last executing test programs: 7m29.053500954s ago: executing program 2 (id=850): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) 7m28.847385176s ago: executing program 2 (id=854): socket$netlink(0x10, 0x3, 0x9) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffff000000000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="b5648ccf1204a137b14cab9800080800000a0001000000000000000000140035006d616773656338ee4700000000000000000000182f3ee9307bb137b36d"], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) (async) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x404840c}, 0x40040) ioctl$int_in(r2, 0x5421, &(0x7f0000000300)=0x8) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x3f5, 0x1, 0x0, 0x0, {0xc}}, [], {0x1b, 0x3f6, 0x1, 0x0, 0x0, {0x3}}}, 0x7a}, 0x1, 0x0, 0x0, 0x20044040}, 0x4010) 7m28.69609982s ago: executing program 2 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xce7}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r4, 0x6) sendmmsg(r4, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x8, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004f80)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x40000040) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)="079c433ed6252ed1aff006e875cb96ac", 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x42}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c5}, 0x90) 7m28.612784012s ago: executing program 2 (id=858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xe, 0x0, 0x7fff, 0x38f7}, {0x9, 0x1, 0x0, 0xfffe, 0x8, 0x401}, 0xf5, 0x80000001, 0x210e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee3ce641f2ef5769}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x50, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=@migrate={0x2a8, 0x21, 0x10, 0x70bd26, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x4e21, 0xb, 0x4e23, 0x0, 0x2, 0x80, 0x80, 0x0, r4, r6}, 0x6e6bbc, 0x1}, [@tfcpad={0x8, 0x16, 0x9}, @algo_comp={0xcc, 0x3, {{'lzjh\x00'}, 0x420, "1e66ad09ebe5796ee4d342d25476db455b50a50783d5d4ddf6611d1e17624fcca90ee5707b7484e25f6b7b3035e7ed4f6713296992ce930e23c9e8a55f7a314b52228fad0905d1f11b2e270666374beb2eb68bac53f68c2178549c11401cf418b6181b23bba8f83b7368dbf2de7e9a63336fcb0d8f75dcde447437138cb5ed7f72326f99"}}, @sec_ctx={0x8c, 0x8, {0x88, 0x8, 0x1, 0x7, 0x80, "26e3d95220ff7611322c41acb895f1e5763806af9c0ec2b7304be01a2733706c5b79ace7c8e3e13f81b0086982c3d59b74983e27d7a034eae3fa6a66c9801ae6c846d9258d5e2f385aedef9f731e195547dd7912f40333062cd4321feb07231f3f3247db8d52bfccbaf09f1d0741fbd51cd14ae86c4a1fa30cc543e1678eae81"}}, @mark={0xc, 0x15, {0x350759, 0xfffffffe}}, @policy_type={0xa}, @algo_aead={0xe0, 0x12, {{'morus1280-sse2\x00'}, 0x4a0, 0x60, "18be6b1689ee8367e0cb009711b236cda7683187c29b855c1d69e70d6dadc524e000326e1e656adbfae6d2391e9431a09857ca4ea55b31ce2d0613b9506dd67e612c837f8a76d30a4de3da62ce1f346a588defbad3d87eac0ac9e0d1571cd81af54997d32f2ffa5b2a309e3c3bbff68999db525c60fd50ce5f1b0ec0641c88cd4b4a8690dace2994753ea0f11c523910fc7efcd6"}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x40}, 0x4880) 7m28.465176518s ago: executing program 2 (id=861): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004880)=ANY=[@ANYBLOB="240000002e20010022bd70000000000008000000", @ANYRES32=0x0, @ANYBLOB="0c00008008000900", @ANYRES32=0x0, @ANYBLOB], 0x24}], 0x1}, 0x44010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x30c4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f00000001c0)=""/15, &(0x7f00000002c0)=0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r8, 0x25, 0x0, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) r12 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x8916, &(0x7f0000000000)={r12}) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x8936, &(0x7f0000000000)={r12}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001040)={r9, r4, 0x4, r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r13}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x1, 0xb, 0x5, 0xb, 0x5c, 0xffffffffffffffff}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x3, '\x00', r8, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00'], 0x20) 7m28.255800018s ago: executing program 2 (id=863): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000025a5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}}) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="070000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(0x3) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtaction={0x7c, 0x30, 0x800, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x5}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6558}, @TCA_MPLS_PROTO={0x6, 0x4, 0x805}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc018}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="660a000000000000611148000000000095"], &(0x7f00000004c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001540)=ANY=[@ANYRES16=r9], 0x20) bind(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x3, @private1, 0x9}}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m28.002413716s ago: executing program 32 (id=863): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000025a5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}}) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="070000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(0x3) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtaction={0x7c, 0x30, 0x800, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x5}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6558}, @TCA_MPLS_PROTO={0x6, 0x4, 0x805}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc018}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="660a000000000000611148000000000095"], &(0x7f00000004c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001540)=ANY=[@ANYRES16=r9], 0x20) bind(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x3, @private1, 0x9}}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) 52.261250247s ago: executing program 4 (id=3518): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0xf, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/21, 0x15}, 0xd}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c0010800800014000000000080002"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) 52.051321516s ago: executing program 4 (id=3522): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300000400000000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="001000000000000014001a80100005800c"], 0x34}}, 0x0) (async) gettid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0x4040800) (async) recvmsg$qrtr(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800054000000017080006400000800008000240000000020900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x1003}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0x1ff, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0xfd, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0x9}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x2199, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x7, 0x10000, 0x1, 0x1, 0xf6}, {0x7d5, 0x3, 0x14, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0x6, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8c3e, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x8001, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0x0, 0x1b}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000cffffffc38af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 51.796715875s ago: executing program 4 (id=3525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x2400c044) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}]}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x4}, 0x8) 51.691576834s ago: executing program 4 (id=3527): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f0000005380), 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x64}}, 0x8004) 51.446593738s ago: executing program 4 (id=3532): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @loopback, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x8, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x4, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) 51.296107014s ago: executing program 4 (id=3533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001b80)="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", 0x585}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x3, 0x1}, {0x4, 0x3}, 0x4, 0x7fff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x360) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e305000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r6}, 0x18) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x50, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x20000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c814) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000001c0)={@rand_addr=0x64010102, @broadcast, 0xffffffffffffffff, "a18b0f0901b5652d46019af56f4cac84580c0b605939e10e2746158147df80a3", 0x3, 0xa4b, 0x9, 0x9}, 0x3c) sendmsg$inet(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000040)="22e1", 0x2}, {0x0}], 0x2}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x4, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 43.73385829s ago: executing program 3 (id=3617): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) sendfile(r0, r0, &(0x7f0000000180)=0xffffffffffffffff, 0x5) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="0a000000010000000400000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80), 0xc) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="40003a82b60f3d33343f2d600000480000012bbd7000ffdbdf250a008000", @ANYRES32=r4, @ANYBLOB="06000000080002000b000000080002000c00000014000100ff010000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r1}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x62, &(0x7f00000003c0)=ANY=[@ANYBLOB="016702000b000000185a0000030000000000000000000000183000000300000000000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500000000000000cb490600040000005c3b10000800000018110000", @ANYRES32=r5, @ANYBLOB="0000f6fffff5f1bc5beae6e86ba37376cdffffffb60086"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_freezer_state(r1, &(0x7f0000000900), 0x2, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtaction={0x14, 0x30, 0xcac229faa96ee7df, 0x0, 0x1}, 0x14}, 0x1, 0x500}, 0x24040000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000940)=0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000980)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="c065faaa", 0x4}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0x20, 0x40044}}], 0x1, 0xc4) r16 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x2000000}, 0x0) r18 = getgid() sendmsg$unix(r1, &(0x7f0000000a40)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000000c0)="00fc02126cc7440b0eb425081e92c63b99b0a89da1bcf406ffc2ce961251fc250f6a3a29fa1047717a9c863684d63e9930af83c2eee754fbf5a2ca4c4f7b466893a8ba9cbf0d52371c2dc0c6ba2e7b250b33fcfc3001d72a50", 0x59}, {&(0x7f0000000680)="07ab1d3517414ccce7ddcba7b826901aea818568df0c8407f287ac09679ccbd001aca5cdc3393ab4d4033ef45e8f6387b57c74c705ccb3cf837b622877b341d820b24b3cf80cdff7c31f3e00d400be", 0x4f}, {&(0x7f0000000700)="36e1287198af2ba989a137b1c0f53c6d018be40db72f6ac083b1681779a647d6577d0799ff184f7a2b3b05319a939c03656e3166ce98c851c80e4d6f304f42808f8a641831ff81df355b8b9e067b661a7261e7099d039dc0069d97b1477dd39f3fc61c049bc55090e5ea93", 0x6b}, {&(0x7f0000000780)="617ac5df97520f0e7428510ad797b49f33475d9fda464266169c9c4124f941f18913e9f9f02a683c35bd490721fd26aef18630f0710f78e4dc2ac08a14e34e47e839055d9aaa627fb2d0c24cc215b8fa0546a46c04e08ee6e6c49de3f03280217efa0e726e1afcd91e707ff37c4ada18d053421fcea2e98161c79428f491985bd103e184760b1b6604af0c4c6986901171991baf43e56fca48b7ca96eeef5ac211cce155a5", 0xa5}, {&(0x7f0000000300)="5951ba46a5706767a09ab0c04d0af0a686ab68c9c02a6f58bb046051d2a9d28781bcd86a7809309382cf6a313e2b95a71b9742bdf868a7049e6efa", 0x3b}, {&(0x7f0000000840)="396fd8215996e47ee70c616684bc249363decf189283ccedbdcae310e7da0522838fc2095cda8321e4f85038032a1b7427cebc09352ea6", 0x37}], 0x6, &(0x7f0000000d80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES8=r4, @ANYBLOB="0000000020000000000000040100000001000000", @ANYRESHEX=r16, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYRESOCT=0x0, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002799000", @ANYRES32=r18, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x20004015}, 0x80) 43.701711209s ago: executing program 3 (id=3618): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newtclass={0x34, 0x28, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x8, 0xb}, {0x6, 0x6}, {0x3, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0xf8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x10, 0xffe0}, {0xfff3, 0xfff2}, {0xb, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xcd, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r5, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x2}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2bb}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xed}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2d1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3ff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x44044004}, 0x4000) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f00000004c0)=0x20000, 0x4) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) bind$inet6(r9, &(0x7f0000000540)={0xa, 0x4e22, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) close(r4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000580)=@req={0x1, 0x0, 0x5, 0x9}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$packet_int(r9, 0x107, 0xb, &(0x7f0000000600)=0x3, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$AUDIT_USER(r9, &(0x7f0000001700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000680)={0x1010, 0x3ed, 0x800, 0x70bd2b, 0x25dfdbfb, "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", ["", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$inet(0x2, 0x800, 0x7fffffff) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000001740), 0x4) sendmsg$sock(r3, &(0x7f0000001d00)={&(0x7f0000001780)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x2, 0x3, 0x0, 0x2, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001800)="88666b4c5ebc1feb0f784270b8179440d98af9843b51f60623256be6710dd2a6b31bebcbb5a39a9e660449b8225542d03a20a1c928accd0c5f7262a49a524aee1b91b2508775e3a877e1fa5c9496fa3d4b0582251bda82bcc9311b0fc323bfe18f86542a40d1f499f5d08aff9fab556eedd0800e4aab647b46645fa203ec59b483422932d3f9d94398da4c21f8351580e06c226c80e3fb20459856b57cf49c94e71e4a952eac13deec96bf50d26b58347a5b747c9cfe1077634f55c430c06db2161aa39465167956130875b94757a18ad9e147d8883cca7510fe097a7551", 0xde}, {&(0x7f0000001900)="9c7ae2b573f8999c5b55154819dd02411d702721386c35963c0ff5fd3aee6473d936f48084a5879f3adb9d01fc787bf01f2d4717f70e67fd8fc68e380019be258db9ee6b7bc228a3060d35d1278bc95e2ee1138f9b8e12412dfc890ef1626fe2fb4a5553e72baff085f03401b1628d0c73b3d4a7e9ecbf0f7ce2f7346864a0c8c54f6e0800ba18c522619c99799cbd69d14371c76d61da768cbbfde64f25a1b006d43f6d", 0xa4}, {&(0x7f00000019c0)="290facdb60265b0e679a93bbddb41b25fe4ebd5ca88a282061ca2117196c1bac0c6b06f81e27963afeb5d2a11b31b831ae68674fe720ae0a36728c8e453e7ccecf7c8d2e91110a6577bc14a9bf184f8d02c7affd1daa509e9e54a15196d26858c0f41d579a72981daf6e25109c649b36f664271d6c2645407bb8d424a79728685c31b9ffb8cc548e30006f4b16f1b48a6be46d62a67df58c050ca4996bcbc46e8d39f6a10bab468bc0a08417a5c4b20f8856313e59fabe5f4e2465d6eaec4ec0f96a0e38e41599", 0xc7}, {&(0x7f0000001ac0)="ab10b208dc914f25da2569f890ebf477bf1191c7d5fb3851ed9b0ec9a93e2ac24a8bc0fe07dd3e3008d2aa6b204fd9549cf914620cc8debf45de52291f60c151cffceb3a6d57398cb3462dab1477a01aeb1b31c05c9307f8ab52f2a3c87426e4f03df19b28e4de277ac91cdd0925c052e012730fcaae02386807fb3c8e9bdab781d739a9bac3332f1f911aebc68da7a1eee7a3995ce7674fe9a733332b310bc0c0223591f2adf116aa9a", 0xaa}, {&(0x7f0000001b80)="7f3bfa0453bc", 0x6}], 0x5, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0xeb}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x90}, 0x8a1d880825d847e3) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001dc0)=@nat={'nat\x00', 0x1b, 0x5, 0x4a0, 0x0, 0x1a0, 0xffffffff, 0x320, 0x320, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, &(0x7f0000001d40), {[{{@ip={@remote, @broadcast, 0xffffffff, 0xff000000, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x2e, 0x1, 0xf}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x7ff, 0x5, 'kmp\x00', "4954cfb598025b0ca723e416ea5ddc2ac1b5f88f3920ea53ef93041e806b10e9f0dfbb5743913a7552f93dabb4ee0640c41343b89b72f703c3a880d5ea403bbe364f5620de3ea2aef6ee373170e3d2df0a7fb775f92d283a5dcb9bbfbf5a3624ab92325c548dfb2cd7d98e503eff19f80fc8c1e27104350d9c1f8574e1f1f134", 0x76, 0x3, {0x31de}}}, @common=@icmp={{0x28}, {0xc, "0be6", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@multicast1, @ipv6=@mcast2, @gre_key=0x8, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@remote, @ipv4=@multicast1, @port=0x4e24, @icmp_id=0x68}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0x0, 'bond_slave_0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x32, 0x2, 0x10}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0xf], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x6, 0x10}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x2, 0x4, 0x1, 0x4, 0x6], 0x1, 0x3}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010101, @rand_addr=0x64010100, @icmp_id=0x66, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r3, 0x89) 43.579848661s ago: executing program 3 (id=3619): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0xd}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x4040040) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x6, 0x9, 0x2}) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x4, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044041}, 0x40041) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000340)=""/144, &(0x7f0000000400)=0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008040) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x10000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r8, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000f0}, 0x24048001) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x1412, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc0080c3) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x48}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) r13 = socket$pppoe(0x18, 0x1, 0x0) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r14, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, 0x140b, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000881}, 0x20004800) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x17c, 0x1, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "9b8a5f53e762aad46c4d80eef6c6b4c7d1fd7ddae5edc6e5207af3afe49a5f55eebeb9c4b3b671f7bcf9edb3add757fe99410f447516bf60a3b8113aece043f20d3d4629f810ac626fe14c1f37d43120b3e03d18b5c20d2c6cf736b55263899b6a5b773c58a92008f5123c2d4b509113b9e5dc63fac5eebd2ee582e92b3cab781b7784dcf5731c0710a44bdb9d68810b262bfcab3a22ed47d69bf42bf9a0a307b09a6d5d1bff1401b42bf1a90f0fdc21770b8a69c72991c3566c43ec157907c8b90885fd66a84dbbfcedba0dd4d7ae660fcdef5f14d29be8706c694d3be5d3560b517ecce73f456df65581162968928bf9e7eb07f8e4abd58c"}, @NFTA_TABLE_USERDATA={0xb, 0x6, "a1688b3376d676"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20044003}, 0x11) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r13, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000e00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000e40)=[0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000ec0)=[{}, {}], 0x10, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001100)={r15}, 0x4) 43.309435905s ago: executing program 3 (id=3621): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000061107900000000001f0100d500000000950000002200c4ac3d9f830000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0)=0x8, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0xba01}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r4) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 43.308855621s ago: executing program 3 (id=3622): sendto$packet(0xffffffffffffffff, &(0x7f0000000700)="44c394f305916c4516999da286fcf8aeae3eec8ab3dd", 0x16, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) connect$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x48) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={r2, 0x3, 0xf1bf0d6, 0xcc}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="c907bc020000", @ANYRES16=r1, @ANYBLOB="00042cbd7000282e99ffdbde250700000008010300", @ANYRES32=r4, @ANYBLOB="0a00180003030303030300000a0018000303030303030000140004006e6963766630000000000000000000001c00e70057ce32d463e6700fd449c282d72130edaa2fa3692c04e5b21c00e700011882b8a3935be69370f495c3ff873a39e362c3e83a71ca1800178004000600040006000400030004000600040002002400178004000600040006000400060004000500040003000400050004000400040002000a00e800ffffffffffff0000"], 0xc8}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="480000001400190d09004beafd0d8c562c84ed7a060f000000000000a2bc5603ca00000f7f89000000200000000121ff0000000309ff5bffff00c700"/72, 0x48}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000180)=0x2, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2641, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r10, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f0000000580)=""/175, 0xaf}], 0x3) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r10, &(0x7f0000000100)={0x9}) ioctl$FS_IOC_GETFSUUID(r10, 0x80111500, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000428bd7000fddbdf25070000", @ANYRES32=r12, @ANYBLOB="1400040073797a6b616c6c65723000000000000008000500020000000500530001000000"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 43.059747533s ago: executing program 3 (id=3624): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x303}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x1}, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600080000206010800000000000000000700800114000780080011400000008b05001500050000000500010006000000050005000200000005000400020000000900020073797a300000000011000300686173683a69702c706f727400000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0xda4c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000000c0)=0x7, 0x4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) unshare(0x42000000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800010426bd7000"/20, @ANYRES32=0x0, @ANYBLOB="425401004a080100280012800b00010065727370616e00001800028050001200060003000400000006000e0001000000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x810) (async) sendto$inet6(r6, 0x0, 0x0, 0xbcff, 0x0, 0x0) (async) writev(r6, &(0x7f0000001300), 0x0) (async) socket(0x200000000000011, 0x2, 0x0) 36.057357326s ago: executing program 33 (id=3533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001b80)="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", 0x585}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x3, 0x1}, {0x4, 0x3}, 0x4, 0x7fff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x360) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e305000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r6}, 0x18) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x50, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x20000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c814) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000001c0)={@rand_addr=0x64010102, @broadcast, 0xffffffffffffffff, "a18b0f0901b5652d46019af56f4cac84580c0b605939e10e2746158147df80a3", 0x3, 0xa4b, 0x9, 0x9}, 0x3c) sendmsg$inet(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000040)="22e1", 0x2}, {0x0}], 0x2}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x4, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 30.179610036s ago: executing program 0 (id=3736): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000000180)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r8}) ioctl$int_in(r6, 0x5421, &(0x7f0000000140)=0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r10, 0x28, 0x2, 0xfffffffffffffffc, &(0x7f0000000040)) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010000304000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002c0012800b000100697036746e6c00001c00028014000300fc0000000000000000000000000000000400130008000a00df9c198921b3a4e2b07175546c10a75e162fdcf57252872e213bc5927e4f6ccf99a8fd577688cba310ccb834876bbdb0ecce51fe26f7736b57bdadb5dff60bc77832f7ca3eb88c25211526014a8d9f909845a62c7e3c699bb27e0c93a07a0c7bf44c737cae956543865aca1dea2c80e30ea6e090746329f226ea2aeaaea2678486c3b2a4adfe039e3542bb4f9331b8640ea879aa1660168712d5000ebd5a9a7d64", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x640}, 0x0) 29.279167911s ago: executing program 0 (id=3749): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="852000000525c60018650000030000000000000005070000df3afcd708184795aaba4f6891f6bc2f5bacf4390c8fe6027b505d502ff68ba09a7f0b0000000000000027"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0xfffffffffffffedd, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) r4 = socket$inet6(0xa, 0x80002, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r3) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000100)=0x8000, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="150601010000ffdbdf251000000005000f003100000008000100", @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000095000000000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) 28.974771766s ago: executing program 0 (id=3750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000268b491700000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 28.921410837s ago: executing program 0 (id=3751): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x1, 0x0) (async) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/28, 0x1c}, {0x0}], 0x2}, 0x2d}], 0x1, 0x2120, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21211}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="01000000", @ANYRES16=r4, @ANYBLOB="100028bd7000fcdbdf2567000000080001001a0000000c0099003c0a00002e0000000800c400567d00008000c50014d05a79f45ee3b5b017cbf92f11263baa97c50ddf8d237d741f06e9789b297e1ea8ece04fc0acfb75e7faa99e6b97229af2e5db80925e55587be842e61998fffb849c7edbde98b38e902e49bc6cd41c3977f324bb56fc81f9e1d7b85060347a3fbaba6cc79d76fd4e8d3cd9cd50892377e461caf81d14f3eb91b7c80800c400020000000800c4007ec900000800c40001000000ec00c50082986054cad54a2df58181128c544b405362de26c189a37ee29fbfeb30f94a9b8fd419370fde4a238859c565aa8352a6bb40ee14f13773423e5bbccc106c28bb562de9c01b7feaec3259c45bd42dd64d588fb7f6c4c08629c92a4787015216696ee10ec4e7ca42e769dccfcd37ca272eaa67d86d4b6329feccdadca1911c2f2a3c90d7ff2f25249ac456439e7d285d28e2dfa19a23e063f731ef04b9d427d9e877429d894c10906aa6f3e456625c2f35622fb04a39ef20b0c0671351b54d6d6af7b37e9dcc2e7765a9e3174eb59c95a15b0518595bcd4a544d2e7857ac0abe63fd05be91f532d4900800c400000000000800c30006000000"], 0x1c4}, 0x1, 0x0, 0x0, 0x4000880}, 0x2) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000800000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b80000050000000080919356c39e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe21, 0x4, @private2={0xfc, 0x2, '\x00', 0xe}, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r6, 0x8b2c, &(0x7f0000000040)) 28.816595476s ago: executing program 0 (id=3753): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="0ddac400000000000000bfb48c676fab22e2d076fb296526ae98655ee4c429d1f245f7b1cfa5447a76830be1d0cfd34ed8af4ddbcc0b787eb0619e69f27ab98c3754b47c0b61fc44", 0x48}, {&(0x7f00000005c0)="b2ea4f38d299d054", 0x8}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18, 0x20000000}], 0x1, 0x20000010) (async) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa030490780300fffe450000000000ffff002f0000ac14140ae00100010000000000000000"], 0x0) (async) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x1a, 0x802, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xf}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc, 0x5}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0xff, 0x6, 0x3, 0xffff}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES32=0x0], 0xb8}}, 0x0) (async) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000480)=r6) (async) socket$kcm(0x29, 0x0, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001020102000000000000008e6a000300000a0400"], 0x18}}, 0x40000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000200)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3, 0x0, 0xe42}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) connect$bt_l2cap(r3, &(0x7f0000000440)={0x1f, 0x7a0a, @none, 0xff9c}, 0xe) 28.635935903s ago: executing program 0 (id=3755): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10) r6 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r6) socket$can_j1939(0x1d, 0x2, 0x7) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) sendmmsg$inet6(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad26489", 0x45}], 0x1}}], 0x1, 0x4000040) 27.301358125s ago: executing program 34 (id=3624): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x303}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x1}, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600080000206010800000000000000000700800114000780080011400000008b05001500050000000500010006000000050005000200000005000400020000000900020073797a300000000011000300686173683a69702c706f727400000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0xda4c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000000c0)=0x7, 0x4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) (async) unshare(0x42000000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800010426bd7000"/20, @ANYRES32=0x0, @ANYBLOB="425401004a080100280012800b00010065727370616e00001800028050001200060003000400000006000e0001000000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x810) (async) sendto$inet6(r6, 0x0, 0x0, 0xbcff, 0x0, 0x0) (async) writev(r6, &(0x7f0000001300), 0x0) (async) socket(0x200000000000011, 0x2, 0x0) 22.972469764s ago: executing program 6 (id=3789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4b64}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast2={0xff, 0x5}, @private2={0xfc, 0x2, '\x00', 0x4}, @mcast2, 0x4, 0xa, 0x7, 0x500, 0x4000000000000004, 0x200120, r1}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4b64}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast2={0xff, 0x5}, @private2={0xfc, 0x2, '\x00', 0x4}, @mcast2, 0x4, 0xa, 0x7, 0x500, 0x4000000000000004, 0x200120, r1}) (async) 22.849927098s ago: executing program 6 (id=3790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c000000020603"], 0x6c}}, 0x4000) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r3, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000800000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500090000000000050008"], 0x44}}, 0x40) 22.800231818s ago: executing program 6 (id=3791): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0xfff0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x90, r2, 0x105, 0x0, 0x8000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4901}, @device_b, @device_a, @initial, {0x5, 0x1}}, 0x8, @random=0x6c, 0x2, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x1, 0x25, 0x9}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x5, 0x9d, 0x2}}, @val={0x2d, 0x1a, {0x1, 0x3, 0x4, 0x0, {0x9, 0x14, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xd, 0x4}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x20}}, @val={0x76, 0x6, {0x1, 0xfd, 0x25, 0x1ff}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r7, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x2000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2}}}, @hopopts={{0x1b8, 0x29, 0x36, {0x3b, 0x34, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x1, 0xe, 0x3, 0x2, [0xa, 0x80000001, 0x0, 0xc00, 0x1, 0x8000, 0x1]}}, @generic={0x4, 0x4d, "4053073832cba9b7f1f73e3ab6482155eadaba52a22592013ee75625f605905836354a19411875ff88674b3ffc968600a8d0171cf0ae7b26a83acbad85d53e642ea93460dd44134aab05f400dd"}, @jumbo={0xc2, 0x4, 0x533}, @generic={0x5, 0x80, "8fd967474e8236051e268cefee9b87480c28b714dabd395cffe54aefff1f82a2e1f87c8139f039ab39540eb761d2922c88890c6118e4f72ef5ae0ac1ce9f70c1ca37788eec297306cb7403947d98b3503f9e34f9a2483f443d07c29fda1f28c6a4437ae2707dd6a16c42fc548a42ad573f528a657f41d32f897db7674ae677e6"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x65, 0xfff0, [0x5debcbc9]}}, @calipso={0x7, 0x50, {0x3, 0x12, 0xc, 0x3, [0x0, 0x3, 0x8001, 0x7, 0x24, 0x3, 0x10001, 0xfffffffffffffffc, 0x3]}}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x2, [0x1, 0x3f4f]}}]}}}], 0x1e8}, 0x0) 22.690187881s ago: executing program 6 (id=3792): unshare(0x6a040000) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) unshare(0x20000400) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5}) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x2, 0x0, 0x100000c, r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x1, 0x803, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 21.747911963s ago: executing program 6 (id=3801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket(0x10, 0x803, 0x0) r6 = accept4(r5, &(0x7f0000000280)=@nl, &(0x7f0000000200)=0x80, 0xa5df2de2f9b0757f) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc000) r7 = socket$tipc(0x1e, 0xeb3093780201f306, 0x0) listen(r7, 0x0) poll(&(0x7f0000000380)=[{r7, 0x2}], 0x1, 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14208003}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB="000129bd7000fcdbdf25052908000000001300000100442f030000000c00030001000080000000000c0004000900000000000000440404000600000000000000080001001000009b02fafdc03c0b2500000000000c000300af1b0000000000000c0003ffffffff00000000000c000300000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r8 = socket(0x2d, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000800)='gpu_mem_total\x00', r9, 0x0, 0x20a}, 0x18) write$nbd(r8, &(0x7f00000005c0)={0x67446698, 0x0, 0x0, 0x2, 0x4, "a3c5cbcb76b7a2"}, 0x17) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e0003000000030000002a437cad929190e728460aef386c5a8a1f69bc2af666d14159f4aedbc1ea78760cd1edf24f289d751d48c33000c83e6b40b3365243dfb23104fef11e34c6f8ad9c9f334c8192029891fb7a8eb195c0196be48724e06d012dbf74f4f46a222ee57847e67bd42351f211cf839cdf26a14b"], 0x40}}, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r10, 0x0, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010102}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xce5}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 21.557837399s ago: executing program 6 (id=3802): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x4, 0x3ef4, 0x20000265}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000ca8b9c0c732da71065ec9db04aa087c04d50247d0b45b48b766f4f64ffc3fad2a035c3e74dfa37e2919c6e7320b04a9cd05dc8761b6bd42834fb21fcc79870f5b31f10a5407b9a900ddeca874582a84393bbde8ea534560de31f833a34bc4e0094b232aa6f2024895286444d5e157d22ade3f37fe11f8dfc6842b7f92b51d763fe573d1a5e9a2560935b2ceca8cc1a2565e9c70a973bc9735b41630a114fa11885fa089fe25b0167eec9b02376c5ef9d0a74ea549b68c85490434e7cfde14c84e51eec576363000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x17, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000001c40)=0x4) (async) socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 13.104316744s ago: executing program 35 (id=3755): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10) r6 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r6) socket$can_j1939(0x1d, 0x2, 0x7) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) sendmmsg$inet6(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad26489", 0x45}], 0x1}}], 0x1, 0x4000040) 11.244154312s ago: executing program 7 (id=3880): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) socket$packet(0x11, 0x0, 0x300) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002007f0000009f427da4ddfe124476e37700"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffe28, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x86, 0x1e}}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48081) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xa}, 0x4b) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0xc796, 0x4) 11.042474357s ago: executing program 7 (id=3881): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32, @ANYBLOB="0000000000000000b70800000000007c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0xd8, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb7, 0x6, "704faa5e7be059e74ac09f2b6e2c5b55fd60ea749e8c275577d5e08ebf2ed723b5c6fbe29934cf82166c5a88b7fed33bf3896dbc207bcc66ae503f6d9da8e3c389d152cb331c05b693b4ddb2dc752a8872abe8b2f5c7fa055544625013f8b1fd121c857063a33aa5d0daf21be5c84a09abf5e24b792b5c5bf6f2e7958bb1509e34469247ea1e5758ce57f01e3eed922aa97c0d3157bc40d663c9e62a87363f01188d59b121cd7d16ea87cbd8a4f1811a972fad"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x100}}, 0x200508d4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000c00)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0xfffe, 0x0, 0x8000, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20]) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x3b8}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xb029}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x695a, 0x400}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) 9.700239641s ago: executing program 7 (id=3883): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 9.6452711s ago: executing program 7 (id=3884): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="03009000"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xffffffffffffff67) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8924, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0xfffffffffffffefb) 9.518619963s ago: executing program 7 (id=3885): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/166, 0xa6, 0x10000, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000003a80)=[{{&(0x7f0000000180)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000022c0)=[{&(0x7f00000001c0)="e1328a4774d9c7e6", 0x8}, {&(0x7f0000000200)="ee8f586589fb14b9e8ffb65a2168a42ec690085f6064e89f6d4a9f628afda82376d2d5", 0x23}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="a7126b1f55dae345821ff3ce0b44629016717aa14fee04c633f2282017f66d2255c3e3c6b0da6340638484fbcb593221809893255509a5c3f56b91a56b8fc99bf69dc71aa569dc2c1928b178168892244007ec999c77aeb40e371dc55f75749c256070850e0bbe310b93de4c7b2e41668bdbccf16cd0ddb0717ecb85a7a269f4e1f66b991b55556115f0a87bbde03b11b18a9d7593b040dfeffc8ac67a930fb5d523f8c3662f62e06c705f343c20b1967124cf4d09b3154d0507f67b78b80435b4b3b6434cfe333bf290ece24bce9421e8c10649fb6c6a59a2186175ffb55676f4f3cb082f426c65458d95d70d88fffd657fc78f8bd32e3cfe73794c86fe0fa4b4a18c1bdaf55d9bee27ae59dca1f336b584554886d1d8bbf76e505d3bc863e3fb08274d869f7ab241e6da99fe72193d6a7b9abb0720c1d96d2d0e56fa78c7d6d464b5af8b20ee3068decf3fdb43e9c6fdb401ee2ba85f7195c51981177dad74951808f100411359c4d94a1591ce0b39dbd0cf277384948b8b6160499f0601e9553bd71adf1fefd547a4261d03aa7920b18b506b6e80d0e6db5d4216235d2feac06a94755414653767396e3e84d200e89351676320dda62b035a9541a09236a3057a5b1490bb7d676518c563f3990726edd4e308a0b94f7ed2b50b4ae44336a74eac73b11cb95a8e1acf5541a9f183e3e2666435f7550f64e55dd59ab7ae730f41c34c0ab77cdd46da7ebdfafea727bdcbf61c652a7390cfaccdead7acbac41fbba8b9fc912795009ef497636334769677e95c4cd1fd38812dda34acface7a91fd624bad207cc6930d80ac085ed80fcc11ada08739b9df0ea2fcaf3d25960491d868d456c90feee191899425c57a0ec3e610ba57df0408464becfa610cfef061fdbe978002d7c5f70f0f5d2ca3d2278282e8612c2485e2e441d84a92accc466fbd79a6f6d44aade90f8dd5589fb6816ff1ad0431ed03c9736e84ffceb3f86f264804d6766fdf0fb1bfe2a6116fe1f9c17fd26bc8e56e6cefe5309e6c055d8ee91c596eff5df51b656f7a31c92b2054e731ec2106615d984a8aa496cfd4b8a65906da29cb6559357bd5449111bb6844e434101055beccc9e24ed0fa35b203dddb70823968645dae836099b036a641dbade1c2f1b568fc80381900699718b9aa6a8942f18b8f3d637d0fc3b24235f9cce011c5f2d7804fb8c40687cd32076d7cc46d9dc97a7c9754ce3550568cdf18cdba152eb15a27a1cae550e1e6cfee285d09cc0d5d41f75ab7492c2586f9d4253c5bdc987a9ea1c4b033251e6657a46ba8fbe73798ec4c12b54ac3101825d696924324bf67d29e34bc42af290eedd64c2b1688f99e0572005c8d4cb99a909dbf324bf6172c4afb036a9a121f2c461771ca4efc56ec4be8d444b3930c4ea1167f7e3f756dc4dc802ddcf6c2b19055265a0a1452c662761bc7940083f9e21aa2d5a03aaa6e3d49a80b8439d56a8531a4f10c4a5e9025a1113c342efb1333edcfba29cbb0548ada22b4dc80386ce49479dce8295954730e6ec38b9a086e4113889c9d8cd1ed77e8e09ea248dbe45d69f0a8090da35dcfa9535e959242c382ccda2e2a47bb8a03f3ee0d67019b20280246a3388962cf2a4381bda268dae8454a0364bed4f2285a2e3e2fdce42461d280c74eb739be27459b1b6757beb3d126c430b437baa987bed2a52c205847734e3dbcda286bacf81530e18c154dcb434fd367e410112642517e097b47a77a461ba68e8d20300a8d972e21c0fb79aa6f4bd0183ef44c375d8210d1cab8858cdd9ffb6e5def3cb91b6399272d17eb84980a300ba7cafcc257f74f79e43a028582c8961312fbe83e81e4ac29b7bd441c7c7cf5139db28b1cca590a0f7d2b1a5f997f394a5da346241e53e7cf3d194bfb69350fb5cdc31a157b5bd56b070d163f9e3e16cb2ff5a467fab9dd42161a778c6cf619d2358d3d1db3b28e761d41e3633cf834cfb70a9acaf4f268509c90c79a4c56ce442150194b5484934001f6bb68437f5e04aecf4816e4b3e96ca2adeba7d6a3077a932ec8feb0ffc6ead42c5d4581042e32ac79a45872023b69fafa56a99dff2d5689943e9a5d523dd2ac72662eb2123dfcc5eedc1f848348d9c0c474cc003fefcccae8fcc8842c38f2d2f3209711c7f03bc13adb84cf49cf2386157b95a402759101a013fb20ee01cde36fc6159285e07c37be52f5615c694fd67287bc1f136555465df2006bcbdfb09352cf6348c29367deecafe2091541de5330be27ad3b96b9c89d19b3e8fbd315ab34dbfc8cbf5b6abfe216e077f2769cff07911022b9e1eb6c6aa012a44461e8c750efe2129e9b0ade7febcd4355c4caaa4c3cf6962ac7eff982baee54cf151c2c1dc8337ee1cfaa2d4ba96ebf62f356cb9bfe2aaa5708fba13ba0358ecd94880eea88d0054094af83a1d226ce59532480666e20c74dde5d5cf4342e5b65f048d0fb9676d1a045d18e12f70dc4a1d3fa74154c4e74fc16a1ba9ae00479b2c278b5a5e8d59e81073e8404a6240e1f48a04990a7f2bed6f7a4727be46343a1effb44df5cefe4e2be4fba6c4c0c1051cf8ee3303b096466edc48c49e59547df66e4967dedced7c6a2f2757668809899ec9fab0dfc3faf18dad25b2b230d641ae60c97d8bc9bc6a8a9f3a8045635168223002c97b87407bccb0334bba46dd7c76c5bd7028c13d8b9ccf4e754a921f7516d19a50b6c6c5e07b139bd6a9bb6264d6441f5c5abd576d07525933fa6d9423c9e5235771832698e969d6e486025c995cdfb63e2db9d69c02237f046a29bef6b0faba28577f5c61f12c93cc0bf86d95cd0706663caab19fc1d9567f6be2921c4b68dd99795e2cd9fe56721a85e4b9257e1d4f02f7d90ced300c57102b1c5b8631e6425a14dbf79a5fb9b6d4d025723d40a1ccca6d629f7ed08a31e17d456667f0ae9f69a88faee123848e4f807aa5e4e237c01495fee1ca162b2b26869691990b926a90a4aee0ec7926ddb713eecadd18bbe93cca40e06a0539c0d37aff357343e6d21136e609e3b3aab94bc00772318500770f2ac4bf9e73902c287b105c9411642ce5ebeac273d0e1351da5514edd601016b756fb42ef26f90256d4ca5cc682cb871b4ec59110c893dc3acf28fd515514a871174a5f1c5f9557f8528d8174031cd03f4f2fe564aac8ea1915947e05054d7fb92688a93612af148288e02db9d277bbca25a60d5e0ec161821e513f836e0e2aaa2cb14c39c4a12b2cb161dad86adac70ef5928e7d6cea201113840934dec2d4fae7153ff0d557e3d3f73d1b076f98a833bc79e76d54a6498524630bc57c7dbe58c11599b33e3c75bdb06cb4b324997914d98d4ea33431d4d936de31bdb096ecc92e0e86f1605177182954c0cf572d54f3abf63e4fe45c618f19af295462f824c7e0252425d8bf417e1c810c8f3a73338acfc10b1e7acc54ca71cf9e52f26adbfbb2d9672c9308389b95aedadda76ad0e68b51fcd09c4cabb497ab1bfb274c3902d50b201ba00314219e10911f8167de240857b61bcc92e1124f2009f839b09cf9008cab7233e94e34bb250984e69fae267fec692459ae75ce4dfb5503fde1d406878d1314a068055befb274f9789165ac3d435a2593ab95a13f0e0b27b81118e4c8cc3e90a0ebee9a3ad27aca3f88eb3c7a3377212d6923ffcc54d2d81e75fee4de7e09b946bb15b567b67f472e4a1737a6fdef9809a0470b92798232d063ac70fde66a7ebf8b420fe5925463a402e0f1a51598e6ab1726474d9b92117113e7b2563b651eca263ddec480171a030261dd578f0647ba56fec1e8b275feb6fa87d989a18b2149a5f2eb51035899e56d0b809aa3b5d05360cf5c8a608bf39990979b376bcbf21a6d2016a3cd1e5fe2096d7ff8eeeee3c6594ee42910522610086708f8b7f639abf8bb5c329bb42b6c56a688e3d2f07c536906e385fa027994fd570521c2db901d5c055a889ab1e7cf750d12dc189deba88c92c484dd03da1e11028cf68c6fa9bafb93e83ec0720e4498506814ae20d9598b04f42ea8d78007af4211b5137999c031ebbcefea1eb54fca30249aebdc187aa83d3416a739ed5558e433e8f337b43934dd087d7d51ed1d977292137c63d758ef9c6593eec73336790dc816d5166e4e9efb2d8458a2f1ba2947a42c4da8c9b503ab5231c0458397b15b22f2e14244743014bf2ead759a88300f6156c854bf532e7f29b982c11920c236298f21951621da78e8b15b3fd310ee84438175bba04e7bec39c5dd11815816d14d951d14c79307d75b75359f8c99538336c9f3d660f600b32d2bc0eeb696385269525aff83849bf4ac9260d7a9e465e3e2571ea377ecc9009cf59495d9240887e21e0c344deeccbe30e525fc9531fc450ad4bca83c4c9c1dd30848b8bbcee19150e4b02064c2a7bfb029383dbe2fb5d5b20e2e47d34845f029a834ee1ca713d0c7a1adf08c7070041cf68b90a27ebaf521774318db5fced60c0678a50a0e268c3b6e420d04b34779d7381ea8f6bc11a5780b8df633d7628eb7825720c177b91e261235f6ef74dac91318b10773cdbee90220d2795bf4cb3bb728b0e0560e24a0fd57c147044aa52e54cc1df6652c11c3db4f2818403d5811b684436ca0f708a0ea8ef68475d67c5aa0b9dcf72483b9e428dcab64df2e91d9c01deb245687212d0cd845252006e8ec0420846ac42391c8fd0d182b52f443e87f0d1e54613a8c011b4e1300bdd50cdfb46a13f477e2817870c10ceffaa72da0e741474c0c9da8f53dc2dae65424f7f8407ecc742502656a7523d53c73cdc98b45aa2bb1c2bb86baf784d9be553f4d9088c45a1cbd81a436acd03f89a909134498f9fa55bec38137fbade6fcd3c6f3a714cc8886e9925e8ea0e99f1b668fb84ba8800f9eb0a5fe336a9b7527c665b32f6e91910c708ba7dda901ee4e7197b21edfba42ae5cccb1e2d1f55886b280c1d3b9247aadfdfd70b6b479bb989ff3e70ab24383412cee29e9daa0559656df2875a60f374526ca3eacdd2827b0398971de8c610f509ed5deece71a1effe90f3351087d9385ac86869283d53d04884e7612a586e1ad9b9659bb481e922e5d2d6d3c99ca4ce1755fcecf9280f9c34f39b136a5918b954c8ec3df1d9de5c482f28e89261ce0c3d55020dfbf31a94bec64e81514015d830a6d64ceccc02368b11fc2661db671d596389f69120638519b1e4fea962d6a3340b6198654a9048d7865c74439bee69f87ab189c1ca85613397fd4c6bf5d854455cb23bf735109f3ee0e4f6874d0bdcdce767bb03188d348600c65ecc7a38fada3945c6f7f57026abee1abdf055b5af52d17c1d36a150e23e67166cdea21c984ac2479bc14f676b04be77dbe32d0fc8a0d3e93a1e568a6896dc95dd0080d3ff8bcdfd864cf031f1725144294e74d78732e4dbed10db9936ae4b44aea89b95de983d13783ea451c414f2d6cdadeb37d56c9bd6a250a7036d26ba54f23c0ed36edd87df0a94e89157fa9cb8461f08288a0290672ecabc902b4f324dc5e970141475af68d2db7f456c942d540ec45a87c21a69c2651dbd4fb865d04f841732c1ae3001249bab73506e63697fdf444ba11d215d23e9a575188ff249616ae9570faf32d3090466ef79eba48216825457bc1aa46bb35a8e3589d8db1a7999512a0928079453163451b373877bdacfeb111c03d3f57daf94fbee0ab73c23634c90fb109c8be5fbd814101e1eada287b9a62b8b3270ab32a95a411ed400433164e427fbd200b71fe4d5a906cff20e8cc71990", 0x1000}, {&(0x7f0000002240)="4bd8166ad4180bed723124f39fbc53fd02080c6564045fba688040ef4675bd70497ebfd95edbc3536382f2e6204aa44f39744c550069da1942ae532f8226db8171addd176394", 0x46}], 0x5, &(0x7f0000002340)=[@ip_retopts={{0x130, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0xd9, 0x0, 0x6, [0xb, 0x81, 0xf79, 0xfffffff9, 0x5, 0x6, 0xfff, 0x1000, 0x4]}, @cipso={0x86, 0xa, 0x1, [{0x1, 0x4, "1a31"}]}, @timestamp_addr={0x44, 0x24, 0x5e, 0x1, 0x3, [{@rand_addr=0x64010101, 0x80}, {@private=0xa010102, 0x4}, {@multicast2, 0x7}, {@loopback, 0x7fff}]}, @timestamp_addr={0x44, 0x4c, 0xd2, 0x1, 0x5, [{@multicast1, 0x101}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8000}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2cf}, {@rand_addr=0x64010102, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@private=0xa010101, 0x83}, {@private=0xa010100, 0x9}]}, @lsrr={0x83, 0x17, 0x87, [@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010101]}, @rr={0x7, 0xb, 0x4b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @lsrr={0x83, 0xf, 0xcb, [@dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @loopback]}, @timestamp_addr={0x44, 0x4c, 0x6d, 0x1, 0x5, [{@remote}, {@private=0xa010102, 0x7}, {@rand_addr=0x64010102, 0x2}, {@multicast1, 0x6}, {@multicast2}, {@rand_addr=0x64010102, 0xa}, {@multicast2}, {@multicast1, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xffffff01}]}]}}}], 0x130}}, {{&(0x7f0000002480)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000024c0)="92d69a785347f48898c7983550f00cebe592abe0653cec2304e76152fda13ebc9149bd2b88f7f383eb3e7c73caf44dbb7c66500efce0ed4ee9bb00e337b46510451a63dd6c932ad6fc81c0d5ad6e2d74dc8d8954fdbe5cbfc237543fb21e28722813c45966e0fab5a00a2e185c5af3763e0215438131ff3f575eb1f56f1631933db6b8e4493c228be9ad3034c76eab1e534f1f318e830faa1b0661d190149a6aea029cdabb52ccf0925e660484ddd17de36b64fb692cde0d50a9b715fe18ebd5ccdc95f28569fb36aaa9c95cfac7dc3cabd40e89527d150f0e6ba552cef0f0680b6839b48e831ad3c9c5e44949e2b72b74", 0xf1}], 0x1, &(0x7f0000002600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xeb, [@empty, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x24, 0x17, 0x1, 0x6, [{@broadcast, 0x148}, {@multicast1, 0xf}, {@empty, 0x4}, {@local}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xec, 0x0, 0xd, [0xfffffff9, 0x8, 0x7]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7b20}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xd0}}, {{&(0x7f0000002700)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000002740)="06b73b1aaa773c8aa48f88d08f63bc003d3d76f6d7f1e72bf93ed14c073bba8c924569b599c01673bdaa3eb80fe0698f2d23a340d03657e2d1368320a9b2b493961674d8be6d550b630e7f4efd990e6d32", 0x51}, {&(0x7f00000027c0)="4da3df2ff0090417a5fcebb218b1514399b33e697a7240ef6d4edcd6d54503722c827e5180e402db501421ae1b36674d087f315c4a2d1ffd575e", 0x3a}, {&(0x7f0000002800)="88e732da010f93f7abe5df7eeffb6b98de1415ecb40b3561fd68b34fd585", 0x1e}, {&(0x7f0000002840)="8d1defae48e2336adc7723473c23", 0xe}, {&(0x7f0000002880)="b99114dd0951951e193f0ade0bb0cf9cdec6fe229a81b41e889b6ee0e75d9000362abc27a19b749bb372140c6c9cd0c7ca4fc488161c27c3588de98303c13d3604b05bc167b071a5dc23a1a53d9fc134a16bb8741d77f27943d1729a71664d829159b45d7a55cf3b520cdde829ba0722f63eeebdd5d07c6d760c", 0x7a}, {&(0x7f0000002900)="b7a04bb704299c37dd86d68e4fc20e0e860d5577ed02ee870ba266dd00f308249ec6b794f231ec1c517cf3b248dac35a5e3605a063cb42c178258e46503fdef1703f2f050f073ed01d707761425599fe7f981ad2b103e95d3b587ec8b56d5c814ff354c3c7cd87788f2e568ea9dbeac247d589e9247607894a700cd358a2a47649da19f656a33d", 0x87}, {&(0x7f00000029c0)="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", 0x1000}, {&(0x7f00000039c0)="e64b6f48c7168fb7924c08977b5bfa7b82b67339d58015", 0x17}], 0x8}}], 0x3, 0x8000) r2 = socket$packet(0x11, 0x2, 0x300) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x180000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000003b40)={r2}) bind$l2tp(r3, &(0x7f0000003b80)={0x2, 0x0, @broadcast, 0x4}, 0x10) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000003bc0)=0x60, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003c40), r3) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000004140)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004100)={&(0x7f0000003c80)={0x464, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "c6da307c6f676e43a7c01052126b1525d1045015d365c4c252"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "aea4765617c048397e64664fc682546049abde5278"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xd3, 0x3, "6b74d5c83fa3eb47a44c0e6fe9c244146fffd49955459d4b72d1a971675e54488b68c90533a0f156609218797fbc450c3ad6b2d8ff31b20b6802e0857b31c2459ed27d759808037a0d8ea7da5e0a996a63673f73ac8ecfae2f9e8c07b4378d67f5b41a2a3144dfe61fe4f5ee2e8e3afc6cff40231f52b31650b703b946c38134e202b4546bafe12ca1d79a770f52aed22d051501fd967b01c6027269b8e2cf043d3d1dcbe508fc9004251abd4d2f3390f268b16346ee234e6817b41c0ef933519c3c514b51467f201d8270983b76cf"}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa72f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x95a8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7a20}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd00}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x401, @mcast2, 0xe}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc4c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x464}, 0x1, 0x0, 0x0, 0x10}, 0x24004084) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000004180)=0xafb, 0x2) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000041c0)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, {0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x400}, 0x0, {[0x3ad1, 0xc890, 0xf, 0x8, 0xee, 0xa, 0x0, 0x4]}}, 0x5c) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000004240)={{0xff, @private=0xa010100, 0x4e21, 0x4, 'lblcr\x00', 0x2, 0x0, 0x2b}, {@initdev={0xac, 0x1e, 0xf8, 0x0}, 0x4e23, 0xb, 0x1, 0x0, 0x1}}, 0x44) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000042c0)={'\x00', {0x2, 0x0, @remote}}) r6 = socket$isdn_base(0x22, 0x3, 0x0) close(r6) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000004400)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x2201880}, 0xc, &(0x7f00000043c0)={&(0x7f0000004340)={0x48, 0x1409, 0x4, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000004440)={0x9, 0x1, 0x200, 0x5}, 0x8) bind$bt_hci(r3, &(0x7f0000004480)={0x1f, 0x2, 0x1}, 0x6) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000044c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}}, 0x84) getsockopt$rose(r3, 0x104, 0x2, &(0x7f0000004580), &(0x7f00000045c0)=0x4) clock_gettime(0x0, &(0x7f0000006640)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000006540)=[{{&(0x7f0000004600), 0x6e, &(0x7f0000005b00)=[{&(0x7f0000004680)=""/230, 0xe6}, {&(0x7f0000004780)=""/247, 0xf7}, {&(0x7f0000004880)=""/51, 0x33}, {&(0x7f00000048c0)=""/166, 0xa6}, {&(0x7f0000004980)=""/121, 0x79}, {&(0x7f0000004a00)=""/207, 0xcf}, {&(0x7f0000004b00)=""/4096, 0x1000}], 0x7, &(0x7f0000005b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000005cc0), 0x6e, &(0x7f0000006040)=[{&(0x7f0000005d40)=""/193, 0xc1}, {&(0x7f0000005e40)=""/233, 0xe9}, {&(0x7f0000005f40)=""/211, 0xd3}], 0x3, &(0x7f0000006080)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000006100), 0x6e, &(0x7f0000006240)=[{&(0x7f0000006180)=""/189, 0xbd}], 0x1}}, {{&(0x7f0000006280)=@abs, 0x6e, &(0x7f00000063c0)=[{&(0x7f0000006300)=""/156, 0x9c}], 0x1, &(0x7f0000006400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}], 0x4, 0x10000, &(0x7f0000006680)={r7, r8+60000000}) setsockopt$inet6_int(r10, 0x29, 0xd1, &(0x7f00000066c0), 0x4) bind$packet(r9, &(0x7f0000006700)={0x11, 0xf5, 0x0, 0x1, 0x7}, 0x14) pselect6(0x40, &(0x7f0000006740)={0x9, 0x6, 0x81, 0xd, 0x9, 0x8000000000000000, 0x7, 0x8000}, &(0x7f0000006780)={0x5, 0x7e5, 0x9, 0x9, 0x5, 0x1, 0x5, 0x5}, &(0x7f00000067c0)={0x50, 0x8, 0x5, 0x5, 0xffffffffffffffff, 0x9, 0x8, 0x339}, &(0x7f0000006840), &(0x7f00000068c0)={&(0x7f0000006880)={[0x4]}, 0x8}) 8.515858651s ago: executing program 7 (id=3889): syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_EXT_MASK={0x8, 0x1d, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc054}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), 0x0}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r3, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="249b", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="a904", 0x2}], 0x1, &(0x7f0000001940)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x4004800) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 6.474342473s ago: executing program 36 (id=3802): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x4, 0x3ef4, 0x20000265}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000ca8b9c0c732da71065ec9db04aa087c04d50247d0b45b48b766f4f64ffc3fad2a035c3e74dfa37e2919c6e7320b04a9cd05dc8761b6bd42834fb21fcc79870f5b31f10a5407b9a900ddeca874582a84393bbde8ea534560de31f833a34bc4e0094b232aa6f2024895286444d5e157d22ade3f37fe11f8dfc6842b7f92b51d763fe573d1a5e9a2560935b2ceca8cc1a2565e9c70a973bc9735b41630a114fa11885fa089fe25b0167eec9b02376c5ef9d0a74ea549b68c85490434e7cfde14c84e51eec576363000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x17, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000001c40)=0x4) (async) socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 4.296921455s ago: executing program 1 (id=3921): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) 3.918848586s ago: executing program 1 (id=3923): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0x25c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x80, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0}, [@coaddr={0x14, 0xe, @in=@rand_addr=0x64010101}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd26, 0x5}}, @migrate={0x180, 0x11, [{@in=@empty, @in=@remote, @in=@multicast2, @in6=@private1, 0x6c, 0x4, 0x0, 0x3503, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in=@private=0xa010102, 0x8a, 0x1, 0x0, 0xfffffffc, 0xa, 0x4}, {@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x3503, 0xa, 0xa}, {@in=@local, @in=@rand_addr=0x64010102, @in6=@private1, @in=@multicast1, 0x1, 0x3, 0x0, 0x3501, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, @in6=@local, 0x33, 0x0, 0x0, 0x3507, 0xa, 0x2}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 3.863712421s ago: executing program 5 (id=3924): r0 = socket(0x10, 0x80003, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) unshare(0x2a020400) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0xa}, {0x29d, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x1, @empty}}, 0x0, 0x5}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x5, 0x2, {{0x6, 0x1, 0x3, 0x0, 0x8}, 0x7, 0x0, 0x5, 0xffffffff, 0x2, 0x1, 0x12, 0x19, 0xfd, 0x87, {0x7, 0x7, 0x2, 0x0, 0xe9ac, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket(0x3, 0x80000, 0x5) sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x14004) 3.793059568s ago: executing program 1 (id=3925): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x7, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x4c}}, 0x0) (async) r3 = socket$kcm(0x23, 0x5, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000240), 0x0) listen(r5, 0xd) (async) accept4(r3, 0x0, 0x0, 0x80000) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r7 = socket$inet(0x2, 0xa, 0x1) bind$inet(r7, 0x0, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="260252a68c962ae07945bab7a73ad74c19c51721360007533d95910e788df67d8f8dcc0496673c8bffabe2c4df563b0e8539656321b841a4664379f84821a9da2e9ff7fa", @ANYBLOB="ebfc043551eef9e060f18539311af343858b31a47c90b7c1d87c73cedf2d0a1625cf9ba9e17940ebf1ffdeaa9032c76cf3e841ccd29113baabcbf5d95d518fe15607663571bb"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @private}, &(0x7f00000007c0)=0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r10) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000540)={&(0x7f0000000280), 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000007ad4027fa2e21c263def885413a088a00b7d6b8b3b62ab3be4f519371d95ca9971808815c55b8663d5da9be59cd62108750ea193bd061e862d26ce8e552907d0ca0ce0576c2ba14c07a744125e848a826fdbe5f6aa98542df27f223d8d80a50a4b252", @ANYRES16=r11, @ANYBLOB="000128bd7000fbdbdf25030000000800090001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f00000000c0), 0x10) sendmmsg$inet(r12, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="050000007402b8f419", 0x9}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}, {&(0x7f0000000200)="587211", 0x3}, {&(0x7f0000000100)="b4c5eb", 0x3}], 0x4}}], 0x1, 0x240400c4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 3.481734563s ago: executing program 1 (id=3926): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) (async) write$nci(r1, &(0x7f0000000bc0)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x1, 0x3, 0x7, 0x1, 0xb}, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) close(0x3) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x1070bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, r8, {0xf000, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0xc8804) (async) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, r8}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r6, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x25}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bba547848c2b"], 0x28}, 0x40c0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20005, 0x4) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x1, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8) (async) sendto$inet(r10, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x2, 0x6}) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 3.310468603s ago: executing program 1 (id=3928): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x7f, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ed640000000000000000000004001b080000000ce56a148993ef910000000000000061c23f5cb71b53d8c1b412d0cd4c7b10f94a1fe210307613ab738013cedc95bb995879401a61d46b4a"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x3000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="1d3fdf755d3e3db2e83191c506fdb16a5928502c9adfb10c6a4ec038e85f6440bb4160e0895523f26f3a4674d70db1a929544f0eae7ecbe981015e6dd8b865b401f7ad026c7e7192f5eb0f1b89b4121924fd25fb4e65243d1bc6f6dc6c73a14ff81ede128c53d767", @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpid() r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x10000000, @local, 0x1}, 0x1c) listen(r5, 0x2) syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaad000000000000000000002afe8000000020000000000000000000aa00004e2200000000000000000000000000001400", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90020000907800001e1026f4020000000000000006000000"], 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/300], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r9, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r9, r8, 0x0, 0x10000) 2.91516327s ago: executing program 1 (id=3930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) shutdown(0xffffffffffffffff, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendto(r4, &(0x7f00000001c0)="1f108e", 0x3, 0x8880, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000e22a005600010600000000000000000700000000000000e5abcf46ae8fd6c74cdbbe3acfbd3d846afb7e153614ab5da1672a67906cf92ab6499d8fdbeb3057006a798265957ba17d507c8b8fd2820b7c082bfa3fd9c4d22d0813bd5c23828ca54688517a3af03e4e37182afe71b66c98d5f627cd8225defb8db47a085730af1f71d87529e78f4f3ce17de6d9fe7702277f792bdb9047a5d4f8ce7cc9e7d22765f4598e779741d816765347bd24b87314baa7896182574c690ef90d9f3d0b31b98642761cf4a5ef984f4d"], 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r6, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.633416987s ago: executing program 8 (id=3931): r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8c9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20044001) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0xb7f41935a28b0695, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x4d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000006c0)={@private1, 0x0}, &(0x7f0000000700)=0x14) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9a}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x75}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x51, &(0x7f0000000640)=""/81, 0x41000, 0x5c, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xb, 0x1, 0x7298}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r9, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x5bea}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz0\x00', 0x200002, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r10, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) write(r6, &(0x7f0000000ac0)="6da32f2507cf92705bad14cd480bdabf921c06069b4b4a102c5b512ea023870066256d70af472d31c99281533c0cf49c9142fa83096064bcd4a47f35d977eb91672ae3351783ed5dd258c212c1da3fc9701ca6be0534d158b7d141a95cdc7bf8d219b7819d8b7e45b426885593c147780f090e4893efb2a9205d445c2879b405cec826835bde883fd5d7ec2c8caaa9ca9fc091e56384e7242f0dbf269925e41e789eac435b8144add046f6ee360e2fb51cc0e85bef6f49f3be4e22c7a623958e7d2e0c4247c4e3dcf398fe41c4ef7282f5ff83458c9e7881134e85e0718c31118c40", 0xe2) socket$inet6(0xa, 0x3, 0x4) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8022000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40040) connect$tipc(r7, &(0x7f0000000d00)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x3}}, 0x10) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r12, &(0x7f0000001200)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x50800c00}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d80)={0x42c, 0x3f4, 0x40d, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x32, [0x8, 0x4, 0x7, 0xf1, 0x0, 0x800, 0x1, 0x80000001, 0x100, 0x6d, 0x5, 0x1, 0x9, 0x0, 0x5, 0xff, 0x6, 0x4f, 0x0, 0x80, 0xe9d, 0x1d, 0x4, 0xff, 0x9, 0x80, 0xffff, 0x897, 0x4, 0x81, 0x80000001, 0x634, 0x116c0111, 0x0, 0x4, 0x3, 0x1e2, 0xffffffff, 0x0, 0xfff, 0x9, 0x8, 0x888, 0x9, 0x3ff, 0x6, 0x2, 0x1, 0x300, 0x80000001, 0x7, 0x40, 0x8001, 0x3, 0x400, 0xd, 0x81, 0x4, 0x6, 0x7, 0x6, 0x4, 0x3], [0x40, 0x1, 0x2, 0x2, 0x7, 0x1, 0x80, 0x2, 0x1, 0x40, 0x3, 0x4, 0x3, 0xfffffffa, 0xc, 0x5a, 0x2, 0x5, 0x6, 0x7f7da45e, 0x9, 0x2, 0x0, 0x1, 0x8, 0xcfa, 0x3ff, 0x3, 0xb11, 0xfffffffb, 0xb, 0x2d, 0x7ff, 0x7, 0x200, 0x8, 0x446, 0x4, 0x1, 0x3, 0x3ff, 0x10000, 0x3d78, 0x3, 0x4f, 0x2, 0x5, 0x10, 0x10, 0x6, 0x10000, 0x9c4, 0x7, 0x0, 0x7, 0x6, 0x8, 0x229, 0x0, 0x8, 0xd, 0x9, 0x9, 0xf1], [0x1, 0x9, 0x401, 0x3, 0x3, 0x1ff, 0xfffffff7, 0x7fff, 0xe7, 0x7, 0x7f, 0x7, 0x3, 0x3, 0x98c, 0x3, 0x3ff, 0x1, 0x42, 0x0, 0x5, 0xfffffff8, 0x0, 0x9, 0x3, 0x7, 0x0, 0xfe6e, 0x200, 0x4, 0x2, 0x8, 0xd4c5, 0x8, 0x16c8676e, 0x2, 0x0, 0x7b1, 0x5, 0x200, 0x6, 0x7ff, 0x3f64, 0x0, 0x9, 0x80000000, 0x6, 0x7, 0x3453, 0x6, 0xc, 0x7, 0x9, 0x800, 0x0, 0x1, 0x0, 0x5, 0x80000000, 0x2, 0x7, 0x5, 0x5, 0x7fff], [0x5, 0x1, 0x0, 0x800, 0x5, 0xeb0, 0x8000, 0x7, 0x4, 0x2000, 0x8, 0x1, 0xe2, 0xfffffff8, 0x5, 0x9, 0x62ae, 0xffff, 0x6, 0x6, 0x4, 0x1, 0x8, 0x3ff, 0x3, 0x9, 0xffffffff, 0x2, 0x9, 0x0, 0x7, 0x8001, 0x5, 0x7fff, 0x9, 0x4, 0x8, 0x9fd8, 0x0, 0x7ed0, 0x6, 0x5, 0xffff, 0x9, 0xe, 0x1b, 0x8, 0x0, 0x9, 0x4, 0x8, 0x8, 0x5, 0x80, 0x28, 0x4, 0xe, 0xa, 0x0, 0x6816, 0x63, 0xc01f, 0xb, 0x3], 0xa, ['nfc\x00', '!,%\x00', '\x8f\x00']}, ["", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, r11, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001380)=@generic={&(0x7f0000001340)='./file0\x00', r7}, 0x18) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x70, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) bind$llc(r7, &(0x7f0000001500)={0x1a, 0x304, 0x88, 0x2, 0x0, 0x9, @multicast}, 0x10) connect$inet6(r7, &(0x7f0000001540)={0xa, 0x4e24, 0xe, @local, 0xfffff507}, 0x1c) 2.533732081s ago: executing program 8 (id=3932): socket$packet(0x11, 0x2, 0x300) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (rerun: 32) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x4000}, 0x18) (async) ppoll(&(0x7f00000010c0)=[{r7, 0x2000}, {r4, 0xf54a}, {r0, 0x400}, {0xffffffffffffffff, 0xc4c4}], 0x4, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x13, r7, 0x0) close(r3) 1.950975722s ago: executing program 5 (id=3933): r0 = socket(0x2, 0x80802, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x2e}, 0x84) sendmmsg$unix(r0, &(0x7f00000083c0)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x400}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getuid() sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_delroute={0x24, 0x19, 0x200, 0x70bd2d, 0x25dfdbfd, {0x80, 0x0, 0x14, 0x9, 0x1, 0x1, 0x0, 0x1, 0x400}, [@RTA_UID={0x8, 0x19, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40011) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x696}]}}}]}, 0x44}}, 0x40000c0) 1.635622392s ago: executing program 5 (id=3934): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000911019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x70, r2, 0x38, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x806}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x3}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22f0}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {}, @broadcast, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0xf}, {0xe, 0x5}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22f0}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x20000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x8, 0x2d, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004904}, 0xc0) r5 = socket(0x2a, 0x2, 0x0) unshare(0x20000400) socketpair(0x2, 0x80000, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000240)=0x4) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0) sendmmsg$alg(r8, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000000400)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ac67e809e68ca18f0241349dc5351bd8b9877ae81e64", 0x40}], 0x3}], 0x1, 0x840) recvmsg(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/149, 0x95}], 0x1}, 0x10001) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000005c0)=0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @alu={0x4, 0x1, 0x2, 0x1, 0x7, 0x10, 0xffffffffffffffff}, @generic={0xf7, 0x1, 0x4, 0x5, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x71, '\x00', 0x0, 0x2a}, 0x94) 1.552254981s ago: executing program 8 (id=3935): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000f40)={0x153c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1514, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x160, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc, 0x6}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x14c, 0x84, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="95d55722fa79bee34337a7c82402a5dac746371edaf8fdb6"}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x397}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x6555d30e}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7d12}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xfffff945}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x22, 0x1, @random="e732d7b0d4aaa7a1fd1edda4ede56d95dcb0884eb719022a2f795a50721c"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x13ac, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1e0, 0x84, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x22, 0x1, @random="1a12905ae2ddc25d6405ca61d9d270bbae57643989048068d6b1ea911f22"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x400}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, @random="581a1de2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="04b31570f2a3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffff7f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xdd6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xfffffff8}, @NL80211_BAND_2GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x23, 0x1, @random="e5a68f94c6d9293041c8eed26cae292138a27142a14c775492a9642b341b84"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}]}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="6b8741b31a9b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xdec}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7159896}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xaa1}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffa}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffffff}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffff5b8b}, @NL80211_BAND_LC={0x8, 0x5, 0xac0}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x60f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x401}, @NL80211_BAND_LC={0x8, 0x5, 0x1065}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1e}]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x400}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0xfb}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1194, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, "9d9e0baf446cb73f5f06e9a37d66fc73064062d9a646ff409e9f85c0ef2986f8ffa22f1ea6e759c6acecf69422158633d132152b2f5b1cebd4d10415e86b0a3b8e49357075f7298e885569c24afb444979165a76bce31baf0aa3541c1a772b5e17f69e43"}, @NL80211_BAND_2GHZ={0x20, 0x0, "228f4d126bff1b0653bee55a149b8aa08f00b6078842ceb9da515ad6"}, @NL80211_BAND_5GHZ={0x10, 0x1, "6b136c2914c7be565b44a359"}, @NL80211_BAND_6GHZ={0x95, 0x3, "662ad433cd01b87f5788817ba8fb819bf710ddfbbb7eec583bdda091ca39e4a2dcce9c8bf41152ee618dd8fd9f834a51d4ecdd5fd27403bdbdb4a76961ed03fc6c0c1cf8d4820c78e746db9f25b19460df4e9253d6a8fb1c8c45d90e8723376d5bfe028b054dd09c89b259f3ca6d023a9fdaf0c10fdf3a7158f26d1b581a8b5cd6f7b8c9f0112cdc2235ecc578c5e0dd7b"}, @NL80211_BAND_2GHZ={0x1d, 0x0, "03abdb87f8457900aa573a4d6c193fec962212ebb9ac956588"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "bc8233e34d5505fc56fee06abd38a9101a1ba4f8d8668db44139a55dd3864521632b54131e2f8d4d8461c175cfc8078eadf64ab1e9172fd545a1ec9f1a29aaa6d590440cb68c5353ecce3a8a7c86d08d0218ab41bc9c8899053f5ba291653a40acc316b7bcb80dc8edbc083424af3154b71705b0b6caf52a6dce98fccf3579d8b55516cf6e00d7a9a4d38c0e9da3d59825de1cb4fb353dde1846c8915b31afb094054889f3dcedf3838404c62d39705268d53c608ecb847e422efd2340d2ac063fbeeafcfb48eaf7ac9b730bebcc579d91e387b8236c80271a103c6aaad2f28352e323fb82742a97dc409d61f0a8a38099ed9a181533da212b9a81ae2417e64406de4fd6c91d4ddf4289ed678c71dfbeb473c292ea37f882635272e6aa1f114f57195b42985d267dddc831a5ff02a5ec09bdf2010014c3af620b9493a8e5f437e9cae21e82ed2d18414fdd7be850991f9eff1fcc611f4e9e4e3118b4a0d7fc8d711ec8b5e410b9a211309e729830a828ec545386d3df485bdb59bb233b776d16aeccb28f5145caac31f51066b6a987d4af8985574d430d42bc10fca0d65cf931dcc838d7e4be5dd4707f709cc52833672feb8dc9059bd76e8f7b94e1c1e9b85caba3b3ddf2590568201ffc99af34e4fff4a14bc2f99bcb34498088506bbe415b5a4f972e2185598424861d58627f54fefc3a29ff9aa825bef8bb8e30b5c6509f9d253273269d57128f869984392965b7e19090a8ca938b501ae164de289c501a300c652fae425284de3a4a2aaf9b313e2c794f48071123065a59905b6d9bb2bef0b4987af9468dc459b945e200c224e0cd0cddcdd82f8392a10a3c43ac639856a2d1e36d21661ca49c2e9bd5ec4ae716a81516a01c72c4fadcb78e71f9de510c54406872b5602cccbc9cce8bec42051b0cf97d9ca6801a104e1e942b8f60505c65f3953ce3a096fa11f79b7926a6e9fb498709f4746c586213cc210202ff68df2b46a34a821363c52b97b0b890f33d6f73b05469a7e7837237b91ccbce280c99540b70bac3d1456f07d58f26f340566639770493645f6472caed17788a122fe90345c41cdb889ba942fc82bc692519b874d985c13fab1b99408caad957e62fa575cb8d8cf0b48a37ec8ded50ab7f39e2feb8c4899b2f6a6c951ba4f4fca11f84215074d2bc32a80046f8bb8004101c4bac8accaeaed467b95fdb6869f9e6072bbe1ce3a6eb260ec51b8f71c9b48c224dca6464cda41ae980f70f1446f5fe9a3e300457affe42efa2c20d5c8d749fcb5bc94641698779108fd851307770e079efe6ee180089d3995c5f2b9a7d7b2980ee5b84c0f65b323ee52c2aab3b5022335a19123dee042d0f6a93b23fb932ab2854347fcd7729ca6f3f1ee6bbeb30fe09ec3b263fa5af7294b468481fd27556fdbc22da62befdd113018004756582ec71322f714ee852c133d4f13b8adca1bd7a5fd4910fc9b7b3f62a24d7de43a52181c45c28b7771a44133cb93c26590d3be52446c18d8727bce9d4b874dd590eecdb943296e6e60ef5b38ef3b273077351a01cbe4b4f0f7ae1f1a1bbd528704755afb970dffef34b05e6f73ff860a1935e9de8bb4fc4ad3a767628a7806d9a6505a6535a3093130ff69ec8ba4139c4e2263dc7b8804c5fc0214849fb5369ca29265ebb0f61c03baf153e6a491e33303995c146fcc3bcf12f0d663a669c6f46e1148023bf3ef1e25d78d7db13c7ff98863739dc6f30b25960c927eb212123389884b77c959df183d856972cdbed72a72d361916e6b9c2e625c982e2d3fd74af33c5b362afb716465e94cb25f91b7e9c0b6be8bbb93865c255ab2447a0123d8cdc0a9da6a678db92dd1b7822c2d5906f36e391f474b0915f5f9eb74bf5d508f5821ad53a30b77b51586c2cf1a9479ad1996452140b36294b4572677e7c0b2afe1aa23aa36282672b97158b339e3e929295600d2493f6a03d9e679f2684ead2b787c30313b349dcb561c5ae63b695d0181a9ee8a40b1fb92f427a6334e35f36366602aa5e172c52089169218f41b6d36dda45720a46dc0f6e0f16ce9d46b1882c1640c08063df6aa7173ed281cad86523d204624a87240c96fc46f8cfea280ef59720766ae0c7e0b19b4f6beaf97eae97d863df81c3d70678fde8e66f7d0c64e288a725ff05feb94cb9bf26e20e6d7bf0d9b3b40ee770ae71789d7af74fa557cebf3fc502cef6276af06515b7fadfcc6f37045ed22573ef055d4d5a97097dc0c16d40d0cd1bb45540d2f352209315a87e4b7fd6f814927579226c6eacf51fac1cbe0b978186591f7c0d794759b906e8ccbb94020f35724c1fde8e40b00b7c8138b416256a4d4a6ebb82b2a35863aa43dff36de74ad441d003714a9966d893eedf04f5321a3bf206c824f50956e65766a987061e68a9673ccdea830add656a261bc28affe2e944d05b74f50d0e96a6531b8bb4287cd0288da41e8e677a023773ca287958bc7b1b371c8d9b0fb31124edf11bd4e72eeb2c27a0d2e499663d6348d8be361fefe28412b58e3b532f8db03c9e7849ee21c3c1f0e85a1ffa8d7e7db45d0459d6744dd9520cea4f788ebf4f3ddd06f91b353380508733175137d81d1864f4ee81f46f16f6c85cf47936847b25edf78756b686de9a7b0a54d6261d07c4dc44fee286af2ad8d30eed9168c773bbb888a6c750baeb1c742731c1e76cf692c4d6593aa88811042a3b57b002859cebb81b450b9a1adea9ce5939fd992e6ca0c5fac8a71701509228709e3b43ad73658844570a3d51643e4c3b8c7385621155804cc2aa81eb1192d3e375b6a91bf7fcbb7bd0af92d98a816ec2131c92f8695edbde8ec7dcc5acddee6accf21d0fd3508d69111e63dc344b7996f0cff212475a53f3c533ff5b3e35b909f474db1d11d1231e304065ccf2f221cc5cd999e115dd53df38ca51012d6808272ca1c465e3a0876167a45e985a6f4e53e31e63b6ce44d5fe7d64fcfd1332ebd69e024bb587b5f0c8d37044cb768ff4b14264f643e95ead951c875cb53f2b543a3036e49499f79e8ff80dc9f65e9c517188e5e10d1e427bf84ea99547e1550cda3ce9bbc73866cac9352b5f1c7716617796eeb980455d59f9eb13264e701f7bc2ac5a90aed7eaeb45d0c0bcaa76cab494df4a31625a902393dbd9909770e04cc582e52d8b4add11154fd1dff3383171612325c2259d2fb0d2a13afcdd48450420666c7f3c3b485148c6d89c1d95af4f390333cab1feb255829b2b5956e2fd706f9f47b64978f0e15a122edd66970b1f3c14d2d945442c94ae1d132aaa9c4d6717da6a70403431680808b49a798ed287968ea7a4fcd9adc900b923207acf76fcea62962f87a3bf60a9e5ac4f2824b304d0700540aefd5f7327e7c352c8de2c1e2f0471f2a77f87d6f7833e4a1da528857334bdb46148f6fcf7666c5ba3486b86a0ea16a5304bfc49741483dc16976989242b74c1d9e09d5ab94a299b7613407356f0cd7234a53354e050a29905e9eb2ad098d2789873b32eea285770e6834ad8a2264711a51d1318ca5b2c947bb4e5087d876a52231e0eb36b4ff759f0f8626dc81226ab5f11564bf6dd3c55db87179e3e1eff9aebdc014319f0dedaecafbe20ed7546e13d1686f6ad8cd97dbe942e38fce224a9c89ff93da404931aeff96aee95f3bdedd04200a8655dafedb42c0b0f7a336c62d99e0f10f7d0e47a46567d3c5389abb7774c6617da1f1d0054c5480cedba54a877e2f7b225dce5078d5eddbdf9454b23517f207da4674d8f44bb00f97a099e530885d3670ec1d4407786ad4fb215f9239802cf57639cc405b51297be69bf4dcd747520fac6d81080ef48833f28277629498ed1662e298ff5120607f1b5bbe7105c9253c87167ac57d8313d265b077c66118f124227f7f24dce82d4bb6188075430e8980b6673f07376d1c1c0446742318b8ae8d7e997af14d10759d903b7cba6f0bc6a503609048bc5fb03d94a98afae72d6c84713daac8950b66453ff37a7a93bcd3a1ad2871c71ee9fe0f4bae210b0f3a6b00e8c76e48652206bcc12bbb5e38b00f3d24aa05a8d35f9302b75e6b3a99e22ef58d6d06c0210f6a6b74086535db52aa2e9b2067873e25235b8ac35719e2167c451c554ba4c9f997e19d2cb1e90677e13cf9bb791f72b922317d3e579df873aeedb6fc35c4dcf490d44de59baf5fd46cbd01187bc3fd42c0f822000efd57133d5c9df722739a5a34d54af2e672527a902f84ef17b58d43f2436f527ae8f90e3694a4bafb1cafd01b6b15a19bcdeaf078c0aa9945395963a0975a6782e389f2c310d1fea50060bdf5ae6ebb8281b1228e5a12212332627117bb0c9d129004c23104aa0d9a30974b126d4721d1047222505b26f6a4a920c9b8f077947494dc64ee50475fe1b9825d4a75e7b243434ce02591b5e83d0d57eb48e34df396614f5e24be9af86f536144d976e4a75819f869f650948b4aa59b1ce16942d866790733b204f768c843708118a329bd1de393d1ba46856586ea9460a87130c90b9efd26726792c4aa4452336a19d4b4048527d974ae5ab533ea2a44d8661cd8a113142635da6ef2e8711041d38fd3c75a966b768e6fba6c57ab59782604699fa51b9a44826a6609b81c014d4389f40947ab614634a780c1ff02950ab5168c7543d55e07f5fefa66e9909a82df87335f345a2aebf26f7e52f6a3f4f8e1e830d62e272aae38f14cab208452d2e02306cb1e186939fec82b24d307c3bb2d782dbee8322d734682caa61b81915e157f08f819b7a355f5a4c786571916ae794ecc5be56bfbeb7da43b30e97a1ddd88d91ebaadf57d15f3282f3b411bb311726e206f924f3764ee779e3f43efb10162216ccd430a35ead56f2d692fd72d6e9054515ab81d2dfee2930de3bdfc0cab1d69acfc27344efc53a711987d7da3f54621784ffeae6746def20b618554e984a04c6e721e7c65be44c10ad68a169643ad5e532ae13cbce7bbaab4f6011194e159c3311b88bb937b817c15ef193ad5237ec0c84b97302f0023fba3c686dbf735ef02fc281493a9bac4f707663ad6e35b8b0197424c9b6d6848906690d680fe29ce3ceb17587091baddbdd05460bdc845265f8581a407269fcea383263172e7df163329b98cd3329633e11c0fef64e531f57fd69bdb93ba6666d7936c86c7c70c5cd7fa4eeda68e8a459fd55e634bfb35889576315ab2c7be2aad25b96be866c57eb98ff174046187b0156e42e874a96a01d9b5d1521f7f244b2cbf1f22b23467e47806a4adf50d4390a88b4ae105d7558e5b5d335d769263bafe9f70ebdec28d7c2ad8d059f7086da7637d56072071dafde324d4fb25b027c34c39c32a0aa7bee6d70b611e751e672e41004be0a5723d629a8c3caa75e215e31430c0337b7e4f4d5384ccc0bf19a3ae8eb0d7a0b110cf9bfbeb9d3b28c9ef8533f9ffe75b28b6eb5ed8e1d8b811fbd7f30cbe3c2009243e27cc9032f2c5142543b78870720b0bdf1a58dd3d054d5b474f758228d67d9ce5a2a86d9edadb28952e57f5a079f7c4c928cf1ae6068fbcd5d52a9a107bb0b8f48dbe28761844b77b824af5e2b62edb689f509459b3ecc67645c1f8c12f93843d9c7878339187b81a7acb79c489c2cee91ad1cf99056564c902a306283950bda6a0d3fc00a9d08af7cbd964c50ee3603ead160b38ca8c858bda29d09caef034eb9c9a6b1f915bf6d535a2c135c831e3fc6aa077df21008586f0a559aa476938034821b38e3c63f10a3c24be37ed408fa70f86a370e97235bcf4acbe4de77"}, @NL80211_BAND_5GHZ={0x3b, 0x1, "b3805e895b9e0463c8a45c11bfa7dfa19a0e70eb0901a84168d9ed6153e89ba2e959fcd969cf91dcfd11152e76f33455bc66e56804b22d"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x9}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}]}]}]}, 0x153c}, 0x1, 0x0, 0x0, 0x4001}, 0x1) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e26}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r5, &(0x7f0000000580)={0x22, 0x7, 0xf2, 0x10, 0xad}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x496}, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xe) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000b010100000000000000000500000404000100fc000000"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 1.328715718s ago: executing program 5 (id=3936): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000ffffffffa0008fcef95b4876", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) r3 = socket(0x2a, 0x800, 0x30) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x4040000) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000040)={0x10001, 0x8000000000000001}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) (rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) bind$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r8, 0x11, 0x67, &(0x7f0000000680)=0x6, 0x4) (async) sendmmsg$inet(r8, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r8, &(0x7f0000000000)="8689d46205a341", 0x7, 0x6000000000000000, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'dvmrp0\x00'}) 1.284852571s ago: executing program 8 (id=3937): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001780)='\"', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000003580)=[{&(0x7f0000002540)="9d8bc2", 0x3}], 0x1}}], 0x3, 0x4000800) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0xd}, 0x8) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}]}}}]}, 0x50}}, 0x0) 1.126288527s ago: executing program 8 (id=3938): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000feffffff850000007300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0x56, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], 0x0, 0x49, &(0x7f0000000980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000009c0), 0x0, 0x0, 0x2b, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000002ac0)="09adda0000006dce87b100568f51", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x0) 159.592829ms ago: executing program 8 (id=3939): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f00000007c0), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r6, 0x29, 0x36, 0x0, &(0x7f0000000000)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r8 = socket$kcm(0x2, 0x1, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000040)={r8}) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r7, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', &(0x7f0000000600)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) socket$nl_generic(0x10, 0x3, 0x10) 95.513388ms ago: executing program 5 (id=3940): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r1, 0x0, 0x6}, &(0x7f00000001c0)=0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_init_net_socket$ax25(0x3, 0x2, 0xca) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xca) socket$l2tp(0x2, 0x2, 0x73) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@getqdisc={0x34, 0x26, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x3, 0x10}, {0x5, 0xe}, {0xfff1, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x4041) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@getqdisc={0x34, 0x26, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x3, 0x10}, {0x5, 0xe}, {0xfff1, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x4041) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x5, 0x941, 0xa, 0x4, 0xffffffffffffffff, 0x1, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060000) socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000440)=@assoc_value, &(0x7f0000000040)=0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x57c83, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x44840) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r8, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r9, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x800, 0x68}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240008d0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240008d0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0xa, 0x1, 0x0) (async) r10 = socket$inet(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000540)={r2, 0x101, 0x7, 0x378, 0x6, 0x9}, 0x14) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001840)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0x138, 0x210, 0x98, 0x2e0, 0x98, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x0, 0x0, [0x22, 0x31, 0x4, 0x1d, 0x4, 0x38, 0x3c, 0x1c, 0x18, 0x11, 0x1b, 0x28, 0x3, 0x1e, 0xe, 0x1], 0x2, 0x7, 0x382}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa0, 0xd0, 0x0, {}, [@inet=@rpfilter={{}, {0x7}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4dc) (async) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001840)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0x138, 0x210, 0x98, 0x2e0, 0x98, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x0, 0x0, [0x22, 0x31, 0x4, 0x1d, 0x4, 0x38, 0x3c, 0x1c, 0x18, 0x11, 0x1b, 0x28, 0x3, 0x1e, 0xe, 0x1], 0x2, 0x7, 0x382}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa0, 0xd0, 0x0, {}, [@inet=@rpfilter={{}, {0x7}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4dc) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000340)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x4, 0x88}, 0x2c) 0s ago: executing program 5 (id=3941): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x4}, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) kernel console output (not intermixed with test programs): shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14520kB pagetables:3896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 507.602793][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.611130][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.655838][T17244] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 507.660182][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.694734][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.727856][T17244] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.733349][T17248] vlan0: entered promiscuous mode [ 507.764622][T17244] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 507.772610][T17244] Node 0 DMA32 free:1083300kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36632kB inactive_anon:0kB active_file:13368kB inactive_file:159884kB unevictable:1536kB writepending:252kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:34216kB local_pcp:20388kB free_cma:0kB [ 507.809766][T17248] bond0: entered promiscuous mode [ 507.810184][T17244] lowmem_reserve[]: [ 507.816798][T17248] : entered promiscuous mode [ 507.819312][T17244] 0 [ 507.823804][T17248] bond_slave_1: entered promiscuous mode [ 507.826852][T17244] 0 [ 507.829023][T17248] dummy0: entered promiscuous mode [ 507.835382][T17244] 1 [ 507.840810][T17248] vlan0: entered allmulticast mode [ 507.844185][T17244] 1 [ 507.847074][T17248] bond0: entered allmulticast mode [ 507.847106][T17248] : entered allmulticast mode [ 507.847122][T17248] bond_slave_1: entered allmulticast mode [ 507.847140][T17248] dummy0: entered allmulticast mode [ 507.879889][T17244] 1 [ 507.883262][T17244] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.920558][T17234] lo speed is unknown, defaulting to 1000 [ 507.947711][T17244] lowmem_reserve[]: 0 0 0 0 0 [ 507.953558][T17244] Node 1 Normal free:3888196kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17272kB local_pcp:11956kB free_cma:0kB [ 508.087415][T17244] lowmem_reserve[]: 0 0 0 0 0 [ 508.092296][T17244] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 508.181394][T17244] Node 0 DMA32: 3085*4kB (UME) 3658*8kB (UM) 2031*16kB (UME) 627*32kB (UME) 396*64kB (UM) 203*128kB (UM) 132*256kB (UME) 64*512kB (UME) 49*1024kB (UME) 11*2048kB (UM) 195*4096kB (UM) = 1083476kB [ 508.185879][T17261] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2763'. [ 508.244617][T17244] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 508.301482][T17244] Node 1 Normal: 181*4kB (UME) 64*8kB (UME) 45*16kB (UME) 189*32kB (UME) 62*64kB (UME) 9*128kB (UME) 3*256kB (UM) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 944*4096kB (M) = 3888196kB [ 508.305759][T17112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.329438][T17244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.347418][T17244] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 508.357436][T17244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.370000][T17244] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 508.380448][T17244] 44719 total pagecache pages [ 508.385953][T17244] 0 pages in swap cache [ 508.390125][T17244] Free swap = 124996kB [ 508.394952][T17244] Total swap = 124996kB [ 508.399404][T17244] 2097051 pages RAM [ 508.403480][T17244] 0 pages HighMem/MovableOnly [ 508.408935][T17244] 425122 pages reserved [ 508.413929][T17244] 0 pages cma reserved [ 508.513398][T17256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2763'. [ 508.859861][T17112] veth0_vlan: entered promiscuous mode [ 508.881707][T17112] veth1_vlan: entered promiscuous mode [ 508.894028][T17278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2768'. [ 508.925725][ T5837] Bluetooth: hci0: command 0x040f tx timeout [ 509.022191][T17281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2769'. [ 509.072630][T17295] sctp: [Deprecated]: syz.1.2770 (pid 17295) Use of int in maxseg socket option. [ 509.072630][T17295] Use struct sctp_assoc_value instead [ 509.292441][T17112] veth0_macvtap: entered promiscuous mode [ 509.326046][T17112] veth1_macvtap: entered promiscuous mode [ 509.400087][T17112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.426519][T17112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.452485][ T6412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.483217][ T6412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.507628][ T6412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.533045][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 509.548573][ T6412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.729409][T17317] netlink: 'syz.0.2776': attribute type 1 has an invalid length. [ 509.751683][T17317] netlink: 'syz.0.2776': attribute type 2 has an invalid length. [ 509.835700][ T6412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.869284][ T6412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.934269][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.958312][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.154407][T17341] netlink: 'syz.1.2782': attribute type 1 has an invalid length. [ 510.175917][T17341] nbd: error processing sock list [ 510.255294][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 510.270756][T17349] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2784'. [ 510.313701][T17350] netlink: 'syz.5.2785': attribute type 10 has an invalid length. [ 510.348109][T17350] netlink: 'syz.5.2785': attribute type 10 has an invalid length. [ 510.375467][T17350] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2785'. [ 511.004949][ T5837] Bluetooth: hci0: command 0x040f tx timeout [ 511.075685][T17375] lo speed is unknown, defaulting to 1000 [ 513.085681][ T5837] Bluetooth: hci0: command 0x040f tx timeout [ 513.707988][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2794'. [ 513.756270][T17383] tap0: tun_chr_ioctl cmd 1074025677 [ 513.761953][T17383] tap0: linktype set to 0 [ 514.164221][T17412] syzkaller0: entered promiscuous mode [ 514.170252][T17412] syzkaller0: entered allmulticast mode [ 514.566848][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2808'. [ 514.692187][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2810'. [ 514.710239][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2810'. [ 514.721619][T17443] netlink: 1244 bytes leftover after parsing attributes in process `syz.5.2812'. [ 514.732142][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2810'. [ 514.744604][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2810'. [ 515.081743][T17461] tc_dump_action: action bad kind [ 515.815645][T17483] __nla_validate_parse: 236 callbacks suppressed [ 515.815664][T17483] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2826'. [ 515.945268][T17491] net_ratelimit: 44 callbacks suppressed [ 515.945295][T17491] openvswitch: netlink: Missing valid actions attribute. [ 515.961398][T17491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.995176][T17497] veth0_to_bridge: entered promiscuous mode [ 516.015025][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2830'. [ 516.198934][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2834'. [ 516.236559][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2834'. [ 516.539291][T17522] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2836'. [ 516.747343][T17490] veth0_to_bridge: left promiscuous mode [ 516.921410][T17536] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 517.400930][T17569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2848'. [ 517.449858][T17576] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2847'. [ 517.570077][T17583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2850'. [ 517.745193][T17576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.757559][T17576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.769126][T17576] bond0 (unregistering): Released all slaves [ 517.925625][T17600] dvmrp0: entered allmulticast mode [ 518.104278][T17615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2858'. [ 518.138088][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2858'. [ 518.167118][T17620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.199087][T17622] syzkaller1: entered promiscuous mode [ 518.216950][T17622] syzkaller1: entered allmulticast mode [ 518.230669][T17623] syzkaller1: left promiscuous mode [ 518.238559][T17623] syzkaller1: left allmulticast mode [ 518.551903][T17639] x_tables: duplicate underflow at hook 1 [ 518.606781][T17639] bridge_slave_0: left allmulticast mode [ 518.613095][T17639] bridge_slave_0: left promiscuous mode [ 518.627276][T17639] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.643676][T17639] bridge_slave_1: left allmulticast mode [ 518.652671][T17639] bridge_slave_1: left promiscuous mode [ 518.666862][T17639] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.691491][ T30] audit: type=1107 audit(1766671726.034:6): pid=17650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='TÒyoÓUª dZ£×KPnwaXŒQn¯b{—å®gâ‡w‘2÷Hÿ ŽT=ž/šfùÈ« ¬’°fi0`Ïå' [ 518.732176][T17639] bond0: (slave bond_slave_0): Releasing backup interface [ 518.749971][T17639] bond0: (slave bond_slave_1): Releasing backup interface [ 518.777334][T17639] team0: Port device team_slave_0 removed [ 518.791897][T17639] team0: Port device team_slave_1 removed [ 518.800038][T17639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.808620][T17639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.819645][T17639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.829061][T17639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.848707][T17639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 519.029012][T17664] netlink: 'syz.4.2872': attribute type 13 has an invalid length. [ 519.046023][T17664] netlink: 'syz.4.2872': attribute type 17 has an invalid length. [ 519.610888][T17671] lo speed is unknown, defaulting to 1000 [ 519.625074][T17674] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 520.124071][T17709] sch_tbf: burst 0 is lower than device tunl0 mtu (1536) ! [ 520.254958][T17711] netlink: 'syz.0.2885': attribute type 4 has an invalid length. [ 520.336349][ T5902] lo speed is unknown, defaulting to 1000 [ 520.352584][ T5902] syz2: Port: 1 Link DOWN [ 520.590700][T17727] tipc: Failed to remove unknown binding: 66,1,1/4:3796249185/3796249187 [ 520.608372][T17727] tipc: Failed to remove unknown binding: 66,1,1/4:3796249185/3796249187 [ 520.623043][T17727] tipc: Failed to remove unknown binding: 66,1,1/4:3796249185/3796249187 [ 520.843896][T17749] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 520.971105][T17732] lo speed is unknown, defaulting to 1000 [ 522.052584][T17797] tipc: Started in network mode [ 522.058543][T17797] tipc: Node identity b620ba2fc608, cluster identity 4711 [ 522.066321][T17797] tipc: Enabled bearer , priority 0 [ 522.100749][T17795] syzkaller0: entered promiscuous mode [ 522.108160][T17795] syzkaller0: entered allmulticast mode [ 522.117071][T17796] __nla_validate_parse: 4 callbacks suppressed [ 522.117090][T17796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2905'. [ 522.248969][T17796] tipc: Resetting bearer [ 522.282820][T17796] tipc: Disabling bearer [ 522.536214][T17814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 522.842092][T17813] lo speed is unknown, defaulting to 1000 [ 523.236289][T17816] lo speed is unknown, defaulting to 1000 [ 523.309773][T17838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2915'. [ 523.506856][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 523.517654][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 523.527160][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 523.532826][T17847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2917'. [ 523.535231][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 523.553181][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 523.566907][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'. [ 523.670857][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 523.838394][T17850] mac80211_hwsim hwsim38 syzkaller0: Caught tx_queue_len zero misconfig [ 524.399706][T17861] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 524.465322][T17840] lo speed is unknown, defaulting to 1000 [ 524.526421][T17867] veth3: entered promiscuous mode [ 524.739617][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 524.828635][T17889] tipc: Cannot configure node identity twice [ 525.294695][T17840] chnl_net:caif_netlink_parms(): no params data found [ 525.516757][T17920] netlink: 'syz.3.2933': attribute type 6 has an invalid length. [ 525.645622][ T5837] Bluetooth: hci5: command tx timeout [ 525.727498][T17875] lo speed is unknown, defaulting to 1000 [ 525.784383][T17840] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.807520][T17840] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.817528][T17840] bridge_slave_0: entered allmulticast mode [ 525.832324][T17840] bridge_slave_0: entered promiscuous mode [ 525.849085][T17938] tipc: Enabling of bearer rejected, already enabled [ 525.891658][T17840] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.906854][T17840] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.919039][T17840] bridge_slave_1: entered allmulticast mode [ 525.928428][T17840] bridge_slave_1: entered promiscuous mode [ 526.094118][T17840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.126978][T17840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.153031][T17960] netlink: 'syz.5.2941': attribute type 1 has an invalid length. [ 526.334336][ T9] IPVS: starting estimator thread 0... [ 526.409277][T17840] team0: Port device team_slave_0 added [ 526.433869][T17840] team0: Port device team_slave_1 added [ 526.445911][T17969] IPVS: using max 29 ests per chain, 69600 per kthread [ 526.560988][T17974] vxlan0: entered promiscuous mode [ 526.575768][T17974] vxlan0: entered allmulticast mode [ 526.749964][T17840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.758243][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.795048][T17840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.840837][T17840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.855978][T17979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2946'. [ 526.865625][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.919850][T17840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.953762][T17981] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 527.094682][T17840] hsr_slave_0: entered promiscuous mode [ 527.116629][T17840] hsr_slave_1: entered promiscuous mode [ 527.145200][T17840] debugfs: 'hsr0' already exists in 'hsr' [ 527.151357][T17840] Cannot create hsr debugfs directory [ 527.300790][T17985] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 527.582262][T17967] lo speed is unknown, defaulting to 1000 [ 527.725186][ T5837] Bluetooth: hci5: command tx timeout [ 527.816661][T17994] netlink: 'syz.5.2950': attribute type 13 has an invalid length. [ 527.825771][T17997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'. [ 527.862206][T17997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'. [ 527.876920][T17994] bridge0: port 3(gretap0) entered disabled state [ 527.980279][T17994] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.988439][T17994] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.404057][ T8674] wyz1: Port: 1 Link DOWN [ 528.404249][T18000] syzkaller1: entered promiscuous mode [ 528.409219][T17977] lo speed is unknown, defaulting to 1000 [ 528.415737][T18000] syzkaller1: entered allmulticast mode [ 528.430455][ T6436] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.450083][ T6436] netdevsim netdevsim5 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 528.459881][ T6436] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.469620][ T6436] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.481354][ T6436] netdevsim netdevsim5 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 528.510744][ T6436] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.520169][ T6436] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.530199][ T6436] netdevsim netdevsim5 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 528.539823][ T6436] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.549141][ T6436] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.563869][ T6436] netdevsim netdevsim5 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 528.573649][ T6436] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.814172][T18016] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2955'. [ 528.840152][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2955'. [ 528.879665][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2955'. [ 528.893026][T18016] netlink: 'syz.1.2955': attribute type 13 has an invalid length. [ 528.914287][T18016] netlink: 'syz.1.2955': attribute type 12 has an invalid length. [ 528.953412][T18020] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2956'. [ 528.997678][T18020] netlink: 'syz.5.2956': attribute type 1 has an invalid length. [ 529.036445][T18025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2958'. [ 529.083463][T18027] netlink: 'syz.0.2957': attribute type 2 has an invalid length. [ 529.084991][T18025] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2958'. [ 529.102849][T18025] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2958'. [ 529.124826][T17840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 529.134658][T18025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2958'. [ 529.184018][T17840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 529.219498][T17840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 529.291789][T17840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 529.371731][T18033] netlink: 'syz.0.2961': attribute type 1 has an invalid length. [ 529.515506][T18042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.523180][T18042] IPv6: NLM_F_CREATE should be set when creating new route [ 529.524694][T18033] bond4: entered promiscuous mode [ 529.530684][T18042] IPv6: NLM_F_CREATE should be set when creating new route [ 529.536513][T18033] 8021q: adding VLAN 0 to HW filter on device bond4 [ 529.550610][T18042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.616579][T18047] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 529.806529][ T5837] Bluetooth: hci5: command tx timeout [ 529.949527][T18074] netlink: 'syz.1.2966': attribute type 5 has an invalid length. [ 529.967996][T17840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.039588][T17840] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.081817][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.089086][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.140555][T10444] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.148123][T10444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.363675][T18088] tipc: Enabled bearer , priority 0 [ 530.438577][T18095] syzkaller0: entered promiscuous mode [ 530.477789][T18095] syzkaller0: entered allmulticast mode [ 530.551122][T18100] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 530.608071][T18088] tipc: Resetting bearer [ 530.628310][T18096] netlink: 'syz.1.2975': attribute type 13 has an invalid length. [ 530.760000][T18087] tipc: Resetting bearer [ 530.852934][T18087] tipc: Disabling bearer [ 530.890932][T18104] gretap1: entered allmulticast mode [ 530.943403][T17840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.642327][T18157] bond1 (unregistering): Released all slaves [ 531.886106][ T5837] Bluetooth: hci5: command tx timeout [ 534.772069][T17840] veth0_vlan: entered promiscuous mode [ 534.790823][T18173] lo speed is unknown, defaulting to 1000 [ 534.813759][T17840] veth1_vlan: entered promiscuous mode [ 534.923710][T18194] syzkaller0: entered promiscuous mode [ 534.940337][T18194] syzkaller0: entered allmulticast mode [ 535.148032][T17840] veth0_macvtap: entered promiscuous mode [ 535.217210][T17840] veth1_macvtap: entered promiscuous mode [ 535.247851][T17840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.272363][T17840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.337605][ T3537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.360780][ T3537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.380801][ T3537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.429039][ T3537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.453226][T18206] syzkaller1: entered promiscuous mode [ 535.460102][T18206] syzkaller1: entered allmulticast mode [ 535.630151][T18212] __nla_validate_parse: 35 callbacks suppressed [ 535.630170][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3000'. [ 535.702063][ T6412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.729795][ T6412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.771773][T18212] IPVS: Unknown mcast interface: vlan1 [ 535.817800][ T6432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.848430][ T6432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.100389][T18238] sctp: [Deprecated]: syz.4.2914 (pid 18238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.100389][T18238] Use struct sctp_sack_info instead [ 536.105143][T18239] tipc: Cannot configure node identity twice [ 536.182805][T18241] tipc: Enabled bearer , priority 0 [ 536.201297][T18241] syzkaller0: entered promiscuous mode [ 536.210314][T18241] syzkaller0: entered allmulticast mode [ 536.338728][T18246] syzkaller0: mtu less than device minimum [ 536.346915][T18248] netlink: 'syz.4.3009': attribute type 10 has an invalid length. [ 536.370635][T18248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.388456][T18248] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 536.449260][T18240] tipc: Resetting bearer [ 536.478796][T18254] netlink: 'syz.5.3010': attribute type 21 has an invalid length. [ 536.487959][T18254] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3010'. [ 536.505653][T18240] tipc: Disabling bearer [ 536.517521][T18236] lo speed is unknown, defaulting to 1000 [ 536.523652][T18254] netlink: 'syz.5.3010': attribute type 5 has an invalid length. [ 536.525832][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.534546][T18254] netlink: 'syz.5.3010': attribute type 6 has an invalid length. [ 536.555016][T18254] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3010'. [ 536.716131][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3010'. [ 536.765351][T18266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3010'. [ 536.793202][T18266] netlink: 'syz.5.3010': attribute type 10 has an invalid length. [ 537.314710][T18291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3018'. [ 537.334778][T18291] netlink: 'syz.3.3018': attribute type 1 has an invalid length. [ 537.376507][T18267] lo speed is unknown, defaulting to 1000 [ 537.384262][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3018'. [ 537.470961][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 537.481990][T18298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3019'. [ 537.482689][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 537.516024][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 537.524704][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 537.532489][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 537.650163][T18291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'. [ 538.091504][T18318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3022'. [ 538.155231][T18319] netlink: 'syz.4.3022': attribute type 3 has an invalid length. [ 538.658284][T18295] lo speed is unknown, defaulting to 1000 [ 538.659318][T18333] tipc: Started in network mode [ 538.688087][T18333] tipc: Node identity , cluster identity 4711 [ 538.700608][T18333] tipc: Failed to obtain node identity [ 538.732389][T18333] tipc: Enabling of bearer rejected, failed to enable media [ 538.776138][T18339] syzkaller0: entered promiscuous mode [ 538.782039][T18339] syzkaller0: entered allmulticast mode [ 539.096214][ T6436] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.157406][ T6436] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.213680][ T6438] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.260688][ T6436] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.282755][T18355] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 539.566649][ T5841] Bluetooth: hci3: command tx timeout [ 539.800220][T18383] x_tables: duplicate entry at hook 2 [ 539.815636][ T6428] batman_adv: batadv0: Removing interface: gretap2 [ 539.869927][ T6428] dvmrp0 (unregistering): left allmulticast mode [ 540.647094][ T6428] bond0 (unregistering): (slave 32): Releasing backup interface [ 540.658179][ T6428] : left promiscuous mode [ 540.662835][ T6428] : left allmulticast mode [ 540.668975][ T6428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.678197][ T6428] bond_slave_1: left promiscuous mode [ 540.683886][ T6428] bond_slave_1: left allmulticast mode [ 540.691290][ T6428] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 540.702136][ T6428] dummy0: left promiscuous mode [ 540.707657][ T6428] dummy0: left allmulticast mode [ 540.717677][ T6428] bond0 (unregistering): Released all slaves [ 540.877479][ T6428] bond1 (unregistering): Released all slaves [ 541.003091][ T6428] bond2 (unregistering): Released all slaves [ 541.134711][ T6428] bond3 (unregistering): (slave veth1): Releasing backup interface [ 541.142661][ T6428] veth1: left promiscuous mode [ 541.148538][ T6428] bond3 (unregistering): Released all slaves [ 541.276684][ T6428] bond4 (unregistering): Released all slaves [ 541.306151][T18379] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 541.453872][ T6428] tipc: Left network mode [ 541.526930][T18391] __nla_validate_parse: 2 callbacks suppressed [ 541.526951][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'. [ 541.542450][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3043'. [ 541.649100][ T5841] Bluetooth: hci3: command tx timeout [ 541.735694][T18403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3047'. [ 541.787122][T18295] chnl_net:caif_netlink_parms(): no params data found [ 541.798219][T18403] Cannot find del_set index 4 as target [ 541.877421][T18407] batadv_slave_1: entered promiscuous mode [ 542.105176][T18412] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 542.117750][T18412] bond1 (unregistering): Released all slaves [ 542.152019][T18402] batadv_slave_1: left promiscuous mode [ 542.306516][T18421] openvswitch: netlink: IP tunnel dst address not specified [ 542.443083][T18295] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.453816][T18295] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.461575][T18295] bridge_slave_0: entered allmulticast mode [ 542.471289][T18295] bridge_slave_0: entered promiscuous mode [ 542.495558][T18295] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.513303][T18295] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.531207][T18295] bridge_slave_1: entered allmulticast mode [ 542.572397][T18295] bridge_slave_1: entered promiscuous mode [ 542.702223][T18444] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 542.722281][T18295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.728740][T18445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3056'. [ 542.741293][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'. [ 542.752329][T18443] netlink: 'syz.5.3057': attribute type 27 has an invalid length. [ 542.763597][T18295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.866782][T18452] netlink: 'syz.5.3057': attribute type 39 has an invalid length. [ 542.901298][T18444] bond10: entered promiscuous mode [ 542.932375][T18444] bond10: entered allmulticast mode [ 542.939812][T18444] 8021q: adding VLAN 0 to HW filter on device bond10 [ 542.949397][T18445] gre0: entered promiscuous mode [ 542.962384][T18446] erspan1: entered allmulticast mode [ 542.971236][T18446] bond10: (slave erspan1): making interface the new active one [ 542.979111][T18446] erspan1: entered promiscuous mode [ 542.987814][T18446] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 543.026860][ T6428] hsr_slave_0: left promiscuous mode [ 543.033132][ T6428] hsr_slave_1: left promiscuous mode [ 543.070463][ T6428] pimreg (unregistering): left allmulticast mode [ 543.163588][ T6428] pimreg3 (unregistering): left allmulticast mode [ 543.328507][ T6428] team0 (unregistering): Port device team_slave_1 removed [ 543.375785][ T6428] team0 (unregistering): Port device team_slave_0 removed [ 543.468918][T18441] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 543.533246][T18457] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20000 [ 543.724732][ T5841] Bluetooth: hci3: command tx timeout [ 544.013680][T18295] team0: Port device team_slave_0 added [ 544.030542][T18464] lo: Caught tx_queue_len zero misconfig [ 544.091914][T18472] netlink: 'syz.5.3061': attribute type 1 has an invalid length. [ 544.094191][T18295] team0: Port device team_slave_1 added [ 544.208311][T18472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.233332][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3061'. [ 544.254770][T18474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.269310][T18474] bond0: (slave batadv0): making interface the new active one [ 544.299433][T18474] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 544.780106][T18472] bond0 (unregistering): (slave batadv0): Releasing active interface [ 544.792168][T18472] bond0 (unregistering): Released all slaves [ 544.819719][T18295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.829673][T18295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.885016][T18295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.898294][T18295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.906475][T18295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.946154][T18295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.055164][T18503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3067'. [ 545.083667][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3068'. [ 545.133715][T18295] hsr_slave_0: entered promiscuous mode [ 545.157156][T18295] hsr_slave_1: entered promiscuous mode [ 545.173950][T18295] debugfs: 'hsr0' already exists in 'hsr' [ 545.186675][T18295] Cannot create hsr debugfs directory [ 545.263657][T18509] netlink: 'syz.5.3070': attribute type 1 has an invalid length. [ 545.300863][T18509] netlink: 'syz.5.3070': attribute type 4 has an invalid length. [ 545.321015][T18509] netlink: 15538 bytes leftover after parsing attributes in process `syz.5.3070'. [ 545.435984][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 545.507542][T18516] netlink: zone id is out of range [ 545.575183][T18518] netlink: zone id is out of range [ 545.587191][T18518] netlink: zone id is out of range [ 545.592926][T18518] netlink: set zone limit has 8 unknown bytes [ 545.621771][T18518] geneve1: Caught tx_queue_len zero misconfig [ 545.666849][T18295] netdevsim netdevsim0 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.781300][T18522] netlink: 'syz.4.3076': attribute type 3 has an invalid length. [ 545.815006][ T5841] Bluetooth: hci3: command tx timeout [ 545.825209][T18295] netdevsim netdevsim0 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.929630][T18295] netdevsim netdevsim0 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.014067][T18295] netdevsim netdevsim0 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.313324][T18295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 546.356482][T18295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 546.392127][T18295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 546.419357][T18295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 546.495752][T18551] netlink: 'syz.5.3084': attribute type 4 has an invalid length. [ 546.611874][ T6428] IPVS: stop unused estimator thread 0... [ 546.832226][T18295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.897519][T18295] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.940869][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.949906][ T6428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.013977][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.021718][ T6428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.621753][T18581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.768382][T18590] __nla_validate_parse: 5 callbacks suppressed [ 547.768399][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'. [ 547.828546][T18295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.071876][T18295] veth0_vlan: entered promiscuous mode [ 548.280483][T18600] syzkaller0: entered promiscuous mode [ 548.286504][T18600] syzkaller0: entered allmulticast mode [ 548.307508][T18606] ip6tnl0: Caught tx_queue_len zero misconfig [ 548.359532][T18295] veth1_vlan: entered promiscuous mode [ 548.461364][T18295] veth0_macvtap: entered promiscuous mode [ 548.496982][T18295] veth1_macvtap: entered promiscuous mode [ 548.551384][T18295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.580550][T18295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.622293][ T6438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.654668][ T6438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.679996][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3099'. [ 548.686306][ T6438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.725400][T18623] chnl_net:caif_netlink_parms(): no params data found [ 548.836751][ T6438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.011854][T18630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3100'. [ 549.021085][T18630] netlink: 'syz.4.3100': attribute type 1 has an invalid length. [ 549.070472][ T6425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.104933][ T6425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.246058][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.253924][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.334123][T18644] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3104'. [ 549.385806][T18650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3105'. [ 549.739951][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3106'. [ 550.040010][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.052721][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.063146][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.073433][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.081428][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 550.171939][T18689] Bluetooth: MGMT ver 1.23 [ 550.454623][T18680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3110'. [ 550.473883][T18680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3110'. [ 550.687720][T18707] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3115'. [ 550.957248][T18707] "syz.5.3115" (18707) uses obsolete ecb(arc4) skcipher [ 550.977505][T18722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3118'. [ 551.045960][T18726] veth1_macvtap: entered allmulticast mode [ 551.212456][T18732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.219677][T18736] netlink: 'syz.0.3123': attribute type 1 has an invalid length. [ 551.797593][T18677] chnl_net:caif_netlink_parms(): no params data found [ 551.852915][T18774] syzkaller1: entered promiscuous mode [ 551.864354][T18774] syzkaller1: entered allmulticast mode [ 551.941097][T18774] syzkaller1: left promiscuous mode [ 551.946823][T18774] syzkaller1: left allmulticast mode [ 552.125819][ T5841] Bluetooth: hci1: command tx timeout [ 552.160584][T18677] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.168678][T18677] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.176603][T18677] bridge_slave_0: entered allmulticast mode [ 552.184350][T18677] bridge_slave_0: entered promiscuous mode [ 552.214310][T18793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.223944][T18677] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.235208][T18677] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.243426][T18677] bridge_slave_1: entered allmulticast mode [ 552.253630][T18677] bridge_slave_1: entered promiscuous mode [ 552.330214][T18677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.343866][T18677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.420116][T18677] team0: Port device team_slave_0 added [ 552.458018][T18677] team0: Port device team_slave_1 added [ 552.765566][T18821] netlink: 'syz.5.3139': attribute type 3 has an invalid length. [ 552.832417][T18807] team0 (unregistering): Port device team_slave_0 removed [ 552.846711][T18807] team0 (unregistering): Port device team_slave_1 removed [ 552.908217][T18677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.934959][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.965228][T18677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.015820][T18828] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 553.056918][T18677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.063901][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.144868][T18677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.501394][T18853] __nla_validate_parse: 5 callbacks suppressed [ 553.501412][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3148'. [ 553.603267][T18677] hsr_slave_0: entered promiscuous mode [ 553.625878][T18677] hsr_slave_1: entered promiscuous mode [ 553.719864][T18677] debugfs: 'hsr0' already exists in 'hsr' [ 553.729917][T18862] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3149'. [ 553.750366][T18677] Cannot create hsr debugfs directory [ 553.758393][T18836] netlink: 'syz.5.3141': attribute type 1 has an invalid length. [ 553.839481][T18862] team0: Mode changed to "loadbalance" [ 554.205948][ T5841] Bluetooth: hci1: command tx timeout [ 554.262789][T18881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.290676][T18887] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3159'. [ 554.378473][T18677] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.450978][T18884] vxcan3: entered promiscuous mode [ 554.524352][T18897] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 554.534232][T18897] bridge2: entered allmulticast mode [ 554.587392][T18677] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.706207][T18677] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.832025][T18920] netlink: 'syz.0.3168': attribute type 4 has an invalid length. [ 554.832307][T18677] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.925478][T18925] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3169'. [ 555.035789][T18939] Bluetooth: MGMT ver 1.23 [ 555.147964][T18942] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3174'. [ 555.192563][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3174'. [ 555.209807][T18946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3175'. [ 555.426724][T18677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 555.459683][T18677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 555.542892][T18677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 555.576807][T18677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 555.888417][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 555.903928][T18677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.934219][T18977] syzkaller0: entered promiscuous mode [ 555.943652][T18977] syzkaller0: entered allmulticast mode [ 556.027369][T18677] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.065969][T10444] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.073134][T10444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.110874][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.118891][ T6438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.215522][T18991] tipc: Enabled bearer , priority 0 [ 556.276061][T18992] tipc: Enabling of bearer rejected, already enabled [ 556.285047][ T5841] Bluetooth: hci1: command tx timeout [ 556.372853][T18997] syzkaller0: entered promiscuous mode [ 556.380841][T18997] syzkaller0: entered allmulticast mode [ 556.388019][T18997] tipc: Resetting bearer [ 556.449198][T18997] tipc: Resetting bearer [ 556.990546][T19023] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 2621 [ 558.373923][ T5841] Bluetooth: hci1: command tx timeout [ 558.750361][T18997] tipc: Disabling bearer [ 558.817598][ T5895] tipc: Node number set to 1881717295 [ 561.758277][T18677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.791434][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3195'. [ 561.873592][T18677] veth0_vlan: entered promiscuous mode [ 561.892522][T18677] veth1_vlan: entered promiscuous mode [ 561.981730][T18677] veth0_macvtap: entered promiscuous mode [ 562.102447][T18677] veth1_macvtap: entered promiscuous mode [ 562.122639][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 562.153523][T18677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.187488][T18677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.222608][ T6407] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.233422][ T6407] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.250481][ T6407] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.269362][ T6407] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.291840][T19073] netlink: 'syz.5.3199': attribute type 33 has an invalid length. [ 562.305925][T19073] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3199'. [ 562.562046][ T6425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.580690][ T6425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.619578][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 562.643126][ T6407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.665002][ T6407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.388753][T19117] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 563.924227][T19135] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3214'. [ 564.960780][ T5895] IPVS: starting estimator thread 0... [ 565.060713][T19176] IPVS: using max 29 ests per chain, 69600 per kthread [ 565.095987][T19181] sctp: [Deprecated]: syz.1.3225 (pid 19181) Use of int in max_burst socket option. [ 565.095987][T19181] Use struct sctp_assoc_value instead [ 566.016956][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3227'. [ 566.026905][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3227'. [ 567.746401][T19225] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3235'. [ 567.763366][T19225] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3235'. [ 568.653467][T19267] ip6t_srh: unknown srh invflags BA61 [ 569.242830][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3258'. [ 569.438532][T19328] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3262'. [ 569.461893][T19328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3262'. [ 569.665318][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3264'. [ 569.674842][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3264'. [ 570.118347][T19355] syzkaller0: refused to change device tx_queue_len [ 570.166028][T19359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3272'. [ 570.206329][T19358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3272'. [ 570.315963][T19361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.332060][T19396] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3281'. [ 572.203202][ T3537] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 572.238629][T19427] netlink: 'syz.0.3288': attribute type 1 has an invalid length. [ 572.259552][T19427] netlink: 'syz.0.3288': attribute type 1 has an invalid length. [ 573.485960][T19464] __nla_validate_parse: 2 callbacks suppressed [ 573.485979][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3296'. [ 573.513418][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3296'. [ 573.526616][T19455] syzkaller0: entered promiscuous mode [ 573.533499][T19455] syzkaller0: entered allmulticast mode [ 573.587752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.661834][T19470] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3298'. [ 573.672352][T19470] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 573.866077][T19479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3300'. [ 574.162673][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3303'. [ 574.187993][T19487] netlink: 'syz.4.3304': attribute type 4 has an invalid length. [ 574.556495][T19500] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 574.593926][T19500] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 574.636288][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 574.676011][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 574.699671][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 574.722721][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 574.866802][T19515] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3310'. [ 575.748821][T19530] syz_tun: entered allmulticast mode [ 575.839293][T19531] syz_tun: left allmulticast mode [ 576.284158][T19554] pim6reg1: entered promiscuous mode [ 576.306984][T19554] pim6reg1: entered allmulticast mode [ 576.327844][T19559] netlink: 'syz.1.3325': attribute type 1 has an invalid length. [ 576.400148][T19567] Cannot find add_set index 2 as target [ 576.517003][T19559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.545238][T19561] tc_dump_action: action bad kind [ 576.608003][T19575] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 576.631136][T19581] Bluetooth: MGMT ver 1.23 [ 576.662872][T19581] geneve2: entered promiscuous mode [ 577.459531][T19600] xt_hashlimit: size too large, truncated to 1048576 [ 577.488329][T19600] xt_hashlimit: max too large, truncated to 1048576 [ 577.745685][T19618] veth0_to_bridge: entered promiscuous mode [ 577.765745][T19618] veth0_to_bridge: left promiscuous mode [ 578.170698][T19632] tipc: Resetting bearer [ 578.274186][T19635] tipc: Resetting bearer [ 578.423094][T19648] tipc: Enabling of bearer rejected, already enabled [ 578.690577][T19665] __nla_validate_parse: 4 callbacks suppressed [ 578.690596][T19665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3354'. [ 578.769739][T19665] netlink: 'syz.5.3354': attribute type 1 has an invalid length. [ 579.035877][T19671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3356'. [ 579.381047][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3357'. [ 579.650576][T19684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3360'. [ 579.727959][T19688] netlink: 212188 bytes leftover after parsing attributes in process `syz.0.3362'. [ 580.175200][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3368'. [ 580.194953][T19712] netlink: 'syz.0.3369': attribute type 2 has an invalid length. [ 580.202977][T19712] netlink: 'syz.0.3369': attribute type 8 has an invalid length. [ 580.222435][T19712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3369'. [ 580.225486][T19705] netlink: 'syz.3.3367': attribute type 13 has an invalid length. [ 580.519607][T19719] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3370'. [ 581.179747][ T72] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.201854][ T72] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.283170][T19745] netlink: 'syz.0.3376': attribute type 10 has an invalid length. [ 581.295079][T19744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3376'. [ 581.329789][ T72] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.351053][T19749] netlink: 'syz.3.3377': attribute type 10 has an invalid length. [ 581.353620][T19745] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.367023][T19745] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.415108][T19745] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.423027][T19745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.431071][T19745] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.439086][T19745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.491294][T19745] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 581.515881][ T72] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.535812][T19749] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 581.570324][T19749] bond0: (slave lo): Enslaving as an active interface with an up link [ 581.688348][T19761] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3379'. [ 583.022973][T19836] Cannot find set identified by id 65535 to match [ 583.031064][T19836] Cannot find set identified by id 65535 to match [ 583.181632][T19824] netlink: 'syz.4.3393': attribute type 11 has an invalid length. [ 583.191515][T19824] netlink: 'syz.4.3393': attribute type 11 has an invalid length. [ 584.052931][T19880] __nla_validate_parse: 4 callbacks suppressed [ 584.052949][T19880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3410'. [ 584.081827][T19880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3410'. [ 584.349579][T19889] netlink: 'syz.0.3413': attribute type 9 has an invalid length. [ 584.741873][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3421'. [ 584.789833][T19918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3422'. [ 584.807211][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3420'. [ 584.863852][T19914] netlink: 'syz.4.3421': attribute type 1 has an invalid length. [ 584.873229][T19914] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3421'. [ 585.123983][T19913] lec:lec_atm_close: lec0: Shut down! [ 585.481554][T19946] netlink: 'syz.3.3428': attribute type 32 has an invalid length. [ 585.508160][ T5841] Bluetooth: hci1: command tx timeout [ 585.514588][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'. [ 585.584027][T19946] bond1: option coupled_control: invalid value (17) [ 585.626307][T19946] bond1 (unregistering): Released all slaves [ 586.031284][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3434'. [ 586.550491][T19984] xt_hashlimit: max too large, truncated to 1048576 [ 586.659137][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3441'. [ 586.723474][T19989] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3441'. [ 586.742899][T19989] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 586.803819][T20000] syzkaller0: entered promiscuous mode [ 586.810440][T20000] syzkaller0: entered allmulticast mode [ 587.413460][T20037] chnl_net:caif_netlink_parms(): no params data found [ 587.529663][T20037] chnl_net:caif_netlink_parms(): no params data found [ 587.638574][T20037] chnl_net:caif_netlink_parms(): no params data found [ 587.716478][T20051] tipc: Enabled bearer , priority 0 [ 587.742300][T20048] tipc: Disabling bearer [ 587.753975][T20037] chnl_net:caif_netlink_parms(): no params data found [ 587.827045][T20037] chnl_net:caif_netlink_parms(): no params data found [ 587.873419][T20064] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 587.924142][T20060] syzkaller0: entered promiscuous mode [ 587.930240][T20060] syzkaller0: entered allmulticast mode [ 587.943027][T20037] chnl_net:caif_netlink_parms(): no params data found [ 587.981378][T20060] netlink: 'syz.0.3462': attribute type 16 has an invalid length. [ 587.989820][T20060] netlink: 'syz.0.3462': attribute type 17 has an invalid length. [ 587.997857][T20060] netlink: 'syz.0.3462': attribute type 27 has an invalid length. [ 588.017028][T20065] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.029145][T20065] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.074056][T20037] chnl_net:caif_netlink_parms(): no params data found [ 588.138931][T20070] : entered promiscuous mode [ 590.093884][T20037] chnl_net:caif_netlink_parms(): no params data found [ 590.319718][T20091] __nla_validate_parse: 12 callbacks suppressed [ 590.319799][T20091] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3471'. [ 590.486987][T20108] netlink: 'syz.0.3477': attribute type 3 has an invalid length. [ 590.512299][T20108] syz_tun: entered allmulticast mode [ 590.602663][T20108] siw: device registration error -23 [ 590.665569][T20108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.717019][T20107] syz_tun: left allmulticast mode [ 591.451705][T20135] netlink: 'syz.3.3480': attribute type 4 has an invalid length. [ 591.477723][T20135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3480'. [ 591.556766][T20140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3480'. [ 591.611824][T20141] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 591.625865][T20141] bond2 (unregistering): Released all slaves [ 591.799485][T20151] netlink: 'syz.0.3484': attribute type 1 has an invalid length. [ 591.811209][T20151] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3484'. [ 591.834390][T20151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3484'. [ 591.845830][T20154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3484'. [ 591.894900][T20159] 8021q: VLANs not supported on vcan0 [ 592.103157][T20168] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 592.259442][T20176] tipc: Started in network mode [ 592.270373][T20176] tipc: Node identity 6eaf73c9561f, cluster identity 4711 [ 592.283677][T20176] tipc: Enabled bearer , priority 0 [ 592.307722][T20174] syzkaller0: entered promiscuous mode [ 592.313330][T20174] syzkaller0: entered allmulticast mode [ 592.335632][T20173] tipc: Resetting bearer [ 592.401051][T20173] tipc: Disabling bearer [ 592.522737][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3492'. [ 592.942203][T20187] hsr_slave_1 (unregistering): left promiscuous mode [ 593.449361][T20208] gre0: entered promiscuous mode [ 593.465840][T20208] gre0: entered allmulticast mode [ 593.726419][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3500'. [ 593.761220][T20229] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 593.771906][T20230] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3501'. [ 593.960270][T20229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.969497][T20234] erspan0: entered allmulticast mode [ 594.022871][T20234] bond1: (slave erspan0): making interface the new active one [ 594.048723][T20234] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 594.131053][T20241] syzkaller1: entered promiscuous mode [ 594.138729][T20241] syzkaller1: entered allmulticast mode [ 594.185763][T20241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3504'. [ 594.230749][T20244] geneve3: entered promiscuous mode [ 594.252212][T20244] geneve3: entered allmulticast mode [ 594.317900][ T6419] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.349328][ T6419] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.375448][ T6419] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.395783][ T6419] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.444364][T20250] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 594.970208][T20279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.367714][T20302] __nla_validate_parse: 4 callbacks suppressed [ 595.367728][T20302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3520'. [ 595.506978][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3524'. [ 595.566292][T20313] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3520'. [ 595.863907][T20335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3529'. [ 595.907667][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3531'. [ 595.950511][T20335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.072350][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3528'. [ 596.102855][T20339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3528'. [ 596.134346][T20351] Cannot find add_set index 4 as target [ 596.150072][T20351] smc: removing ib device syz0 [ 596.370975][T20365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3535'. [ 596.380424][T20365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3535'. [ 596.394522][T20365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3535'. [ 596.421602][T20360] netlink: 'syz.0.3535': attribute type 8 has an invalid length. [ 596.570934][T20376] netlink: 'syz.3.3539': attribute type 33 has an invalid length. [ 596.984147][T10444] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 597.026518][ T5902] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 597.036207][T10444] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 597.084042][T20389] pimreg: entered allmulticast mode [ 597.116310][T20389] pimreg: left allmulticast mode [ 597.577266][ T41] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 597.850464][T20395] netlink: 'syz.1.3545': attribute type 3 has an invalid length. [ 598.045626][ T41] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 598.692222][T20432] syzkaller0: entered promiscuous mode [ 598.704895][T20432] syzkaller0: entered allmulticast mode [ 598.875286][T20436] batman_adv: batadv0: Adding interface: dummy0 [ 598.882576][T20436] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.940849][T20436] batman_adv: batadv0: Interface activated: dummy0 [ 598.985769][T20439] batadv0: mtu less than device minimum [ 598.993966][T20439] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.006716][T20439] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.018955][T20439] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.032435][T20439] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.045084][T20439] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.057597][T20439] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 599.250382][T20453] tipc: Started in network mode [ 599.265725][T20453] tipc: Node identity 3a789797e3e3, cluster identity 4711 [ 599.275536][T20453] tipc: Enabled bearer , priority 0 [ 599.328446][T20453] tipc: Disabling bearer [ 599.370456][T20458] xt_CT: No such helper "snmp_trap" [ 599.379312][T20462] netlink: 'syz.5.3560': attribute type 4 has an invalid length. [ 599.929908][T20495] siw: device registration error -23 [ 599.959496][T20495] siw: device registration error -23 [ 599.972241][T20498] syzkaller0: entered promiscuous mode [ 599.989316][T20498] syzkaller0: entered allmulticast mode [ 600.121527][T20512] netlink: 'syz.1.3573': attribute type 13 has an invalid length. [ 600.121527][T20514] netlink: 'syz.1.3573': attribute type 13 has an invalid length. [ 600.486503][T20526] __nla_validate_parse: 3 callbacks suppressed [ 600.486521][T20526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3577'. [ 600.534656][T20526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3577'. [ 600.584645][T20526] erspan0: entered promiscuous mode [ 600.604680][T20526] erspan0: left promiscuous mode [ 600.828268][T20544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3581'. [ 600.868024][T20544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3581'. [ 601.020553][T20551] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3584'. [ 601.324649][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 601.517751][T20565] Bluetooth: MGMT ver 1.23 [ 602.253686][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3595'. [ 602.287123][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3595'. [ 602.394546][T20605] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3595'. [ 602.404605][T20606] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3595'. [ 602.416837][T20613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3597'. [ 602.561731][T20617] netlink: 'syz.5.3598': attribute type 10 has an invalid length. [ 602.901832][T20631] netlink: 'syz.5.3604': attribute type 21 has an invalid length. [ 602.926667][T20632] netlink: 'syz.5.3604': attribute type 21 has an invalid length. [ 603.177962][T20651] net_ratelimit: 13 callbacks suppressed [ 603.177991][T20651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.202877][T20649] netlink: 'syz.5.3610': attribute type 3 has an invalid length. [ 603.247871][T20649] siw: device registration error -23 [ 603.303338][T20649] bridge0: port 3(gretap0) entered blocking state [ 603.310092][T20649] bridge0: port 3(gretap0) entered listening state [ 603.343204][T20649] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.361157][T20649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.615674][T20670] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 604.076603][T20683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.924936][T20728] : renamed from bond_slave_0 (while UP) [ 606.091936][T20771] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 606.162112][T20776] syzkaller1: entered promiscuous mode [ 606.169221][T20776] syzkaller1: entered allmulticast mode [ 606.405437][T20789] __nla_validate_parse: 8 callbacks suppressed [ 606.405457][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3648'. [ 606.668431][T20802] netlink: 'syz.5.3653': attribute type 1 has an invalid length. [ 606.777093][T20802] bond8: (slave veth15): Enslaving as an active interface with a down link [ 606.830237][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3655'. [ 607.617463][T20831] tipc: Enabled bearer , priority 0 [ 607.642548][T20836] syzkaller0: entered promiscuous mode [ 607.652948][T20836] syzkaller0: entered allmulticast mode [ 607.695564][T20839] tipc: Resetting bearer [ 607.712450][T20830] tipc: Resetting bearer [ 607.732324][T20830] tipc: Disabling bearer [ 607.743013][T20837] syzkaller1: entered promiscuous mode [ 607.748897][T20837] syzkaller1: entered allmulticast mode [ 608.276678][T20863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 608.288006][T20863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 608.297275][T20863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 608.307242][T20863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 608.317084][T20863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 608.737508][ T9] IPVS: starting estimator thread 0... [ 608.763655][T20874] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3674'. [ 608.829214][T20861] chnl_net:caif_netlink_parms(): no params data found [ 608.847684][T20875] IPVS: using max 33 ests per chain, 79200 per kthread [ 608.852928][ T5837] Bluetooth: hci1: command 0x0405 tx timeout [ 609.171477][T20861] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.191225][T20861] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.205447][T20861] bridge_slave_0: entered allmulticast mode [ 609.227255][T20861] bridge_slave_0: entered promiscuous mode [ 609.249917][T20861] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.260718][T20861] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.269005][T20861] bridge_slave_1: entered allmulticast mode [ 609.283212][T20861] bridge_slave_1: entered promiscuous mode [ 609.316096][T20889] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3678'. [ 609.326032][T20889] tipc: Invalid UDP bearer configuration [ 609.326081][T20889] tipc: Enabling of bearer rejected, failed to enable media [ 609.381599][T20861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.403107][T20861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.521139][T20861] team0: Port device team_slave_0 added [ 609.545724][T20897] syzkaller0: entered promiscuous mode [ 609.551268][T20897] syzkaller0: entered allmulticast mode [ 609.570425][T20861] team0: Port device team_slave_1 added [ 609.596907][T20897] Bluetooth: MGMT ver 1.23 [ 609.674177][T20902] xt_CT: No such helper "snmp_trap" [ 609.690201][T20861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.700761][T20861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.727512][T20861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.740419][T20861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.749920][T20861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.780777][T20906] netlink: 'syz.0.3681': attribute type 39 has an invalid length. [ 609.790247][T20861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.943690][T20861] hsr_slave_0: entered promiscuous mode [ 609.960112][T20861] hsr_slave_1: entered promiscuous mode [ 609.967858][T20861] debugfs: 'hsr0' already exists in 'hsr' [ 609.973616][T20861] Cannot create hsr debugfs directory [ 610.012428][T20915] pimreg1: tun_chr_ioctl cmd 2147767520 [ 610.021845][T20919] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3684'. [ 610.124947][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 610.187086][T20861] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.286784][T20861] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.367407][ T5841] Bluetooth: hci2: command tx timeout [ 610.381991][T20861] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.479089][T20861] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.661097][T20861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 610.705998][T20861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 610.729999][T20861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 610.743377][T20861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 610.992362][T20861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.050859][T20861] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.072101][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.079555][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.113025][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.115487][T20955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3691'. [ 611.120249][ T6425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.132299][T20955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3691'. [ 611.577682][T20865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 611.598564][T20865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 611.610360][T20865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 611.618870][T20865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 611.626863][T20865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 611.650080][ T5837] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 611.681490][T20861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.222897][T20969] chnl_net:caif_netlink_parms(): no params data found [ 612.447365][ T5837] Bluetooth: hci2: command 0x041b tx timeout [ 612.525340][T20969] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.532505][T20969] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.554893][T20969] bridge_slave_0: entered allmulticast mode [ 612.563309][T20969] bridge_slave_0: entered promiscuous mode [ 612.581324][T20969] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.588933][T20969] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.597004][T20969] bridge_slave_1: entered allmulticast mode [ 612.607046][T20969] bridge_slave_1: entered promiscuous mode [ 612.692925][T20969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.718651][T20969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.786258][T20969] team0: Port device team_slave_0 added [ 612.802155][T20969] team0: Port device team_slave_1 added [ 612.819510][T20861] veth0_vlan: entered promiscuous mode [ 612.850937][T20969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.862764][T20969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.891511][T20969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.907560][T20969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.915663][T20969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.926606][T20999] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3699'. [ 612.944163][T20969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.026793][T20969] hsr_slave_0: entered promiscuous mode [ 613.037071][T20969] hsr_slave_1: entered promiscuous mode [ 613.043786][T20969] debugfs: 'hsr0' already exists in 'hsr' [ 613.052135][T20969] Cannot create hsr debugfs directory [ 613.064904][T20861] veth1_vlan: entered promiscuous mode [ 613.097592][T21006] tipc: Invalid UDP bearer configuration [ 613.097645][T21006] tipc: Enabling of bearer rejected, failed to enable media [ 613.153495][T21006] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 613.267562][T21008] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3702'. [ 613.317124][T20861] veth0_macvtap: entered promiscuous mode [ 613.328997][T20861] veth1_macvtap: entered promiscuous mode [ 613.383655][T20861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.425214][T20861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.458698][ T1148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.480585][ T1148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.491998][T20969] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 613.505259][ T1148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.514343][ T1148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.541501][T20969] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 613.599631][T20969] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 613.627710][T20969] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 613.703550][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.734621][ T5837] Bluetooth: hci4: command tx timeout [ 613.743108][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.802776][T21024] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3706'. [ 613.812802][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.829183][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.006840][T20969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.040243][T21036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3708'. [ 614.066473][T20969] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.097802][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.105584][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.147026][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.154261][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.167687][T21034] syz_tun: entered allmulticast mode [ 614.204395][T21046] syzkaller0: entered promiscuous mode [ 614.205975][T21034] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3670'. [ 614.223499][T21046] syzkaller0: entered allmulticast mode [ 614.415044][T21034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.428892][T21034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.441040][T21034] bond0 (unregistering): Released all slaves [ 614.467933][T21060] netlink: 'syz.0.3710': attribute type 1 has an invalid length. [ 614.524898][ T5837] Bluetooth: hci2: command 0x041b tx timeout [ 614.558719][T21046] bond3: (slave bridge1): making interface the new active one [ 614.569252][T21046] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 614.582699][T21033] syz_tun: left allmulticast mode [ 614.966117][T20969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.110231][T21084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3717'. [ 615.141516][T21084] netlink: zone id is out of range [ 615.147559][T21084] netlink: zone id is out of range [ 615.152868][T21084] netlink: zone id is out of range [ 615.175023][T21084] netlink: zone id is out of range [ 615.180404][T21084] netlink: zone id is out of range [ 615.205725][T21084] netlink: zone id is out of range [ 615.218530][T21084] netlink: zone id is out of range [ 615.231885][T21087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3718'. [ 615.241901][T21084] netlink: zone id is out of range [ 615.242283][T21084] netlink: zone id is out of range [ 615.580041][T20969] veth0_vlan: entered promiscuous mode [ 615.731445][T20969] veth1_vlan: entered promiscuous mode [ 615.805143][ T5837] Bluetooth: hci4: command tx timeout [ 615.856338][T20969] veth0_macvtap: entered promiscuous mode [ 615.879790][T20969] veth1_macvtap: entered promiscuous mode [ 615.946549][T20969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.963322][T21108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3722'. [ 615.982536][T20969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.017574][ T1094] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.034800][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3721'. [ 616.045771][T21109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3721'. [ 616.128374][ T1094] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.164729][ T1094] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.183121][T21118] netlink: 'syz.0.3725': attribute type 29 has an invalid length. [ 616.194734][T21118] netlink: 'syz.0.3725': attribute type 29 has an invalid length. [ 616.206807][ T1094] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.438909][ T6412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.468118][ T6412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.550909][ T5972] hid-generic 0005:0C45:1013.0001: ignoring exceeding usage max [ 616.571612][T10442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.581581][ T5972] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x4 [ 616.590455][T10442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.601645][ T5972] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x5 [ 616.609979][ T5837] Bluetooth: hci2: command 0x041b tx timeout [ 616.618223][ T5972] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 616.627894][ T5972] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 616.636571][ T5972] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 616.645129][ T5972] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 616.654541][ T5972] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 616.662909][ T5972] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 616.672388][ T5972] hid-generic 0005:0C45:1013.0001: unknown main item tag 0x0 [ 616.691919][ T5972] hid-generic 0005:0C45:1013.0001: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 617.211849][T21153] ipvlan1: entered promiscuous mode [ 617.219230][T21153] ipvlan1: entered allmulticast mode [ 617.228651][T21153] veth0_vlan: entered allmulticast mode [ 617.471518][T21176] lo: Caught tx_queue_len zero misconfig [ 617.881529][T21195] sctp: [Deprecated]: syz.1.3745 (pid 21195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.881529][T21195] Use struct sctp_sack_info instead [ 617.905419][ T5837] Bluetooth: hci4: command tx timeout [ 618.111367][T21211] __nla_validate_parse: 9 callbacks suppressed [ 618.111386][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3748'. [ 618.241236][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3748'. [ 618.283070][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3749'. [ 618.445862][ C0] bridge0: port 3(gretap0) entered learning state [ 618.580973][T21234] net_ratelimit: 45 callbacks suppressed [ 618.580993][T21234] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 618.695683][ T5837] Bluetooth: hci2: command 0x041b tx timeout [ 618.904298][T21243] syzkaller0: entered promiscuous mode [ 618.911137][T21243] syzkaller0: entered allmulticast mode [ 619.988534][ T5837] Bluetooth: hci4: command tx timeout [ 620.251416][T20865] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 620.304027][T20865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 620.336413][T20865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 620.352026][T20865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 620.360056][T20865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 621.551409][T21259] netlink: 'syz.5.3758': attribute type 12 has an invalid length. [ 621.559697][T21259] netlink: 'syz.5.3758': attribute type 29 has an invalid length. [ 621.571149][T21259] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3758'. [ 621.585129][T21259] netlink: 59 bytes leftover after parsing attributes in process `syz.5.3758'. [ 622.220806][T21263] chnl_net:caif_netlink_parms(): no params data found [ 622.402330][T21263] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.411808][T21263] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.422165][T21263] bridge_slave_0: entered allmulticast mode [ 622.436548][T21263] bridge_slave_0: entered promiscuous mode [ 622.444965][T20865] Bluetooth: hci6: command tx timeout [ 622.450098][T21263] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.460193][T21263] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.468421][T21263] bridge_slave_1: entered allmulticast mode [ 622.475946][T21263] bridge_slave_1: entered promiscuous mode [ 622.512953][T21263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.525582][T21263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.591134][T21263] team0: Port device team_slave_0 added [ 622.602976][T21263] team0: Port device team_slave_1 added [ 622.679481][T21263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.688910][T21263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.719591][T21263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.774687][T21263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.782031][T21263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.821806][T21263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.913148][T21263] hsr_slave_0: entered promiscuous mode [ 622.946108][T21263] hsr_slave_1: entered promiscuous mode [ 622.963568][T21263] debugfs: 'hsr0' already exists in 'hsr' [ 622.970568][T21327] netlink: 'syz.5.3774': attribute type 2 has an invalid length. [ 622.972437][T21263] Cannot create hsr debugfs directory [ 623.146085][T21332] vlan2: entered allmulticast mode [ 623.152336][T21332] bridge0: port 3(vlan2) entered blocking state [ 623.160156][T21332] bridge0: port 3(vlan2) entered disabled state [ 623.177435][T21336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3776'. [ 623.178031][T21332] vlan2: entered promiscuous mode [ 623.230358][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3776'. [ 623.241233][T21332] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3776'. [ 623.247354][T21336] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3776'. [ 623.261384][T21334] syz_tun: entered allmulticast mode [ 623.282110][T21334] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3777'. [ 623.540514][T21350] netlink: 'syz.5.3780': attribute type 8 has an invalid length. [ 623.567851][T21352] netlink: 'syz.6.3779': attribute type 4 has an invalid length. [ 623.576569][T21352] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3779'. [ 623.585655][T21334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.606273][T21334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.621268][T21334] bond0 (unregistering): Released all slaves [ 623.669929][T21352] .`: renamed from bond0 (while UP) [ 623.719385][T21333] syz_tun: left allmulticast mode [ 624.038540][T21370] netlink: 'syz.1.3785': attribute type 1 has an invalid length. [ 624.072351][T21370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.099989][T21370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.107619][T21370] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 624.119344][T21370] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 624.153818][T21372] veth5: entered promiscuous mode [ 624.162824][T21372] bond0: (slave veth5): Enslaving as an active interface with a down link [ 624.266334][T21263] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 624.309852][T21263] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 624.330755][T21263] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 624.363038][T21263] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 624.486325][T21387] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 624.524652][T20865] Bluetooth: hci6: command tx timeout [ 624.565190][T21263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.645280][T21263] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.670841][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.681373][T21387] batadv_slave_0: entered promiscuous mode [ 624.692038][T21387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3788'. [ 624.708120][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.715351][ T6436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.753343][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.760731][ T6425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.859744][T21404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3792'. [ 624.865382][T21408] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3793'. [ 624.870739][T21404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3792'. [ 624.981301][ T6436] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.998670][ T6436] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.017315][ T6436] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.042145][ T6436] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.086991][T21418] netlink: 'syz.5.3795': attribute type 1 has an invalid length. [ 625.318543][T21263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.715102][T21263] veth0_vlan: entered promiscuous mode [ 625.757278][T21263] veth1_vlan: entered promiscuous mode [ 625.811937][T21263] veth0_macvtap: entered promiscuous mode [ 625.829860][T21263] veth1_macvtap: entered promiscuous mode [ 625.882961][T21263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.912618][T21263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.969777][ T6438] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.987507][ T6438] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.005279][ T6438] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.035402][ T6438] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.061675][T21452] syzkaller1: entered promiscuous mode [ 626.068193][T21452] syzkaller1: entered allmulticast mode [ 626.412561][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.434358][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.503506][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.518588][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.604810][T20865] Bluetooth: hci6: command tx timeout [ 626.766893][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 626.963118][T21466] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 626.978854][T21466] bond2 (unregistering): Released all slaves [ 627.004949][ T6432] wlan0: Trigger new scan to find an IBSS to join [ 627.232350][T21482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.233431][T21483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.265043][T21482] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 627.400530][T21494] netlink: 'syz.7.3811': attribute type 3 has an invalid length. [ 628.108570][T21498] netlink: 'syz.7.3813': attribute type 1 has an invalid length. [ 628.169861][T21507] x_tables: duplicate underflow at hook 1 [ 628.344900][T21518] __nla_validate_parse: 7 callbacks suppressed [ 628.344921][T21518] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3818'. [ 628.535604][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3817'. [ 628.753416][T21526] xt_hashlimit: max too large, truncated to 1048576 [ 628.786713][T20865] Bluetooth: hci6: command tx timeout [ 629.281570][T21535] netlink: 'syz.1.3821': attribute type 1 has an invalid length. [ 629.299361][T21535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3821'. [ 629.314832][T21533] netlink: 'syz.1.3821': attribute type 1 has an invalid length. [ 629.350490][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3821'. [ 629.888502][T21565] siw: device registration error -23 [ 630.006138][T21571] netlink: 'syz.1.3833': attribute type 1 has an invalid length. [ 630.014359][T21571] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3833'. [ 630.046580][ T6436] wlan0: Trigger new scan to find an IBSS to join [ 630.897368][T21598] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3839'. [ 631.388856][T21618] syzkaller0: entered promiscuous mode [ 631.394542][T21618] syzkaller0: entered allmulticast mode [ 631.400786][T21622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3847'. [ 631.432675][T21622] veth1_to_hsr: entered promiscuous mode [ 631.439073][T21622] macvtap1: entered promiscuous mode [ 631.444819][T21622] macvtap1: entered allmulticast mode [ 631.450297][T21622] veth1_to_hsr: entered allmulticast mode [ 631.459771][T21623] netlink: 'syz.1.3847': attribute type 7 has an invalid length. [ 631.596027][T21628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3849'. [ 631.617801][T21628] openvswitch: netlink: Flow actions attr not present in new flow. [ 631.665816][T21632] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3850'. [ 631.691890][T21637] netlink: 'syz.5.3850': attribute type 30 has an invalid length. [ 631.704036][T21640] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 631.751142][T21637] bond0: option arp_missed_max: invalid value (0) [ 631.759540][T21637] bond0: option arp_missed_max: allowed values 1 - 255 [ 631.769721][T21637] bond0 (unregistering): Released all slaves [ 631.827435][T21645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3853'. [ 631.895668][T21631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.904635][T21631] batadv_slave_0: entered promiscuous mode [ 632.078731][T21650] team_slave_0: entered promiscuous mode [ 632.085011][T21650] team_slave_1: entered promiscuous mode [ 632.093486][T21650] macvtap1: entered promiscuous mode [ 632.099392][T21650] team0: entered promiscuous mode [ 632.105281][T21650] macvtap1: entered allmulticast mode [ 632.110861][T21650] team0: entered allmulticast mode [ 632.116170][T21650] team_slave_0: entered allmulticast mode [ 632.122764][T21650] team_slave_1: entered allmulticast mode [ 632.130576][T21650] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 632.148404][T21652] macvtap1: left promiscuous mode [ 632.153612][T21652] team0: left promiscuous mode [ 632.159149][T21652] macvtap1: left allmulticast mode [ 632.164622][T21652] team0: left allmulticast mode [ 632.169592][T21652] team_slave_0: left allmulticast mode [ 632.178021][T21652] team_slave_1: left allmulticast mode [ 632.188781][T21651] tipc: Started in network mode [ 632.193821][T21651] tipc: Node identity 5aa35db3fa48, cluster identity 4711 [ 632.201948][T21651] tipc: Enabled bearer , priority 0 [ 632.223242][T21651] syzkaller0: entered promiscuous mode [ 632.234825][T21651] syzkaller0: entered allmulticast mode [ 632.288732][T21651] tipc: Resetting bearer [ 632.308408][T21649] tipc: Resetting bearer [ 632.330499][T21649] tipc: Disabling bearer [ 632.603117][T21668] ip6gre0: Caught tx_queue_len zero misconfig [ 632.617111][T21668] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 633.007961][ T6425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.682998][T20861] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 633.758772][T20861] CPU: 0 UID: 0 PID: 20861 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 633.758798][T20861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.758810][T20861] Call Trace: [ 633.758818][T20861] [ 633.758827][T20861] dump_stack_lvl+0x189/0x250 [ 633.758856][T20861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.758876][T20861] ? __pfx__printk+0x10/0x10 [ 633.758906][T20861] dump_header+0xd4/0x4c0 [ 633.758926][T20861] oom_kill_process+0x263/0x800 [ 633.758950][T20861] out_of_memory+0xf0c/0x12b0 [ 633.758981][T20861] ? __pfx_out_of_memory+0x10/0x10 [ 633.759009][T20861] mem_cgroup_out_of_memory+0x145/0x240 [ 633.759033][T20861] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 633.759067][T20861] ? _raw_spin_unlock+0x28/0x50 [ 633.759091][T20861] ? memcg1_oom_prepare+0x37f/0x450 [ 633.759111][T20861] try_charge_memcg+0xde4/0x1280 [ 633.759148][T20861] ? __pfx_try_charge_memcg+0x10/0x10 [ 633.759187][T20861] charge_memcg+0x9f/0x180 [ 633.759207][T20861] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 633.759225][T20861] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 633.759247][T20861] __read_swap_cache_async+0x212/0x480 [ 633.759280][T20861] swap_cluster_readahead+0x336/0x630 [ 633.759311][T20861] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 633.759350][T20861] ? get_vma_policy+0x27c/0x3c0 [ 633.759375][T20861] swapin_readahead+0x189/0xc60 [ 633.759412][T20861] ? __pfx_swapin_readahead+0x10/0x10 [ 633.759437][T20861] ? swap_table_get+0x1e/0x260 [ 633.759458][T20861] ? swap_table_get+0x1e/0x260 [ 633.759477][T20861] ? swap_table_get+0x1e/0x260 [ 633.759499][T20861] ? swap_table_get+0x216/0x260 [ 633.759522][T20861] ? swap_cache_get_folio+0x51c/0x530 [ 633.759552][T20861] do_swap_page+0x837/0x5c70 [ 633.759573][T20861] ? __lock_acquire+0x6b6/0x2cf0 [ 633.759596][T20861] ? __lock_acquire+0x6b6/0x2cf0 [ 633.759671][T20861] ? do_swap_page+0x17d/0x5c70 [ 633.759693][T20861] ? __pfx_do_swap_page+0x10/0x10 [ 633.759713][T20861] ? __lock_acquire+0x6b6/0x2cf0 [ 633.759733][T20861] ? __pfx_default_wake_function+0x10/0x10 [ 633.759753][T20861] ? ___pte_offset_map+0x1ae/0x240 [ 633.759782][T20861] ? pte_offset_map_rw_nolock+0xea/0x160 [ 633.759813][T20861] handle_mm_fault+0x1277/0x32b0 [ 633.759853][T20861] ? handle_mm_fault+0xdb/0x32b0 [ 633.759885][T20861] ? __pfx_handle_mm_fault+0x10/0x10 [ 633.759907][T20861] ? lock_vma_under_rcu+0x42c/0x4a0 [ 633.759945][T20861] ? do_user_addr_fault+0x1a8/0x1380 [ 633.759967][T20861] do_user_addr_fault+0xa7c/0x1380 [ 633.759993][T20861] ? rcu_is_watching+0x15/0xb0 [ 633.760015][T20861] ? trace_page_fault_user+0x84/0x1c0 [ 633.760036][T20861] exc_page_fault+0x82/0x100 [ 633.760057][T20861] asm_exc_page_fault+0x26/0x30 [ 633.760074][T20861] RIP: 0033:0x7fd87c9c2008 [ 633.760091][T20861] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 633.760106][T20861] RSP: 002b:00007ffd3ed8d6a0 EFLAGS: 00010293 [ 633.760123][T20861] RAX: 0000000000000000 RBX: 000000000000009f RCX: 00007fd87c9c2005 [ 633.760135][T20861] RDX: 00007ffd3ed8d6e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 633.760146][T20861] RBP: 00007ffd3ed8d74c R08: 0000000000000000 R09: 0000000000000000 [ 633.760158][T20861] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 633.760169][T20861] R13: 00000000000927c0 R14: 000000000009a9a3 R15: 00007ffd3ed8d7a0 [ 633.760202][T20861] [ 633.775684][T20861] memory: usage 307200kB, limit 307200kB, failcnt 165 [ 633.806063][ C0] bridge0: port 3(gretap0) entered forwarding state [ 633.848202][T20861] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 633.852858][ C0] bridge0: topology change detected, propagating [ 634.154177][T20861] kmem: usage 305024kB, limit 9007199254740988kB, failcnt 0 [ 634.171947][T20861] Memory cgroup stats for /syz5: [ 634.173104][T20861] cache 0 [ 634.192104][T20861] rss 0 [ 634.201709][T20861] rss_huge 0 [ 634.246634][T20861] shmem 0 [ 634.264638][T20861] mapped_file 0 [ 634.268313][T20861] dirty 0 [ 634.271235][T20861] writeback 0 [ 634.304687][T20861] workingset_refault_anon 3 [ 634.309244][T20861] workingset_refault_file 0 [ 634.313766][T20861] swap 204800 [ 634.356841][T21700] __nla_validate_parse: 4 callbacks suppressed [ 634.356860][T21700] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.3870'. [ 634.382402][T20861] swapcached 12288 [ 634.386658][T20861] pgpgin 129951 [ 634.390234][T20861] pgpgout 129948 [ 634.393878][T20861] pgfault 211284 [ 634.434796][T20861] pgmajfault 0 [ 634.439084][T20861] inactive_anon 0 [ 634.442830][T20861] active_anon 12288 [ 634.488182][T20861] inactive_file 0 [ 634.491967][T20861] active_file 0 [ 634.506863][T20861] unevictable 0 [ 634.510489][T20861] hierarchical_memory_limit 314572800 [ 634.543673][T20861] hierarchical_memsw_limit 9223372036854771712 [ 634.556390][T21705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'. [ 634.568874][T20861] total_cache 0 [ 634.572381][T20861] total_rss 0 [ 634.577753][T21705] netlink: 'syz.1.3871': attribute type 30 has an invalid length. [ 634.587055][T20861] total_rss_huge 0 [ 634.590875][T20861] total_shmem 0 [ 634.603661][T20861] total_mapped_file 0 [ 634.614372][T20861] total_dirty 0 [ 634.617916][T20861] total_writeback 0 [ 634.623812][T10444] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.633331][T21705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'. [ 634.646093][T10444] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.655122][T20861] total_workingset_refault_anon 3 [ 634.660290][T20861] total_workingset_refault_file 0 [ 634.665623][T21705] netlink: 'syz.1.3871': attribute type 30 has an invalid length. [ 634.673524][T20861] total_swap 204800 [ 634.680287][T10444] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.696010][T20861] total_swapcached 12288 [ 634.700300][T20861] total_pgpgin 129951 [ 634.704294][T20861] total_pgpgout 129948 [ 634.718634][T10444] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.729770][T20861] total_pgfault 211284 [ 634.730499][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 634.742094][T20861] total_pgmajfault 0 [ 634.748844][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 634.765149][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 634.772378][T20861] total_inactive_anon 0 [ 634.778040][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 634.786454][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 634.803083][T20861] total_active_anon 12288 [ 634.838809][T20861] total_inactive_file 0 [ 634.843023][T20861] total_active_file 0 [ 634.913543][T20861] total_unevictable 0 [ 634.940124][T20861] anon_cost 0 [ 634.943455][T20861] file_cost 0 [ 634.974556][T20861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3861,pid=21663,uid=0 [ 635.027338][T20861] Memory cgroup out of memory: Killed process 21663 (syz.5.3861) total-vm:102224kB, anon-rss:1140kB, file-rss:22952kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 635.072874][T21716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3874'. [ 635.254619][T21722] netlink: 'syz.5.3876': attribute type 3 has an invalid length. [ 635.299155][T21722] siw: device registration error -23 [ 635.321411][T21725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 635.330578][T21722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.373356][T21710] chnl_net:caif_netlink_parms(): no params data found [ 635.553231][T21710] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.569255][T21710] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.578224][T21710] bridge_slave_0: entered allmulticast mode [ 635.589724][T21710] bridge_slave_0: entered promiscuous mode [ 635.589860][T21737] netlink: 'syz.5.3879': attribute type 13 has an invalid length. [ 635.601065][T21710] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.615658][T21710] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.627049][T21710] bridge_slave_1: entered allmulticast mode [ 635.636419][T21710] bridge_slave_1: entered promiscuous mode [ 635.895727][T21741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3878'. [ 636.419272][T21748] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 636.513983][T21740] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.522455][T21740] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.845044][ T5841] Bluetooth: hci7: command tx timeout [ 636.928716][T21740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.961558][T21740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.319858][T21740] geneve2: left promiscuous mode [ 637.374700][T21740] veth5: left promiscuous mode [ 637.434120][T21740] veth1_to_hsr: left allmulticast mode [ 637.440463][T21740] macvtap1: left promiscuous mode [ 637.447599][T21740] macvtap1: left allmulticast mode [ 637.488272][T21710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.499698][T21741] hsr_slave_0: left promiscuous mode [ 637.506455][T21741] hsr_slave_1: left promiscuous mode [ 637.544095][T21749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.561359][ T1094] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.587017][ T1094] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.603363][ T1094] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.624148][ T1094] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.656243][T21710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.722964][ T1094] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.747071][ T1094] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.799762][ T1094] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.813694][ T1094] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.843298][T21710] team0: Port device team_slave_0 added [ 637.857329][T21710] team0: Port device team_slave_1 added [ 637.926507][T21710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.933658][T21710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.962312][T21710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.972107][T21762] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:20001 [ 637.978097][T21710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.004634][T21710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.037867][T21710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.143145][T21710] hsr_slave_0: entered promiscuous mode [ 638.163380][T21710] hsr_slave_1: entered promiscuous mode [ 638.173031][T21772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3887'. [ 638.195976][T21710] debugfs: 'hsr0' already exists in 'hsr' [ 638.202207][T21710] Cannot create hsr debugfs directory [ 638.218454][T21772] netlink: 'syz.1.3887': attribute type 1 has an invalid length. [ 638.230253][T21772] netlink: 14343 bytes leftover after parsing attributes in process `syz.1.3887'. [ 638.512773][T21710] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 638.526274][T21710] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 638.543105][T21710] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 638.558312][T21710] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 638.669524][T21710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.712880][T21710] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.728692][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.736738][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.758921][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.766343][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.928219][ T5841] Bluetooth: hci7: command tx timeout [ 638.992545][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 639.056874][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 639.087616][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 639.351649][T21710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.468976][T21791] infiniband syz2: set active [ 639.476097][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 639.484890][T21791] infiniband syz2: added ip6_vti0 [ 639.620409][T21791] RDS/IB: syz2: added [ 639.638217][T21791] smc: adding ib device syz2 with port count 1 [ 639.674902][T21791] smc: ib device syz2 port 1 has no pnetid [ 639.692848][ T8675] ip6_vti0 speed is unknown, defaulting to 1000 [ 639.718073][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 639.855535][T21818] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3895'. [ 639.941346][T21820] xt_CT: No such helper "snmp_trap" [ 640.000482][T21820] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 640.007648][T21820] syzkaller1: linktype set to 260 [ 640.020855][T21710] veth0_vlan: entered promiscuous mode [ 640.076634][T21710] veth1_vlan: entered promiscuous mode [ 640.173412][T21710] veth0_macvtap: entered promiscuous mode [ 640.196635][T21710] veth1_macvtap: entered promiscuous mode [ 640.260726][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 640.275860][T21710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.309387][T21710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.342676][ T6419] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.363004][ T6419] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.389602][ T6419] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.426252][ T6419] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.616641][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.653096][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.771664][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 640.791011][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.808131][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.968443][T21853] tipc: Enabling of bearer rejected, failed to enable media [ 641.006884][ T5841] Bluetooth: hci7: command tx timeout [ 641.155619][T20865] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 641.172894][T20865] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 641.181859][T20865] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 641.191255][T20865] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 641.204139][T20865] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 641.522628][T21858] ip6_vti0 speed is unknown, defaulting to 1000 [ 641.619714][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3913'. [ 641.633273][T21884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3913'. [ 641.850310][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 641.936634][T21891] pim6reg1: entered promiscuous mode [ 641.952657][T21891] pim6reg1: entered allmulticast mode [ 642.389290][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 642.431984][T21858] chnl_net:caif_netlink_parms(): no params data found [ 642.615825][T21904] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 642.716184][T21903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 643.234861][ T5841] Bluetooth: hci7: command tx timeout [ 643.253002][ T5841] Bluetooth: hci8: command tx timeout [ 643.420222][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 643.668583][T21931] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.693590][T21933] ip6tnl0: Caught tx_queue_len zero misconfig [ 643.715331][T21858] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.734674][T21858] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.752202][T21858] bridge_slave_0: entered allmulticast mode [ 643.768289][T21858] bridge_slave_0: entered promiscuous mode [ 643.798997][T21937] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3924'. [ 643.811110][T21937] lo: Caught tx_queue_len zero misconfig [ 643.824632][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 643.824713][T21858] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.838389][T21858] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.848066][T21858] bridge_slave_1: entered allmulticast mode [ 643.899224][T21858] bridge_slave_1: entered promiscuous mode [ 643.938342][T21940] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 643.982365][T21947] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3927'. [ 644.018288][T21931] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.214980][T21931] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.383727][T21858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.399908][T21858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.411513][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 644.411571][T21952] netlink: 'syz.8.3929': attribute type 4 has an invalid length. [ 644.462780][T21953] netlink: 'syz.8.3929': attribute type 4 has an invalid length. [ 644.502741][T21931] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.643064][T21858] team0: Port device team_slave_0 added [ 644.681326][T21858] team0: Port device team_slave_1 added [ 644.831575][T21858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.845227][T21858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.896351][T21858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.909675][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 644.936534][T21858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.940421][T21962] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3932'. [ 644.944238][T21858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.944267][T21858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.959243][ T6407] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.042530][T10444] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.137111][ T6407] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.172076][T21962] nbd: socks must be embedded in a SOCK_ITEM attr [ 645.193771][T19068] block nbd64: NBD_DISCONNECT [ 645.226157][T21858] hsr_slave_0: entered promiscuous mode [ 645.236173][T21858] hsr_slave_1: entered promiscuous mode [ 645.245364][T21858] debugfs: 'hsr0' already exists in 'hsr' [ 645.251506][T21858] Cannot create hsr debugfs directory [ 645.258443][ T6425] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.337962][ T5841] Bluetooth: hci8: command tx timeout [ 645.537635][T19068] udevd[19068]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 645.560667][T21969] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 645.574173][T21969] bond0 (unregistering): Released all slaves [ 645.593959][T21955] ip6_vti0 speed is unknown, defaulting to 1000 [ 645.958738][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3935'. [ 645.971287][T21979] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3935'. [ 646.102445][T21858] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 646.128572][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 646.142844][T21858] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 646.193526][T21858] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 646.260646][T21858] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 647.163929][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 647.242799][T21999] sctp: [Deprecated]: syz.5.3940 (pid 21999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 647.242799][T21999] Use struct sctp_sack_info instead [ 647.318908][T17315] IPVS: starting estimator thread 0... [ 647.404958][ T5837] Bluetooth: hci8: command tx timeout [ 647.434564][T22004] IPVS: using max 32 ests per chain, 76800 per kthread [ 647.474906][T21858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.538060][T21858] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.590867][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.598147][ T6409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.695130][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.702475][ T6409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.789816][T21858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 648.009038][T22022] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3944'. [ 648.031307][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 648.050982][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 648.160209][T21858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.636672][T22048] netlink: 'syz.8.3949': attribute type 4 has an invalid length. [ 648.645630][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 648.650876][T22049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3948'. [ 648.739982][T21858] veth0_vlan: entered promiscuous mode [ 648.772155][T21858] veth1_vlan: entered promiscuous mode [ 648.835344][T21858] veth0_macvtap: entered promiscuous mode [ 648.857146][T21858] veth1_macvtap: entered promiscuous mode [ 648.889736][T21858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.912964][T21858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.932686][ T6428] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.953161][ T6428] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.979989][ T6428] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.018272][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.022389][ T6428] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.087924][T10444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.106287][T10444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.153123][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.163588][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.303911][T22052] tipc: Started in network mode [ 649.310792][T22052] tipc: Node identity 62b70209ecb2, cluster identity 4711 [ 649.319112][T22052] tipc: Enabled bearer , priority 0 [ 649.332332][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.333529][T22052] syzkaller0: entered promiscuous mode [ 649.348101][T22052] syzkaller0: entered allmulticast mode [ 649.390841][T22052] tipc: Resetting bearer [ 649.432891][T22052] tipc: Disabling bearer [ 649.484614][ T5841] Bluetooth: hci8: command tx timeout [ 649.523798][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.669306][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.810712][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.973543][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.119280][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.261222][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.400819][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.533697][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.672196][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.803803][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.942200][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 651.076356][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 651.221196][T21791] ip6_vti0 speed is unknown, defaulting to 1000 [ 660.685428][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 663.404794][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 709.484776][ T5837] Bluetooth: hci1: command 0x0405 tx timeout [ 733.007108][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 735.084657][ T5841] Bluetooth: hci2: command 0x041b tx timeout [ 745.324861][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 750.444657][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 756.045348][ T31] INFO: task kworker/u8:21:6413 blocked for more than 143 seconds. [ 756.053604][ T31] Not tainted syzkaller #0 [ 756.058785][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.067697][ T31] task:kworker/u8:21 state:D stack:22744 pid:6413 tgid:6413 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 756.079878][ T31] Workqueue: netns cleanup_net [ 756.084894][ T31] Call Trace: [ 756.089328][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 756.092931][ T31] __schedule+0x14bc/0x5000 [ 756.098047][ T31] ? __pfx___schedule+0x10/0x10 [ 756.103213][ T31] ? schedule+0x91/0x360 [ 756.107616][ T31] schedule+0x165/0x360 [ 756.111974][ T31] schedule_preempt_disabled+0x13/0x30 [ 756.117616][ T31] __mutex_lock+0x7e6/0x1350 [ 756.122243][ T31] ? __mutex_lock+0x5bb/0x1350 [ 756.127757][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 756.133261][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 756.141562][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 756.147966][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 756.153975][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 756.159717][ T31] ? _raw_spin_unlock+0x28/0x50 [ 756.165865][ T31] rdma_dev_change_netns+0x39/0x300 [ 756.171333][ T31] rdma_dev_exit_net+0x203/0x340 [ 756.176654][ T31] ? __pfx___might_resched+0x10/0x10 [ 756.182268][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 756.189939][ T31] ? net_generic+0x1e/0x240 [ 756.196475][ T31] ? mutex_is_locked+0x17/0x50 [ 756.201989][ T31] ? rtnl_is_locked+0x15/0x20 [ 756.207324][ T31] ops_undo_list+0x49a/0x990 [ 756.212084][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 756.217758][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 756.224168][ T31] cleanup_net+0x4d8/0x7a0 [ 756.229005][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 756.234060][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.240723][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 756.246915][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 756.252843][ T31] process_scheduled_works+0xad1/0x1770 [ 756.258705][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 756.265023][ T31] worker_thread+0x8a0/0xda0 [ 756.270709][ T31] ? __kthread_parkme+0x7b/0x200 [ 756.276410][ T31] kthread+0x711/0x8a0 [ 756.281593][ T31] ? __pfx_worker_thread+0x10/0x10 [ 756.289323][ T31] ? __pfx_kthread+0x10/0x10 [ 756.295903][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.301729][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 756.307086][ T31] ? __pfx_kthread+0x10/0x10 [ 756.311877][ T31] ret_from_fork+0x599/0xb30 [ 756.316710][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 756.322965][ T31] ? __switch_to_asm+0x39/0x70 [ 756.328272][ T31] ? __switch_to_asm+0x33/0x70 [ 756.333262][ T31] ? __pfx_kthread+0x10/0x10 [ 756.339414][ T31] ret_from_fork_asm+0x1a/0x30 [ 756.345767][ T31] [ 756.349136][ T31] INFO: task syz.4.3533:20351 blocked for more than 143 seconds. [ 756.357611][ T31] Not tainted syzkaller #0 [ 756.362696][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.450237][ T31] task:syz.4.3533 state:D stack:23520 pid:20351 tgid:20350 ppid:17840 task_flags:0x400140 flags:0x00080002 [ 756.491744][ T31] Call Trace: [ 756.495371][ T31] [ 756.500574][ T31] __schedule+0x14bc/0x5000 [ 756.506203][ T31] ? lockdep_unlock+0x89/0x120 [ 756.511093][ T31] ? __pfx___schedule+0x10/0x10 [ 756.516576][ T31] ? schedule+0x91/0x360 [ 756.521846][ T31] schedule+0x165/0x360 [ 756.531117][ T31] schedule_timeout+0x9a/0x270 [ 756.537738][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 756.543351][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.549543][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 756.557544][ T31] ? wait_for_completion+0x267/0x5d0 [ 756.563187][ T31] wait_for_completion+0x2bf/0x5d0 [ 756.569552][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 756.575471][ T31] ? disable_device+0x137/0x320 [ 756.580473][ T31] ? remove_client_context+0xc0/0x1e0 [ 756.587536][ T31] disable_device+0x1c6/0x320 [ 756.592443][ T31] ? __pfx_disable_device+0x10/0x10 [ 756.598029][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 756.606913][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 756.612884][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 756.624637][ T31] nldev_dellink+0x2d1/0x320 [ 756.629294][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 756.644642][ T31] ? apparmor_capable+0x137/0x1a0 [ 756.650090][ T31] ? bpf_lsm_capable+0x9/0x20 [ 756.674616][ T31] ? security_capable+0x7e/0x2e0 [ 756.679814][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 756.694544][ T31] rdma_nl_rcv+0x6ae/0x980 [ 756.699047][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 756.714507][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 756.719789][ T31] netlink_unicast+0x82f/0x9e0 [ 756.734581][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 756.740311][ T31] ? netlink_sendmsg+0x642/0xb30 [ 756.754510][ T31] ? skb_put+0x11b/0x210 [ 756.759176][ T31] netlink_sendmsg+0x805/0xb30 [ 756.773789][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.782710][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 756.788780][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 756.794801][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.800387][ T31] __sock_sendmsg+0x21c/0x270 [ 756.807577][ T31] ____sys_sendmsg+0x505/0x820 [ 756.812419][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.818728][ T31] ? import_iovec+0x74/0xa0 [ 756.823485][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 756.828715][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.834039][ T31] ? futex_wait+0x285/0x360 [ 756.839188][ T31] ? __fget_files+0x2a/0x420 [ 756.843914][ T31] ? __fget_files+0x3a0/0x420 [ 756.849132][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 756.854306][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 756.861815][ T31] ? do_syscall_64+0xbe/0xf80 [ 756.866801][ T31] do_syscall_64+0xfa/0xf80 [ 756.871830][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.878759][ T31] ? clear_bhb_loop+0x60/0xb0 [ 756.883468][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.890498][ T31] RIP: 0033:0x7f195eb8f749 [ 756.895525][ T31] RSP: 002b:00007f195faf4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.905311][ T31] RAX: ffffffffffffffda RBX: 00007f195ede5fa0 RCX: 00007f195eb8f749 [ 756.916213][ T31] RDX: 000000000004c814 RSI: 0000200000000200 RDI: 0000000000000009 [ 756.924747][ T31] RBP: 00007f195ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 756.933016][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.942099][ T31] R13: 00007f195ede6038 R14: 00007f195ede5fa0 R15: 00007ffd92cf1ca8 [ 756.950668][ T31] [ 756.953818][ T31] INFO: task syz.3.3624:20704 blocked for more than 144 seconds. [ 756.962308][ T31] Not tainted syzkaller #0 [ 756.970328][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.979569][ T31] task:syz.3.3624 state:D stack:25048 pid:20704 tgid:20702 ppid:17112 task_flags:0x400140 flags:0x00080002 [ 756.991955][ T31] Call Trace: [ 756.996315][ T31] [ 756.999301][ T31] __schedule+0x14bc/0x5000 [ 757.003971][ T31] ? __pfx___schedule+0x10/0x10 [ 757.009339][ T31] ? schedule+0x91/0x360 [ 757.014468][ T31] schedule+0x165/0x360 [ 757.018673][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.024177][ T31] __mutex_lock+0x7e6/0x1350 [ 757.028974][ T31] ? __mutex_lock+0x5bb/0x1350 [ 757.033850][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 757.039336][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.044949][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 757.050625][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 757.056895][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 757.062245][ T31] ? _raw_spin_unlock+0x28/0x50 [ 757.067360][ T31] rdma_dev_change_netns+0x39/0x300 [ 757.072728][ T31] rdma_dev_exit_net+0x203/0x340 [ 757.078617][ T31] ? __pfx___might_resched+0x10/0x10 [ 757.084978][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 757.090905][ T31] ? net_generic+0x1e/0x240 [ 757.095558][ T31] ? mutex_is_locked+0x17/0x50 [ 757.100327][ T31] ? rtnl_is_locked+0x15/0x20 [ 757.105161][ T31] ops_undo_list+0x49a/0x990 [ 757.110222][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 757.116651][ T31] ? ops_init+0x469/0x5c0 [ 757.121238][ T31] setup_net+0x2e8/0x330 [ 757.126068][ T31] ? __pfx_setup_net+0x10/0x10 [ 757.131305][ T31] ? preinit_net+0x47d/0x780 [ 757.136071][ T31] copy_net_ns+0x3e3/0x570 [ 757.140498][ T31] create_new_namespaces+0x3e7/0x6a0 [ 757.146282][ T31] ? security_capable+0x7e/0x2e0 [ 757.151792][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 757.158294][ T31] ksys_unshare+0x4c8/0x8c0 [ 757.163211][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 757.170667][ T31] __x64_sys_unshare+0x38/0x50 [ 757.176028][ T31] do_syscall_64+0xfa/0xf80 [ 757.182388][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.188757][ T31] ? clear_bhb_loop+0x60/0xb0 [ 757.193601][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.202530][ T31] RIP: 0033:0x7f1a8338f749 [ 757.207186][ T31] RSP: 002b:00007f1a84159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 757.217695][ T31] RAX: ffffffffffffffda RBX: 00007f1a835e6090 RCX: 00007f1a8338f749 [ 757.228650][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 757.237993][ T31] RBP: 00007f1a83413f91 R08: 0000000000000000 R09: 0000000000000000 [ 757.246863][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.255530][ T31] R13: 00007f1a835e6128 R14: 00007f1a835e6090 R15: 00007ffc15604828 [ 757.264065][ T31] [ 757.277855][ T31] [ 757.277855][ T31] Showing all locks held in the system: [ 757.286873][ T31] 1 lock held by khungtaskd/31: [ 757.291759][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 757.306398][ T31] 2 locks held by getty/5590: [ 757.311382][ T31] #0: ffff88803475a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 757.364504][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 757.384472][ T31] 3 locks held by kworker/0:5/5902: [ 757.390887][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 757.403469][ T31] #1: ffffc900043ffb80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 757.416443][ T31] #2: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 757.434175][ T31] 4 locks held by kworker/u8:21/6413: [ 757.439914][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 757.451499][ T31] #1: ffffc9000c267b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 757.462843][ T31] #2: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 757.473158][ T31] #3: ffff88807c958700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 757.492319][ T31] 2 locks held by syz.4.3533/20351: [ 757.498159][ T31] #0: ffffffff99c6ce18 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 757.509209][ T31] #1: ffff88807c958700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 757.523758][ T31] 2 locks held by syz.3.3624/20704: [ 757.529552][ T31] #0: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 757.539063][ T31] #1: ffff88807c958700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 757.552158][ T31] 2 locks held by syz.0.3755/21250: [ 757.559699][ T31] #0: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 757.573838][ T31] #1: ffff88807c958700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 757.585829][ T31] 1 lock held by syz-executor/21263: [ 757.591231][ T31] 2 locks held by syz.6.3802/21446: [ 757.596907][ T31] #0: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 757.606885][ T31] #1: ffff88807c958700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 757.619601][ T31] 5 locks held by syz-executor/21858: [ 757.628947][ T31] #0: ffff88802a080ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 757.641801][ T31] #1: ffff88802a0800c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 757.654177][ T31] #2: ffffffff8f483848 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 757.667796][ T31] #3: ffff88807c8ce338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 757.684480][ T31] #4: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 757.714456][ T31] 2 locks held by syz.1.3930/21955: [ 757.720337][ T31] #0: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 757.734483][ T31] #1: ffff88807c958700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 757.750470][ T31] [ 757.752948][ T31] ============================================= [ 757.752948][ T31] [ 757.761549][ T31] NMI backtrace for cpu 1 [ 757.761569][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 757.761586][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 757.761595][ T31] Call Trace: [ 757.761604][ T31] [ 757.761612][ T31] dump_stack_lvl+0x189/0x250 [ 757.761637][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.761654][ T31] ? __pfx__printk+0x10/0x10 [ 757.761684][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 757.761707][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 757.761728][ T31] ? __pfx__printk+0x10/0x10 [ 757.761751][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 757.761774][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 757.761795][ T31] sys_info+0x135/0x170 [ 757.761811][ T31] watchdog+0xf95/0xfe0 [ 757.761834][ T31] ? watchdog+0x20a/0xfe0 [ 757.761859][ T31] kthread+0x711/0x8a0 [ 757.761880][ T31] ? __pfx_watchdog+0x10/0x10 [ 757.761897][ T31] ? __pfx_kthread+0x10/0x10 [ 757.761916][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 757.761935][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 757.761949][ T31] ? __pfx_kthread+0x10/0x10 [ 757.761966][ T31] ret_from_fork+0x599/0xb30 [ 757.761983][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 757.762006][ T31] ? __switch_to_asm+0x39/0x70 [ 757.762022][ T31] ? __switch_to_asm+0x33/0x70 [ 757.762038][ T31] ? __pfx_kthread+0x10/0x10 [ 757.762055][ T31] ret_from_fork_asm+0x1a/0x30 [ 757.762099][ T31] [ 757.762105][ T31] Sending NMI from CPU 1 to CPUs 0: [ 757.919114][ C0] NMI backtrace for cpu 0 [ 757.919133][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 757.919150][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 757.919160][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 757.919181][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 757.919194][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 757.919209][ C0] RAX: 4147125310f4a500 RBX: ffffffff81978fda RCX: 4147125310f4a500 [ 757.919221][ C0] RDX: 0000000000000001 RSI: ffffffff8d7925e3 RDI: ffffffff8bc08360 [ 757.919232][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 757.919243][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070 [ 757.919254][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 757.919264][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 757.919277][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.919288][ C0] CR2: 00007ffe9ad28c84 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 757.919303][ C0] Call Trace: [ 757.919310][ C0] [ 757.919316][ C0] default_idle+0x13/0x20 [ 757.919332][ C0] default_idle_call+0x73/0xb0 [ 757.919350][ C0] do_idle+0x1ea/0x520 [ 757.919365][ C0] ? irqentry_exit+0x5ba/0x660 [ 757.919382][ C0] ? __pfx_do_idle+0x10/0x10 [ 757.919405][ C0] cpu_startup_entry+0x44/0x60 [ 757.919420][ C0] rest_init+0x2de/0x300 [ 757.919439][ C0] start_kernel+0x3a7/0x400 [ 757.919455][ C0] x86_64_start_reservations+0x24/0x30 [ 757.919473][ C0] x86_64_start_kernel+0x143/0x1c0 [ 757.919491][ C0] common_startup_64+0x13e/0x147 [ 757.919517][ C0] [ 758.114220][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 758.121120][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 758.130223][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 758.140479][ T31] Call Trace: [ 758.143861][ T31] [ 758.146959][ T31] dump_stack_lvl+0x99/0x250 [ 758.151592][ T31] ? __asan_memcpy+0x40/0x70 [ 758.156195][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.161400][ T31] ? __pfx__printk+0x10/0x10 [ 758.166013][ T31] vpanic+0x237/0x6d0 [ 758.170048][ T31] ? __pfx_vpanic+0x10/0x10 [ 758.174776][ T31] ? preempt_schedule_common+0x83/0xd0 [ 758.180497][ T31] panic+0xb9/0xc0 [ 758.184331][ T31] ? __pfx_panic+0x10/0x10 [ 758.188829][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 758.194196][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 758.200455][ T31] watchdog+0xfdf/0xfe0 [ 758.204631][ T31] ? watchdog+0x20a/0xfe0 [ 758.208985][ T31] kthread+0x711/0x8a0 [ 758.213069][ T31] ? __pfx_watchdog+0x10/0x10 [ 758.217836][ T31] ? __pfx_kthread+0x10/0x10 [ 758.222719][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.228288][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 758.233517][ T31] ? __pfx_kthread+0x10/0x10 [ 758.238219][ T31] ret_from_fork+0x599/0xb30 [ 758.242836][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 758.247972][ T31] ? __switch_to_asm+0x39/0x70 [ 758.252887][ T31] ? __switch_to_asm+0x33/0x70 [ 758.258194][ T31] ? __pfx_kthread+0x10/0x10 [ 758.263889][ T31] ret_from_fork_asm+0x1a/0x30 [ 758.268844][ T31] [ 758.273028][ T31] Kernel Offset: disabled [ 758.277548][ T31] Rebooting in 86400 seconds..