'syz.4.5543': attribute type 32 has an invalid length. [ 878.520563][T27053] bond1: option coupled_control: invalid value (24) [ 878.552524][T27053] bond1 (unregistering): Released all slaves [ 878.815100][T11164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.843355][T11164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.923344][T11115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.104253][T27086] netlink: 'syz.4.5552': attribute type 1 has an invalid length. [ 879.119069][T27086] netlink: 'syz.4.5552': attribute type 2 has an invalid length. [ 879.140318][T27083] bond1 (unregistering): Released all slaves [ 879.340297][T27094] netlink: 'syz.6.5557': attribute type 13 has an invalid length. [ 879.355570][T27097] mac80211_hwsim hwsim56 syzkaller0: entered promiscuous mode [ 879.363096][T27097] mac80211_hwsim hwsim56 syzkaller0: entered allmulticast mode [ 879.374394][T27094] netlink: 'syz.6.5557': attribute type 13 has an invalid length. [ 879.410395][T27100] netlink: 'syz.4.5558': attribute type 11 has an invalid length. [ 879.618355][T27112] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 879.967646][T27124] xt_hashlimit: size too large, truncated to 1048576 [ 879.983257][T27131] netlink: 'syz.4.5570': attribute type 1 has an invalid length. [ 880.057763][T27134] openvswitch: netlink: Flow key attr not present in new flow. [ 880.077490][T27135] hsr_slave_0: left promiscuous mode [ 880.084204][T27135] hsr_slave_1: left promiscuous mode [ 880.190391][T27138] netlink: 'syz.4.5570': attribute type 4 has an invalid length. [ 880.217738][T27138] netlink: 'syz.4.5570': attribute type 4 has an invalid length. [ 880.252095][T27141] xt_TCPMSS: Only works on TCP SYN packets [ 880.416037][T27144] x_tables: unsorted entry at hook 2 [ 880.509950][T27147] syz.8.5575: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 880.553930][T27147] CPU: 0 UID: 0 PID: 27147 Comm: syz.8.5575 Not tainted syzkaller #0 PREEMPT(full) [ 880.553966][T27147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 880.553980][T27147] Call Trace: [ 880.553989][T27147] [ 880.553998][T27147] dump_stack_lvl+0xe8/0x150 [ 880.554030][T27147] warn_alloc+0x249/0x340 [ 880.554075][T27147] ? stack_trace_save+0xa9/0x100 [ 880.554111][T27147] ? __pfx_warn_alloc+0x10/0x10 [ 880.554148][T27147] ? kasan_save_track+0x4f/0x80 [ 880.554175][T27147] ? kasan_save_track+0x3e/0x80 [ 880.554201][T27147] ? __kasan_kmalloc+0x93/0xb0 [ 880.554228][T27147] ? __kmalloc_cache_noprof+0x31c/0x660 [ 880.554256][T27147] ? xskq_create+0x56/0x170 [ 880.554278][T27147] ? xsk_setsockopt+0x54c/0x990 [ 880.554297][T27147] ? do_sock_setsockopt+0x17c/0x1b0 [ 880.554322][T27147] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 880.554347][T27147] ? do_syscall_64+0x15f/0xf80 [ 880.554376][T27147] __vmalloc_node_range_noprof+0x132/0x1750 [ 880.554437][T27147] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 880.554471][T27147] ? __kasan_kmalloc+0x93/0xb0 [ 880.554506][T27147] vmalloc_user_noprof+0xad/0xe0 [ 880.554535][T27147] ? xskq_create+0xbf/0x170 [ 880.554559][T27147] xskq_create+0xbf/0x170 [ 880.554585][T27147] xsk_init_queue+0x8a/0xe0 [ 880.554611][T27147] xsk_setsockopt+0x54c/0x990 [ 880.554636][T27147] ? __pfx_xsk_setsockopt+0x10/0x10 [ 880.554657][T27147] ? __pfx_aa_sk_perm+0x10/0x10 [ 880.554688][T27147] ? aa_sock_opt_perm+0xff/0x1a0 [ 880.554718][T27147] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 880.554746][T27147] ? __pfx_xsk_setsockopt+0x10/0x10 [ 880.554769][T27147] do_sock_setsockopt+0x17c/0x1b0 [ 880.554800][T27147] __x64_sys_setsockopt+0x13d/0x1b0 [ 880.554826][T27147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.554850][T27147] do_syscall_64+0x15f/0xf80 [ 880.554875][T27147] ? trace_irq_disable+0x3b/0x140 [ 880.554906][T27147] ? clear_bhb_loop+0x40/0x90 [ 880.554932][T27147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.554960][T27147] RIP: 0033:0x7f7eb7f9cdd9 [ 880.554980][T27147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.554997][T27147] RSP: 002b:00007f7eb8ef9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 880.555020][T27147] RAX: ffffffffffffffda RBX: 00007f7eb8215fa0 RCX: 00007f7eb7f9cdd9 [ 880.555036][T27147] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 880.555049][T27147] RBP: 00007f7eb8032d69 R08: 0000000000000004 R09: 0000000000000000 [ 880.555061][T27147] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.555075][T27147] R13: 00007f7eb8216038 R14: 00007f7eb8215fa0 R15: 00007ffd8d8d5188 [ 880.555109][T27147] [ 880.555258][T27147] Mem-Info: [ 880.853604][T27155] netlink: 'syz.4.5577': attribute type 4 has an invalid length. [ 880.877051][T27147] active_anon:7286 inactive_anon:2 isolated_anon:0 [ 880.877051][T27147] active_file:2895 inactive_file:40475 isolated_file:0 [ 880.877051][T27147] unevictable:768 dirty:70 writeback:0 [ 880.877051][T27147] slab_reclaimable:12786 slab_unreclaimable:125910 [ 880.877051][T27147] mapped:30393 shmem:1305 pagetables:2106 [ 880.877051][T27147] sec_pagetables:0 bounce:0 [ 880.877051][T27147] kernel_misc_reclaimable:0 [ 880.877051][T27147] free:1277910 free_pcp:22138 free_cma:0 [ 880.929428][T27157] netlink: 'syz.4.5577': attribute type 4 has an invalid length. [ 880.959850][T27147] Node 0 active_anon:29144kB inactive_anon:8kB active_file:11580kB inactive_file:161704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:15172kB dirty:276kB writeback:0kB shmem:3684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16080kB pagetables:8364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 881.023682][T27147] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106400kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 881.058186][T27147] Node 0 DMA free:11036kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:108kB free_cma:0kB [ 881.133811][T27147] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 881.144119][T27147] Node 0 DMA32 free:1416460kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29044kB inactive_anon:8kB active_file:11580kB inactive_file:161704kB unevictable:1536kB writepending:276kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:36912kB local_pcp:20396kB free_cma:0kB [ 881.180754][T27147] lowmem_reserve[]: 0 0 0 0 0 [ 881.181020][T27169] syzkaller1: entered promiscuous mode [ 881.190943][T27169] syzkaller1: entered allmulticast mode [ 881.193070][T27147] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 881.257322][T27147] lowmem_reserve[]: 0 0 0 0 0 [ 881.262191][T27147] Node 1 Normal free:3683944kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:51352kB local_pcp:25620kB free_cma:0kB [ 881.300083][T27147] lowmem_reserve[]: 0 0 0 0 0 [ 881.304851][T27147] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11036kB [ 881.319434][T27147] Node 0 DMA32: 12822*4kB (UME) 6354*8kB (UME) 4063*16kB (UME) 330*32kB (UM) 926*64kB (UM) 1617*128kB (UME) 1037*256kB (UM) 545*512kB (UME) 270*1024kB (UM) 74*2048kB (UM) 0*4096kB = 1416472kB [ 881.338513][T27147] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 881.350033][T27147] Node 1 Normal: 3*4kB (U) 4*8kB (UM) 9*16kB (UM) 3*32kB (UM) 6*64kB (UM) 8*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 896*4096kB (UM) = 3683996kB [ 881.396196][T27147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.412778][T27147] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 881.422119][T27147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.431685][T27147] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 881.441031][T27147] 44673 total pagecache pages [ 881.446788][T27147] 2 pages in swap cache [ 881.450963][T27147] Free swap = 124988kB [ 881.474723][T27147] Total swap = 124996kB [ 881.494344][T27147] 2097051 pages RAM [ 881.498240][T27147] 0 pages HighMem/MovableOnly [ 881.503743][T27147] 427104 pages reserved [ 881.526099][T27147] 0 pages cma reserved [ 881.589660][T27181] netlink: 'syz.6.5585': attribute type 13 has an invalid length. [ 881.750974][T27183] syzkaller0: entered promiscuous mode [ 881.756484][T27183] syzkaller0: entered allmulticast mode [ 882.029190][T27201] lo: entered promiscuous mode [ 882.052798][T27201] tunl0: entered promiscuous mode [ 882.091217][T27201] gre0: entered promiscuous mode [ 882.126452][T27201] gretap0: entered promiscuous mode [ 882.185206][T27201] erspan0: entered promiscuous mode [ 882.202693][T27201] ip_vti0: entered promiscuous mode [ 882.223716][T27201] ip6_vti0: entered promiscuous mode [ 882.232465][T27201] ip6tnl0: entered promiscuous mode [ 882.267892][T27201] ip6gre0: entered promiscuous mode [ 882.285228][T27201] syz_tun: entered promiscuous mode [ 882.301751][T27201] ip6gretap0: entered promiscuous mode [ 882.311445][T27201] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.318800][T27201] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.328637][T27201] bridge0: entered promiscuous mode [ 882.340101][T27201] vcan0: entered promiscuous mode [ 882.349834][T27201] bond0: entered promiscuous mode [ 882.359338][T27201] bond_slave_0: entered promiscuous mode [ 882.365793][T27201] bond_slave_1: entered promiscuous mode [ 882.371784][T27201] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 882.388973][T27201] team0: entered promiscuous mode [ 882.402543][T27201] team_slave_0: entered promiscuous mode [ 882.413079][T27201] team_slave_1: entered promiscuous mode [ 882.440433][T27201] dummy0: entered promiscuous mode [ 882.507925][T27201] nlmon0: entered promiscuous mode [ 882.521506][T27201] batadv0: entered promiscuous mode [ 882.543526][T27201] vxcan0: entered promiscuous mode [ 882.553813][T27201] vxcan1: entered promiscuous mode [ 882.561516][T27201] veth0: entered promiscuous mode [ 882.597926][T27201] veth1: entered promiscuous mode [ 882.612557][T27201] wg0: entered promiscuous mode [ 882.621481][T27201] wg1: entered promiscuous mode [ 882.629731][T27201] wg2: entered promiscuous mode [ 882.638809][T27201] veth0_to_bridge: entered promiscuous mode [ 882.660135][T27201] veth1_to_bridge: entered promiscuous mode [ 882.680161][T27201] veth0_to_bond: entered promiscuous mode [ 882.709731][T27201] veth1_to_bond: entered promiscuous mode [ 882.735824][T27201] veth0_to_team: entered promiscuous mode [ 882.756413][T27201] veth1_to_team: entered promiscuous mode [ 882.787914][T27201] veth0_to_batadv: entered promiscuous mode [ 882.803573][T27201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.820493][T27201] batadv_slave_0: entered promiscuous mode [ 882.833637][T27201] veth1_to_batadv: entered promiscuous mode [ 882.843392][T27201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.850823][T27201] batadv_slave_1: entered promiscuous mode [ 882.862310][T27201] xfrm0: entered promiscuous mode [ 882.872471][T27201] veth0_to_hsr: entered promiscuous mode [ 882.888441][T27201] veth1_to_hsr: entered promiscuous mode [ 882.913889][T27201] hsr0: entered promiscuous mode [ 882.924377][T27201] veth1_virt_wifi: entered promiscuous mode [ 882.934368][T27201] veth0_virt_wifi: entered promiscuous mode [ 882.971868][T27201] vlan0: entered promiscuous mode [ 882.977703][T27201] vlan1: entered promiscuous mode [ 882.983681][T27201] macvlan0: entered promiscuous mode [ 883.002202][T27201] macvlan1: entered promiscuous mode [ 883.031835][T27201] ipvlan0: entered promiscuous mode [ 883.041251][T27201] ipvlan1: entered promiscuous mode [ 883.074012][T27201] macvtap0: entered promiscuous mode [ 883.083798][T27201] macsec0: entered promiscuous mode [ 883.103098][T27201] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 883.125813][T27201] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 883.153966][T27201] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 883.164012][T27201] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 883.171215][T27201] mac80211_hwsim hwsim51 wlan1: entered promiscuous mode [ 883.180124][T27201] mac80211_hwsim hwsim53 wlan2: entered promiscuous mode [ 883.188203][T27201] bridge1: port 1(veth3) entered disabled state [ 883.196888][T27201] bridge1: entered promiscuous mode [ 883.212869][T27201] veth2: entered promiscuous mode [ 883.259818][T27201] syztnl2: entered promiscuous mode [ 883.266374][T27201] @: entered promiscuous mode [ 883.275774][T27201] bond1: entered promiscuous mode [ 883.281661][T27201] bridge2: entered promiscuous mode [ 883.290199][T27201] bridge3: entered promiscuous mode [ 883.299789][T27201] bridge4: entered promiscuous mode [ 883.307941][T27201] veth0_vlan.1: entered promiscuous mode [ 883.314249][T27201] vxlan0: entered promiscuous mode [ 883.320491][T27201] bridge5: entered promiscuous mode [ 883.330099][T27201] ip6tnl1: entered promiscuous mode [ 883.336737][T27201] bridge6: entered promiscuous mode [ 883.343408][T27201] gre1: entered promiscuous mode [ 883.394960][T27201] bridge7: entered promiscuous mode [ 883.400327][T27201] vti0: entered promiscuous mode [ 883.405525][T27201] bond2: entered promiscuous mode [ 883.421721][T27201] mac80211_hwsim hwsim64 wlan3: entered promiscuous mode [ 883.433708][T27201] vxcan2: entered promiscuous mode [ 883.446469][T27201] veth4: entered promiscuous mode [ 883.451657][T27201] veth5: entered promiscuous mode [ 883.473517][T27201] macvlan2: entered promiscuous mode [ 883.479034][T27201] veth6: entered promiscuous mode [ 883.484928][T27201] veth7: entered promiscuous mode [ 883.490672][T27201] bridge9: entered promiscuous mode [ 883.504610][T27201] syztnl1: entered promiscuous mode [ 883.513387][T27201] mac80211_hwsim hwsim66 wlan4: entered promiscuous mode [ 883.520740][T27201] mac80211_hwsim hwsim67 wlan5: entered promiscuous mode [ 883.528345][T27201] bridge10: entered promiscuous mode [ 883.533709][T27201] bond3: entered promiscuous mode [ 883.628488][T27232] __nla_validate_parse: 111 callbacks suppressed [ 883.628506][T27232] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5597'. [ 883.643808][T27232] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5597'. [ 883.653001][T27232] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5597'. [ 883.668127][T27232] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5597'. [ 883.697743][T27234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5596'. [ 883.750937][T27236] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5598'. [ 886.399583][T19842] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.443225][T19842] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.452165][T19842] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.461029][T19842] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.554504][T27236] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 886.565495][T27251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5600'. [ 886.589397][T19842] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.612992][T19842] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.624240][T27251] netlink: 'syz.6.5600': attribute type 30 has an invalid length. [ 886.642029][T19842] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.658513][T27259] SET target dimension over the limit! [ 886.674041][T19842] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.765033][T27261] vlan3: entered promiscuous mode [ 886.770163][T27261] bridge0: entered promiscuous mode [ 886.999774][T27272] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5608'. [ 887.018588][T27266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5604'. [ 887.044002][T27272] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5608'. [ 887.089979][T27266] team0 (unregistering): Port device team_slave_0 removed [ 887.114591][T27266] team0 (unregistering): Port device team_slave_1 removed [ 887.225095][T27265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.718128][T27299] veth0: entered promiscuous mode [ 887.759293][T27297] veth0: left promiscuous mode [ 887.920977][T27306] gtp1: entered promiscuous mode [ 888.005192][T27313] netlink: 'syz.4.5621': attribute type 1 has an invalid length. [ 888.057464][T27313] netlink: 'syz.4.5621': attribute type 1 has an invalid length. [ 888.092167][T27313] netlink: 'syz.4.5621': attribute type 8 has an invalid length. [ 888.182575][T27323] syzkaller0: entered promiscuous mode [ 888.188266][T27323] syzkaller0: entered allmulticast mode [ 888.212158][T27322] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 888.235936][T27325] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 888.287817][T27327] netlink: 'syz.7.5628': attribute type 64 has an invalid length. [ 888.338817][T27333] tipc: Started in network mode [ 888.344401][T27333] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 888.351775][T27333] tipc: Enabled bearer , priority 24 [ 888.499581][T27341] netlink: 'syz.7.5631': attribute type 1 has an invalid length. [ 889.463026][ T5739] tipc: Node number set to 10005162 [ 916.055298][T11135] bond0: (slave bond_slave_1): link status definitely up [ 916.066837][T11135] bond0: active interface up! [ 916.483767][T11135] bond0: (slave bond_slave_1): interface is now down [ 916.496584][T11135] bond0: now running without any active interface! [ 926.318506][T11137] bond0: (slave bond_slave_0): link status definitely up [ 926.349839][T11137] bond0: active interface up! [ 926.633290][ T3381] bond0: (slave bond_slave_0): interface is now down [ 926.641291][ T3381] bond0: now running without any active interface! [ 935.227274][T27355] netlink: 'syz.7.5636': attribute type 11 has an invalid length. [ 935.236708][T27355] __nla_validate_parse: 4 callbacks suppressed [ 935.236723][T27355] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.5636'. [ 935.370132][T27363] vlan2: entered promiscuous mode [ 935.400591][T27363] geneve1: entered promiscuous mode [ 935.441330][T27363] vlan2: entered allmulticast mode [ 935.466276][T27363] geneve1: entered allmulticast mode [ 935.500369][T27358] ipvlan1: entered allmulticast mode [ 935.519604][T27372] netlink: 'syz.2.5641': attribute type 83 has an invalid length. [ 935.527196][T27358] veth0_vlan: entered allmulticast mode [ 935.753445][T27377] netlink: 'syz.4.5643': attribute type 1 has an invalid length. [ 935.765331][T27379] syzkaller0: entered promiscuous mode [ 935.781062][T27379] syzkaller0: entered allmulticast mode [ 935.788823][T27377] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5643'. [ 935.920014][T27388] netlink: 204 bytes leftover after parsing attributes in process `syz.8.5647'. [ 935.931935][T27377] netlink: 22472 bytes leftover after parsing attributes in process `syz.4.5643'. [ 936.198638][T27403] netlink: 'syz.6.5650': attribute type 7 has an invalid length. [ 936.232131][T27404] netlink: 'syz.6.5650': attribute type 7 has an invalid length. [ 936.244261][T27403] netlink: 'syz.6.5650': attribute type 7 has an invalid length. [ 936.267259][T27404] netlink: 'syz.6.5650': attribute type 7 has an invalid length. [ 936.330935][T27411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5651'. [ 936.389057][T27411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5651'. [ 936.445607][T27412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5653'. [ 936.463976][T27411] nbd0: detected capacity change from 63 to 0 [ 936.494872][T27411] block nbd0: reconnected socket [ 936.506871][T27411] nbd: socks must be embedded in a SOCK_ITEM attr [ 936.537976][T17594] block nbd0: Receive control failed (result -32) [ 936.617016][T27432] netlink: 'syz.2.5657': attribute type 1 has an invalid length. [ 936.690497][T27432] bond4: entered promiscuous mode [ 936.697863][T27432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 936.726550][T27436] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5658'. [ 936.756532][T27434] bond4: (slave bridge5): making interface the new active one [ 936.780078][T27434] bridge5: entered promiscuous mode [ 936.817841][T27434] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 936.847603][T27440] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5659'. [ 936.860775][T27432] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 936.873127][T27432] bond4: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 936.891798][T27443] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5660'. [ 937.052890][T27437] netlink: 'syz.7.5652': attribute type 1 has an invalid length. [ 937.127887][T27455] siw: device registration error -23 [ 937.137942][T27455] siw: device registration error -23 [ 937.149236][T27455] siw: device registration error -23 [ 937.157433][T27455] siw: device registration error -23 [ 937.166069][T27455] siw: device registration error -23 [ 937.174798][T27455] siw: device registration error -23 [ 937.184136][T27455] siw: device registration error -23 [ 937.192707][T27455] siw: device registration error -23 [ 937.198924][T27445] syzkaller0: entered promiscuous mode [ 937.205386][T27455] siw: device registration error -23 [ 937.211092][T27455] siw: device registration error -23 [ 937.217558][T27445] syzkaller0: entered allmulticast mode [ 937.223991][T27455] siw: device registration error -23 [ 937.229686][T27455] siw: device registration error -23 [ 937.241411][T27455] siw: device registration error -23 [ 937.263420][T27455] siw: device registration error -23 [ 937.279561][T27455] siw: device registration error -23 [ 937.292210][T27455] siw: device registration error -23 [ 937.297808][T27455] siw: device registration error -23 [ 937.303429][T27455] siw: device registration error -23 [ 937.309595][T27455] siw: device registration error -23 [ 937.315175][T27455] siw: device registration error -23 [ 937.320762][T27455] siw: device registration error -23 [ 937.326764][T27455] siw: device registration error -23 [ 937.332357][T27455] siw: device registration error -23 [ 937.337913][T27455] siw: device registration error -23 [ 937.398805][T27455] siw: device registration error -23 [ 937.405410][T27455] siw: device registration error -23 [ 937.410969][T27455] siw: device registration error -23 [ 937.416488][T27455] siw: device registration error -23 [ 937.422160][T27455] siw: device registration error -23 [ 937.449982][T27455] siw: device registration error -23 [ 937.492369][T27455] siw: device registration error -23 [ 937.497936][T27455] siw: device registration error -23 [ 937.514764][T27455] siw: device registration error -23 [ 937.520326][T27455] siw: device registration error -23 [ 937.529108][T27455] siw: device registration error -23 [ 937.534940][T27455] siw: device registration error -23 [ 937.540690][T27455] siw: device registration error -23 [ 937.547090][T27455] siw: device registration error -23 [ 937.552739][T27455] siw: device registration error -23 [ 937.558811][T27455] siw: device registration error -23 [ 937.564795][T27455] siw: device registration error -23 [ 937.570391][T27455] siw: device registration error -23 [ 937.576354][T27455] siw: device registration error -23 [ 937.582414][T27455] siw: device registration error -23 [ 937.588296][T27455] siw: device registration error -23 [ 937.593932][T27455] siw: device registration error -23 [ 937.599517][T27455] siw: device registration error -23 [ 937.605990][T27455] siw: device registration error -23 [ 937.611652][T27455] siw: device registration error -23 [ 937.621468][T27455] siw: device registration error -23 [ 937.627060][T27455] siw: device registration error -23 [ 937.632620][T27455] siw: device registration error -23 [ 937.638335][T27455] siw: device registration error -23 [ 937.643900][T27455] siw: device registration error -23 [ 937.649483][T27455] siw: device registration error -23 [ 937.655052][T27455] siw: device registration error -23 [ 937.660791][T27455] siw: device registration error -23 [ 937.666362][T27455] siw: device registration error -23 [ 937.672240][T27455] siw: device registration error -23 [ 937.677947][T27455] siw: device registration error -23 [ 937.683875][T27455] siw: device registration error -23 [ 937.689529][T27455] siw: device registration error -23 [ 937.695441][T27455] siw: device registration error -23 [ 937.701018][T27455] siw: device registration error -23 [ 937.708500][T27455] siw: device registration error -23 [ 940.190755][T27469] netlink: 'syz.2.5665': attribute type 4 has an invalid length. [ 940.362600][T27493] No such timeout policy "syz1" [ 940.364753][T27491] __nla_validate_parse: 1 callbacks suppressed [ 940.364783][T27491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5667'. [ 940.462368][T27496] sctp: [Deprecated]: syz.8.5669 (pid 27496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 940.462368][T27496] Use struct sctp_sack_info instead [ 941.001528][T27520] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5676'. [ 941.197386][T27528] syzkaller1: entered promiscuous mode [ 941.202892][T27528] syzkaller1: entered allmulticast mode [ 941.252365][T27536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5679'. [ 941.290043][T27536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5679'. [ 941.451779][T27545] syzkaller0: entered promiscuous mode [ 941.457742][T27545] syzkaller0: entered allmulticast mode [ 941.559467][T27550] syzkaller0: entered promiscuous mode [ 941.573376][T27550] syzkaller0: entered allmulticast mode [ 941.640315][T27555] netlink: 'syz.7.5685': attribute type 1 has an invalid length. [ 941.964299][T27555] 8021q: adding VLAN 0 to HW filter on device bond5 [ 941.982406][T27556] bond5: (slave gretap2): making interface the new active one [ 941.990691][T27556] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 942.274270][T27586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5690'. [ 942.283176][T27586] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 943.124464][T27610] syzkaller0: entered promiscuous mode [ 943.130594][T27610] syzkaller0: entered allmulticast mode [ 943.381058][T27618] syzkaller1: entered promiscuous mode [ 943.424718][T27618] syzkaller1: entered allmulticast mode [ 943.439736][T27620] netlink: 'syz.2.5701': attribute type 3 has an invalid length. [ 943.491534][T27618] macsec2: entered promiscuous mode [ 943.558886][T27625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5703'. [ 943.610705][T27623] netlink: 'syz.7.5702': attribute type 39 has an invalid length. [ 943.680409][T27629] sctp: [Deprecated]: syz.2.5705 (pid 27629) Use of int in max_burst socket option. [ 943.680409][T27629] Use struct sctp_assoc_value instead [ 943.704496][T27630] sctp: [Deprecated]: syz.2.5705 (pid 27630) Use of int in max_burst socket option. [ 943.704496][T27630] Use struct sctp_assoc_value instead [ 943.803880][T27634] veth0: entered promiscuous mode [ 943.810169][T27633] netlink: 67 bytes leftover after parsing attributes in process `syz.8.5707'. [ 943.810181][T27634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5706'. [ 943.905872][T27636] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 943.917426][T27636] bond9 (unregistering): Released all slaves [ 945.204923][T27582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.499905][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5715'. [ 945.528190][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5715'. [ 945.622341][T27671] mac80211_hwsim hwsim56 syzkaller0: Caught tx_queue_len zero misconfig [ 946.063872][T27693] netlink: 'syz.7.5722': attribute type 1 has an invalid length. [ 946.098866][T27693] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5722'. [ 946.396399][T27705] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5730'. [ 946.409001][T27705] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5730'. [ 946.462391][T27705] gretap0: entered promiscuous mode [ 946.515762][T27705] gretap0: left promiscuous mode [ 946.582793][T27709] sctp: [Deprecated]: syz.4.5731 (pid 27709) Use of int in max_burst socket option. [ 946.582793][T27709] Use struct sctp_assoc_value instead [ 946.739901][T27718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 946.800220][T27726] IPv6: NLM_F_REPLACE set, but no existing node found! [ 946.866962][T27725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5734'. [ 946.954660][T27731] syzkaller0: entered promiscuous mode [ 946.960465][T27731] syzkaller0: entered allmulticast mode [ 947.127680][T27734] veth1_macvtap: entered allmulticast mode [ 947.386238][T27749] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5742'. [ 947.397083][T27748] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5742'. [ 947.408870][T27750] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5742'. [ 947.495086][T27754] IPv6: NLM_F_REPLACE set, but no existing node found! [ 947.606708][T27761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5746'. [ 947.957593][T27782] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 948.165477][T27799] syzkaller0: entered promiscuous mode [ 948.170988][T27799] syzkaller0: entered allmulticast mode [ 948.447368][T27817] netlink: 'syz.6.5759': attribute type 1 has an invalid length. [ 948.532691][T27817] 8021q: adding VLAN 0 to HW filter on device bond5 [ 948.548832][T27811] syzkaller1: entered promiscuous mode [ 948.554322][T27811] syzkaller1: entered allmulticast mode [ 948.584794][T27817] bridge12: entered promiscuous mode [ 948.590431][T27817] bridge12: entered allmulticast mode [ 949.144658][T27849] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 949.401101][T27853] syzkaller0: entered promiscuous mode [ 949.425620][T27853] syzkaller0: entered allmulticast mode [ 949.787723][T27878] openvswitch: netlink: IPv4 tun info is not correct [ 950.579042][T27911] netlink: 'syz.2.5790': attribute type 1 has an invalid length. [ 950.604641][T27911] __nla_validate_parse: 6 callbacks suppressed [ 950.604675][T27911] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5790'. [ 950.771152][T27920] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5793'. [ 950.794265][T27923] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 950.861659][T27920] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5793'. [ 950.898305][T27931] netlink: 'syz.4.5794': attribute type 12 has an invalid length. [ 950.954864][T27931] netlink: 'syz.4.5794': attribute type 29 has an invalid length. [ 950.964049][T27932] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5794'. [ 951.052747][T27931] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5794'. [ 951.088584][T27931] netlink: 'syz.4.5794': attribute type 1 has an invalid length. [ 951.122761][T27931] netlink: 'syz.4.5794': attribute type 2 has an invalid length. [ 951.143551][T27931] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5794'. [ 951.435022][T27959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5805'. [ 951.497587][T27953] IPv6: sit1: Disabled Multicast RS [ 951.787866][T27970] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 951.822617][ T5820] syzkaller1: tun_net_xmit 90 [ 951.827519][T27970] syzkaller1: Linktype set failed because interface is up [ 951.840139][T27970] x_tables: duplicate underflow at hook 4 [ 951.846035][T27972] netlink: 'syz.7.5809': attribute type 21 has an invalid length. [ 951.875677][T27972] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 951.895505][T27972] bond6 (unregistering): Released all slaves [ 951.958459][T27978] vlan3: entered allmulticast mode [ 952.118861][T27985] netlink: 'syz.7.5814': attribute type 26 has an invalid length. [ 952.135636][T27985] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5814'. [ 952.277832][T27987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5813'. [ 952.287548][T27987] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5813'. [ 952.369511][T28000] netlink: 'syz.8.5817': attribute type 1 has an invalid length. [ 952.517309][T28005] pim6reg: entered allmulticast mode [ 952.601373][T28005] pim6reg: left allmulticast mode [ 953.051930][T28031] veth0_macvtap: left promiscuous mode [ 953.837879][T28059] bond1: (slave bond_slave_1): Device is not our slave [ 953.878483][T28059] bond1: option active_slave: invalid value (bond_slave_1) [ 953.916152][T28059] bond1 (unregistering): Released all slaves [ 954.415139][T28093] block nbd2: not configured, cannot reconfigure [ 954.539735][T28103] xt_hashlimit: size too large, truncated to 1048576 [ 954.781386][T28106] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 954.821837][T28112] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 955.182382][T28123] netlink: 'syz.2.5848': attribute type 1 has an invalid length. [ 955.359676][T28151] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 955.366970][T28151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 955.695625][T28162] __nla_validate_parse: 12 callbacks suppressed [ 955.695642][T28162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5863'. [ 955.733388][T28168] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5864'. [ 955.762999][T28168] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5864'. [ 955.949307][T28179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5867'. [ 956.302348][T28190] netlink: 'syz.8.5870': attribute type 12 has an invalid length. [ 956.327691][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5873'. [ 956.342396][T28190] netlink: 'syz.8.5870': attribute type 29 has an invalid length. [ 956.355917][T28190] netlink: 148 bytes leftover after parsing attributes in process `syz.8.5870'. [ 956.370253][T28190] netlink: 59 bytes leftover after parsing attributes in process `syz.8.5870'. [ 956.371648][T28195] netlink: 'syz.8.5870': attribute type 2 has an invalid length. [ 956.424648][T28204] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5874'. [ 956.564553][T28212] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 956.796808][T28228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5879'. [ 956.813569][T28231] netlink: 45 bytes leftover after parsing attributes in process `syz.6.5880'. [ 956.847966][T28231] tipc: Failed to remove unknown binding: 66,0,0/10005162:1717557381/1717557383 [ 956.857029][T28231] tipc: Failed to remove unknown binding: 66,0,0/10005162:1717557381/1717557382 [ 956.866586][T28231] tipc: Failed to remove unknown binding: 66,0,0/10005162:1717557381/1717557383 [ 956.875633][T28231] tipc: Failed to remove unknown binding: 66,0,0/10005162:1717557381/1717557382 [ 957.271249][T28250] netlink: 'syz.7.5889': attribute type 1 has an invalid length. [ 957.350628][T28260] netlink: 'syz.6.5890': attribute type 62 has an invalid length. [ 957.916026][T28291] xt_cgroup: xt_cgroup: no path or classid specified [ 958.262107][T28305] netlink: 'syz.2.5904': attribute type 1 has an invalid length. [ 958.287364][T28306] netlink: 'syz.2.5904': attribute type 1 has an invalid length. [ 958.502727][T28304] bond5: (slave geneve4): making interface the new active one [ 958.526928][T28304] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 958.557674][T27478] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 958.617215][T27478] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 958.633118][T27478] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 958.655150][T27478] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 959.169666][T28331] xt_hashlimit: overflow, try lower: 3/0 [ 959.836804][T28363] veth1_macvtap: entered allmulticast mode [ 959.967276][T28365] veth1_macvtap (unregistering): left allmulticast mode [ 960.086704][T28376] syz.2.5925: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 960.101852][T28376] CPU: 1 UID: 0 PID: 28376 Comm: syz.2.5925 Not tainted syzkaller #0 PREEMPT(full) [ 960.101878][T28376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 960.101890][T28376] Call Trace: [ 960.101899][T28376] [ 960.101908][T28376] dump_stack_lvl+0xe8/0x150 [ 960.101937][T28376] warn_alloc+0x249/0x340 [ 960.101969][T28376] ? stack_trace_save+0xa9/0x100 [ 960.102004][T28376] ? __pfx_warn_alloc+0x10/0x10 [ 960.102041][T28376] ? kasan_save_track+0x4f/0x80 [ 960.102067][T28376] ? kasan_save_track+0x3e/0x80 [ 960.102092][T28376] ? __kasan_kmalloc+0x93/0xb0 [ 960.102118][T28376] ? __kmalloc_cache_noprof+0x31c/0x660 [ 960.102146][T28376] ? xskq_create+0x56/0x170 [ 960.102168][T28376] ? xsk_setsockopt+0x54c/0x990 [ 960.102187][T28376] ? do_sock_setsockopt+0x17c/0x1b0 [ 960.102212][T28376] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 960.102245][T28376] ? do_syscall_64+0x15f/0xf80 [ 960.102275][T28376] __vmalloc_node_range_noprof+0x132/0x1750 [ 960.102334][T28376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 960.102370][T28376] ? __kasan_kmalloc+0x93/0xb0 [ 960.102404][T28376] vmalloc_user_noprof+0xad/0xe0 [ 960.102432][T28376] ? xskq_create+0xbf/0x170 [ 960.102456][T28376] xskq_create+0xbf/0x170 [ 960.102480][T28376] xsk_init_queue+0x8a/0xe0 [ 960.102505][T28376] xsk_setsockopt+0x54c/0x990 [ 960.102528][T28376] ? __pfx_xsk_setsockopt+0x10/0x10 [ 960.102548][T28376] ? __pfx_aa_sk_perm+0x10/0x10 [ 960.102578][T28376] ? aa_sock_opt_perm+0xff/0x1a0 [ 960.102607][T28376] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 960.102635][T28376] ? __pfx_xsk_setsockopt+0x10/0x10 [ 960.102657][T28376] do_sock_setsockopt+0x17c/0x1b0 [ 960.102687][T28376] __x64_sys_setsockopt+0x13d/0x1b0 [ 960.102714][T28376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.102736][T28376] do_syscall_64+0x15f/0xf80 [ 960.102760][T28376] ? trace_irq_disable+0x3b/0x140 [ 960.102790][T28376] ? clear_bhb_loop+0x40/0x90 [ 960.102818][T28376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.102838][T28376] RIP: 0033:0x7f8bee19cdd9 [ 960.102857][T28376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.102875][T28376] RSP: 002b:00007f8bef083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 960.102896][T28376] RAX: ffffffffffffffda RBX: 00007f8bee415fa0 RCX: 00007f8bee19cdd9 [ 960.102912][T28376] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 960.102924][T28376] RBP: 00007f8bee232d69 R08: 0000000000000004 R09: 0000000000000000 [ 960.102938][T28376] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.102952][T28376] R13: 00007f8bee416038 R14: 00007f8bee415fa0 R15: 00007ffc317a32e8 [ 960.102983][T28376] [ 960.429836][T28376] Mem-Info: [ 960.433427][T28376] active_anon:7004 inactive_anon:2 isolated_anon:0 [ 960.433427][T28376] active_file:2895 inactive_file:40489 isolated_file:0 [ 960.433427][T28376] unevictable:768 dirty:78 writeback:0 [ 960.433427][T28376] slab_reclaimable:12853 slab_unreclaimable:126166 [ 960.433427][T28376] mapped:29365 shmem:1307 pagetables:1952 [ 960.433427][T28376] sec_pagetables:0 bounce:0 [ 960.433427][T28376] kernel_misc_reclaimable:0 [ 960.433427][T28376] free:1270628 free_pcp:29697 free_cma:0 [ 960.485965][T28376] Node 0 active_anon:27816kB inactive_anon:8kB active_file:11580kB inactive_file:161760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:15060kB dirty:312kB writeback:0kB shmem:3692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16704kB pagetables:7648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 960.577679][T28376] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102400kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 960.615271][T28376] Node 0 DMA free:11036kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:108kB free_cma:0kB [ 960.647312][T28376] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 960.653205][T28376] Node 0 DMA32 free:1400736kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27916kB inactive_anon:8kB active_file:11580kB inactive_file:161760kB unevictable:1536kB writepending:312kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:54128kB local_pcp:25656kB free_cma:0kB [ 960.732370][T28376] lowmem_reserve[]: 0 0 0 0 0 [ 960.773784][T28376] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 960.834919][T28376] lowmem_reserve[]: 0 0 0 0 0 [ 960.850560][T28376] Node 1 Normal free:3670740kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:64608kB local_pcp:30980kB free_cma:0kB [ 960.861075][T11137] wlan1: Trigger new scan to find an IBSS to join [ 960.937445][T28376] lowmem_reserve[]: 0 0 0 0 0 [ 960.942225][T28376] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11036kB [ 960.956780][T28376] Node 0 DMA32: 11147*4kB (UM) 6318*8kB (UM) 3913*16kB (UME) 568*32kB (UE) 629*64kB (UME) 1626*128kB (UM) 1042*256kB (UME) 549*512kB (UM) 272*1024kB (UM) 76*2048kB (UM) 0*4096kB = 1406316kB [ 961.000425][T28376] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 961.027413][T28376] Node 1 Normal: 3*4kB (U) 3*8kB (UM) 7*16kB (UM) 4*32kB (UM) 7*64kB (UM) 8*128kB (UM) 4*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 4*2048kB (U) 892*4096kB (UM) = 3670740kB [ 961.097917][T28376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.116968][T28403] netlink: 'syz.6.5934': attribute type 1 has an invalid length. [ 961.148724][T28376] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 961.181201][T28406] __nla_validate_parse: 17 callbacks suppressed [ 961.181212][T28406] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5935'. [ 961.196832][T28376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.235137][T28376] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 961.244466][T28376] 44689 total pagecache pages [ 961.249147][T28376] 2 pages in swap cache [ 961.253313][T28376] Free swap = 124988kB [ 961.257466][T28376] Total swap = 124996kB [ 961.261617][T28376] 2097051 pages RAM [ 961.265998][T28376] 0 pages HighMem/MovableOnly [ 961.270690][T28376] 427104 pages reserved [ 961.274848][T28376] 0 pages cma reserved [ 961.290217][T28403] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 961.308631][T28403] bond6: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 961.343920][T28403] bond6: (slave vxcan5): making interface the new active one [ 961.352101][T28403] bond6: (slave vxcan5): Enslaving as an active interface with an up link [ 961.454111][T28410] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 961.469392][T28410] bond6: (slave vxcan7): Enslaving as a backup interface with an up link [ 961.505724][T28419] sctp: [Deprecated]: syz.7.5937 (pid 28419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 961.505724][T28419] Use struct sctp_sack_info instead [ 961.575670][T28418] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 961.721634][T28431] xt_TPROXY: Can be used only with -p tcp or -p udp [ 961.904953][T28445] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5945'. [ 962.022561][T28447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5947'. [ 962.154136][T28454] IPv6: addrconf: prefix option has invalid lifetime [ 962.160905][T28454] IPv6: addrconf: prefix option has invalid lifetime [ 962.230614][T28460] netlink: 108 bytes leftover after parsing attributes in process `syz.8.5950'. [ 962.245123][T28456] bridge_slave_0 (unregistering): left allmulticast mode [ 962.260675][T28456] bridge_slave_0 (unregistering): left promiscuous mode [ 962.268447][T28456] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.293606][T28458] netem: change failed [ 962.449499][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5953'. [ 962.951833][T28511] pimreg: entered allmulticast mode [ 963.149366][T28521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5965'. [ 963.293726][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5969'. [ 963.445325][T28539] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5971'. [ 963.733307][T28544] syzkaller0: entered promiscuous mode [ 963.741490][T28544] syzkaller0: entered allmulticast mode [ 963.900453][T28562] netlink: 'syz.8.5977': attribute type 39 has an invalid length. [ 964.076071][T28568] erspan0: entered promiscuous mode [ 964.165285][T28573] netlink: 'syz.2.5982': attribute type 1 has an invalid length. [ 964.190347][T28573] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5982'. [ 964.357233][ T30] audit: type=1804 audit(1777963920.402:23): pid=28586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5985" name="/newroot/471/cgroup.controllers" dev="tmpfs" ino=2405 res=1 errno=0 [ 964.380269][ T30] audit: type=1800 audit(1777963920.402:24): pid=28586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5985" name="cgroup.controllers" dev="tmpfs" ino=2405 res=0 errno=0 [ 964.425309][T28589] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.5983'. [ 964.438329][T28584] syzkaller1: entered promiscuous mode [ 964.444007][T28584] syzkaller1: entered allmulticast mode [ 964.869999][T19842] wlan1: Trigger new scan to find an IBSS to join [ 966.180204][T27478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.429434][T28618] C: entered promiscuous mode [ 967.443266][T28618] tunl0: entered promiscuous mode [ 967.448948][T28618] gre0: entered promiscuous mode [ 967.457462][T28618] gretap0: entered promiscuous mode [ 967.484160][T28618] erspan0: entered promiscuous mode [ 967.505101][T28618] ip_vti0: entered promiscuous mode [ 967.587090][T28624] xt_hashlimit: size too large, truncated to 1048576 [ 967.716805][T28628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5996'. [ 968.200587][T28655] netlink: 165 bytes leftover after parsing attributes in process `syz.7.6006'. [ 968.279133][T28655] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6006'. [ 968.288429][T28656] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 968.321920][T28655] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6006'. [ 968.511193][T28671] netlink: 'syz.8.6009': attribute type 1 has an invalid length. [ 968.596652][T28671] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6009'. [ 968.921149][T28687] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6015'. [ 969.485145][T28712] bridge0: port 1(veth0_to_bridge) entered blocking state [ 969.507369][T28712] bridge0: port 1(veth0_to_bridge) entered disabled state [ 969.512558][T28715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6019'. [ 969.536919][T28712] veth0_to_bridge: entered allmulticast mode [ 969.552154][T28715] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 969.570673][T28712] veth0_to_bridge: entered promiscuous mode [ 969.889193][T28738] netlink: 'syz.7.6022': attribute type 3 has an invalid length. [ 969.919186][T28738] netlink: 766 bytes leftover after parsing attributes in process `syz.7.6022'. [ 970.052781][T28741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6022'. [ 970.117304][T28744] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6024'. [ 970.534020][T28756] sctp: [Deprecated]: syz.6.6028 (pid 28756) Use of int in max_burst socket option deprecated. [ 970.534020][T28756] Use struct sctp_assoc_value instead [ 971.217376][T28781] netlink: 'syz.7.6031': attribute type 1 has an invalid length. [ 971.247793][T28781] netlink: 'syz.7.6031': attribute type 2 has an invalid length. [ 971.797332][T28800] geneve2: entered promiscuous mode [ 971.827608][T27480] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 45228 - 0 [ 971.864757][T27480] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 45228 - 0 [ 971.890782][T28807] xt_cluster: node mask cannot exceed total number of nodes [ 971.918371][T27480] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 45228 - 0 [ 971.954788][T27480] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 45228 - 0 [ 972.453930][T28827] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.629573][T28830] ipvlan2: entered promiscuous mode [ 972.789858][T28829] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 973.031141][T28852] netlink: 'syz.8.6054': attribute type 7 has an invalid length. [ 973.077716][T28852] netlink: 'syz.8.6054': attribute type 7 has an invalid length. [ 973.170761][T28825] netlink: 'syz.4.6047': attribute type 11 has an invalid length. [ 973.178679][T28825] __nla_validate_parse: 4 callbacks suppressed [ 973.178694][T28825] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.6047'. [ 973.288212][T28861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6056'. [ 973.397795][T28864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6057'. [ 974.015752][T28898] netlink: 'syz.8.6064': attribute type 1 has an invalid length. [ 974.136781][T28898] 8021q: adding VLAN 0 to HW filter on device bond9 [ 974.153638][T28902] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20002 [ 974.260545][T28884] bond9: (slave ip6erspan0): making interface the new active one [ 974.281200][T28884] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link [ 974.594700][T28934] x_tables: duplicate underflow at hook 1 [ 974.623476][T28939] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6078'. [ 974.667256][T28941] netlink: 512 bytes leftover after parsing attributes in process `syz.2.6077'. [ 974.691631][T28939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6078'. [ 974.860491][T28948] syzkaller1: entered promiscuous mode [ 974.888684][T28948] syzkaller1: entered allmulticast mode [ 975.092052][T28951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.144767][T28962] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6082'. [ 975.167699][T28962] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6082'. [ 975.167911][T28951] xt_CT: No such helper "snmp_trap" [ 975.434892][T28975] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 975.468338][T28974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6086'. [ 975.532702][T28982] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6089'. [ 975.787969][T28998] openvswitch: netlink: IP tunnel TTL not specified. [ 976.140803][T29013] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:0 [ 976.156473][T29013] netlink: 'syz.7.6099': attribute type 11 has an invalid length. [ 976.159222][T29015] openvswitch: netlink: Flow actions attr not present in new flow. [ 977.231601][T29056] syzkaller1: entered promiscuous mode [ 977.244264][T29056] syzkaller1: entered allmulticast mode [ 977.367466][T29061] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 977.648715][T29074] netlink: 'syz.8.6123': attribute type 30 has an invalid length. [ 981.026402][T29100] netlink: 'syz.6.6130': attribute type 1 has an invalid length. [ 981.051368][T29100] __nla_validate_parse: 3 callbacks suppressed [ 981.051385][T29100] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6130'. [ 981.228088][T29104] ip6gre2: entered promiscuous mode [ 981.233410][T29104] ip6gre2: entered allmulticast mode [ 981.450926][T29123] ipvlan2: entered promiscuous mode [ 981.542445][T29130] netlink: 'syz.8.6141': attribute type 11 has an invalid length. [ 981.557885][T29130] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.6141'. [ 981.642244][T29132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6142'. [ 981.660680][T29135] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6143'. [ 982.970877][T29176] netlink: 'syz.8.6154': attribute type 1 has an invalid length. [ 983.205499][T29173] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6154'. [ 983.418139][T29204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6160'. [ 983.526426][T29195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 983.708585][T29217] netlink: 'syz.7.6164': attribute type 11 has an invalid length. [ 983.755760][T29217] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6164'. [ 983.811152][T29221] netlink: 'syz.7.6164': attribute type 11 has an invalid length. [ 983.866785][T29221] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6164'. [ 984.311500][T29236] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 984.335665][T29236] bond11 (unregistering): Released all slaves [ 984.399142][T29248] netlink: 'syz.2.6172': attribute type 13 has an invalid length. [ 984.430945][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6172'. [ 984.574875][T29253] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6175'. [ 984.791058][T29265] netlink: 'syz.2.6178': attribute type 21 has an invalid length. [ 984.862060][T29265] netlink: 'syz.2.6178': attribute type 5 has an invalid length. [ 985.257475][T29279] syzkaller0: entered promiscuous mode [ 985.269913][T29279] syzkaller0: entered allmulticast mode [ 985.817510][T29309] netlink: 'syz.7.6191': attribute type 1 has an invalid length. [ 985.854391][T29309] bond6: entered promiscuous mode [ 985.859917][T29309] 8021q: adding VLAN 0 to HW filter on device bond6 [ 985.887132][T29309] 8021q: adding VLAN 0 to HW filter on device bond6 [ 985.894614][T29309] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 985.905561][T29309] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 985.925589][T29309] bond6: (slave ip6gre1): making interface the new active one [ 985.933566][T29309] ip6gre1: entered promiscuous mode [ 985.940427][T29309] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 986.000947][T29318] netlink: 'syz.2.6194': attribute type 3 has an invalid length. [ 986.009109][T29318] netlink: 'syz.2.6194': attribute type 2 has an invalid length. [ 986.135805][T29322] __nla_validate_parse: 11 callbacks suppressed [ 986.135825][T29322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6196'. [ 986.227665][T29326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6195'. [ 986.257209][T29328] bond8: (slave gre0): Device is not bonding slave [ 986.264222][T29328] bond8: option active_slave: invalid value (gre0) [ 986.276111][T29328] bond8 (unregistering): Released all slaves [ 986.516080][T29340] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 986.630795][T29342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6203'. [ 987.032817][T29373] netlink: 'syz.8.6211': attribute type 1 has an invalid length. [ 987.040582][T29373] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6211'. [ 987.047002][T29363] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 987.070000][T29363] bond1 (unregistering): Released all slaves [ 987.222127][T29336] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 987.626600][T29402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6225'. [ 987.682399][T29399] ip6tnl1: entered allmulticast mode [ 987.813855][T29411] netlink: 'syz.2.6228': attribute type 2 has an invalid length. [ 987.843856][T29411] netlink: 'syz.2.6228': attribute type 2 has an invalid length. [ 987.911868][T29416] tipc: Failed to remove unknown binding: 66,0,0/10005162:1085657491/1085657493 [ 987.922539][T29416] tipc: Failed to remove unknown binding: 66,0,0/10005162:1085657491/1085657492 [ 987.933707][T29416] tipc: Failed to remove unknown binding: 66,0,0/10005162:1085657491/1085657493 [ 987.943130][T29416] tipc: Failed to remove unknown binding: 66,0,0/10005162:1085657491/1085657492 [ 988.102939][T29427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6233'. [ 988.112395][T29433] netlink: 'syz.8.6231': attribute type 1 has an invalid length. [ 988.121858][T29426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 988.136205][T29433] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6231'. [ 988.148675][T29433] netlink: 1 bytes leftover after parsing attributes in process `syz.8.6231'. [ 988.157808][T29433] netlink: 'syz.8.6231': attribute type 1 has an invalid length. [ 988.165544][T29433] netlink: 'syz.8.6231': attribute type 8 has an invalid length. [ 988.173265][T29433] netlink: 606 bytes leftover after parsing attributes in process `syz.8.6231'. [ 988.312066][T29442] netlink: 'syz.7.6237': attribute type 21 has an invalid length. [ 988.324708][T29442] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6237'. [ 988.334435][T29442] netlink: 'syz.7.6237': attribute type 4 has an invalid length. [ 988.342507][T29442] netlink: 'syz.7.6237': attribute type 5 has an invalid length. [ 988.353811][T29442] netlink: 'syz.7.6237': attribute type 21 has an invalid length. [ 989.464197][T29476] tipc: Started in network mode [ 989.487482][T29476] tipc: Node identity ac14140f, cluster identity 4711 [ 989.519218][T29476] tipc: New replicast peer: 172.20.20.187 [ 989.557462][T29476] tipc: Enabled bearer , priority 10 [ 990.504686][T29515] : entered promiscuous mode [ 990.663066][ T809] tipc: Node number set to 2886997007 [ 991.078799][T29541] netdevsim netdevsim8: Direct firmware load for .. failed with error -2 [ 991.096573][T29541] netdevsim netdevsim8: Falling back to sysfs fallback for: .. [ 991.121129][T29541] [ 991.123477][T29541] ====================================================== [ 991.130579][T29541] WARNING: possible circular locking dependency detected [ 991.137605][T29541] syzkaller #0 Not tainted [ 991.142021][T29541] ------------------------------------------------------ [ 991.149037][T29541] syz.8.6271/29541 is trying to acquire lock: [ 991.155098][T29541] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 991.164429][T29541] [ 991.164429][T29541] but task is already holding lock: [ 991.171786][T29541] ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 991.180669][T29541] [ 991.180669][T29541] which lock already depends on the new lock. [ 991.180669][T29541] [ 991.191060][T29541] [ 991.191060][T29541] the existing dependency chain (in reverse order) is: [ 991.200063][T29541] [ 991.200063][T29541] -> #8 (gdp_mutex){+.+.}-{4:4}: [ 991.207193][T29541] __mutex_lock+0x1a3/0x1550 [ 991.212312][T29541] get_device_parent+0x16f/0x3a0 [ 991.217771][T29541] device_add+0x2e1/0xbb0 [ 991.222617][T29541] device_create+0x269/0x300 [ 991.227729][T29541] msr_device_create+0x33/0x50 [ 991.233025][T29541] cpuhp_invoke_callback+0x445/0x860 [ 991.238835][T29541] cpuhp_thread_fun+0x36b/0x780 [ 991.244214][T29541] smpboot_thread_fn+0x541/0xa50 [ 991.249677][T29541] kthread+0x388/0x470 [ 991.254271][T29541] ret_from_fork+0x514/0xb70 [ 991.259374][T29541] ret_from_fork_asm+0x1a/0x30 [ 991.264656][T29541] [ 991.264656][T29541] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 991.272213][T29541] cpuhp_thread_fun+0x127/0x780 [ 991.277583][T29541] smpboot_thread_fn+0x541/0xa50 [ 991.283041][T29541] kthread+0x388/0x470 [ 991.287631][T29541] ret_from_fork+0x514/0xb70 [ 991.292736][T29541] ret_from_fork_asm+0x1a/0x30 [ 991.298019][T29541] [ 991.298019][T29541] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 991.305747][T29541] cpus_read_lock+0x42/0x160 [ 991.310853][T29541] static_key_slow_inc+0x12/0x30 [ 991.316305][T29541] nbd_genl_reconfigure+0x132f/0x1ea0 [ 991.322193][T29541] genl_family_rcv_msg_doit+0x22a/0x330 [ 991.328267][T29541] genl_rcv_msg+0x61c/0x7a0 [ 991.333298][T29541] netlink_rcv_skb+0x232/0x4b0 [ 991.338576][T29541] genl_rcv+0x28/0x40 [ 991.343075][T29541] netlink_unicast+0x75c/0x8e0 [ 991.348349][T29541] netlink_sendmsg+0x813/0xb40 [ 991.353628][T29541] ____sys_sendmsg+0x972/0x9f0 [ 991.358909][T29541] ___sys_sendmsg+0x2a5/0x360 [ 991.364104][T29541] __x64_sys_sendmsg+0x1bd/0x2a0 [ 991.369563][T29541] do_syscall_64+0x15f/0xf80 [ 991.374673][T29541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.381084][T29541] [ 991.381084][T29541] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 991.388724][T29541] __mutex_lock+0x1a3/0x1550 [ 991.393832][T29541] nbd_queue_rq+0x37b/0x1100 [ 991.398934][T29541] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 991.404998][T29541] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 991.411847][T29541] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 991.418342][T29541] blk_mq_run_hw_queue+0x348/0x4f0 [ 991.423973][T29541] blk_mq_dispatch_list+0xd16/0xe10 [ 991.429693][T29541] blk_mq_flush_plug_list+0x48d/0x570 [ 991.435583][T29541] __blk_flush_plug+0x3ed/0x4d0 [ 991.440954][T29541] __submit_bio+0x28d/0x580 [ 991.445972][T29541] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 991.452122][T29541] block_read_full_folio+0x599/0x830 [ 991.457925][T29541] filemap_read_folio+0x137/0x3b0 [ 991.463480][T29541] do_read_cache_folio+0x358/0x590 [ 991.469116][T29541] read_part_sector+0xb6/0x2b0 [ 991.474407][T29541] adfspart_check_ICS+0xb1/0x960 [ 991.479877][T29541] bdev_disk_changed+0x817/0x1770 [ 991.485429][T29541] blkdev_get_whole+0x380/0x510 [ 991.490822][T29541] bdev_open+0x31e/0xd30 [ 991.495591][T29541] blkdev_open+0x470/0x610 [ 991.500532][T29541] do_dentry_open+0x785/0x14e0 [ 991.505812][T29541] vfs_open+0x3b/0x340 [ 991.510394][T29541] path_openat+0x2e08/0x3860 [ 991.515506][T29541] do_file_open+0x23e/0x4a0 [ 991.520532][T29541] do_sys_openat2+0x113/0x200 [ 991.525725][T29541] __x64_sys_openat+0x138/0x170 [ 991.531098][T29541] do_syscall_64+0x15f/0xf80 [ 991.536205][T29541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.542610][T29541] [ 991.542610][T29541] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 991.549814][T29541] __mutex_lock+0x1a3/0x1550 [ 991.554927][T29541] nbd_queue_rq+0xc6/0x1100 [ 991.559946][T29541] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 991.566009][T29541] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 991.572859][T29541] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 991.579372][T29541] blk_mq_run_hw_queue+0x348/0x4f0 [ 991.585009][T29541] blk_mq_dispatch_list+0xd16/0xe10 [ 991.590730][T29541] blk_mq_flush_plug_list+0x48d/0x570 [ 991.596629][T29541] __blk_flush_plug+0x3ed/0x4d0 [ 991.602017][T29541] __submit_bio+0x28d/0x580 [ 991.607050][T29541] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 991.613203][T29541] block_read_full_folio+0x599/0x830 [ 991.619006][T29541] filemap_read_folio+0x137/0x3b0 [ 991.624552][T29541] do_read_cache_folio+0x358/0x590 [ 991.630191][T29541] read_part_sector+0xb6/0x2b0 [ 991.635482][T29541] adfspart_check_ICS+0xb1/0x960 [ 991.640941][T29541] bdev_disk_changed+0x817/0x1770 [ 991.646531][T29541] blkdev_get_whole+0x380/0x510 [ 991.652004][T29541] bdev_open+0x31e/0xd30 [ 991.656772][T29541] blkdev_open+0x470/0x610 [ 991.661707][T29541] do_dentry_open+0x785/0x14e0 [ 991.666987][T29541] vfs_open+0x3b/0x340 [ 991.671573][T29541] path_openat+0x2e08/0x3860 [ 991.676701][T29541] do_file_open+0x23e/0x4a0 [ 991.681732][T29541] do_sys_openat2+0x113/0x200 [ 991.686924][T29541] __x64_sys_openat+0x138/0x170 [ 991.692299][T29541] do_syscall_64+0x15f/0xf80 [ 991.697414][T29541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.703827][T29541] [ 991.703827][T29541] -> #3 (set->srcu){.+.+}-{0:0}: [ 991.711045][T29541] __synchronize_srcu+0xca/0x300 [ 991.716517][T29541] elevator_switch+0x1e8/0x7a0 [ 991.721816][T29541] elevator_change+0x2cc/0x450 [ 991.727103][T29541] elevator_set_default+0x36c/0x430 [ 991.732826][T29541] blk_register_queue+0x3e9/0x4e0 [ 991.738374][T29541] __add_disk+0x677/0xd50 [ 991.744002][T29541] add_disk_fwnode+0xfb/0x480 [ 991.749191][T29541] nbd_dev_add+0x72c/0xb50 [ 991.754125][T29541] nbd_init+0x168/0x1f0 [ 991.758791][T29541] do_one_initcall+0x250/0x870 [ 991.764069][T29541] do_initcall_level+0x104/0x190 [ 991.769529][T29541] do_initcalls+0x59/0xa0 [ 991.774380][T29541] kernel_init_freeable+0x2a6/0x3e0 [ 991.780110][T29541] kernel_init+0x1d/0x1d0 [ 991.784967][T29541] ret_from_fork+0x514/0xb70 [ 991.790071][T29541] ret_from_fork_asm+0x1a/0x30 [ 991.795355][T29541] [ 991.795355][T29541] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 991.803169][T29541] __mutex_lock+0x1a3/0x1550 [ 991.808278][T29541] elevator_change+0x1b3/0x450 [ 991.813563][T29541] elevator_set_none+0xb5/0x140 [ 991.818929][T29541] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 991.825264][T29541] nbd_start_device+0x17f/0xb10 [ 991.830642][T29541] nbd_genl_connect+0x165b/0x1cf0 [ 991.836181][T29541] genl_family_rcv_msg_doit+0x22a/0x330 [ 991.842258][T29541] genl_rcv_msg+0x61c/0x7a0 [ 991.847286][T29541] netlink_rcv_skb+0x232/0x4b0 [ 991.852571][T29541] genl_rcv+0x28/0x40 [ 991.857077][T29541] netlink_unicast+0x75c/0x8e0 [ 991.862356][T29541] netlink_sendmsg+0x813/0xb40 [ 991.867638][T29541] ____sys_sendmsg+0x972/0x9f0 [ 991.872928][T29541] ___sys_sendmsg+0x2a5/0x360 [ 991.878132][T29541] __x64_sys_sendmsg+0x1bd/0x2a0 [ 991.883597][T29541] do_syscall_64+0x15f/0xf80 [ 991.888726][T29541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.895134][T29541] [ 991.895134][T29541] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 991.903738][T29541] blk_alloc_queue+0x546/0x680 [ 991.909021][T29541] __blk_mq_alloc_disk+0x197/0x390 [ 991.914654][T29541] nbd_dev_add+0x499/0xb50 [ 991.919581][T29541] nbd_init+0x168/0x1f0 [ 991.924251][T29541] do_one_initcall+0x250/0x870 [ 991.929533][T29541] do_initcall_level+0x104/0x190 [ 991.934987][T29541] do_initcalls+0x59/0xa0 [ 991.939836][T29541] kernel_init_freeable+0x2a6/0x3e0 [ 991.945553][T29541] kernel_init+0x1d/0x1d0 [ 991.950403][T29541] ret_from_fork+0x514/0xb70 [ 991.955505][T29541] ret_from_fork_asm+0x1a/0x30 [ 991.960784][T29541] [ 991.960784][T29541] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 991.967991][T29541] __lock_acquire+0x15a5/0x2cf0 [ 991.973361][T29541] lock_acquire+0x106/0x350 [ 991.978389][T29541] fs_reclaim_acquire+0x71/0x100 [ 991.983859][T29541] __kmalloc_cache_noprof+0x40/0x660 [ 991.989663][T29541] get_device_parent+0x255/0x3a0 [ 991.995114][T29541] device_add+0x2e1/0xbb0 [ 991.999958][T29541] firmware_fallback_sysfs+0x2e4/0xa30 [ 992.005927][T29541] _request_firmware+0x1052/0x1780 [ 992.011559][T29541] request_firmware+0x36/0x50 [ 992.016754][T29541] devlink_compat_flash_update+0x15a/0x2c0 [ 992.023082][T29541] dev_ethtool+0x1874/0x1ae0 [ 992.028198][T29541] dev_ioctl+0x392/0x1150 [ 992.033038][T29541] sock_do_ioctl+0x23e/0x320 [ 992.038145][T29541] sock_ioctl+0x5c6/0x7f0 [ 992.042994][T29541] __se_sys_ioctl+0xfc/0x170 [ 992.048104][T29541] do_syscall_64+0x15f/0xf80 [ 992.053215][T29541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.059630][T29541] [ 992.059630][T29541] other info that might help us debug this: [ 992.059630][T29541] [ 992.069857][T29541] Chain exists of: [ 992.069857][T29541] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 992.069857][T29541] [ 992.081860][T29541] Possible unsafe locking scenario: [ 992.081860][T29541] [ 992.089302][T29541] CPU0 CPU1 [ 992.094656][T29541] ---- ---- [ 992.100008][T29541] lock(gdp_mutex); [ 992.103898][T29541] lock(cpuhp_state-up); [ 992.110740][T29541] lock(gdp_mutex); [ 992.117145][T29541] lock(fs_reclaim); [ 992.121123][T29541] [ 992.121123][T29541] *** DEADLOCK *** [ 992.121123][T29541] [ 992.129269][T29541] 3 locks held by syz.8.6271/29541: [ 992.134454][T29541] #0: ffff888065e4e258 (&devlink->lock_key#18){+.+.}-{4:4}, at: devlink_compat_flash_update+0xa6/0x2c0 [ 992.145611][T29541] #1: ffffffff8e7f9ae8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 992.155976][T29541] #2: ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 992.165290][T29541] [ 992.165290][T29541] stack backtrace: [ 992.171166][T29541] CPU: 1 UID: 0 PID: 29541 Comm: syz.8.6271 Not tainted syzkaller #0 PREEMPT(full) [ 992.171186][T29541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 992.171199][T29541] Call Trace: [ 992.171206][T29541] [ 992.171214][T29541] dump_stack_lvl+0xe8/0x150 [ 992.171235][T29541] print_circular_bug+0x2e1/0x300 [ 992.171261][T29541] check_noncircular+0x12e/0x150 [ 992.171286][T29541] __lock_acquire+0x15a5/0x2cf0 [ 992.171308][T29541] ? lockdep_unlock+0x5d/0xd0 [ 992.171324][T29541] ? __lock_acquire+0x146e/0x2cf0 [ 992.171343][T29541] ? __mutex_lock+0x319/0x1550 [ 992.171369][T29541] ? __kmalloc_cache_noprof+0x40/0x660 [ 992.171400][T29541] lock_acquire+0x106/0x350 [ 992.171416][T29541] ? __kmalloc_cache_noprof+0x40/0x660 [ 992.171446][T29541] fs_reclaim_acquire+0x71/0x100 [ 992.171472][T29541] ? __kmalloc_cache_noprof+0x40/0x660 [ 992.171496][T29541] __kmalloc_cache_noprof+0x40/0x660 [ 992.171519][T29541] ? get_device_parent+0x255/0x3a0 [ 992.171537][T29541] ? do_raw_spin_unlock+0xf5/0x210 [ 992.171564][T29541] get_device_parent+0x255/0x3a0 [ 992.171583][T29541] device_add+0x2e1/0xbb0 [ 992.171603][T29541] firmware_fallback_sysfs+0x2e4/0xa30 [ 992.171622][T29541] ? kfree+0x1c5/0x640 [ 992.171644][T29541] _request_firmware+0x1052/0x1780 [ 992.171677][T29541] ? __pfx__request_firmware+0x10/0x10 [ 992.171703][T29541] ? xa_get_mark+0x6fc/0x7b0 [ 992.171730][T29541] request_firmware+0x36/0x50 [ 992.171756][T29541] devlink_compat_flash_update+0x15a/0x2c0 [ 992.171782][T29541] ? __pfx_netdev_run_todo+0x10/0x10 [ 992.171807][T29541] ? __pfx_devlink_compat_flash_update+0x10/0x10 [ 992.171834][T29541] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 992.171856][T29541] dev_ethtool+0x1874/0x1ae0 [ 992.171887][T29541] ? __pfx_dev_ethtool+0x10/0x10 [ 992.171909][T29541] ? dev_load+0x21/0x1f0 [ 992.171933][T29541] ? dev_load+0x21/0x1f0 [ 992.171952][T29541] dev_ioctl+0x392/0x1150 [ 992.171971][T29541] sock_do_ioctl+0x23e/0x320 [ 992.171999][T29541] ? __pfx_sock_do_ioctl+0x10/0x10 [ 992.172024][T29541] ? do_futex+0x333/0x420 [ 992.172050][T29541] sock_ioctl+0x5c6/0x7f0 [ 992.172075][T29541] ? __pfx_sock_ioctl+0x10/0x10 [ 992.172100][T29541] ? __fget_files+0x2a/0x420 [ 992.172121][T29541] ? __fget_files+0x3a0/0x420 [ 992.172139][T29541] ? __fget_files+0x2a/0x420 [ 992.172161][T29541] ? bpf_lsm_file_ioctl+0x9/0x20 [ 992.172187][T29541] ? __pfx_sock_ioctl+0x10/0x10 [ 992.172211][T29541] __se_sys_ioctl+0xfc/0x170 [ 992.172235][T29541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.172255][T29541] do_syscall_64+0x15f/0xf80 [ 992.172276][T29541] ? trace_irq_disable+0x3b/0x140 [ 992.172301][T29541] ? clear_bhb_loop+0x40/0x90 [ 992.172321][T29541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.172338][T29541] RIP: 0033:0x7f7eb7f9cdd9 [ 992.172355][T29541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.172369][T29541] RSP: 002b:00007f7eb8ef9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.172392][T29541] RAX: ffffffffffffffda RBX: 00007f7eb8215fa0 RCX: 00007f7eb7f9cdd9 [ 992.172406][T29541] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000005 [ 992.172419][T29541] RBP: 00007f7eb8032d69 R08: 0000000000000000 R09: 0000000000000000 [ 992.172430][T29541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.172442][T29541] R13: 00007f7eb8216038 R14: 00007f7eb8215fa0 R15: 00007ffd8d8d5188 [ 992.172462][T29541] [ 992.517763][T29555] __nla_validate_parse: 6 callbacks suppressed [ 992.517781][T29555] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6269'. [ 992.605988][T29548] syzkaller1: entered promiscuous mode [ 992.614712][T29548] syzkaller1: entered allmulticast mode [ 999.245449][T27476] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)